last executing test programs: 4m16.240819499s ago: executing program 0 (id=274): unshare$auto(0x40000080) r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x2c0002, 0x0) pread64$auto(r0, &(0x7f0000000080)='nl80211\x00', 0x6, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) 4m14.368745429s ago: executing program 0 (id=279): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000004180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto(r1, 0x4008af03, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x5, 0x0, 0x4) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x400, 0x0) ioctl$auto(r2, 0x921064ad, 0xffffffffffffffff) r3 = socket(0x2, 0xa, 0x106) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r3) r5 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000003c0), 0x28000, 0x0) read$auto_fops_atomic_t_ro_(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r6) r8 = gettid() sendmsg$auto_TASKSTATS_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000008", @ANYRES16=r7, @ANYBLOB="010a2bbd7000fbdbdf250100000008000100", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20008010) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) r10 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x900, 0x0) r11 = semctl$auto_GETPID(0xe, 0x2, 0xb, 0x1) prctl$auto(0x3e, 0x1, r11, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r3, &(0x7f0000001c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000006480)=ANY=[@ANYBLOB="e4190000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="081cfe8ebe6bd7bf29000000a4d3e09bebcfe9f1d75e041b6f1a6dd409835d6977b7290438d4764a392862b4b1a66fe995fb6d3f69f93446c8f4eb7b03e7c3087b02c335c5178af1943a25415991f5f39bcfd4892ed7216c5687e1f63d822145e5ba0e99ba7b4e0e36e51a6e1345e26d0d83468b2dbec8a04e7d7155dc707d79ca4038e8a06eb29d86f26d2509859eae8135887a03e45c6db7a261a56458ffccefea13784e6f17b4babf29eae6d4d78851b910b11f16d35d19106c54fa4c9c79203d495cfd729d3173307e044d588e221c4ded2f004a7c6109e2a53bc0258df86e5ecbd17bcd5e26439512cbdb64ecd9efd32004c96b94ae5064464867d2f10da0e0e0e788d366a8e0b9da4ac43f18b0cdcd56e45a26f79c5a2ac1745a1f5af0a3cbc7ac1463c52f328b7bae14ede8712bdeb60b53637c607587fb10b37c301ca7fe4d0094fbd972f606ca7fc3b26ee1e9a69c2b56e7119e1717a106228565b7d2e2a9c3b0b84743fdc7f2033cbe90352fef4252c2166fcf588421a4a304abc4d766b23b56919c61475e18fb060e18a45ab368cfe17de69c98ae872a3f6a1fa8eab0b514e604107c0092a6e17c9c46a37f5621763cf5a33199f21192414006d1e196619bab747c31aba44598c84fe5968d8a597a61dc3d0454ddebcfacd927af284592bdf23eb2d5cf7b94eb991e801c3e776c189403edad0731f21b14572d1d9106769605efc99abcc211bee2f7ab069369b42be7319b3227a7b1d6145a79c08656bba8157b9a09af8491ff9040c20775a81f972b8614688a23243d1a30be0f65ce4fcf52fb95d580cf773852f27630f3dac04a6a539f4d7a5c8792dd5925a9e76fd496cca112653d233917f7099fa2728acb017eea2d44051043b3f707200d0d85e1e2ba02e8f7ab87337b2582cd45cb94894f640d976af4d17a56aa8baccfbd44416f4be62d64705847ebb24cdf8a2600a319b9669c3483ff5b3e35b9f2e8a89fad08d3a5e3ffc23e949f03163975127a832599db7a4f8b6ec0a6a73789fade2526b67a860fadf3573cf4d7c8d7b56d931d51e7febea07e549f38bf79ba6bec27684377981f5cc87405fc9e71c0a4d5ba0aaf6a7b3a02c31f76c26452e09df772b8295485d5922f4198a4da230b52a551917bcda27409687b550dcdef66069c8873fafc185f033caa28eea8afdf0e73ac16b6a2430936b660b7000cb99b57e9cd25858a83036d1bd140e1b9d4f57fd4a8e42eb62791b53105cf4d7abc38d22eed39e0ee675c5823bc1c9617736895950896945fea1e8ff5f987c777fef4c44b96134d02d3ee801091fcd13ebb2ac4e75e4b64f5b09dff471a1cf8a4fa8fdd521904e0d8499bcc24c6511e54a4894b6dca43510c7e6abb65757aeb30a07780d42b768a34b27fd402f33da1238ed421a965506620992ff95da86c23690d8cc784ac123fe31ee97a3224361cd5051c39c20d9ea5391ac9b84ed907473ca442a23b3655b624e7ade5a609b73e1249e96d2751ed1906918929701b10457e01d23497370e84ba7f774384fc67ee2b4d0ca47d08a108fee9c566352ec53c45d5cc7015ea421ba66bdec5f8c71f9af7b7bf2ec19df90cb625b62b14cca7553c32947cd58f50faaa50304139c304608d3dc3ad7b4d85656603d0e77c47f936c7d583cd63e4d8e890f4c09f5f6d32d9baee2fe89e0ce17ea0a12068dc9723d92b63641134bbf518060715da2380311301449c02671e1a83cb058ea1dd6879492674b297d14eacfe53f475164299f09f6dfee543155e7ada97cb1c74a57d49e72dd05e9266ebd59b4c4efd9f51a5941e704997b2c827c6cca57f536d798e636bd5c7eec5d97015714a1d1a8cf7e3780b5d761a551dbe5cef919e36385367af5f769b44c8934e07689f153e7c80ac10e80e56b740c7b589f582791ff69724352668e5b8f8cce64c18a01d458ddb3a2b64ae067aa22b2099ad97e06da2e46e8a84ecd854b6a179c74d928bb8e56cad71827948843acd670b1e9c1e5a99bd8fd0d250f4436036ef47817dc6070c91a435a1e6a6e4f6797a9b7a2c992a7700176d3e93554518b6c4916b02a40e3c391d79dcad21e339b918eaab3f98bd47e0f3cdacd03916caefa1fe09ea275db15df9fe90bd8e09479f67e20ce872846b0fca60679e61c231da29ab7cae854c2c05a24f87a2579445f1b250ca4cea4e45b96d9d38180026eacccc089e15414c7733cbadb80f5f135b8f1cc121efb5d9800171cea9abd5f6ef80934890a21073392b9109d2ee4abdee2de4b42701ce0e9c25ecd079f59a1d3beddaf46c146cf4521bcd400a2c851f7a056a8b86336ad69467e2826708f1a8b5d881d6bd9544c514ab9cad9ccdd6467c078f92cede1bb528017df2f0844b7c1c71dcebc69e1461de96247efc1f5c98c169d7f7466a432d3c3b57e07b76b316fae1bc9541e60a5f223e1fb165f5528406b6afd14891b8cf2308e172b50f429db9c90a1294fc6fd9f70ae4545bea94e792177506650cbb0edaf95630c666405c6d2c78507201a911e4d941a31a55cd49613dbba84c1ecfee28c3287b7beb0769c801e6ca56d261c571c5eb819f7cb5028e08e64fd3a4a4e229dfad14d32dc1f6e4aa3c1a151665cb1c19f2113ca890190c4dfa6edf5cbe8419b7757836a34cdd24d903800176ff6e6041ba0b41c38d4ce563b3a69aec67da6ee17e3916d11a4af8eb1bdbd6a34df7cd78e0eedfdd2346c6733470675ccb7c197b5afc2338129ed9ca0ff732e31c9835d5116601463c8c44d1fbd26e3fbd0bf902cb4be6e2d85565a7b5ef9863b0d1097666bb8e82f155411a7a692d2153ad4491c9a39e3d4a0925807efc63d3499e3bd07a64ebfd937c6b20d429afb356099686dab7a44f2df41d815ff7842b14c7a07e2ff7166c4a36d5e7c7f27c0c2b2012fc468036709be60025cf26aaf02d0b28453c05299cce4123e1ec9209ee8fa8a564939851d89380f23006f03afb01553f23de3ed1623609964c8c4903879bd1dbe6795aaf9e6ac1f336f9771c64a8eb8abb07fd1b8e3891ced629cdccebc44528cedff22441ea7719b26b52bcdb38df0e398e374975e576da15ac3dcb8b7ccdf93f468a99b5d412c659bcc51378cf05a8aa842dea6ef600ccbe7f36f900f2b9be22a58b5b9b6477791ec567e6db341026c743d5776c01535bcf323b23023a4538ecf8cec47f2ba62dc2f038ff72e76858e13f65717583c611b5124cdb7f88719fb9c36ae8377ab0ed470c9bc7c415359fbb04d6d601e8ef5df578a562c7595003f85faa6ec9834417927d08d9876b4e5f31adac7589f4a29daff717b862bf50140ab8f2146b3a870a2df4818f79c786b38ab9ee82e6c0259867366cfdf60adb4f9553a4a411bea4350e9cff4aac9980ab1c8994b07de8cbffaede4695eb53d1aeb23682e823f70193b5a07f9f2eb0350a134f7e6ed9437880ff023ef660bd62bebc4e62640a6bc9201730c154315698e6eb50833229cee160c1c79b22d1fde8bd1e22bbd0364b1ad9cf3e80adf96f53fa782de74ee9e84adb2cc560544db5a2f1a50059a792b7fa3e76ab08df70f907bd18dad8ace7c6f11a62335894cbef00e4b2dd629e83135d9120ac4430f818be46b01fc4b024c3be81e9197bda85cf0e386a06ebb8af564d9613e51009129862c76ab4ee2c5f1fc45f92fcaa2a2c34b0e028d44ce9bf921a221bac5bea0100fb218e6ea4f0a7e7a5a8df57a334e6825e0d8d415d3eafdadda7f75fba9711bdaa5a7e8d6a11ef48948bfc01180c75cdab7cf19cc0054b63e8f1ced58836c2f67b17ebb75f1fb7641ae27f47aa6e2fd7559a9daba157025936a887f03d3af8b6fd859dfa1fc59b140116ad603449ef02317e6046ff219cebc2175938e300cbbc87a3c41b3e4908c81af1039d0a6b713e9721da6b5128386101fc467e813b8c2cc4dc80dc49cf8c089110eab476945b3ef24604a3738e81f98d4ad62847d163d097aa68dfc7d19584e01b1157a64523b1d7e0ec3b7b60149c3cdd475100560f95f5d57b3f7d57ba02b11dc94f08134357d04ec038796e57064d8750cafb1c12958c911f8e45c16d86a4d0356887db7373a0b4e4f956db6a58d5edb57a1e68491b21191264185e279f38d31f9dc182f161c1a3b928fb34943460260805daa078c42cdd299e124afaee0197e8e58debf6130a85cfdecbca593f6e48d600d72336b68adf538c2d871727f29ddff3ed3344d40592d9419f31843f4910b2adaae1e36fad4e08f5f67c0968ea71f5a0cece549c6b3ada47046141095bcf91833c391ca648aa7058da2b6cb1e101fe8575e1f9efeb802ae340543b5629a941ac08a7eaf425de9687d59d5d62594e11724a18cf4b8eb6cd24affe1db05eaf5a91049fb576ab500ed38a64495f7769a2a7a54d0cb1879ad6d5e6100fb54128c8d22e780d4b15e92999e560344821afbba95fc60b12793f6f822cc9d4ca18c47d79997ff432ba51d3a9a97a9f29d9be063055a33757548c20fe1cc7b574354bb830a6d31a53292b57a7555b535993f222b33007d528a554b27587d2dd14101d4344d08fecf13499f373ce73b2fee74d9f7a34bda594c31720b1cbdd61f5cee9fd9a8bfef1ef2e832043528f7918cb4612cbb920ae8feb9febc9fa42e0f159b9467ed691c5cfb357f23a67bcc55becda173bf16b107141e65612afdc85a25a68f13cbf6d97f674887b4aa9db683d6cd60a76f6f7aa1c72852496a872881f7ab387f57316d557ef53d20b6db8c637a1614c65fd75dd4c9886bb60fcc3c54b5bbee823e3327ad18d08771fa47318a1c52cdc3e668ab60091198d9c27665ac193f7d8027ac296a3bde21f3754c24db5e6291b23bfbd30cb13a78c4e0abe16db07210f068764392d2dcfcb9d56d7ca6692ff9bc043ea2beba2e963d016ac61a0e0e3bd1dd0429c62bac5e2f737f45981e54585cb1f44038ca619924a4f39cb87eb9cc8bee27dd9c7aed67b3910f27c9ac8ee87be1c7c60b292e8ab1b78e7c3d93fd34cec6c31e5da6c153dfe13f430e189429ed46acca5d0558335bd04c0fb34a4c3daee5f27219a5195738399c70477403a5cde6f04419c884dca1a7b2d1ab24d1e83b557d967576b7b7b1b13b2da73906f5356c4c7b24191c99ad76daec2210732e5899e191c26f609de968b6975a74c5a445d05dc216651b8ecb773e0c9424a07d8e4e6517edcde28a1623a85c9b410a56a231b4a0e25598a06cf357172ac6540bb1fc37434dc1c217b17b3531d8e45aac8b4549415c1c803a5b2ad658c0b8f5ad1c939513541d5cb8249314af582509c8c1ce4db5515a129470fc10cbf714562bf1f4a1376bddd79c33cc4ee63a545f2cd1d6219d52d53ced59800c567b2e6811f2d9237cf89ddea900176cc4057cb62877df4415a8b2f1e8bc5d0f00941fecc866f6356bed96949f70431b6bfe382433d0eac05bce5b272463f61fbbcd3613dd4e7dd60f3701fa8911daaf446e5f85fea3cd6066953f75744755df3a3332dd7ee2ae78a97669983030193330aaefb1e6ed6f5ae8b5d0d4c1b8e72100bcf103e9604ca9cd295efcc029592dc1d3518557dcfdc906ef16103bf49d4c3a54368979add39f1a1fe782c967487fca9130db2a6b895a1c1cc63d88177da799e794c2dceabe6cf65a3c93f234a26c60652376b993853f051c75a6268aaaf8c0c887a289f07df7a7f12f8c0609bd10fc1a59b60857fdc7bdf8a646ac8cdfbdbca6bc655f954819b4703fd1f6c2b70ca2cfab181426318be23727341bba6add86c203b898057bf90a314501116c2ba2971ee868498a5b366e364f2fc93463efd3eab804a021f8c85cd6bbc2eab5632dd9585c2e8fcf1633d128559cbc409046dcd85b9454c566ebce0d6683556576a8ed52d75ccab58f78c5aece9cf4108c28f67ae71d60dcefe1749dcf381d0b45677884c0a6c1d06080c395be3bae77dc2ad8e6a549c0ad4a943e8da6cdc1ed2fcae3636b3bced5fa5ec3233c812030323491db046f23b44d2b1c8b7d5416e0de14f20ebd3908ad3880836b65bb5f6972aef09515910507f8ad2cc30effbc5a32f79411c2de54cbb51ee9fd99dfe8f960d43bb26e6568049f41058fcabe0827c2119690f158f094ee8975d0f07a2d21a91fcd6bb54834b7bb44dfff83ef58aedf1a25abdbdc8a5643215a6443d9721d8ce799bb65046a3e3b92a24c1deb6385835a1a3839e4e68643962b3213991c6ab1c9a907b06e1168e2933c7f070e9cc3bd544c599e840c24097c84710f5f4fa264873cfd3fafc3b0faeb566c436e0d373bf8173eaf2aee4b9d3bafcfb4f39c031af124be98adf53fa66fb7d590375d79171089287ca3fd9e1da1297df31b0527cc6a0e2630da1e6d5e93c52cbb6cc1400020180e3001e800400cc800400df802e33af459966d5bca9b4c8c385acf3ec170534721792b657c9d88c0f16eab5ddbbd42d585cf5c092b63de43af01d4d3b264e2aecf8e1974e0d27edbc9f6c05145a5ba7a03a79fd2bd5e65dcf85dfb2279e059e33f2e78f1f3617d6c5805e99b4892ca6833334000d69d897a2e9008166b040a6bd3676499442fc48442e4c4ca53a312b907a1342650022689782d13adc97210bb6b550b962565892a2ef75921959c0c9271171fd2df434f4ce713fa025b929fa90f30f44980dd286d0b6387981d625c808000b00", @ANYRES32=r8, @ANYBLOB="0c007000f7ffffffffffffff00ec0048809379bbc58d06192483beefc4bcc7598157cf2d524c5199f58b5c8c94880939b582014b006c0c3afb8f416d83570655f9f8d0d6bc78b9dbb4c584ef57564b22cd4f84fc67e65b3cfa7f9a10794e70a38341f97e585529e1f4879467c58466708a719c6824a2ee8f0256ca94188d0c89453df13b26469905cf5d4602fe8692ec4ccc4baa135ea5eb0e9566c0f648923a2ecc3721dd088bffe424520774510e4100232b2df98af5eb4270a192d708916d035b9d7d26acb0b342e2a903c9fa846ac525d3c6819dec1f8b816faf9af74b16a5024798140c03ef5608004900ffffffff08009500", @ANYRES32=r3, @ANYBLOB="0400410008003300", @ANYRES32=r9, @ANYBLOB="132e2355a155cdc75420b98514005f8008004d00000200000800e000", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x19e4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) prctl$auto(0xe4, 0x100000001, r9, 0x36, 0xffff) 4m14.033059844s ago: executing program 0 (id=283): r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r0, 0x0, 0xffffffffffffffff) 4m13.896036644s ago: executing program 0 (id=285): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdcb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x10001, 0x7, 0x8001, 0x7ffffff8, 0x5, 0x7, 0x5, 0x61, 0x103}) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x240240, 0x0) mmap$auto(0x2, 0x7, 0x9, 0x10, r0, 0x16) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x21, 0x9, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1, 0x5, 0x4, 0x5, 0x7) socket(0x0, 0x800, 0xfffffffb) mmap$auto(0x7, 0x2000c, 0xdf, 0x20ebf, 0x40000000000a5, 0x8000) socket(0x18, 0x2, 0x5) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0) ioctl$auto(r4, 0x40085618, r4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/wakeup/wakeup1/last_change_ms\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000440)=""/222, 0xde) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xbff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) prctl$auto(0x3e, 0xffffffffffffffff, r5, 0x1, 0x2) select$auto(0xa, 0x0, 0x0, &(0x7f0000000180)={[0x1fc, 0x6, 0xffffffffffffffff, 0x1, 0x948b, 0x4002a1, 0x95f4da0a, 0x8000, 0x3, 0x62, 0x80000001, 0x209, 0x4, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xfffffffffffffffd, 0x0, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x2, 0x2495dae0]}, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NLBL_MGMT_C_ADD(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000080) 4m8.895267778s ago: executing program 0 (id=303): unshare$auto(0x40000080) r0 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x2c0002, 0x0) pread64$auto(r0, &(0x7f0000000080)='nl80211\x00', 0x6, 0x9) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x1, 0x106) setsockopt$auto(r3, 0x1, 0xf, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000001d80), 0x101102, 0x0) write$auto(r4, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r5, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="aeff0000", @ANYRES16=r6, @ANYBLOB="a9e127bd7000ffdbdf2501000000050006000500000000000500720000000000050048000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20008810) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000000), r2) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r5) connect$auto(r5, &(0x7f0000000300)=@in={0x2, 0x4e20, @rand_addr=0x64010100}, 0x6) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r7, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x800) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xa}]}, 0x1c}}, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r8 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r8, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4m8.114499589s ago: executing program 0 (id=305): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b72, r2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20440, 0x0) ioctl$auto(0x3, 0x40045436, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x42, 0x0) write$auto(0x3, 0x0, 0xfdf3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/afs/cells\x00', 0x181800, 0x0) read$auto(r0, 0x0, 0x80) r3 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000140), 0xc0100, 0x0) setfsuid$auto(0xee00) setfsuid$auto(0xee00) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)="6e3e6c8c406ade24eb6232c750c20d00992b9da41d18c55ddda5f161ca2bfaa0d808032ae604e6dc91f2bc50cc628dcfb45869e1f869d84d8935552a26dfb443b81f4cbf3b307638336a1d3239b56c4a3f016516bd946c2432d6e7dbd2ed3444a9b6e80657cd8362dd9fe58741288f14a7684bce59586e6994c6d061b4f464163cfa3c8c5f38bca5d856271f6d9ecade51a7d8b1b882e824af343c88ce3903d1878b866dce206a25c0726d5313a1134c46805bfc201229ec14d31e53dc034d7fd0ebda37cf2ac0224e300b", 0x1) 3m52.907337981s ago: executing program 32 (id=305): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b72, r2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20440, 0x0) ioctl$auto(0x3, 0x40045436, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x42, 0x0) write$auto(0x3, 0x0, 0xfdf3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/afs/cells\x00', 0x181800, 0x0) read$auto(r0, 0x0, 0x80) r3 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000140), 0xc0100, 0x0) setfsuid$auto(0xee00) setfsuid$auto(0xee00) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)="6e3e6c8c406ade24eb6232c750c20d00992b9da41d18c55ddda5f161ca2bfaa0d808032ae604e6dc91f2bc50cc628dcfb45869e1f869d84d8935552a26dfb443b81f4cbf3b307638336a1d3239b56c4a3f016516bd946c2432d6e7dbd2ed3444a9b6e80657cd8362dd9fe58741288f14a7684bce59586e6994c6d061b4f464163cfa3c8c5f38bca5d856271f6d9ecade51a7d8b1b882e824af343c88ce3903d1878b866dce206a25c0726d5313a1134c46805bfc201229ec14d31e53dc034d7fd0ebda37cf2ac0224e300b", 0x1) 14.109483514s ago: executing program 3 (id=1280): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x28000, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x9, 0x63, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000000a, 0x0, 0x3, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, &(0x7f0000000000)="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", 0x28f) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000000540)='a~)iK\x19g\x84\x03\xc91\v\xe3\x9963\xd4\xee^qvo\x160\"\xc7\xfc>\x99^\xbc\x1f\xaf\xa2\xe4d\x008}\xf253\xf8\xdf\'(b\xff\a\x00\x00\xea\xa4\xdaMf\x82\x1d\x83\x17\x8dA\xbe\xb6\a\x9e\x1b?\xf3jS\xfa4v\"\x04\x00C\xee\x92\xaa\x00\x00\x00\x00\xdb\x13\xfd i\x94\xb3\x14p4\x7f|\x89\xf3\x8d\xf1n\x87@1Q[\xc1M|a \xa8\xa8\x808L', 0x8002, &(0x7f0000000680)="4c9effba4b2a9f9fd74058beaa025350bc1778e30d08e943a0204565a4adf6df600549ac32f7f02ac66d78a419bca577d590d942120210f683d4ce7a4731b644a181f4093cdd18c341183c281ed6cd6c8cbf589eab665558554281745ded02136eb208ce9cfbd21bcd676d8729a7e3193cd20d0fb6b8f116e9907b81204bb801492b4c71") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f00000002c0)=0x3) ioctl$auto_MEMISLOCKED(r4, 0x80084d17, &(0x7f0000000080)={0xfffffffc, 0x4f90}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r2) sendmsg$auto_NL80211_CMD_SET_PMK(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0xb}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9}, @NL80211_ATTR_WDEV={0x48, 0x99, 0xfc}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c095}, 0x20008001) r6 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r5, 0x805, 0x70bd2d, 0x25dfdffb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4008040) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r7 = socket(0xa, 0x1, 0x100) setsockopt$auto(r7, 0x6, 0xa, 0x0, 0xfb3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x40802, 0x0) socket(0xa, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x8, 0xd, 0x100007d48, 0x948b, 0x3, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) ioctl$auto(0xffffffffffffffff, 0x1fffe000, r6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0xffffffffffffffff, 0x8000) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYBLOB="cb5b", @ANYRES16=r8, @ANYRESDEC=r0, @ANYRESOCT=r8], 0x14}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) 13.357483741s ago: executing program 3 (id=1281): mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0xa, 0x5, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) bpf$auto(0x24, 0x0, 0xa) madvise$auto(0x0, 0x2003ec, 0x14) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdfa5050000000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40040) (async) socket(0x2a, 0x3, 0x1001ff) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x4001ff, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) (async) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 64) r2 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) select$auto(0x80000011, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x4, 0x948a, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x100000000, 0x6]}, 0x0) (async, rerun: 64) wait4$auto(r2, 0x0, 0x80000001, 0x0) (rerun: 64) mmap$auto(0x1, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) (async) mremap$auto(0xfffff001, 0x26, 0x6, 0x2, 0x1001feff9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x1ac}}, 0x40004) 11.536728783s ago: executing program 3 (id=1284): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x3, 0x2, 0x73) socket(0xa, 0x1, 0x84) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r1) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40c0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x6, 0xffffffffffffffff, @relative_id=0x2, 0x9}, 0xa3) sendto$auto(r0, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyv8\x00', 0x8040, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) acct$auto(0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x7) ppoll$auto(&(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) close_range$auto(0x2, 0x8, 0x0) 10.066522847s ago: executing program 1 (id=1288): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop1/queue/discard_max_bytes\x00', 0x808882, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) socket(0x10, 0x2, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, &(0x7f0000000100)={0x0, 0x14}, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fff, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo$auto(r2, r1, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x3, 0x3, @_sigchld={0x0, 0x0, 0xceb, 0x5, 0x4}}}) read$auto(0xffffffffffffffff, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/fail_page_alloc/times\x00', 0x2, 0x0) read$auto_fops_atomic_t_(r3, 0x0, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x3) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r4, &(0x7f0000001a00)=""/4097, 0x1001) ioctl$auto_IMADDTIMER(r4, 0x80044940, 0x0) write$auto(r0, 0x0, 0xfdef) getsockopt$auto_SO_DOMAIN(r0, 0x2000, 0x27, &(0x7f0000000080)='/dev/ttyq2\x00', &(0x7f0000000140)=0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r5, 0x40000000113, 0x9, 0xfffffffffffffffc, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyq2\x00', 0x149d03, 0x0) 9.146300521s ago: executing program 1 (id=1289): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000c00)) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2a, 0x2, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x1ffffffffffe, 0xd59f) r2 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 7.641290112s ago: executing program 3 (id=1295): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth1_to_hsr/proxy_arp\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r2, 0x4b66, 0x1) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x28, 0x2, 0x0) r3 = epoll_create$auto(0x3e) socket(0x11, 0x2, 0x6) fsconfig$auto_FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x149800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/net\x00') openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae80, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) 6.640688785s ago: executing program 1 (id=1299): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60382, 0x130) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r2, 0x5, &(0x7f00000001c0)="cd681b096f5af3044053d0b6b7935c431e8c2753aad46437045a1d0ad3913815209c9c14abb3a895da28325842bfa7f14dad97b9dde687882045e66833ba6e9a3ddf0a083ede748f500284697fc5e563c8a0c74337b2fb91c6c4f69f24a68b43988f77804f1d26ac0543b95984a685a53373cbcc1165aafb3a98831c7eef27787961dee06a35d5ad429a40f169302e26efb5b9dab3eb05deff75fc650f94f7453a41a85c53fdd89a2c2f090216eab4ce8c921d8e4d5c7393fb689dfc1c2000af6f43cf1bc0ab4fb7e223c9b3efbf6b393031834186f48692923ce47025375d3596bb5349840c7d2c926a50123321356e314ea2940141c7", 0x9) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619b") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b76, 0x7, 0x28003) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) pipe2$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_PRIORITY(r3, 0x17ff, 0xc, 0x0, &(0x7f0000000140)=0xffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xea241, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x69) mmap$auto(0x80000000, 0x200000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4) write$auto(0x3, 0x0, 0x100082) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7111}, 0xfffffffffffffff8) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) 5.463504465s ago: executing program 1 (id=1301): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/pcm0c/sub5/hw_params\x00', 0x900, 0x0) (async) r1 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x40000, 0x0) fchmod$auto(r1, 0x1) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x109801, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0x42cf00, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r3) (async) sendmsg$auto_NFSD_CMD_VERSION_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x814}, 0x844) (async) getsockopt$auto_SO_MEMINFO(r0, 0x4, 0x37, &(0x7f00000001c0)='\xd81-\xfbP7Kv\x13\x1e@\x7f\xd0-\x1d\x9b\xc1_\xf6\x1b+\xf3\x18\xa5\x1cl/\x86\xa5\xbb .\xd5PJ\xc8d(>\xffi\xfd\vP\xe8\x98\xdf8\xd9\xa6\x8bo\xdb\x13\x04\x8d\xe2\xd0\xd8d\xbf,\x02]\xa3\x1fUB*g\xcbc\xf7\xbb\x80+T\xcaS\x98\x15\xb6NX\x14qo\x8comO\x82\xb0a\xad+\x86\xa3\xfa\xf0y\x94Kh\x82\xbe\x05\x11', &(0x7f0000000180)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@nested={0x7, 0x1, 0x0, 0x1, [@generic="32bf00"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x40044) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r6) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, 0x0, 0x40800) (async) unshare$auto(0x40000080) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x744600, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) (async) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) 5.324858033s ago: executing program 1 (id=1302): msync$auto(0x110c230000, 0x200001, 0x6) chdir$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/rnbd-client/ctl/map_device\x00', 0x40442, 0x0) pwrite64$auto(r2, &(0x7f0000000100)='\x00\x00+\x94\xaf\x9f\x00\xb9X!h\\\xfd\xaf2\x11\xd2\x83L\x11\xbb:\x8c/\xd4\xb0\x8c\xf2\xef\xab\xe5s\xbbAO\f\x06\xfda7\xe2\xf2\x1fE\x9d\xab\xd0\xf4\xec!5\xfb\xd1\x97A+P\x10\xbb?\xbct\xd8$\\c\fB\xc0\x93Qp\x8bk\xa0:\xd4pB\xdd\xf5\xc5L>W\x00[%\b\x0e\xe2\x06@y\x81\xb2`\xdc\xb5\x0fNB\xbf\xee(\x87gQ\x93\xbbK\f\x83~A\x1dMY\xa0\x16\xdb\xf0\x8d\x04\x0fR\x8e]_t\xc1n\t_n\x1e\b\x00\x00\x00\"\x8cf}8\xa4\x9c\x80\x06\x00\x00\x00c&<~V\x05#\xe0%P\"j_\x10O\x04\x11\xe7\xd8Z\xb2\xbd}?\xb8\r\xbb\x17\xb7\xaam\xc8\x04Kv\x02\xde\x8bV\xb5\xd9\xec\x88BE\x94M\x8f\a\xfa\xac\xf1\x0f', 0x6, 0x8000) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci5/force_devcoredump\x00', 0x200002, 0x0) bpf$auto(0x7, 0x0, 0x8) 5.216315273s ago: executing program 1 (id=1304): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2b, 0x1, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async, rerun: 64) unshare$auto(0x40000080) write$auto(0xca, 0x0, 0x7f) (async) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) (async) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) (async, rerun: 64) futex$auto(0x0, 0x3, 0x1, 0x0, &(0x7f0000000000)=0x14, 0x2) (async, rerun: 64) clock_settime$auto(0xffff418f, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) socket(0x2, 0x2, 0x1) (async) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = socket(0xa, 0x801, 0x84) (rerun: 32) getsockopt$auto(r1, 0x84, 0x86, 0x0, &(0x7f0000000000)=0x7) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x3, 0x9) (async) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r2, 0x0, 0x18) (async) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto(r3, 0x4008af03, 0x0) (async, rerun: 32) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x80002, 0x73) 4.724599358s ago: executing program 2 (id=1306): socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c00160067"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c810) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(r0, 0x3b89, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c00160067"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c810) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) (async) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) (async) ioctl$auto(r0, 0x3b89, 0x38) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) 4.444633916s ago: executing program 2 (id=1307): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) statmount$auto(0x0, &(0x7f0000000440)={0xd, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffdb, 0x40007, 0x40000000007f, 0x20000005, 0x8, 0x1, 0x6, 0x2400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xffb, 0xfffffff7, 0xb, 0x1, 0x203, 0x838b, 0x84, 0x6, 0x0, 0x5, 0x3, 0x200, [0x0, 0x5, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x400, 0x6, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x5, 0x10, 0x0, 0x10, 0x1, 0xfffffffffffffffc, 0xffffffffffffffff, 0x400000000000, 0x0, 0x251, 0x3, 0x0, 0xff80000, 0x8, 0x6, 0xfffffffffffff74c, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x8000000, 0x100009, 0x8, 0x6]}, 0x1fe, 0x8) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec12\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r0, r0, 0x3) mmap$auto(0xfd, 0x80000002, 0x6367, 0xb112, 0xffffffffffffffff, 0x8) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)="000004") ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = socket(0xa, 0x1, 0x100) setsockopt$auto(r3, 0x29, 0x7, 0x0, 0x5) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20942, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r4, &(0x7f0000000080), 0x0) write$auto(r2, 0x0, 0x41ec) socket(0x1d, 0x1, 0x7fff) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3, 0x1, 0x0, 0x5, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000380), r6) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.01113948s ago: executing program 3 (id=1308): r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/snd/pcmC1D0p\x00', 0x101080, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r0, 0x5452, &(0x7f0000001e40)={0x2, 0x1, 0x5, 0xc, "e95874bb90baf73338e2278b336f66d9f24da88bcc9fbfeb0b938f002fce8d3d405da0043f932a0a972f0c7afdbf870c91e3c9d8cf8f552b7224bd2f6eb0ae15", "3459595e78d266039a6b8db235ea9e73739e5019b4a4b442c93381b23f3a956f63cb871a8cc775f9ae62723c8882c7ac613aeecb0f8f87a759fb71392f8a369cc8ef7eed27fe7d3ab1fc0b23981b7194", "5f5af60aa7da18adb80fef26e964f184e8764aab7edfb83c36a97c17cb9ffa8d", 0x39, 0x2, 0x13, 0x7, '\x00', "c044ade8bf1a11e296938543ce1bcb5372d12e1815e4e5a4adc8ecafe3c08f5745fa2f5ac5b828c4453517a78700b1841810a3d79d3d2bd84a067270ca188fff"}) mmap$auto(0x0, 0x4, 0x6, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$auto_OTPSELECT(r1, 0x80044d0d, &(0x7f00000000c0)=0x2) connect$auto(r1, &(0x7f0000000000)=@rc={0x1f, @none, 0x5}, 0x1ff) prctl$auto(0xc, 0x3, 0x0, 0x30000080003ffffe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r6, r5, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r3, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f0000000340)=@raw_tracepoint={0x5, r2, 0x0, 0x2}, 0xc) 3.954856405s ago: executing program 4 (id=1309): r0 = open(&(0x7f0000000000)='./file0\x00', 0x60382, 0x130) r1 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r2, 0x5, &(0x7f00000001c0)="cd681b096f5af3044053d0b6b7935c431e8c2753aad46437045a1d0ad3913815209c9c14abb3a895da28325842bfa7f14dad97b9dde687882045e66833ba6e9a3ddf0a083ede748f500284697fc5e563c8a0c74337b2fb91c6c4f69f24a68b43988f77804f1d26ac0543b95984a685a53373cbcc1165aafb3a98831c7eef27787961dee06a35d5ad429a40f169302e26efb5b9dab3eb05deff75fc650f94f7453a41a85c53fdd89a2c2f090216eab4ce8c921d8e4d5c7393fb689dfc1c2000af6f43cf1bc0ab4fb7e223c9b3efbf6b393031834186f48692923ce47025375d3596bb5349840c7d2c926a50123321356e314ea2940141c7", 0x9) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619b") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b76, 0x7, 0x28003) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) pipe2$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_PRIORITY(r3, 0x17ff, 0xc, 0x0, &(0x7f0000000140)=0xffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xea241, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x69) mmap$auto(0x80000000, 0x200000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x4) write$auto(0x3, 0x0, 0x100082) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7111}, 0xfffffffffffffff8) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) unshare$auto(0x40000080) memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) 3.255795019s ago: executing program 2 (id=1310): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3a8453d3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0x2, 0x2, 0xc28}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\a|\x03\xcb\x92\xfa\b\x1c\xc7k', 0x2) write$auto(r1, 0x0, 0x98c7) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202003, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0xffffffffffffffff, 0x40008000) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x1, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) capset$auto(&(0x7f0000000180)={0x9}, 0x0) 2.465086401s ago: executing program 4 (id=1311): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) (async) syz_clone3(&(0x7f0000000240)={0x2000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$auto(r0, 0x4008550c, r0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netlink\x00', 0x121040, 0x0) pread64$auto(r1, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x93B\xcd(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xdc\x9e{Z\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\x7fD\xe0I\xf7\x92\"U\x00\x00\x00\x00\x00\x00\x00\x00', 0x9, 0xfffffffffffffff7) 2.16482532s ago: executing program 4 (id=1312): setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x7, 0x3}, {0x51, 0xd8bc}}, 0x0) (async) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, 0x0, 0x10000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) modify_ldt$auto(0x11, 0x0, 0x10) (async) ioperm$auto(0x2, 0x3, 0x1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syz_clone3(&(0x7f00000004c0)={0x82000280, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x58) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x488, 0x0) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8004) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 1.72392344s ago: executing program 4 (id=1313): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/d3cold_allowed\x00', 0xb02, 0x0) mmap$auto(0x0, 0xa00006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x300000000000) ioctl$auto(0xc8, 0x800454e0, 0x5) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/d3cold_allowed\x00', 0xb02, 0x0) (async) mmap$auto(0x0, 0xa00006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x300000000000) (async) ioctl$auto(0xc8, 0x800454e0, 0x5) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) 1.440014903s ago: executing program 2 (id=1314): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/downdelay\x00', 0x10b142, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) read$auto_tracing_fops_trace(r1, &(0x7f0000000580)=""/4096, 0x1000) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/midi2\x00', 0x102, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/disable_policy\x00', 0x0, 0x0) ioctl$auto(r1, 0x9, r4) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0) pread64$auto(r5, &(0x7f0000000140)='ve\xc8)\xb2\x8e\xc1Ph\x93D\a[\x99\xf7\xa0\xb1#\xa1\x97\x05\x9b\xd9', 0x200000000004, 0x101) shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.net/blkio.bfq.weight\x00', 0x8001, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r3) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0xfffffe00}, @ETHTOOL_A_RINGS_TX_PUSH_BUF_LEN={0x8, 0xf, 0xb3cc}, @ETHTOOL_A_RINGS_HDS_THRESH={0x8, 0x11, 0x4}, @ETHTOOL_A_RINGS_CQE_SIZE={0x8, 0xc, 0x5}, @ETHTOOL_A_RINGS_HDS_THRESH={0x8, 0x11, 0x8001}, @ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4020}, 0x0) ioctl$auto(r7, 0x540a, r7) write$auto(r6, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) sendfile$auto(r0, r0, 0x0, 0x200) 1.285152602s ago: executing program 4 (id=1315): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000340)="2a3f9218659200008a677517d554c80b25c30000000000000071dde0152c549d44cf790bd304059e64ec347e9b173c52324e7de19a503727fe47d78e0bc2c5590e61b5d86887240d03bca3460f12f2107274ade4e6e53a728e346cef781b623364989314a43e5fd9e20e24417d6b21117b3308557a7b2aa2cb541dea5cb3b6a521b869ac5ff14cb52c4487dd3a3f4a81ff5957aa1109af5a3a1ce466381cc21fea0c67d8a165f29a6b9537b178bfdd013443481ba707ba4632e0478b951e619775f83f13b36d6426", 0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) futex$auto(0x0, 0xfff, 0x5, 0x0, 0x0, 0x802) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r4) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000140)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) r6 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r6) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0xfffffff4, &(0x7f00000001c0)={{0x8000, 0x8000000000000000}, {0xd976, 0x8}, 0x8, 0x4b, 0xffffffff7fffffff, 0x5, 0xa23, 0x3, 0x2, 0x5, 0x9, 0x3fd, 0x5, 0x6, 0x3, 0x7fffffffffffffff}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000000c0)={@raw=0x1, 0x101, 0x1, 0x9, "67afe370f4bae724f1374a54fd08d63d84ccd376c20810e1d018a9c09c2a9c7bb5cde71dc329c0d4e919922f"}) ioctl$auto(0x3, 0x402c542b, 0x38) socket(0x2, 0x2, 0x1) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x74, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) 1.155790664s ago: executing program 2 (id=1316): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x80801, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x2a0080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60301, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x4) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) 935.192816ms ago: executing program 4 (id=1317): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0x3, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x7fff, r2, 0x7fff) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0xffffffff00000000, 0x2020007, 0x0, 0x100000eb1, r0, 0x529) fsopen$auto(0x0, 0x1) r5 = socket(0xa, 0x3, 0x88) setsockopt$auto(r5, 0x11, 0xa, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/serial8250/driver_override\x00', 0x22b42, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 175.790704ms ago: executing program 3 (id=1318): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/pm_type\x00', 0xe0002, 0x0) sendfile$auto(0x1, r0, 0x0, 0xc01) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x10000, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/software/type\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/157, 0x9d) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) r4 = socket(0x10, 0x2, 0x4) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x1, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = io_uring_setup$auto(0x400, 0x0) r7 = socket(0x2, 0x80002, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) readv$auto(r6, 0x0, 0xfffffffffffffffe) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(r6, 0x40184150, &(0x7f0000000000)={0x400, &(0x7f0000000080)="343c34f4f67943f8c5a6d2711d70652fee4313d3c1f329685b6b8f550343455f918e27b0ae3b990a62503f6b1b79485b703e972258fd30fd3f816e0224769469ae0e95e67d7bec24093e0401f8d6ddb149aa9b5f3608b78be0181c8e2cdc893887305a16808fb07872887ff1bd5ddef3e00131df8691ad34be8c67c2f273fc0d54a26b7fa4cd627da1600bcac89b6d671c23bbfd8be94856d4718fb18b913e084d7c38ce4b8d", 0x4}) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES16=r8, @ANYBLOB="00022dbd7000fbdbdf250200000008000300080000000e0004006e732f6367726f7570000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4045}, 0x24000000) 0s ago: executing program 2 (id=1319): statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x8, 0x0, 0x2, 0xb, 0x3, 0x8, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2003, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x800000100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000009d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c7, 0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x1, 0x2, 0x9, 0xfffffffffffffffe, 0x8, 0x0, 0x7, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x19) (rerun: 32) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x2b7cb0f0) (async) r1 = socket(0x11, 0x3, 0xfffff958) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0xb42, 0x44, 0x0, 0x5d) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r1) (async, rerun: 32) openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 32) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b42", 0xfdef) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x3aad6dc7}, 0x7, 0x4008) kernel console output (not intermixed with test programs): ][ T9600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 305.986558][ T9600] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 305.986583][ T9600] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 305.986611][ T9600] genl_family_rcv_msg_doit+0x209/0x2f0 [ 305.986635][ T9600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 305.986658][ T9600] ? genl_get_cmd+0x194/0x580 [ 305.986683][ T9600] ? bpf_lsm_capable+0x9/0x10 [ 305.986702][ T9600] ? security_capable+0x7e/0x260 [ 305.986725][ T9600] ? ns_capable+0xd7/0x110 [ 305.986745][ T9600] genl_rcv_msg+0x55c/0x800 [ 305.986762][ T9600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.986776][ T9600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 305.986800][ T9600] netlink_rcv_skb+0x158/0x420 [ 305.986820][ T9600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.986834][ T9600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.986863][ T9600] ? netlink_deliver_tap+0x1ae/0xd30 [ 305.986885][ T9600] genl_rcv+0x28/0x40 [ 305.986905][ T9600] netlink_unicast+0x5aa/0x870 [ 305.986928][ T9600] ? __pfx_netlink_unicast+0x10/0x10 [ 305.986956][ T9600] netlink_sendmsg+0x8c8/0xdd0 [ 305.986979][ T9600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.987002][ T9600] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 305.987029][ T9600] ____sys_sendmsg+0xa5d/0xc30 [ 305.987052][ T9600] ? copy_msghdr_from_user+0x10a/0x160 [ 305.987070][ T9600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.987090][ T9600] ? preempt_schedule_thunk+0x16/0x30 [ 305.987108][ T9600] ? try_to_wake_up+0xa67/0x1860 [ 305.987131][ T9600] ___sys_sendmsg+0x134/0x1d0 [ 305.987151][ T9600] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.987168][ T9600] ? futex_private_hash_put+0x160/0x1b0 [ 305.987208][ T9600] __sys_sendmsg+0x16d/0x220 [ 305.987226][ T9600] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.987243][ T9600] ? __x64_sys_futex+0x1e0/0x4c0 [ 305.987272][ T9600] do_syscall_64+0xcd/0xf80 [ 305.987295][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.987311][ T9600] RIP: 0033:0x7fb68b38f7c9 [ 305.987325][ T9600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.987345][ T9600] RSP: 002b:00007fb68c180038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.987361][ T9600] RAX: ffffffffffffffda RBX: 00007fb68b5e5fa0 RCX: 00007fb68b38f7c9 [ 305.987370][ T9600] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000004 [ 305.987380][ T9600] RBP: 00007fb68b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.987389][ T9600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.987397][ T9600] R13: 00007fb68b5e6038 R14: 00007fb68b5e5fa0 R15: 00007ffc1159aba8 [ 305.987419][ T9600] [ 306.530438][ T9600] kobject: kobject_add_internal failed for ieee80211 (error: -12 parent: hwsim43) [ 309.111261][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 309.383893][ T9648] FAULT_INJECTION: forcing a failure. [ 309.383893][ T9648] name failslab, interval 1, probability 0, space 0, times 0 [ 309.451551][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.1.793 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.451579][ T9648] Tainted: [L]=SOFTLOCKUP [ 309.451584][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.451593][ T9648] Call Trace: [ 309.451599][ T9648] [ 309.451605][ T9648] dump_stack_lvl+0x16c/0x1f0 [ 309.451632][ T9648] should_fail_ex+0x512/0x640 [ 309.451648][ T9648] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 309.451673][ T9648] should_failslab+0xc2/0x120 [ 309.451696][ T9648] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 309.451717][ T9648] ? kstrdup_const+0x63/0x80 [ 309.451738][ T9648] ? kstrdup+0x53/0x100 [ 309.451753][ T9648] kstrdup+0x53/0x100 [ 309.451771][ T9648] kstrdup_const+0x63/0x80 [ 309.451787][ T9648] __kernfs_new_node+0x9b/0x9b0 [ 309.451807][ T9648] ? __pfx___kernfs_new_node+0x10/0x10 [ 309.451828][ T9648] ? find_held_lock+0x2b/0x80 [ 309.451848][ T9648] ? kernfs_root+0xee/0x2a0 [ 309.451868][ T9648] kernfs_new_node+0x13c/0x1e0 [ 309.451891][ T9648] kernfs_create_link+0xcc/0x240 [ 309.451915][ T9648] sysfs_do_create_link_sd+0x90/0x140 [ 309.451933][ T9648] sysfs_create_link+0x61/0xc0 [ 309.451948][ T9648] device_add+0x652/0x1980 [ 309.451971][ T9648] ? __pfx_device_add+0x10/0x10 [ 309.451989][ T9648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.452022][ T9648] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 309.452048][ T9648] wiphy_register+0x1ea1/0x2cc0 [ 309.452062][ T9648] ? __rtnl_unlock+0x68/0xf0 [ 309.452083][ T9648] ? napi_enable_locked+0x420/0xa00 [ 309.452104][ T9648] ? __pfx_wiphy_register+0x10/0x10 [ 309.452119][ T9648] ? __asan_memset+0x23/0x50 [ 309.452141][ T9648] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 309.452167][ T9648] ieee80211_register_hw+0x2bb2/0x4160 [ 309.452190][ T9648] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 309.452204][ T9648] ? __pfx___debug_object_init+0x10/0x10 [ 309.452229][ T9648] ? find_held_lock+0x2b/0x80 [ 309.452248][ T9648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.452269][ T9648] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 309.452290][ T9648] ? __hrtimer_setup+0x176/0x280 [ 309.452310][ T9648] mac80211_hwsim_new_radio+0x3323/0x5150 [ 309.452338][ T9648] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 309.452360][ T9648] hwsim_new_radio_nl+0xba2/0x1330 [ 309.452379][ T9648] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 309.452401][ T9648] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 309.452426][ T9648] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 309.452453][ T9648] genl_family_rcv_msg_doit+0x209/0x2f0 [ 309.452477][ T9648] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 309.452500][ T9648] ? genl_get_cmd+0x194/0x580 [ 309.452525][ T9648] ? bpf_lsm_capable+0x9/0x10 [ 309.452544][ T9648] ? security_capable+0x7e/0x260 [ 309.452567][ T9648] ? ns_capable+0xd7/0x110 [ 309.452587][ T9648] genl_rcv_msg+0x55c/0x800 [ 309.452603][ T9648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.452617][ T9648] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 309.452641][ T9648] netlink_rcv_skb+0x158/0x420 [ 309.452660][ T9648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.452675][ T9648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.452703][ T9648] ? netlink_deliver_tap+0x1ae/0xd30 [ 309.452729][ T9648] genl_rcv+0x28/0x40 [ 309.452749][ T9648] netlink_unicast+0x5aa/0x870 [ 309.452772][ T9648] ? __pfx_netlink_unicast+0x10/0x10 [ 309.452800][ T9648] netlink_sendmsg+0x8c8/0xdd0 [ 309.452824][ T9648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.452847][ T9648] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 309.452874][ T9648] ____sys_sendmsg+0xa5d/0xc30 [ 309.452898][ T9648] ? copy_msghdr_from_user+0x10a/0x160 [ 309.452915][ T9648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.452936][ T9648] ? preempt_schedule_thunk+0x16/0x30 [ 309.452954][ T9648] ? try_to_wake_up+0xa67/0x1860 [ 309.452977][ T9648] ___sys_sendmsg+0x134/0x1d0 [ 309.452996][ T9648] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.453020][ T9648] ? futex_private_hash_put+0x160/0x1b0 [ 309.453060][ T9648] __sys_sendmsg+0x16d/0x220 [ 309.453079][ T9648] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.453098][ T9648] ? __x64_sys_futex+0x1e0/0x4c0 [ 309.453127][ T9648] do_syscall_64+0xcd/0xf80 [ 309.453150][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.453166][ T9648] RIP: 0033:0x7fb50818f7c9 [ 309.453179][ T9648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.453194][ T9648] RSP: 002b:00007fb50901e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.453209][ T9648] RAX: ffffffffffffffda RBX: 00007fb5083e5fa0 RCX: 00007fb50818f7c9 [ 309.453218][ T9648] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000004 [ 309.453227][ T9648] RBP: 00007fb508213f91 R08: 0000000000000000 R09: 0000000000000000 [ 309.453236][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.453245][ T9648] R13: 00007fb5083e6038 R14: 00007fb5083e5fa0 R15: 00007ffcf14b69f8 [ 309.453266][ T9648] [ 311.505154][ T9673] rnbd_client L213: map_device: Parameters missing [ 311.956375][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.800'. [ 312.022715][ T9685] FAULT_INJECTION: forcing a failure. [ 312.022715][ T9685] name failslab, interval 1, probability 0, space 0, times 0 [ 312.077980][ T9685] CPU: 0 UID: 0 PID: 9685 Comm: syz.1.800 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.078006][ T9685] Tainted: [L]=SOFTLOCKUP [ 312.078012][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.078021][ T9685] Call Trace: [ 312.078026][ T9685] [ 312.078033][ T9685] dump_stack_lvl+0x16c/0x1f0 [ 312.078062][ T9685] should_fail_ex+0x512/0x640 [ 312.078079][ T9685] ? kmem_cache_alloc_noprof+0x62/0x770 [ 312.078100][ T9685] should_failslab+0xc2/0x120 [ 312.078123][ T9685] kmem_cache_alloc_noprof+0x83/0x770 [ 312.078141][ T9685] ? __kernfs_new_node+0xd2/0x9b0 [ 312.078162][ T9685] ? __kernfs_new_node+0xd2/0x9b0 [ 312.078177][ T9685] __kernfs_new_node+0xd2/0x9b0 [ 312.078196][ T9685] ? __pfx___kernfs_new_node+0x10/0x10 [ 312.078217][ T9685] ? find_held_lock+0x2b/0x80 [ 312.078237][ T9685] ? kernfs_root+0xee/0x2a0 [ 312.078258][ T9685] kernfs_new_node+0x13c/0x1e0 [ 312.078281][ T9685] kernfs_create_link+0xcc/0x240 [ 312.078305][ T9685] sysfs_do_create_link_sd+0x90/0x140 [ 312.078323][ T9685] sysfs_create_link+0x61/0xc0 [ 312.078339][ T9685] device_add+0x5b7/0x1980 [ 312.078362][ T9685] ? __pfx_device_add+0x10/0x10 [ 312.078380][ T9685] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.078404][ T9685] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 312.078429][ T9685] wiphy_register+0x1ea1/0x2cc0 [ 312.078443][ T9685] ? __rtnl_unlock+0x68/0xf0 [ 312.078464][ T9685] ? napi_enable_locked+0x420/0xa00 [ 312.078486][ T9685] ? __pfx_wiphy_register+0x10/0x10 [ 312.078500][ T9685] ? __asan_memset+0x23/0x50 [ 312.078523][ T9685] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 312.078549][ T9685] ieee80211_register_hw+0x2bb2/0x4160 [ 312.078572][ T9685] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 312.078586][ T9685] ? __pfx___debug_object_init+0x10/0x10 [ 312.078612][ T9685] ? find_held_lock+0x2b/0x80 [ 312.078630][ T9685] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.078652][ T9685] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 312.078672][ T9685] ? __hrtimer_setup+0x176/0x280 [ 312.078692][ T9685] mac80211_hwsim_new_radio+0x3323/0x5150 [ 312.078721][ T9685] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 312.078744][ T9685] hwsim_new_radio_nl+0xba2/0x1330 [ 312.078762][ T9685] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 312.078785][ T9685] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 312.078818][ T9685] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 312.078848][ T9685] genl_family_rcv_msg_doit+0x209/0x2f0 [ 312.078873][ T9685] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 312.078896][ T9685] ? genl_get_cmd+0x194/0x580 [ 312.078922][ T9685] ? bpf_lsm_capable+0x9/0x10 [ 312.078940][ T9685] ? security_capable+0x7e/0x260 [ 312.078963][ T9685] ? ns_capable+0xd7/0x110 [ 312.078983][ T9685] genl_rcv_msg+0x55c/0x800 [ 312.078999][ T9685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.079014][ T9685] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 312.079037][ T9685] netlink_rcv_skb+0x158/0x420 [ 312.079058][ T9685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.079072][ T9685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.079101][ T9685] ? netlink_deliver_tap+0x1ae/0xd30 [ 312.079123][ T9685] genl_rcv+0x28/0x40 [ 312.079143][ T9685] netlink_unicast+0x5aa/0x870 [ 312.079166][ T9685] ? __pfx_netlink_unicast+0x10/0x10 [ 312.079194][ T9685] netlink_sendmsg+0x8c8/0xdd0 [ 312.079218][ T9685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.079240][ T9685] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 312.079267][ T9685] ____sys_sendmsg+0xa5d/0xc30 [ 312.079290][ T9685] ? copy_msghdr_from_user+0x10a/0x160 [ 312.079308][ T9685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.079335][ T9685] ? __pfx_futex_wake_mark+0x10/0x10 [ 312.079357][ T9685] ___sys_sendmsg+0x134/0x1d0 [ 312.079376][ T9685] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.079394][ T9685] ? futex_private_hash_put+0x160/0x1b0 [ 312.079433][ T9685] __sys_sendmsg+0x16d/0x220 [ 312.079452][ T9685] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.079469][ T9685] ? __x64_sys_futex+0x1e0/0x4c0 [ 312.079497][ T9685] do_syscall_64+0xcd/0xf80 [ 312.079521][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.079536][ T9685] RIP: 0033:0x7fb50818f7c9 [ 312.079549][ T9685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.079564][ T9685] RSP: 002b:00007fb50901e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.079578][ T9685] RAX: ffffffffffffffda RBX: 00007fb5083e5fa0 RCX: 00007fb50818f7c9 [ 312.079589][ T9685] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000004 [ 312.079597][ T9685] RBP: 00007fb508213f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.079606][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.079615][ T9685] R13: 00007fb5083e6038 R14: 00007fb5083e5fa0 R15: 00007ffcf14b69f8 [ 312.079635][ T9685] [ 313.846327][ T9715] input: f¬ as /devices/virtual/input/input14 [ 315.568827][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 315.674425][ T9741] FAULT_INJECTION: forcing a failure. [ 315.674425][ T9741] name failslab, interval 1, probability 0, space 0, times 0 [ 315.791381][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.4.814 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.791408][ T9741] Tainted: [L]=SOFTLOCKUP [ 315.791413][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.791422][ T9741] Call Trace: [ 315.791428][ T9741] [ 315.791434][ T9741] dump_stack_lvl+0x16c/0x1f0 [ 315.791461][ T9741] should_fail_ex+0x512/0x640 [ 315.791479][ T9741] ? kmem_cache_alloc_noprof+0x62/0x770 [ 315.791499][ T9741] should_failslab+0xc2/0x120 [ 315.791523][ T9741] kmem_cache_alloc_noprof+0x83/0x770 [ 315.791540][ T9741] ? __kernfs_new_node+0xd2/0x9b0 [ 315.791561][ T9741] ? __kernfs_new_node+0xd2/0x9b0 [ 315.791576][ T9741] __kernfs_new_node+0xd2/0x9b0 [ 315.791595][ T9741] ? __pfx___kernfs_new_node+0x10/0x10 [ 315.791618][ T9741] ? find_held_lock+0x2b/0x80 [ 315.791637][ T9741] ? kernfs_root+0xee/0x2a0 [ 315.791658][ T9741] kernfs_new_node+0x13c/0x1e0 [ 315.791680][ T9741] kernfs_create_dir_ns+0x4c/0x1a0 [ 315.791702][ T9741] sysfs_create_dir_ns+0x13a/0x2b0 [ 315.791719][ T9741] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 315.791734][ T9741] ? find_held_lock+0x2b/0x80 [ 315.791754][ T9741] ? wiphy_namespace+0x12/0x50 [ 315.791769][ T9741] ? device_namespace+0x76/0xa0 [ 315.791789][ T9741] kobject_add_internal+0x2c4/0x9d0 [ 315.791803][ T9741] ? kobject_add+0xf1/0x240 [ 315.791819][ T9741] kobject_add+0x16e/0x240 [ 315.791832][ T9741] ? __pfx_kobject_add+0x10/0x10 [ 315.791849][ T9741] ? kobject_put+0xaf/0x6f0 [ 315.791877][ T9741] device_add+0x288/0x1980 [ 315.791898][ T9741] ? __pfx_device_add+0x10/0x10 [ 315.791916][ T9741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.791939][ T9741] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 315.791964][ T9741] wiphy_register+0x1ea1/0x2cc0 [ 315.791978][ T9741] ? __rtnl_unlock+0x68/0xf0 [ 315.791999][ T9741] ? napi_enable_locked+0x420/0xa00 [ 315.792020][ T9741] ? __pfx_wiphy_register+0x10/0x10 [ 315.792034][ T9741] ? __asan_memset+0x23/0x50 [ 315.792057][ T9741] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 315.792083][ T9741] ieee80211_register_hw+0x2bb2/0x4160 [ 315.792106][ T9741] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 315.792120][ T9741] ? __pfx___debug_object_init+0x10/0x10 [ 315.792146][ T9741] ? find_held_lock+0x2b/0x80 [ 315.792165][ T9741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.792186][ T9741] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 315.792207][ T9741] ? __hrtimer_setup+0x176/0x280 [ 315.792226][ T9741] mac80211_hwsim_new_radio+0x3323/0x5150 [ 315.792255][ T9741] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 315.792278][ T9741] hwsim_new_radio_nl+0xba2/0x1330 [ 315.792297][ T9741] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 315.792319][ T9741] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 315.792344][ T9741] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 315.792382][ T9741] genl_family_rcv_msg_doit+0x209/0x2f0 [ 315.792407][ T9741] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 315.792431][ T9741] ? genl_get_cmd+0x194/0x580 [ 315.792458][ T9741] ? bpf_lsm_capable+0x9/0x10 [ 315.792478][ T9741] ? security_capable+0x7e/0x260 [ 315.792501][ T9741] ? ns_capable+0xd7/0x110 [ 315.792521][ T9741] genl_rcv_msg+0x55c/0x800 [ 315.792537][ T9741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.792552][ T9741] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 315.792575][ T9741] netlink_rcv_skb+0x158/0x420 [ 315.792596][ T9741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.792610][ T9741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.792639][ T9741] ? netlink_deliver_tap+0x1ae/0xd30 [ 315.792661][ T9741] genl_rcv+0x28/0x40 [ 315.792681][ T9741] netlink_unicast+0x5aa/0x870 [ 315.792704][ T9741] ? __pfx_netlink_unicast+0x10/0x10 [ 315.792732][ T9741] netlink_sendmsg+0x8c8/0xdd0 [ 315.792756][ T9741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.792779][ T9741] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 315.792806][ T9741] ____sys_sendmsg+0xa5d/0xc30 [ 315.792828][ T9741] ? copy_msghdr_from_user+0x10a/0x160 [ 315.792846][ T9741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.792867][ T9741] ? preempt_schedule_thunk+0x16/0x30 [ 315.792885][ T9741] ? try_to_wake_up+0xa67/0x1860 [ 315.792908][ T9741] ___sys_sendmsg+0x134/0x1d0 [ 315.792927][ T9741] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.792945][ T9741] ? futex_private_hash_put+0x160/0x1b0 [ 315.792984][ T9741] __sys_sendmsg+0x16d/0x220 [ 315.793002][ T9741] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.793020][ T9741] ? __x64_sys_futex+0x1e0/0x4c0 [ 315.793049][ T9741] do_syscall_64+0xcd/0xf80 [ 315.793072][ T9741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.793087][ T9741] RIP: 0033:0x7f09a8d8f7c9 [ 315.793100][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.793115][ T9741] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.793130][ T9741] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 315.793140][ T9741] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000004 [ 315.793149][ T9741] RBP: 00007f09a8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.793158][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.793166][ T9741] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 315.793187][ T9741] [ 315.793236][ T9741] kobject: kobject_add_internal failed for phy47 (error: -12 parent: ieee80211) [ 316.630108][ T9752] netlink: 218 bytes leftover after parsing attributes in process `syz.3.817'. [ 316.869219][ T9757] Unable to find swap-space signature [ 317.844782][ T30] audit: type=1800 audit(1767246459.984:37): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.824" name="dbroot" dev="configfs" ino=29748 res=0 errno=0 [ 320.290937][ T9833] Invalid ELF header magic: != ELF [ 320.763890][ T9838] FAULT_INJECTION: forcing a failure. [ 320.763890][ T9838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.822091][ T9838] CPU: 0 UID: 0 PID: 9838 Comm: syz.4.836 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.822117][ T9838] Tainted: [L]=SOFTLOCKUP [ 320.822122][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.822131][ T9838] Call Trace: [ 320.822136][ T9838] [ 320.822142][ T9838] dump_stack_lvl+0x16c/0x1f0 [ 320.822167][ T9838] should_fail_ex+0x512/0x640 [ 320.822187][ T9838] _copy_from_user+0x2e/0xd0 [ 320.822203][ T9838] kstrtouint_from_user+0xd6/0x1d0 [ 320.822223][ T9838] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 320.822247][ T9838] ? lock_acquire+0x179/0x330 [ 320.822264][ T9838] proc_coredump_filter_write+0x8c/0x2b0 [ 320.822282][ T9838] ? __pfx_proc_coredump_filter_write+0x10/0x10 [ 320.822302][ T9838] ? __pfx_proc_coredump_filter_write+0x10/0x10 [ 320.822316][ T9838] vfs_write+0x2a0/0x11d0 [ 320.822337][ T9838] ? __pfx___mutex_lock+0x10/0x10 [ 320.822361][ T9838] ? __pfx_vfs_write+0x10/0x10 [ 320.822385][ T9838] ? __fget_files+0x20e/0x3c0 [ 320.822411][ T9838] ksys_write+0x12a/0x250 [ 320.822430][ T9838] ? __pfx_ksys_write+0x10/0x10 [ 320.822455][ T9838] do_syscall_64+0xcd/0xf80 [ 320.822477][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.822493][ T9838] RIP: 0033:0x7f09a8d8f7c9 [ 320.822505][ T9838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.822519][ T9838] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.822534][ T9838] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 320.822544][ T9838] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 320.822552][ T9838] RBP: 00007f09a9c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 320.822561][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.822569][ T9838] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 320.822589][ T9838] [ 322.339413][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.345744][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.946311][ T9886] FAULT_INJECTION: forcing a failure. [ 322.946311][ T9886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.015016][ T9886] CPU: 0 UID: 0 PID: 9886 Comm: syz.3.848 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.015042][ T9886] Tainted: [L]=SOFTLOCKUP [ 323.015047][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.015055][ T9886] Call Trace: [ 323.015060][ T9886] [ 323.015066][ T9886] dump_stack_lvl+0x16c/0x1f0 [ 323.015091][ T9886] should_fail_ex+0x512/0x640 [ 323.015110][ T9886] _copy_to_user+0x32/0xd0 [ 323.015128][ T9886] simple_read_from_buffer+0xcb/0x170 [ 323.015150][ T9886] proc_fail_nth_read+0x197/0x240 [ 323.015174][ T9886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.015198][ T9886] ? rw_verify_area+0xcf/0x6c0 [ 323.015215][ T9886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.015238][ T9886] vfs_read+0x1e4/0xcf0 [ 323.015258][ T9886] ? __pfx___mutex_lock+0x10/0x10 [ 323.015282][ T9886] ? __pfx_vfs_read+0x10/0x10 [ 323.015306][ T9886] ? __fget_files+0x20e/0x3c0 [ 323.015331][ T9886] ksys_read+0x12a/0x250 [ 323.015350][ T9886] ? __pfx_ksys_read+0x10/0x10 [ 323.015375][ T9886] do_syscall_64+0xcd/0xf80 [ 323.015397][ T9886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.015412][ T9886] RIP: 0033:0x7fb68b38e1dc [ 323.015424][ T9886] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.015439][ T9886] RSP: 002b:00007fb68c180030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.015452][ T9886] RAX: ffffffffffffffda RBX: 00007fb68b5e5fa0 RCX: 00007fb68b38e1dc [ 323.015462][ T9886] RDX: 000000000000000f RSI: 00007fb68c1800a0 RDI: 0000000000000004 [ 323.015470][ T9886] RBP: 00007fb68c180090 R08: 0000000000000000 R09: 0000000000000000 [ 323.015479][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.015487][ T9886] R13: 00007fb68b5e6038 R14: 00007fb68b5e5fa0 R15: 00007ffc1159aba8 [ 323.015506][ T9886] [ 323.484846][ T9894] rnbd_client L213: map_device: Parameters missing [ 324.449520][ T9921] FAULT_INJECTION: forcing a failure. [ 324.449520][ T9921] name fail_futex, interval 1, probability 0, space 0, times 0 [ 324.598140][ T9921] CPU: 0 UID: 0 PID: 9921 Comm: syz.3.858 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.598169][ T9921] Tainted: [L]=SOFTLOCKUP [ 324.598174][ T9921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.598183][ T9921] Call Trace: [ 324.598189][ T9921] [ 324.598196][ T9921] dump_stack_lvl+0x16c/0x1f0 [ 324.598222][ T9921] should_fail_ex+0x512/0x640 [ 324.598241][ T9921] get_futex_key+0x1d0/0x15f0 [ 324.598261][ T9921] ? __pfx_get_futex_key+0x10/0x10 [ 324.598277][ T9921] ? memcg_rstat_updated.part.0+0x110/0x250 [ 324.598295][ T9921] ? find_held_lock+0x2b/0x80 [ 324.598316][ T9921] futex_wake+0xea/0x530 [ 324.598335][ T9921] ? __pfx___up_read+0x10/0x10 [ 324.598351][ T9921] ? __pfx_futex_wake+0x10/0x10 [ 324.598372][ T9921] ? do_user_addr_fault+0x843/0x1370 [ 324.598390][ T9921] ? rcu_is_watching+0x12/0xc0 [ 324.598412][ T9921] do_futex+0x1e3/0x350 [ 324.598437][ T9921] ? __pfx_do_futex+0x10/0x10 [ 324.598458][ T9921] __x64_sys_futex+0x1e0/0x4c0 [ 324.598477][ T9921] ? __pfx___x64_sys_futex+0x10/0x10 [ 324.598495][ T9921] ? __pfx___do_sys_rseq+0x10/0x10 [ 324.598512][ T9921] ? __cpu_to_node+0x87/0x120 [ 324.598530][ T9921] do_syscall_64+0xcd/0xf80 [ 324.598559][ T9921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.598574][ T9921] RIP: 0033:0x7fb68b38f7c9 [ 324.598586][ T9921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.598601][ T9921] RSP: 002b:00007fb68c13e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 324.598615][ T9921] RAX: ffffffffffffffda RBX: 00007fb68b5e6188 RCX: 00007fb68b38f7c9 [ 324.598625][ T9921] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb68b5e618c [ 324.598634][ T9921] RBP: 00007fb68b5e6180 R08: 00007fb68c181000 R09: 0000000000000000 [ 324.598643][ T9921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.598651][ T9921] R13: 00007fb68b5e6218 R14: 00007ffc1159aac0 R15: 00007ffc1159aba8 [ 324.598670][ T9921] [ 325.202927][ T9928] mmap: syz.4.861 (9928): VmData 45809664 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 325.241339][ T9926] rnbd_client L213: map_device: Parameters missing [ 325.395776][ T9930] block2mtd: illegal erase size [ 326.723809][ T9960] rnbd_client L213: map_device: Parameters missing [ 326.923107][ T9966] program syz.3.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.169095][T10016] rnbd_client L213: map_device: Parameters missing [ 330.431255][T10045] FAULT_INJECTION: forcing a failure. [ 330.431255][T10045] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 330.496076][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz.1.889 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.496102][T10045] Tainted: [L]=SOFTLOCKUP [ 330.496107][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.496117][T10045] Call Trace: [ 330.496122][T10045] [ 330.496128][T10045] dump_stack_lvl+0x16c/0x1f0 [ 330.496155][T10045] should_fail_ex+0x512/0x640 [ 330.496176][T10045] should_fail_alloc_page+0xe7/0x130 [ 330.496200][T10045] prepare_alloc_pages+0x401/0x670 [ 330.496222][T10045] ? rcu_is_watching+0x12/0xc0 [ 330.496244][T10045] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 330.496265][T10045] ? kasan_save_stack+0x42/0x60 [ 330.496291][T10045] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 330.496310][T10045] ? __mod_zone_page_state+0xcc/0x1a0 [ 330.496327][T10045] ? lru_gen_add_folio+0x1a4/0xef0 [ 330.496346][T10045] ? __lock_acquire+0x436/0x2890 [ 330.496362][T10045] ? __lock_acquire+0x436/0x2890 [ 330.496374][T10045] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 330.496397][T10045] ? policy_nodemask+0xea/0x4e0 [ 330.496419][T10045] alloc_pages_mpol+0x1fb/0x550 [ 330.496441][T10045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 330.496467][T10045] folio_alloc_mpol_noprof+0x36/0x2f0 [ 330.496483][T10045] vma_alloc_folio_noprof+0xed/0x1e0 [ 330.496498][T10045] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 330.496519][T10045] do_anonymous_page+0xc81/0x2190 [ 330.496541][T10045] __handle_mm_fault+0x1ecf/0x2bb0 [ 330.496561][T10045] ? __pfx___handle_mm_fault+0x10/0x10 [ 330.496578][T10045] ? __pte_offset_map_lock+0x174/0x310 [ 330.496599][T10045] ? find_held_lock+0x2b/0x80 [ 330.496623][T10045] ? follow_page_pte+0x5cf/0x1390 [ 330.496647][T10045] handle_mm_fault+0x3fe/0xad0 [ 330.496669][T10045] __get_user_pages+0x54e/0x3590 [ 330.496698][T10045] ? __pfx___get_user_pages+0x10/0x10 [ 330.496724][T10045] populate_vma_page_range+0x267/0x3f0 [ 330.496747][T10045] ? __pfx_populate_vma_page_range+0x10/0x10 [ 330.496770][T10045] ? __pfx_find_vma_intersection+0x10/0x10 [ 330.496792][T10045] ? do_mmap+0x69c/0x1210 [ 330.496814][T10045] __mm_populate+0x1d8/0x380 [ 330.496836][T10045] ? __pfx___mm_populate+0x10/0x10 [ 330.496859][T10045] ? up_write+0x282/0x4e0 [ 330.496876][T10045] vm_mmap_pgoff+0x37f/0x470 [ 330.496898][T10045] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 330.496933][T10045] ? __x64_sys_futex+0x1e0/0x4c0 [ 330.496951][T10045] ? __x64_sys_futex+0x1e9/0x4c0 [ 330.496970][T10045] ksys_mmap_pgoff+0x7d/0x5c0 [ 330.496991][T10045] ? xfd_validate_state+0x61/0x180 [ 330.497014][T10045] __x64_sys_mmap+0x125/0x190 [ 330.497032][T10045] do_syscall_64+0xcd/0xf80 [ 330.497055][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.497071][T10045] RIP: 0033:0x7fb50818f7c9 [ 330.497084][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.497098][T10045] RSP: 002b:00007fb50901e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 330.497113][T10045] RAX: ffffffffffffffda RBX: 00007fb5083e5fa0 RCX: 00007fb50818f7c9 [ 330.497123][T10045] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 330.497132][T10045] RBP: 00007fb508213f91 R08: 0000000000000002 R09: 0000000000008000 [ 330.497141][T10045] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 330.497150][T10045] R13: 00007fb5083e6038 R14: 00007fb5083e5fa0 R15: 00007ffcf14b69f8 [ 330.497170][T10045] [ 331.689404][T10054] openvswitch: netlink: IP tunnel dst address not specified [ 331.802803][T10056] rnbd_client L213: map_device: Parameters missing [ 331.957600][T10061] netlink: 346 bytes leftover after parsing attributes in process `syz.1.894'. [ 332.458716][T10076] netlink: 342 bytes leftover after parsing attributes in process `syz.1.899'. syzkaller syzkaller login: [ 333.033788][T10087] FAULT_INJECTION: forcing a failure. [ 333.033788][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 333.113597][T10087] CPU: 0 UID: 0 PID: 10087 Comm: syz.4.900 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.113624][T10087] Tainted: [L]=SOFTLOCKUP [ 333.113629][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.113638][T10087] Call Trace: [ 333.113644][T10087] [ 333.113649][T10087] dump_stack_lvl+0x16c/0x1f0 [ 333.113677][T10087] should_fail_ex+0x512/0x640 [ 333.113694][T10087] ? fs_reclaim_acquire+0xae/0x150 [ 333.113718][T10087] should_failslab+0xc2/0x120 [ 333.113747][T10087] __kmalloc_noprof+0xeb/0x910 [ 333.113764][T10087] ? tomoyo_encode2+0x100/0x3e0 [ 333.113788][T10087] ? tomoyo_encode2+0x100/0x3e0 [ 333.113806][T10087] tomoyo_encode2+0x100/0x3e0 [ 333.113827][T10087] tomoyo_encode+0x29/0x50 [ 333.113845][T10087] tomoyo_realpath_from_path+0x18f/0x6e0 [ 333.113870][T10087] tomoyo_mkdev_perm+0x22b/0x570 [ 333.113885][T10087] ? tomoyo_mkdev_perm+0x217/0x570 [ 333.113903][T10087] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 333.113920][T10087] ? do_raw_spin_lock+0x12c/0x2b0 [ 333.113941][T10087] ? do_raw_spin_unlock+0x172/0x230 [ 333.113967][T10087] ? __pfx_current_check_access_path+0x10/0x10 [ 333.113987][T10087] ? simple_lookup+0x105/0x1d0 [ 333.114011][T10087] tomoyo_path_mknod+0x12a/0x190 [ 333.114033][T10087] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 333.114056][T10087] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.114080][T10087] security_path_mknod+0x161/0x310 [ 333.114098][T10087] do_mknodat+0x24e/0x6f0 [ 333.114120][T10087] ? __pfx_do_mknodat+0x10/0x10 [ 333.114140][T10087] ? getname_flags.part.0+0x1c5/0x550 [ 333.114160][T10087] __x64_sys_mknod+0x87/0xb0 [ 333.114181][T10087] do_syscall_64+0xcd/0xf80 [ 333.114204][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.114219][T10087] RIP: 0033:0x7f09a8d8f7c9 [ 333.114232][T10087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.114246][T10087] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 333.114260][T10087] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 333.114270][T10087] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 333.114278][T10087] RBP: 00007f09a8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 333.114287][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.114296][T10087] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 333.114317][T10087] [ 333.114334][T10087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 333.876334][T10100] FAULT_INJECTION: forcing a failure. [ 333.876334][T10100] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.915663][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.3.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.915691][T10100] Tainted: [L]=SOFTLOCKUP [ 333.915697][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.915706][T10100] Call Trace: [ 333.915711][T10100] [ 333.915718][T10100] dump_stack_lvl+0x16c/0x1f0 [ 333.915744][T10100] should_fail_ex+0x512/0x640 [ 333.915765][T10100] should_fail_alloc_page+0xe7/0x130 [ 333.915790][T10100] prepare_alloc_pages+0x401/0x670 [ 333.915813][T10100] ? rcu_is_watching+0x12/0xc0 [ 333.915835][T10100] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 333.915859][T10100] ? __lock_acquire+0x436/0x2890 [ 333.915876][T10100] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 333.915894][T10100] ? __mod_zone_page_state+0xcc/0x1a0 [ 333.915910][T10100] ? lru_gen_add_folio+0x1a4/0xef0 [ 333.915929][T10100] ? __lock_acquire+0x436/0x2890 [ 333.915944][T10100] ? __lock_acquire+0x436/0x2890 [ 333.915957][T10100] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 333.915980][T10100] ? policy_nodemask+0xea/0x4e0 [ 333.916003][T10100] alloc_pages_mpol+0x1fb/0x550 [ 333.916025][T10100] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 333.916051][T10100] folio_alloc_mpol_noprof+0x36/0x2f0 [ 333.916067][T10100] vma_alloc_folio_noprof+0xed/0x1e0 [ 333.916082][T10100] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 333.916103][T10100] do_anonymous_page+0xc81/0x2190 [ 333.916125][T10100] __handle_mm_fault+0x1ecf/0x2bb0 [ 333.916146][T10100] ? __pfx___handle_mm_fault+0x10/0x10 [ 333.916162][T10100] ? __pte_offset_map_lock+0x174/0x310 [ 333.916182][T10100] ? find_held_lock+0x2b/0x80 [ 333.916206][T10100] ? follow_page_pte+0x5cf/0x1390 [ 333.916231][T10100] handle_mm_fault+0x3fe/0xad0 [ 333.916250][T10100] __get_user_pages+0x54e/0x3590 [ 333.916279][T10100] ? __pfx___get_user_pages+0x10/0x10 [ 333.916305][T10100] populate_vma_page_range+0x267/0x3f0 [ 333.916329][T10100] ? __pfx_populate_vma_page_range+0x10/0x10 [ 333.916350][T10100] ? __pfx_find_vma_intersection+0x10/0x10 [ 333.916371][T10100] ? do_mmap+0x69c/0x1210 [ 333.916393][T10100] __mm_populate+0x1d8/0x380 [ 333.916416][T10100] ? __pfx___mm_populate+0x10/0x10 [ 333.916439][T10100] ? up_write+0x282/0x4e0 [ 333.916456][T10100] vm_mmap_pgoff+0x37f/0x470 [ 333.916478][T10100] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 333.916502][T10100] ? __x64_sys_futex+0x1e0/0x4c0 [ 333.916518][T10100] ? __x64_sys_futex+0x1e9/0x4c0 [ 333.916537][T10100] ksys_mmap_pgoff+0x7d/0x5c0 [ 333.916556][T10100] ? xfd_validate_state+0x61/0x180 [ 333.916573][T10100] __x64_sys_mmap+0x125/0x190 [ 333.916589][T10100] do_syscall_64+0xcd/0xf80 [ 333.916621][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.916638][T10100] RIP: 0033:0x7fb68b38f7c9 [ 333.916652][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.916666][T10100] RSP: 002b:00007fb68c180038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 333.916681][T10100] RAX: ffffffffffffffda RBX: 00007fb68b5e5fa0 RCX: 00007fb68b38f7c9 [ 333.916690][T10100] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 333.916699][T10100] RBP: 00007fb68b413f91 R08: 0000000000000002 R09: 0000000000008000 [ 333.916709][T10100] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 333.916718][T10100] R13: 00007fb68b5e6038 R14: 00007fb68b5e5fa0 R15: 00007ffc1159aba8 [ 333.916738][T10100] [ 334.553007][T10105] rnbd_client L213: map_device: Parameters missing [ 336.009935][T10126] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 336.116520][T10125] kexec: Could not allocate control_code_buffer [ 336.961485][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 337.070097][T10148] FAULT_INJECTION: forcing a failure. [ 337.070097][T10148] name failslab, interval 1, probability 0, space 0, times 0 [ 337.177004][T10148] CPU: 0 UID: 0 PID: 10148 Comm: syz.3.914 Tainted: G L syzkaller #0 PREEMPT(full) [ 337.177032][T10148] Tainted: [L]=SOFTLOCKUP [ 337.177038][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.177046][T10148] Call Trace: [ 337.177052][T10148] [ 337.177058][T10148] dump_stack_lvl+0x16c/0x1f0 [ 337.177085][T10148] should_fail_ex+0x512/0x640 [ 337.177102][T10148] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 337.177126][T10148] should_failslab+0xc2/0x120 [ 337.177149][T10148] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 337.177170][T10148] ? kstrdup_const+0x63/0x80 [ 337.177191][T10148] ? kstrdup+0x53/0x100 [ 337.177205][T10148] kstrdup+0x53/0x100 [ 337.177223][T10148] kstrdup_const+0x63/0x80 [ 337.177239][T10148] __kernfs_new_node+0x9b/0x9b0 [ 337.177258][T10148] ? __pfx___kernfs_new_node+0x10/0x10 [ 337.177280][T10148] ? find_held_lock+0x2b/0x80 [ 337.177299][T10148] ? kernfs_root+0xee/0x2a0 [ 337.177319][T10148] kernfs_new_node+0x13c/0x1e0 [ 337.177341][T10148] kernfs_create_dir_ns+0x4c/0x1a0 [ 337.177363][T10148] sysfs_create_dir_ns+0x13a/0x2b0 [ 337.177379][T10148] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 337.177394][T10148] ? find_held_lock+0x2b/0x80 [ 337.177414][T10148] ? wiphy_namespace+0x12/0x50 [ 337.177428][T10148] ? device_namespace+0x76/0xa0 [ 337.177448][T10148] kobject_add_internal+0x2c4/0x9d0 [ 337.177462][T10148] ? kobject_add+0xf1/0x240 [ 337.177478][T10148] kobject_add+0x16e/0x240 [ 337.177492][T10148] ? __pfx_kobject_add+0x10/0x10 [ 337.177509][T10148] ? kobject_put+0xaf/0x6f0 [ 337.177538][T10148] device_add+0x288/0x1980 [ 337.177567][T10148] ? __pfx_device_add+0x10/0x10 [ 337.177585][T10148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 337.177609][T10148] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 337.177634][T10148] wiphy_register+0x1ea1/0x2cc0 [ 337.177648][T10148] ? __rtnl_unlock+0x68/0xf0 [ 337.177670][T10148] ? napi_enable_locked+0x420/0xa00 [ 337.177691][T10148] ? __pfx_wiphy_register+0x10/0x10 [ 337.177705][T10148] ? __asan_memset+0x23/0x50 [ 337.177729][T10148] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 337.177755][T10148] ieee80211_register_hw+0x2bb2/0x4160 [ 337.177778][T10148] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 337.177792][T10148] ? __pfx___debug_object_init+0x10/0x10 [ 337.177817][T10148] ? find_held_lock+0x2b/0x80 [ 337.177835][T10148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 337.177857][T10148] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 337.177877][T10148] ? __hrtimer_setup+0x176/0x280 [ 337.177897][T10148] mac80211_hwsim_new_radio+0x3323/0x5150 [ 337.177925][T10148] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 337.177948][T10148] hwsim_new_radio_nl+0xba2/0x1330 [ 337.177970][T10148] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 337.177992][T10148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 337.178016][T10148] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 337.178044][T10148] genl_family_rcv_msg_doit+0x209/0x2f0 [ 337.178068][T10148] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 337.178091][T10148] ? genl_get_cmd+0x194/0x580 [ 337.178116][T10148] ? bpf_lsm_capable+0x9/0x10 [ 337.178134][T10148] ? security_capable+0x7e/0x260 [ 337.178158][T10148] ? ns_capable+0xd7/0x110 [ 337.178178][T10148] genl_rcv_msg+0x55c/0x800 [ 337.178194][T10148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.178209][T10148] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 337.178232][T10148] netlink_rcv_skb+0x158/0x420 [ 337.178253][T10148] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.178267][T10148] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.178296][T10148] ? netlink_deliver_tap+0x1ae/0xd30 [ 337.178318][T10148] genl_rcv+0x28/0x40 [ 337.178338][T10148] netlink_unicast+0x5aa/0x870 [ 337.178361][T10148] ? __pfx_netlink_unicast+0x10/0x10 [ 337.178389][T10148] netlink_sendmsg+0x8c8/0xdd0 [ 337.178413][T10148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.178436][T10148] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 337.178462][T10148] ____sys_sendmsg+0xa5d/0xc30 [ 337.178485][T10148] ? copy_msghdr_from_user+0x10a/0x160 [ 337.178503][T10148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.178528][T10148] ? preempt_schedule_thunk+0x16/0x30 [ 337.178547][T10148] ? try_to_wake_up+0xa67/0x1860 [ 337.178574][T10148] ___sys_sendmsg+0x134/0x1d0 [ 337.178595][T10148] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.178613][T10148] ? futex_private_hash_put+0x160/0x1b0 [ 337.178653][T10148] __sys_sendmsg+0x16d/0x220 [ 337.178672][T10148] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.178689][T10148] ? __x64_sys_futex+0x1e0/0x4c0 [ 337.178718][T10148] do_syscall_64+0xcd/0xf80 [ 337.178741][T10148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.178757][T10148] RIP: 0033:0x7fb68b38f7c9 [ 337.178771][T10148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.178785][T10148] RSP: 002b:00007fb68c180038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.178800][T10148] RAX: ffffffffffffffda RBX: 00007fb68b5e5fa0 RCX: 00007fb68b38f7c9 [ 337.178810][T10148] RDX: 0000000000018800 RSI: 0000200000001400 RDI: 0000000000000004 [ 337.178820][T10148] RBP: 00007fb68b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 337.178829][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.178838][T10148] R13: 00007fb68b5e6038 R14: 00007fb68b5e5fa0 R15: 00007ffc1159aba8 [ 337.178859][T10148] [ 338.430514][T10148] kobject: kobject_add_internal failed for phy48 (error: -12 parent: ieee80211) [ 338.505836][T10161] ima: policy update failed [ 338.558703][ T30] audit: type=1802 audit(1767246480.684:38): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.917" res=0 errno=0 [ 338.985712][T10176] netlink: 342 bytes leftover after parsing attributes in process `syz.2.919'. [ 339.024472][T10176] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.044324][T10176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.051815][T10176] IPv6: NLM_F_CREATE should be set when creating new route [ 339.059053][T10176] IPv6: NLM_F_CREATE should be set when creating new route [ 339.166329][T10186] ptrace attach of "./syz-executor exec"[7556] was attempted by ""[10186] [ 339.217585][T10186] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 339.963512][T10212] binder: 10211:10212 ioctl 40046210 0 returned -14 [ 340.666052][T10229] rnbd_client L213: map_device: Parameters missing [ 342.855072][T10264] FAULT_INJECTION: forcing a failure. [ 342.855072][T10264] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.902387][T10264] CPU: 0 UID: 0 PID: 10264 Comm: syz.4.942 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.902414][T10264] Tainted: [L]=SOFTLOCKUP [ 342.902420][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.902429][T10264] Call Trace: [ 342.902435][T10264] [ 342.902441][T10264] dump_stack_lvl+0x16c/0x1f0 [ 342.902469][T10264] should_fail_ex+0x512/0x640 [ 342.902488][T10264] should_fail_alloc_page+0xe7/0x130 [ 342.902513][T10264] prepare_alloc_pages+0x401/0x670 [ 342.902535][T10264] ? rcu_is_watching+0x12/0xc0 [ 342.902558][T10264] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 342.902577][T10264] ? __lock_acquire+0x436/0x2890 [ 342.902593][T10264] ? __lock_acquire+0x436/0x2890 [ 342.902607][T10264] ? rcu_is_watching+0x12/0xc0 [ 342.902627][T10264] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.902645][T10264] ? __mod_zone_page_state+0xcc/0x1a0 [ 342.902665][T10264] ? lru_gen_add_folio+0x1a4/0xef0 [ 342.902684][T10264] ? __lock_acquire+0x436/0x2890 [ 342.902700][T10264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.902723][T10264] ? policy_nodemask+0xea/0x4e0 [ 342.902753][T10264] alloc_pages_mpol+0x1fb/0x550 [ 342.902775][T10264] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 342.902803][T10264] folio_alloc_mpol_noprof+0x36/0x2f0 [ 342.902820][T10264] vma_alloc_folio_noprof+0xed/0x1e0 [ 342.902835][T10264] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 342.902856][T10264] do_anonymous_page+0xc81/0x2190 [ 342.902879][T10264] __handle_mm_fault+0x1ecf/0x2bb0 [ 342.902899][T10264] ? __pfx___handle_mm_fault+0x10/0x10 [ 342.902916][T10264] ? __pte_offset_map_lock+0x174/0x310 [ 342.902937][T10264] ? find_held_lock+0x2b/0x80 [ 342.902961][T10264] ? follow_page_pte+0x5cf/0x1390 [ 342.902985][T10264] handle_mm_fault+0x3fe/0xad0 [ 342.903004][T10264] __get_user_pages+0x54e/0x3590 [ 342.903032][T10264] ? __pfx___get_user_pages+0x10/0x10 [ 342.903059][T10264] populate_vma_page_range+0x267/0x3f0 [ 342.903082][T10264] ? __pfx_populate_vma_page_range+0x10/0x10 [ 342.903104][T10264] ? __pfx_find_vma_intersection+0x10/0x10 [ 342.903125][T10264] ? do_mmap+0x69c/0x1210 [ 342.903147][T10264] __mm_populate+0x1d8/0x380 [ 342.903169][T10264] ? __pfx___mm_populate+0x10/0x10 [ 342.903192][T10264] ? up_write+0x282/0x4e0 [ 342.903209][T10264] vm_mmap_pgoff+0x37f/0x470 [ 342.903231][T10264] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 342.903255][T10264] ? __x64_sys_futex+0x1e0/0x4c0 [ 342.903271][T10264] ? __x64_sys_futex+0x1e9/0x4c0 [ 342.903290][T10264] ksys_mmap_pgoff+0x7d/0x5c0 [ 342.903309][T10264] ? xfd_validate_state+0x61/0x180 [ 342.903326][T10264] __x64_sys_mmap+0x125/0x190 [ 342.903343][T10264] do_syscall_64+0xcd/0xf80 [ 342.903365][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.903380][T10264] RIP: 0033:0x7f09a8d8f7c9 [ 342.903394][T10264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.903408][T10264] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 342.903422][T10264] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 342.903432][T10264] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 342.903441][T10264] RBP: 00007f09a8e13f91 R08: 0000000000000002 R09: 0000000000008000 [ 342.903450][T10264] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 342.903459][T10264] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 342.903480][T10264] [ 344.626573][T10285] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 344.658438][T10285] random: crng reseeded on system resumption [ 345.594942][T10307] rnbd_client L213: map_device: Parameters missing [ 345.710301][T10309] netlink: 186 bytes leftover after parsing attributes in process `syz.3.951'. [ 346.486121][T10333] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[10333] [ 346.550337][T10333] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 346.915947][T10343] rnbd_client L213: map_device: Parameters missing [ 348.736033][T10376] rnbd_client L213: map_device: Parameters missing [ 352.056213][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.976438][T10459] ima: policy update failed [ 353.011348][ T30] audit: type=1802 audit(1767246495.144:39): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.993" res=0 errno=0 [ 353.276415][T10465] rnbd_client L213: map_device: Parameters missing [ 353.689642][ T5842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 353.700824][ T5846] Bluetooth: hci0: command 0x1003 tx timeout [ 356.649796][ T5846] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 357.086204][T10524] FAULT_INJECTION: forcing a failure. [ 357.086204][T10524] name fail_futex, interval 1, probability 0, space 0, times 0 [ 357.149091][T10524] CPU: 0 UID: 0 PID: 10524 Comm: syz.1.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.149118][T10524] Tainted: [L]=SOFTLOCKUP [ 357.149124][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.149133][T10524] Call Trace: [ 357.149138][T10524] [ 357.149145][T10524] dump_stack_lvl+0x16c/0x1f0 [ 357.149171][T10524] should_fail_ex+0x512/0x640 [ 357.149194][T10524] get_futex_key+0x1d0/0x15f0 [ 357.149213][T10524] ? __pfx_get_futex_key+0x10/0x10 [ 357.149250][T10524] futex_wake+0xea/0x530 [ 357.149268][T10524] ? futex_wait+0x120/0x380 [ 357.149287][T10524] ? __pfx_futex_wait+0x10/0x10 [ 357.149307][T10524] ? __pfx_futex_wake+0x10/0x10 [ 357.149335][T10524] do_futex+0x1e3/0x350 [ 357.149351][T10524] ? __pfx_do_futex+0x10/0x10 [ 357.149372][T10524] __x64_sys_futex+0x1e0/0x4c0 [ 357.149390][T10524] ? ptrace_check_attach+0x9c/0x3f0 [ 357.149410][T10524] ? __pfx___x64_sys_futex+0x10/0x10 [ 357.149433][T10524] ? do_raw_read_unlock+0x44/0xe0 [ 357.149451][T10524] ? ptrace_check_attach+0xa1/0x3f0 [ 357.149474][T10524] do_syscall_64+0xcd/0xf80 [ 357.149498][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.149513][T10524] RIP: 0033:0x7fb50818f7c9 [ 357.149526][T10524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.149539][T10524] RSP: 002b:00007fb50901e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 357.149553][T10524] RAX: ffffffffffffffda RBX: 00007fb5083e5fa8 RCX: 00007fb50818f7c9 [ 357.149563][T10524] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb5083e5fac [ 357.149572][T10524] RBP: 00007fb5083e5fa0 R08: 00007fb50901f000 R09: 0000000000000000 [ 357.149580][T10524] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 357.149589][T10524] R13: 00007fb5083e6038 R14: 00007ffcf14b6910 R15: 00007ffcf14b69f8 [ 357.149608][T10524] [ 357.942401][T10535] random: crng reseeded on system resumption [ 357.960296][T10532] syz.4.1012 (10532) used greatest stack depth: 16888 bytes left [ 358.153758][T10539] FAULT_INJECTION: forcing a failure. [ 358.153758][T10539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.237535][T10539] CPU: 0 UID: 0 PID: 10539 Comm: syz.4.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.237562][T10539] Tainted: [L]=SOFTLOCKUP [ 358.237567][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.237577][T10539] Call Trace: [ 358.237582][T10539] [ 358.237588][T10539] dump_stack_lvl+0x16c/0x1f0 [ 358.237615][T10539] should_fail_ex+0x512/0x640 [ 358.237635][T10539] should_fail_alloc_page+0xe7/0x130 [ 358.237658][T10539] prepare_alloc_pages+0x401/0x670 [ 358.237681][T10539] ? rcu_is_watching+0x12/0xc0 [ 358.237702][T10539] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 358.237722][T10539] ? __lock_acquire+0x436/0x2890 [ 358.237738][T10539] ? __lock_acquire+0x436/0x2890 [ 358.237754][T10539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.237772][T10539] ? __mod_zone_page_state+0xcc/0x1a0 [ 358.237789][T10539] ? lru_gen_add_folio+0x1a4/0xef0 [ 358.237807][T10539] ? __lock_acquire+0x436/0x2890 [ 358.237822][T10539] ? __lock_acquire+0x436/0x2890 [ 358.237835][T10539] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.237858][T10539] ? policy_nodemask+0xea/0x4e0 [ 358.237881][T10539] alloc_pages_mpol+0x1fb/0x550 [ 358.237903][T10539] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 358.237929][T10539] folio_alloc_mpol_noprof+0x36/0x2f0 [ 358.237949][T10539] vma_alloc_folio_noprof+0xed/0x1e0 [ 358.237964][T10539] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 358.237985][T10539] do_anonymous_page+0xc81/0x2190 [ 358.238009][T10539] __handle_mm_fault+0x1ecf/0x2bb0 [ 358.238031][T10539] ? __pfx___handle_mm_fault+0x10/0x10 [ 358.238048][T10539] ? __pte_offset_map_lock+0x174/0x310 [ 358.238069][T10539] ? find_held_lock+0x2b/0x80 [ 358.238093][T10539] ? follow_page_pte+0x5cf/0x1390 [ 358.238118][T10539] handle_mm_fault+0x3fe/0xad0 [ 358.238137][T10539] __get_user_pages+0x54e/0x3590 [ 358.238166][T10539] ? __pfx___get_user_pages+0x10/0x10 [ 358.238192][T10539] populate_vma_page_range+0x267/0x3f0 [ 358.238216][T10539] ? __pfx_populate_vma_page_range+0x10/0x10 [ 358.238237][T10539] ? __pfx_find_vma_intersection+0x10/0x10 [ 358.238259][T10539] ? do_mmap+0x69c/0x1210 [ 358.238281][T10539] __mm_populate+0x1d8/0x380 [ 358.238304][T10539] ? __pfx___mm_populate+0x10/0x10 [ 358.238327][T10539] ? up_write+0x282/0x4e0 [ 358.238344][T10539] vm_mmap_pgoff+0x37f/0x470 [ 358.238367][T10539] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 358.238400][T10539] ? __x64_sys_futex+0x1e0/0x4c0 [ 358.238416][T10539] ? __x64_sys_futex+0x1e9/0x4c0 [ 358.238436][T10539] ksys_mmap_pgoff+0x7d/0x5c0 [ 358.238457][T10539] ? xfd_validate_state+0x61/0x180 [ 358.238473][T10539] __x64_sys_mmap+0x125/0x190 [ 358.238490][T10539] do_syscall_64+0xcd/0xf80 [ 358.238515][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.238530][T10539] RIP: 0033:0x7f09a8d8f7c9 [ 358.238544][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.238558][T10539] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 358.238573][T10539] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 358.238583][T10539] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 358.238592][T10539] RBP: 00007f09a8e13f91 R08: 0000000000000002 R09: 0000000000008000 [ 358.238601][T10539] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 358.238610][T10539] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 358.238630][T10539] [ 360.286482][T10568] rnbd_client L213: map_device: Parameters missing [ 361.121824][T10585] nvme_fcloop: unknown parameter or missing value '7' [ 361.479250][ T4435] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 361.764937][T10606] rnbd_client L213: map_device: Parameters missing [ 361.775925][T10605] FAULT_INJECTION: forcing a failure. [ 361.775925][T10605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.816276][T10606] netlink: 13832 bytes leftover after parsing attributes in process `syz.2.1030'. [ 361.859156][T10605] CPU: 0 UID: 0 PID: 10605 Comm: syz.4.1031 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.859182][T10605] Tainted: [L]=SOFTLOCKUP [ 361.859188][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.859197][T10605] Call Trace: [ 361.859202][T10605] [ 361.859209][T10605] dump_stack_lvl+0x16c/0x1f0 [ 361.859235][T10605] should_fail_ex+0x512/0x640 [ 361.859254][T10605] should_fail_alloc_page+0xe7/0x130 [ 361.859278][T10605] prepare_alloc_pages+0x401/0x670 [ 361.859302][T10605] ? rcu_is_watching+0x12/0xc0 [ 361.859323][T10605] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 361.859347][T10605] ? __lock_acquire+0x436/0x2890 [ 361.859363][T10605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 361.859382][T10605] ? __mod_zone_page_state+0xcc/0x1a0 [ 361.859398][T10605] ? lru_gen_add_folio+0x1a4/0xef0 [ 361.859417][T10605] ? __lock_acquire+0x436/0x2890 [ 361.859432][T10605] ? __lock_acquire+0x436/0x2890 [ 361.859445][T10605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.859469][T10605] ? policy_nodemask+0xea/0x4e0 [ 361.859492][T10605] alloc_pages_mpol+0x1fb/0x550 [ 361.859513][T10605] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 361.859541][T10605] folio_alloc_mpol_noprof+0x36/0x2f0 [ 361.859557][T10605] vma_alloc_folio_noprof+0xed/0x1e0 [ 361.859572][T10605] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 361.859593][T10605] do_anonymous_page+0xc81/0x2190 [ 361.859616][T10605] __handle_mm_fault+0x1ecf/0x2bb0 [ 361.859637][T10605] ? __pfx___handle_mm_fault+0x10/0x10 [ 361.859653][T10605] ? __pte_offset_map_lock+0x174/0x310 [ 361.859673][T10605] ? find_held_lock+0x2b/0x80 [ 361.859697][T10605] ? follow_page_pte+0x5cf/0x1390 [ 361.859722][T10605] handle_mm_fault+0x3fe/0xad0 [ 361.859741][T10605] __get_user_pages+0x54e/0x3590 [ 361.859770][T10605] ? __pfx___get_user_pages+0x10/0x10 [ 361.859796][T10605] populate_vma_page_range+0x267/0x3f0 [ 361.859820][T10605] ? __pfx_populate_vma_page_range+0x10/0x10 [ 361.859841][T10605] ? __pfx_find_vma_intersection+0x10/0x10 [ 361.859863][T10605] ? do_mmap+0x69c/0x1210 [ 361.859885][T10605] __mm_populate+0x1d8/0x380 [ 361.859914][T10605] ? __pfx___mm_populate+0x10/0x10 [ 361.859945][T10605] ? up_write+0x282/0x4e0 [ 361.859963][T10605] vm_mmap_pgoff+0x37f/0x470 [ 361.859986][T10605] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 361.860012][T10605] ? __x64_sys_futex+0x1e0/0x4c0 [ 361.860028][T10605] ? __x64_sys_futex+0x1e9/0x4c0 [ 361.860046][T10605] ksys_mmap_pgoff+0x7d/0x5c0 [ 361.860066][T10605] ? xfd_validate_state+0x61/0x180 [ 361.860083][T10605] __x64_sys_mmap+0x125/0x190 [ 361.860100][T10605] do_syscall_64+0xcd/0xf80 [ 361.860123][T10605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.860138][T10605] RIP: 0033:0x7f09a8d8f7c9 [ 361.860152][T10605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.860168][T10605] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 361.860183][T10605] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 361.860193][T10605] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 361.860202][T10605] RBP: 00007f09a8e13f91 R08: 0000000000000002 R09: 0000000000008000 [ 361.860212][T10605] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 361.860221][T10605] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 361.860241][T10605] [ 364.823813][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1044'. [ 365.021845][T10649] hub 8-0:1.0: USB hub found [ 365.070590][T10649] hub 8-0:1.0: 1 port detected [ 366.479259][T10703] rnbd_client L213: map_device: Parameters missing [ 366.541223][T10703] netlink: 13832 bytes leftover after parsing attributes in process `syz.4.1057'. [ 367.442404][T10724] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1060'. [ 367.658130][T10727] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1061'. [ 371.611130][T10811] rnbd_client L213: map_device: Parameters missing [ 371.659426][T10811] netlink: 13824 bytes leftover after parsing attributes in process `syz.2.1079'. [ 371.938218][T10815] rnbd_client L213: map_device: Parameters missing [ 371.989362][T10815] netlink: 13832 bytes leftover after parsing attributes in process `syz.2.1080'. [ 372.328722][T10819] FAULT_INJECTION: forcing a failure. [ 372.328722][T10819] name failslab, interval 1, probability 0, space 0, times 0 [ 372.388872][T10819] CPU: 0 UID: 0 PID: 10819 Comm: syz.2.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.388910][T10819] Tainted: [L]=SOFTLOCKUP [ 372.388916][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.388925][T10819] Call Trace: [ 372.388930][T10819] [ 372.388936][T10819] dump_stack_lvl+0x16c/0x1f0 [ 372.388963][T10819] should_fail_ex+0x512/0x640 [ 372.388980][T10819] ? __kmalloc_noprof+0xca/0x910 [ 372.388998][T10819] should_failslab+0xc2/0x120 [ 372.389020][T10819] __kmalloc_noprof+0xeb/0x910 [ 372.389037][T10819] ? nfc_llcp_build_tlv+0xff/0x260 [ 372.389061][T10819] ? nfc_llcp_build_tlv+0xff/0x260 [ 372.389079][T10819] nfc_llcp_build_tlv+0xff/0x260 [ 372.389100][T10819] nfc_llcp_build_gb.isra.0+0x15e/0x3f0 [ 372.389120][T10819] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 372.389137][T10819] ? __pfx___debug_object_init+0x10/0x10 [ 372.389163][T10819] ? lockdep_init_map_type+0x5c/0x270 [ 372.389186][T10819] ? lockdep_init_map_type+0x5c/0x270 [ 372.389204][T10819] nfc_llcp_register_device+0x600/0xa60 [ 372.389226][T10819] nfc_register_device+0x6d/0x410 [ 372.389249][T10819] nci_register_device+0x7f1/0xb80 [ 372.389268][T10819] ? __pfx_nci_register_device+0x10/0x10 [ 372.389288][T10819] ? lockdep_init_map_type+0x5c/0x270 [ 372.389306][T10819] virtual_ncidev_open+0x141/0x220 [ 372.389330][T10819] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 372.389351][T10819] misc_open+0x26d/0x450 [ 372.389368][T10819] ? __pfx_misc_open+0x10/0x10 [ 372.389383][T10819] chrdev_open+0x234/0x6a0 [ 372.389405][T10819] ? __pfx_apparmor_file_open+0x10/0x10 [ 372.389420][T10819] ? __pfx_chrdev_open+0x10/0x10 [ 372.389442][T10819] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 372.389475][T10819] do_dentry_open+0x748/0x1590 [ 372.389497][T10819] ? __pfx_chrdev_open+0x10/0x10 [ 372.389528][T10819] vfs_open+0x82/0x3f0 [ 372.389548][T10819] path_openat+0x2078/0x3140 [ 372.389576][T10819] ? __pfx_path_openat+0x10/0x10 [ 372.389605][T10819] do_filp_open+0x20b/0x470 [ 372.389627][T10819] ? __pfx_do_filp_open+0x10/0x10 [ 372.389662][T10819] ? alloc_fd+0x471/0x7d0 [ 372.389688][T10819] do_sys_openat2+0x121/0x290 [ 372.389704][T10819] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.389721][T10819] ? find_held_lock+0x2b/0x80 [ 372.389744][T10819] __x64_sys_openat+0x174/0x210 [ 372.389761][T10819] ? __pfx___x64_sys_openat+0x10/0x10 [ 372.389785][T10819] do_syscall_64+0xcd/0xf80 [ 372.389808][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.389823][T10819] RIP: 0033:0x7f15a618f7c9 [ 372.389837][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.389851][T10819] RSP: 002b:00007f15a6f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 372.389867][T10819] RAX: ffffffffffffffda RBX: 00007f15a63e5fa0 RCX: 00007f15a618f7c9 [ 372.389877][T10819] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 372.389886][T10819] RBP: 00007f15a6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 372.389902][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.389911][T10819] R13: 00007f15a63e6038 R14: 00007f15a63e5fa0 R15: 00007ffd3faf5428 [ 372.389932][T10819] [ 373.409337][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1085'. [ 373.461755][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.514545][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 373.531332][T10836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.575447][T10836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.678519][T10836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.760729][T10832] zswap: compressor not available [ 374.087076][T10837] zswap: compressor not available [ 378.481281][T10910] tipc: Enabling of bearer <@):^\/\> rejected, media not registered [ 378.546983][T10916] FAULT_INJECTION: forcing a failure. [ 378.546983][T10916] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 378.601444][T10916] CPU: 0 UID: 0 PID: 10916 Comm: syz.2.1102 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.601471][T10916] Tainted: [L]=SOFTLOCKUP [ 378.601477][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.601485][T10916] Call Trace: [ 378.601490][T10916] [ 378.601496][T10916] dump_stack_lvl+0x16c/0x1f0 [ 378.601522][T10916] should_fail_ex+0x512/0x640 [ 378.601542][T10916] should_fail_alloc_page+0xe7/0x130 [ 378.601566][T10916] prepare_alloc_pages+0x401/0x670 [ 378.601588][T10916] ? rcu_is_watching+0x12/0xc0 [ 378.601610][T10916] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 378.601634][T10916] ? __lock_acquire+0x436/0x2890 [ 378.601650][T10916] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.601675][T10916] ? lock_acquire+0x179/0x330 [ 378.601690][T10916] ? __lock_acquire+0x436/0x2890 [ 378.601705][T10916] ? __lock_acquire+0x436/0x2890 [ 378.601718][T10916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.601741][T10916] ? policy_nodemask+0xea/0x4e0 [ 378.601764][T10916] alloc_pages_mpol+0x1fb/0x550 [ 378.601786][T10916] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 378.601812][T10916] folio_alloc_mpol_noprof+0x36/0x2f0 [ 378.601829][T10916] vma_alloc_folio_noprof+0xed/0x1e0 [ 378.601844][T10916] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 378.601864][T10916] do_anonymous_page+0xc81/0x2190 [ 378.601887][T10916] __handle_mm_fault+0x1ecf/0x2bb0 [ 378.601908][T10916] ? __pfx___handle_mm_fault+0x10/0x10 [ 378.601925][T10916] ? __pte_offset_map_lock+0x174/0x310 [ 378.601945][T10916] ? find_held_lock+0x2b/0x80 [ 378.601969][T10916] ? follow_page_pte+0x5cf/0x1390 [ 378.601995][T10916] handle_mm_fault+0x3fe/0xad0 [ 378.602014][T10916] __get_user_pages+0x54e/0x3590 [ 378.602043][T10916] ? __pfx___get_user_pages+0x10/0x10 [ 378.602069][T10916] populate_vma_page_range+0x267/0x3f0 [ 378.602092][T10916] ? __pfx_populate_vma_page_range+0x10/0x10 [ 378.602114][T10916] ? __pfx_find_vma_intersection+0x10/0x10 [ 378.602136][T10916] ? do_mmap+0x69c/0x1210 [ 378.602157][T10916] __mm_populate+0x1d8/0x380 [ 378.602180][T10916] ? __pfx___mm_populate+0x10/0x10 [ 378.602203][T10916] ? up_write+0x282/0x4e0 [ 378.602220][T10916] vm_mmap_pgoff+0x37f/0x470 [ 378.602243][T10916] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 378.602267][T10916] ? __x64_sys_futex+0x1e0/0x4c0 [ 378.602283][T10916] ? __x64_sys_futex+0x1e9/0x4c0 [ 378.602301][T10916] ksys_mmap_pgoff+0x7d/0x5c0 [ 378.602330][T10916] ? xfd_validate_state+0x61/0x180 [ 378.602348][T10916] __x64_sys_mmap+0x125/0x190 [ 378.602365][T10916] do_syscall_64+0xcd/0xf80 [ 378.602389][T10916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.602404][T10916] RIP: 0033:0x7f15a618f7c9 [ 378.602418][T10916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.602433][T10916] RSP: 002b:00007f15a6f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 378.602447][T10916] RAX: ffffffffffffffda RBX: 00007f15a63e5fa0 RCX: 00007f15a618f7c9 [ 378.602457][T10916] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 378.602466][T10916] RBP: 00007f15a6213f91 R08: 0000000000000002 R09: 0000000000008000 [ 378.602475][T10916] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 378.602484][T10916] R13: 00007f15a63e6038 R14: 00007f15a63e5fa0 R15: 00007ffd3faf5428 [ 378.602504][T10916] [ 379.938529][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1103'. [ 380.046490][T10939] bond0: entered promiscuous mode [ 380.084707][T10939] bond_slave_0: entered promiscuous mode [ 380.133026][T10939] bond_slave_1: entered promiscuous mode [ 380.155816][T10939] bond0: entered allmulticast mode [ 380.185867][T10939] bond_slave_0: entered allmulticast mode [ 380.206266][T10939] bond_slave_1: entered allmulticast mode [ 382.619950][ T30] audit: type=1800 audit(1767246524.764:40): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1120" name="file0" dev="tmpfs" ino=1523 res=0 errno=0 [ 383.771883][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.778310][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.893383][T11022] sctp: [Deprecated]: syz.4.1132 (pid 11022) Use of int in maxseg socket option. [ 384.893383][T11022] Use struct sctp_assoc_value instead [ 385.730083][T11040] rnbd_client L213: map_device: Parameters missing [ 385.946851][T11047] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1137'. [ 386.013641][T11051] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1137'. [ 386.086033][T11047] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1137'. [ 387.502615][T11086] rnbd_client L213: map_device: Parameters missing [ 387.630605][T11090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1147'. [ 387.678257][T11090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.691969][T11090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.719729][T11090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.752391][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 387.785781][T11090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.018942][T11094] Invalid ELF header magic: != ELF [ 388.314027][T11108] futex_wake_op: syz.3.1150 tries to shift op by -2048; fix this program [ 388.357708][T11108] futex_wake_op: syz.3.1150 tries to shift op by -2048; fix this program [ 389.755851][T11142] zswap: compressor  not available [ 390.847341][T11170] usb usb3: usbfs: interface 0 claimed by hub while 'syz.3.1164' sets config #3 [ 390.976685][T11177] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.1165' sets config #-1 [ 391.222486][T11183] blktrace: Concurrent blktraces are not allowed on loop2 [ 391.347676][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.362751][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.371759][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.379023][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.386181][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.392241][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.398271][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.404205][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.410350][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.416279][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.422481][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.428519][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.434449][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.440562][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.446485][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.453076][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.459133][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.465070][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.474507][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.482482][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.488546][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.494473][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.504307][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.510480][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.516435][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.522420][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.528458][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.534394][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.541641][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.547607][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.553932][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.559928][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.565856][ T5846] Bluetooth: hci3: Malformed LE Event: 0x0b [ 391.669233][T11193] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1169'. [ 392.234471][T11206] FAULT_INJECTION: forcing a failure. [ 392.234471][T11206] name failslab, interval 1, probability 0, space 0, times 0 [ 392.302153][T11206] CPU: 0 UID: 0 PID: 11206 Comm: syz.1.1172 Tainted: G L syzkaller #0 PREEMPT(full) [ 392.302181][T11206] Tainted: [L]=SOFTLOCKUP [ 392.302186][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.302195][T11206] Call Trace: [ 392.302200][T11206] [ 392.302206][T11206] dump_stack_lvl+0x16c/0x1f0 [ 392.302233][T11206] should_fail_ex+0x512/0x640 [ 392.302250][T11206] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 392.302271][T11206] should_failslab+0xc2/0x120 [ 392.302293][T11206] kmem_cache_alloc_node_noprof+0x86/0x800 [ 392.302311][T11206] ? __alloc_skb+0x156/0x410 [ 392.302331][T11206] ? __alloc_skb+0x156/0x410 [ 392.302345][T11206] __alloc_skb+0x156/0x410 [ 392.302358][T11206] ? __alloc_skb+0x35d/0x410 [ 392.302373][T11206] ? __pfx___alloc_skb+0x10/0x10 [ 392.302396][T11206] netlink_dump+0x19b/0xd30 [ 392.302418][T11206] ? __pfx_netlink_dump+0x10/0x10 [ 392.302445][T11206] ? __asan_memset+0x23/0x50 [ 392.302465][T11206] ? genl_start+0x67f/0x980 [ 392.302489][T11206] __netlink_dump_start+0x6d6/0x990 [ 392.302512][T11206] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 392.302528][T11206] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 392.302542][T11206] ? genl_op_from_small+0x25/0x440 [ 392.302568][T11206] ? __pfx_genl_get_cmd+0x10/0x10 [ 392.302587][T11206] ? __pfx_genl_start+0x10/0x10 [ 392.302607][T11206] ? __pfx_genl_dumpit+0x10/0x10 [ 392.302619][T11206] ? __pfx_genl_done+0x10/0x10 [ 392.302634][T11206] ? __radix_tree_lookup+0x21f/0x2c0 [ 392.302656][T11206] genl_rcv_msg+0x46e/0x800 [ 392.302672][T11206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.302686][T11206] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 392.302711][T11206] netlink_rcv_skb+0x158/0x420 [ 392.302731][T11206] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.302746][T11206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.302775][T11206] ? netlink_deliver_tap+0x1ae/0xd30 [ 392.302797][T11206] genl_rcv+0x28/0x40 [ 392.302817][T11206] netlink_unicast+0x5aa/0x870 [ 392.302840][T11206] ? __pfx_netlink_unicast+0x10/0x10 [ 392.302867][T11206] netlink_sendmsg+0x8c8/0xdd0 [ 392.302891][T11206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.302914][T11206] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 392.302941][T11206] ____sys_sendmsg+0xa5d/0xc30 [ 392.302964][T11206] ? copy_msghdr_from_user+0x10a/0x160 [ 392.302982][T11206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.303016][T11206] ? __pfx_futex_wake_mark+0x10/0x10 [ 392.303040][T11206] ___sys_sendmsg+0x134/0x1d0 [ 392.303061][T11206] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.303079][T11206] ? futex_private_hash_put+0x160/0x1b0 [ 392.303119][T11206] __sys_sendmsg+0x16d/0x220 [ 392.303138][T11206] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.303156][T11206] ? __x64_sys_futex+0x1e0/0x4c0 [ 392.303184][T11206] do_syscall_64+0xcd/0xf80 [ 392.303206][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.303222][T11206] RIP: 0033:0x7fb50818f7c9 [ 392.303235][T11206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.303249][T11206] RSP: 002b:00007fb508ffd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.303263][T11206] RAX: ffffffffffffffda RBX: 00007fb5083e6090 RCX: 00007fb50818f7c9 [ 392.303273][T11206] RDX: 0000000004000084 RSI: 0000200000000240 RDI: 0000000000000002 [ 392.303282][T11206] RBP: 00007fb508213f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.303291][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.303300][T11206] R13: 00007fb5083e6128 R14: 00007fb5083e6090 R15: 00007ffcf14b69f8 [ 392.303321][T11206] [ 393.314075][T11226] binder: 11225:11226 ioctl c0306201 0 returned -14 [ 393.562915][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 393.579895][T11233] FAULT_INJECTION: forcing a failure. [ 393.579895][T11233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.615641][T11233] CPU: 0 UID: 0 PID: 11233 Comm: syz.1.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.615669][T11233] Tainted: [L]=SOFTLOCKUP [ 393.615674][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.615683][T11233] Call Trace: [ 393.615689][T11233] [ 393.615695][T11233] dump_stack_lvl+0x16c/0x1f0 [ 393.615724][T11233] should_fail_ex+0x512/0x640 [ 393.615744][T11233] should_fail_alloc_page+0xe7/0x130 [ 393.615772][T11233] prepare_alloc_pages+0x401/0x670 [ 393.615795][T11233] ? rcu_is_watching+0x12/0xc0 [ 393.615818][T11233] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 393.615842][T11233] ? __lock_acquire+0x436/0x2890 [ 393.615859][T11233] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 393.615877][T11233] ? __mod_zone_page_state+0xcc/0x1a0 [ 393.615897][T11233] ? __lock_acquire+0x436/0x2890 [ 393.615912][T11233] ? __lock_acquire+0x436/0x2890 [ 393.615925][T11233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.615955][T11233] ? policy_nodemask+0xea/0x4e0 [ 393.615979][T11233] alloc_pages_mpol+0x1fb/0x550 [ 393.616002][T11233] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 393.616030][T11233] folio_alloc_mpol_noprof+0x36/0x2f0 [ 393.616047][T11233] vma_alloc_folio_noprof+0xed/0x1e0 [ 393.616062][T11233] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 393.616083][T11233] do_anonymous_page+0xc81/0x2190 [ 393.616105][T11233] __handle_mm_fault+0x1ecf/0x2bb0 [ 393.616126][T11233] ? __pfx___handle_mm_fault+0x10/0x10 [ 393.616143][T11233] ? __pte_offset_map_lock+0x174/0x310 [ 393.616163][T11233] ? find_held_lock+0x2b/0x80 [ 393.616187][T11233] ? follow_page_pte+0x5cf/0x1390 [ 393.616212][T11233] handle_mm_fault+0x3fe/0xad0 [ 393.616231][T11233] __get_user_pages+0x54e/0x3590 [ 393.616259][T11233] ? __pfx___get_user_pages+0x10/0x10 [ 393.616286][T11233] populate_vma_page_range+0x267/0x3f0 [ 393.616309][T11233] ? __pfx_populate_vma_page_range+0x10/0x10 [ 393.616331][T11233] ? __pfx_find_vma_intersection+0x10/0x10 [ 393.616353][T11233] ? do_mmap+0x69c/0x1210 [ 393.616375][T11233] __mm_populate+0x1d8/0x380 [ 393.616397][T11233] ? __pfx___mm_populate+0x10/0x10 [ 393.616420][T11233] ? up_write+0x282/0x4e0 [ 393.616437][T11233] vm_mmap_pgoff+0x37f/0x470 [ 393.616460][T11233] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 393.616484][T11233] ? __x64_sys_futex+0x1e0/0x4c0 [ 393.616500][T11233] ? __x64_sys_futex+0x1e9/0x4c0 [ 393.616518][T11233] ksys_mmap_pgoff+0x7d/0x5c0 [ 393.616538][T11233] ? xfd_validate_state+0x61/0x180 [ 393.616555][T11233] __x64_sys_mmap+0x125/0x190 [ 393.616572][T11233] do_syscall_64+0xcd/0xf80 [ 393.616596][T11233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.616611][T11233] RIP: 0033:0x7fb50818f7c9 [ 393.616626][T11233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.616641][T11233] RSP: 002b:00007fb50901e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 393.616657][T11233] RAX: ffffffffffffffda RBX: 00007fb5083e5fa0 RCX: 00007fb50818f7c9 [ 393.616667][T11233] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 393.616676][T11233] RBP: 00007fb508213f91 R08: 0000000000000002 R09: 0000000000008000 [ 393.616685][T11233] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 393.616694][T11233] R13: 00007fb5083e6038 R14: 00007fb5083e5fa0 R15: 00007ffcf14b69f8 [ 393.616715][T11233] [ 395.460413][T11264] rnbd_client L213: map_device: Parameters missing [ 396.431890][T11290] FAULT_INJECTION: forcing a failure. [ 396.431890][T11290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 396.478561][T11290] CPU: 0 UID: 0 PID: 11290 Comm: syz.1.1195 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.478589][T11290] Tainted: [L]=SOFTLOCKUP [ 396.478595][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.478612][T11290] Call Trace: [ 396.478618][T11290] [ 396.478624][T11290] dump_stack_lvl+0x16c/0x1f0 [ 396.478651][T11290] should_fail_ex+0x512/0x640 [ 396.478672][T11290] should_fail_alloc_page+0xe7/0x130 [ 396.478696][T11290] prepare_alloc_pages+0x401/0x670 [ 396.478720][T11290] ? rcu_is_watching+0x12/0xc0 [ 396.478741][T11290] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 396.478766][T11290] ? css_rstat_updated+0x1d1/0x590 [ 396.478781][T11290] ? __pfx_css_rstat_updated+0x10/0x10 [ 396.478800][T11290] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 396.478818][T11290] ? __mod_zone_page_state+0xcc/0x1a0 [ 396.478835][T11290] ? lru_gen_add_folio+0x1a4/0xef0 [ 396.478856][T11290] ? __lock_acquire+0x436/0x2890 [ 396.478872][T11290] ? __lock_acquire+0x436/0x2890 [ 396.478885][T11290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.478908][T11290] ? policy_nodemask+0xea/0x4e0 [ 396.478931][T11290] alloc_pages_mpol+0x1fb/0x550 [ 396.478953][T11290] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 396.478980][T11290] folio_alloc_mpol_noprof+0x36/0x2f0 [ 396.478996][T11290] vma_alloc_folio_noprof+0xed/0x1e0 [ 396.479010][T11290] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 396.479031][T11290] do_anonymous_page+0xc81/0x2190 [ 396.479054][T11290] __handle_mm_fault+0x1ecf/0x2bb0 [ 396.479074][T11290] ? __pfx___handle_mm_fault+0x10/0x10 [ 396.479091][T11290] ? __pte_offset_map_lock+0x174/0x310 [ 396.479111][T11290] ? find_held_lock+0x2b/0x80 [ 396.479135][T11290] ? follow_page_pte+0x5cf/0x1390 [ 396.479160][T11290] handle_mm_fault+0x3fe/0xad0 [ 396.479178][T11290] __get_user_pages+0x54e/0x3590 [ 396.479207][T11290] ? __pfx___get_user_pages+0x10/0x10 [ 396.479233][T11290] populate_vma_page_range+0x267/0x3f0 [ 396.479257][T11290] ? __pfx_populate_vma_page_range+0x10/0x10 [ 396.479278][T11290] ? __pfx_find_vma_intersection+0x10/0x10 [ 396.479300][T11290] ? do_mmap+0x69c/0x1210 [ 396.479322][T11290] __mm_populate+0x1d8/0x380 [ 396.479344][T11290] ? __pfx___mm_populate+0x10/0x10 [ 396.479367][T11290] ? up_write+0x282/0x4e0 [ 396.479384][T11290] vm_mmap_pgoff+0x37f/0x470 [ 396.479406][T11290] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 396.479430][T11290] ? __x64_sys_futex+0x1e0/0x4c0 [ 396.479446][T11290] ? __x64_sys_futex+0x1e9/0x4c0 [ 396.479465][T11290] ksys_mmap_pgoff+0x7d/0x5c0 [ 396.479484][T11290] ? xfd_validate_state+0x61/0x180 [ 396.479501][T11290] __x64_sys_mmap+0x125/0x190 [ 396.479517][T11290] do_syscall_64+0xcd/0xf80 [ 396.479540][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.479556][T11290] RIP: 0033:0x7fb50818f7c9 [ 396.479570][T11290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.479589][T11290] RSP: 002b:00007fb50901e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 396.479610][T11290] RAX: ffffffffffffffda RBX: 00007fb5083e5fa0 RCX: 00007fb50818f7c9 [ 396.479621][T11290] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 396.479630][T11290] RBP: 00007fb508213f91 R08: 0000000000000002 R09: 0000000000008000 [ 396.479639][T11290] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 396.479649][T11290] R13: 00007fb5083e6038 R14: 00007fb5083e5fa0 R15: 00007ffcf14b69f8 [ 396.479669][T11290] [ 397.482993][T11309] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 398.259753][T11328] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 399.000922][T11347] FAULT_INJECTION: forcing a failure. [ 399.000922][T11347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 399.058288][T11345] FAULT_INJECTION: forcing a failure. [ 399.058288][T11345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 399.074716][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.2.1211 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.074741][T11347] Tainted: [L]=SOFTLOCKUP [ 399.074747][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.074756][T11347] Call Trace: [ 399.074762][T11347] [ 399.074768][T11347] dump_stack_lvl+0x16c/0x1f0 [ 399.074794][T11347] should_fail_ex+0x512/0x640 [ 399.074815][T11347] should_fail_alloc_page+0xe7/0x130 [ 399.074839][T11347] prepare_alloc_pages+0x401/0x670 [ 399.074861][T11347] ? rcu_is_watching+0x12/0xc0 [ 399.074883][T11347] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 399.074906][T11347] ? __lock_acquire+0x436/0x2890 [ 399.074923][T11347] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 399.074941][T11347] ? __mod_zone_page_state+0xcc/0x1a0 [ 399.074957][T11347] ? lru_gen_add_folio+0x1a4/0xef0 [ 399.074976][T11347] ? __lock_acquire+0x436/0x2890 [ 399.074997][T11347] ? __lock_acquire+0x436/0x2890 [ 399.075014][T11347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.075037][T11347] ? policy_nodemask+0xea/0x4e0 [ 399.075060][T11347] alloc_pages_mpol+0x1fb/0x550 [ 399.075082][T11347] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 399.075109][T11347] folio_alloc_mpol_noprof+0x36/0x2f0 [ 399.075125][T11347] vma_alloc_folio_noprof+0xed/0x1e0 [ 399.075140][T11347] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 399.075160][T11347] do_anonymous_page+0xc81/0x2190 [ 399.075182][T11347] __handle_mm_fault+0x1ecf/0x2bb0 [ 399.075203][T11347] ? __pfx___handle_mm_fault+0x10/0x10 [ 399.075219][T11347] ? __pte_offset_map_lock+0x174/0x310 [ 399.075239][T11347] ? find_held_lock+0x2b/0x80 [ 399.075263][T11347] ? follow_page_pte+0x5cf/0x1390 [ 399.075288][T11347] handle_mm_fault+0x3fe/0xad0 [ 399.075306][T11347] __get_user_pages+0x54e/0x3590 [ 399.075335][T11347] ? __pfx___get_user_pages+0x10/0x10 [ 399.075369][T11347] populate_vma_page_range+0x267/0x3f0 [ 399.075393][T11347] ? __pfx_populate_vma_page_range+0x10/0x10 [ 399.075415][T11347] ? __pfx_find_vma_intersection+0x10/0x10 [ 399.075438][T11347] ? do_mmap+0x69c/0x1210 [ 399.075461][T11347] __mm_populate+0x1d8/0x380 [ 399.075484][T11347] ? __pfx___mm_populate+0x10/0x10 [ 399.075507][T11347] ? up_write+0x282/0x4e0 [ 399.075524][T11347] vm_mmap_pgoff+0x37f/0x470 [ 399.075546][T11347] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 399.075571][T11347] ? __x64_sys_futex+0x1e0/0x4c0 [ 399.075586][T11347] ? __x64_sys_futex+0x1e9/0x4c0 [ 399.075605][T11347] ksys_mmap_pgoff+0x7d/0x5c0 [ 399.075624][T11347] ? xfd_validate_state+0x61/0x180 [ 399.075640][T11347] __x64_sys_mmap+0x125/0x190 [ 399.075657][T11347] do_syscall_64+0xcd/0xf80 [ 399.075679][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.075695][T11347] RIP: 0033:0x7f15a618f7c9 [ 399.075708][T11347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.075722][T11347] RSP: 002b:00007f15a6f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 399.075737][T11347] RAX: ffffffffffffffda RBX: 00007f15a63e5fa0 RCX: 00007f15a618f7c9 [ 399.075747][T11347] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 399.075756][T11347] RBP: 00007f15a6213f91 R08: 0000000000000002 R09: 0000000000008000 [ 399.075765][T11347] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 399.075774][T11347] R13: 00007f15a63e6038 R14: 00007f15a63e5fa0 R15: 00007ffd3faf5428 [ 399.075794][T11347] [ 399.416810][T11350] rnbd_client L213: map_device: Parameters missing [ 399.441058][T11345] CPU: 0 UID: 0 PID: 11345 Comm: syz.4.1210 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.441086][T11345] Tainted: [L]=SOFTLOCKUP [ 399.441092][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.441101][T11345] Call Trace: [ 399.441107][T11345] [ 399.441113][T11345] dump_stack_lvl+0x16c/0x1f0 [ 399.441140][T11345] should_fail_ex+0x512/0x640 [ 399.441159][T11345] should_fail_alloc_page+0xe7/0x130 [ 399.441183][T11345] prepare_alloc_pages+0x401/0x670 [ 399.441207][T11345] ? rcu_is_watching+0x12/0xc0 [ 399.441232][T11345] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 399.441249][T11345] ? should_fail_alloc_page+0xee/0x130 [ 399.441272][T11345] ? rcu_is_watching+0x12/0xc0 [ 399.441291][T11345] ? trace_mm_page_alloc+0x11b/0x180 [ 399.441312][T11345] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 399.441329][T11345] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 399.441350][T11345] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 399.441377][T11345] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 399.441399][T11345] ? kasan_save_stack+0x42/0x60 [ 399.441421][T11345] ? __get_vm_area_node+0x1ca/0x330 [ 399.441442][T11345] ? __kvmalloc_node_noprof+0x42c/0xa40 [ 399.441462][T11345] ? do_syscall_64+0xcd/0xf80 [ 399.441481][T11345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.441504][T11345] alloc_pages_bulk_noprof+0x77a/0x1410 [ 399.441521][T11345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.441544][T11345] ? policy_nodemask+0xea/0x4e0 [ 399.441566][T11345] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 399.441585][T11345] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 399.441614][T11345] __kasan_populate_vmalloc+0xfb/0x220 [ 399.441637][T11345] alloc_vmap_area+0x98d/0x2a50 [ 399.441665][T11345] ? __pfx_alloc_vmap_area+0x10/0x10 [ 399.441690][T11345] __get_vm_area_node+0x1ca/0x330 [ 399.441714][T11345] __vmalloc_node_range_noprof+0x247/0x16b0 [ 399.441729][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.441750][T11345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.441772][T11345] ? policy_nodemask+0xea/0x4e0 [ 399.441792][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.441811][T11345] ? alloc_pages_mpol+0x25a/0x550 [ 399.441832][T11345] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 399.441853][T11345] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.441872][T11345] ? ___kmalloc_large_node+0x10c/0x150 [ 399.441898][T11345] __kvmalloc_node_noprof+0x42c/0xa40 [ 399.441917][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.441936][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.441954][T11345] ? _copy_from_user+0x59/0xd0 [ 399.441973][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.441990][T11345] __do_sys_listmount+0x27f/0xf40 [ 399.442014][T11345] ? __pfx___do_sys_listmount+0x10/0x10 [ 399.442045][T11345] do_syscall_64+0xcd/0xf80 [ 399.442067][T11345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.442082][T11345] RIP: 0033:0x7f09a8d8f7c9 [ 399.442099][T11345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.442114][T11345] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 399.442130][T11345] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 399.442141][T11345] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 399.442150][T11345] RBP: 00007f09a8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 399.442158][T11345] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 399.442167][T11345] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 399.442188][T11345] [ 399.443083][T11345] syz.4.1210: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.855874][T11345] CPU: 0 UID: 0 PID: 11345 Comm: syz.4.1210 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.855901][T11345] Tainted: [L]=SOFTLOCKUP [ 399.855906][T11345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.855916][T11345] Call Trace: [ 399.855921][T11345] [ 399.855927][T11345] dump_stack_lvl+0x16c/0x1f0 [ 399.855955][T11345] warn_alloc+0x248/0x3a0 [ 399.855974][T11345] ? __pfx_warn_alloc+0x10/0x10 [ 399.855993][T11345] ? __get_vm_area_node+0x2cd/0x330 [ 399.856020][T11345] ? __get_vm_area_node+0x2cd/0x330 [ 399.856042][T11345] ? __get_vm_area_node+0x208/0x330 [ 399.856068][T11345] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 399.856086][T11345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.856110][T11345] ? policy_nodemask+0xea/0x4e0 [ 399.856132][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.856153][T11345] ? alloc_pages_mpol+0x25a/0x550 [ 399.856175][T11345] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 399.856201][T11345] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 399.856221][T11345] ? ___kmalloc_large_node+0x10c/0x150 [ 399.856252][T11345] __kvmalloc_node_noprof+0x42c/0xa40 [ 399.856274][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.856294][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.856313][T11345] ? _copy_from_user+0x59/0xd0 [ 399.856333][T11345] ? __do_sys_listmount+0x27f/0xf40 [ 399.856351][T11345] __do_sys_listmount+0x27f/0xf40 [ 399.856376][T11345] ? __pfx___do_sys_listmount+0x10/0x10 [ 399.856413][T11345] do_syscall_64+0xcd/0xf80 [ 399.856437][T11345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.856452][T11345] RIP: 0033:0x7f09a8d8f7c9 [ 399.856465][T11345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.856481][T11345] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 399.856502][T11345] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 399.856513][T11345] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 399.856522][T11345] RBP: 00007f09a8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 399.856531][T11345] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 399.856540][T11345] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 399.856560][T11345] [ 399.856588][T11345] Mem-Info: [ 400.164791][T11345] active_anon:11292 inactive_anon:39 isolated_anon:0 [ 400.164791][T11345] active_file:5436 inactive_file:47231 isolated_file:0 [ 400.164791][T11345] unevictable:768 dirty:606 writeback:0 [ 400.164791][T11345] slab_reclaimable:11858 slab_unreclaimable:92241 [ 400.164791][T11345] mapped:25715 shmem:1368 pagetables:1464 [ 400.164791][T11345] sec_pagetables:0 bounce:0 [ 400.164791][T11345] kernel_misc_reclaimable:0 [ 400.164791][T11345] free:1319513 free_pcp:16056 free_cma:0 [ 400.260206][T11345] Node 0 active_anon:44232kB inactive_anon:156kB active_file:21744kB inactive_file:188784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102852kB dirty:2476kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12160kB pagetables:5596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 400.345356][T11345] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 400.416447][T11345] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.479111][T11345] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 400.510643][T11345] Node 0 DMA32 free:1385112kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40488kB inactive_anon:156kB active_file:21744kB inactive_file:188784kB unevictable:1536kB writepending:2476kB zspages:1024kB present:3129332kB managed:2541024kB mlocked:0kB bounce:0kB free_pcp:42584kB local_pcp:42584kB free_cma:0kB [ 400.625552][T11345] lowmem_reserve[]: 0 0 1 1 1 [ 400.640501][T11345] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.821511][T11345] lowmem_reserve[]: 0 0 0 0 0 [ 400.858592][T11345] Node 1 Normal free:3881012kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21960kB local_pcp:21960kB free_cma:0kB [ 401.026513][T11345] lowmem_reserve[]: 0 0 0 0 0 [ 401.053525][T11345] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.145610][T11345] Node 0 DMA32: 7145*4kB (UM) 5264*8kB (UM) 2691*16kB (UME) 1198*32kB (UM) 678*64kB (UME) 495*128kB (UME) 282*256kB (UM) 184*512kB (UME) 126*1024kB (UME) 6*2048kB (ME) 200*4096kB (UM) = 1385748kB [ 401.212500][T11345] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 401.271233][T11345] Node 1 Normal: 178*4kB (UME) 53*8kB (UM) 8*16kB (UME) 162*32kB (UME) 44*64kB (UE) 16*128kB (UME) 7*256kB (UM) 5*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 940*4096kB (M) = 3881264kB [ 401.342665][T11345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.398775][T11345] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.435465][T11345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.486404][T11345] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.528163][T11345] 54057 total pagecache pages [ 401.550828][T11345] 29 pages in swap cache [ 401.592499][T11345] Free swap = 124108kB [ 401.596679][T11345] Total swap = 124996kB [ 401.626376][T11345] 2097051 pages RAM [ 401.665309][T11345] 0 pages HighMem/MovableOnly [ 401.693285][T11345] 429769 pages reserved [ 401.697456][T11345] 0 pages cma reserved [ 402.012714][T11403] FAULT_INJECTION: forcing a failure. [ 402.012714][T11403] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.101785][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.1.1225 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.101813][T11403] Tainted: [L]=SOFTLOCKUP [ 402.101818][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.101827][T11403] Call Trace: [ 402.101833][T11403] [ 402.101839][T11403] dump_stack_lvl+0x16c/0x1f0 [ 402.101866][T11403] should_fail_ex+0x512/0x640 [ 402.101886][T11403] should_fail_alloc_page+0xe7/0x130 [ 402.101910][T11403] prepare_alloc_pages+0x401/0x670 [ 402.101933][T11403] ? rcu_is_watching+0x12/0xc0 [ 402.101954][T11403] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 402.101979][T11403] ? find_held_lock+0x2b/0x80 [ 402.101998][T11403] ? free_unref_folios+0x1085/0x1610 [ 402.102019][T11403] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 402.102046][T11403] ? __mod_zone_page_state+0xcc/0x1a0 [ 402.102063][T11403] ? lru_gen_add_folio+0x1a4/0xef0 [ 402.102086][T11403] ? __lock_acquire+0x436/0x2890 [ 402.102102][T11403] ? __lock_acquire+0x436/0x2890 [ 402.102115][T11403] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.102138][T11403] ? policy_nodemask+0xea/0x4e0 [ 402.102161][T11403] alloc_pages_mpol+0x1fb/0x550 [ 402.102183][T11403] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 402.102209][T11403] folio_alloc_mpol_noprof+0x36/0x2f0 [ 402.102226][T11403] vma_alloc_folio_noprof+0xed/0x1e0 [ 402.102240][T11403] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 402.102261][T11403] do_anonymous_page+0xc81/0x2190 [ 402.102283][T11403] __handle_mm_fault+0x1ecf/0x2bb0 [ 402.102306][T11403] ? __pfx___handle_mm_fault+0x10/0x10 [ 402.102322][T11403] ? __pte_offset_map_lock+0x174/0x310 [ 402.102343][T11403] ? find_held_lock+0x2b/0x80 [ 402.102366][T11403] ? follow_page_pte+0x5cf/0x1390 [ 402.102391][T11403] handle_mm_fault+0x3fe/0xad0 [ 402.102409][T11403] __get_user_pages+0x54e/0x3590 [ 402.102438][T11403] ? __pfx___get_user_pages+0x10/0x10 [ 402.102464][T11403] populate_vma_page_range+0x267/0x3f0 [ 402.102488][T11403] ? __pfx_populate_vma_page_range+0x10/0x10 [ 402.102509][T11403] ? __pfx_find_vma_intersection+0x10/0x10 [ 402.102531][T11403] ? do_mmap+0x69c/0x1210 [ 402.102553][T11403] __mm_populate+0x1d8/0x380 [ 402.102576][T11403] ? __pfx___mm_populate+0x10/0x10 [ 402.102599][T11403] ? up_write+0x282/0x4e0 [ 402.102616][T11403] vm_mmap_pgoff+0x37f/0x470 [ 402.102638][T11403] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 402.102662][T11403] ? __x64_sys_futex+0x1e0/0x4c0 [ 402.102678][T11403] ? __x64_sys_futex+0x1e9/0x4c0 [ 402.102696][T11403] ksys_mmap_pgoff+0x7d/0x5c0 [ 402.102715][T11403] ? xfd_validate_state+0x61/0x180 [ 402.102733][T11403] __x64_sys_mmap+0x125/0x190 [ 402.102749][T11403] do_syscall_64+0xcd/0xf80 [ 402.102772][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.102788][T11403] RIP: 0033:0x7fb50818f7c9 [ 402.102801][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.102816][T11403] RSP: 002b:00007fb50901e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 402.102831][T11403] RAX: ffffffffffffffda RBX: 00007fb5083e5fa0 RCX: 00007fb50818f7c9 [ 402.102841][T11403] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 402.102850][T11403] RBP: 00007fb508213f91 R08: 0000000000000002 R09: 0000000000008000 [ 402.102859][T11403] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 402.102868][T11403] R13: 00007fb5083e6038 R14: 00007fb5083e5fa0 R15: 00007ffcf14b69f8 [ 402.102889][T11403] [ 402.907959][T11424] input: f¬ as /devices/virtual/input/input20 [ 402.940271][T11423] rnbd_client L213: map_device: Parameters missing [ 404.414310][T11466] can: request_module (can-proto-0) failed. [ 407.136487][T11535] zswap: compressor not available [ 407.197084][T11548] FAULT_INJECTION: forcing a failure. [ 407.197084][T11548] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 407.305162][T11548] CPU: 0 UID: 0 PID: 11548 Comm: syz.3.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.305190][T11548] Tainted: [L]=SOFTLOCKUP [ 407.305196][T11548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.305205][T11548] Call Trace: [ 407.305210][T11548] [ 407.305218][T11548] dump_stack_lvl+0x16c/0x1f0 [ 407.305245][T11548] should_fail_ex+0x512/0x640 [ 407.305265][T11548] should_fail_alloc_page+0xe7/0x130 [ 407.305289][T11548] prepare_alloc_pages+0x401/0x670 [ 407.305312][T11548] ? rcu_is_watching+0x12/0xc0 [ 407.305334][T11548] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 407.305358][T11548] ? __lock_acquire+0x436/0x2890 [ 407.305374][T11548] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 407.305392][T11548] ? __mod_zone_page_state+0xcc/0x1a0 [ 407.305408][T11548] ? lru_gen_add_folio+0x1a4/0xef0 [ 407.305428][T11548] ? __lock_acquire+0x436/0x2890 [ 407.305443][T11548] ? __lock_acquire+0x436/0x2890 [ 407.305456][T11548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 407.305479][T11548] ? policy_nodemask+0xea/0x4e0 [ 407.305502][T11548] alloc_pages_mpol+0x1fb/0x550 [ 407.305531][T11548] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 407.305558][T11548] folio_alloc_mpol_noprof+0x36/0x2f0 [ 407.305575][T11548] vma_alloc_folio_noprof+0xed/0x1e0 [ 407.305590][T11548] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 407.305611][T11548] do_anonymous_page+0xc81/0x2190 [ 407.305635][T11548] __handle_mm_fault+0x1ecf/0x2bb0 [ 407.305655][T11548] ? __pfx___handle_mm_fault+0x10/0x10 [ 407.305672][T11548] ? __pte_offset_map_lock+0x174/0x310 [ 407.305692][T11548] ? find_held_lock+0x2b/0x80 [ 407.305716][T11548] ? follow_page_pte+0x5cf/0x1390 [ 407.305740][T11548] handle_mm_fault+0x3fe/0xad0 [ 407.305759][T11548] __get_user_pages+0x54e/0x3590 [ 407.305787][T11548] ? __pfx___get_user_pages+0x10/0x10 [ 407.305814][T11548] populate_vma_page_range+0x267/0x3f0 [ 407.305846][T11548] ? __pfx_populate_vma_page_range+0x10/0x10 [ 407.305869][T11548] ? __pfx_find_vma_intersection+0x10/0x10 [ 407.305891][T11548] ? do_mmap+0x69c/0x1210 [ 407.305916][T11548] __mm_populate+0x1d8/0x380 [ 407.305944][T11548] ? __pfx___mm_populate+0x10/0x10 [ 407.305968][T11548] ? up_write+0x282/0x4e0 [ 407.305985][T11548] vm_mmap_pgoff+0x37f/0x470 [ 407.306008][T11548] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 407.306032][T11548] ? __x64_sys_futex+0x1e0/0x4c0 [ 407.306048][T11548] ? __x64_sys_futex+0x1e9/0x4c0 [ 407.306066][T11548] ksys_mmap_pgoff+0x7d/0x5c0 [ 407.306086][T11548] ? xfd_validate_state+0x61/0x180 [ 407.306103][T11548] __x64_sys_mmap+0x125/0x190 [ 407.306119][T11548] do_syscall_64+0xcd/0xf80 [ 407.306142][T11548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.306158][T11548] RIP: 0033:0x7fb68b38f7c9 [ 407.306172][T11548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.306187][T11548] RSP: 002b:00007fb68c180038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 407.306202][T11548] RAX: ffffffffffffffda RBX: 00007fb68b5e5fa0 RCX: 00007fb68b38f7c9 [ 407.306212][T11548] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 407.306222][T11548] RBP: 00007fb68b413f91 R08: 0000000000000002 R09: 0000000000008000 [ 407.306231][T11548] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 407.306240][T11548] R13: 00007fb68b5e6038 R14: 00007fb68b5e5fa0 R15: 00007ffc1159aba8 [ 407.306260][T11548] [ 411.007303][T11595] usb usb3: usbfs: interface 0 claimed by hub while 'syz.2.1261' sets config #3 [ 411.352917][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.359843][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.368418][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.374367][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.380623][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.386554][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.392856][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.399086][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.405139][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.411441][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.417475][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.424783][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.433172][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.439454][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.447526][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.453588][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.461007][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.467007][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.473292][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.479827][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.486961][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.493328][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.499576][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.506684][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.512959][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.519157][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.525245][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.532659][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.538976][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.544969][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.554722][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.568188][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.574134][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.580240][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.586181][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.592151][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.598185][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.604128][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.610598][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.616538][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.622588][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.629062][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.634999][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.641139][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.647068][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.656957][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.667888][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.673955][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.679988][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.685913][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.691891][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.697810][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.704620][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.710650][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.718140][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.724080][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.730759][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.736688][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.743159][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.749153][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.756260][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.762302][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.769904][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.775840][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 411.782305][ T5846] Bluetooth: hci1: Malformed LE Event: 0x0b [ 412.126001][T11612] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1265'. [ 412.157514][T11609] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1265'. [ 412.437993][T11608] tipc: Started in network mode [ 412.444407][T11608] tipc: Node identity ffffffff, cluster identity 4711 [ 412.552879][T11608] tipc: Node number set to 4294967295 [ 414.081978][T11653] FAULT_INJECTION: forcing a failure. [ 414.081978][T11653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 414.161487][T11653] CPU: 0 UID: 0 PID: 11653 Comm: syz.2.1274 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.161515][T11653] Tainted: [L]=SOFTLOCKUP [ 414.161521][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.161531][T11653] Call Trace: [ 414.161536][T11653] [ 414.161542][T11653] dump_stack_lvl+0x16c/0x1f0 [ 414.161570][T11653] should_fail_ex+0x512/0x640 [ 414.161590][T11653] should_fail_alloc_page+0xe7/0x130 [ 414.161614][T11653] prepare_alloc_pages+0x401/0x670 [ 414.161637][T11653] ? rcu_is_watching+0x12/0xc0 [ 414.161659][T11653] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 414.161683][T11653] ? __lock_acquire+0x436/0x2890 [ 414.161699][T11653] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 414.161717][T11653] ? __mod_zone_page_state+0xcc/0x1a0 [ 414.161736][T11653] ? __lock_acquire+0x436/0x2890 [ 414.161751][T11653] ? __lock_acquire+0x436/0x2890 [ 414.161764][T11653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 414.161786][T11653] ? policy_nodemask+0xea/0x4e0 [ 414.161809][T11653] alloc_pages_mpol+0x1fb/0x550 [ 414.161831][T11653] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 414.161858][T11653] folio_alloc_mpol_noprof+0x36/0x2f0 [ 414.161874][T11653] vma_alloc_folio_noprof+0xed/0x1e0 [ 414.161888][T11653] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 414.161909][T11653] do_anonymous_page+0xc81/0x2190 [ 414.161938][T11653] __handle_mm_fault+0x1ecf/0x2bb0 [ 414.161959][T11653] ? __pfx___handle_mm_fault+0x10/0x10 [ 414.161977][T11653] ? __pte_offset_map_lock+0x174/0x310 [ 414.161998][T11653] ? find_held_lock+0x2b/0x80 [ 414.162023][T11653] ? follow_page_pte+0x5cf/0x1390 [ 414.162048][T11653] handle_mm_fault+0x3fe/0xad0 [ 414.162067][T11653] __get_user_pages+0x54e/0x3590 [ 414.162095][T11653] ? __pfx___get_user_pages+0x10/0x10 [ 414.162122][T11653] populate_vma_page_range+0x267/0x3f0 [ 414.162145][T11653] ? __pfx_populate_vma_page_range+0x10/0x10 [ 414.162167][T11653] ? __pfx_find_vma_intersection+0x10/0x10 [ 414.162189][T11653] ? do_mmap+0x69c/0x1210 [ 414.162211][T11653] __mm_populate+0x1d8/0x380 [ 414.162234][T11653] ? __pfx___mm_populate+0x10/0x10 [ 414.162257][T11653] ? up_write+0x282/0x4e0 [ 414.162274][T11653] vm_mmap_pgoff+0x37f/0x470 [ 414.162296][T11653] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 414.162320][T11653] ? __x64_sys_futex+0x1e0/0x4c0 [ 414.162336][T11653] ? __x64_sys_futex+0x1e9/0x4c0 [ 414.162355][T11653] ksys_mmap_pgoff+0x7d/0x5c0 [ 414.162374][T11653] ? xfd_validate_state+0x61/0x180 [ 414.162391][T11653] __x64_sys_mmap+0x125/0x190 [ 414.162408][T11653] do_syscall_64+0xcd/0xf80 [ 414.162432][T11653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.162447][T11653] RIP: 0033:0x7f15a618f7c9 [ 414.162461][T11653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.162475][T11653] RSP: 002b:00007f15a6f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 414.162490][T11653] RAX: ffffffffffffffda RBX: 00007f15a63e5fa0 RCX: 00007f15a618f7c9 [ 414.162500][T11653] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 414.162509][T11653] RBP: 00007f15a6213f91 R08: 0000000000000002 R09: 0000000000008000 [ 414.162518][T11653] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 414.162527][T11653] R13: 00007f15a63e6038 R14: 00007f15a63e5fa0 R15: 00007ffd3faf5428 [ 414.162547][T11653] [ 414.918632][T11659] rnbd_client L213: map_device: Parameters missing [ 415.159286][T11666] netlink: Unknown conntrack attr (0) [ 415.509533][T11671] can: request_module (can-proto-5) failed. [ 417.034670][T11693] cgroup: fork rejected by pids controller in /syz3 [ 418.660323][T11746] FAULT_INJECTION: forcing a failure. [ 418.660323][T11746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 418.728705][T11746] CPU: 0 UID: 0 PID: 11746 Comm: syz.4.1287 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.728732][T11746] Tainted: [L]=SOFTLOCKUP [ 418.728737][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.728746][T11746] Call Trace: [ 418.728751][T11746] [ 418.728758][T11746] dump_stack_lvl+0x16c/0x1f0 [ 418.728784][T11746] should_fail_ex+0x512/0x640 [ 418.728805][T11746] should_fail_alloc_page+0xe7/0x130 [ 418.728830][T11746] prepare_alloc_pages+0x401/0x670 [ 418.728852][T11746] ? rcu_is_watching+0x12/0xc0 [ 418.728874][T11746] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 418.728899][T11746] ? __lock_acquire+0x436/0x2890 [ 418.728915][T11746] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 418.728933][T11746] ? __mod_zone_page_state+0xcc/0x1a0 [ 418.728950][T11746] ? lock_acquire+0x179/0x330 [ 418.728966][T11746] ? __lock_acquire+0x436/0x2890 [ 418.728981][T11746] ? __lock_acquire+0x436/0x2890 [ 418.728994][T11746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 418.729017][T11746] ? policy_nodemask+0xea/0x4e0 [ 418.729040][T11746] alloc_pages_mpol+0x1fb/0x550 [ 418.729062][T11746] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 418.729089][T11746] folio_alloc_mpol_noprof+0x36/0x2f0 [ 418.729105][T11746] vma_alloc_folio_noprof+0xed/0x1e0 [ 418.729120][T11746] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 418.729141][T11746] do_anonymous_page+0xc81/0x2190 [ 418.729164][T11746] __handle_mm_fault+0x1ecf/0x2bb0 [ 418.729184][T11746] ? __pfx___handle_mm_fault+0x10/0x10 [ 418.729201][T11746] ? __pte_offset_map_lock+0x174/0x310 [ 418.729221][T11746] ? find_held_lock+0x2b/0x80 [ 418.729245][T11746] ? follow_page_pte+0x5cf/0x1390 [ 418.729270][T11746] handle_mm_fault+0x3fe/0xad0 [ 418.729288][T11746] __get_user_pages+0x54e/0x3590 [ 418.729317][T11746] ? __pfx___get_user_pages+0x10/0x10 [ 418.729344][T11746] populate_vma_page_range+0x267/0x3f0 [ 418.729368][T11746] ? __pfx_populate_vma_page_range+0x10/0x10 [ 418.729389][T11746] ? __pfx_find_vma_intersection+0x10/0x10 [ 418.729411][T11746] ? do_mmap+0x69c/0x1210 [ 418.729433][T11746] __mm_populate+0x1d8/0x380 [ 418.729464][T11746] ? __pfx___mm_populate+0x10/0x10 [ 418.729487][T11746] ? up_write+0x282/0x4e0 [ 418.729505][T11746] vm_mmap_pgoff+0x37f/0x470 [ 418.729528][T11746] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 418.729552][T11746] ? __x64_sys_futex+0x1e0/0x4c0 [ 418.729568][T11746] ? __x64_sys_futex+0x1e9/0x4c0 [ 418.729587][T11746] ksys_mmap_pgoff+0x7d/0x5c0 [ 418.729606][T11746] ? xfd_validate_state+0x61/0x180 [ 418.729623][T11746] __x64_sys_mmap+0x125/0x190 [ 418.729640][T11746] do_syscall_64+0xcd/0xf80 [ 418.729663][T11746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.729679][T11746] RIP: 0033:0x7f09a8d8f7c9 [ 418.729693][T11746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.729708][T11746] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 418.729722][T11746] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 418.729732][T11746] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 418.729740][T11746] RBP: 00007f09a8e13f91 R08: 0000000000000002 R09: 0000000000008000 [ 418.729749][T11746] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 418.729758][T11746] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 418.729778][T11746] [ 421.086379][T11773] rnbd_client L213: map_device: Parameters missing [ 421.302428][T11775] rnbd_client L213: map_device: Parameters missing [ 421.756056][ T5846] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 421.756083][ T5846] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 421.774358][ T5846] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 421.774399][ T5846] Bluetooth: hci4: adv larger than maximum supported [ 421.783119][ T5846] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 421.791133][ T5846] Bluetooth: hci4: adv larger than maximum supported [ 421.798358][ T5846] Bluetooth: hci4: adv larger than maximum supported [ 421.805020][ T5846] Bluetooth: hci4: Malformed LE Event: 0x0d [ 422.008347][T11788] input: f¬ as /devices/virtual/input/input21 [ 422.814184][T11799] FAULT_INJECTION: forcing a failure. [ 422.814184][T11799] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.879014][T11799] CPU: 0 UID: 0 PID: 11799 Comm: syz.2.1298 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.879041][T11799] Tainted: [L]=SOFTLOCKUP [ 422.879048][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.879057][T11799] Call Trace: [ 422.879062][T11799] [ 422.879068][T11799] dump_stack_lvl+0x16c/0x1f0 [ 422.879103][T11799] should_fail_ex+0x512/0x640 [ 422.879123][T11799] should_fail_alloc_page+0xe7/0x130 [ 422.879148][T11799] prepare_alloc_pages+0x401/0x670 [ 422.879170][T11799] ? rcu_is_watching+0x12/0xc0 [ 422.879192][T11799] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 422.879217][T11799] ? __lock_acquire+0x436/0x2890 [ 422.879233][T11799] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 422.879252][T11799] ? __mod_zone_page_state+0xcc/0x1a0 [ 422.879268][T11799] ? lru_gen_add_folio+0x1a4/0xef0 [ 422.879288][T11799] ? __lock_acquire+0x436/0x2890 [ 422.879303][T11799] ? __lock_acquire+0x436/0x2890 [ 422.879316][T11799] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 422.879339][T11799] ? policy_nodemask+0xea/0x4e0 [ 422.879362][T11799] alloc_pages_mpol+0x1fb/0x550 [ 422.879383][T11799] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 422.879410][T11799] folio_alloc_mpol_noprof+0x36/0x2f0 [ 422.879426][T11799] vma_alloc_folio_noprof+0xed/0x1e0 [ 422.879441][T11799] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 422.879462][T11799] do_anonymous_page+0xc81/0x2190 [ 422.879484][T11799] __handle_mm_fault+0x1ecf/0x2bb0 [ 422.879505][T11799] ? __pfx___handle_mm_fault+0x10/0x10 [ 422.879521][T11799] ? __pte_offset_map_lock+0x174/0x310 [ 422.879542][T11799] ? find_held_lock+0x2b/0x80 [ 422.879565][T11799] ? follow_page_pte+0x5cf/0x1390 [ 422.879590][T11799] handle_mm_fault+0x3fe/0xad0 [ 422.879609][T11799] __get_user_pages+0x54e/0x3590 [ 422.879638][T11799] ? __pfx___get_user_pages+0x10/0x10 [ 422.879664][T11799] populate_vma_page_range+0x267/0x3f0 [ 422.879687][T11799] ? __pfx_populate_vma_page_range+0x10/0x10 [ 422.879709][T11799] ? __pfx_find_vma_intersection+0x10/0x10 [ 422.879731][T11799] ? do_mmap+0x69c/0x1210 [ 422.879753][T11799] __mm_populate+0x1d8/0x380 [ 422.879775][T11799] ? __pfx___mm_populate+0x10/0x10 [ 422.879799][T11799] ? up_write+0x282/0x4e0 [ 422.879816][T11799] vm_mmap_pgoff+0x37f/0x470 [ 422.879838][T11799] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 422.879862][T11799] ? __x64_sys_futex+0x1e0/0x4c0 [ 422.879879][T11799] ? __x64_sys_futex+0x1e9/0x4c0 [ 422.879897][T11799] ksys_mmap_pgoff+0x7d/0x5c0 [ 422.879917][T11799] ? xfd_validate_state+0x61/0x180 [ 422.879933][T11799] __x64_sys_mmap+0x125/0x190 [ 422.879950][T11799] do_syscall_64+0xcd/0xf80 [ 422.879973][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.879988][T11799] RIP: 0033:0x7f15a618f7c9 [ 422.880002][T11799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.880016][T11799] RSP: 002b:00007f15a6f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 422.880030][T11799] RAX: ffffffffffffffda RBX: 00007f15a63e5fa0 RCX: 00007f15a618f7c9 [ 422.880040][T11799] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 422.880048][T11799] RBP: 00007f15a6213f91 R08: 0000000000000002 R09: 0000000000008000 [ 422.880058][T11799] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 422.880066][T11799] R13: 00007f15a63e6038 R14: 00007f15a63e5fa0 R15: 00007ffd3faf5428 [ 422.880093][T11799] [ 424.236997][T11815] rnbd_client L213: map_device: Parameters missing [ 424.524316][T11817] openvswitch: HfR: Dropping previously announced user features [ 424.851569][T11828] netlink: 'syz.2.1306': attribute type 22 has an invalid length. [ 424.878121][T11828] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1306'. [ 424.923692][T11829] netlink: 'syz.2.1306': attribute type 22 has an invalid length. [ 424.948214][T11829] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1306'. [ 428.627591][T11875] FAULT_INJECTION: forcing a failure. [ 428.627591][T11875] name failslab, interval 1, probability 0, space 0, times 0 [ 428.657142][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.4.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.657170][T11875] Tainted: [L]=SOFTLOCKUP [ 428.657176][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 428.657185][T11875] Call Trace: [ 428.657190][T11875] [ 428.657198][T11875] dump_stack_lvl+0x16c/0x1f0 [ 428.657226][T11875] should_fail_ex+0x512/0x640 [ 428.657243][T11875] ? __kmalloc_cache_noprof+0x5f/0x800 [ 428.657264][T11875] should_failslab+0xc2/0x120 [ 428.657287][T11875] __kmalloc_cache_noprof+0x80/0x800 [ 428.657304][T11875] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 428.657327][T11875] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 428.657351][T11875] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 428.657373][T11875] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 428.657397][T11875] vidtv_channel_si_init+0x13d2/0x1a50 [ 428.657420][T11875] vidtv_mux_init+0x526/0xbe0 [ 428.657438][T11875] vidtv_start_feed+0x33e/0x4d0 [ 428.657458][T11875] ? __pfx_vidtv_start_feed+0x10/0x10 [ 428.657478][T11875] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 428.657501][T11875] ? mark_held_locks+0x49/0x80 [ 428.657519][T11875] ? __pfx_vidtv_start_feed+0x10/0x10 [ 428.657538][T11875] dmx_ts_feed_start_filtering+0xf6/0x220 [ 428.657559][T11875] dvb_dmxdev_start_feed+0x273/0x3f0 [ 428.657585][T11875] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 428.657603][T11875] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 428.657620][T11875] dvb_demux_do_ioctl+0x9de/0x12f0 [ 428.657643][T11875] dvb_usercopy+0x167/0x340 [ 428.657664][T11875] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 428.657681][T11875] ? __pfx_dvb_usercopy+0x10/0x10 [ 428.657710][T11875] ? __fget_files+0x20e/0x3c0 [ 428.657735][T11875] dvb_demux_ioctl+0x29/0x40 [ 428.657748][T11875] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 428.657762][T11875] __x64_sys_ioctl+0x18e/0x210 [ 428.657782][T11875] do_syscall_64+0xcd/0xf80 [ 428.657805][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.657827][T11875] RIP: 0033:0x7f09a8d8f7c9 [ 428.657842][T11875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.657856][T11875] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.657871][T11875] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 428.657882][T11875] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 428.657891][T11875] RBP: 00007f09a8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 428.657901][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.657910][T11875] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 428.657933][T11875] [ 429.572381][T11875] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 429.584295][T11875] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 429.592700][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.4.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.603617][T11875] Tainted: [L]=SOFTLOCKUP [ 429.607924][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.617963][T11875] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 429.623870][T11875] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 cd 6d b9 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 47 4c 8b 23 49 39 ec 74 36 e8 a9 6d b9 f9 4d 85 e4 [ 429.643482][T11875] RSP: 0018:ffffc900035dfa20 EFLAGS: 00010247 [ 429.649548][T11875] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc90018aa0000 [ 429.657520][T11875] RDX: 0000000000000000 RSI: ffffffff8804fd23 RDI: 0000000000000005 [ 429.665504][T11875] RBP: ffff888025429d00 R08: 0000000000000000 R09: 4453534204050000 [ 429.673473][T11875] R10: 0000000000000005 R11: ffff88802bc4a9b0 R12: 0000000000000000 [ 429.681429][T11875] R13: ffff88807d8feb80 R14: ffff88807e351b80 R15: ffff88805ba00e40 [ 429.689397][T11875] FS: 00007f09a9c2c6c0(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 429.698326][T11875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 429.704892][T11875] CR2: 00007f09a9c0af98 CR3: 000000007e25e000 CR4: 00000000003526f0 [ 429.712861][T11875] Call Trace: [ 429.716132][T11875] [ 429.719086][T11875] vidtv_channel_si_init+0x1445/0x1a50 [ 429.724541][T11875] vidtv_mux_init+0x526/0xbe0 [ 429.729206][T11875] vidtv_start_feed+0x33e/0x4d0 [ 429.734046][T11875] ? __pfx_vidtv_start_feed+0x10/0x10 [ 429.739497][T11875] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 429.746102][T11875] ? mark_held_locks+0x49/0x80 [ 429.750850][T11875] ? __pfx_vidtv_start_feed+0x10/0x10 [ 429.756222][T11875] dmx_ts_feed_start_filtering+0xf6/0x220 [ 429.761928][T11875] dvb_dmxdev_start_feed+0x273/0x3f0 [ 429.767218][T11875] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 429.772666][T11875] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 429.777853][T11875] dvb_demux_do_ioctl+0x9de/0x12f0 [ 429.782955][T11875] dvb_usercopy+0x167/0x340 [ 429.787450][T11875] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 429.792992][T11875] ? __pfx_dvb_usercopy+0x10/0x10 [ 429.798141][T11875] ? __fget_files+0x20e/0x3c0 [ 429.802915][T11875] dvb_demux_ioctl+0x29/0x40 [ 429.807511][T11875] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 429.812896][T11875] __x64_sys_ioctl+0x18e/0x210 [ 429.817662][T11875] do_syscall_64+0xcd/0xf80 [ 429.822162][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.828052][T11875] RIP: 0033:0x7f09a8d8f7c9 [ 429.832465][T11875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.852071][T11875] RSP: 002b:00007f09a9c2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.860471][T11875] RAX: ffffffffffffffda RBX: 00007f09a8fe5fa0 RCX: 00007f09a8d8f7c9 [ 429.868429][T11875] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 429.876423][T11875] RBP: 00007f09a8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 429.884378][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.892341][T11875] R13: 00007f09a8fe6038 R14: 00007f09a8fe5fa0 R15: 00007ffce4cba738 [ 429.900316][T11875] [ 429.903317][T11875] Modules linked in: [ 429.908048][T11875] ---[ end trace 0000000000000000 ]--- [ 430.049383][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 430.482657][T11875] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 430.503856][T11875] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 cd 6d b9 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 47 4c 8b 23 49 39 ec 74 36 e8 a9 6d b9 f9 4d 85 e4 [ 430.555255][T11875] RSP: 0018:ffffc900035dfa20 EFLAGS: 00010247 [ 430.569187][T11875] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc90018aa0000 [ 430.600890][T11875] RDX: 0000000000000000 RSI: ffffffff8804fd23 RDI: 0000000000000005 [ 430.633405][T11875] RBP: ffff888025429d00 R08: 0000000000000000 R09: 4453534204050000 [ 430.667570][T11875] R10: 0000000000000005 R11: ffff88802bc4a9b0 R12: 0000000000000000 [ 430.684581][T11875] R13: ffff88807d8feb80 R14: ffff88807e351b80 R15: ffff88805ba00e40 [ 430.707545][T11875] FS: 00007f09a9c2c6c0(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 430.724664][T11875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.737865][T11875] CR2: 0000001b316e2ff8 CR3: 000000007e25e000 CR4: 00000000003526f0 [ 430.765487][T11875] Kernel panic - not syncing: Fatal exception [ 430.771645][T11875] Kernel Offset: disabled [ 430.775967][T11875] Rebooting in 86400 seconds..