last executing test programs: 1m2.238670311s ago: executing program 1 (id=1651): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) ioperm$auto(0x7, 0x800, 0x0) (async) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/ff\x00', 0x300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) (async) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000280), 0x101080, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) (async) socket(0x2, 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x10, 0x2000c, 0x2e1, 0x11, 0xffffffffffffffff, 0x100000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2) (async) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xd1b41, 0x0) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/cpu_dma_latency/power/runtime_active_time\x00', 0x200, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) (async) mmap$auto(0x7, 0x4, 0x20004000000000e4, 0xfffb, r4, 0xa) (async) r5 = ioctl$auto_SW_SYNC_GET_DEADLINE(r4, 0xc0105702, &(0x7f0000000000)={0x1000000, 0x0, r1}) statx$auto(r0, &(0x7f0000000180)='./file0\x00', 0x9, 0x5, &(0x7f0000000540)={0x5, 0x101, 0x0, 0x8b, 0xee00, 0x0, 0x4, 0xbd49, 0x8, 0x2, 0x100, 0x4, {0xffffffffffffffb1, 0xfffffffc}, {0x80000001, 0x2}, {0x100000000, 0x3}, {0xe}, 0x9, 0x4, 0xbf, 0x0, 0x9, 0x3, 0x2, 0x3, 0x481000, 0xfffffffe, 0x3, 0x6, [0x0, 0x2, 0x91, 0xb, 0x3, 0x2, 0xcd1, 0x3d7d, 0x2]}) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_5={@target_fd=r2, r6, 0x2, 0x7ec56b8f, r5, @relative_id=0xfffff800, 0x2}, 0xf) 1m1.279792779s ago: executing program 1 (id=1653): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/tty42/power/control\x00', 0x101000, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) setsockopt$auto_SO_NOFCS(r0, 0xf1c, 0x2b, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) fcntl$auto(0x0, 0x407, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x101000, 0x0) 1m0.699649163s ago: executing program 1 (id=1655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x24004840) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(r2, 0xfffffffffffff001, 0x6) socket(0x11, 0x80003, 0x300) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.6/usbmon/usbmon22/uevent\x00', 0x210400, 0x0) read$auto(r6, 0x0, 0x20) recvmsg$auto(r4, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf620547", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r8}, @MACSEC_ATTR_OFFLOAD={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44080}, 0x24048000) 52.934805797s ago: executing program 1 (id=1672): ioctl$auto_SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x4) mlockall$auto(0x8) fcntl$auto_F_SETFD(r0, 0x2, 0x4) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000040), r0) r1 = memfd_create$auto(&(0x7f0000000080)='}.\x00', 0x7fc00) r2 = userfaultfd$auto(0x8) mlockall$auto(0x7) mmap$auto(0x0, 0xf1, 0x3, 0xb07c, r2, 0x7) preadv2$auto(r0, &(0x7f00000001c0)={&(0x7f00000000c0)="a63c1835387324a4ea6c8a9f30cb9bcb41d3463cf84bfce0f852f3c33b2c72890c825577d5cad46f75d4f14edf1b2a07b67cc988a7ea740f13d96e7a5bf25b10a022fc2cf5311b1e066c5501179544528b3464c03c19f4bad062936a34559beece73d50564af60f5c901e06df2f45e587971f5aa28b878699aeb0a3aaab63fd46808dfa12e0a407f554cd6c023ddae07f6d21d5eba1fff542b5ea4e230c0fc33fa4dac4dbb283dc824f9e31963ecb4a7dfd363053feaa0e5ba632755e9f31ee135239d68efe2549c67c8eabc4c1c656068ee0747e739e663d2eebd51d8a6642bd6e39a", 0x80}, 0x97, 0x5, 0x8000000000000001, 0x9) sendfile$auto(r1, r0, &(0x7f0000000200)=0x101, 0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1ff}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xf83}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x40800) ioctl$auto_EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=[0x10001, 0x5]) r4 = ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000400)=0x7) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000480), r2) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f00000004c0)={0x468, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x1a8, 0x2, 0x0, 0x1, [@generic="af108b96fb7172010e87e4d73e9401ecc51042a406fdfedb53ce55fa2698dc31190a0dc4349e643b76f997cc0c63ff4fa8601f3f68281b55ed1d6dea71c0ee49c5430b78da3033712d7f5608db927d241d30f563c9ce89e67d920f9b01c8225795795988ad4745b5b6d343d90ba8f2c09966b304fd0d59e9a1bb30fd1f4affb5aa5860dd9ea8f3150d5e69c824ce174f82df2cdcb035793472a02dc5a3b4186b04cc203eb06dbb3f1ea6171fb949f69c52af2e998fa7145984c93e09314efa4bc653cf3e", @generic="7cec335362e9ee890fb80cab8c7886a7de2278b629c7313fd94bbeb998b86287f02684594eb01143e5958904990e194e9df080b14908dd8b152b017aa4d651b86f87e43f56bf9a3da080d84d54baf4558b64fa3c8cb712f7072bb0b0285f6a2553c547ec362f4a354421fc5eaa2bfd882087925ff7", @generic="4637e246821256e66d2d938198c1555be72d32e1df47c0e12fa5eed23239eac8a8956fb811904d191acb2874a170bdce7df03e3fa9c6aa49ecb4e5166d1ddca3ad830ec6f5a807313b97c95e2beab2afd57121cfb2ba3302cf90533fb7097c322962ecd352c09c3d0932d6"]}, @IPVS_CMD_ATTR_SERVICE={0x1f4, 0x1, 0x0, 0x1, [@typed={0xf, 0xea, 0x0, 0x0, @binary="83f945abe82bb3c2ce68d9"}, @generic="c2aa0007b0c3fa253eea18a7732b4a9f24c19b9d6726480d145f182ce1e065ee79aa8e20857a5b4de57e253bab369e8148206ec2f810113f5866878297a826ccde9368c6f0afca5f86e90a9526fcffbb0ac9ee9beb1788d21b2c25d9e33649fcd6e735fe485ace28a515e6f36d3e8ff59b73b0b4083bb52b2208cb2c23c9a46965eb6c4dc1878d3a969ead0ab05058cd2a131a0bf7b8c8dd50bac2efb78ac610c63ad68db8d814bf0f8f296de920229b394ceee787", @typed={0x8, 0xa7, 0x0, 0x0, @u32=0x2000}, @generic="04b3d0ecd8fc74197c99a9e2eea42f4ee65b1b4a87a04f5a584f9c204a82bb9c4172a857f99c1a7f68a623b9eaa501aa04ef172cec06454fdeb8c0dbc1c2b9c11eb4c6ffc260ab6011a099cd31ff2505dcf46e6e3c101d7d", @typed={0xa, 0x6c, 0x0, 0x0, @str='[}+\xa0@\x00'}, @typed={0x8, 0x7b, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x27}, @generic="a896a40159c20a47529a60102e15c081bd02f2878a2c050d78c68d4007de58453d0dd5c44570a5bcadd513ac47f000984f3b2c648c4e0e35eeefa7186868b49ae4450d83d2a64527eaf3167e22be42023e6900732934e2eeb4d65752e56f9110e4e5a82d72d04b6e524543e61e3c63632e55265f8604318ab2da9d752647c029a7fa5be16ac41e4a1e20199405123036bf126ae0e93a654de410e3e26625768c59be126dcd03d6", @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0xb0, 0x3, 0x0, 0x1, [@nested={0xa4, 0x10a, 0x0, 0x1, [@generic="65720950e5c3958197c761739f7c4d279824b163185efc07777f59ed464f9d7627e87334f5117aff72afc2f48b74021be08ff214e62c4dbfa3d922141984aa453240cdf0a4b86072efec27b888d9babc3646fc1850d805b068b0431647d56075a051564f4c2d2bccf33c64d4a1f240afb6f048199bb24d96e43431edabb2e256039fb16c1828aff780295d33f0ed6558bc8a5d0c91a68810284f2d44cbf2c696"]}, @typed={0x8, 0xaa, 0x0, 0x0, @uid}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_STATION(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}, @NL80211_ATTR_PMKID={0x3a, 0x55, "777523b14e66daa64a71004f76d460de858bf0bfcb59ec060e183c3409d41cf776e942178c5886d248a20922844805733ca3bb76c72b"}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xd5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x3}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0xe}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) capget$auto(&(0x7f0000000d40)={0x3, 0xffffffffffffffff}, &(0x7f0000000d80)={0x7, 0x3ff, 0x1ff}) r8 = clone$auto(0x1, 0x3, &(0x7f0000000dc0)=0x4, &(0x7f0000000e00)=0xfffffff7, 0x6) r9 = syz_clone3(&(0x7f0000001080)={0x26ca40100, &(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0), {0x12}, &(0x7f0000000f00)=""/188, 0xbc, &(0x7f0000000fc0)=""/112, &(0x7f0000001040)=[0x0], 0x1, {r2}}, 0x58) ioctl$auto_XFS_IOC_FREESP(r4, 0x4030580b, &(0x7f0000001100)={0x3, 0x2, 0x400, 0xa8e4, 0x2, 0xffffffffffffffff}) r11 = semctl$auto(0x2a2, 0x9, 0x4, 0x80) r12 = getpgid$auto(0xffffffffffffffff) capget$auto(&(0x7f0000001140)={0x6, 0xffffffffffffffff}, &(0x7f0000001180)={0x80000001, 0xe6, 0x9}) r14 = syz_clone3(&(0x7f0000001400)={0x80002000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x26}, &(0x7f0000001280)=""/154, 0x9a, &(0x7f0000001340)=""/124, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r4}}, 0x58) syz_clone3(&(0x7f00000014c0)={0x20000000, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0), {0x11}, &(0x7f0000000c00)=""/30, 0x1e, &(0x7f0000000c40)=""/218, &(0x7f0000001480)=[r7, r8, r9, r10, r11, r12, r13, r14], 0x8, {r2}}, 0x58) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000002880)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002840)={&(0x7f0000001600)={0x121c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_OFFLOAD={0x101d, 0x9, 0x0, 0x1, [@generic="e5d72aea01f709f95f", @nested={0x1010, 0x68, 0x0, 0x1, [@nested={0x4, 0xd5}, @generic="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", @nested={0x4, 0x122}, @nested={0x4, 0x135}]}]}, @MACSEC_ATTR_RXSC_CONFIG={0xbb, 0x2, 0x0, 0x1, [@generic="572846f61b12f33c5a24eaf791f0d5e3faae5a7aea4f098a21a1a0dcf9c1a769b64cdea365ef0ffdbe1f9d331392846fcbba112e2f7b3db16974fbd95dd8c790bb2365a0b7ee5c773e54e2ef1181fcb55ccd5766ed7bc56c3cdacfce464d6376d6ad85cb745123a7b45370421c2e48ac7eb0f8ae4f7af1e627fbc08c0d40a604a2650529c3fe5cd0e61b", @generic="94a36c1d8d32cdfe64930a87072f2a90e48bccb27fd117ea8e9f0a47aa3f6162cbc9957076", @nested={0x8, 0xe3, 0x0, 0x1, [@nested={0x4, 0xd5}]}]}, @MACSEC_ATTR_SA_CONFIG={0x121, 0x3, 0x0, 0x1, [@generic="d490500148cc94116b1b3f556d0705990546d8b30dd95fff227511261e68580a2b2908f228095ea11a3c2a080bd5cfc7dd2c902f559cc9c1c0d7bd99908fb754959dbb9832aaed3b945932d0781ab34dee841fa2d786aa055fa445f7a5153e4b15d80b1beeef03352d708ef8c496aad8b910ce7b4ca1a6ea76", @generic="61f03148556698c53c224c5b47f9973ceeef04854169af44a8df7954775d1fb782ebd04c300e91eab914a97e85c503c70fd6a2d00811893d7f4d4679b9df65a26146efaa00038f424e03b5816d48d493d90acb9e858af8d9248e332029533a2b9a68b0639f67bc282bf9b223afecd9e8963e1aff1eb2595d88d80c3bdea69c4a83c710147a4383a39a3e9c0c06e0b89a028b5c734728f77d41c875698ae2d31e874ccd6e"]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x121c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) 52.52461085s ago: executing program 1 (id=1675): r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0xe983, 0xdc, 0xeb1, r0, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f00000001c0)={&(0x7f00000000c0)='\x18\x04\x8f~\xa7 \xcf\x1fg7\n\xd8\xbd\xd3&\xa7\xa6_\xaa\xe2;\xb5\x82\x9dA\x8f|\xf3\xd7\xc6X\xdf\xdaC\x9aoqM2\x10\xb1\xd1\xbd\xca0\x9f\xe7\x00\x00\x00\x00\x00\x00\x00\x00T\r\xbfZO\x7f\xbd\x91\xf2\xbd\xc6.\xa2*\xdb\xd7\f\xebM\xba\x15P\as\x82\x17\xa3\xf5\xf6\xcd\x19P&\x88*\xf9\xdd\xc3t[`\xf3h\xc0\"\xd2\xa5\x81\xd6l\xc2k|\rX]XP\xfe\xc9\xe3\xea\xa4P\x95!3\xce\x9f\x9f<\x1eI\xfd\x80\x1c\xf9~\x06\x1b{K\x04\x85\xfa\x14\xbf\t\xc0\xced?j\xb2\xf1~T\xb2i\n\x15\x0e\xf7G9\'}^B=\xfc\x11\xfa\x0f\x0fd4^`\xc2\xb0\xaf\\\x1duPu\x02\xce:`c\xb0\xd0\xde\x13\xb4\xe0\xfcn\x98%\x1d\xff(\xa3\x10d\x89', 0x8, 0x80}) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) socket(0x10, 0x80000, 0x5) 50.495313791s ago: executing program 1 (id=1680): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x40000e, 0x0, 0x0, &(0x7f00000002c0)={[0xe, 0x7, 0xd3e, 0x1, 0x948b, 0x4, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d40, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x80000000948b, 0x400000000003, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r2, 0x0, 0x3, 0x3, 0x8000000000000000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2000d, 0xe0, 0x46b1, 0x401, 0x8000) read$auto_mon_fops_binary_mon_bin(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) bind$auto(r3, &(0x7f00000000c0)=@sco={0x1f, @none}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev3\x00', 0x0, 0x0) move_pages$auto(r0, 0x2000000001002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xc0305602, 0x38) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) 35.249982747s ago: executing program 32 (id=1680): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0x40000e, 0x0, 0x0, &(0x7f00000002c0)={[0xe, 0x7, 0xd3e, 0x1, 0x948b, 0x4, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d40, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x80000000948b, 0x400000000003, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r2, 0x0, 0x3, 0x3, 0x8000000000000000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2000d, 0xe0, 0x46b1, 0x401, 0x8000) read$auto_mon_fops_binary_mon_bin(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) bind$auto(r3, &(0x7f00000000c0)=@sco={0x1f, @none}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev3\x00', 0x0, 0x0) move_pages$auto(r0, 0x2000000001002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xc0305602, 0x38) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) 6.97343917s ago: executing program 4 (id=1867): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x644c1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000400)="e53e06d47f95951672eeb1c9463b3895e9a42e2e5bc743ac", 0x18) r3 = socket(0x23, 0x5, 0x2) bind$auto(r3, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x24040, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) statx$auto(r1, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) prctl$auto(0x3e, 0xbb56, 0x0, 0x1, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5, @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000500000000fb3d89cb809172a332000300800040008800"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) 5.698016192s ago: executing program 4 (id=1868): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) epoll_create$auto(0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x9, "cc00000008f0ffffff000100"}, 0x6b) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff7, 0xfffffffffffffffc, 0xb4) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000240)="4c91f2c388274610e12c86a14ea27a04640602a768fa8632641b1bb258aee33278db2db9c54bc6857e77a9c9d3800e9b394b", 0x32) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x5) socket(0x2, 0x80002, 0x73) 5.562103762s ago: executing program 0 (id=1871): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x20200, 0x0) preadv$auto(r0, &(0x7f0000000240)={0x0, 0x9}, 0xc, 0x9, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x3, 0x401, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x1000) 5.25463791s ago: executing program 2 (id=1873): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x80, 0x0, 0xfffffffffffffffb, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) mmap$auto(0x0, 0x5, 0x4000000020e3, 0xeb1, r1, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r2, 0xc0045405, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(r0, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x20}, 0x402) socket(0x22, 0x3, 0x1) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x10000005, 0x7fff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) rename$auto(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00') getxattrat$auto(r4, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f0000000380)={0x10, 0x5, 0x4}, 0xffffffff) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) fsconfig$auto_SHMEM_HUGE_FORCE(r4, 0xffffff01, &(0x7f0000000180)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f00000001c0)="2f718086ac223fc7f9070924d0f82503413c457ca44abf04768f1edcc19d291799c6e46743206b26e51c19807d4d46265fb11fab4cfe2c1d05540af9303dea75f3f947583f4bd5e6c7a3d600007495a7aae990d2e3a3ca9e6b94a2034c90e5b8f60bcf660fb025e71c7d6d6a4e9d130c7417e25e07f703f26224e7ee2cf957a42136e9dd7782eb899f9b33", 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0x364751b60bd135d7, 0xa, 0x703) 4.992572207s ago: executing program 3 (id=1874): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x143201, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d) 4.178472473s ago: executing program 2 (id=1875): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) pwritev2$auto(r1, &(0x7f00000003c0)={0x0, 0x80000000200}, 0x8000000000000004, 0xffffffffffffffff, 0x8, 0xb) r2 = socket(0xa, 0x2, 0x3a) r3 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r3, 0x4, 0x8000040006) ptrace$auto(0xf, r3, 0xfffffffffffffffe, 0x8000000000000000) setsockopt$auto(r2, 0x29, 0x39, 0x0, 0x110) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r5, 0x8946, 0x24) mmap$auto(0x10, 0xffffffffffffff81, 0x7fa4826e, 0x19, 0x2, 0x100000001) madvise$auto(0x4, 0x9, 0xffff) close_range$auto(0x2, 0xa, 0x0) 4.178020178s ago: executing program 3 (id=1877): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x644c1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304, 0x0) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000400)="e53e06d47f95951672eeb1c9463b3895e9a42e2e5bc743ac", 0x18) r3 = socket(0x23, 0x5, 0x2) bind$auto(r3, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x24040, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) statx$auto(r1, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) prctl$auto(0x3e, 0xbb56, 0x0, 0x1, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5, @ANYRES16=0x0, @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x880) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000500000000fb3d89cb809172a332000300800040008800"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) 4.177633206s ago: executing program 4 (id=1884): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdc, 0xeb1, r0, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r1, 0x4010744d, &(0x7f00000001c0)={&(0x7f00000000c0)='\x18\x04\x8f~\xa7 \xcf\x1fg7\n\xd8\xbd\xd3&\xa7\xa6_\xaa\xe2;\xb5\x82\x9dA\x8f|\xf3\xd7\xc6X\xdf\xdaC\x9aoqM2\x10\xb1\xd1\xbd\xca0\x9f\xe7\x00\x00\x00\x00\x00\x00\x00\x00T\r\xbfZO\x7f\xbd\x91\xf2\xbd\xc6.\xa2*\xdb\xd7\f\xebM\xba\x15P\as\x82\x17\xa3\xf5\xf6\xcd\x19P&\x88*\xf9\xdd\xc3t[`\xf3h\xc0\"\xd2\xa5\x81\xd6l\xc2k|\rX]XP\xfe\xc9\xe3\xea\xa4P\x95!3\xce\x9f\x9f<\x1eI\xfd\x80\x1c\xf9~\x06\x1b{K\x04\x85\xfa\x14\xbf\t\xc0\xced?j\xb2\xf1~T\xb2i\n\x15\x0e\xf7G9\'}^B=\xfc\x11\xfa\x0f\x0fd4^`\xc2\xb0\xaf\\\x1duPu\x02\xce:`c\xb0\xd0\xde\x13\xb4\xe0\xfcn\x98%\x1d\xff(\xa3\x10d\x89', 0x8, 0x80}) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) poll$auto(0x0, 0x7f, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400006, 0xdf, 0x809b72, 0x2, 0x8000) socket(0x10, 0x80000, 0x5) 3.7664156s ago: executing program 0 (id=1878): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_GET_MSRS(r0, 0xc018ae85, 0x0) (async) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) unshare$auto(0x40000080) (async) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) setrlimit$auto(0x1000000007, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffff5fdffe00, &(0x7f0000000400)=';') (async) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r4, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.471201421s ago: executing program 4 (id=1879): socket(0x2, 0x1, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x0) (async) socket(0x22, 0x3, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x2400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/qat_c3xxx/uevent\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/19, 0x13) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x787806, 0x0) socket(0x10, 0x2, 0xc) write$auto(0xffffffffffffffff, 0x0, 0xfdef) acct$auto(&(0x7f0000000000)='/dev/v4l-subdev0\x00') setsockopt$auto_SO_BUSY_POLL(r0, 0x6, 0x2e, &(0x7f0000000000)='!]\x00', 0x400000) (async) setsockopt$auto_SO_BUSY_POLL(r0, 0x6, 0x2e, &(0x7f0000000000)='!]\x00', 0x400000) 3.127941311s ago: executing program 4 (id=1880): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x2a, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x3, 0x3a) ioctl$auto(0x3, 0x8918, 0x10000000000402) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x400, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[\xcb\xc0\xb0N\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x9, "cc00000008f0ffffff000100"}, 0x6b) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff7, 0xfffffffffffffffc, 0xb4) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000240)="4c91f2c388274610e12c86a14ea27a04640602a768fa8632641b1bb258aee33278db2db9c54bc6857e77a9c9d3800e9b394b", 0x32) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x5) socket(0x2, 0x80002, 0x73) 3.038153006s ago: executing program 2 (id=1882): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x539e, 0x6, 0x13, 0x12, r0, 0x4) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x202, 0x9, 0x1}) (async) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x202, 0x9, 0x1}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) (async) ioctl$auto(r3, 0x400454ca, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r4) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_COORDINATOR={0x18, 0x1e, 0x0, 0x1, [@generic="e484e0d7fe1d6ddcc9a6067ac381ed08db0e522a"]}]}, 0x2c}}, 0x810) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000200)={0x9c, r5, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_UNSPEC={0x85, 0x0, "8b7e8829ca6c837586e0a55b680c574be3227efc472f2751280590531fd0fdfa74c80359ca6ee5a288726d6ee3014550a956ad7cbd84f718f9797ddedbd2ae18e6ad37267565f92217065275cea94831c2d25bc2fba426ac61dcccdd92ac34c1aeff738c7b9ffb33931cefb4338d3482d4aaed643e71cc275bf377a8c1e0ade498"}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4044820) 3.029205375s ago: executing program 3 (id=1883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x346e, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r2) r5 = wait4$auto(0x0, &(0x7f0000000180)=0xfffffe01, 0xbd, &(0x7f00000001c0)={{0x3, 0x1a}, {0x6, 0x6}, 0x6ef, 0x7fffffffffffffff, 0x5, 0x7, 0x382f, 0xffffffffffffff70, 0x17, 0xfe00000000000000, 0x1, 0x2, 0xffffffffffffffff, 0x71, 0x3, 0xb}) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_PHY_CAPS={0x40, 0x18, 0x0, 0x1, [@typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@private0}, @nested={0x10, 0x12, 0x0, 0x1, [@nested={0x4, 0xc7}, @nested={0x4, 0xff}, @nested={0x4, 0x98}]}, @nested={0x10, 0x4d, 0x0, 0x1, [@nested={0x4, 0xab}, @nested={0x4, 0x4e}, @nested={0x4, 0x117}]}, @typed={0x8, 0x123, 0x0, 0x0, @str='{](\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x1) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid=r5}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x2004c881) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x1, 0x4070bd27, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) 2.743531403s ago: executing program 3 (id=1885): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0xa0001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)='T', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000200), 0x22000, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r2, 0x80086601, 0x5) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/veth0_to_bond/delay_first_probe_time\x00', 0x8a042, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0xfffffffd, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x6, 0x3, 0x2, 0x9, 0x2, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600060040"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r5, 0x2, r1, &(0x7f0000000100)={0x4, 0x4}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="1235015049bf97c3e69367a7e995ea5d93d33e4d72943b6c92bef36e1dda40b820", 0x21) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.174123733s ago: executing program 0 (id=1886): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4b, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) socket(0x2, 0x1, 0x0) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r1, r1, 0x0, 0x200) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x9c}, 0x1) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)={0x3bc, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x398, 0x3, 0x0, 0x1, [@typed={0x14, 0x14d, 0x0, 0x0, @ipv6=@private1}, @nested={0x349, 0x3f, 0x0, 0x1, [@generic="911cd30cf8417d46affce53d0650c6dc57eef2a996139cc7734cc8c28837f7fddd5c5d1164d24b4a5dd497a7e7fcaa17124937e003048d0faa056aff76f685ec59daa17b48f2d4eec890bbfd23767e7ba2397dfdb591e492d3ed9ce6940f55bfc397d1b37518f4388015dde86071ae830676557a8f47f001cea6fb4fea7b0902825132a0973822b951b313b293fe0330cd46d0264ed4a60c9475f0338790c8c16d2c2613127cd9f7026306bcc314ecb03efe85a75bca5cba1cd1bee72bc12d4cfec7c302172538ffc88676", @typed={0x5, 0x6a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x51}, @generic="11e8e643f863a6c2c24b5958b098a4408c1c204b6f13f1cc42211763c63a38295587d5fe2b719371a09e3cef4cc28aa6d209ae99f1cc6f77d55c1280ced516fb9656dc85729ab38861d866d3e4ef46d3caf107829aae372aba13a2d7970525710ed5c3abff16079716056d5fcd7bfd31bbcb1dc21e890b0bf007dcf56228cb6e73f0a94ceae8daa411aa686cacadc8cdd1f2cc3f6405f589f3698f8ea648294a45b7fe37a550990c9976900703cf647416e53be2947b9d3db894ee43d8cbd62750f5fd17", @typed={0x2a, 0xc2, 0x0, 0x0, @str='/sys/module/apparmor/parameters/audit\x00'}, @generic="6cc13bb66808529f147f31a841e1df64f5bdd99c8ba72a8fe3a9ecc4bc934ae07853c3f3c2686fb21381babe8851000e713a82769132daa30f47eba67c77e36ec21be39e7578fdb5861a78bcd6749430fc28a149c84437b5767cb4b70a826075b8ee7656774e2c69f66d1c9e514e934abbad8323fe2b3b87e26865f6cb5f1f723a5bba5e36b51b3a6d26d3d5acb9730de40453d6131305a66e7e12b52c76b121def3307f1d6b6df05daab4c38dc3aaf421d4153dd3b677558cbe49262b629d0ab5974129c0711231e4ef78c41152f3370d2138d866c6351df72ae50f7d770e80078f4fa740b7769b113fb19a790e10b1152a3fd7fd", @generic="4b5c0e8c4b38b3097cd8f6955d2c88ca21c48c8f88dc278b3394bfc5f0b88e990fc898005408f3c74a39b53c424d6a75e93b5a8568fc206601c4c3d7e48faa91c97748f4f7b2a787e36f65f30a02d379e0fe94ad30224aec1d5b0db00eed4e5ac707e94ed3d10bea0d", @typed={0x17, 0xee, 0x0, 0x0, @str=']\\-%[{.\'#A),{#/+$$\x00'}, @typed={0x8, 0x13d, 0x0, 0x0, @pid}]}, @typed={0x8, 0x127, 0x0, 0x0, @ipv4=@remote}, @typed={0x2a, 0x7f, 0x0, 0x0, @str='/sys/module/apparmor/parameters/audit\x00'}]}]}, 0x3bc}}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.432162944s ago: executing program 2 (id=1887): socket(0x2d, 0x2, 0x0) socket(0x25, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x100, 0x0) socket(0x2b, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x42080, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x201, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x4000000000) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x8800) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.194861591s ago: executing program 4 (id=1888): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x20200, 0x0) preadv$auto(r0, &(0x7f0000000240)={0x0, 0x9}, 0xc, 0x9, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x3, 0x401, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x1000) 985.697856ms ago: executing program 0 (id=1889): r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x86, 0x0, &(0x7f0000000000)=0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) setsockopt$auto_SO_RCVTIMEO_OLD(r1, 0x4, 0x14, &(0x7f0000000040)='\x00', 0x7f) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0x7491}, 0x800}, 0x4, 0x4008) r2 = socket(0xf, 0xa, 0xf) setsockopt$auto(r2, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 985.376514ms ago: executing program 2 (id=1890): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) socket(0x1a, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001200)={0xf2f, [{0x529, 0x5}, {0x19f1a9bc, 0x7}, {0x800, 0x5}, {0x9, 0x45053277}, {0x7d, 0xf}, {0x7fffffffffffffff, 0x5}, {0x8, 0x1000}, {0x8, 0xf94}, {0x9, 0x5}, {0x7fff}, {0x80000000, 0x5}, {0x6b, 0x6}, {0x6, 0xfffffffffffffe00}, {0x1}, {0x5, 0xb11}, {0x8, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x5bf8}, {0x6, 0xfff}, {0x100, 0x1000}, {0x10000}, {0x6, 0x1}, {0x9, 0xee}, {0x9, 0x2}, {0xff, 0x6}, {0x7, 0x4}, {0x8, 0xb}, {0x9}, {0x9, 0x101}, {0x1, 0x9}, {0x5, 0x2c3}, {0x3, 0xfe}, {0x9, 0x8000}, {0x5b, 0x6}, {0xfff, 0x10000}, {0x5, 0x7fffffffffffffff}, {0x40004}, {0x2, 0x12580000}, {0x9}, {0x9, 0x100000001}, {0x2, 0x7}, {0x6, 0x5}, {0x10, 0x200000000000004}, {0x9, 0x1}, {0x5, 0x10}, {0x9, 0x200}, {0xb, 0x4d97}, {0xffffffffffffff7f, 0x5f397171}, {0x7f, 0x800}, {0x3, 0x10000}, {0x6, 0xffffffffffffffff}, {0x6, 0x2}, {0x5, 0x3}, {}, {0x3, 0x1}, {0x1, 0xbb1}, {0x9, 0x8000}, {0x166, 0x3}, {0x9, 0x9}, {0xa, 0x401}, {0x2}, {0x4, 0x800002}, {0x0, 0x4}, {0x7ff}, {0x6, 0x7fffffff}, {0x1, 0x9}, {0x67a, 0xffff}, {0xc, 0x8}, {0x80, 0xe0}, {0x3e75, 0x1}, {0xe8, 0x9}, {0x5}, {0x0, 0x1}, {0xfffffffffffffffe, 0x9}, {0x8, 0xf870}, {0x1ae8df8a, 0x5}, {0xf8, 0xd7c}, {0x0, 0x8}, {0x2, 0xffffffffffffffff}, {0xcd, 0x7ff}, {0x2, 0x800}, {0xfffffffffffffff8, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x7ff}, {0x8b, 0x6e}, {0x8000000000000000, 0x3}, {0x4, 0xf434}, {0x4, 0xa0b}, {0x9, 0x5}, {0x4, 0x5}, {0x9, 0x5}, {0xd0c7, 0x6}, {0x3, 0x1}, {0x35d, 0x75}, {0x7, 0x3}, {0x3, 0xfffffffffffffffa}, {0x1, 0x38a}, {0x4, 0x1}, {0x100000001, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x81, 0x821}, {0x2, 0x1}, {0x100000000, 0x5}, {0x8008, 0xfffffffffffffffa}, {0x9, 0xc}, {0x0, 0x82}, {0x2, 0x70829e47}, {0x255, 0x100000001}, {0x7, 0x8}, {0x1315, 0x7}, {0x4, 0x100}, {0x2, 0x24ad}, {0xd, 0x7}, {0x5, 0x131}, {0x2}, {0x7fffffff, 0xaf06}, {0x8, 0x6}, {0x10, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0xc184}, {0x5, 0x8}, {0x101, 0x24}, {0xfab, 0x3}, {0x1, 0x8}, {0xffffffffffffff89, 0x1}, {0x7ff}, {0x3, 0x9}, {0x7fffffff, 0xffffffffffffffff}, {0x1, 0x1944}, {0x7, 0xfffffffffffffff7}, {0x4, 0xa7}, {0x3, 0xd}, {0x4, 0x6}, {0xfff, 0xa81}, {0x3, 0xc0}, {0x1ff, 0x880}, {0x1000, 0x5}, {0xb, 0x8}, {0x4, 0x6}, {0x1000000000002, 0x5}, {0x200000007, 0x6}, {0x8001, 0xb}, {0x7fffffff, 0x953c}, {0xfffffffffffffffd, 0x2}, {0x4}, {0x1, 0x5}, {0xfffffffffffffff8, 0xbd}, {0x7b3e9917, 0x2}, {0x54e5, 0x6000}, {0x100000001, 0x100000001}, {0x4, 0x8}, {0x200, 0x7afe}, {0x5, 0x8}, {0xfffffffffffffff7, 0x3e9}, {0x0, 0x8}, {0x3, 0x9}, {0x80, 0x1000}, {0x802, 0xd}, {0x0, 0x6}, {0x7, 0x10}, {0x80000000000000, 0x5}, {0x1, 0xc}, {0x0, 0x3}, {0x0, 0x9bd}, {0x4, 0xf96a}, {0x203b0000000000, 0x6}, {0x9}, {0x1, 0x8}, {0x1e, 0x2}, {0x6, 0x400}, {0x8, 0x80000001}, {0x3fc0, 0x6}, {0x4}, {0x7fff, 0x7}, {0x30, 0x4}, {0xffffffffffffffff, 0x2}, {0x1ff, 0x7}, {0x5, 0x4}, {0x4, 0x79}, {0x3, 0x2}, {0x6, 0x7fff}, {0x6, 0x8}, {0x1000, 0xef62}, {0xbd1b, 0x10001}, {0x8, 0x6}, {0xbd8, 0x80000000}, {0x5, 0x80000001}, {0x1, 0xfffffffffffffff9}, {0xfff, 0x7}, {0x100, 0x3}, {0x7a}, {0x100}, {0x7, 0xffffffffffffffff}, {0x238b, 0xffffffff00000001}, {0x0, 0x2}, {0xd3fe, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x99, 0xfffffffffffffffc}, {0x6, 0xee}, {0x6, 0x100}, {0x78e, 0x5}, {0x1ddf, 0x6}, {0x9, 0x40}, {0x1, 0x2}, {0x8001, 0x91}, {0x8000, 0x1}, {0x9, 0x6}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0xffff}, {0x5}, {0x5aa, 0x8020000000000}, {0x7, 0x8000000000000000}, {0x400005c4a, 0x4}, {0x3, 0x7de}, {0x0, 0x2}, {0x780000000, 0x8}, {0x9, 0xffffffffffffff3f}, {0x3, 0x4}, {0x81, 0x6a04}, {0x2, 0x1c25}, {0xffffffffffffffc0, 0x8}, {0x1, 0x427}, {0x2, 0x8}, {0x42000008, 0xed3}, {0x3, 0xbe28}, {0x8000000000000000, 0xffffffffffffffff}, {0x2, 0x2}, {0x7, 0x7}, {0x80000001, 0x3987}, {0x66f3, 0x101}, {0x5, 0x101}, {0x4, 0x80000002}, {0xfff, 0x2}, {0x4, 0x8000000000000001}, {0x1}, {0xa, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0xd, 0x2}, {0x1, 0x10001000000000}, {0x0, 0x7fffffffffffffff}, {0x9, 0x6}, {0x200, 0x2f91}, {0xd5c5, 0x81}, {0x10000, 0x8000}, {0x800, 0xfffffffffffffffa}, {0x301983e2, 0x5}, {0x3, 0x7}, {0x0, 0x4}], 0x7, "d239d0895400"}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r3, 0x5408, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00 \b\x00', @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) close_range$auto(0x2, 0x8, 0x0) recvmmsg$auto(r2, 0x0, 0x8100fe, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) membarrier$auto(0x2, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r5 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r5) sendfile$auto(r5, r5, &(0x7f0000000340)=0x7, 0xffffffffffffffff) 939.840266ms ago: executing program 3 (id=1891): r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) unshare$auto(0x40000080) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14040009387be61e7c40ee0db256920aa4edada6e59cca962ad1195584faaf55a4eac97aff7aaf8dd5fe789f47297b20", @ANYRES16=r2, @ANYBLOB="050725bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async) flistxattr$auto(0xffffffffffffffff, 0x0, 0x1) write$auto_rfkill_fops_core(r0, &(0x7f0000002380)="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", 0x1000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000200), 0x48b480, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) (async) semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) (async) madvise$auto(0x0, 0x8, 0x6) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') (async) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) ioctl$auto(r5, 0x890a, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r6 = socket(0x2a, 0x2, 0x0) bind$auto(r6, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6b) (async) r7 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r7, 0xfffc, 0x8}, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x8}, 0x0, 0x8) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x0, 0x0) (async) r8 = socket(0x2, 0x80002, 0x73) bind$auto(r8, &(0x7f0000000000)=@generic={0x13, "1e983861aa73a6e0d3e6121f3c87"}, 0x5) (async) r9 = gettid() kcmp$auto(0x1, r9, 0x1, 0x4, 0x24000) 470.80149ms ago: executing program 0 (id=1892): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) pwritev2$auto(r1, &(0x7f00000003c0)={0x0, 0x80000000200}, 0x8000000000000004, 0xffffffffffffffff, 0x8, 0xb) r2 = socket(0xa, 0x2, 0x3a) r3 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r3, 0x4, 0x8000040006) ptrace$auto(0xf, r3, 0xfffffffffffffffe, 0x8000000000000000) setsockopt$auto(r2, 0x29, 0x39, 0x0, 0x110) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r5, 0x8946, 0x24) mmap$auto(0x10, 0xffffffffffffff81, 0x7fa4826e, 0x19, 0x2, 0x100000001) madvise$auto(0x4, 0x9, 0xffff) close_range$auto(0x2, 0xa, 0x0) 5.986223ms ago: executing program 3 (id=1893): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x1e, 0x1, 0x0) ioctl$auto(r0, 0x89e1, 0x91) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)=@link_create={@prog_fd=r0, @target_ifindex, 0x10, 0x0, @perf_event={0x2}}, 0x5) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0x3, 0x5411, 0x38) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, 0xffffffffffffffff, 0x9, 0x321) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(r2, 0x4144, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) connect$auto(0x3, 0x0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/id\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x200000000003, 0x2f4a3a23) mmap$auto(0x0, 0x2, 0x7, 0x9b72, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x22, 0x800, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x1, 0x7ff, 0x903b, 0x5e) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/170, 0xaa) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) 0s ago: executing program 2 (id=1894): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(r2, &(0x7f00000001c0)="897fb7881f283f27a0038a1b1b9ba20042bbc4dbdcb6e533a8aa378cc87a47b7045e0ec690ce457ebb3818d6c5c3e7e70339d21d2f3865dac8bdc572c4c765c72c3bbc7b053ea18bf8368c012dbd48e3e7c26145a1992975f010b26d9b7ff1fc7cb9274f1cc35f76b96173", 0xfffffffffffffe01, 0xfffffff7, &(0x7f0000000240)=@ethernet={0x6, @remote}, 0x100) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_SE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_NAME={0x5, 0x2, '!'}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0xe4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x110) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x55) sysfs$auto(0x2, 0x810000000000003a, 0x0) getsockopt$auto(r4, 0x84, 0x1d, 0x0, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r5, 0x0, 0x1) kernel console output (not intermixed with test programs): 000000246 R12: 0000000000000000 [ 204.825672][ T8427] R13: 00007f090bbe6038 R14: 00007ffc2780b2a0 R15: 00007ffc2780b388 [ 204.825689][ T8427] [ 205.297657][ T8439] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 206.260902][ T8461] __vm_enough_memory: pid: 8461, comm: syz.0.526, bytes: 4398046511104 not enough memory for the allocation syzkaller syzkaller login: [ 207.030297][ T8486] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 207.061453][ T8486] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 207.079174][ T8486] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 207.119939][ T8486] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 207.162359][ T8486] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 207.170165][ T8486] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 207.220232][ T8486] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.097520][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 209.103667][ T5852] Bluetooth: hci0: command 0x0419 tx timeout [ 209.166067][ T5852] Bluetooth: hci2: command 0x0419 tx timeout [ 209.254244][ T5852] Bluetooth: hci3: command 0x0419 tx timeout syzkaller syzkaller login: [ 210.323795][ T8557] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 211.166219][ T5852] Bluetooth: hci1: command 0x0419 tx timeout [ 211.246060][ T5852] Bluetooth: hci2: command 0x0419 tx timeout [ 211.467728][ T8576] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 211.838447][ T8578] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 213.104758][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 213.247437][ T5852] Bluetooth: hci1: command 0x0419 tx timeout [ 213.821482][ T8614] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 213.963567][ T8619] netlink: 17 bytes leftover after parsing attributes in process `syz.0.555'. [ 214.403503][ T8617] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 214.553399][ T5852] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 216.372335][ T8650] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 216.504184][ T8651] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 216.955646][ T8658] Invalid ELF header magic: != ELF [ 218.581753][ T8683] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 219.323639][ T8686] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 220.588978][ T8720] random: crng reseeded on system resumption [ 221.526822][ T8729] FAULT_INJECTION: forcing a failure. [ 221.526822][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 221.582837][ T8724] mkiss: ax0: crc mode is auto. [ 221.653720][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.3.581 Tainted: G U syzkaller #0 PREEMPT(full) [ 221.653760][ T8729] Tainted: [U]=USER [ 221.653768][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.653781][ T8729] Call Trace: [ 221.653789][ T8729] [ 221.653798][ T8729] dump_stack_lvl+0x16c/0x1f0 [ 221.653829][ T8729] should_fail_ex+0x512/0x640 [ 221.653856][ T8729] ? __kmalloc_cache_noprof+0x5f/0x780 [ 221.653885][ T8729] should_failslab+0xc2/0x120 [ 221.653918][ T8729] __kmalloc_cache_noprof+0x72/0x780 [ 221.653945][ T8729] ? syslog_print+0xf6/0x620 [ 221.653985][ T8729] ? syslog_print+0xf6/0x620 [ 221.654019][ T8729] syslog_print+0xf6/0x620 [ 221.654056][ T8729] ? __pfx_syslog_print+0x10/0x10 [ 221.654090][ T8729] ? get_pid_task+0x106/0x250 [ 221.654137][ T8729] ? find_held_lock+0x2b/0x80 [ 221.654172][ T8729] ? rcu_is_watching+0x12/0xc0 [ 221.654213][ T8729] ? bpf_lsm_capable+0x9/0x10 [ 221.654245][ T8729] ? security_capable+0x7e/0x260 [ 221.654275][ T8729] do_syslog+0x3dc/0x6c0 [ 221.654301][ T8729] ? __pfx_do_syslog+0x10/0x10 [ 221.654324][ T8729] ? __fget_files+0x20e/0x3c0 [ 221.654360][ T8729] ? ksys_write+0x1ac/0x250 [ 221.654387][ T8729] ? __pfx_ksys_write+0x10/0x10 [ 221.654422][ T8729] __x64_sys_syslog+0x74/0xb0 [ 221.654446][ T8729] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.654469][ T8729] do_syscall_64+0xcd/0x4b0 [ 221.654497][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.654521][ T8729] RIP: 0033:0x7f79fef8eec9 [ 221.654540][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.654561][ T8729] RSP: 002b:00007f79ffde0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 221.654584][ T8729] RAX: ffffffffffffffda RBX: 00007f79ff1e5fa0 RCX: 00007f79fef8eec9 [ 221.654600][ T8729] RDX: 00000000000000cf RSI: 0000200000000000 RDI: 0000000000000002 [ 221.654614][ T8729] RBP: 00007f79ffde0090 R08: 0000000000000000 R09: 0000000000000000 [ 221.654628][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.654641][ T8729] R13: 00007f79ff1e6038 R14: 00007f79ff1e5fa0 R15: 00007ffe01a0fc48 [ 221.654674][ T8729] [ 222.379345][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 224.587043][ T8773] usb usb36: usbfs: process 8773 (syz.3.593) did not claim interface 0 before use [ 224.852160][ T8778] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 225.316313][ T8781] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 225.861052][ T8792] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 226.203316][ T8794] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input54 [ 227.397794][ T8818] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 227.659316][ T8819] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input56 [ 228.109790][ T8836] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input57 [ 228.561539][ T8839] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input58 [ 229.096392][ T8846] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input59 [ 229.402676][ T8848] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input60 syzkaller syzkaller login: [ 231.025808][ T8887] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input61 [ 231.202490][ T8889] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input62 [ 232.417068][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 233.139675][ T8940] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 233.491093][ T8947] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 233.838893][ T8949] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 234.162159][ T8965] tipc: Started in network mode [ 234.167958][ T8965] tipc: Node identity fe820562, cluster identity 4711 [ 234.175537][ T8965] tipc: Node number set to 4269933922 [ 234.213198][ T8953] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 234.389559][ T8968] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 234.516100][ T8975] random: crng reseeded on system resumption [ 235.096978][ T8969] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 237.943689][ T9139] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 238.377795][ T9144] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 239.515183][ T30] audit: type=1804 audit(4294967317.600:8): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.665" name="file0" dev="tmpfs" ino=1156 res=1 errno=0 [ 239.572764][ T30] audit: type=1800 audit(4294967317.600:9): pid=9185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.665" name="file0" dev="tmpfs" ino=1156 res=0 errno=0 [ 240.533818][ T9219] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 240.874773][ T9223] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73 [ 244.950899][ T9303] vhci_hcd: not connected 4 [ 245.091221][ T9303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.109504][ T9303] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 245.202784][ T9303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.259038][ T9303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.317152][ T9303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.745165][ T9315] can: request_module (can-proto-0) failed. [ 247.166040][ T5852] Bluetooth: hci0: command 0x0419 tx timeout [ 247.246109][ T5852] Bluetooth: hci1: command 0x0419 tx timeout [ 247.328713][ T5852] Bluetooth: hci3: command 0x0419 tx timeout [ 247.328942][ T51] Bluetooth: hci2: command 0x0419 tx timeout syzkaller syzkaller login: [ 248.989096][ T9392] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 249.247066][ T51] Bluetooth: hci0: command 0x0419 tx timeout [ 249.990870][ T9394] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 250.447915][ T9420] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76 [ 251.033134][ T9411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.092668][ T9411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.143122][ T9411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.166229][ T9411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.250405][ T9424] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input77 [ 252.369268][ T51] Bluetooth: hci0: command 0x0419 tx timeout [ 253.166638][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 253.166648][ T5852] Bluetooth: hci1: command 0x0419 tx timeout [ 253.246216][ T5852] Bluetooth: hci3: command 0x0419 tx timeout [ 253.615846][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.723'. [ 254.941696][ T9514] netlink: 342 bytes leftover after parsing attributes in process `syz.1.730'. [ 255.050667][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.732'. [ 255.108993][ T9519] hub 8-0:1.0: USB hub found [ 255.138414][ T9519] hub 8-0:1.0: 1 port detected [ 255.608649][ T9538] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 255.809888][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.822325][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.510738][ T9566] FAULT_INJECTION: forcing a failure. [ 256.510738][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 256.525044][ T9566] CPU: 1 UID: 0 PID: 9566 Comm: syz.2.745 Tainted: G U syzkaller #0 PREEMPT(full) [ 256.525087][ T9566] Tainted: [U]=USER [ 256.525096][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.525111][ T9566] Call Trace: [ 256.525120][ T9566] [ 256.525131][ T9566] dump_stack_lvl+0x16c/0x1f0 [ 256.525164][ T9566] should_fail_ex+0x512/0x640 [ 256.525193][ T9566] ? fs_reclaim_acquire+0xae/0x150 [ 256.525234][ T9566] should_failslab+0xc2/0x120 [ 256.525269][ T9566] kmem_cache_alloc_noprof+0x75/0x6e0 [ 256.525298][ T9566] ? __kernfs_new_node+0xd2/0x8e0 [ 256.525340][ T9566] ? __kernfs_new_node+0xd2/0x8e0 [ 256.525370][ T9566] __kernfs_new_node+0xd2/0x8e0 [ 256.525409][ T9566] ? __pfx___kernfs_new_node+0x10/0x10 [ 256.525461][ T9566] ? find_held_lock+0x2b/0x80 [ 256.525495][ T9566] ? kernfs_root+0xee/0x2a0 [ 256.525537][ T9566] kernfs_new_node+0x13c/0x1e0 [ 256.525582][ T9566] __kernfs_create_file+0x53/0x350 [ 256.525612][ T9566] sysfs_add_file_mode_ns+0x207/0x3c0 [ 256.525650][ T9566] internal_create_group+0x578/0xf30 [ 256.525693][ T9566] ? __pfx_internal_create_group+0x10/0x10 [ 256.525733][ T9566] ? kernfs_create_link+0x1bd/0x240 [ 256.525765][ T9566] internal_create_groups+0x9d/0x150 [ 256.525802][ T9566] device_add+0x731/0x1aa0 [ 256.525829][ T9566] ? __pfx_device_add+0x10/0x10 [ 256.525867][ T9566] ? __pfx___might_resched+0x10/0x10 [ 256.525896][ T9566] ? is_dynamic_key+0xb4/0x160 [ 256.525942][ T9566] __add_disk+0x457/0xf00 [ 256.525975][ T9566] add_disk_fwnode+0x13f/0x5d0 [ 256.526004][ T9566] nbd_dev_add+0x783/0xbb0 [ 256.526040][ T9566] ? __pfx_nbd_dev_add+0x10/0x10 [ 256.526096][ T9566] ? bpf_lsm_capable+0x9/0x10 [ 256.526133][ T9566] ? __radix_tree_lookup+0x21f/0x2c0 [ 256.526176][ T9566] nbd_genl_connect+0x8b0/0x1c60 [ 256.526213][ T9566] ? __pfx_nbd_genl_connect+0x10/0x10 [ 256.526249][ T9566] ? __nla_parse+0x40/0x60 [ 256.526287][ T9566] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 256.526323][ T9566] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 256.526364][ T9566] genl_family_rcv_msg_doit+0x209/0x2f0 [ 256.526399][ T9566] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 256.526432][ T9566] ? genl_get_cmd+0x194/0x580 [ 256.526484][ T9566] ? __radix_tree_lookup+0x21f/0x2c0 [ 256.526529][ T9566] genl_rcv_msg+0x55c/0x800 [ 256.526567][ T9566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.526606][ T9566] ? __pfx_nbd_genl_connect+0x10/0x10 [ 256.526652][ T9566] netlink_rcv_skb+0x158/0x420 [ 256.526680][ T9566] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.526712][ T9566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.526757][ T9566] ? netlink_deliver_tap+0x1ae/0xd30 [ 256.526790][ T9566] genl_rcv+0x28/0x40 [ 256.526818][ T9566] netlink_unicast+0x5a7/0x870 [ 256.526852][ T9566] ? __pfx_netlink_unicast+0x10/0x10 [ 256.526882][ T9566] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 256.526908][ T9566] ? __lock_acquire+0xb97/0x1ce0 [ 256.526955][ T9566] netlink_sendmsg+0x8c8/0xdd0 [ 256.526990][ T9566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.527024][ T9566] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 256.527060][ T9566] ____sys_sendmsg+0xa95/0xc70 [ 256.527094][ T9566] ? copy_msghdr_from_user+0x10a/0x160 [ 256.527120][ T9566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.527162][ T9566] ? __pfx_futex_wake_mark+0x10/0x10 [ 256.527195][ T9566] ___sys_sendmsg+0x134/0x1d0 [ 256.527223][ T9566] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.527296][ T9566] __sys_sendmsg+0x16d/0x220 [ 256.527322][ T9566] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.527345][ T9566] ? __x64_sys_futex+0x1e0/0x4c0 [ 256.527398][ T9566] do_syscall_64+0xcd/0x4b0 [ 256.527424][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.527452][ T9566] RIP: 0033:0x7f6fa778eec9 [ 256.527471][ T9566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.527492][ T9566] RSP: 002b:00007f6fa85ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.527513][ T9566] RAX: ffffffffffffffda RBX: 00007f6fa79e5fa0 RCX: 00007f6fa778eec9 [ 256.527528][ T9566] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 256.527541][ T9566] RBP: 00007f6fa7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 256.527554][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.527567][ T9566] R13: 00007f6fa79e6038 R14: 00007f6fa79e5fa0 R15: 00007ffcb5135bf8 [ 256.527597][ T9566] [ 257.138883][ T9581] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 257.166229][ T9566] nbd: failed to add new device [ 258.554427][ T9606] netlink: 'syz.3.754': attribute type 28 has an invalid length. [ 258.579182][ T9606] netlink: 'syz.3.754': attribute type 3 has an invalid length. [ 258.597753][ T9606] netlink: 306 bytes leftover after parsing attributes in process `syz.3.754'. [ 260.487771][ T9653] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.755'. [ 262.227687][ T9695] FAULT_INJECTION: forcing a failure. [ 262.227687][ T9695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 262.398363][ T9695] CPU: 0 UID: 0 PID: 9695 Comm: syz.3.770 Tainted: G U syzkaller #0 PREEMPT(full) [ 262.398400][ T9695] Tainted: [U]=USER [ 262.398408][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.398420][ T9695] Call Trace: [ 262.398428][ T9695] [ 262.398437][ T9695] dump_stack_lvl+0x16c/0x1f0 [ 262.398469][ T9695] should_fail_ex+0x512/0x640 [ 262.398501][ T9695] get_futex_key+0x1d0/0x1560 [ 262.398538][ T9695] ? __pfx_get_futex_key+0x10/0x10 [ 262.398566][ T9695] ? __lock_acquire+0x62e/0x1ce0 [ 262.398603][ T9695] ? rcu_is_watching+0x12/0xc0 [ 262.398631][ T9695] ? trace_fib_table_lookup+0x19f/0x220 [ 262.398660][ T9695] futex_wait_setup+0x9d/0x550 [ 262.398696][ T9695] __futex_wait+0x193/0x2f0 [ 262.398723][ T9695] ? __pfx___futex_wait+0x10/0x10 [ 262.398750][ T9695] ? __pfx_futex_wake_mark+0x10/0x10 [ 262.398777][ T9695] ? futex_private_hash_put+0x176/0x300 [ 262.398810][ T9695] ? futex_private_hash_put+0x18a/0x300 [ 262.398844][ T9695] futex_wait+0xe8/0x380 [ 262.398867][ T9695] ? __pfx_futex_wait+0x10/0x10 [ 262.398899][ T9695] ? __local_bh_enable_ip+0xa4/0x120 [ 262.398929][ T9695] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.398951][ T9695] ? ip4_datagram_connect+0x38/0x50 [ 262.398982][ T9695] ? __local_bh_enable_ip+0xa4/0x120 [ 262.399018][ T9695] do_futex+0x229/0x350 [ 262.399059][ T9695] ? __pfx_do_futex+0x10/0x10 [ 262.399095][ T9695] ? __sys_connect+0xe0/0x160 [ 262.399135][ T9695] __x64_sys_futex+0x1e0/0x4c0 [ 262.399174][ T9695] ? __pfx___x64_sys_futex+0x10/0x10 [ 262.399208][ T9695] ? xfd_validate_state+0x61/0x180 [ 262.399229][ T9695] ? __sys_setsockopt+0x140/0x1a0 [ 262.399262][ T9695] do_syscall_64+0xcd/0x4b0 [ 262.399290][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.399314][ T9695] RIP: 0033:0x7f79fef8eec9 [ 262.399333][ T9695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.399355][ T9695] RSP: 002b:00007f79ffdbf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 262.399378][ T9695] RAX: ffffffffffffffda RBX: 00007f79ff1e6098 RCX: 00007f79fef8eec9 [ 262.399393][ T9695] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f79ff1e6098 [ 262.399408][ T9695] RBP: 00007f79ff1e6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.399422][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.399436][ T9695] R13: 00007f79ff1e6128 R14: 00007ffe01a0fb60 R15: 00007ffe01a0fc48 [ 262.399468][ T9695] [ 263.124094][ T9694] kexec: Could not allocate control_code_buffer [ 263.504870][ T9718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.776'. [ 263.594643][ T9719] hub 8-0:1.0: USB hub found [ 263.621879][ T9719] hub 8-0:1.0: 1 port detected [ 263.667436][ T9703] netlink: 342 bytes leftover after parsing attributes in process `syz.2.772'. [ 265.324263][ T9734] bond0: option all_slaves_active: invalid value () [ 266.664803][ T9778] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input78 [ 267.413809][ T9780] sd 0:0:1:0: PR command failed: 1026 [ 267.436038][ T9780] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 267.576134][ T9780] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 268.816674][ T9809] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79 [ 270.366647][ T9823] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input80 [ 271.576863][ T9824] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81 [ 272.924256][ T9881] netlink: 186 bytes leftover after parsing attributes in process `syz.0.804'. [ 275.284875][ T9933] Process accounting resumed [ 278.048131][ T9995] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 278.393943][ T9998] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 279.597011][T10045] lo: entered allmulticast mode [ 279.620435][T10043] lo: left allmulticast mode [ 280.827859][T10080] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 280.900706][T10082] sd 0:0:1:0: PR command failed: 1026 [ 280.953168][T10082] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 280.963832][T10082] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 281.132660][T10091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 281.258385][T10091] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 282.032328][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 282.972078][T10146] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input86 [ 284.031015][T10160] kexec: Could not allocate control_code_buffer [ 284.484812][T10180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.866'. [ 284.497175][T10180] hsr_slave_0: left promiscuous mode [ 284.505288][T10180] hsr_slave_1: left promiscuous mode [ 285.044751][T10190] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input87 [ 285.561597][T10196] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 287.788036][T10261] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89 [ 288.479843][T10263] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 289.407744][T10283] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 291.873531][ T5852] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 291.987459][ T30] audit: type=1326 audit(4294967370.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.3.900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79fef8eec9 code=0x0 [ 292.026200][ T30] audit: type=1326 audit(4294967370.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10351 comm="syz.3.900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79fef8eec9 code=0x0 [ 293.338004][T10382] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92 [ 293.438012][T10383] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93 [ 293.742824][T10387] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94 [ 294.076048][T10389] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95 [ 295.868448][T10430] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96 [ 296.092179][T10432] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input97 [ 298.013902][T10450] cgroup: fork rejected by pids controller in /syz3 [ 300.521656][T10541] netlink: 342 bytes leftover after parsing attributes in process `syz.3.927'. [ 301.224441][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 301.304381][T10551] tc_dump_action: action bad kind [ 303.834684][T10603] vhci_hcd: invalid port number 16 [ 303.881702][T10603] vhci_hcd: invalid port number 16 [ 305.476108][T10618] Process accounting paused [ 310.304064][T10455] syz.3.920 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 310.389459][T10455] CPU: 0 UID: 0 PID: 10455 Comm: syz.3.920 Tainted: G U syzkaller #0 PREEMPT(full) [ 310.389499][T10455] Tainted: [U]=USER [ 310.389507][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.389531][T10455] Call Trace: [ 310.389540][T10455] [ 310.389549][T10455] dump_stack_lvl+0x16c/0x1f0 [ 310.389580][T10455] dump_header+0x101/0x930 [ 310.389612][T10455] oom_kill_process+0x272/0xa40 [ 310.389645][T10455] out_of_memory+0x350/0x1700 [ 310.389680][T10455] ? __pfx_out_of_memory+0x10/0x10 [ 310.389723][T10455] mem_cgroup_out_of_memory+0x118/0x130 [ 310.389749][T10455] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 310.389783][T10455] ? do_raw_spin_unlock+0x172/0x230 [ 310.389816][T10455] try_charge_memcg+0x687/0xd40 [ 310.389855][T10455] ? __pfx_try_charge_memcg+0x10/0x10 [ 310.389887][T10455] ? find_held_lock+0x1/0x80 [ 310.389916][T10455] ? rcu_read_unlock+0x17/0x60 [ 310.389959][T10455] charge_memcg+0x8a/0x230 [ 310.389991][T10455] __mem_cgroup_charge+0x2b/0x1e0 [ 310.390028][T10455] shmem_alloc_and_add_folio+0x514/0xc20 [ 310.390065][T10455] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 310.390095][T10455] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 310.390132][T10455] shmem_get_folio_gfp+0x67f/0x1610 [ 310.390168][T10455] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 310.390207][T10455] shmem_write_begin+0x160/0x300 [ 310.390238][T10455] ? __pfx_shmem_write_begin+0x10/0x10 [ 310.390263][T10455] ? timestamp_truncate+0x21e/0x2d0 [ 310.390293][T10455] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 310.390335][T10455] generic_perform_write+0x3c1/0x900 [ 310.390390][T10455] ? __pfx_generic_perform_write+0x10/0x10 [ 310.390430][T10455] ? inode_needs_update_time.part.0+0x191/0x270 [ 310.390470][T10455] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 310.390501][T10455] shmem_file_write_iter+0x10e/0x140 [ 310.390535][T10455] __kernel_write_iter+0x31a/0xb10 [ 310.390568][T10455] ? __pfx___kernel_write_iter+0x10/0x10 [ 310.390596][T10455] ? __up_read+0x1f8/0x750 [ 310.390626][T10455] ? dump_user_range+0x756/0xb70 [ 310.390660][T10455] dump_user_range+0x413/0xb70 [ 310.390700][T10455] ? __pfx_dump_user_range+0x10/0x10 [ 310.390729][T10455] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 310.390762][T10455] ? __pfx_writenote+0x10/0x10 [ 310.390804][T10455] elf_core_dump+0x29c3/0x3c00 [ 310.390853][T10455] ? __pfx_elf_core_dump+0x10/0x10 [ 310.390879][T10455] ? kasan_save_stack+0x33/0x60 [ 310.390907][T10455] ? kasan_save_track+0x14/0x30 [ 310.390935][T10455] ? __kasan_kmalloc+0xaa/0xb0 [ 310.390961][T10455] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 310.390989][T10455] ? vfs_coredump+0x1ddc/0x5670 [ 310.391013][T10455] ? arch_do_signal_or_restart+0x8f/0x790 [ 310.391044][T10455] ? irqentry_exit_to_user_mode+0x141/0x2b0 [ 310.391068][T10455] ? asm_exc_page_fault+0x26/0x30 [ 310.391101][T10455] ? 0xffffffffff600000 [ 310.391186][T10455] ? vfs_coredump+0x2b9c/0x5670 [ 310.391209][T10455] vfs_coredump+0x2b9c/0x5670 [ 310.391249][T10455] ? __pfx_vfs_coredump+0x10/0x10 [ 310.391276][T10455] ? __lock_acquire+0x62e/0x1ce0 [ 310.391327][T10455] ? lock_acquire+0x179/0x350 [ 310.391379][T10455] ? is_bpf_text_address+0x8a/0x1a0 [ 310.391414][T10455] ? bpf_ksym_find+0x124/0x1c0 [ 310.391454][T10455] ? unwind_get_return_address+0x59/0xa0 [ 310.391484][T10455] ? arch_stack_walk+0xa6/0x100 [ 310.391528][T10455] ? stack_trace_save+0x8e/0xc0 [ 310.391558][T10455] ? __pfx_stack_trace_save+0x10/0x10 [ 310.391590][T10455] ? stack_depot_save_flags+0x29/0x9c0 [ 310.391620][T10455] ? __lock_acquire+0xb97/0x1ce0 [ 310.391728][T10455] ? proc_coredump_connector+0x2d1/0x4f0 [ 310.391755][T10455] ? __pfx_proc_coredump_connector+0x10/0x10 [ 310.391791][T10455] ? rcu_is_watching+0x12/0xc0 [ 310.391825][T10455] get_signal+0x22e1/0x26d0 [ 310.391866][T10455] ? force_sig_fault+0xc4/0x100 [ 310.391899][T10455] ? __pfx_get_signal+0x10/0x10 [ 310.391941][T10455] arch_do_signal_or_restart+0x8f/0x790 [ 310.391973][T10455] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 310.392001][T10455] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 310.392058][T10455] irqentry_exit_to_user_mode+0x141/0x2b0 [ 310.392085][T10455] asm_exc_page_fault+0x26/0x30 [ 310.392107][T10455] RIP: 0033:0x41000 [ 310.392130][T10455] Code: Unable to access opcode bytes at 0x40fd6. [ 310.392141][T10455] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 310.392160][T10455] RAX: 0000000000000000 RBX: 00007f79ff1e6270 RCX: 00007f79fef8eec9 [ 310.392176][T10455] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 310.392190][T10455] RBP: 00007f79ff011f91 R08: 0000000000000002 R09: 0000000000000000 [ 310.392209][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.392223][T10455] R13: 00007f79ff1e6308 R14: 00007f79ff1e6270 R15: 00007ffe01a0fc48 [ 310.392258][T10455] [ 310.392292][T10455] memory: usage 307032kB, limit 307200kB, failcnt 24530 [ 311.188651][T10455] memory+swap: usage 432096kB, limit 9007199254740988kB, failcnt 0 [ 311.220847][T10455] kmem: usage 3508kB, limit 9007199254740988kB, failcnt 0 [ 311.299112][T10455] Memory cgroup stats for /syz3: [ 311.299357][T10455] cache 310124544 [ 311.321032][T10455] rss 753664 [ 311.324263][T10455] rss_huge 0 [ 311.327972][T10455] shmem 310124544 [ 311.331704][T10455] mapped_file 14995456 [ 311.335776][T10455] dirty 0 [ 311.412007][T10455] writeback 0 [ 311.415329][T10455] workingset_refault_anon 1098 [ 311.585679][T10455] workingset_refault_file 2168 [ 311.590746][T10455] swap 127893504 [ 311.594307][T10455] swapcached 102400 [ 311.598285][T10455] pgpgin 316317 [ 311.601750][T10455] pgpgout 252302 [ 311.605296][T10455] pgfault 114315 [ 311.608975][T10455] pgmajfault 230 [ 311.612617][T10455] inactive_anon 149839872 [ 311.617015][T10455] active_anon 160899072 [ 311.621175][T10455] inactive_file 0 [ 311.624816][T10455] active_file 0 [ 311.628499][T10455] unevictable 0 [ 311.631955][T10455] hierarchical_memory_limit 314572800 [ 311.651580][T10455] hierarchical_memsw_limit 9223372036854771712 [ 311.658345][T10455] total_cache 310124544 [ 311.662507][T10455] total_rss 753664 [ 311.709825][T10455] total_rss_huge 0 [ 311.715277][T10455] total_shmem 310124544 [ 311.719848][T10455] total_mapped_file 14995456 [ 311.724531][T10455] total_dirty 0 [ 311.792401][T10455] total_writeback 0 [ 311.812313][T10455] total_workingset_refault_anon 1098 [ 311.833830][T10455] total_workingset_refault_file 2168 [ 311.886256][T10455] total_swap 127893504 [ 311.893802][T10455] total_swapcached 102400 [ 311.903412][T10455] total_pgpgin 316317 [ 311.946043][T10455] total_pgpgout 252302 [ 311.974426][T10455] total_pgfault 114315 [ 312.006426][T10455] total_pgmajfault 230 [ 312.010540][T10455] total_inactive_anon 149839872 [ 312.036330][T10455] total_active_anon 160899072 [ 312.041047][T10455] total_inactive_file 0 [ 312.045212][T10455] total_active_file 0 [ 312.063771][T10455] total_unevictable 0 [ 312.071863][T10455] anon_cost 0 [ 312.075212][T10455] file_cost 0 [ 312.098755][T10455] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.920,pid=10479,uid=0 [ 312.158331][T10455] Memory cgroup out of memory: Killed process 10479 (syz.3.920) total-vm:131872kB, anon-rss:1368kB, file-rss:34680kB, shmem-rss:14592kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 312.352325][T10726] FAULT_INJECTION: forcing a failure. [ 312.352325][T10726] name failslab, interval 1, probability 0, space 0, times 0 [ 312.426009][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.2.966 Tainted: G U syzkaller #0 PREEMPT(full) [ 312.426052][T10726] Tainted: [U]=USER [ 312.426061][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.426076][T10726] Call Trace: [ 312.426085][T10726] [ 312.426096][T10726] dump_stack_lvl+0x16c/0x1f0 [ 312.426130][T10726] should_fail_ex+0x512/0x640 [ 312.426161][T10726] ? __kmalloc_noprof+0xca/0x880 [ 312.426192][T10726] should_failslab+0xc2/0x120 [ 312.426230][T10726] __kmalloc_noprof+0xdd/0x880 [ 312.426256][T10726] ? __kernel_text_address+0xd/0x40 [ 312.426285][T10726] ? constrain_params_by_rules+0x175/0xca0 [ 312.426325][T10726] ? constrain_params_by_rules+0x175/0xca0 [ 312.426358][T10726] constrain_params_by_rules+0x175/0xca0 [ 312.426398][T10726] ? stack_trace_save+0x8e/0xc0 [ 312.426438][T10726] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 312.426479][T10726] ? __kasan_kmalloc+0xaa/0xb0 [ 312.426510][T10726] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 312.426545][T10726] ? snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 312.426577][T10726] ? snd_pcm_oss_sync+0x32e/0x840 [ 312.426620][T10726] ? rcu_is_watching+0x12/0xc0 [ 312.426657][T10726] ? snd_interval_refine+0x2fa/0x580 [ 312.426686][T10726] snd_pcm_hw_refine+0x7de/0xad0 [ 312.426737][T10726] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 312.426785][T10726] ? __asan_memset+0x23/0x50 [ 312.426814][T10726] ? _snd_pcm_hw_param_min+0x259/0x630 [ 312.426853][T10726] snd_pcm_oss_change_params_locked+0x65e/0x3a30 [ 312.426903][T10726] ? __mutex_lock+0x1c5/0x1060 [ 312.426931][T10726] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 312.426995][T10726] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 312.427032][T10726] snd_pcm_oss_sync+0x32e/0x840 [ 312.427069][T10726] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 312.427102][T10726] snd_pcm_oss_release+0x28b/0x310 [ 312.427137][T10726] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 312.427169][T10726] __fput+0x3ff/0xb70 [ 312.427214][T10726] task_work_run+0x150/0x240 [ 312.427243][T10726] ? __pfx_task_work_run+0x10/0x10 [ 312.427271][T10726] ? __pfx___do_sys_close_range+0x10/0x10 [ 312.427311][T10726] exit_to_user_mode_loop+0xec/0x130 [ 312.427340][T10726] do_syscall_64+0x419/0x4b0 [ 312.427370][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.427396][T10726] RIP: 0033:0x7f6fa778eec9 [ 312.427418][T10726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.427441][T10726] RSP: 002b:00007f6fa85ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 312.427465][T10726] RAX: 0000000000000000 RBX: 00007f6fa79e5fa0 RCX: 00007f6fa778eec9 [ 312.427481][T10726] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 312.427495][T10726] RBP: 00007f6fa7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.427510][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.427524][T10726] R13: 00007f6fa79e6038 R14: 00007f6fa79e5fa0 R15: 00007ffcb5135bf8 [ 312.427560][T10726] [ 314.373996][ T32] oom_reaper: reaped process 10479 (syz.3.920), now anon-rss:12kB, file-rss:33504kB, shmem-rss:14336kB [ 315.856302][T10769] mtrr: base(0x10000) is not aligned on a size(0x0000) boundary [ 316.429315][T10476] syz.3.920 (10476) used greatest stack depth: 19640 bytes left [ 317.202466][T10770] kexec: Could not allocate control_code_buffer [ 317.249711][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.256403][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.379301][T10467] syz.3.920 (10467) used greatest stack depth: 17864 bytes left [ 318.026516][T10454] delete_channel: no stack [ 319.137278][T10795] zswap: compressor not available [ 319.150307][T10795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98 [ 319.422718][T10801] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input99 [ 319.566571][T10806] openvswitch: HfR: Dropping previously announced user features [ 321.320909][T10845] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100 [ 322.059542][T10860] netlink: 268 bytes leftover after parsing attributes in process `syz.1.993'. [ 322.865742][T10877] netlink: 268 bytes leftover after parsing attributes in process `syz.3.995'. [ 325.933546][T10950] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 328.476363][T11020] random: crng reseeded on system resumption [ 328.918668][T10994] kexec: Could not allocate control_code_buffer [ 329.810653][T11051] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1031'. [ 333.136743][T11114] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 333.258149][T11118] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input101 [ 334.215630][T11147] random: crng reseeded on system resumption [ 337.363164][T11133] Process accounting resumed [ 338.182532][T11201] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1065'. [ 338.360807][T11205] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input102 [ 338.587109][T11210] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input103 [ 338.951740][T11222] FAULT_INJECTION: forcing a failure. [ 338.951740][T11222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.988969][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.3.1068 Tainted: G U syzkaller #0 PREEMPT(full) [ 338.989004][T11222] Tainted: [U]=USER [ 338.989011][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 338.989024][T11222] Call Trace: [ 338.989032][T11222] [ 338.989040][T11222] dump_stack_lvl+0x16c/0x1f0 [ 338.989068][T11222] should_fail_ex+0x512/0x640 [ 338.989101][T11222] strncpy_from_user+0x3b/0x2e0 [ 338.989130][T11222] getname_flags.part.0+0x8f/0x550 [ 338.989170][T11222] getname_flags+0x93/0xf0 [ 338.989194][T11222] do_sys_openat2+0xb8/0x1d0 [ 338.989229][T11222] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.989263][T11222] ? find_held_lock+0x2b/0x80 [ 338.989298][T11222] __x64_sys_openat+0x174/0x210 [ 338.989318][T11222] ? __pfx___x64_sys_openat+0x10/0x10 [ 338.989354][T11222] do_syscall_64+0xcd/0x4b0 [ 338.989382][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.989404][T11222] RIP: 0033:0x7f79fef8eec9 [ 338.989423][T11222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.989445][T11222] RSP: 002b:00007f79ffd9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.989468][T11222] RAX: ffffffffffffffda RBX: 00007f79ff1e6180 RCX: 00007f79fef8eec9 [ 338.989483][T11222] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 338.989499][T11222] RBP: 00007f79ff011f91 R08: 0000000000000000 R09: 0000000000000000 [ 338.989515][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.989529][T11222] R13: 00007f79ff1e6218 R14: 00007f79ff1e6180 R15: 00007ffe01a0fc48 [ 338.989561][T11222] [ 340.414558][T11233] kexec: Could not allocate control_code_buffer [ 340.737587][T11256] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input104 [ 341.015837][T11258] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105 [ 342.827744][T11301] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input106 [ 342.911270][T11303] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input107 [ 343.207978][T11313] FAULT_INJECTION: forcing a failure. [ 343.207978][T11313] name failslab, interval 1, probability 0, space 0, times 0 [ 343.224813][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1093'. [ 343.273968][T11313] CPU: 1 UID: 0 PID: 11313 Comm: syz.3.1094 Tainted: G U syzkaller #0 PREEMPT(full) [ 343.274012][T11313] Tainted: [U]=USER [ 343.274020][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.274034][T11313] Call Trace: [ 343.274042][T11313] [ 343.274052][T11313] dump_stack_lvl+0x16c/0x1f0 [ 343.274083][T11313] should_fail_ex+0x512/0x640 [ 343.274109][T11313] ? fs_reclaim_acquire+0xae/0x150 [ 343.274147][T11313] should_failslab+0xc2/0x120 [ 343.274195][T11313] kmem_cache_alloc_noprof+0x75/0x6e0 [ 343.274220][T11313] ? __pfx_map_id_range_down+0x10/0x10 [ 343.274244][T11313] ? rcu_is_watching+0x12/0xc0 [ 343.274273][T11313] ? security_inode_alloc+0x3b/0x2b0 [ 343.274308][T11313] ? security_inode_alloc+0x3b/0x2b0 [ 343.274335][T11313] security_inode_alloc+0x3b/0x2b0 [ 343.274365][T11313] inode_init_always_gfp+0xce4/0x1030 [ 343.274397][T11313] alloc_inode+0x86/0x240 [ 343.274430][T11313] new_inode+0x22/0x1c0 [ 343.274468][T11313] hugetlbfs_get_inode+0x354/0x730 [ 343.274504][T11313] hugetlb_file_setup+0x15b/0x620 [ 343.274536][T11313] ksys_mmap_pgoff+0x189/0x5c0 [ 343.274575][T11313] __x64_sys_mmap+0x125/0x190 [ 343.274601][T11313] do_syscall_64+0xcd/0x4b0 [ 343.274630][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.274656][T11313] RIP: 0033:0x7f79fef8eec9 [ 343.274676][T11313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.274699][T11313] RSP: 002b:00007f79ffde0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 343.274724][T11313] RAX: ffffffffffffffda RBX: 00007f79ff1e5fa0 RCX: 00007f79fef8eec9 [ 343.274741][T11313] RDX: 0000000000000003 RSI: 0000000000280006 RDI: 0000000000000000 [ 343.274757][T11313] RBP: 00007f79ff011f91 R08: ffffffffffffffff R09: 0001300000000000 [ 343.274774][T11313] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 343.274789][T11313] R13: 00007f79ff1e6038 R14: 00007f79ff1e5fa0 R15: 00007ffe01a0fc48 [ 343.274824][T11313] [ 346.270265][T11376] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 346.525355][T11390] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input108 [ 346.868323][T11395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input109 [ 347.671829][T11412] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 347.717210][T11414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input110 [ 347.850302][T11418] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input111 [ 348.593257][T11442] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input112 [ 348.811447][T11447] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 349.180116][T11468] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 349.210610][T11468] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 349.974553][T11481] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1134'. [ 350.307211][T11495] random: crng reseeded on system resumption [ 350.391364][T11501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1138'. [ 350.423855][T11501] bridge0: entered allmulticast mode [ 350.770313][T11507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 351.017562][T11511] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 351.539580][T11528] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 351.591216][T11528] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 351.600716][T11528] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 351.609900][T11528] page_type: f5(slab) [ 351.613925][T11528] raw: 00fff00000000040 ffff88801b027140 dead000000000122 0000000000000000 [ 351.622966][T11528] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 351.631815][T11528] head: 00fff00000000040 ffff88801b027140 dead000000000122 0000000000000000 [ 351.641643][T11528] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 351.650774][T11528] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 351.659839][T11528] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 351.675977][T11528] page dumped because: unmovable page [ 351.681573][T11528] page_owner tracks the page as allocated [ 351.689700][T11528] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11429, tgid 11429 (syz-executor), ts 348280926910, free_ts 348277902759 [ 351.697100][T11531] [U] [ 351.714759][T11531] [U] [ 351.717474][T11531] [U] [ 351.720153][T11531] [U] [ 351.760123][T11528] post_alloc_hook+0x1c0/0x230 [ 351.768089][T11528] get_page_from_freelist+0x10a3/0x3a30 [ 351.771142][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 351.781066][T11528] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 351.816180][T11528] alloc_pages_mpol+0x1fb/0x550 [ 351.823871][T11528] new_slab+0x24a/0x360 [ 351.828254][T11528] ___slab_alloc+0xdc4/0x1ae0 [ 351.829873][T11531] [U] [ 351.833038][T11528] __slab_alloc.constprop.0+0x63/0x110 [ 351.835679][T11531] [U] [ 351.835717][T11531] [U] [ 351.841266][T11528] __kmalloc_noprof+0x501/0x880 [ 351.843899][T11531] [U] [ 351.847125][T11528] tomoyo_realpath_from_path+0xc2/0x6e0 [ 351.860204][T11528] tomoyo_path_perm+0x274/0x460 [ 351.865118][T11528] tomoyo_path_symlink+0x97/0xe0 [ 351.870177][T11528] security_path_symlink+0x152/0x2e0 [ 351.875498][T11528] do_symlinkat+0x10d/0x310 [ 351.880213][T11528] __x64_sys_symlinkat+0x93/0xc0 [ 351.885172][T11528] do_syscall_64+0xcd/0x4b0 [ 351.892794][T11528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.899374][T11531] [U] [ 351.900066][T11528] page last free pid 5836 tgid 5836 stack trace: [ 351.902087][T11531] [U] [ 351.908603][T11528] __free_frozen_pages+0x7df/0x1160 [ 351.911076][T11531] [U] [ 351.911115][T11531] [U] [ 351.916317][T11528] __put_partials+0x130/0x170 [ 351.928534][T11528] qlist_free_all+0x4d/0x120 [ 351.935357][T11528] kasan_quarantine_reduce+0x195/0x1e0 [ 351.942096][T11528] __kasan_slab_alloc+0x69/0x90 [ 351.947316][T11528] kmem_cache_alloc_noprof+0x250/0x6e0 [ 351.955783][T11528] vm_area_dup+0x27/0x8d0 [ 351.960236][T11528] dup_mmap+0x86f/0x2280 [ 351.964557][T11528] copy_process+0x3f0c/0x76a0 [ 351.971697][T11531] [U] [ 351.974402][T11531] [U] [ 351.977092][T11531] [U] [ 351.979778][T11531] [U] [ 351.986064][T11528] kernel_clone+0xfc/0x930 [ 351.990603][T11528] __do_sys_clone+0xce/0x120 [ 351.995241][T11528] do_syscall_64+0xcd/0x4b0 [ 352.018739][T11531] [U] [ 352.021474][T11531] [U] [ 352.024180][T11531] [U] [ 352.026883][T11531] [U] [ 352.029931][T11531] [U] [ 352.032642][T11531] [U] [ 352.035348][T11531] [U] [ 352.038055][T11531] [U] [ 352.042319][T11531] [U] [ 352.045041][T11531] [U] [ 352.047744][T11531] [U] [ 352.050463][T11531] [U] [ 352.053663][T11531] [U] [ 352.056385][T11531] [U] [ 352.059092][T11531] [U] [ 352.061798][T11531] [U] [ 352.066177][T11531] [U] [ 352.068893][T11531] [U] [ 352.071596][T11531] [U] [ 352.074298][T11531] [U] [ 352.077517][T11531] [U] [ 352.080227][T11531] [U] [ 352.082929][T11531] [U] [ 352.085633][T11531] [U] [ 352.089052][T11531] [U] [ 352.091808][T11531] [U] [ 352.094521][T11531] [U] [ 352.097224][T11531] [U] [ 352.101173][T11531] [U] [ 352.103895][T11531] [U] [ 352.106605][T11531] [U] [ 352.109308][T11531] [U] [ 352.119202][T11531] [U] [ 352.121925][T11531] [U] [ 352.124634][T11531] [U] [ 352.127349][T11531] [U] [ 352.131011][T11531] [U] [ 352.133734][T11531] [U] [ 352.136440][T11531] [U] [ 352.139155][T11531] [U] [ 352.142570][T11531] [U] [ 352.145284][T11531] [U] [ 352.147991][T11531] [U] [ 352.150701][T11531] [U] [ 352.153804][T11531] [U] [ 352.156519][T11531] [U] [ 352.159248][T11531] [U] [ 352.161953][T11531] [U] [ 352.165383][T11531] [U] [ 352.168103][T11531] [U] [ 352.170810][T11531] [U] [ 352.173522][T11531] [U] [ 352.176627][T11531] [U] [ 352.179321][T11531] [U] [ 352.181994][T11531] [U] [ 352.184667][T11531] [U] [ 352.188694][T11528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.203440][T11539] ip6gretap0: entered allmulticast mode [ 352.306678][T11531] [U] [ 352.309423][T11531] [U] [ 352.312132][T11531] [U] [ 352.314836][T11531] [U] [ 352.332088][T11531] [U] [ 352.334825][T11531] [U] [ 352.337535][T11531] [U] [ 352.340243][T11531] [U] [ 352.351415][T11531] [U] [ 352.354158][T11531] [U] [ 352.356876][T11531] [U] [ 352.359584][T11531] [U] [ 352.373462][T11531] [U] [ 352.376206][T11531] [U] [ 352.378923][T11531] [U] [ 352.381634][T11531] [U] [ 352.717820][T11531] [U] [ 352.720577][T11531] [U] [ 352.723287][T11531] [U] [ 352.725992][T11531] [U] [ 352.836245][T11531] [U] [ 352.838962][T11531] [U] [ 352.841634][T11531] [U] [ 352.844324][T11531] [U] [ 352.956288][T11531] [U] [ 352.959026][T11531] [U] [ 352.961717][T11531] [U] [ 352.964476][T11531] [U] [ 352.967585][T11531] [U] [ 352.970303][T11531] [U] [ 352.973010][T11531] [U] [ 352.975712][T11531] [U] [ 352.982344][T11531] [U] [ 352.985084][T11531] [U] [ 352.987792][T11531] [U] [ 352.990492][T11531] [U] [ 353.010726][T11531] [U] [ 353.013477][T11531] [U] [ 353.016183][T11531] [U] [ 353.018883][T11531] [U] [ 353.023947][T11531] [U] [ 353.026682][T11531] [U] [ 353.029393][T11531] [U] [ 353.032158][T11531] [U] [ 353.070227][T11531] [U] [ 356.624924][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1162'. [ 356.684977][T11628] bridge0: entered allmulticast mode [ 357.170931][T11648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1164'. [ 357.187822][T11648] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1164'. [ 357.813015][T11666] FAULT_INJECTION: forcing a failure. [ 357.813015][T11666] name failslab, interval 1, probability 0, space 0, times 0 [ 357.847619][T11666] CPU: 1 UID: 0 PID: 11666 Comm: syz.3.1166 Tainted: G U syzkaller #0 PREEMPT(full) [ 357.847664][T11666] Tainted: [U]=USER [ 357.847673][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.847689][T11666] Call Trace: [ 357.847699][T11666] [ 357.847709][T11666] dump_stack_lvl+0x16c/0x1f0 [ 357.847745][T11666] should_fail_ex+0x512/0x640 [ 357.847775][T11666] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 357.847809][T11666] should_failslab+0xc2/0x120 [ 357.847846][T11666] kmem_cache_alloc_noprof+0x75/0x6e0 [ 357.847874][T11666] ? acpi_evaluate_integer+0xdd/0x200 [ 357.847908][T11666] ? status_show+0xa0/0x120 [ 357.847931][T11666] ? acpi_ps_alloc_op+0x25f/0x310 [ 357.847966][T11666] ? acpi_ps_alloc_op+0x25f/0x310 [ 357.847992][T11666] acpi_ps_alloc_op+0x25f/0x310 [ 357.848019][T11666] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.848050][T11666] acpi_ps_create_op+0x3dc/0xc20 [ 357.848081][T11666] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 357.848122][T11666] acpi_ps_parse_loop+0xdd8/0x1d00 [ 357.848155][T11666] ? rcu_is_watching+0x12/0xc0 [ 357.848187][T11666] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 357.848212][T11666] ? acpi_ut_create_thread_state+0x63/0x170 [ 357.848265][T11666] acpi_ps_parse_aml+0x3c1/0xcb0 [ 357.848299][T11666] acpi_ps_execute_method+0x55a/0xb30 [ 357.848332][T11666] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 357.848369][T11666] acpi_ns_evaluate+0x76c/0xca0 [ 357.848403][T11666] ? kasan_save_track+0x14/0x30 [ 357.848439][T11666] acpi_evaluate_object+0x1fa/0xa90 [ 357.848486][T11666] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 357.848526][T11666] ? __mutex_trylock_common+0xe9/0x250 [ 357.848572][T11666] acpi_evaluate_integer+0xdd/0x200 [ 357.848615][T11666] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 357.848672][T11666] ? __pfx_status_show+0x10/0x10 [ 357.848702][T11666] status_show+0xa0/0x120 [ 357.848728][T11666] ? __pfx_status_show+0x10/0x10 [ 357.848765][T11666] dev_attr_show+0x56/0xe0 [ 357.848804][T11666] ? __pfx_dev_attr_show+0x10/0x10 [ 357.848839][T11666] sysfs_kf_seq_show+0x216/0x3e0 [ 357.848878][T11666] seq_read_iter+0x50e/0x12d0 [ 357.848922][T11666] kernfs_fop_read_iter+0x46c/0x610 [ 357.848951][T11666] ? rw_verify_area+0xcf/0x6c0 [ 357.848983][T11666] vfs_read+0x8bc/0xcf0 [ 357.849018][T11666] ? __pfx___mutex_lock+0x10/0x10 [ 357.849046][T11666] ? __pfx_vfs_read+0x10/0x10 [ 357.849103][T11666] ksys_read+0x12a/0x250 [ 357.849134][T11666] ? __pfx_ksys_read+0x10/0x10 [ 357.849176][T11666] do_syscall_64+0xcd/0x4b0 [ 357.849206][T11666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.849233][T11666] RIP: 0033:0x7f79fef8eec9 [ 357.849254][T11666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.849279][T11666] RSP: 002b:00007f79ffde0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.849302][T11666] RAX: ffffffffffffffda RBX: 00007f79ff1e5fa0 RCX: 00007f79fef8eec9 [ 357.849319][T11666] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 357.849335][T11666] RBP: 00007f79ff011f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.849348][T11666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.849360][T11666] R13: 00007f79ff1e6038 R14: 00007f79ff1e5fa0 R15: 00007ffe01a0fc48 [ 357.849391][T11666] [ 357.851796][T11666] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 358.199904][T11667] netlink: zone id is out of range [ 358.246883][T11667] netlink: zone id is out of range [ 358.305616][T11667] netlink: zone id is out of range [ 358.321530][T11667] netlink: zone id is out of range [ 358.339805][T11667] netlink: zone id is out of range [ 358.358021][T11667] netlink: zone id is out of range [ 358.377847][T11667] netlink: zone id is out of range [ 358.408166][T11667] netlink: zone id is out of range [ 358.439379][T11667] netlink: zone id is out of range [ 358.470218][T11667] netlink: zone id is out of range [ 359.313113][T11697] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118 [ 359.504519][T11699] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119 [ 359.644220][T11698] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input120 [ 359.834442][T11701] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input121 [ 360.369660][T11723] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122 [ 360.977507][T11740] vivid-003: ================= START STATUS ================= [ 361.018193][T11740] vivid-003: Radio HW Seek Mode: Bounded [ 361.038932][T11740] vivid-003: Radio Programmable HW Seek: false [ 361.056845][T11729] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123 [ 361.074309][T11740] vivid-003: RDS Rx I/O Mode: Block I/O [ 361.120628][T11740] vivid-003: Generate RBDS Instead of RDS: false [ 361.154560][T11740] vivid-003: RDS Reception: true [ 361.163126][T11740] vivid-003: RDS Program Type: 0 inactive [ 361.285975][T11740] vivid-003: RDS PS Name: inactive [ 361.337900][T11740] vivid-003: RDS Radio Text: inactive [ 361.352483][T11740] vivid-003: RDS Traffic Announcement: false inactive [ 361.435005][T11740] vivid-003: RDS Traffic Program: false inactive [ 361.492820][T11740] vivid-003: RDS Music: false inactive [ 361.516272][T11740] vivid-003: ================== END STATUS ================== [ 362.082536][T11754] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124 [ 362.418855][T11759] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125 [ 363.868102][T11785] netlink: 4860 bytes leftover after parsing attributes in process `syz.3.1198'. [ 364.536994][ T5852] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 367.454720][T11852] Process accounting paused [ 368.094863][T11862] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126 [ 369.920971][T11904] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127 [ 370.573224][T11919] kAFS: No cell specified [ 373.487730][T11991] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128 [ 373.684653][T12002] __vm_enough_memory: pid: 12002, comm: syz.2.1248, bytes: 4398046511104 not enough memory for the allocation [ 373.832148][T12000] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input129 [ 374.255183][T12017] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 375.148049][T12031] net_ratelimit: 1 callbacks suppressed [ 375.148071][T12031] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 375.160455][T12031] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 375.767093][T12047] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input130 [ 376.661452][T12069] zswap: compressor not available [ 377.317130][T12094] aoe: could not set interface list: too many interfaces [ 378.028042][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 378.060413][T12111] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131 [ 378.457099][T12125] FAULT_INJECTION: forcing a failure. [ 378.457099][T12125] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 378.809569][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.816013][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.886001][T12125] CPU: 1 UID: 0 PID: 12125 Comm: syz.2.1277 Tainted: G U syzkaller #0 PREEMPT(full) [ 378.886040][T12125] Tainted: [U]=USER [ 378.886048][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.886062][T12125] Call Trace: [ 378.886071][T12125] [ 378.886081][T12125] dump_stack_lvl+0x16c/0x1f0 [ 378.886116][T12125] should_fail_ex+0x512/0x640 [ 378.886151][T12125] should_fail_alloc_page+0xe7/0x130 [ 378.886190][T12125] prepare_alloc_pages+0x3c2/0x610 [ 378.886233][T12125] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 378.886273][T12125] ? find_held_lock+0x2b/0x80 [ 378.886305][T12125] ? is_bpf_text_address+0x8a/0x1a0 [ 378.886343][T12125] ? bpf_ksym_find+0x124/0x1c0 [ 378.886387][T12125] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.886419][T12125] ? is_bpf_text_address+0x94/0x1a0 [ 378.886458][T12125] ? kernel_text_address+0x8d/0x100 [ 378.886487][T12125] ? __kernel_text_address+0xd/0x40 [ 378.886514][T12125] ? unwind_get_return_address+0x59/0xa0 [ 378.886561][T12125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.886593][T12125] ? policy_nodemask+0xea/0x4e0 [ 378.886631][T12125] alloc_pages_mpol+0x1fb/0x550 [ 378.886671][T12125] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 378.886706][T12125] ? kasan_save_stack+0x33/0x60 [ 378.886735][T12125] ? kasan_save_track+0x14/0x30 [ 378.886765][T12125] ? __kasan_kmalloc+0xaa/0xb0 [ 378.886794][T12125] ? __get_vm_area_node+0x101/0x330 [ 378.886836][T12125] alloc_pages_noprof+0x131/0x390 [ 378.886874][T12125] get_free_pages_noprof+0x10/0xb0 [ 378.886907][T12125] kasan_populate_vmalloc+0x9f/0x2d0 [ 378.886938][T12125] ? alloc_vmap_area+0x8b5/0x29e0 [ 378.886977][T12125] alloc_vmap_area+0x960/0x29e0 [ 378.887024][T12125] ? __pfx_alloc_vmap_area+0x10/0x10 [ 378.887067][T12125] __get_vm_area_node+0x1ca/0x330 [ 378.887110][T12125] __vmalloc_node_range_noprof+0x271/0x1480 [ 378.887151][T12125] ? n_tty_open+0x1a/0x170 [ 378.887182][T12125] ? look_up_lock_class+0x59/0x150 [ 378.887218][T12125] ? n_tty_open+0x1a/0x170 [ 378.887261][T12125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 378.887298][T12125] ? console_unlock+0x184/0x210 [ 378.887328][T12125] ? __pfx_console_unlock+0x10/0x10 [ 378.887358][T12125] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 378.887408][T12125] ? n_tty_open+0x1a/0x170 [ 378.887436][T12125] __vmalloc_node_noprof+0xad/0xf0 [ 378.887472][T12125] ? n_tty_open+0x1a/0x170 [ 378.887501][T12125] ? __pfx_n_tty_open+0x10/0x10 [ 378.887535][T12125] n_tty_open+0x1a/0x170 [ 378.887566][T12125] ? __pfx_n_tty_open+0x10/0x10 [ 378.887597][T12125] tty_ldisc_open+0x9f/0x120 [ 378.887625][T12125] tty_ldisc_setup+0x40/0x100 [ 378.887652][T12125] tty_init_dev.part.0+0x1ec/0x500 [ 378.887687][T12125] tty_open+0xa4f/0xf90 [ 378.887721][T12125] ? __pfx_tty_open+0x10/0x10 [ 378.887750][T12125] ? chrdev_open+0x10b/0x6a0 [ 378.887785][T12125] ? __pfx_tty_open+0x10/0x10 [ 378.887814][T12125] chrdev_open+0x231/0x6a0 [ 378.887843][T12125] ? __pfx_apparmor_file_open+0x10/0x10 [ 378.887874][T12125] ? __pfx_chrdev_open+0x10/0x10 [ 378.887909][T12125] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 378.887949][T12125] do_dentry_open+0x982/0x1530 [ 378.887980][T12125] ? __pfx_chrdev_open+0x10/0x10 [ 378.888020][T12125] vfs_open+0x82/0x3f0 [ 378.888061][T12125] path_openat+0x1de4/0x2cb0 [ 378.888106][T12125] ? __pfx_path_openat+0x10/0x10 [ 378.888147][T12125] do_filp_open+0x20b/0x470 [ 378.888178][T12125] ? __pfx_do_filp_open+0x10/0x10 [ 378.888242][T12125] ? alloc_fd+0x471/0x7d0 [ 378.888281][T12125] do_sys_openat2+0x11b/0x1d0 [ 378.888320][T12125] ? __pfx_do_sys_openat2+0x10/0x10 [ 378.888402][T12125] __x64_sys_openat+0x174/0x210 [ 378.888428][T12125] ? __pfx___x64_sys_openat+0x10/0x10 [ 378.888469][T12125] do_syscall_64+0xcd/0x4b0 [ 378.888501][T12125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.888527][T12125] RIP: 0033:0x7f6fa778eec9 [ 378.888554][T12125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.888580][T12125] RSP: 002b:00007f6fa8557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 378.888607][T12125] RAX: ffffffffffffffda RBX: 00007f6fa79e6270 RCX: 00007f6fa778eec9 [ 378.888623][T12125] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 378.888639][T12125] RBP: 00007f6fa7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 378.888655][T12125] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 378.888669][T12125] R13: 00007f6fa79e6308 R14: 00007f6fa79e6270 R15: 00007ffcb5135bf8 [ 378.888713][T12125] [ 379.337943][T12125] syz.2.1277: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 379.364373][T12125] CPU: 0 UID: 0 PID: 12125 Comm: syz.2.1277 Tainted: G U syzkaller #0 PREEMPT(full) [ 379.364417][T12125] Tainted: [U]=USER [ 379.364425][T12125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.364440][T12125] Call Trace: [ 379.364449][T12125] [ 379.364459][T12125] dump_stack_lvl+0x16c/0x1f0 [ 379.364490][T12125] warn_alloc+0x248/0x3a0 [ 379.364520][T12125] ? __pfx_warn_alloc+0x10/0x10 [ 379.364548][T12125] ? __get_vm_area_node+0x2cd/0x330 [ 379.364589][T12125] ? __get_vm_area_node+0x2cd/0x330 [ 379.364620][T12125] ? __get_vm_area_node+0x1dc/0x330 [ 379.364667][T12125] ? __get_vm_area_node+0x208/0x330 [ 379.364712][T12125] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 379.364752][T12125] ? look_up_lock_class+0x59/0x150 [ 379.364788][T12125] ? n_tty_open+0x1a/0x170 [ 379.364836][T12125] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 379.364871][T12125] ? console_unlock+0x184/0x210 [ 379.364901][T12125] ? __pfx_console_unlock+0x10/0x10 [ 379.364933][T12125] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 379.364972][T12125] ? n_tty_open+0x1a/0x170 [ 379.365003][T12125] __vmalloc_node_noprof+0xad/0xf0 [ 379.365039][T12125] ? n_tty_open+0x1a/0x170 [ 379.365082][T12125] ? __pfx_n_tty_open+0x10/0x10 [ 379.365117][T12125] n_tty_open+0x1a/0x170 [ 379.365150][T12125] ? __pfx_n_tty_open+0x10/0x10 [ 379.365180][T12125] tty_ldisc_open+0x9f/0x120 [ 379.365207][T12125] tty_ldisc_setup+0x40/0x100 [ 379.365234][T12125] tty_init_dev.part.0+0x1ec/0x500 [ 379.365273][T12125] tty_open+0xa4f/0xf90 [ 379.365310][T12125] ? __pfx_tty_open+0x10/0x10 [ 379.365342][T12125] ? chrdev_open+0x10b/0x6a0 [ 379.365380][T12125] ? __pfx_tty_open+0x10/0x10 [ 379.365410][T12125] chrdev_open+0x231/0x6a0 [ 379.365442][T12125] ? __pfx_apparmor_file_open+0x10/0x10 [ 379.365473][T12125] ? __pfx_chrdev_open+0x10/0x10 [ 379.365507][T12125] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 379.365546][T12125] do_dentry_open+0x982/0x1530 [ 379.365579][T12125] ? __pfx_chrdev_open+0x10/0x10 [ 379.365622][T12125] vfs_open+0x82/0x3f0 [ 379.365672][T12125] path_openat+0x1de4/0x2cb0 [ 379.365716][T12125] ? __pfx_path_openat+0x10/0x10 [ 379.365764][T12125] do_filp_open+0x20b/0x470 [ 379.365796][T12125] ? __pfx_do_filp_open+0x10/0x10 [ 379.365851][T12125] ? alloc_fd+0x471/0x7d0 [ 379.365886][T12125] do_sys_openat2+0x11b/0x1d0 [ 379.365922][T12125] ? __pfx_do_sys_openat2+0x10/0x10 [ 379.365974][T12125] __x64_sys_openat+0x174/0x210 [ 379.365998][T12125] ? __pfx___x64_sys_openat+0x10/0x10 [ 379.366039][T12125] do_syscall_64+0xcd/0x4b0 [ 379.366070][T12125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.366097][T12125] RIP: 0033:0x7f6fa778eec9 [ 379.366118][T12125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.366143][T12125] RSP: 002b:00007f6fa8557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 379.366168][T12125] RAX: ffffffffffffffda RBX: 00007f6fa79e6270 RCX: 00007f6fa778eec9 [ 379.366186][T12125] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 379.366203][T12125] RBP: 00007f6fa7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 379.366220][T12125] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 379.366236][T12125] R13: 00007f6fa79e6308 R14: 00007f6fa79e6270 R15: 00007ffcb5135bf8 [ 379.366273][T12125] [ 380.017192][T12125] Mem-Info: [ 380.020349][T12125] active_anon:42000 inactive_anon:0 isolated_anon:0 [ 380.020349][T12125] active_file:13991 inactive_file:49024 isolated_file:0 [ 380.020349][T12125] unevictable:782 dirty:3675 writeback:0 [ 380.020349][T12125] slab_reclaimable:11420 slab_unreclaimable:94052 [ 380.020349][T12125] mapped:28437 shmem:22659 pagetables:1311 [ 380.020349][T12125] sec_pagetables:0 bounce:0 [ 380.020349][T12125] kernel_misc_reclaimable:0 [ 380.020349][T12125] free:1264100 free_pcp:32988 free_cma:0 [ 380.093155][T12125] Node 0 active_anon:165100kB inactive_anon:0kB active_file:52900kB inactive_file:190484kB unevictable:1592kB isolated(anon):0kB isolated(file):0kB mapped:113748kB dirty:6156kB writeback:0kB shmem:86300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:47104kB kernel_stack:11916kB pagetables:5124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 380.202698][T12125] Node 1 active_anon:0kB inactive_anon:0kB active_file:3064kB inactive_file:5612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8544kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 380.252028][T12136] ======================================================= [ 380.252028][T12136] WARNING: The mand mount option has been deprecated and [ 380.252028][T12136] and is ignored by this kernel. Remove the mand [ 380.252028][T12136] option from the mount to silence this warning. [ 380.252028][T12136] ======================================================= [ 380.270150][T12125] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.403041][T12125] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 380.506375][T12125] Node 0 DMA32 free:1168100kB boost:0kB min:34400kB low:43000kB high:51600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:141980kB inactive_anon:0kB active_file:52900kB inactive_file:190484kB unevictable:1592kB writepending:6256kB zspages:0kB present:3129332kB managed:2548284kB mlocked:56kB bounce:0kB free_pcp:130176kB local_pcp:53432kB free_cma:0kB [ 380.540604][T12125] lowmem_reserve[]: 0 0 0 0 0 [ 380.545367][T12125] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.575059][T12125] lowmem_reserve[]: 0 0 0 0 0 [ 380.579922][T12125] Node 1 Normal free:3902104kB boost:0kB min:55500kB low:69372kB high:83244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:3064kB inactive_file:5612kB unevictable:1536kB writepending:8544kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 380.619642][T12125] lowmem_reserve[]: 0 0 0 0 0 [ 380.624427][T12125] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 380.637903][T12125] Node 0 DMA32: 8206*4kB (UM) 1976*8kB (UME) 864*16kB (UME) 427*32kB (UME) 173*64kB (UME) 287*128kB (UME) 338*256kB (UME) 154*512kB (UM) 68*1024kB (UM) 13*2048kB (UM) 191*4096kB (UME) = 1167896kB [ 380.657932][T12125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 380.689101][T12125] Node 1 Normal: 220*4kB (UME) 67*8kB (UME) 47*16kB (UME) 231*32kB (UME) 107*64kB (UME) 33*128kB (UME) 16*256kB (UME) 5*512kB (UM) 4*1024kB (UM) 6*2048kB (UME) 942*4096kB (UM) = 3902104kB [ 380.796995][T12125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.829365][T12125] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.841055][T12125] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 380.866164][T12125] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 380.942347][T12125] 77567 total pagecache pages [ 380.974883][T12125] 1 pages in swap cache [ 381.000920][T12125] Free swap = 124992kB [ 381.031213][T12125] Total swap = 124996kB [ 381.045492][T12125] 2097051 pages RAM [ 381.072966][T12125] 0 pages HighMem/MovableOnly [ 381.115966][T12125] 428338 pages reserved [ 381.130145][T12125] 0 pages cma reserved [ 381.163175][T12125] tty tty26: ldisc open failed (-12), clearing slot 25 [ 382.140629][ C1] sd 0:0:1:0: [sda] tag#132 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 382.151094][ C1] sd 0:0:1:0: [sda] tag#132 CDB: Write(6) 0a 00 00 00 0b 00 00 00 00 00 00 00 [ 383.915339][T12222] mkiss: ax0: crc mode is auto. [ 384.028820][T12226] ptp ptp0: new virtual clock ptp1 [ 384.050837][T12226] ptp ptp0: new virtual clock ptp2 [ 384.085495][T12226] ptp ptp0: new virtual clock ptp3 [ 384.103982][T12226] ptp ptp0: guarantee physical clock free running [ 384.613530][T12263] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132 [ 386.618783][T12312] vivid-007: ================= START STATUS ================= [ 386.669083][T12312] vivid-007: Generate PTS: true [ 386.691877][T12312] vivid-007: Generate SCR: true [ 386.724534][T12312] tpg source WxH: 320x240 (Y'CbCr) [ 386.736119][T12312] tpg field: 1 [ 386.741013][T12312] tpg crop: (0,0)/320x240 [ 386.746216][T12312] tpg compose: (0,0)/320x240 [ 386.750856][T12312] tpg colorspace: 8 [ 386.754778][T12312] tpg transfer function: 0/0 [ 386.762352][T12312] tpg Y'CbCr encoding: 0/0 [ 386.767288][T12312] tpg quantization: 0/0 [ 386.772177][T12312] tpg RGB range: 0/2 [ 386.796890][T12312] vivid-007: ================== END STATUS ================== [ 387.111695][T12312] can: request_module (can-proto-3) failed. [ 388.465150][ T5852] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 389.535842][T12372] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1331'. [ 390.525978][ T51] Bluetooth: hci3: command 0x0419 tx timeout [ 392.462831][T12443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1346'. [ 393.111162][T12483] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 393.529169][T12496] can: request_module (can-proto-4) failed. [ 393.663922][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'. [ 393.953908][T12513] random: crng reseeded on system resumption [ 394.204506][T12516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1364'. [ 394.366762][T12516] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1364'. [ 394.628431][T12521] kfence: disabled [ 395.563914][T12553] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133 [ 395.841608][T12562] FAULT_INJECTION: forcing a failure. [ 395.841608][T12562] name failslab, interval 1, probability 0, space 0, times 0 [ 395.856656][T12562] CPU: 1 UID: 0 PID: 12562 Comm: syz.2.1377 Tainted: G U syzkaller #0 PREEMPT(full) [ 395.856698][T12562] Tainted: [U]=USER [ 395.856707][T12562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.856722][T12562] Call Trace: [ 395.856730][T12562] [ 395.856740][T12562] dump_stack_lvl+0x16c/0x1f0 [ 395.856774][T12562] should_fail_ex+0x512/0x640 [ 395.856819][T12562] should_failslab+0xc2/0x120 [ 395.856857][T12562] __kmalloc_cache_noprof+0x72/0x780 [ 395.856886][T12562] ? __pfx___might_resched+0x10/0x10 [ 395.856917][T12562] ? nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 395.856957][T12562] ? nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 395.856987][T12562] nfc_genl_rcv_nl_event+0xc1/0x2e0 [ 395.857021][T12562] notifier_call_chain+0xb9/0x410 [ 395.857056][T12562] ? __pfx_nfc_genl_rcv_nl_event+0x10/0x10 [ 395.857098][T12562] blocking_notifier_call_chain+0x69/0xa0 [ 395.857139][T12562] netlink_release+0x189d/0x2060 [ 395.857174][T12562] ? netlink_release+0x1de/0x2060 [ 395.857207][T12562] ? __pfx_netlink_release+0x10/0x10 [ 395.857240][T12562] ? __pfx_locks_remove_file+0x10/0x10 [ 395.857274][T12562] __sock_release+0xb0/0x270 [ 395.857306][T12562] ? __pfx_sock_close+0x10/0x10 [ 395.857332][T12562] sock_close+0x1c/0x30 [ 395.857359][T12562] __fput+0x3ff/0xb70 [ 395.857403][T12562] fput_close_sync+0x118/0x210 [ 395.857442][T12562] ? __pfx_fput_close_sync+0x10/0x10 [ 395.857479][T12562] ? dnotify_flush+0x79/0x4c0 [ 395.857523][T12562] __x64_sys_close+0x8b/0x120 [ 395.857547][T12562] do_syscall_64+0xcd/0x4b0 [ 395.857578][T12562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.857604][T12562] RIP: 0033:0x7f6fa778db2a [ 395.857625][T12562] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 395.857650][T12562] RSP: 002b:00007f6fa85b8f90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 395.857674][T12562] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 00007f6fa778db2a [ 395.857691][T12562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 395.857706][T12562] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 395.857722][T12562] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 395.857738][T12562] R13: 00007f6fa79e6038 R14: 00007f6fa79e5fa0 R15: 00007ffcb5135bf8 [ 395.857775][T12562] [ 397.611694][T12607] Process accounting resumed [ 397.869342][T12620] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6.0.5), cmd(5) [ 400.623914][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 400.846763][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 401.580579][T12709] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 401.613161][T12705] random: crng reseeded on system resumption [ 401.912669][T12720] futex_wake_op: syz.2.1405 tries to shift op by -2048; fix this program [ 401.976314][T12720] futex_wake_op: syz.2.1405 tries to shift op by -2048; fix this program [ 402.716479][T12720] FAULT_INJECTION: forcing a failure. [ 402.716479][T12720] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.779905][T12720] CPU: 0 UID: 0 PID: 12720 Comm: syz.2.1405 Tainted: G U syzkaller #0 PREEMPT(full) [ 402.779944][T12720] Tainted: [U]=USER [ 402.779951][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 402.779965][T12720] Call Trace: [ 402.779973][T12720] [ 402.779983][T12720] dump_stack_lvl+0x16c/0x1f0 [ 402.780012][T12720] should_fail_ex+0x512/0x640 [ 402.780043][T12720] should_fail_alloc_page+0xe7/0x130 [ 402.780078][T12720] prepare_alloc_pages+0x3c2/0x610 [ 402.780118][T12720] ? rcu_is_watching+0x12/0xc0 [ 402.780150][T12720] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 402.780178][T12720] ? __lock_acquire+0xb97/0x1ce0 [ 402.780220][T12720] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 402.780244][T12720] ? do_raw_spin_lock+0x12c/0x2b0 [ 402.780265][T12720] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 402.780288][T12720] ? find_held_lock+0x2b/0x80 [ 402.780320][T12720] ? __lock_acquire+0xb97/0x1ce0 [ 402.780350][T12720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.780375][T12720] ? policy_nodemask+0xea/0x4e0 [ 402.780407][T12720] alloc_pages_mpol+0x1fb/0x550 [ 402.780438][T12720] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 402.780476][T12720] folio_alloc_mpol_noprof+0x36/0x2f0 [ 402.780501][T12720] shmem_alloc_folio+0x135/0x160 [ 402.780540][T12720] shmem_alloc_and_add_folio+0x499/0xc20 [ 402.780574][T12720] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 402.780601][T12720] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 402.780632][T12720] shmem_get_folio_gfp+0x67f/0x1610 [ 402.780664][T12720] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 402.780698][T12720] ? filemap_map_pages+0xe01/0x1b70 [ 402.780724][T12720] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 402.780761][T12720] shmem_fault+0x1fe/0xa30 [ 402.780790][T12720] ? __pfx_shmem_fault+0x10/0x10 [ 402.780821][T12720] ? __pfx_filemap_map_pages+0x10/0x10 [ 402.780876][T12720] ? __pfx_filemap_map_pages+0x10/0x10 [ 402.780902][T12720] __do_fault+0x10d/0x490 [ 402.780933][T12720] ? __pfx_filemap_map_pages+0x10/0x10 [ 402.780957][T12720] do_pte_missing+0xf4a/0x3ba0 [ 402.780983][T12720] ? find_held_lock+0x2b/0x80 [ 402.781001][T12720] ? __handle_mm_fault+0x1529/0x2aa0 [ 402.781018][T12720] __handle_mm_fault+0x1556/0x2aa0 [ 402.781049][T12720] ? __pfx___handle_mm_fault+0x10/0x10 [ 402.781066][T12720] ? __pte_offset_map_lock+0x174/0x310 [ 402.781085][T12720] ? find_held_lock+0x2b/0x80 [ 402.781112][T12720] ? follow_page_pte+0x5cf/0x1390 [ 402.781136][T12720] handle_mm_fault+0x589/0xd10 [ 402.781154][T12720] __get_user_pages+0x54e/0x3530 [ 402.781186][T12720] ? __pfx___get_user_pages+0x10/0x10 [ 402.781215][T12720] populate_vma_page_range+0x267/0x3f0 [ 402.781238][T12720] ? __pfx_populate_vma_page_range+0x10/0x10 [ 402.781262][T12720] ? __pfx_find_vma_intersection+0x10/0x10 [ 402.781282][T12720] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 402.781301][T12720] __mm_populate+0x1d8/0x380 [ 402.781322][T12720] ? __pfx___mm_populate+0x10/0x10 [ 402.781345][T12720] ? up_write+0x1b2/0x520 [ 402.781361][T12720] do_mlock+0x441/0x800 [ 402.781378][T12720] ? __pfx_do_mlock+0x10/0x10 [ 402.781395][T12720] ? __x64_sys_futex+0x1e0/0x4c0 [ 402.781418][T12720] ? __x64_sys_futex+0x1e9/0x4c0 [ 402.781437][T12720] ? __sys_socket+0xac/0x260 [ 402.781459][T12720] ? xfd_validate_state+0x61/0x180 [ 402.781477][T12720] __x64_sys_mlock+0x59/0x80 [ 402.781492][T12720] do_syscall_64+0xcd/0x4b0 [ 402.781509][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.781523][T12720] RIP: 0033:0x7f6fa778eec9 [ 402.781540][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.781554][T12720] RSP: 002b:00007f6fa8599038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 402.781568][T12720] RAX: ffffffffffffffda RBX: 00007f6fa79e6090 RCX: 00007f6fa778eec9 [ 402.781578][T12720] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 402.781587][T12720] RBP: 00007f6fa7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 402.781596][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.781604][T12720] R13: 00007f6fa79e6128 R14: 00007f6fa79e6090 R15: 00007ffcb5135bf8 [ 402.781623][T12720] [ 404.743193][T12764] Process accounting resumed [ 404.886738][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'. [ 405.026878][T12774] netlink: 'syz.0.1415': attribute type 1 has an invalid length. [ 406.285733][T12789] zswap: compressor not available [ 408.856083][T12818] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 410.057243][T12936] FAULT_INJECTION: forcing a failure. [ 410.057243][T12936] name fail_futex, interval 1, probability 0, space 0, times 0 [ 410.079272][T12936] CPU: 0 UID: 0 PID: 12936 Comm: syz.3.1437 Tainted: G U syzkaller #0 PREEMPT(full) [ 410.079306][T12936] Tainted: [U]=USER [ 410.079313][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.079325][T12936] Call Trace: [ 410.079333][T12936] [ 410.079341][T12936] dump_stack_lvl+0x16c/0x1f0 [ 410.079373][T12936] should_fail_ex+0x512/0x640 [ 410.079403][T12936] get_futex_key+0x1d0/0x1560 [ 410.079439][T12936] ? __pfx_get_futex_key+0x10/0x10 [ 410.079474][T12936] ? mmap_region+0x1ee/0x3f0 [ 410.079502][T12936] ? __get_unmapped_area+0x267/0x440 [ 410.079538][T12936] futex_wake+0xea/0x530 [ 410.079566][T12936] ? __pfx_futex_wake+0x10/0x10 [ 410.079597][T12936] ? up_write+0x1b2/0x520 [ 410.079626][T12936] do_futex+0x1e3/0x350 [ 410.079660][T12936] ? __pfx_do_futex+0x10/0x10 [ 410.079703][T12936] __x64_sys_futex+0x1e0/0x4c0 [ 410.079741][T12936] ? __pfx___x64_sys_futex+0x10/0x10 [ 410.079774][T12936] ? ksys_mmap_pgoff+0x85/0x5c0 [ 410.079803][T12936] ? xfd_validate_state+0x61/0x180 [ 410.079824][T12936] ? __pfx_ksys_write+0x10/0x10 [ 410.079862][T12936] do_syscall_64+0xcd/0x4b0 [ 410.079890][T12936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.079915][T12936] RIP: 0033:0x7f79fef8eec9 [ 410.079934][T12936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.079957][T12936] RSP: 002b:00007f79ffde00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 410.079979][T12936] RAX: ffffffffffffffda RBX: 00007f79ff1e5fa8 RCX: 00007f79fef8eec9 [ 410.079995][T12936] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79ff1e5fac [ 410.080010][T12936] RBP: 00007f79ff1e5fa0 R08: 00007f79ffde1000 R09: 0000000000000000 [ 410.080025][T12936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.080039][T12936] R13: 00007f79ff1e6038 R14: 00007ffe01a0fb60 R15: 00007ffe01a0fc48 [ 410.080080][T12936] [ 414.845720][T12998] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input135 [ 415.097520][T13014] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136 [ 415.394481][T13018] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input137 [ 416.660325][T13042] FAULT_INJECTION: forcing a failure. [ 416.660325][T13042] name failslab, interval 1, probability 0, space 0, times 0 [ 416.812108][T13042] CPU: 1 UID: 0 PID: 13042 Comm: syz.3.1455 Tainted: G U syzkaller #0 PREEMPT(full) [ 416.812150][T13042] Tainted: [U]=USER [ 416.812159][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.812175][T13042] Call Trace: [ 416.812185][T13042] [ 416.812195][T13042] dump_stack_lvl+0x16c/0x1f0 [ 416.812230][T13042] should_fail_ex+0x512/0x640 [ 416.812260][T13042] ? __kmalloc_cache_noprof+0x5f/0x780 [ 416.812292][T13042] should_failslab+0xc2/0x120 [ 416.812339][T13042] __kmalloc_cache_noprof+0x72/0x780 [ 416.812370][T13042] ? rfkill_fop_open+0x1b6/0x750 [ 416.812416][T13042] ? rfkill_fop_open+0x1b6/0x750 [ 416.812452][T13042] rfkill_fop_open+0x1b6/0x750 [ 416.812494][T13042] ? __pfx_rfkill_fop_open+0x10/0x10 [ 416.812533][T13042] misc_open+0x35d/0x420 [ 416.812571][T13042] ? __pfx_misc_open+0x10/0x10 [ 416.812608][T13042] chrdev_open+0x231/0x6a0 [ 416.812640][T13042] ? __pfx_apparmor_file_open+0x10/0x10 [ 416.812669][T13042] ? __pfx_chrdev_open+0x10/0x10 [ 416.812704][T13042] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 416.812742][T13042] do_dentry_open+0x982/0x1530 [ 416.812775][T13042] ? __pfx_chrdev_open+0x10/0x10 [ 416.812816][T13042] vfs_open+0x82/0x3f0 [ 416.812858][T13042] path_openat+0x1de4/0x2cb0 [ 416.812901][T13042] ? __pfx_path_openat+0x10/0x10 [ 416.812942][T13042] do_filp_open+0x20b/0x470 [ 416.812974][T13042] ? __pfx_do_filp_open+0x10/0x10 [ 416.813031][T13042] ? alloc_fd+0x471/0x7d0 [ 416.813070][T13042] do_sys_openat2+0x11b/0x1d0 [ 416.813108][T13042] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.813161][T13042] __x64_sys_openat+0x174/0x210 [ 416.813193][T13042] ? __pfx___x64_sys_openat+0x10/0x10 [ 416.813234][T13042] do_syscall_64+0xcd/0x4b0 [ 416.813265][T13042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.813292][T13042] RIP: 0033:0x7f79fef8eec9 [ 416.813313][T13042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.813345][T13042] RSP: 002b:00007f79ffde0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.813370][T13042] RAX: ffffffffffffffda RBX: 00007f79ff1e5fa0 RCX: 00007f79fef8eec9 [ 416.813389][T13042] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 416.813406][T13042] RBP: 00007f79ff011f91 R08: 0000000000000000 R09: 0000000000000000 [ 416.813422][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.813437][T13042] R13: 00007f79ff1e6038 R14: 00007f79ff1e5fa0 R15: 00007ffe01a0fc48 [ 416.813473][T13042] [ 417.340353][T13050] ptp ptp0: delete virtual clock ptp3 [ 417.533506][T13050] ptp ptp0: delete virtual clock ptp2 [ 417.617935][T13050] ptp ptp0: delete virtual clock ptp1 [ 417.674510][T13050] ptp ptp0: only physical clock in use now [ 417.727825][T13054] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 418.923617][T13067] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1460'. [ 419.150914][T13075] netlink: 'syz.3.1462': attribute type 11 has an invalid length. [ 421.070475][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 421.935648][T13132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1474'. [ 422.054267][ T7167] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.913304][T13159] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input138 [ 423.214532][T13160] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139 [ 424.115487][T13192] FAULT_INJECTION: forcing a failure. [ 424.115487][T13192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.170957][T13192] CPU: 1 UID: 0 PID: 13192 Comm: syz.1.1487 Tainted: G U syzkaller #0 PREEMPT(full) [ 424.170997][T13192] Tainted: [U]=USER [ 424.171006][T13192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.171021][T13192] Call Trace: [ 424.171029][T13192] [ 424.171038][T13192] dump_stack_lvl+0x16c/0x1f0 [ 424.171069][T13192] should_fail_ex+0x512/0x640 [ 424.171102][T13192] _copy_to_user+0x32/0xd0 [ 424.171135][T13192] simple_read_from_buffer+0xcb/0x170 [ 424.171164][T13192] proc_fail_nth_read+0x197/0x240 [ 424.171194][T13192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.171225][T13192] ? rw_verify_area+0xcf/0x6c0 [ 424.171250][T13192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.171279][T13192] vfs_read+0x1e4/0xcf0 [ 424.171312][T13192] ? __pfx___mutex_lock+0x10/0x10 [ 424.171338][T13192] ? __pfx_vfs_read+0x10/0x10 [ 424.171375][T13192] ? __fget_files+0x20e/0x3c0 [ 424.171413][T13192] ksys_read+0x12a/0x250 [ 424.171441][T13192] ? __pfx_ksys_read+0x10/0x10 [ 424.171480][T13192] do_syscall_64+0xcd/0x4b0 [ 424.171508][T13192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.171533][T13192] RIP: 0033:0x7f090b98d8dc [ 424.171553][T13192] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 424.171576][T13192] RSP: 002b:00007f090c74c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.171600][T13192] RAX: ffffffffffffffda RBX: 00007f090bbe5fa0 RCX: 00007f090b98d8dc [ 424.171616][T13192] RDX: 000000000000000f RSI: 00007f090c74c0a0 RDI: 000000000000000a [ 424.171631][T13192] RBP: 00007f090c74c090 R08: 0000000000000000 R09: 0000000000000000 [ 424.171645][T13192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.171659][T13192] R13: 00007f090bbe6038 R14: 00007f090bbe5fa0 R15: 00007ffc2780b388 [ 424.171695][T13192] [ 425.547910][T13228] __vm_enough_memory: pid: 13228, comm: syz.0.1494, bytes: 4398046511104 not enough memory for the allocation [ 425.571664][T13226] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input140 [ 425.766960][T13229] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141 [ 426.477372][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 427.224984][T13252] __vm_enough_memory: pid: 13252, comm: syz.3.1499, bytes: 4398046511104 not enough memory for the allocation [ 428.660891][T13286] vhci_hcd: invalid port number 23 [ 428.680929][T13286] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 430.453649][T13338] i2c i2c-0: delete_device: Extra parameters [ 430.475731][T13340] ICMPv6: process `syz.3.1526' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 430.512652][T13338] ptrace attach of "./syz-executor exec"[5837] was attempted by "./syz-executor exec"[13338]                                                                                                                                                                                                                                                                                                                                                                                                       syzkaller syzkaller login: [ 456.893567][ T51] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 456.893606][ T51] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 456.912125][ T51] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 456.912172][ T51] Bluetooth: hci1: adv larger than maximum supported [ 456.919505][ T51] Bluetooth: hci1: Malformed LE Event: 0x0d [ 457.726071][ T51] Bluetooth: hci3: command 0x0419 tx timeout [ 459.354541][T13995] usbcore.quirks: string doesn't fit in 127 chars. [ 459.460382][T14000] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1654'. [ 460.453837][T14028] tipc: Started in network mode [ 460.459859][T14028] tipc: Node identity ffffffff, cluster identity 4711 [ 460.469699][T14028] tipc: Node number set to 4294967295 [ 461.186877][T13819] syz.3.1620 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 461.197022][T13819] CPU: 1 UID: 0 PID: 13819 Comm: syz.3.1620 Tainted: G U syzkaller #0 PREEMPT(full) [ 461.197061][T13819] Tainted: [U]=USER [ 461.197069][T13819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 461.197083][T13819] Call Trace: [ 461.197092][T13819] [ 461.197101][T13819] dump_stack_lvl+0x16c/0x1f0 [ 461.197132][T13819] dump_header+0x101/0x930 [ 461.197164][T13819] oom_kill_process+0x272/0xa40 [ 461.197196][T13819] out_of_memory+0x350/0x1700 [ 461.197231][T13819] ? __pfx_out_of_memory+0x10/0x10 [ 461.197269][T13819] mem_cgroup_out_of_memory+0x118/0x130 [ 461.197294][T13819] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 461.197325][T13819] ? do_raw_spin_unlock+0x172/0x230 [ 461.197359][T13819] try_charge_memcg+0x687/0xd40 [ 461.197398][T13819] ? __pfx_try_charge_memcg+0x10/0x10 [ 461.197430][T13819] ? find_held_lock+0x1/0x80 [ 461.197459][T13819] ? rcu_read_unlock+0x17/0x60 [ 461.197501][T13819] charge_memcg+0x8a/0x230 [ 461.197534][T13819] __mem_cgroup_charge+0x2b/0x1e0 [ 461.197571][T13819] shmem_alloc_and_add_folio+0x514/0xc20 [ 461.197608][T13819] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 461.197645][T13819] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 461.197681][T13819] shmem_get_folio_gfp+0x67f/0x1610 [ 461.197717][T13819] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 461.197756][T13819] shmem_write_begin+0x160/0x300 [ 461.197787][T13819] ? __pfx_shmem_write_begin+0x10/0x10 [ 461.197812][T13819] ? timestamp_truncate+0x21e/0x2d0 [ 461.197843][T13819] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 461.197884][T13819] generic_perform_write+0x3c1/0x900 [ 461.197934][T13819] ? __pfx_generic_perform_write+0x10/0x10 [ 461.197974][T13819] ? inode_needs_update_time.part.0+0x191/0x270 [ 461.198014][T13819] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 461.198051][T13819] shmem_file_write_iter+0x10e/0x140 [ 461.198085][T13819] __kernel_write_iter+0x31a/0xb10 [ 461.198118][T13819] ? __pfx___kernel_write_iter+0x10/0x10 [ 461.198146][T13819] ? __up_read+0x1f8/0x750 [ 461.198175][T13819] ? dump_user_range+0x756/0xb70 [ 461.198199][T13819] ? dump_user_range+0x1b3/0xb70 [ 461.198230][T13819] dump_user_range+0x413/0xb70 [ 461.198261][T13819] ? __pfx_dump_user_range+0x10/0x10 [ 461.198288][T13819] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 461.198321][T13819] ? __pfx_writenote+0x10/0x10 [ 461.198358][T13819] elf_core_dump+0x29c3/0x3c00 [ 461.198406][T13819] ? __pfx_elf_core_dump+0x10/0x10 [ 461.198431][T13819] ? kasan_save_stack+0x33/0x60 [ 461.198459][T13819] ? kasan_save_track+0x14/0x30 [ 461.198486][T13819] ? __kasan_kmalloc+0xaa/0xb0 [ 461.198512][T13819] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 461.198551][T13819] ? find_held_lock+0x2b/0x80 [ 461.198578][T13819] ? 0xffffffffff600000 [ 461.198599][T13819] ? rcu_is_watching+0x12/0xc0 [ 461.198632][T13819] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 461.198667][T13819] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.198748][T13819] ? vfs_coredump+0x2b9c/0x5670 [ 461.198771][T13819] vfs_coredump+0x2b9c/0x5670 [ 461.198809][T13819] ? __lock_acquire+0x62e/0x1ce0 [ 461.198843][T13819] ? __pfx_vfs_coredump+0x10/0x10 [ 461.198869][T13819] ? __lock_acquire+0x62e/0x1ce0 [ 461.198919][T13819] ? lock_acquire+0x179/0x350 [ 461.198979][T13819] ? is_bpf_text_address+0x8a/0x1a0 [ 461.199014][T13819] ? bpf_ksym_find+0x124/0x1c0 [ 461.199053][T13819] ? unwind_get_return_address+0x59/0xa0 [ 461.199083][T13819] ? arch_stack_walk+0xa6/0x100 [ 461.199126][T13819] ? stack_trace_save+0x8e/0xc0 [ 461.199157][T13819] ? __pfx_stack_trace_save+0x10/0x10 [ 461.199189][T13819] ? stack_depot_save_flags+0x29/0x9c0 [ 461.199218][T13819] ? __lock_acquire+0xb97/0x1ce0 [ 461.199319][T13819] ? proc_coredump_connector+0x2d1/0x4f0 [ 461.199344][T13819] ? __pfx_proc_coredump_connector+0x10/0x10 [ 461.199379][T13819] ? rcu_is_watching+0x12/0xc0 [ 461.199413][T13819] get_signal+0x22e1/0x26d0 [ 461.199460][T13819] ? __pfx_get_signal+0x10/0x10 [ 461.199493][T13819] ? rcu_is_watching+0x12/0xc0 [ 461.199522][T13819] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 461.199555][T13819] arch_do_signal_or_restart+0x8f/0x790 [ 461.199591][T13819] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 461.199654][T13819] irqentry_exit_to_user_mode+0x141/0x2b0 [ 461.199682][T13819] asm_exc_page_fault+0x26/0x30 [ 461.199706][T13819] RIP: 0033:0x0 [ 461.199722][T13819] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 461.199738][T13819] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 461.199757][T13819] RAX: 0000000000000000 RBX: 00007f79ff1e6360 RCX: 00007f79fef8eec9 [ 461.199773][T13819] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 461.199788][T13819] RBP: 00007f79ff011f91 R08: 0000000000000002 R09: 0000000000000000 [ 461.199803][T13819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.199817][T13819] R13: 00007f79ff1e63f8 R14: 00007f79ff1e6360 R15: 00007ffe01a0fc48 [ 461.199853][T13819] [ 461.199935][T13819] memory: usage 307200kB, limit 307200kB, failcnt 49045 [ 461.696962][T13819] memory+swap: usage 430132kB, limit 9007199254740988kB, failcnt 0 [ 461.705373][T13819] kmem: usage 3952kB, limit 9007199254740988kB, failcnt 0 [ 461.712720][T13819] Memory cgroup stats for /syz3: [ 461.712869][T13819] cache 308187136 [ 461.721490][T13819] rss 2265088 [ 461.724780][T13819] rss_huge 2097152 [ 461.728578][T13819] shmem 308187136 [ 461.732218][T13819] mapped_file 16244736 [ 461.738215][T13819] dirty 0 [ 461.741575][T13819] writeback 0 [ 461.744965][T13819] workingset_refault_anon 1988 [ 461.749806][T13819] workingset_refault_file 4356 [ 461.754570][T13819] swap 125878272 [ 461.758207][T13819] swapcached 20480 [ 461.761928][T13819] pgpgin 603161 [ 461.765389][T13819] pgpgout 549992 [ 461.769115][T13819] pgfault 200114 [ 461.772671][T13819] pgmajfault 424 [ 461.776261][T13819] inactive_anon 151023616 [ 461.780597][T13819] active_anon 159367168 [ 461.784762][T13819] inactive_file 0 [ 461.788547][T13819] active_file 0 [ 461.792011][T13819] unevictable 0 [ 461.795471][T13819] hierarchical_memory_limit 314572800 [ 461.803487][T13819] hierarchical_memsw_limit 9223372036854771712 [ 461.916220][T13819] total_cache 308187136 [ 461.920612][T13819] total_rss 2265088 [ 461.924583][T13819] total_rss_huge 2097152 [ 461.929588][T13819] total_shmem 308187136 [ 461.934026][T13819] total_mapped_file 16244736 [ 461.964942][T13819] total_dirty 0 [ 462.297690][T13819] total_writeback 0 [ 462.498473][T13819] total_workingset_refault_anon 1988 [ 462.503936][T13819] total_workingset_refault_file 4356 [ 462.509626][T13819] total_swap 125878272 [ 462.513826][T13819] total_swapcached 20480 [ 462.520219][T13819] total_pgpgin 603161 [ 462.524297][T13819] total_pgpgout 549992 [ 462.528642][T13819] total_pgfault 200114 [ 462.532796][T13819] total_pgmajfault 424 [ 462.539176][T13819] total_inactive_anon 151023616 [ 462.544158][T13819] total_active_anon 159367168 [ 462.549022][T13819] total_inactive_file 0 [ 462.553287][T13819] total_active_file 0 [ 462.557400][T13819] total_unevictable 0 [ 462.561468][T13819] anon_cost 0 [ 462.564831][T13819] file_cost 0 [ 462.568404][T13819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1620,pid=13824,uid=0 [ 462.583421][T13819] Memory cgroup out of memory: Killed process 13824 (syz.3.1620) total-vm:132004kB, anon-rss:3288kB, file-rss:21696kB, shmem-rss:16000kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 463.190889][T14058] ptp ptp0: only physical clock in use now [ 464.931870][ T32] oom_reaper: reaped process 13824 (syz.3.1620), now anon-rss:156kB, file-rss:20492kB, shmem-rss:12288kB [ 465.957463][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 469.526224][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1679'. [ 469.577295][T14114] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1681'. [ 471.928571][T14169] netlink: 'syz.0.1691': attribute type 4 has an invalid length. [ 473.922498][T14203] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 474.559945][T14220] zswap: compressor not available [ 475.230226][T14237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1707'. [ 476.377336][T14263] random: crng reseeded on system resumption [ 476.792478][ T30] audit: type=1804 audit(4294967361.860:14): pid=14270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1718" name="file0" dev="tmpfs" ino=2916 res=1 errno=0 [ 477.608241][T14288] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 478.712686][ T51] Bluetooth: hci2: unexpected event 0x01 length: 5 > 1 [ 480.421027][T14334] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 483.852932][T14396] random: crng reseeded on system resumption [ 484.234459][T14398] Setting dangerous option i915.mitigations - tainting kernel [ 484.843105][T14408] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 484.961621][T14413] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 485.382494][T14425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.392304][T14425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.400652][T14425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.423164][T14425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.432701][T14425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.901793][T14424] chnl_net:caif_netlink_parms(): no params data found [ 487.169885][T14424] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.199839][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.217609][T14424] bridge_slave_0: entered allmulticast mode [ 487.235242][T14424] bridge_slave_0: entered promiscuous mode [ 487.291014][T14424] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.312993][T14424] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.354263][T14424] bridge_slave_1: entered allmulticast mode [ 487.371239][T14424] bridge_slave_1: entered promiscuous mode [ 487.502148][T14425] Bluetooth: hci0: command tx timeout [ 487.567054][T14464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 487.588467][T14424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.689082][T14424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.983944][T14424] team0: Port device team_slave_0 added [ 488.000187][T14424] team0: Port device team_slave_1 added [ 488.280076][T14424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.307269][T14424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.369394][T14424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.386429][T14424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.396064][T14424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.443909][T14424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.604711][T14424] hsr_slave_0: entered promiscuous mode [ 488.615102][T14424] hsr_slave_1: entered promiscuous mode [ 488.870473][T14490] overlayfs: missing 'lowerdir' [ 489.576023][T14425] Bluetooth: hci0: command tx timeout [ 489.657038][T14424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 489.720453][T14424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 489.819940][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1771'. [ 489.837630][T14424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.033206][T14510] team0: Port device team_slave_1 removed [ 490.106375][T14424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 490.756595][T14424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.828874][T14424] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.869411][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.876610][ T7167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.965667][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.972810][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.646406][T14425] Bluetooth: hci0: command tx timeout [ 492.134664][T14424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.299446][T14424] veth0_vlan: entered promiscuous mode [ 493.327979][T14424] veth1_vlan: entered promiscuous mode [ 493.736091][T14425] Bluetooth: hci0: command tx timeout [ 493.925987][T14582] ICMPv6: process `syz.2.1785' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 494.094136][T14424] veth0_macvtap: entered promiscuous mode [ 494.153303][T14424] veth1_macvtap: entered promiscuous mode [ 494.318745][T14424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.494138][T14424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.559171][ T7167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.596394][ T7167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.619132][ T7167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.727403][ T7167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.019980][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.070882][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.136824][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.176045][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.695457][T14614] random: crng reseeded on system resumption [ 496.118306][T14617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1791'. [ 496.518364][T14631] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input144 [ 496.577876][T14635] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 496.606626][T14627] futex_wake_op: syz.2.1794 tries to shift op by -9; fix this program [ 498.122508][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1804'. [ 498.205754][T14664] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1804'. [ 499.949280][T14709] Invalid ELF header magic: != ELF [ 501.245073][T14752] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1820'. [ 501.325102][T14750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'. [ 501.580713][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.587147][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.660070][T14764] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input145 [ 501.833047][T14765] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146 [ 501.925560][T14764] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 503.191182][T14787] futex_wake_op: syz.0.1827 tries to shift op by -9; fix this program [ 505.182009][T14817] random: crng reseeded on system resumption [ 505.379984][T14814] ptrace attach of "./syz-executor exec"[14820] was attempted by "./syz-executor exec"[14814] [ 505.556321][T14821] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 505.958125][ T30] audit: type=1806 audit(4294967391.010:15): xattr="" res=-22 [ 507.466833][T14854] usb usb24: usbfs: process 14854 (syz.4.1844) did not claim interface 0 before use [ 507.779633][T14864] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1845'. [ 507.874516][T14857] random: crng reseeded on system resumption [ 508.117545][T14867] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 509.641957][ T30] audit: type=1806 audit(4294967394.700:16): xattr="" res=-22 [ 511.554866][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 511.752358][T14924] ptrace attach of "./syz-executor exec"[14930] was attempted by "./syz-executor exec"[14924] [ 511.863156][T14931] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 512.934277][T14954] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input147 [ 513.027415][ T5844] Process accounting resumed [ 513.349196][T14968] random: crng reseeded on system resumption [ 515.876630][T15000] ptrace attach of "./syz-executor exec"[15003] was attempted by "./syz-executor exec"[15000] [ 515.947152][T15007] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 516.024860][T15011] random: crng reseeded on system resumption [ 516.936184][T15030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1880'. [ 516.977925][T15030] netlink: 93 bytes leftover after parsing attributes in process `syz.4.1880'. [ 517.260427][T15039] ubi0: attaching mtd0 [ 517.267750][T15039] ubi0: scanning is finished [ 517.275322][T15039] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 517.441394][T15042] i2c i2c-0: new_device: Invalid device name [ 517.464154][T15042] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1885'. [ 517.522047][T15042] macsec0: entered allmulticast mode [ 517.539081][T15042] veth1_macvtap: entered allmulticast mode [ 517.873117][T15039] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 518.042598][T15038] ubi0: attaching mtd0 [ 518.092425][T15038] ubi0: scanning is finished [ 518.111530][T15038] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 518.316860][T15038] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 518.592000][T15054] ima: policy update failed [ 518.597956][T15054] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1887'. [ 518.607930][ T30] audit: type=1802 audit(4294967403.670:17): pid=15054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1887" res=0 errno=0 [ 519.622944][T15076] ptrace attach of "./syz-executor exec"[15077] was attempted by "./syz-executor exec"[15076] [ 520.104491][T15084] ================================================================== [ 520.104508][T15084] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 520.104545][T15084] Read of size 8 at addr ffff888027818de4 by task syz.2.1894/15084 [ 520.104568][T15084] [ 520.104584][T15084] CPU: 0 UID: 0 PID: 15084 Comm: syz.2.1894 Tainted: G U syzkaller #0 PREEMPT(full) [ 520.104620][T15084] Tainted: [U]=USER [ 520.104629][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.104645][T15084] Call Trace: [ 520.104654][T15084] [ 520.104662][T15084] dump_stack_lvl+0x116/0x1f0 [ 520.104689][T15084] print_report+0xcd/0x630 [ 520.104723][T15084] ? __virt_addr_valid+0x81/0x610 [ 520.104757][T15084] ? __phys_addr+0xe8/0x180 [ 520.104792][T15084] ? fbcon_prepare_logo+0xa03/0xc70 [ 520.104817][T15084] kasan_report+0xe0/0x110 [ 520.104848][T15084] ? fbcon_prepare_logo+0xa03/0xc70 [ 520.104878][T15084] kasan_check_range+0x100/0x1b0 [ 520.104902][T15084] __asan_memcpy+0x23/0x60 [ 520.104930][T15084] fbcon_prepare_logo+0xa03/0xc70 [ 520.104963][T15084] fbcon_init+0xd77/0x1900 [ 520.104990][T15084] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 520.105030][T15084] visual_init+0x31d/0x620 [ 520.105067][T15084] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 520.105099][T15084] store_bind+0x61d/0x760 [ 520.105126][T15084] ? sysfs_file_kobj+0xe4/0x290 [ 520.105156][T15084] ? __pfx_store_bind+0x10/0x10 [ 520.105180][T15084] dev_attr_store+0x55/0x80 [ 520.105216][T15084] ? __pfx_dev_attr_store+0x10/0x10 [ 520.105252][T15084] sysfs_kf_write+0xf2/0x150 [ 520.105282][T15084] kernfs_fop_write_iter+0x3af/0x570 [ 520.105307][T15084] ? __pfx_sysfs_kf_write+0x10/0x10 [ 520.105393][T15084] iter_file_splice_write+0xa21/0x12e0 [ 520.105433][T15084] ? __pfx_iter_file_splice_write+0x10/0x10 [ 520.105466][T15084] ? __pfx_copy_splice_read+0x10/0x10 [ 520.105502][T15084] ? __pfx_iter_file_splice_write+0x10/0x10 [ 520.105532][T15084] direct_splice_actor+0x18f/0x6c0 [ 520.105561][T15084] splice_direct_to_actor+0x342/0xa30 [ 520.105644][T15084] ? __pfx_direct_splice_actor+0x10/0x10 [ 520.105682][T15084] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 520.105715][T15084] do_splice_direct+0x174/0x240 [ 520.105742][T15084] ? __pfx_do_splice_direct+0x10/0x10 [ 520.105770][T15084] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 520.105800][T15084] ? rw_verify_area+0xcf/0x6c0 [ 520.105828][T15084] do_sendfile+0xb06/0xe50 [ 520.105856][T15084] ? __pfx_do_sendfile+0x10/0x10 [ 520.105889][T15084] ? __x64_sys_futex+0x1e0/0x4c0 [ 520.105923][T15084] ? __x64_sys_futex+0x1e9/0x4c0 [ 520.105956][T15084] __x64_sys_sendfile64+0x1d8/0x220 [ 520.105987][T15084] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 520.106020][T15084] do_syscall_64+0xcd/0x4b0 [ 520.106046][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.106072][T15084] RIP: 0033:0x7f6fa778eec9 [ 520.106092][T15084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.106117][T15084] RSP: 002b:00007f6fa85ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 520.106142][T15084] RAX: ffffffffffffffda RBX: 00007f6fa79e5fa0 RCX: 00007f6fa778eec9 [ 520.106157][T15084] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 520.106170][T15084] RBP: 00007f6fa7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.106184][T15084] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 520.106199][T15084] R13: 00007f6fa79e6038 R14: 00007f6fa79e5fa0 R15: 00007ffcb5135bf8 [ 520.106222][T15084] [ 520.106230][T15084] [ 520.106237][T15084] Allocated by task 15085: [ 520.106248][T15084] kasan_save_stack+0x33/0x60 [ 520.106281][T15084] kasan_save_track+0x14/0x30 [ 520.106299][T15084] __kasan_kmalloc+0xaa/0xb0 [ 520.106315][T15084] __kmalloc_noprof+0x32f/0x880 [ 520.106328][T15084] tomoyo_encode2+0x100/0x3e0 [ 520.106348][T15084] tomoyo_encode+0x29/0x50 [ 520.106367][T15084] tomoyo_realpath_from_path+0x18f/0x6e0 [ 520.106386][T15084] tomoyo_path_perm+0x274/0x460 [ 520.106402][T15084] security_inode_getattr+0x116/0x290 [ 520.106440][T15084] vfs_fstat+0x4b/0xe0 [ 520.106460][T15084] __do_sys_newfstat+0x87/0x100 [ 520.106481][T15084] do_syscall_64+0xcd/0x4b0 [ 520.106495][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.106509][T15084] [ 520.106513][T15084] Freed by task 15085: [ 520.106520][T15084] kasan_save_stack+0x33/0x60 [ 520.106535][T15084] kasan_save_track+0x14/0x30 [ 520.106552][T15084] __kasan_save_free_info+0x3b/0x60 [ 520.106565][T15084] __kasan_slab_free+0x5f/0x80 [ 520.106582][T15084] kfree+0x2b8/0x6d0 [ 520.106593][T15084] tomoyo_path_perm+0x29a/0x460 [ 520.106608][T15084] security_inode_getattr+0x116/0x290 [ 520.106625][T15084] vfs_fstat+0x4b/0xe0 [ 520.106642][T15084] __do_sys_newfstat+0x87/0x100 [ 520.106661][T15084] do_syscall_64+0xcd/0x4b0 [ 520.106675][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.106688][T15084] [ 520.106691][T15084] The buggy address belongs to the object at ffff888027818d80 [ 520.106691][T15084] which belongs to the cache kmalloc-64 of size 64 [ 520.106703][T15084] The buggy address is located 36 bytes to the right of [ 520.106703][T15084] allocated 64-byte region [ffff888027818d80, ffff888027818dc0) [ 520.106717][T15084] [ 520.106721][T15084] The buggy address belongs to the physical page: [ 520.106737][T15084] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27818 [ 520.106750][T15084] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 520.106762][T15084] page_type: f5(slab) [ 520.106775][T15084] raw: 00fff00000000000 ffff88801b0268c0 ffffea0001087500 dead000000000002 [ 520.106789][T15084] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 520.106797][T15084] page dumped because: kasan: bad access detected [ 520.106804][T15084] page_owner tracks the page as allocated [ 520.106809][T15084] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5211, tgid 5211 (udevd), ts 51425068842, free_ts 51356455342 [ 520.106833][T15084] post_alloc_hook+0x1c0/0x230 [ 520.106846][T15084] get_page_from_freelist+0x10a3/0x3a30 [ 520.106860][T15084] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 520.106875][T15084] alloc_pages_mpol+0x1fb/0x550 [ 520.106894][T15084] new_slab+0x24a/0x360 [ 520.106905][T15084] ___slab_alloc+0xdc4/0x1ae0 [ 520.106917][T15084] __slab_alloc.constprop.0+0x63/0x110 [ 520.106930][T15084] __kmalloc_noprof+0x501/0x880 [ 520.106942][T15084] tomoyo_encode2+0x100/0x3e0 [ 520.106960][T15084] tomoyo_encode+0x29/0x50 [ 520.106978][T15084] tomoyo_realpath_from_path+0x18f/0x6e0 [ 520.106998][T15084] tomoyo_path_number_perm+0x245/0x580 [ 520.107015][T15084] tomoyo_path_mknod+0x10c/0x190 [ 520.107036][T15084] security_path_mknod+0x161/0x310 [ 520.107061][T15084] lookup_open.isra.0+0xc17/0x1580 [ 520.107082][T15084] path_openat+0x893/0x2cb0 [ 520.107105][T15084] page last free pid 23 tgid 23 stack trace: [ 520.107118][T15084] __free_frozen_pages+0x7df/0x1160 [ 520.107147][T15084] rcu_core+0x79c/0x1530 [ 520.107160][T15084] handle_softirqs+0x216/0x8e0 [ 520.107177][T15084] run_ksoftirqd+0x3a/0x60 [ 520.107193][T15084] smpboot_thread_fn+0x3f7/0xae0 [ 520.107211][T15084] kthread+0x3c5/0x780 [ 520.107222][T15084] ret_from_fork+0x56d/0x730 [ 520.107234][T15084] ret_from_fork_asm+0x1a/0x30 [ 520.107251][T15084] [ 520.107254][T15084] Memory state around the buggy address: [ 520.107262][T15084] ffff888027818c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 520.107272][T15084] ffff888027818d00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 520.107281][T15084] >ffff888027818d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 520.107289][T15084] ^ [ 520.107296][T15084] ffff888027818e00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 520.107306][T15084] ffff888027818e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 520.107314][T15084] ================================================================== [ 520.120162][T15084] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 520.120190][T15084] CPU: 0 UID: 0 PID: 15084 Comm: syz.2.1894 Tainted: G U syzkaller #0 PREEMPT(full) [ 520.120227][T15084] Tainted: [U]=USER [ 520.120237][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.120252][T15084] Call Trace: [ 520.120261][T15084] [ 520.120269][T15084] dump_stack_lvl+0x3d/0x1f0 [ 520.120301][T15084] vpanic+0x640/0x6f0 [ 520.120326][T15084] panic+0xca/0xd0 [ 520.120349][T15084] ? __pfx_panic+0x10/0x10 [ 520.120372][T15084] ? fbcon_prepare_logo+0xa03/0xc70 [ 520.120398][T15084] ? preempt_schedule_common+0x44/0xc0 [ 520.120447][T15084] ? preempt_schedule_thunk+0x16/0x30 [ 520.120486][T15084] check_panic_on_warn+0xab/0xb0 [ 520.120511][T15084] end_report+0x107/0x170 [ 520.120542][T15084] kasan_report+0xee/0x110 [ 520.120576][T15084] ? fbcon_prepare_logo+0xa03/0xc70 [ 520.120607][T15084] kasan_check_range+0x100/0x1b0 [ 520.120631][T15084] __asan_memcpy+0x23/0x60 [ 520.120657][T15084] fbcon_prepare_logo+0xa03/0xc70 [ 520.120689][T15084] fbcon_init+0xd77/0x1900 [ 520.120716][T15084] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 520.120756][T15084] visual_init+0x31d/0x620 [ 520.120794][T15084] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 520.120827][T15084] store_bind+0x61d/0x760 [ 520.120854][T15084] ? sysfs_file_kobj+0xe4/0x290 [ 520.120886][T15084] ? __pfx_store_bind+0x10/0x10 [ 520.120910][T15084] dev_attr_store+0x55/0x80 [ 520.120946][T15084] ? __pfx_dev_attr_store+0x10/0x10 [ 520.120982][T15084] sysfs_kf_write+0xf2/0x150 [ 520.121014][T15084] kernfs_fop_write_iter+0x3af/0x570 [ 520.121040][T15084] ? __pfx_sysfs_kf_write+0x10/0x10 [ 520.121072][T15084] iter_file_splice_write+0xa21/0x12e0 [ 520.121112][T15084] ? __pfx_iter_file_splice_write+0x10/0x10 [ 520.121145][T15084] ? __pfx_copy_splice_read+0x10/0x10 [ 520.121185][T15084] ? __pfx_iter_file_splice_write+0x10/0x10 [ 520.121215][T15084] direct_splice_actor+0x18f/0x6c0 [ 520.121246][T15084] splice_direct_to_actor+0x342/0xa30 [ 520.121275][T15084] ? __pfx_direct_splice_actor+0x10/0x10 [ 520.121308][T15084] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 520.121342][T15084] do_splice_direct+0x174/0x240 [ 520.121371][T15084] ? __pfx_do_splice_direct+0x10/0x10 [ 520.121400][T15084] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 520.121438][T15084] ? rw_verify_area+0xcf/0x6c0 [ 520.121467][T15084] do_sendfile+0xb06/0xe50 [ 520.121500][T15084] ? __pfx_do_sendfile+0x10/0x10 [ 520.121532][T15084] ? __x64_sys_futex+0x1e0/0x4c0 [ 520.121568][T15084] ? __x64_sys_futex+0x1e9/0x4c0 [ 520.121606][T15084] __x64_sys_sendfile64+0x1d8/0x220 [ 520.121642][T15084] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 520.121682][T15084] do_syscall_64+0xcd/0x4b0 [ 520.121711][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.121737][T15084] RIP: 0033:0x7f6fa778eec9 [ 520.121757][T15084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.121783][T15084] RSP: 002b:00007f6fa85ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 520.121808][T15084] RAX: ffffffffffffffda RBX: 00007f6fa79e5fa0 RCX: 00007f6fa778eec9 [ 520.121823][T15084] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000003 [ 520.121834][T15084] RBP: 00007f6fa7811f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.121844][T15084] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 520.121853][T15084] R13: 00007f6fa79e6038 R14: 00007f6fa79e5fa0 R15: 00007ffcb5135bf8 [ 520.121868][T15084] [ 520.122176][T15084] Kernel Offset: disabled