last executing test programs: 13m53.586962143s ago: executing program 2 (id=522): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) socket(0x2b, 0x1, 0x1) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x8000000000000006, 0x25, 0x0, 0x7ffffc) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) listen$auto(0x3, 0x83) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 13m51.675990581s ago: executing program 2 (id=531): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x20026bd}, 0x3) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0xa22c0, 0x155) write$auto(0xffffffffffffffff, 0x0, 0xb) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 13m51.424755775s ago: executing program 2 (id=533): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f00000001c0)) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0xc, 0x75c0237c, "6d962c000400003344980946"}, 0x0, 0x200) prctl$auto(0x43, 0x6, 0x0, 0x0, 0x40) r2 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x3, 0xfff, 0x1, 0x948b, 0x8, 0x95f4da2d, 0x7fffffffffffffff, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0x0, 0x7, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1fb, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x9, 0xfffffffffffffffb, 0x3, 0x7, 0x63, 0x80000021, 0x4, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) madvise$auto(0x110c230000, 0x8031ca, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r5, &(0x7f000000be80)='batadv0\x00', 0xf) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r5, &(0x7f000000ca40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400d5c1baf9c52082bc1382a4010000", @ANYRES16=r6, @ANYBLOB="e3db28bd7000fcdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) setsockopt$auto_SO_OOBINLINE(r2, 0x8001, 0xa, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0x8) 13m48.380839463s ago: executing program 2 (id=550): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) (async) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) (async) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r1, 0x454f, 0x5f, 0x0, 0x0, r1, 0x80000001}, 0x6d4) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000000)=""/90, 0x5a) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video42\x00', 0x169000, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video42\x00', 0x169000, 0x0) socket(0x2, 0x80002, 0x73) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x13, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0x2}, 0x1002}, 0x739618ce, 0x311) 13m47.908826946s ago: executing program 2 (id=545): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = fsopen$auto(0x0, 0x8080007) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(r0, 0x0, 0x973, 0x8, 0x0) socket(0xa, 0x3, 0x3c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) ioctl$auto(r1, 0x400c4d00, 0x8) 13m47.707812658s ago: executing program 2 (id=548): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x9) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x80000000, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x2c8401, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0xd33, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0000, 0x18) kexec_load$auto(0x75a, 0x5, &(0x7f0000000340)={@kbuf=&(0x7f00000002c0)="4ea7e7cf37856c0f709d36caa679f2740bdc82fcbae98ad35b120e6e2e3c4957101d9735de9f9df767e67736e63e31fa3920f7abefaf4454374a49320037449a01378f2e97addb5321be364fdd37d4175898455b1447cb9eda5a9600e2101399975558059f6353aec611428267df937c58e785e494f65c55744b89a8c1a2c3bc", 0x100000000, 0x7, 0x9}, 0xb) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) 13m32.541849088s ago: executing program 32 (id=548): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x9) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x80000000, 0x48}) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000002c0), 0x1, &(0x7f0000000280)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba", 0xfffffffffffffff7}, 0xc, 0x0, 0x5, 0x5}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) nanosleep$auto(0x0, 0x0) open(0x0, 0x2c8401, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) r3 = socket(0x2, 0x2, 0x1) getsockopt$auto(r3, 0xd33, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0000, 0x18) kexec_load$auto(0x75a, 0x5, &(0x7f0000000340)={@kbuf=&(0x7f00000002c0)="4ea7e7cf37856c0f709d36caa679f2740bdc82fcbae98ad35b120e6e2e3c4957101d9735de9f9df767e67736e63e31fa3920f7abefaf4454374a49320037449a01378f2e97addb5321be364fdd37d4175898455b1447cb9eda5a9600e2101399975558059f6353aec611428267df937c58e785e494f65c55744b89a8c1a2c3bc", 0x100000000, 0x7, 0x9}, 0xb) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x20000, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) ioctl$auto_USB_RAW_IOCTL_RUN(r4, 0x5501, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/keys\x00', 0x8af00, 0x0) 5m23.082545042s ago: executing program 1 (id=2127): r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r4 = socket(0x18, 0x5, 0x1) pselect6$auto(0x200, &(0x7f0000000440)={[0x5, 0xd9c, 0x81, 0x6, 0xff00000000000, 0x9, 0x9, 0x5661, 0x20000004, 0x3, 0x6, 0x35e, 0xfffffffffffffffd, 0xc1, 0xfffffffffffffffc, 0xc]}, &(0x7f00000004c0)={[0x3ef, 0x1, 0xfffffffffffffffa, 0x9, 0x5, 0x997, 0xe595, 0x7fff, 0x5, 0x6, 0x81, 0x0, 0x8, 0x7c97, 0x4b53, 0x4]}, &(0x7f0000000540)={[0x3, 0x9, 0x3f, 0x633, 0x9, 0xfffffffffffffffa, 0x42, 0x80000000001, 0x958, 0x80000000000, 0x6, 0x200000000f, 0xc4, 0xa, 0xfffffffffffffbff, 0x3]}, &(0x7f00000003c0)={0x1, 0x29}, &(0x7f00000007c0)="ceb5e0ab69d18d815e33f7774f9f0043c0126baa808909de2df68fc203ffa31e13d9970e1f79172539a28fb2e91c57a2d5c73a2c2c682dd90caf002d5404bda662a7e3d307fead4338542817893bff1e1867ec37d9566977336fb42ccfa059292cad71cd0793f0582bf8003a947af8713aad3f985522ea9c0ffa8e355a10964f47dc656c756a910d5c069b7f8aa810c8cb9c8864946da96eb21492139e864378d3b35ca875d129ba6cdc45a6e8aebe8593716459af87014044e2eb5209881b548621f93ecdf388aa4ea50c24a1f5ca6cb443e26414c2de02d2873347d0237d0067018786bfb60d5c45924397") connect$auto(r4, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd24, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x30004850) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80100830}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x4}, @NL80211_ATTR_KEY_DATA={0x6, 0x7, "1f8b"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r7, 0x5425, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(r2, 0x0, &(0x7f0000000180)="dc100debc7fd2c4fa89d950e1933e53f8a7a4ce5ce731ee4a3e31a7b62979e93c11e0853962e1f52fca001d62735f7a14fa942a74a70f490f73180a5b476885471f52edabde6ea5d51ad5c1e7a750984447a64bb9ff1d3a7") r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$auto(r7, 0x6, r8) 5m21.969807401s ago: executing program 1 (id=2130): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r0 = socket(0xf, 0x5, 0x0) getsockopt$auto(r0, 0x29, 0xce, 0x0, 0x0) socket(0x2, 0x2, 0x2) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x7ff) socket(0x1d, 0x2, 0xffffffff) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) acct$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/midi2\x00', 0x1, 0x0) getsockopt$auto(0xffffffffffffffff, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x7ffffffe) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioperm$auto(0x7, 0x6, 0x2) sysfs$auto(0x9, 0x3, 0xfffffffffffffffc) socket(0x29, 0x5, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x8, 0x6, 0x4, 0xfffffffffffffffd, 0xffffffffffffffff) setreuid$auto(0x4, 0x8) setgroups$auto(0x7, 0xffffffffffffffff) setreuid$auto(0x3, 0x7) 5m21.002545663s ago: executing program 1 (id=2133): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x3ac41, 0xe2) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2, 0xffffffff}) ioctl$auto_BLKSECTGET(r0, 0x1267, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0000fb"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce7bb4540f8d6c0000000000002700", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040010d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m20.790078753s ago: executing program 1 (id=2134): madvise$auto(0x0, 0xffffffffffff0006, 0x17) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) symlink$auto(0x0, 0x0) r1 = creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) read$auto(r2, 0x0, 0x8000000000000b) unshare$auto(0x40000080) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x4040000) lsetxattr$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', &(0x7f00000006c0)="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", 0x2, 0x7) 5m20.15797783s ago: executing program 1 (id=2136): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf25890000100600430107a6b28304004a010400dd006ee108aa"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x2284, r2) r4 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x231d, 0x2, 0x0, 0x3, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x480d1}, 0x48880) (async) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto(0x3, 0x80108907, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m17.528917213s ago: executing program 1 (id=2142): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) clone$auto(0x100000001, 0x4, 0x0, 0x0, 0x200) r2 = socket(0x2, 0x80805, 0x0) getsockopt$auto(r2, 0x84, 0x22, 0x0, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) setreuid$auto(0xffffffffffffffff, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x4000000000004, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) write$auto(0xca, &(0x7f0000000040)='\x04\x92K\xfa8j\xf0L3\x9b<\xe9\'\xa7H\xef\x9bOa\rVwx\xbfZp\xd55>h6~Dz\xe4\x00}\xf1\x1d\x00.R\xd5\x89|d\v', 0x10) bpf$auto(0x5, &(0x7f0000000000)=@test={0x9, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 5m2.560650976s ago: executing program 33 (id=2142): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) clone$auto(0x100000001, 0x4, 0x0, 0x0, 0x200) r2 = socket(0x2, 0x80805, 0x0) getsockopt$auto(r2, 0x84, 0x22, 0x0, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) setreuid$auto(0xffffffffffffffff, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x4000000000004, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) write$auto(0xca, &(0x7f0000000040)='\x04\x92K\xfa8j\xf0L3\x9b<\xe9\'\xa7H\xef\x9bOa\rVwx\xbfZp\xd55>h6~Dz\xe4\x00}\xf1\x1d\x00.R\xd5\x89|d\v', 0x10) bpf$auto(0x5, &(0x7f0000000000)=@test={0x9, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 18.981673622s ago: executing program 3 (id=2815): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8003) r0 = socket(0x27, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008810}, 0x80) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0)="3480ed1ca9f311c6baf77cbec7411988aff3fc71e4c8f8be6c48a47f000000000000004a20f13bfd2213887c02668a24aab5acadc870665743a4f99883032349fac1a87eff2abb4c3a1ddf3185ba8e632b09b7ea52eb6fa992b60cf9642d07b239d39ba819cb5865b9fb64bc95ddf50bdca5a11420ab8391b4ef8f76996f3dcb7cc30d6c675f0022e92b56914f87786652b248cadaf2772d98a15db7c192e1cc11da6e6e0c49fa45c2a104da9a75742af3835eef7451a4c6f895f60350216869b830e56c1cc7671fc896e06f77220e245c5c", 0x7, 0xa507}, 0x800}, 0x7, 0x8) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x801, 0x0) io_uring_setup$auto(0x86, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x284903, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x8a200, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44010) mmap$auto(0xfffffffffffffffe, 0x2, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) unshare$auto(0x40000080) r5 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r5, 0x84, 0x6c, 0x0, &(0x7f0000000000)=0x98) ioctl$auto(0x3, 0xae60, 0x10000000000402) 9.667325368s ago: executing program 3 (id=2817): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) uname$auto(0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/binderfs/binder1\x00', 0x149883, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)="47f90f2980f919b9d7a8b4c4f4c279139fc0131b9cc8ca8b2e") r2 = socket(0x4242f6220c264e47, 0x1, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x80100, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000100)={{0x171a4c29, 0x0, 0xee01, 0x401, 0x9, 0xb, 0x2}, 0x8, 0x100, 0x1a56, 0x1, @inferred, @raw=0x8000, 0xe7d, 0x0, &(0x7f0000000000), &(0x7f0000000040)="1783a8"}) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={0x1cc, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x1a4, 0x7, 0x0, 0x1, [@nested={0x180, 0x7e, 0x0, 0x1, [@typed={0x22, 0xbd, 0x0, 0x0, @binary="a7379b928b2fe53f4a96cc49fa078eb62dca03ca1694ea60fe7c14e53bd8"}, @nested={0x158, 0x9a, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="9ce33631f7ee0db308f1ab53fc9c76be817695013927ad4113eca8e76411453f0a1b001e478dede8caa63dd08eb7e3133e5fe9d217e7d4", @generic="ac8c8ac4e9939612325b086b44ca38d564b1270dde6896b57fc3e2adb113ee40037a1101ddbff756e2ce80354bb8cfe5d934b8c300ff21bec3196ce55e6bcb", @typed={0xc, 0xb3, 0x0, 0x0, @u64=0x1}, @generic="2774aab728502a57573cca72c294ab3a169cbd89d85dd854ae5446655e12e934571e740bb6d94206b78b78d60949b0f237cc6bfc3726d07ef11e79fc8459bbde98aa418a380ce342b791f12c7643b7634ea9e053172adf003ad098d6814598ba056a52fa156caf9a220f236df36341922fa4eb6c76adc1aa8d3ba5bc7f730bf8dfdeff14a17e02c8e616f33b30f9b9c5861d0219bbe5650b797f898518d6f4135de27939b11d5217f539702b7b18bfb9032b1e7e11620c305e00", @typed={0x8, 0x34, 0x0, 0x0, @uid=r7}, @typed={0x5, 0x86, 0x0, 0x0, @str='\x00'}]}]}, @nested={0x20, 0x3b, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xf4, 0x0, 0x0, @str='+&+\x00'}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendfile$auto(r4, r4, 0x0, 0x5) ioctl$auto_FICLONE(r4, 0x40049409, r4) r8 = socket(0x10, 0x2, 0x0) setsockopt$auto(r8, 0x0, 0x2, &(0x7f0000000140)='lp\x00h\x85M\xac\x1d\x83\x8a\xa7d\v\xfbY\x10\xf4K\xc4]U', 0x4) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) r10 = clone$auto(0xca, 0x4, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x401, 0x1) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)={0x4d8, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private0}]}, @TIPC_NLA_MON={0x204, 0x9, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x6}, @generic="230a65a3aceced97a7e94796dabf10c26e085a184562bae084a08633aca92e8716f0e89a85b0cfb14bcbee9dd8d7743cbc7dc3cb6324a115ccccf4782c5cbb2241a638cf83023a8d97409e3138b1b5dd7f718a24bda1698b915b228d3ad60afdb317f61abdf271700d1006ec9b78209f269201ad8ad28551fd84355b8cd9e790761e6055f4e9743721ef06a844dfd9b148ee73b302cabda3fc67e26e48735953ddb07b94a0a41998a986ddc519e9b4fe5b8a6cd89e13e0b70c18f15cbc5ccb23369f477531b4b27d578f6f67bda676939d1c291ec5886ef615499afd4cb93887748b157e2a46333063eefdf0d339fd6e47e8b739", @nested={0x4, 0x133}, @typed={0x8, 0x3b, 0x0, 0x0, @pid=r10}, @generic="bee8747d8a822e908939a80ea4a2ebd31e14f89fea0aad667f08838a4ce4889d98029247f424caa2ece9f79240e80f0bb164d4a40da5eab066369827051e2a04108f130eb5cae22349f1e5657f8ecbb146d6c7301ea020be8d3dd79b318e356df5808234608133f7d574ecb0469d93e33915db4c3ec1e056494e3f262864f005da0203856e807333eb4b933cebc5efcc1e8640116ebebb1da56b715da6a813a60f0d8af6eb1433afa2c0b0929a297ef80e3b26cb135fbefc655348df31ed2af434fded485f6083e21a76d302a76f5b54f739cd0bf5d363c95eb3a541cc6d364500502b73ef1c53f1179c53672c891c8fdf4ef3b7"]}, @TIPC_NLA_NET={0x2a6, 0x7, 0x0, 0x1, [@generic="8fcbda5488b12a25371a914c063ed271101fc69b92c10637416feb2e7c4299b6338cbb9250a248c2edb967ab0a732b8defef90748b30aa7c8e8bff8ab3af58ffec592d71c591e9752a405193deed4c880fa0a4dbd4c2dadffd52a2b99785ae63294bf1f0535ca3942597cd7c7ab07f7dd4011238a78318c3d392b9e5adb3f45e3a6b5a354cc4a6376eccfbb6604701561c4322e3764a0f138b5b1ceb538b72263d9850c1526f83c446c94b940536e18fbdfb9cfc1a472e7afc9359138854089f054d2b48b6b238", @typed={0x8, 0x147, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x47, 0x0, 0x0, @u32=0x6}, @nested={0x96, 0x7b, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="52b8fdc4c234eecda3398e5c1acc5594416664d2a0429d09e322", @typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x14d}, @generic="9eaa3b3aca0ce89e35a6cfa545354649760b9a2068b3dd587c61ecf86e0775474733738a59c5dd6e7f65dd39f0f1b4094a96981aa0a2646788d8d1dcd2131ef369927d9d7c8ffc308b2e8775054f3c9931645e91fe764f8fd8f17f95"]}, @generic="d1105114f4995966b82955bd245e4c2cf575bfb4a5b76f352b06df91ee9ce7aef8837493cf16067cba173dd4990f435de024a1779c1034482fb6f40f2706022a1d75027479a70a08411e772c2a839e8dfdb42bd955c2d39f0dadff663e2a391a90971981cf9653", @nested={0xcc, 0xf3, 0x0, 0x1, [@typed={0x14, 0x4f, 0x0, 0x0, @ipv6=@remote}, @generic="9bec318ea448b593484551a72824ca8082d54d595f6d8cf6c8dec1a66eb34d0de946067e08c0b08b29bbf2d12adae5b65997e729e85627a4328e74bb3b9d839693f42fec5b4f39817ea819231cf54d695617802716eb8b9c1a3ca6f99df33baec53931e30288515aa715302c101595614f22b61539e27bd43fba97ce7d2904c96d434b45393881ecfd9c7f2f", @typed={0x8, 0xd6, 0x0, 0x0, @fd=r4}, @generic="9f9b7939067ef04b756c0d969c8c8a9902f527fd712629298fd1c3b64222c458"]}]}]}, 0x4d8}, 0x1, 0x0, 0x0, 0xb27be8427f83674e}, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000040)={@raw=0x8, 0xd, 0x7, 0xc1e6, "cc2cc9871c6fef749c4ebcf1cedeec10777638141adf6b852236d12b04a9e88a070acd42cc5cd13aefce2691", @inferred=r10}) getsockopt$auto(r2, 0x28, 0x1, 0x0, 0x0) 8.686141537s ago: executing program 3 (id=2822): mremap$auto(0x0, 0x5, 0x8, 0x3, 0x7effffffb000) (async) mremap$auto(0x0, 0x5, 0x8, 0x3, 0x7effffffb000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x400, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) mremap$auto(0x81, 0x4, 0x3, 0x0, 0x3) (async) mremap$auto(0x81, 0x4, 0x3, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/msc\x00', 0x80000, 0x0) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) (async) open(0x0, 0x22240, 0x155) r0 = socket(0x10, 0x2, 0x0) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24}, 0x68) (async) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24}, 0x68) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x22200, 0x0) (async) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x22200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub6/xrun_injection\x00', 0x284c00, 0x0) socket(0x2, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x1, 0x15f4da0e, 0x3, 0xd08, 0xc, 0xa, 0x4, 0x6d3f, 0x9, 0x2, 0x40]}, 0x0) 8.675138346s ago: executing program 5 (id=2823): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") r4 = socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000200)="649e29a7673f221bc25437e43649875122aa07fe5a0a9733e333914cc3607cfeb97c4a00640df3274e77bba474ca5399a4f03420665e89442f67b97f6d22773eae89588d25bd61ef7c847702740dd53af70403fa64aed10b159a007371c1db03b2e19e54406cdf9c9f58443a7a8689cde8d41322e69ba229c2b79c37cea80b91819037ddd0bd7eac055d9d111e111f65084e1a93d4bde6", 0x10, &(0x7f00000001c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000004c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x63ad80f20c968bf4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r5, @ANYBLOB="000828bd7000fddbdf25010000000c001000040000000000000008000900000000000500150001000000050014000000000008001700", @ANYRES32=r1, @ANYBLOB="06001a004e240000680000008cb593675ce05b2af97fd3b15ba0806d5b849bfa2093ff5800003150a551656946db7ca506e4e025d93fe5a68a3f7cc01859ed051056f9279f4e7c515fe7253328f897d802bf5a0458d6c42a8fe42d3df402643e43e8d3dba3e776dca7aa2c1b215284bc4fe5a0202d25647cb0e4060001002c5100000c00"], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001) bind$auto(0x3, 0x0, 0x6a) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) pipe$auto(0x0) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x4, 0x2, 0x0, 0x9b7, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", "ff7f62c9", ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) shutdown$auto(0x200000003, 0x2) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r2, @ANYBLOB="08000300010000bb"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 8.632466588s ago: executing program 4 (id=2825): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x500, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) write$auto(0xca, &(0x7f00000001c0)='\x04>\x01\f\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\xfbr(\x83\";\xa8\xd7\x05uXR\xa3\xb3@T\x89\x8e\xd4Q\xdd\xb80\xc7\xad\\\xf7C\xb3\x8f\r?\xb3>r\xdf\x99%\xd6S\xe3\x8b*\xe2\xbc\xc9\x8bV\xf0\xb7\xec.\xae\xe1\\s^\x96\xaa', 0x8000000000000004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(0x0, 0x60d6, 0x1, &(0x7f0000000100)={0xea28, 0x7, 0x7, 0x101}) getsockopt$auto_SO_SNDTIMEO_NEW(r0, 0x200, 0x43, &(0x7f0000000000)='-7$\x11\x00', &(0x7f0000000040)=0x3) r1 = io_uring_setup$auto(0x7, 0x0) close_range$auto(0x0, r1, 0xfffffffe) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) socket(0x1e, 0x1, 0x10a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) 7.748837183s ago: executing program 3 (id=2826): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0x800000000000000a, &(0x7f00000002c0)="636962b64bf41635147606a502000000000000006b5b483153d8b96f00b6b02fc18591a8620a7196659b0528a5cc67dea8f4c5e3b5048f59a93b58c8833c13bb40b5cd2fd2b060a18a05df2094a2579fa9ae56bdac5d") socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x16, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000040)) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="06000600080000000a00010000000000000000000a0001000180c20000020000080004000900000008000200", @ANYRES32=0x0, @ANYBLOB="08001fc27309000035fc92db35049408987c5be2741564f51215b94d0714aad9f39d42ab638f6570d93e95f879812699719f9b4f3cea1e56024eff6b348087f385e11bc6514f50c5fa0b1af0120a528d892c180a29507b6a1a3f086c1d67eedbb04406d139d55802a5d8d57676224dabc40fdbcf03349fc9e31d03d8f927d9f8c80e0f7de61e6553df43a7bc5f6f6dfa8e6f75335841e97a0f795f50bb6c0bf7c54bb0deccadbcfd0ddd7b9b827e02d0b7886e2eee"], 0x64}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40094) socket(0x21, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/platform/dummy_hcd.5/usb6/ep_00/bInterval\x00', 0x101400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f0000000140), 0x55) io_uring_setup$auto(0x6, 0x0) 7.185594323s ago: executing program 5 (id=2827): socket(0x11, 0x2, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.2/usb3/bConfigurationValue\x00', 0x2101, 0x0) ioctl$auto_TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000080)="94a65b30ecdf8c2b2c46361a045153c50042207381d8054085824a0e99909d97ff1f83a4ae46aba9dc9d0c1fe5e17a07c3044765f1430556015ce29c9f38a9af25b26eb9d258f6e3a5b1a7b80402a306300713a312d481881f5c63af022375a2e9fc087a843643a303fddf99af407592f32b487c7879ea27922bcc7d45bdbf83ffda44f4877bf4088b1f558766b2a7da72804ee87a6240cb10346eca5256d3d2c9ccdb1785a05536617bd972f7ac2cef8855d8caaf03186a3c315df57ddda11b89abb70a959321c8307d") write$auto(r1, &(0x7f0000000000)='80\xc7\xf9\r/\xeb7\x84)\r\xd2\x9d\x95\x8c\xc1\xb2HoTCC\x00', 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 6.825944352s ago: executing program 5 (id=2828): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x288082, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x2b, 0x1, 0x1) ioctl$auto(r2, 0x8983, 0x4) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x8000000000003, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x3, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r3) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x9, 0x3, 0x42fb, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) sendmsg$auto_TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000140), 0x3142c411406d3440, 0x0) 5.951487181s ago: executing program 3 (id=2829): socket(0x10, 0x2, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0x300, 0x0) r0 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0xffffffffffffffff, r0, 0xfffffffb) socketpair$auto(0x1, 0x6, 0x8000000000000000, 0x0) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setfsuid$auto(0xee00) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x15, 0x801, 0x6) getsockopt$auto(r1, 0x84, 0xc, 0x0, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) 5.711087989s ago: executing program 5 (id=2830): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x5f, 0x3, 0x803, 0x62, 0x80000004, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffc]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip6_tables_names\x00', 0x41e001, 0x0) pread64$auto(r4, 0x0, 0x594c, 0x9fffffffd) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f00000002c0)={0x5, 0x1}) (async) ioctl$auto_PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f00000002c0)={0x5, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r4) (async) fdatasync$auto(r4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r7, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) (async) write$auto(r7, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000e3dbdf257e000000", @ANYRESOCT=r0], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000e3dbdf257e000000", @ANYRESOCT=r0], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(r1, 0x0, 0x20044807) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r8, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r9 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000380)={0x60, 0x10000000010000, 0xffffe, 0x47fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x4, 0x2c, 0x3, 0x4002}) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) 4.509306657s ago: executing program 4 (id=2831): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91AU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c8) (async, rerun: 64) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) msgctl$auto_IPC_SET(0x669, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) (rerun: 32) read$auto(r1, 0x0, 0x20) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async, rerun: 32) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async, rerun: 32) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) mount$auto(0x0, &(0x7f0000000240)=':,\x00', &(0x7f0000000340)='\x04\x00sd\x01\xbb\xad\'\xcfE\xafw\xb8\xbf}|\'\tUO3\xd1\xa5\xee\xcaz\x86\x81\xb6\xa2\xa8m\xb3\xe2\x1b\x8c?6E\xc5\xbe?6~B\xb1\x05\xe9\x91p\xb4\xdc\x92\x1e\x89\v1\x1e\x1c\xf5\x9e\x9a}s\xa6\xeet\x87\xf0\xdaU\xd0\xb8U\x8b\xc0\b\xf6C\x99\v\x95\x92\x95\x9d\xb4\xe0\xdeA\xa6l@\xf5\x92\xc6\x8b\xb5B\xe8\x00\x00', 0x9000000000be2, 0x0) (async, rerun: 32) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f00000005c0)='\xeefsi\xc8\xdd\x19\x84?]\xbb@z{\xf4\xd9Ge\xd42\xe5\xaf\xa54{o\x1ck\xfd\f\x1ab\xf3\xd8w\xbd\x14>\xb1Z\xb8\xad\xc9S/\xfaz\xbez\xb5\x9ba\xe4<\xbb}l\xdbK\xb0\n\xf2\x84X0\x8d\xc1\x99Y\xf5\x85u\x85\xb2\xdc|~\xdd\xee\xbf\xa0\xf6bq', 0x5, 0x0) (rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32) capset$auto(&(0x7f0000000180)={0x19980333, 0x0}, 0x0) (async, rerun: 32) quotactl$auto(0x2, &(0x7f0000000040)='/dev/sda1\x00', 0x62a0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x1000000000000005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) socket(0x23, 0x80002, 0x4) setsockopt$auto(0x3, 0x0, 0x2b, 0x0, 0x108) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto_EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0xffffffffffffffff, 0xf2ae, 0x4, 0x7, 0x2, 0xfee}) msgctl$auto_MSG_STAT(0x5, 0xb, &(0x7f00000002c0)={{0x4, 0xee01, r4, 0xfffffffe, 0x69e, 0x9, 0x6}, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x8, 0x8, 0x6, 0x9, 0x1000, 0x8001, 0x2, 0xfffa, 0x7c9, @inferred=r3, @raw=0xfffffff7}) (async) r5 = socket(0x25, 0x1, 0x0) setsockopt$auto(r5, 0x116, 0x7f, 0x0, 0x400) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 4.256894839s ago: executing program 5 (id=2832): mmap$auto(0x7, 0x200040009, 0xdf, 0x800000000009b72, 0xffffffffffffffff, 0x8da) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="0107000000000000000000000000000000000000000000000000000061dc217bd3f375114d43271e9d342d564be237545bdfafb46f8aba762787e7c60ab7d2f6e11acbf2c1e9b0152a318fd0860c8670c9b20553d55953ae536ba7d43ed29c14e4263549f25970030970c5675f3b71188a136a9ef182c73ad9941605a170dc133598fc573f723e8bf58c8f9a4e520119cd9cfb3733e0c5c0ef42af531bae56e5ebe9863a4d2a5801b76da72f7634c7a39d669e6d24255cad300a789468c7de0c24"], 0x14}, 0x1, 0x0, 0x0, 0x20048810}, 0x4804) pipe2$auto(&(0x7f0000000180)=r1, 0x81) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r3, 0x0, 0x5) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x80000001}, 0x10001}, 0x8000005, 0x20000000) bind$auto(0x3, 0x0, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 3.736591764s ago: executing program 0 (id=2834): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x0) (async) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x7}, 0x10) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) (async) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r2, 0x800064b9, 0x1e6) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket(0x2, 0x801, 0x106) (async) r4 = socket(0x15, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00'}) capget$auto(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={0x0, 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001c00)="fe6e7669e5") 2.996875275s ago: executing program 4 (id=2835): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0xa, 0xfd) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen\x00', 0x80400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4008014) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="160083002f6465762f736e642f6d69646943324430000000da0007802000bfce062815f545559fc8d84ace66131a61e94d4312d5526980b59522515bed2964108b25cf3c7d786f063913e41b6fc985884b34a0b9fe37c723f18c9005d89f151a60e94c9466f90ab85fc59a7b46f7e955fea3de2067bb953f32cfb7222c9a2a47c2e892f07f82d3b2f2d06ad035d1c588c2f5765db2f7f397c1a83373c1f9efa03f922ddf229f8d9d2f8814a5bb1a83c631d7b9d30e4a2b71df74bc3c5265453817124399f70ef893a5fd804a5167279d493db4a5777234fa8b2c17003e806a8d081ec0dff4809e8b2649b4f87b65717f7a000000ab00000053cf50a230226fbddca25c4c2bb35e87f5ff38e53103a03f04e8bbcae5a0851a17d0ed73968695ba48a1bdbebc3f14da08633393c70e2113369825f224298f622b3c141cdd062533521aae276b2caf11475591bc152779bffc7586cae4f4d5e35587a640339882b5e892accfb78bf2dc4e8a64871cc7e5abf0381f5fe6f3ae", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0400558004"], 0x226c}, 0x1, 0x0, 0x0, 0xc4}, 0x1880) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af04, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/2/spurious\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, 0x0, 0x4d) mmap$auto(0x1, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) 2.687924609s ago: executing program 0 (id=2836): r0 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x104c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80000001}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_HE_CAPABILITY={0x11, 0x10d, "0f8a0a2954138811a71578faa1"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x1004, 0xbd, "dae35222d759ac6dd64dd85b41954869059391d0e1d215da8c539a495de92252655330f8652ad92c1b8f495389ca55f75c64c9d2fb9ed34da330532a51e00d9fc839806f4d3140a9bf0d0f33f0e2d99ec5eb9a08e02ee5461e55d1987f4cdb8b286ec08566be428bd471b55dcd4408fc78db11c8408e2b06af584f057f4110424b31c2808a772b501f1d84b57d238ee1aa2f2225c46ad6fbb78c1c6818606dca3aed2776cf7362b844b68bab9cb7f586cf91587cfbfc3161b26a3cf06820eccc624c0689422797121ff87a8cf6a1e0938025b6856ef95684210613b3b36188397efdc209549c995d18ecb9120867ad876d168c843a87f41c86b5eddf0487486a7785ae96dedca37acf02dac98ee3e85646580fcf07bc35cd3c77f58c0ac4970f71226fa75e83b117562209f28d147cc92f014eeb7cd00c8ecacc09f3890e81879b0aa5071a8a99f698bb7e61878e2db4cec35568bf4625e6d6af5b2f627f08bde9adb591a436722b4473cebaf9789616e477055103ddacc7c3c0da301327079e2380dba6a44ea725fa2bbe1adcae0369d077da15e578af3b60af36ac14b5ede893961329237a7ba19bd90117be079335a1245ff373284a8cc3543518f84e6458d9fc329535edd60574be78e975922bfddc2d68ea170507e4ed5f9eb3d959a98b7d9d75b4da4c7b6750d52926177eca8f43855ec64f41181af8cb55c70f20043d2381934d28e70d963212fc980cc2f3f9f4eb227a97d2a10c23ed05286ea3842192d37213ea2c60f7186e3f04b11edec844e3e57fdf2434becc85638d8ace0a6e5d208549b7311a0c4b13cc01031319aadcae92b7ae3002939766b897166be0089821e62dc16bb4fb33af0a9cc4aae80d507b7d9763ba11fe7fdfbd2ca31ccbfc6915706b7cdd0ac8570d1364fa681e6302ed52d744779b4a564e550ffbea4dcca251e6274725226e486fe3278eed53b3d42e9ff45709c199f76d7280649a93bca361a9c5b1b5b41efe78b1025c014bdc34ebc5732361f3865dc3c3f82a85d4772e9eadf3614355260272151cd6673a54baa0c33a1fb14833f36d3d42878448047d6bfc2d3ab1f95dd18476f17f04a7d4cf7cfe8f4a5a48c0006f0365b8f88f5645fb7464a12fe5c1049d79fcca4f3604474959e00d41b081fe2c21f26639575dc606ed391c78814daa85976bf437567884eaa4bfd1ab4da1c239f2d1894b7e90308a44719352abd2957130467afec12661a8f0edeaf738f072283b15615bb95930bf22dc1b15d1672088d14a4020e5fbfeb800ec3b886bd59460019d737cf0ba6ea8f56d62de6e3306d5afdd9d289e1b90f8baa56e6c0bf91da39e46a696ab3d6089bf442bc934060cc6286cf9fab07834a9b3aca35e7c78dfd9a8c42a639f6f5d109169c1cb87eeb21cdea0a62eeea5ee08b4936c107eb5d6391e29d1c450ceeacec9e6b59a53e40df484fc4a1bb9ea28dc5e6f56843ebcb1069c6f40e35d80d00111347c2060bc7e795979f8e4f66b83aee58c69a914d320a350525573dab3a2bdfd342c88a800562753387131c99be324cd3c7a34937a18ff4da68cf9757afa1737cca6de4180b4bfd1ff937d44737c5205dc44355ecebf9b9a9ee9ff2054fad3bcdb1a4aef515eb12dec344024fd3d153f02014fd39eec84155b194b8e431b8301b81e5695b7e8616204b18c27cc680060a49e6571059abe6cc6487e31373c77267c1122673fa8274063f08ea4fbb8de2123ff3cc8b3e5c9f2cc88c5f71a8da4142f8aad26d486f33ea32d49c7a15db0e7d6e15c16dd3c072cd98bf3fb91f7d530fbb98e7fc725ba60ad17257724fc8ac321f076334a517f75e896ded75d4bd1a210240ba33c356209f8708cc0916b967535956fa6be80427183ffcd5c250a31a147cfbfcf174536bf27ba90c7945365f71de575bb9b6e946adabdba354606df5208ed739164fe8ff1cdab34cd45f6f8a68127ee9f42f0b72489f723d38a6ef1b6a70b29f7626c399764ee1f04679d54b3c91ccacbed7e7fa494268b9dea042a4e5b7b839d7d2484f00a9370c3132dbf42d2646cf757f0db32eb50301d5857ac71f4f749370777ca04e7c50aa492df2d6510734a13da68e33ca2beaae8d4bbdbbb3c38d0a4e93cb61433ed6ec0f5d28d9150b7f682bb348790b1201d03354a521e4ab450901cb3ece5ca02290f8b8ab17b9f67c5879c6ac4000744c262d8aebcceeeeb257c3f107aec6fe346560b06fe7e456ea1848216de27335c0ffb1da1fd0036001c5e58da5ee317b2ee734b2ebfc50e584e74a650645f91ec0a5eb2631c4cacb73859c890f291b4f577a45e23654ea88d2b30426b9afe32b008b49e47082c23a287ab1ebb49311d6eee8e5738547d20501ffc1706bd8bedd8c8d2a7249b88e051c4ca2215d1b815c6ef27810fd266c9900efdb57d722a7d0408ebbd2b658ce9b1a6edab16c2dac66995a399ab5c89b6295517f7a21269ede7e55e9e669b087f5a629c728b96cf70e2e2a826eafaddbc8c0c6f916d52122e7f7cb1dc78d446b0a64cae6b1c978c423e47ea6b36aaf7bcaf26562ada20b22e4834614c03b02d8dc1cf0430c3ab27f196e8be1ab7cfdfcd2bb3d8620903467434da61e3b01b2e09f395750a755481557c24b158ce89d4e19317f99a6006386e0bad7f6a205ebb7e9dd7159a60b11177b6642e5b3c263e3c23ea83aa4805db2892cdd4f030c67573b4306865a574936ebe709a2035bc3dc19248452b612ccd30eaca139989da9b4ddf2036414ec5e5457e9f5d260c1cb86e550d5f38b77fac75d0fb362e6161da543d2173fb456f3fd6b1d24de1b6d2e7b3d851e8dd633b4cd2e93c1f128a620494df21b884303a76570dec4dfcf219642549264f1af2302bf5fc80cdad503956583f298a94155e5ca59e428fdf9cbba7aa1c9ea49f464f82dc725ba04218a89fee05e62ecdf4df087738ecc7407968c1a1d7d5a96d13004de69c7ebd7af6720b189ed09d15181e3633e2f5d03371416ce6ff7550aa920605a2737f59fbabecd389312333ad8646d13a981a390a1c9cfd22432573805f61b8553a183cdd170b152961a02a93253475bf6fe9d8dbefae0ce41539b37e43cda8ef7eb98e3c1e35f23edef0a11f8945437f1e5d1541594ee8f49c54c687a5ad56d150dd52c04358c870a7aed6f02b4834a1ec745a5993af0a67806d64de9643a1f0de667094eae3f5893a846fa3279458bac078945766088254b4db39bf41bc284e1fe09371977bfab6e9144864ecaa46f1e52402dc7fb702e6673ddf070640db61ae8900bb4428a559500a4aba612015ec7216f54b9fa15ec9441cded1e05dcdf05c968b2ddb82e71c0374483404e27130c945a4a875d32e98250e610a672b4cb6b094d14807b7f21233ade06d411f4843ea5deb8fa6a3a882b0884e0ece3974196ff9663cbb4a29bff24855372b87524f3ef833f4acf7d841dd3a0234976ca9a999d0cd88f61db7ff7a8b4329d2c52224132f125cc5f3168655d78b0226c1b34f2d9ec8369f14cd86cbb1ee2639b7250d357f388fe78195ec5a2a591ef60670c76ec1658a200923be98e8d30a5329b25f607987a55128a588d27fafd0cff4c44285d3121e3102556174eb1d87842602a6ee7c069f8e50e94fc3494c00e4992016ed1b52633d5a0c3f08da38247746168c33fc6bb78d2bdb7daa38e8adf5adf2ff28922880ada3363deafda10f0b56b4dadcaa937e4640a83042538e3a652fd86eb096f2f5e1cb2c6ec1afa27769c4d0eaf93f736d04ae620eb1d74c27bdc4fbbb9f8a9f03384591ad69de5543edd6b0ac06363ae0a47ceb01959bb56837796defcdfc732966b80f76127a4f1b52cda08c9f6a033eca6203b775cb36d630d86895a46d2bbe49997d48a989851248f7fc4c6967a8e4d39d3710ab3f314e87f20c5f26725c4f9afdaaf78c85be7e536bc5dfb0479d54392cee38f84c6716d8fb193019efb5a5db43668379739f39151374e3a09b156b6c1af6f1b63b72c335dbf85283413d49f856c090fe99397848183a0d8b4775e61247c28cad6db9cf671836f5f3a491559a83b5160119dc0f424d68b378bde98f882ff7eb1923bce2cb33a5d4ba6f1b2afa41f691448bb87be5ab20bd92b27272ace4b294aba0b6a9b744257f74f9fbb796a907b219fc91ae47d2b06ed195d53fa5960ed5ca48af36a0bbc60d43916316638c98ef76ddd0b94ba9a9363472a4e8fd945035847385b7469e83502071b20af6bc753664563877f5791c52f38ffdd261f11b2dd0f897534bbc116b46d0a4642ffc5d295800765dd5da414b5859660946733e88318eb955eafc155fb07dd09472f12b68c43b763adcfa202c602b4c7b99f2c9bc5b0475c5fbc962a28168d1b57f3aa0c2a3a562ab7a5ae82ed2bcd025cb8e431bbb58b82f7fb9dfa9cff0d295ef36065b7580770cf81a78976f7a49e27d3f0b8795b1eaac030790ed868adb1b91de916cd637aa4009cdda9451c10fa97be390b9db918b9c1405c20dd8e416afccb924ba6fe4c42defced1587bdfb089e37127b1eb01aa875b3ad2d900fa1582e2dcd4f9d36b57bb8d5596a3b7d610aa560cbcdb42051735e923175acc276786b32a0312e427ebee7b17897c9093dfb6b958cb270eb17df53cf134bbdc93933518f29f850c263b852afc6917a180b149e11afef2c40e69aed642c90e47cb83cdc256e9500281aa0b238a89b4c9b3bc9af776a8a034fa12a6124490c49a8ce99514163a7345e017bdbdf816cc092a4da452b64a4c01d5f3e99e87ba0fa12e0b6b227685cfa079d60c9b459990f16c450bc1de6ffea7dc974f07114a918624202426e4c284fb34eb00bf78ea30889bf6483687d047a749fbdf1c01205ed58f0b08003c748f531509d4b54f134e554eca28f78f45d12828b32b4626c4c4fc0c354a0c988729cbc710ecd5c3ed4a97ea899db2d9c7ee1c8f4e23ef322a5012d3010aeb4c9d0066fb80fce109e0a90d3e99146a66beaeb29bd0a332a096fd768b4b7560c10be423a05fc5c8ed600650b2d239cb27c86acdbb5ddc41f10aaca9059615d5790974cf94c8b4578079fd80ecb38061138b6ec48739f1aaa7dba9257cbeb3576dac0df66c7208202e968454975f4b8630430b6cdd34627acf635c9dae8f7ca1afe0a34d7733c8c4dfd21268083852de60feb75e59cec108b0a5490ec100b7fcec46333a1e16734a273eabbdd2a0b916f0a01d8870fae6c9221a6c995a517682d74974ec0af57539052ff21aa6b4d69644572fe70b45898d94f9e23f27e3ba5ffeeaba529f35ac45bebe333e46eeb38a17201ddab57314f466b174d572051b7c44469e25c6d057f1cac77b12227d7dee7b067992f1979502a317b98d23ee66cd8f202d9276c8c07103f811dd27142ee78773f6e6cd27bbff9bc760016635b4169f209bd62477ea32d794c183baafed2191544c79e7cab1d76edb4524e87267aa65256f96af75b40833246b3c0533780c2394babf7462aef955ea7318e8cc773d26b54f32a8635f5fe3e605dd4ef77097a0a2a4b2b6260a0b8ded1addecd5fba9c8b100390865f14c91646efdca5cf72da58d7b2d4dc529b8dbecd938a768b4cf5164e6fea02eb8dee0ef2497e7ffa32dcd234b49dff393fdf414d0212611d64c1c13f7a8be18e0ce2725eb4e8432a498cefd9297eaef3cbe905045585e6b15974d9b1b52c5b5338dde963a10cbba3ca34d8beee720a6ed5911289c0a1d2b7eb9620b5a8e9cc64ce515f26c07584ce5f51361485646a20fe636c8f41e137220"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x104c}, 0x1, 0x0, 0x0, 0xc004}, 0x400c001) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2c0880, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x0, 0x85, 0x9416, 0x1, 0x7, 0x6}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0xf, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x7, 0x75, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r3, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) 2.379601978s ago: executing program 3 (id=2837): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) ioctl$auto(r0, 0x545c, 0xffffffffffffffff) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) (async) close_range$auto(r0, r0, 0x26) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/loginuid\x00', 0x200040, 0x0) (async) mmap$auto(0x0, 0x16, 0xde, 0xeb3, r0, 0x8000) socket(0x2, 0x1, 0x0) (async) r1 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) socket(0x28, 0x0, 0x0) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x800000) (async) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) (async) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x64842, 0x93) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x40040, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) ioctl$auto(0x3, 0x8925, 0x10000000000402) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0xd, r1) mmap$auto(0xb, 0x40009, 0x2, 0x20000000009b72, 0xffffffffffffffff, 0x28000) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7911}, 0xa) (async) connect$auto(0x3, 0x0, 0x55) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x25, 0x6, 0xd) 1.747505403s ago: executing program 0 (id=2838): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket(0x2, 0x1, 0x106) getcwd$auto(0x0, 0xffffffffffffffff) (async) inotify_init1$auto(0x3000000000000) (async) inotify_add_watch$auto(0x4, 0x0, 0x9) getcwd$auto(0x0, 0xffffffffffffffff) (async) inotify_add_watch$auto(0x4, 0x0, 0x9) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) pipe$auto(0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22040, 0x75) (async) socket(0x840000000002, 0x3, 0xff) (async) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x3}, 0x55) (async) get_robust_list$auto(0x0, 0x0, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xb00) (async) open(0x0, 0x22240, 0xad6c1c5f547bf689) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x309381, 0x0) clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xfffffffffffffffc, 0x7, 0x0, 0xffffffffffffffea, 0x8, 0x200}, 0x7) select$auto(0x85, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x6}) (async) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1.516801508s ago: executing program 0 (id=2839): socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff050006000100", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r0 = socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) mmap$auto(0x100000001, 0x5, 0xfffffffffffffffe, 0x17, r0, 0x401) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) (async) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) (async) socket(0xa, 0x5, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04, 0x0) (async) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) (async) gettid() r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x5, 0x9a6) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x4a5a2, 0x0) 1.489777456s ago: executing program 4 (id=2840): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) getpid() (async) move_pages$auto(0x0, 0x700e3ce6, 0x0, 0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) mmap$auto(0x3, 0x2020009, 0x3, 0xebf, r0, 0xa000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyq1/power/runtime_status\x00', 0x800, 0x0) (async) read$auto(0x3, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r2 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(r3, 0x6000000, r2) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r4, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0xa, 0x1, 0x100) (async) ioperm$auto(0x7, 0x5ad2, 0xc) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0x400) (async) socket(0x2, 0x1, 0x0) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x404040, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r6, 0x0, 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0xffffffffffffffff, 0x4, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 1.033647049s ago: executing program 5 (id=2841): socket(0xa, 0x1, 0xfffffeff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000280), 0x480000, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vivid.0/video4linux/v4l-touch2/power/autosuspend_delay_ms\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x1) (async) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', &(0x7f0000000080)='\x9f\x88/+\xa00R\r\xe9A@\x1b\x15\x02\b$\xa5\xb3\xac\xd7{*S\xce\x16\x9er\xa2:\x8em\x9aP\xf3=\xa02GK*KN\xffE\xd4\xebP\x97\x1f\x04\xcb#s\x80\xa6p\x17F3\x9b.\x87\x89\xf0\xd1\x10`H\x1f\x00\xfa*\x98\x9aSM\xf6\xfe~\xe7\x06J\xe5\x1cY\xafS\xdc\xb1\xf3\xe8\x95H\xca\xc8\xd9\xca\xbc\xf6\x04\xa9\x03\vaS`zY\xb2\xff\x15p\xcf\xfe\xfc\xa5\'\xfbz\xadI4\x00\x00\xce\"7\x17\xea@i,\x87CK\xb7\xe1\xe3\x88\xb6\x177\xd3\xcfM\xdcKn\xde\x19\xc3\xae\xd1\x81\xcf\xc5\xf3\xfe\x9bZK\xaa@\x99\x9e\xe2\x9f\xf36YIH\xfc=\xc8s\xbc', 0x0, 0x0, 0xfffffffffffffffc) (async) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x4, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000200)='/dev/binderfs/binder0\x00', 0x20000, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) (async) r3 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r3, 0x0, 0x2, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/timestamp_mode\x00', 0x20c902, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r4, &(0x7f00000003c0)=""/233, 0xe9) (async) r5 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r5, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x1fd, &(0x7f0000000200), 0x8, 0xffff}, 0x1000005}, 0x3b8a, 0x800) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, r3, 0x8000) (async) mmap$auto(0xffffffffffffffff, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x6) socket(0xa, 0x1, 0x84) mmap$auto(0x2, 0x7, 0x6, 0xeb1, r3, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) madvise$auto(0x0, 0x3, 0x66) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) socket(0x1e, 0x6, 0xffffffff) 385.032482ms ago: executing program 4 (id=2842): close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto(0x3, 0x6f2d, 0x10000000000402) socket(0xa, 0x3, 0x3a) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) 384.477661ms ago: executing program 0 (id=2843): close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket(0x2, 0x2, 0x1) (async) socket(0x2, 0x801, 0x106) (async) socket(0x26, 0x80805, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) (async) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4610, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f00000001c0)={0x1000005, 0x0, [{0x7, 0x9664, 0x7fffffff}]}) 71.232541ms ago: executing program 0 (id=2844): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) writev$auto(0x3, &(0x7f0000000380)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2280, 0x0) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x11, 0x0, 0x7e, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000001700)={@inferred, 0xc, 0x3, 0x9, "9d4724b76f4d07faf46cb94d85033d940fdf05ecff75c12163ddeab942ed73d07dadd6f419694d591eca8162"}) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) write$auto(r2, &(0x7f00000000c0)='\\\xf3%\x00', 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xc, 0x940, 0x1ffde, 0x7, 0x6, 0x3ff, 0x9, 0x1, 0x2, 0x0, 0x9, 0x8, 0x8, 0x1, 0x5, 0x7, 0x5d, 0x0, 0x3ff, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c9, 0x0, 0x4, 0x0, 0x0, 0xe3a, 0x3]}, 0x400, 0x81) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000140)={{@raw=0x80000000, 0x304, 0xfffffffe, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0xfffffffc}, 0x3, 0x3, 0x4, @inferred, @integer={0x3, 0xfffffffffffffff9, 0x8}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd7327b386425608af790ada8dbdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendfile$auto(r0, r4, 0x0, 0x1) 0s ago: executing program 4 (id=2845): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000) r1 = socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x7878, 0x7000000) r2 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r2, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000140)=0x6) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr$auto(0x1, 0x0, 0x7, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r1, 0x801c581f, 0xf9e) getpriority$auto_PRIO_PGRP(0x1, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) kernel console output (not intermixed with test programs): 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.301630][T18891] RSP: 002b:00007ff344056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 892.301645][T18891] RAX: ffffffffffffffda RBX: 00007ff3433b6180 RCX: 00007ff34318ebe9 [ 892.301654][T18891] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 892.301663][T18891] RBP: 00007ff343211e19 R08: 0000000000000000 R09: 0000000000000000 [ 892.301672][T18891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.301681][T18891] R13: 00007ff3433b6218 R14: 00007ff3433b6180 R15: 00007fff0f031ad8 [ 892.301700][T18891] [ 892.648689][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2392'. [ 892.903279][T18969] syz.4.2393: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 892.933621][T18969] CPU: 1 UID: 0 PID: 18969 Comm: syz.4.2393 Not tainted syzkaller #0 PREEMPT(full) [ 892.933643][T18969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 892.933653][T18969] Call Trace: [ 892.933659][T18969] [ 892.933666][T18969] dump_stack_lvl+0x16c/0x1f0 [ 892.933702][T18969] warn_alloc+0x248/0x3a0 [ 892.933723][T18969] ? __pfx_warn_alloc+0x10/0x10 [ 892.933753][T18969] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 892.933769][T18969] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 892.933785][T18969] ? __pfx___might_resched+0x10/0x10 [ 892.933802][T18969] ? rcu_is_watching+0x12/0xc0 [ 892.933819][T18969] ? trace_contention_end+0xdd/0x130 [ 892.933840][T18969] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 892.933857][T18969] ? tomoyo_path_number_perm+0x295/0x580 [ 892.933876][T18969] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 892.933891][T18969] ? __pfx___mutex_lock+0x10/0x10 [ 892.933916][T18969] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 892.933929][T18969] __vmalloc_node_noprof+0xad/0xf0 [ 892.933943][T18969] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 892.933959][T18969] dvb_demux_do_ioctl+0x54e/0x12f0 [ 892.933974][T18969] ? do_vfs_ioctl+0x128/0x14f0 [ 892.933999][T18969] dvb_usercopy+0x167/0x340 [ 892.934018][T18969] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 892.934033][T18969] ? __pfx_dvb_usercopy+0x10/0x10 [ 892.934060][T18969] ? __fget_files+0x20e/0x3c0 [ 892.934080][T18969] dvb_demux_ioctl+0x29/0x40 [ 892.934099][T18969] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 892.934120][T18969] __x64_sys_ioctl+0x18e/0x210 [ 892.934143][T18969] do_syscall_64+0xcd/0x490 [ 892.934163][T18969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.934179][T18969] RIP: 0033:0x7ff34318ebe9 [ 892.934192][T18969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.934206][T18969] RSP: 002b:00007ff344098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.934221][T18969] RAX: ffffffffffffffda RBX: 00007ff3433b5fa0 RCX: 00007ff34318ebe9 [ 892.934232][T18969] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 892.934241][T18969] RBP: 00007ff343211e19 R08: 0000000000000000 R09: 0000000000000000 [ 892.934251][T18969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.934260][T18969] R13: 00007ff3433b6038 R14: 00007ff3433b5fa0 R15: 00007fff0f031ad8 [ 892.934279][T18969] [ 892.934286][T18969] Mem-Info: [ 894.234247][T18993] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2393'. [ 894.262185][T18986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2396'. [ 894.303794][T18969] active_anon:7402 inactive_anon:13304 isolated_anon:0 [ 894.303794][T18969] active_file:17221 inactive_file:40062 isolated_file:0 [ 894.303794][T18969] unevictable:768 dirty:712 writeback:0 [ 894.303794][T18969] slab_reclaimable:12224 slab_unreclaimable:99889 [ 894.303794][T18969] mapped:31185 shmem:8776 pagetables:1227 [ 894.303794][T18969] sec_pagetables:0 bounce:0 [ 894.303794][T18969] kernel_misc_reclaimable:0 [ 894.303794][T18969] free:1293179 free_pcp:8644 free_cma:0 [ 894.357361][T18986] bond0: entered allmulticast mode [ 894.397818][T18986] bond_slave_0: entered allmulticast mode [ 894.440687][T18986] bond_slave_1: entered allmulticast mode [ 894.626496][T18969] Node 0 active_anon:29556kB inactive_anon:53268kB active_file:68852kB inactive_file:160116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124712kB dirty:2948kB writeback:0kB shmem:33568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11888kB pagetables:4744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 894.695548][T19003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2399'. [ 894.776496][T19003] team0: left allmulticast mode [ 894.810412][T19003] team_slave_0: left allmulticast mode [ 894.838824][T19003] team_slave_1: left allmulticast mode [ 894.870103][T19003] team0: left promiscuous mode [ 894.886967][T18969] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 894.929639][T19003] team_slave_0: left promiscuous mode [ 894.955998][T19003] team_slave_1: left promiscuous mode [ 895.000057][T19003] bridge0: port 3(team0) entered disabled state [ 895.030661][T19003] bridge_slave_1: left allmulticast mode [ 895.064037][T19003] bridge_slave_1: left promiscuous mode [ 895.093892][T19003] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.120268][T18969] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 895.191168][T19003] bridge_slave_0: left allmulticast mode [ 895.230716][T19003] bridge_slave_0: left promiscuous mode [ 895.267033][T19003] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.297785][T18969] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 895.303555][T18969] Node 0 DMA32 free:1239756kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29512kB inactive_anon:49164kB active_file:67616kB inactive_file:160028kB unevictable:1536kB writepending:2964kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:39348kB local_pcp:39348kB free_cma:0kB [ 895.518076][T18969] lowmem_reserve[]: 0 0 1 1 1 [ 895.522808][T18969] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 895.751411][T18969] lowmem_reserve[]: 0 0 0 0 0 [ 895.774157][T18969] Node 1 Normal free:3906372kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5168kB local_pcp:5168kB free_cma:0kB [ 896.003304][T18969] lowmem_reserve[]: 0 0 0 0 0 [ 896.008239][T18969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 896.116129][T18969] Node 0 DMA32: 3229*4kB (UM) 1621*8kB (UME) 2097*16kB (UM) 1387*32kB (UME) 773*64kB (UME) 345*128kB (UME) 288*256kB (ME) 101*512kB (M) 49*1024kB (UM) 13*2048kB (UM) 203*4096kB (UM) = 1231180kB [ 896.236247][T18969] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 896.300029][T18969] Node 1 Normal: 169*4kB (UE) 46*8kB (UE) 39*16kB (UE) 210*32kB (UME) 94*64kB (UME) 22*128kB (UME) 10*256kB (U) 5*512kB (UM) 3*1024kB (UME) 3*2048kB (UME) 946*4096kB (UM) = 3906372kB [ 896.413302][T18969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.491809][T18969] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 896.562107][T18969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.640316][T18969] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 896.700229][T18969] 67548 total pagecache pages [ 896.740561][T18969] 12 pages in swap cache [ 896.751837][T18969] Free swap = 124948kB [ 896.781321][T18969] Total swap = 124996kB [ 896.799501][T18969] 2097051 pages RAM [ 896.818709][T18969] 0 pages HighMem/MovableOnly [ 896.883132][T18969] 430192 pages reserved [ 896.924009][T18969] 0 pages cma reserved [ 899.005491][T19144] vivid-003: ================= START STATUS ================= [ 899.164219][T19144] vivid-003: Radio HW Seek Mode: Bounded [ 899.378915][T19144] vivid-003: Radio Programmable HW Seek: false [ 899.506834][T19144] vivid-003: RDS Rx I/O Mode: Block I/O [ 899.512459][T19144] vivid-003: Generate RBDS Instead of RDS: false [ 899.704632][T19144] vivid-003: RDS Reception: true [ 899.796859][T19144] vivid-003: RDS Program Type: 0 inactive [ 899.857854][T19144] vivid-003: RDS PS Name: inactive [ 899.979457][T19144] vivid-003: RDS Radio Text: inactive [ 900.064942][T19144] vivid-003: RDS Traffic Announcement: false inactive [ 900.114767][T19144] vivid-003: RDS Traffic Program: false [ 900.115185][T19216] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2418'. [ 900.154076][T19144] inactive [ 900.157228][T19144] vivid-003: RDS Music: false inactive [ 900.188193][T19144] vivid-003: ================== END STATUS ================== [ 901.125141][T19307] random: crng reseeded on system resumption [ 901.193219][ T2932] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:8: iget: checksum invalid [ 901.295241][ T2932] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 901.305980][T11797] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:42: iget: checksum invalid [ 901.393975][T11797] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 901.406712][ T2932] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:8: iget: checksum invalid [ 901.485901][ T2932] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 901.511762][T11797] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:42: iget: checksum invalid [ 901.613998][T11797] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 901.626304][ T2932] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:8: iget: checksum invalid [ 901.726500][ T2932] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 901.748080][T11797] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:42: iget: checksum invalid [ 901.818439][T11797] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 901.838134][ T2932] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:8: iget: checksum invalid [ 901.921919][ T2932] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 901.931207][T11797] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:42: iget: checksum invalid [ 901.984778][ T2932] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 902.014017][T11797] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 902.069977][ T2932] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 902.094955][T11797] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 902.159428][T11797] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 903.432817][T19427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2426'. [ 903.941478][T19472] 0x000200000001-0xa29656a63616329 : "" [ 903.988539][T19472] mtd: partition "" is out of reach -- disabled [ 904.077338][T19472] ftl_cs: FTL header not found. [ 904.646560][ T8869] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1365 with max blocks 15 with error 117 [ 904.720695][ T8869] EXT4-fs (sda1): This should not happen!! Data will be lost [ 904.720695][ T8869] [ 906.992345][T19484] warn_alloc: 1 callbacks suppressed [ 906.992358][T19484] syz.3.2430: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 907.076271][T19484] CPU: 1 UID: 0 PID: 19484 Comm: syz.3.2430 Not tainted syzkaller #0 PREEMPT(full) [ 907.076294][T19484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 907.076304][T19484] Call Trace: [ 907.076310][T19484] [ 907.076317][T19484] dump_stack_lvl+0x16c/0x1f0 [ 907.076341][T19484] warn_alloc+0x248/0x3a0 [ 907.076361][T19484] ? __pfx_warn_alloc+0x10/0x10 [ 907.076390][T19484] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 907.076406][T19484] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 907.076423][T19484] ? __pfx___might_resched+0x10/0x10 [ 907.076439][T19484] ? rcu_is_watching+0x12/0xc0 [ 907.076454][T19484] ? trace_contention_end+0xdd/0x130 [ 907.076475][T19484] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 907.076491][T19484] ? tomoyo_path_number_perm+0x295/0x580 [ 907.076510][T19484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 907.076524][T19484] ? __pfx___mutex_lock+0x10/0x10 [ 907.076549][T19484] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 907.076562][T19484] __vmalloc_node_noprof+0xad/0xf0 [ 907.076576][T19484] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 907.076592][T19484] dvb_demux_do_ioctl+0x54e/0x12f0 [ 907.076608][T19484] ? do_vfs_ioctl+0x128/0x14f0 [ 907.076633][T19484] dvb_usercopy+0x167/0x340 [ 907.076653][T19484] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 907.076667][T19484] ? __pfx_dvb_usercopy+0x10/0x10 [ 907.076695][T19484] ? __fget_files+0x20e/0x3c0 [ 907.076715][T19484] dvb_demux_ioctl+0x29/0x40 [ 907.076734][T19484] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 907.076754][T19484] __x64_sys_ioctl+0x18e/0x210 [ 907.076778][T19484] do_syscall_64+0xcd/0x490 [ 907.076798][T19484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.076814][T19484] RIP: 0033:0x7f262998ebe9 [ 907.076827][T19484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.076842][T19484] RSP: 002b:00007f262a7b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.076857][T19484] RAX: ffffffffffffffda RBX: 00007f2629bb5fa0 RCX: 00007f262998ebe9 [ 907.076867][T19484] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 907.076876][T19484] RBP: 00007f2629a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 907.076885][T19484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.076894][T19484] R13: 00007f2629bb6038 R14: 00007f2629bb5fa0 R15: 00007ffe87a31ea8 [ 907.076913][T19484] [ 907.076920][T19484] Mem-Info: [ 907.948452][T19485] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2430'. [ 907.996728][T19484] active_anon:7390 inactive_anon:50764 isolated_anon:0 [ 907.996728][T19484] active_file:17471 inactive_file:41926 isolated_file:0 [ 907.996728][T19484] unevictable:768 dirty:267 writeback:0 [ 907.996728][T19484] slab_reclaimable:12280 slab_unreclaimable:98678 [ 907.996728][T19484] mapped:56969 shmem:46070 pagetables:1303 [ 907.996728][T19484] sec_pagetables:0 bounce:0 [ 907.996728][T19484] kernel_misc_reclaimable:0 [ 907.996728][T19484] free:1253632 free_pcp:9444 free_cma:0 [ 908.148776][T19484] Node 0 active_anon:29560kB inactive_anon:208048kB active_file:69796kB inactive_file:167572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:232992kB dirty:1064kB writeback:0kB shmem:187892kB shmem_thp:8192kB shmem_pmdmapped:8192kB anon_thp:0kB kernel_stack:11760kB pagetables:5100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 908.281190][T19484] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 908.396192][T19484] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 908.484708][T19484] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 908.490493][T19484] Node 0 DMA32 free:1079732kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29516kB inactive_anon:220112kB active_file:68560kB inactive_file:167484kB unevictable:1536kB writepending:1064kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:28452kB local_pcp:28452kB free_cma:0kB [ 908.622609][T19484] lowmem_reserve[]: 0 0 1 1 1 [ 908.645371][T19484] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 908.734322][T19484] lowmem_reserve[]: 0 0 0 0 0 [ 908.763387][T19484] Node 1 Normal free:3902528kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8956kB local_pcp:8956kB free_cma:0kB [ 908.863941][T19484] lowmem_reserve[]: 0 0 0 0 0 [ 908.868681][T19484] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 908.928854][T19484] Node 0 DMA32: 109*4kB (UM) 163*8kB (UE) 64*16kB (UM) 33*32kB (UE) 14*64kB (UME) 176*128kB (UME) 289*256kB (UME) 112*512kB (UM) 53*1024kB (UM) 11*2048kB (UM) 203*4096kB (UM) = 1066860kB [ 908.994156][T19484] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 909.030374][T19484] Node 1 Normal: 169*4kB (UE) 47*8kB (UME) 40*16kB (UME) 209*32kB (UE) 94*64kB (UME) 22*128kB (UME) 10*256kB (U) 4*512kB (U) 2*1024kB (UE) 4*2048kB (UME) 945*4096kB (UM) = 3902780kB [ 909.091810][T19484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.101393][T19484] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 909.163724][T19484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.202774][T19484] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 909.232003][T19484] 113083 total pagecache pages [ 909.252547][T19484] 12 pages in swap cache [ 909.256837][T19484] Free swap = 124948kB [ 909.281034][T19484] Total swap = 124996kB [ 909.285199][T19484] 2097051 pages RAM [ 909.288986][T19484] 0 pages HighMem/MovableOnly [ 909.330700][T19484] 430192 pages reserved [ 909.334891][T19484] 0 pages cma reserved [ 909.591180][T19490] block nbd9: NBD_DISCONNECT [ 909.809781][T19491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2431'. [ 912.968890][T19506] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 913.109638][T17310] Bluetooth: hci3: unexpected event 0x03 length: 725 > 11 [ 913.109701][T17310] Bluetooth: hci3: unexpected event 0x03 length: 725 > 11 [ 915.472851][T19645] ACPI: Can not change Invalid GPE/Fixed Event status [ 915.954076][T19668] queue_state_write: operation too long [ 916.060312][T19668] queue_state_write: use 'run', 'start' or 'kick' [ 916.155459][T19672] queue_state_write: operation too long [ 916.285181][T19672] queue_state_write: use 'run', 'start' or 'kick' [ 916.633143][T19708] ptrace attach of "./syz-executor exec"[9007] was attempted by ""[19708] [ 917.863787][T19830] syz.3.2449: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 917.957961][T19830] CPU: 1 UID: 0 PID: 19830 Comm: syz.3.2449 Not tainted syzkaller #0 PREEMPT(full) [ 917.957985][T19830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.957995][T19830] Call Trace: [ 917.958001][T19830] [ 917.958008][T19830] dump_stack_lvl+0x16c/0x1f0 [ 917.958034][T19830] warn_alloc+0x248/0x3a0 [ 917.958054][T19830] ? __pfx_warn_alloc+0x10/0x10 [ 917.958084][T19830] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 917.958099][T19830] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 917.958116][T19830] ? __pfx___might_resched+0x10/0x10 [ 917.958132][T19830] ? rcu_is_watching+0x12/0xc0 [ 917.958147][T19830] ? trace_contention_end+0xdd/0x130 [ 917.958167][T19830] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 917.958183][T19830] ? tomoyo_path_number_perm+0x295/0x580 [ 917.958203][T19830] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 917.958217][T19830] ? __pfx___mutex_lock+0x10/0x10 [ 917.958243][T19830] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 917.958255][T19830] __vmalloc_node_noprof+0xad/0xf0 [ 917.958269][T19830] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 917.958285][T19830] dvb_demux_do_ioctl+0x54e/0x12f0 [ 917.958300][T19830] ? do_vfs_ioctl+0x128/0x14f0 [ 917.958325][T19830] dvb_usercopy+0x167/0x340 [ 917.958345][T19830] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 917.958359][T19830] ? __pfx_dvb_usercopy+0x10/0x10 [ 917.958394][T19830] ? __fget_files+0x20e/0x3c0 [ 917.958415][T19830] dvb_demux_ioctl+0x29/0x40 [ 917.958436][T19830] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 917.958458][T19830] __x64_sys_ioctl+0x18e/0x210 [ 917.958483][T19830] do_syscall_64+0xcd/0x490 [ 917.958504][T19830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.958519][T19830] RIP: 0033:0x7f262998ebe9 [ 917.958532][T19830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.958547][T19830] RSP: 002b:00007f262a7b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.958561][T19830] RAX: ffffffffffffffda RBX: 00007f2629bb5fa0 RCX: 00007f262998ebe9 [ 917.958571][T19830] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 917.958580][T19830] RBP: 00007f2629a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 917.958590][T19830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.958599][T19830] R13: 00007f2629bb6038 R14: 00007f2629bb5fa0 R15: 00007ffe87a31ea8 [ 917.958619][T19830] [ 917.958625][T19830] Mem-Info: [ 918.906290][T19881] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 919.329338][T19830] active_anon:7405 inactive_anon:15232 isolated_anon:0 [ 919.329338][T19830] active_file:18703 inactive_file:39320 isolated_file:0 [ 919.329338][T19830] unevictable:768 dirty:498 writeback:0 [ 919.329338][T19830] slab_reclaimable:12266 slab_unreclaimable:99592 [ 919.329338][T19830] mapped:32487 shmem:11458 pagetables:1232 [ 919.329338][T19830] sec_pagetables:0 bounce:0 [ 919.329338][T19830] kernel_misc_reclaimable:0 [ 919.329338][T19830] free:1290183 free_pcp:9492 free_cma:0 [ 919.667590][T19898] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2449'. [ 919.742160][T19830] Node 0 active_anon:29620kB inactive_anon:62436kB active_file:74724kB inactive_file:157148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131320kB dirty:1988kB writeback:0kB shmem:47364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11696kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 919.924026][ T8869] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 919.938539][T19830] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 920.009918][ T8869] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 920.023676][T18152] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:2: iget: checksum invalid [ 920.082306][T19916] cgroup: fork rejected by pids controller in /syz0 [ 920.105555][T18152] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 920.119361][ T8869] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 920.205663][ T8869] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 920.219722][T18152] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:2: iget: checksum invalid [ 920.262807][T19830] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.329991][T18152] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 920.340964][ T8869] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 920.405018][ T8869] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 920.416018][T18152] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:2: iget: checksum invalid [ 920.488539][T18152] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 920.499138][ T8869] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 920.510635][T19830] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 920.516381][T19830] Node 0 DMA32 free:1241604kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29544kB inactive_anon:71932kB active_file:73488kB inactive_file:157060kB unevictable:1536kB writepending:2016kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:18044kB local_pcp:18044kB free_cma:0kB [ 920.607748][ T8869] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 920.617204][T18152] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:2: iget: checksum invalid [ 920.647514][ T8869] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 920.671647][T18152] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 920.697489][ T8869] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 920.738995][T18152] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 920.767408][T19830] lowmem_reserve[]: 0 0 1 1 1 [ 920.778357][T18152] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 920.816805][T19830] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 920.955055][T19830] lowmem_reserve[]: 0 0 0 0 0 [ 920.980991][T19830] Node 1 Normal free:3903032kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8452kB local_pcp:8452kB free_cma:0kB [ 921.144079][T19830] lowmem_reserve[]: 0 0 0 0 0 [ 921.164276][T19830] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 921.230838][T19830] Node 0 DMA32: 398*4kB (U) 1337*8kB (UME) 2201*16kB (UM) 1476*32kB (UME) 755*64kB (UME) 243*128kB (UME) 293*256kB (UME) 118*512kB (UM) 56*1024kB (UM) 10*2048kB (UM) 203*4096kB (UM) = 1218896kB [ 921.330170][T19830] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 921.393049][T19830] Node 1 Normal: 170*4kB (UME) 46*8kB (UE) 40*16kB (UME) 209*32kB (UE) 94*64kB (UME) 22*128kB (UME) 11*256kB (UM) 4*512kB (U) 2*1024kB (UE) 4*2048kB (UME) 945*4096kB (UM) = 3903032kB [ 921.477927][T19830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.530158][T19830] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 921.574328][T19830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 921.627942][T19830] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 921.679409][T19830] 81415 total pagecache pages [ 921.702517][T19830] 12 pages in swap cache [ 921.716984][T19830] Free swap = 124940kB [ 921.748526][T19830] Total swap = 124996kB [ 921.760913][T19830] 2097051 pages RAM [ 921.786718][T19830] 0 pages HighMem/MovableOnly [ 921.812076][T19830] 430192 pages reserved [ 921.827602][T19830] 0 pages cma reserved [ 924.985607][T20256] usb usb36: usbfs: process 20256 (syz.3.2461) did not claim interface 0 before use [ 925.405187][T15253] Bluetooth: hci4: command 0x0406 tx timeout [ 925.648116][ T30] audit: type=1800 audit(4294972107.473:30): pid=20261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2463" name="features" dev="configfs" ino=77694 res=0 errno=0 [ 926.372485][T20267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2464'. [ 928.436174][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 928.442835][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.010088][T19911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 931.032219][T19911] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 931.040200][T19911] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 931.065389][T19911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 931.080562][T19911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 931.098406][T19911] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 931.109101][T19911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 931.128846][T19911] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 931.157016][T19911] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 931.181664][T19911] CPU0 is offline. [ 932.023436][T20366] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2472'. [ 932.266182][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 932.303608][T20386] kafs: addr_prefs: Invalid Command [ 933.049263][T17310] Bluetooth: hci2: command 0x0c1a tx timeout [ 933.056441][T15253] Bluetooth: hci0: command 0x0c1a tx timeout [ 933.129257][T17310] Bluetooth: hci1: command 0x0c1a tx timeout [ 933.135577][T15253] Bluetooth: hci4: command 0x0406 tx timeout [ 933.141760][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 934.632630][T20485] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 935.119619][T17310] Bluetooth: hci2: command 0x0c1a tx timeout [ 935.199109][T17310] Bluetooth: hci1: command 0x0c1a tx timeout [ 935.205292][T17310] Bluetooth: hci4: command 0x0406 tx timeout [ 936.039329][T20564] sp0: Synchronizing with TNC [ 936.555584][T20623] syz.5.2479: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 936.636314][T20623] CPU: 1 UID: 0 PID: 20623 Comm: syz.5.2479 Not tainted syzkaller #0 PREEMPT(full) [ 936.636339][T20623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.636358][T20623] Call Trace: [ 936.636364][T20623] [ 936.636371][T20623] dump_stack_lvl+0x16c/0x1f0 [ 936.636397][T20623] warn_alloc+0x248/0x3a0 [ 936.636417][T20623] ? __pfx_warn_alloc+0x10/0x10 [ 936.636446][T20623] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 936.636461][T20623] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 936.636477][T20623] ? __pfx___might_resched+0x10/0x10 [ 936.636493][T20623] ? rcu_is_watching+0x12/0xc0 [ 936.636508][T20623] ? trace_contention_end+0xdd/0x130 [ 936.636528][T20623] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 936.636545][T20623] ? tomoyo_path_number_perm+0x295/0x580 [ 936.636563][T20623] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 936.636576][T20623] ? __pfx___mutex_lock+0x10/0x10 [ 936.636602][T20623] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 936.636615][T20623] __vmalloc_node_noprof+0xad/0xf0 [ 936.636628][T20623] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 936.636644][T20623] dvb_demux_do_ioctl+0x54e/0x12f0 [ 936.636659][T20623] ? do_vfs_ioctl+0x128/0x14f0 [ 936.636684][T20623] dvb_usercopy+0x167/0x340 [ 936.636704][T20623] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 936.636719][T20623] ? __pfx_dvb_usercopy+0x10/0x10 [ 936.636746][T20623] ? __fget_files+0x20e/0x3c0 [ 936.636765][T20623] dvb_demux_ioctl+0x29/0x40 [ 936.636785][T20623] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 936.636805][T20623] __x64_sys_ioctl+0x18e/0x210 [ 936.636829][T20623] do_syscall_64+0xcd/0x490 [ 936.636849][T20623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.636864][T20623] RIP: 0033:0x7ff24ad8ebe9 [ 936.636877][T20623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.636891][T20623] RSP: 002b:00007ff248ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.636905][T20623] RAX: ffffffffffffffda RBX: 00007ff24afb5fa0 RCX: 00007ff24ad8ebe9 [ 936.636916][T20623] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 936.636925][T20623] RBP: 00007ff24ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 936.636934][T20623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.636942][T20623] R13: 00007ff24afb6038 R14: 00007ff24afb5fa0 R15: 00007fffd294e1f8 [ 936.636961][T20623] [ 936.636967][T20623] Mem-Info: [ 936.902512][T20628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2480'. [ 937.168132][T20628] hsr_slave_0: left promiscuous mode [ 937.184949][T20628] hsr_slave_1: left promiscuous mode [ 937.317626][T17310] Bluetooth: hci1: command 0x0c1a tx timeout [ 937.827505][T20623] active_anon:7393 inactive_anon:13407 isolated_anon:0 [ 937.827505][T20623] active_file:20315 inactive_file:38744 isolated_file:0 [ 937.827505][T20623] unevictable:768 dirty:564 writeback:0 [ 937.827505][T20623] slab_reclaimable:12399 slab_unreclaimable:98971 [ 937.827505][T20623] mapped:34323 shmem:8775 pagetables:1242 [ 937.827505][T20623] sec_pagetables:0 bounce:0 [ 937.827505][T20623] kernel_misc_reclaimable:0 [ 937.827505][T20623] free:1288548 free_pcp:12090 free_cma:0 [ 938.119653][T20623] Node 0 active_anon:29572kB inactive_anon:49260kB active_file:77108kB inactive_file:154844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125216kB dirty:2408kB writeback:0kB shmem:33564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12208kB pagetables:4856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 938.333679][T20623] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 938.563759][T20623] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 938.793806][T20623] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 938.799584][T20623] Node 0 DMA32 free:1237584kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29616kB inactive_anon:55672kB active_file:75852kB inactive_file:154724kB unevictable:1536kB writepending:2588kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:40440kB local_pcp:40440kB free_cma:0kB [ 939.198886][T20623] lowmem_reserve[]: 0 0 1 1 1 [ 939.244694][T20623] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 939.465602][T20623] lowmem_reserve[]: 0 0 0 0 0 [ 939.493036][T20623] Node 1 Normal free:3904500kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6940kB local_pcp:6940kB free_cma:0kB [ 939.743627][T20623] lowmem_reserve[]: 0 0 0 0 0 [ 939.799801][T20623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 939.908651][T20623] Node 0 DMA32: 3629*4kB (UM) 1909*8kB (UME) 1831*16kB (UME) 1709*32kB (UME) 914*64kB (UME) 346*128kB (UME) 193*256kB (UME) 118*512kB (UM) 56*1024kB (UM) 14*2048kB (UM) 203*4096kB (UM) = 1243884kB [ 940.091188][T20623] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 940.136230][T20751] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 940.205125][T20623] Node 1 Normal: 170*4kB (UME) 47*8kB (UME) 40*16kB (UME) 210*32kB (UME) 93*64kB (UE) 22*128kB (UME) 11*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 945*4096kB (UM) = 3904544kB [ 940.386798][T20623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.469916][T20623] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 940.554081][T20623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.622045][T20623] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 940.692169][T20623] 66840 total pagecache pages [ 940.732816][T20623] 14 pages in swap cache [ 940.769605][T20623] Free swap = 124940kB [ 940.795937][T20623] Total swap = 124996kB [ 940.837047][T20623] 2097051 pages RAM [ 940.864781][T20623] 0 pages HighMem/MovableOnly [ 940.903554][T20623] 430192 pages reserved [ 940.944687][T20623] 0 pages cma reserved [ 942.139150][T20906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2500'. [ 942.475612][T20906] hsr_slave_0: left promiscuous mode [ 942.527729][T20906] hsr_slave_1: left promiscuous mode [ 943.063928][T20952] __vm_enough_memory: pid: 20952, comm: syz.3.2503, bytes: 4398046511104 not enough memory for the allocation [ 943.174964][T20930] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 943.950689][T20999] random: crng reseeded on system resumption [ 944.013616][ T1137] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:5: iget: checksum invalid [ 944.121849][ T1137] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 944.132495][T18152] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:2: iget: checksum invalid [ 944.222370][T18152] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 944.235006][ T1137] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:5: iget: checksum invalid [ 944.342811][ T1137] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 944.357172][T18152] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:2: iget: checksum invalid [ 944.438190][T18152] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 944.455024][ T1137] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:5: iget: checksum invalid [ 944.518969][ T1137] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 944.531571][T18152] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:2: iget: checksum invalid [ 944.610166][T18152] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 944.631133][ T1137] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:5: iget: checksum invalid [ 944.707741][ T1137] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 944.719261][T18152] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:2: iget: checksum invalid [ 944.777650][ T1137] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 944.817317][T18152] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 944.873873][ T1137] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 944.892456][T18152] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 944.952990][T18152] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 955.225152][T21026] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 955.509774][T21105] delete_channel: no stack [ 955.763395][T21124] usb usb34: usbfs: process 21124 (syz.0.2517) did not claim interface 5 before use [ 955.807407][T21124] FAULT_INJECTION: forcing a failure. [ 955.807407][T21124] name failslab, interval 1, probability 0, space 0, times 0 [ 955.894870][T21124] CPU: 1 UID: 0 PID: 21124 Comm: syz.0.2517 Not tainted syzkaller #0 PREEMPT(full) [ 955.894892][T21124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 955.894901][T21124] Call Trace: [ 955.894907][T21124] [ 955.894913][T21124] dump_stack_lvl+0x16c/0x1f0 [ 955.894936][T21124] should_fail_ex+0x512/0x640 [ 955.894957][T21124] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 955.894977][T21124] should_failslab+0xc2/0x120 [ 955.894995][T21124] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 955.895013][T21124] ? shmem_alloc_inode+0x25/0x50 [ 955.895034][T21124] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 955.895052][T21124] shmem_alloc_inode+0x25/0x50 [ 955.895071][T21124] alloc_inode+0x64/0x240 [ 955.895091][T21124] new_inode+0x22/0x1c0 [ 955.895112][T21124] shmem_get_inode+0x19a/0xfb0 [ 955.895137][T21124] shmem_tmpfile+0x58/0x180 [ 955.895158][T21124] vfs_tmpfile+0x2be/0x890 [ 955.895179][T21124] path_openat+0x1683/0x2cb0 [ 955.895194][T21124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.895215][T21124] ? __pfx_path_openat+0x10/0x10 [ 955.895232][T21124] ? __lock_acquire+0xb97/0x1ce0 [ 955.895253][T21124] do_filp_open+0x20b/0x470 [ 955.895270][T21124] ? __pfx_do_filp_open+0x10/0x10 [ 955.895300][T21124] ? _raw_spin_unlock+0x28/0x50 [ 955.895315][T21124] ? alloc_fd+0x471/0x7d0 [ 955.895335][T21124] do_sys_openat2+0x11b/0x1d0 [ 955.895357][T21124] ? __pfx_do_sys_openat2+0x10/0x10 [ 955.895385][T21124] __x64_sys_open+0x153/0x1e0 [ 955.895406][T21124] ? __pfx___x64_sys_open+0x10/0x10 [ 955.895430][T21124] ? rcu_is_watching+0x12/0xc0 [ 955.895447][T21124] do_syscall_64+0xcd/0x490 [ 955.895467][T21124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.895481][T21124] RIP: 0033:0x7fe91238ebe9 [ 955.895493][T21124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.895508][T21124] RSP: 002b:00007fe913112038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 955.895522][T21124] RAX: ffffffffffffffda RBX: 00007fe9125b5fa0 RCX: 00007fe91238ebe9 [ 955.895531][T21124] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 955.895540][T21124] RBP: 00007fe912411e19 R08: 0000000000000000 R09: 0000000000000000 [ 955.895549][T21124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.895557][T21124] R13: 00007fe9125b6038 R14: 00007fe9125b5fa0 R15: 00007ffca4504af8 [ 955.895575][T21124] [ 956.855578][T21173] FAULT_INJECTION: forcing a failure. [ 956.855578][T21173] name fail_futex, interval 1, probability 0, space 0, times 0 [ 956.921856][T21173] CPU: 1 UID: 0 PID: 21173 Comm: syz.3.2519 Not tainted syzkaller #0 PREEMPT(full) [ 956.921878][T21173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 956.921889][T21173] Call Trace: [ 956.921894][T21173] [ 956.921901][T21173] dump_stack_lvl+0x16c/0x1f0 [ 956.921926][T21173] should_fail_ex+0x512/0x640 [ 956.921951][T21173] get_futex_key+0x1d0/0x1560 [ 956.921972][T21173] ? __pfx_get_futex_key+0x10/0x10 [ 956.921995][T21173] futex_wait_setup+0x9d/0x550 [ 956.922021][T21173] __futex_wait+0x194/0x2f0 [ 956.922043][T21173] ? __pfx___futex_wait+0x10/0x10 [ 956.922066][T21173] ? __pfx_futex_wake_mark+0x10/0x10 [ 956.922089][T21173] ? futex_private_hash_put+0x176/0x300 [ 956.922108][T21173] ? futex_private_hash_put+0x18a/0x300 [ 956.922126][T21173] futex_wait+0xe8/0x380 [ 956.922146][T21173] ? __pfx_futex_wait+0x10/0x10 [ 956.922176][T21173] do_futex+0x229/0x350 [ 956.922194][T21173] ? __pfx_do_futex+0x10/0x10 [ 956.922217][T21173] __x64_sys_futex+0x1e0/0x4c0 [ 956.922236][T21173] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 956.922252][T21173] ? _copy_from_user+0x59/0xd0 [ 956.922273][T21173] ? __pfx___x64_sys_futex+0x10/0x10 [ 956.922315][T21173] do_syscall_64+0xcd/0x490 [ 956.922337][T21173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.922354][T21173] RIP: 0033:0x7f262998ebe9 [ 956.922367][T21173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.922382][T21173] RSP: 002b:00007f262a7b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 956.922396][T21173] RAX: ffffffffffffffda RBX: 00007f2629bb5fa8 RCX: 00007f262998ebe9 [ 956.922407][T21173] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2629bb5fa8 [ 956.922416][T21173] RBP: 00007f2629bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 956.922425][T21173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.922433][T21173] R13: 00007f2629bb6038 R14: 00007ffe87a31dc0 R15: 00007ffe87a31ea8 [ 956.922458][T21173] [ 957.907714][T21199] FAULT_INJECTION: forcing a failure. [ 957.907714][T21199] name failslab, interval 1, probability 0, space 0, times 0 [ 958.067624][T21199] CPU: 1 UID: 0 PID: 21199 Comm: syz.3.2521 Not tainted syzkaller #0 PREEMPT(full) [ 958.067647][T21199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 958.067657][T21199] Call Trace: [ 958.067663][T21199] [ 958.067669][T21199] dump_stack_lvl+0x16c/0x1f0 [ 958.067693][T21199] should_fail_ex+0x512/0x640 [ 958.067714][T21199] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 958.067734][T21199] should_failslab+0xc2/0x120 [ 958.067754][T21199] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 958.067771][T21199] ? __proc_create+0xc3/0x8e0 [ 958.067790][T21199] ? __proc_create+0x2ce/0x8e0 [ 958.067813][T21199] __proc_create+0x2ce/0x8e0 [ 958.067834][T21199] ? __pfx___proc_create+0x10/0x10 [ 958.067861][T21199] proc_mkdir+0x81/0x170 [ 958.067881][T21199] ? __pfx_proc_mkdir+0x10/0x10 [ 958.067902][T21199] ? cache_register_net+0x137/0x5e0 [ 958.067924][T21199] cache_register_net+0x18f/0x5e0 [ 958.067944][T21199] nfsd_idmap_init+0xb6/0x250 [ 958.067965][T21199] ? __pfx_nfsd_net_init+0x10/0x10 [ 958.067981][T21199] nfsd_net_init+0x69/0x3d0 [ 958.067997][T21199] ? __pfx_nfsd_net_init+0x10/0x10 [ 958.068053][T21199] ops_init+0x1e2/0x5f0 [ 958.068079][T21199] setup_net+0x10f/0x380 [ 958.068098][T21199] ? lockdep_init_map_type+0x5c/0x280 [ 958.068120][T21199] ? __pfx_setup_net+0x10/0x10 [ 958.068141][T21199] ? debug_mutex_init+0x37/0x70 [ 958.068158][T21199] copy_net_ns+0x2a6/0x5f0 [ 958.068182][T21199] create_new_namespaces+0x3ea/0xa90 [ 958.068203][T21199] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 958.068221][T21199] ksys_unshare+0x45b/0xa40 [ 958.068241][T21199] ? __pfx_ksys_unshare+0x10/0x10 [ 958.068261][T21199] ? xfd_validate_state+0x61/0x180 [ 958.068287][T21199] __x64_sys_unshare+0x31/0x40 [ 958.068306][T21199] do_syscall_64+0xcd/0x490 [ 958.068337][T21199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.068353][T21199] RIP: 0033:0x7f262998ebe9 [ 958.068367][T21199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.068381][T21199] RSP: 002b:00007f262a7b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 958.068395][T21199] RAX: ffffffffffffffda RBX: 00007f2629bb5fa0 RCX: 00007f262998ebe9 [ 958.068406][T21199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 958.068415][T21199] RBP: 00007f2629a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 958.068424][T21199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.068434][T21199] R13: 00007f2629bb6038 R14: 00007f2629bb5fa0 R15: 00007ffe87a31ea8 [ 958.068453][T21199] [ 962.154908][T21327] random: crng reseeded on system resumption [ 962.162838][ T2932] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:8: iget: checksum invalid [ 962.246776][ T2932] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 962.258077][ T8869] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 962.327134][ T8869] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 962.372457][ T2932] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:8: iget: checksum invalid [ 962.453850][ T2932] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 962.465142][ T8869] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 962.553298][ T8869] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 962.578684][ T2932] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:8: iget: checksum invalid [ 962.601385][T21314] delete_channel: no stack [ 962.687575][ T2932] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 962.697516][ T8869] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 962.788639][ T8869] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 962.799303][ T2932] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:8: iget: checksum invalid [ 962.888059][ T2932] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 962.897188][ T8869] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:17: iget: checksum invalid [ 962.968151][ T2932] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 962.988785][ T8869] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 963.025449][ T2932] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 963.082096][ T8869] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 963.169905][ T8869] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 963.765413][T21400] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 963.856337][T21400] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 974.177786][T21514] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2543'. [ 976.894269][T21680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 976.945357][T21670] netlink: 'syz.5.2547': attribute type 12 has an invalid length. [ 977.686612][T21717] FAULT_INJECTION: forcing a failure. [ 977.686612][T21717] name failslab, interval 1, probability 0, space 0, times 0 [ 977.864054][T21717] CPU: 1 UID: 0 PID: 21717 Comm: syz.5.2552 Not tainted syzkaller #0 PREEMPT(full) [ 977.864078][T21717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 977.864087][T21717] Call Trace: [ 977.864093][T21717] [ 977.864101][T21717] dump_stack_lvl+0x16c/0x1f0 [ 977.864125][T21717] should_fail_ex+0x512/0x640 [ 977.864150][T21717] should_failslab+0xc2/0x120 [ 977.864170][T21717] __kmalloc_cache_noprof+0x6a/0x3e0 [ 977.864186][T21717] ? proc_thread_self_get_link+0x1c6/0x240 [ 977.864210][T21717] proc_thread_self_get_link+0x1c6/0x240 [ 977.864229][T21717] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 977.864248][T21717] step_into+0x195e/0x2270 [ 977.864267][T21717] ? __pfx_step_into+0x10/0x10 [ 977.864285][T21717] ? lookup_fast+0x156/0x610 [ 977.864302][T21717] walk_component+0xfc/0x5b0 [ 977.864318][T21717] link_path_walk+0x627/0xe20 [ 977.864339][T21717] path_openat+0x1b0/0x2cb0 [ 977.864354][T21717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.864376][T21717] ? __pfx_path_openat+0x10/0x10 [ 977.864398][T21717] do_filp_open+0x20b/0x470 [ 977.864415][T21717] ? __pfx_do_filp_open+0x10/0x10 [ 977.864446][T21717] ? alloc_fd+0x471/0x7d0 [ 977.864466][T21717] do_sys_openat2+0x11b/0x1d0 [ 977.864488][T21717] ? __pfx_do_sys_openat2+0x10/0x10 [ 977.864516][T21717] __x64_sys_openat+0x174/0x210 [ 977.864538][T21717] ? __pfx___x64_sys_openat+0x10/0x10 [ 977.864573][T21717] do_syscall_64+0xcd/0x490 [ 977.864602][T21717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.864617][T21717] RIP: 0033:0x7ff24ad8ebe9 [ 977.864630][T21717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.864645][T21717] RSP: 002b:00007ff248ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 977.864659][T21717] RAX: ffffffffffffffda RBX: 00007ff24afb5fa0 RCX: 00007ff24ad8ebe9 [ 977.864669][T21717] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 977.864678][T21717] RBP: 00007ff24ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 977.864687][T21717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.864697][T21717] R13: 00007ff24afb6038 R14: 00007ff24afb5fa0 R15: 00007fffd294e1f8 [ 977.864716][T21717] [ 979.654475][T21684] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 981.280126][T21891] warn_alloc: 1 callbacks suppressed [ 981.280139][T21891] syz.3.2562: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 981.486319][T21891] CPU: 1 UID: 0 PID: 21891 Comm: syz.3.2562 Not tainted syzkaller #0 PREEMPT(full) [ 981.486342][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.486352][T21891] Call Trace: [ 981.486359][T21891] [ 981.486366][T21891] dump_stack_lvl+0x16c/0x1f0 [ 981.486390][T21891] warn_alloc+0x248/0x3a0 [ 981.486410][T21891] ? __pfx_warn_alloc+0x10/0x10 [ 981.486439][T21891] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 981.486454][T21891] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 981.486471][T21891] ? __pfx___might_resched+0x10/0x10 [ 981.486487][T21891] ? rcu_is_watching+0x12/0xc0 [ 981.486503][T21891] ? trace_contention_end+0xdd/0x130 [ 981.486523][T21891] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 981.486540][T21891] ? tomoyo_path_number_perm+0x295/0x580 [ 981.486560][T21891] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 981.486574][T21891] ? __pfx___mutex_lock+0x10/0x10 [ 981.486599][T21891] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 981.486612][T21891] __vmalloc_node_noprof+0xad/0xf0 [ 981.486626][T21891] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 981.486642][T21891] dvb_demux_do_ioctl+0x54e/0x12f0 [ 981.486657][T21891] ? do_vfs_ioctl+0x128/0x14f0 [ 981.486682][T21891] dvb_usercopy+0x167/0x340 [ 981.486702][T21891] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 981.486717][T21891] ? __pfx_dvb_usercopy+0x10/0x10 [ 981.486744][T21891] ? __fget_files+0x20e/0x3c0 [ 981.486764][T21891] dvb_demux_ioctl+0x29/0x40 [ 981.486783][T21891] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 981.486804][T21891] __x64_sys_ioctl+0x18e/0x210 [ 981.486828][T21891] do_syscall_64+0xcd/0x490 [ 981.486848][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.486863][T21891] RIP: 0033:0x7f262998ebe9 [ 981.486876][T21891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.486890][T21891] RSP: 002b:00007f262a7b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.486905][T21891] RAX: ffffffffffffffda RBX: 00007f2629bb5fa0 RCX: 00007f262998ebe9 [ 981.486916][T21891] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 981.486925][T21891] RBP: 00007f2629a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 981.486933][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.486941][T21891] R13: 00007f2629bb6038 R14: 00007f2629bb5fa0 R15: 00007ffe87a31ea8 [ 981.486960][T21891] [ 981.486966][T21891] Mem-Info: [ 981.674565][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.048383][T21891] active_anon:7362 inactive_anon:50863 isolated_anon:0 [ 983.048383][T21891] active_file:19334 inactive_file:38772 isolated_file:0 [ 983.048383][T21891] unevictable:768 dirty:756 writeback:0 [ 983.048383][T21891] slab_reclaimable:12321 slab_unreclaimable:100793 [ 983.048383][T21891] mapped:53962 shmem:44818 pagetables:1349 [ 983.048383][T21891] sec_pagetables:0 bounce:0 [ 983.048383][T21891] kernel_misc_reclaimable:0 [ 983.048383][T21891] free:1254529 free_pcp:7111 free_cma:0 [ 983.094491][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.357166][T21891] Node 0 active_anon:29448kB inactive_anon:218272kB active_file:77248kB inactive_file:154956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:218468kB dirty:3020kB writeback:0kB shmem:188864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12176kB pagetables:5284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 983.389675][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.607498][T21891] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 983.638009][ C1] vkms_vblank_simulate: vblank timer overrun [ 983.857636][T21891] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 983.886509][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.066855][T21891] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 984.114440][T21891] Node 0 DMA32 free:1074156kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29404kB inactive_anon:222180kB active_file:76064kB inactive_file:154816kB unevictable:1536kB writepending:3028kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:29004kB local_pcp:29004kB free_cma:0kB [ 984.147374][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.351207][T21891] lowmem_reserve[]: 0 0 1 1 1 [ 984.392869][T21891] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 984.422099][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.630804][T21891] lowmem_reserve[]: 0 0 0 0 0 [ 984.653633][T21891] Node 1 Normal free:3906364kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4916kB local_pcp:4916kB free_cma:0kB [ 984.684965][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.919428][T21891] lowmem_reserve[]: 0 0 0 0 0 [ 984.948331][T21891] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 985.027634][T21891] Node 0 DMA32: 1*4kB (M) 2*8kB (UE) 1*16kB (M) 26*32kB (UE) 30*64kB (UME) 288*128kB (UME) 273*256kB (UME) 114*512kB (UM) 57*1024kB (UM) 8*2048kB (UM) 203*4096kB (UM) = 1074148kB [ 985.136798][T21891] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 985.215524][T21891] Node 1 Normal: 164*4kB (UME) 17*8kB (UME) 41*16kB (UME) 204*32kB (UME) 95*64kB (UME) 23*128kB (UME) 11*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 5*2048kB (UME) 945*4096kB (UM) = 3906408kB [ 985.335463][T21891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.380046][T21891] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 985.434491][T21891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 985.496823][T21891] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 985.554601][T21891] 98156 total pagecache pages [ 985.577454][T21891] 14 pages in swap cache [ 985.602154][T21891] Free swap = 124940kB [ 985.622738][T21891] Total swap = 124996kB [ 985.651502][T21891] 2097051 pages RAM [ 985.676976][T21891] 0 pages HighMem/MovableOnly [ 985.703831][T21891] 430192 pages reserved [ 985.771360][T21891] 0 pages cma reserved [ 985.942181][T22013] program syz.4.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.593568][T22028] sysfs_service_op_store: Client not running :-5: [ 987.193024][T22037] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 987.717783][T22034] cgroup: fork rejected by pids controller in /syz3 [ 988.966299][T22146] bond0: option all_slaves_active: invalid value () [ 989.594325][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.613391][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.202008][T22328] svc: failed to register nfsdv3 RPC service (errno 111). [ 993.502436][T22328] svc: failed to register nfsaclv3 RPC service (errno 111). [ 994.884215][T22369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2586'. [ 995.090915][T22369] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 995.239038][T20010] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 915 with max blocks 5 with error 117 [ 995.386250][T20010] EXT4-fs (sda1): This should not happen!! Data will be lost [ 995.386250][T20010] [ 995.469319][T20010] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 1350 with max blocks 21 with error 117 [ 995.598118][T20010] EXT4-fs (sda1): This should not happen!! Data will be lost [ 995.598118][T20010] [ 997.374242][T22451] FAULT_INJECTION: forcing a failure. [ 997.374242][T22451] name failslab, interval 1, probability 0, space 0, times 0 [ 997.736084][T22451] CPU: 1 UID: 0 PID: 22451 Comm: syz.5.2593 Not tainted syzkaller #0 PREEMPT(full) [ 997.736105][T22451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 997.736115][T22451] Call Trace: [ 997.736120][T22451] [ 997.736126][T22451] dump_stack_lvl+0x16c/0x1f0 [ 997.736150][T22451] should_fail_ex+0x512/0x640 [ 997.736170][T22451] ? __kmalloc_noprof+0xbf/0x510 [ 997.736188][T22451] ? lsm_blob_alloc+0x68/0x90 [ 997.736200][T22451] should_failslab+0xc2/0x120 [ 997.736218][T22451] __kmalloc_noprof+0xd2/0x510 [ 997.736239][T22451] lsm_blob_alloc+0x68/0x90 [ 997.736252][T22451] security_sk_alloc+0x30/0x270 [ 997.736269][T22451] sk_prot_alloc+0x1c7/0x2a0 [ 997.736293][T22451] sk_alloc+0x36/0xc20 [ 997.736310][T22451] tun_chr_open+0x80/0x5e0 [ 997.736332][T22451] ? __pfx_tun_chr_open+0x10/0x10 [ 997.736352][T22451] misc_open+0x35a/0x420 [ 997.736368][T22451] ? __pfx_misc_open+0x10/0x10 [ 997.736383][T22451] chrdev_open+0x234/0x6a0 [ 997.736401][T22451] ? __pfx_apparmor_file_open+0x10/0x10 [ 997.736418][T22451] ? __pfx_chrdev_open+0x10/0x10 [ 997.736436][T22451] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 997.736456][T22451] do_dentry_open+0x982/0x1530 [ 997.736474][T22451] ? __pfx_chrdev_open+0x10/0x10 [ 997.736495][T22451] vfs_open+0x82/0x3f0 [ 997.736518][T22451] path_openat+0x1de4/0x2cb0 [ 997.736540][T22451] ? __pfx_path_openat+0x10/0x10 [ 997.736562][T22451] do_filp_open+0x20b/0x470 [ 997.736578][T22451] ? __pfx_do_filp_open+0x10/0x10 [ 997.736608][T22451] ? alloc_fd+0x471/0x7d0 [ 997.736628][T22451] do_sys_openat2+0x11b/0x1d0 [ 997.736649][T22451] ? __pfx_do_sys_openat2+0x10/0x10 [ 997.736683][T22451] __x64_sys_openat+0x174/0x210 [ 997.736705][T22451] ? __pfx___x64_sys_openat+0x10/0x10 [ 997.736733][T22451] do_syscall_64+0xcd/0x490 [ 997.736753][T22451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.736768][T22451] RIP: 0033:0x7ff24ad8ebe9 [ 997.736781][T22451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.736795][T22451] RSP: 002b:00007ff248ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 997.736809][T22451] RAX: ffffffffffffffda RBX: 00007ff24afb5fa0 RCX: 00007ff24ad8ebe9 [ 997.736819][T22451] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 997.736828][T22451] RBP: 00007ff24ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 997.736836][T22451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.736845][T22451] R13: 00007ff24afb6038 R14: 00007ff24afb5fa0 R15: 00007fffd294e1f8 [ 997.736863][T22451] [ 997.998847][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.965586][T22527] warn_alloc: 1 callbacks suppressed [ 998.965599][T22527] syz.5.2598: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 999.339513][T22527] CPU: 1 UID: 0 PID: 22527 Comm: syz.5.2598 Not tainted syzkaller #0 PREEMPT(full) [ 999.339537][T22527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 999.339547][T22527] Call Trace: [ 999.339554][T22527] [ 999.339560][T22527] dump_stack_lvl+0x16c/0x1f0 [ 999.339586][T22527] warn_alloc+0x248/0x3a0 [ 999.339606][T22527] ? __pfx_warn_alloc+0x10/0x10 [ 999.339635][T22527] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 999.339651][T22527] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 999.339667][T22527] ? __pfx___might_resched+0x10/0x10 [ 999.339683][T22527] ? rcu_is_watching+0x12/0xc0 [ 999.339698][T22527] ? trace_contention_end+0xdd/0x130 [ 999.339718][T22527] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 999.339735][T22527] ? tomoyo_path_number_perm+0x295/0x580 [ 999.339754][T22527] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 999.339767][T22527] ? __pfx___mutex_lock+0x10/0x10 [ 999.339792][T22527] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 999.339805][T22527] __vmalloc_node_noprof+0xad/0xf0 [ 999.339819][T22527] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 999.339835][T22527] dvb_demux_do_ioctl+0x54e/0x12f0 [ 999.339851][T22527] ? do_vfs_ioctl+0x128/0x14f0 [ 999.339875][T22527] dvb_usercopy+0x167/0x340 [ 999.339895][T22527] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 999.339910][T22527] ? __pfx_dvb_usercopy+0x10/0x10 [ 999.339937][T22527] ? __fget_files+0x20e/0x3c0 [ 999.339956][T22527] dvb_demux_ioctl+0x29/0x40 [ 999.339976][T22527] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 999.339996][T22527] __x64_sys_ioctl+0x18e/0x210 [ 999.340020][T22527] do_syscall_64+0xcd/0x490 [ 999.340040][T22527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.340055][T22527] RIP: 0033:0x7ff24ad8ebe9 [ 999.340069][T22527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.340084][T22527] RSP: 002b:00007ff248ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.340099][T22527] RAX: ffffffffffffffda RBX: 00007ff24afb5fa0 RCX: 00007ff24ad8ebe9 [ 999.340109][T22527] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 999.340118][T22527] RBP: 00007ff24ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 999.340127][T22527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.340136][T22527] R13: 00007ff24afb6038 R14: 00007ff24afb5fa0 R15: 00007fffd294e1f8 [ 999.340156][T22527] [ 999.340163][T22527] Mem-Info: [ 1002.597879][T22527] active_anon:7360 inactive_anon:32095 isolated_anon:0 [ 1002.597879][T22527] active_file:20131 inactive_file:39393 isolated_file:0 [ 1002.597879][T22527] unevictable:777 dirty:536 writeback:0 [ 1002.597879][T22527] slab_reclaimable:12432 slab_unreclaimable:98815 [ 1002.597879][T22527] mapped:37622 shmem:28012 pagetables:1229 [ 1002.597879][T22527] sec_pagetables:0 bounce:0 [ 1002.597879][T22527] kernel_misc_reclaimable:0 [ 1002.597879][T22527] free:1267631 free_pcp:13177 free_cma:0 [ 1002.643674][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.134865][T22708] FAULT_INJECTION: forcing a failure. [ 1003.134865][T22708] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1003.246024][T22708] CPU: 1 UID: 0 PID: 22708 Comm: syz.3.2606 Not tainted syzkaller #0 PREEMPT(full) [ 1003.246047][T22708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1003.246057][T22708] Call Trace: [ 1003.246063][T22708] [ 1003.246070][T22708] dump_stack_lvl+0x16c/0x1f0 [ 1003.246095][T22708] should_fail_ex+0x512/0x640 [ 1003.246120][T22708] should_fail_alloc_page+0xe7/0x130 [ 1003.246141][T22708] prepare_alloc_pages+0x3c2/0x610 [ 1003.246177][T22708] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1003.246200][T22708] ? find_held_lock+0x2b/0x80 [ 1003.246216][T22708] ? is_bpf_text_address+0x8a/0x1a0 [ 1003.246234][T22708] ? bpf_ksym_find+0x124/0x1c0 [ 1003.246249][T22708] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1003.246270][T22708] ? register_lock_class+0x41/0x4c0 [ 1003.246294][T22708] ? __lock_acquire+0xb97/0x1ce0 [ 1003.246314][T22708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1003.246336][T22708] ? policy_nodemask+0xea/0x4e0 [ 1003.246356][T22708] alloc_pages_mpol+0x1fb/0x550 [ 1003.246376][T22708] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1003.246401][T22708] alloc_pages_noprof+0x131/0x390 [ 1003.246420][T22708] __pmd_alloc+0x3b/0x930 [ 1003.246444][T22708] huge_pte_alloc+0x41d/0x5b0 [ 1003.246460][T22708] hugetlb_fault+0x373/0x2f40 [ 1003.246477][T22708] ? __pfx_hugetlb_fault+0x10/0x10 [ 1003.246499][T22708] ? find_vma+0xbf/0x140 [ 1003.246517][T22708] ? __pfx_find_vma+0x10/0x10 [ 1003.246538][T22708] handle_mm_fault+0xbfa/0xd10 [ 1003.246553][T22708] ? __bpf_trace_exceptions+0x1/0x40 [ 1003.246577][T22708] do_user_addr_fault+0x7a6/0x1370 [ 1003.246601][T22708] ? rcu_is_watching+0x12/0xc0 [ 1003.246619][T22708] exc_page_fault+0x5c/0xb0 [ 1003.246637][T22708] asm_exc_page_fault+0x26/0x30 [ 1003.246651][T22708] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1003.246668][T22708] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1003.246682][T22708] RSP: 0018:ffffc9000b8e7950 EFLAGS: 00050246 [ 1003.246695][T22708] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 1003.246704][T22708] RDX: fffff5200171cf43 RSI: 0000000000000000 RDI: ffffc9000b8e7a10 [ 1003.246713][T22708] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff5200171cf42 [ 1003.246722][T22708] R10: ffffc9000b8e7a17 R11: 0000000000000000 R12: 0000000000000000 [ 1003.246730][T22708] R13: ffffc9000b8e7a10 R14: ffffffff89610210 R15: ffff888077ffa500 [ 1003.246740][T22708] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1003.246772][T22708] _copy_from_user+0x98/0xd0 [ 1003.246795][T22708] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 1003.246823][T22708] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 1003.246847][T22708] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1003.246870][T22708] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1003.246893][T22708] ? __local_bh_enable_ip+0xa4/0x120 [ 1003.246911][T22708] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1003.246932][T22708] sctp_getsockopt+0x124f/0x69b0 [ 1003.246954][T22708] ? __futex_wait+0x24c/0x2f0 [ 1003.246976][T22708] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1003.247009][T22708] ? __lock_acquire+0xb97/0x1ce0 [ 1003.247038][T22708] ? find_held_lock+0x2b/0x80 [ 1003.247051][T22708] ? __might_fault+0xe3/0x190 [ 1003.247067][T22708] ? __might_fault+0xe3/0x190 [ 1003.247084][T22708] ? __might_fault+0x13b/0x190 [ 1003.247107][T22708] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1003.247129][T22708] do_sock_getsockopt+0x34a/0x440 [ 1003.247161][T22708] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1003.247183][T22708] ? __fget_files+0x204/0x3c0 [ 1003.247209][T22708] __sys_getsockopt+0x123/0x1b0 [ 1003.247232][T22708] __x64_sys_getsockopt+0xbd/0x160 [ 1003.247250][T22708] ? do_syscall_64+0x91/0x490 [ 1003.247268][T22708] ? lockdep_hardirqs_on+0x7c/0x110 [ 1003.247286][T22708] do_syscall_64+0xcd/0x490 [ 1003.247306][T22708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.247320][T22708] RIP: 0033:0x7f262998ebe9 [ 1003.247333][T22708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.247347][T22708] RSP: 002b:00007f262a790038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1003.247361][T22708] RAX: ffffffffffffffda RBX: 00007f2629bb6090 RCX: 00007f262998ebe9 [ 1003.247370][T22708] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 1003.247379][T22708] RBP: 00007f2629a11e19 R08: 0000200000000280 R09: 0000000000000000 [ 1003.247389][T22708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.247398][T22708] R13: 00007f2629bb6128 R14: 00007f2629bb6090 R15: 00007ffe87a31ea8 [ 1003.247418][T22708] [ 1003.695475][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.299151][T22527] Node 0 active_anon:29552kB inactive_anon:125664kB active_file:80740kB inactive_file:157128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:189404kB dirty:1676kB writeback:0kB shmem:109768kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12240kB pagetables:5388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1005.331651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.470569][T22527] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1005.500859][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.598402][T22527] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1005.627204][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.726953][T22527] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1005.747160][T22527] Node 0 DMA32 free:1141704kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29516kB inactive_anon:125836kB active_file:79552kB inactive_file:156992kB unevictable:1536kB writepending:1776kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:54444kB local_pcp:54444kB free_cma:0kB [ 1005.780081][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.873212][T22527] lowmem_reserve[]: 0 0 1 1 1 [ 1005.889633][T22527] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1005.919107][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.001002][T22527] lowmem_reserve[]: 0 0 0 0 0 [ 1006.018257][T22527] Node 1 Normal free:3899812kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11516kB local_pcp:11516kB free_cma:0kB [ 1006.049720][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.160143][T22527] lowmem_reserve[]: 0 0 0 0 0 [ 1006.178718][T22527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1006.230546][T22527] Node 0 DMA32: 2374*4kB (UM) 2266*8kB (UME) 1648*16kB (UM) 751*32kB (UME) 370*64kB (UME) 145*128kB (UME) 268*256kB (ME) 105*512kB (UM) 58*1024kB (UM) 6*2048kB (M) 202*4096kB (UM) = 1141704kB [ 1006.298929][T22527] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1006.347096][T22527] Node 1 Normal: 170*4kB (UME) 17*8kB (UME) 42*16kB (UME) 206*32kB (UME) 97*64kB (UME) 24*128kB (UME) 12*256kB (UM) 5*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (UM) = 3899856kB [ 1006.407433][T22527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.446272][T22527] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1006.479729][T22527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1006.517834][T22527] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1006.550466][T22527] 87509 total pagecache pages [ 1006.567778][T22527] 41 pages in swap cache [ 1006.596927][T22527] Free swap = 124832kB [ 1006.601111][T22527] Total swap = 124996kB [ 1006.627231][T22527] 2097051 pages RAM [ 1006.631070][T22527] 0 pages HighMem/MovableOnly [ 1006.653712][T22527] 430192 pages reserved [ 1006.664276][T22527] 0 pages cma reserved [ 1008.286732][T22842] vivid-007: ================= START STATUS ================= [ 1008.334363][T22842] vivid-007: Generate PTS: true [ 1008.373984][T22842] vivid-007: Generate SCR: true [ 1008.389586][T22842] tpg source WxH: 320x240 (Y'CbCr) [ 1008.439325][T22842] tpg field: 1 [ 1008.456118][T22842] tpg crop: (0,0)/320x240 [ 1008.460460][T22842] tpg compose: (0,0)/320x240 [ 1008.547815][T22842] tpg colorspace: 8 [ 1008.551648][T22842] tpg transfer function: 0/0 [ 1008.628840][T22842] tpg Y'CbCr encoding: 0/0 [ 1008.633374][T22842] tpg quantization: 0/0 [ 1008.701813][T22842] tpg RGB range: 0/2 [ 1008.735999][T22842] vivid-007: ================== END STATUS ================== [ 1009.015289][T22873] can: request_module (can-proto-3) failed. [ 1009.924533][T22896] syz.0.2621: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1010.029497][T22896] CPU: 1 UID: 0 PID: 22896 Comm: syz.0.2621 Not tainted syzkaller #0 PREEMPT(full) [ 1010.029520][T22896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1010.029530][T22896] Call Trace: [ 1010.029536][T22896] [ 1010.029543][T22896] dump_stack_lvl+0x16c/0x1f0 [ 1010.029574][T22896] warn_alloc+0x248/0x3a0 [ 1010.029594][T22896] ? __pfx_warn_alloc+0x10/0x10 [ 1010.029623][T22896] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1010.029639][T22896] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1010.029655][T22896] ? __pfx___might_resched+0x10/0x10 [ 1010.029672][T22896] ? rcu_is_watching+0x12/0xc0 [ 1010.029687][T22896] ? trace_contention_end+0xdd/0x130 [ 1010.029706][T22896] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1010.029723][T22896] ? tomoyo_path_number_perm+0x295/0x580 [ 1010.029743][T22896] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1010.029757][T22896] ? __pfx___mutex_lock+0x10/0x10 [ 1010.029782][T22896] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1010.029795][T22896] __vmalloc_node_noprof+0xad/0xf0 [ 1010.029809][T22896] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1010.029824][T22896] dvb_demux_do_ioctl+0x54e/0x12f0 [ 1010.029840][T22896] ? do_vfs_ioctl+0x128/0x14f0 [ 1010.029864][T22896] dvb_usercopy+0x167/0x340 [ 1010.029884][T22896] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1010.029899][T22896] ? __pfx_dvb_usercopy+0x10/0x10 [ 1010.029927][T22896] ? __fget_files+0x20e/0x3c0 [ 1010.029949][T22896] dvb_demux_ioctl+0x29/0x40 [ 1010.029969][T22896] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1010.029989][T22896] __x64_sys_ioctl+0x18e/0x210 [ 1010.030013][T22896] do_syscall_64+0xcd/0x490 [ 1010.030034][T22896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.030049][T22896] RIP: 0033:0x7fe91238ebe9 [ 1010.030062][T22896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.030076][T22896] RSP: 002b:00007fe913112038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.030091][T22896] RAX: ffffffffffffffda RBX: 00007fe9125b5fa0 RCX: 00007fe91238ebe9 [ 1010.030101][T22896] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1010.030110][T22896] RBP: 00007fe912411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1010.030120][T22896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.030129][T22896] R13: 00007fe9125b6038 R14: 00007fe9125b5fa0 R15: 00007ffca4504af8 [ 1010.030148][T22896] [ 1010.030155][T22896] Mem-Info: [ 1010.294424][T22899] ubi0: attaching mtd0 [ 1010.315924][T22899] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 1011.101697][T22966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2626'. [ 1011.137500][T22966] team_slave_0: entered allmulticast mode [ 1011.312691][T22951] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input54 [ 1011.486968][T22896] active_anon:7358 inactive_anon:22394 isolated_anon:0 [ 1011.486968][T22896] active_file:20163 inactive_file:43457 isolated_file:0 [ 1011.486968][T22896] unevictable:768 dirty:4206 writeback:0 [ 1011.486968][T22896] slab_reclaimable:12543 slab_unreclaimable:98872 [ 1011.486968][T22896] mapped:37713 shmem:17204 pagetables:1289 [ 1011.486968][T22896] sec_pagetables:0 bounce:0 [ 1011.486968][T22896] kernel_misc_reclaimable:0 [ 1011.486968][T22896] free:1278845 free_pcp:7110 free_cma:0 [ 1011.853784][T22896] Node 0 active_anon:29432kB inactive_anon:92540kB active_file:80564kB inactive_file:173696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158716kB dirty:16820kB writeback:0kB shmem:71856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12464kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1012.122111][T22896] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1012.313068][T22896] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.551365][T22896] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1012.594405][T22896] Node 0 DMA32 free:1197680kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31188kB inactive_anon:92948kB active_file:79340kB inactive_file:173596kB unevictable:1536kB writepending:16824kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:14664kB local_pcp:14664kB free_cma:0kB [ 1012.843352][T22896] lowmem_reserve[]: 0 0 1 1 1 [ 1012.890220][T22896] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1013.090227][T22896] lowmem_reserve[]: 0 0 0 0 0 [ 1013.134444][T22896] Node 1 Normal free:3900360kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11012kB local_pcp:11012kB free_cma:0kB [ 1013.351398][T22896] lowmem_reserve[]: 0 0 0 0 0 [ 1013.384581][T22896] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1013.471914][T22896] Node 0 DMA32: 8629*4kB (UM) 2643*8kB (UME) 2001*16kB (UM) 1065*32kB (UME) 474*64kB (UME) 247*128kB (UME) 270*256kB (UME) 108*512kB (UM) 58*1024kB (UM) 8*2048kB (M) 198*4096kB (UM) = 1194908kB [ 1013.595285][T22896] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1013.717843][T22896] Node 1 Normal: 172*4kB (UME) 19*8kB (UME) 42*16kB (UME) 207*32kB (UME) 98*64kB (UME) 25*128kB (UME) 13*256kB (UM) 5*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (UM) = 3900360kB [ 1013.862619][T22896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1013.942215][T22896] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1014.012279][T22896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1014.097739][T22896] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1014.153931][T23029] vivid-003: ================= START STATUS ================= [ 1014.161793][T22896] 85305 total pagecache pages [ 1014.188604][T22896] 14 pages in swap cache [ 1014.199094][T23029] vivid-003: Radio HW Seek Mode: Bounded [ 1014.205272][T22896] Free swap = 124940kB [ 1014.251654][T22896] Total swap = 124996kB [ 1014.258196][T23029] vivid-003: Radio Programmable HW Seek: false [ 1014.264372][T23029] vivid-003: RDS Rx I/O Mode: Block I/O [ 1014.289700][T22896] 2097051 pages RAM [ 1014.308972][T22896] 0 pages HighMem/MovableOnly [ 1014.346625][T22896] 430192 pages reserved [ 1014.357508][T23029] vivid-003: Generate RBDS Instead of RDS: false [ 1014.370107][T22896] 0 pages cma reserved [ 1014.495583][T23029] vivid-003: RDS Reception: true [ 1014.560909][T23029] vivid-003: RDS Program Type: 0 inactive [ 1014.733719][T23029] vivid-003: RDS PS Name: inactive [ 1014.875822][T23029] vivid-003: RDS Radio Text: inactive [ 1015.110816][T23029] vivid-003: RDS Traffic Announcement: false inactive [ 1015.230496][T23105] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 1015.284414][T23029] vivid-003: RDS Traffic Program: false inactive [ 1015.375989][T23029] vivid-003: RDS Music: false inactive [ 1015.484088][T23029] vivid-003: ================== END STATUS ================== [ 1016.846684][T23165] FAULT_INJECTION: forcing a failure. [ 1016.846684][T23165] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.967927][T23165] CPU: 1 UID: 0 PID: 23165 Comm: syz.3.2647 Not tainted syzkaller #0 PREEMPT(full) [ 1016.967950][T23165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1016.967960][T23165] Call Trace: [ 1016.967966][T23165] [ 1016.967973][T23165] dump_stack_lvl+0x16c/0x1f0 [ 1016.967998][T23165] should_fail_ex+0x512/0x640 [ 1016.968019][T23165] ? fs_reclaim_acquire+0xae/0x150 [ 1016.968043][T23165] ? tomoyo_encode2+0x100/0x3e0 [ 1016.968062][T23165] should_failslab+0xc2/0x120 [ 1016.968080][T23165] __kmalloc_noprof+0xd2/0x510 [ 1016.968096][T23165] ? d_absolute_path+0x136/0x1a0 [ 1016.968120][T23165] tomoyo_encode2+0x100/0x3e0 [ 1016.968143][T23165] tomoyo_encode+0x29/0x50 [ 1016.968161][T23165] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1016.968187][T23165] tomoyo_path_number_perm+0x245/0x580 [ 1016.968203][T23165] ? tomoyo_path_number_perm+0x237/0x580 [ 1016.968222][T23165] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1016.968258][T23165] ? d_alloc_parallel+0xae4/0x1480 [ 1016.968280][T23165] ? current_check_access_path+0x33c/0x460 [ 1016.968303][T23165] ? __pfx_current_check_access_path+0x10/0x10 [ 1016.968329][T23165] tomoyo_path_mknod+0x10c/0x190 [ 1016.968342][T23165] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1016.968358][T23165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1016.968383][T23165] security_path_mknod+0x161/0x310 [ 1016.968402][T23165] lookup_open.isra.0+0xc17/0x1580 [ 1016.968421][T23165] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1016.968446][T23165] ? __pfx_down_write+0x10/0x10 [ 1016.968466][T23165] ? mnt_get_write_access+0x20c/0x300 [ 1016.968490][T23165] path_openat+0x893/0x2cb0 [ 1016.968513][T23165] ? __pfx_path_openat+0x10/0x10 [ 1016.968535][T23165] do_filp_open+0x20b/0x470 [ 1016.968552][T23165] ? __pfx_do_filp_open+0x10/0x10 [ 1016.968583][T23165] ? alloc_fd+0x471/0x7d0 [ 1016.968604][T23165] do_sys_openat2+0x11b/0x1d0 [ 1016.968625][T23165] ? __pfx_do_sys_openat2+0x10/0x10 [ 1016.968645][T23165] ? fput+0x9b/0xd0 [ 1016.968664][T23165] ? __sys_sendmsg+0x18c/0x220 [ 1016.968688][T23165] __x64_sys_openat+0x174/0x210 [ 1016.968710][T23165] ? __pfx___x64_sys_openat+0x10/0x10 [ 1016.968740][T23165] do_syscall_64+0xcd/0x490 [ 1016.968762][T23165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.968776][T23165] RIP: 0033:0x7f262998ebe9 [ 1016.968790][T23165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.968805][T23165] RSP: 002b:00007f262a7b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1016.968820][T23165] RAX: ffffffffffffffda RBX: 00007f2629bb5fa0 RCX: 00007f262998ebe9 [ 1016.968830][T23165] RDX: 0000000000042040 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1016.968839][T23165] RBP: 00007f2629a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1016.968857][T23165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.968866][T23165] R13: 00007f2629bb6038 R14: 00007f2629bb5fa0 R15: 00007ffe87a31ea8 [ 1016.968886][T23165] [ 1016.968904][T23165] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1018.163724][T23197] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1021.480256][T23383] warn_alloc: 2 callbacks suppressed [ 1021.480268][T23383] syz.3.2664: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1021.609763][T23383] CPU: 1 UID: 0 PID: 23383 Comm: syz.3.2664 Not tainted syzkaller #0 PREEMPT(full) [ 1021.609787][T23383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1021.609797][T23383] Call Trace: [ 1021.609803][T23383] [ 1021.609810][T23383] dump_stack_lvl+0x16c/0x1f0 [ 1021.609837][T23383] warn_alloc+0x248/0x3a0 [ 1021.609857][T23383] ? __pfx_warn_alloc+0x10/0x10 [ 1021.609887][T23383] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1021.609902][T23383] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1021.609919][T23383] ? __pfx___might_resched+0x10/0x10 [ 1021.609935][T23383] ? rcu_is_watching+0x12/0xc0 [ 1021.609951][T23383] ? trace_contention_end+0xdd/0x130 [ 1021.609971][T23383] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1021.609988][T23383] ? tomoyo_path_number_perm+0x295/0x580 [ 1021.610007][T23383] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1021.610020][T23383] ? __pfx___mutex_lock+0x10/0x10 [ 1021.610046][T23383] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1021.610059][T23383] __vmalloc_node_noprof+0xad/0xf0 [ 1021.610073][T23383] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1021.610088][T23383] dvb_demux_do_ioctl+0x54e/0x12f0 [ 1021.610104][T23383] ? do_vfs_ioctl+0x128/0x14f0 [ 1021.610128][T23383] dvb_usercopy+0x167/0x340 [ 1021.610148][T23383] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1021.610162][T23383] ? __pfx_dvb_usercopy+0x10/0x10 [ 1021.610191][T23383] ? __fget_files+0x20e/0x3c0 [ 1021.610211][T23383] dvb_demux_ioctl+0x29/0x40 [ 1021.610231][T23383] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1021.610251][T23383] __x64_sys_ioctl+0x18e/0x210 [ 1021.610275][T23383] do_syscall_64+0xcd/0x490 [ 1021.610296][T23383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.610312][T23383] RIP: 0033:0x7f262998ebe9 [ 1021.610324][T23383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.610339][T23383] RSP: 002b:00007f262a7b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.610354][T23383] RAX: ffffffffffffffda RBX: 00007f2629bb5fa0 RCX: 00007f262998ebe9 [ 1021.610364][T23383] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1021.610373][T23383] RBP: 00007f2629a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1021.610383][T23383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.610392][T23383] R13: 00007f2629bb6038 R14: 00007f2629bb5fa0 R15: 00007ffe87a31ea8 [ 1021.610411][T23383] [ 1021.610417][T23383] Mem-Info: [ 1022.917100][T23383] active_anon:7364 inactive_anon:51287 isolated_anon:0 [ 1022.917100][T23383] active_file:20228 inactive_file:43397 isolated_file:0 [ 1022.917100][T23383] unevictable:768 dirty:4260 writeback:0 [ 1022.917100][T23383] slab_reclaimable:12531 slab_unreclaimable:99441 [ 1022.917100][T23383] mapped:36710 shmem:47380 pagetables:1254 [ 1022.917100][T23383] sec_pagetables:0 bounce:0 [ 1022.917100][T23383] kernel_misc_reclaimable:0 [ 1022.917100][T23383] free:1247864 free_pcp:8245 free_cma:0 [ 1023.227856][T23383] Node 0 active_anon:29456kB inactive_anon:204212kB active_file:80824kB inactive_file:173456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145768kB dirty:10904kB writeback:6144kB shmem:191052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12304kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1023.426705][T23383] Node 1 active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1023.633931][T23383] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1023.820666][T23383] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1023.863459][T23383] Node 0 DMA32 free:1071756kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29404kB inactive_anon:209864kB active_file:79588kB inactive_file:173364kB unevictable:1536kB writepending:12952kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:20692kB local_pcp:20692kB free_cma:0kB [ 1024.144777][T23383] lowmem_reserve[]: 0 0 1 1 1 [ 1024.180003][T23383] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1024.364729][T23383] lowmem_reserve[]: 0 0 0 0 0 [ 1024.369547][T23383] Node 1 Normal free:3901368kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10012kB local_pcp:10012kB free_cma:0kB [ 1024.582216][T23383] lowmem_reserve[]: 0 0 0 0 0 [ 1024.611428][T23383] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1024.674840][T23383] Node 0 DMA32: 0*4kB 1*8kB (E) 86*16kB (UM) 229*32kB (UME) 285*64kB (UME) 247*128kB (UME) 270*256kB (UME) 108*512kB (UM) 58*1024kB (UM) 6*2048kB (M) 198*4096kB (UM) = 1065672kB [ 1024.798340][T23383] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1024.861907][T23383] Node 1 Normal: 170*4kB (UME) 18*8kB (UME) 42*16kB (UME) 207*32kB (UME) 98*64kB (UME) 25*128kB (UME) 13*256kB (UM) 7*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 945*4096kB (UM) = 3901368kB [ 1024.958997][T23383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.006137][T23383] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1025.051913][T23383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.102088][T23383] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1025.148618][T23383] 110070 total pagecache pages [ 1025.173501][T23383] 14 pages in swap cache [ 1025.202061][T23383] Free swap = 124940kB [ 1025.224218][T23383] Total swap = 124996kB [ 1025.254320][T23383] 2097051 pages RAM [ 1025.273429][T23383] 0 pages HighMem/MovableOnly [ 1025.295522][T23383] 430192 pages reserved [ 1025.309841][T23383] 0 pages cma reserved [ 1027.105309][ T30] audit: type=1326 audit(4294972209.410:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23568 comm="syz.0.2676" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe91238ebe9 code=0x0 [ 1027.205791][T23577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2676'. [ 1027.245591][ T30] audit: type=1326 audit(4294972209.410:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23568 comm="syz.0.2676" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe91238ebe9 code=0x0 [ 1027.267563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1027.279045][T23577] team0: left allmulticast mode [ 1027.339725][T23577] team_slave_0: left allmulticast mode [ 1027.364916][T23577] team_slave_1: left allmulticast mode [ 1027.415606][T23577] team0: left promiscuous mode [ 1027.432477][T23577] team_slave_0: left promiscuous mode [ 1027.464836][T23577] team_slave_1: left promiscuous mode [ 1027.488665][T23577] bridge0: port 3(team0) entered disabled state [ 1027.517210][T23577] bridge_slave_1: left allmulticast mode [ 1027.532830][T23577] bridge_slave_1: left promiscuous mode [ 1027.569260][T23577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.610275][T23577] bridge_slave_0: left allmulticast mode [ 1027.640665][T23577] bridge_slave_0: left promiscuous mode [ 1027.670503][T23577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.795941][T23584] blktrace: Concurrent blktraces are not allowed on ram4 [ 1030.175399][T23668] zswap: compressor 000 not available [ 1031.173146][ T30] audit: type=1326 audit(4294972213.499:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23739 comm="syz.3.2694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f262998ebe9 code=0x0 [ 1032.411080][T23761] openvswitch: netlink: Message has 8 unknown bytes. [ 1033.234728][T23887] warn_alloc: 1 callbacks suppressed [ 1033.234742][T23887] syz.5.2703: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1033.338367][T23887] CPU: 1 UID: 0 PID: 23887 Comm: syz.5.2703 Not tainted syzkaller #0 PREEMPT(full) [ 1033.338391][T23887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.338401][T23887] Call Trace: [ 1033.338407][T23887] [ 1033.338413][T23887] dump_stack_lvl+0x16c/0x1f0 [ 1033.338439][T23887] warn_alloc+0x248/0x3a0 [ 1033.338458][T23887] ? __pfx_warn_alloc+0x10/0x10 [ 1033.338487][T23887] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.338502][T23887] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1033.338518][T23887] ? __pfx___might_resched+0x10/0x10 [ 1033.338535][T23887] ? rcu_is_watching+0x12/0xc0 [ 1033.338550][T23887] ? trace_contention_end+0xdd/0x130 [ 1033.338570][T23887] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.338586][T23887] ? tomoyo_path_number_perm+0x295/0x580 [ 1033.338605][T23887] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1033.338618][T23887] ? __pfx___mutex_lock+0x10/0x10 [ 1033.338643][T23887] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.338656][T23887] __vmalloc_node_noprof+0xad/0xf0 [ 1033.338670][T23887] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.338686][T23887] dvb_demux_do_ioctl+0x54e/0x12f0 [ 1033.338702][T23887] ? do_vfs_ioctl+0x128/0x14f0 [ 1033.338726][T23887] dvb_usercopy+0x167/0x340 [ 1033.338746][T23887] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1033.338761][T23887] ? __pfx_dvb_usercopy+0x10/0x10 [ 1033.338789][T23887] ? __fget_files+0x20e/0x3c0 [ 1033.338809][T23887] dvb_demux_ioctl+0x29/0x40 [ 1033.338829][T23887] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1033.338849][T23887] __x64_sys_ioctl+0x18e/0x210 [ 1033.338872][T23887] do_syscall_64+0xcd/0x490 [ 1033.338893][T23887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.338908][T23887] RIP: 0033:0x7ff24ad8ebe9 [ 1033.338921][T23887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.338935][T23887] RSP: 002b:00007ff248ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.338949][T23887] RAX: ffffffffffffffda RBX: 00007ff24afb5fa0 RCX: 00007ff24ad8ebe9 [ 1033.338959][T23887] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1033.338968][T23887] RBP: 00007ff24ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1033.338977][T23887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.338986][T23887] R13: 00007ff24afb6038 R14: 00007ff24afb5fa0 R15: 00007fffd294e1f8 [ 1033.339006][T23887] [ 1033.339013][T23887] Mem-Info: [ 1034.089602][T23915] vhci_hcd: invalid port number 21 [ 1034.481959][T23887] active_anon:6529 inactive_anon:11153 isolated_anon:0 [ 1034.481959][T23887] active_file:18216 inactive_file:39394 isolated_file:0 [ 1034.481959][T23887] unevictable:768 dirty:539 writeback:0 [ 1034.481959][T23887] slab_reclaimable:12505 slab_unreclaimable:98673 [ 1034.481959][T23887] mapped:33480 shmem:7653 pagetables:1267 [ 1034.481959][T23887] sec_pagetables:0 bounce:0 [ 1034.481959][T23887] kernel_misc_reclaimable:0 [ 1034.481959][T23887] free:1291120 free_pcp:12503 free_cma:0 [ 1034.784869][T23887] Node 0 active_anon:26116kB inactive_anon:49968kB active_file:72832kB inactive_file:157444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139248kB dirty:2152kB writeback:0kB shmem:30324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:5112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1034.996788][T23887] Node 1 active_anon:0kB inactive_anon:104kB active_file:32kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1035.195479][T23887] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1035.371470][T23887] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1035.407574][T23887] Node 0 DMA32 free:1247844kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26068kB inactive_anon:51876kB active_file:71604kB inactive_file:157356kB unevictable:1536kB writepending:1844kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:29980kB local_pcp:29980kB free_cma:0kB [ 1035.655466][T23887] lowmem_reserve[]: 0 0 1 1 1 [ 1035.695675][T23887] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1035.911720][T23887] lowmem_reserve[]: 0 0 0 0 0 [ 1035.942242][T23887] Node 1 Normal free:3900808kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:44kB active_file:32kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10664kB local_pcp:10664kB free_cma:0kB [ 1036.184824][T23887] lowmem_reserve[]: 0 0 0 0 0 [ 1036.189707][T23887] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1036.298438][T23887] Node 0 DMA32: 3800*4kB (UM) 3132*8kB (UME) 1796*16kB (UM) 1660*32kB (UME) 781*64kB (UME) 330*128kB (UME) 277*256kB (UME) 109*512kB (UM) 59*1024kB (UM) 9*2048kB (UM) 202*4096kB (UM) = 1247296kB [ 1036.482678][T23887] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1036.603232][T23887] Node 1 Normal: 170*4kB (UME) 16*8kB (UME) 40*16kB (UME) 205*32kB (UME) 95*64kB (UME) 23*128kB (UME) 11*256kB (UM) 6*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (UM) = 3900808kB [ 1036.643430][T23998] kafs: addr_prefs: Too many elements in string [ 1036.768077][T23887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1036.863889][T23887] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1036.965605][T23887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1037.067041][T23887] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1037.131900][T23887] 68643 total pagecache pages [ 1037.168443][T23887] 14 pages in swap cache [ 1037.190333][T23887] Free swap = 124940kB [ 1037.271445][T23887] Total swap = 124996kB [ 1037.297864][T23887] 2097051 pages RAM [ 1037.322975][T23887] 0 pages HighMem/MovableOnly [ 1037.341259][T23887] 430192 pages reserved [ 1037.349262][T24022] __vm_enough_memory: pid: 24022, comm: syz.3.2712, bytes: 4398046511104 not enough memory for the allocation [ 1037.392723][T23887] 0 pages cma reserved [ 1038.711670][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2717'. [ 1046.402480][T24462] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1048.740207][T24603] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2755: iget: checksum invalid [ 1049.010634][T24603] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1049.072998][T24603] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2755: iget: checksum invalid [ 1049.140278][T24603] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1049.281315][T24603] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2755: iget: checksum invalid [ 1049.379636][T24603] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1049.445294][T24603] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.2755: iget: checksum invalid [ 1049.510675][T24603] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1049.548630][T24603] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1049.606214][T24603] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1049.693729][T24672] lo: entered allmulticast mode [ 1049.708894][T24672] lo: left allmulticast mode [ 1050.564724][ T30] audit: type=1804 audit(4294972232.980:34): pid=24754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2761" name="/newroot/117/file0" dev="tmpfs" ino=637 res=1 errno=0 [ 1050.740951][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1050.747795][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.776608][ T30] audit: type=1804 audit(4294972233.010:35): pid=24754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2761" name="/newroot/117/file0" dev="tmpfs" ino=637 res=1 errno=0 [ 1053.225269][ T30] audit: type=1800 audit(4294972235.643:36): pid=24909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2774" name="members" dev="configfs" ino=87052 res=0 errno=0 [ 1053.567586][T24926] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.2775: iget: checksum invalid [ 1053.711406][T24926] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1053.811168][T24926] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.2775: iget: checksum invalid [ 1053.997099][T22314] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:18: iget: checksum invalid [ 1054.038194][T24926] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1054.108738][T22314] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 1054.130793][T24926] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.2775: iget: checksum invalid [ 1054.200913][T24926] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1054.211845][T22314] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:18: iget: checksum invalid [ 1054.284067][T22314] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 1054.294808][T24926] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.2775: iget: checksum invalid [ 1054.353602][T24926] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1054.365845][T22314] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:18: iget: checksum invalid [ 1054.438036][T24926] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1054.452559][T22314] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 1054.517152][T24926] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1054.529847][T22314] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:18: iget: checksum invalid [ 1054.613199][T22314] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1054.679144][T22314] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 1054.752511][T22314] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 1059.695552][T25049] Process accounting resumed [ 1065.418001][T24941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1065.424226][T24941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1065.449376][T24941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1065.455620][T24941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1065.477496][T24941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1065.485380][T24941] CPU0 is offline. [ 1065.497115][T24933] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1066.084300][T25086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 1066.169642][ T30] audit: type=1800 audit(4294972248.643:37): pid=25100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2790" name="members" dev="configfs" ino=87370 res=0 errno=0 [ 1066.305721][T25088] zswap: compressor not available [ 1067.457942][T15253] Bluetooth: hci3: command 0x0406 tx timeout [ 1067.464012][ T5864] Bluetooth: hci2: command 0x0c1a tx timeout [ 1067.470410][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout [ 1067.476508][T17310] Bluetooth: hci4: command 0x0406 tx timeout [ 1067.537087][T25140] Bluetooth: hci1: command 0x0c1a tx timeout [ 1067.893400][T25156] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2800'. [ 1069.019664][T25188] random: crng reseeded on system resumption [ 1069.065694][T20010] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:3: iget: checksum invalid [ 1069.117819][T22312] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:16: iget: checksum invalid [ 1069.132492][T20010] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1069.182218][T22312] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 1069.205968][T20010] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:3: iget: checksum invalid [ 1069.254094][T22312] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:16: iget: checksum invalid [ 1069.269246][T20010] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1069.340588][T22312] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 1069.351084][T20010] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:3: iget: checksum invalid [ 1069.432713][T20010] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1069.443543][T22312] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:16: iget: checksum invalid [ 1069.468358][T25208] FAULT_INJECTION: forcing a failure. [ 1069.468358][T25208] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1069.521650][T22312] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 1069.532816][T20010] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:3: iget: checksum invalid [ 1069.559351][T25208] CPU: 1 UID: 0 PID: 25208 Comm: syz.3.2810 Not tainted syzkaller #0 PREEMPT(full) [ 1069.559378][T25208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1069.559389][T25208] Call Trace: [ 1069.559395][T25208] [ 1069.559402][T25208] dump_stack_lvl+0x16c/0x1f0 [ 1069.559429][T25208] should_fail_ex+0x512/0x640 [ 1069.559457][T25208] get_futex_key+0x1d0/0x1560 [ 1069.559478][T25208] ? __pfx_get_futex_key+0x10/0x10 [ 1069.559502][T25208] futex_wait_setup+0x9d/0x550 [ 1069.559528][T25208] __futex_wait+0x194/0x2f0 [ 1069.559550][T25208] ? __pfx___futex_wait+0x10/0x10 [ 1069.559575][T25208] ? __pfx_futex_wake_mark+0x10/0x10 [ 1069.559598][T25208] ? futex_private_hash_put+0x176/0x300 [ 1069.559618][T25208] ? futex_private_hash_put+0x18a/0x300 [ 1069.559636][T25208] futex_wait+0xe8/0x380 [ 1069.559657][T25208] ? __pfx_futex_wait+0x10/0x10 [ 1069.559687][T25208] do_futex+0x229/0x350 [ 1069.559705][T25208] ? __pfx_do_futex+0x10/0x10 [ 1069.559727][T25208] __x64_sys_futex+0x1e0/0x4c0 [ 1069.559746][T25208] ? fdget_pos+0x2b8/0x370 [ 1069.559763][T25208] ? __pfx___x64_sys_futex+0x10/0x10 [ 1069.559780][T25208] ? ksys_read+0x1ac/0x250 [ 1069.559796][T25208] ? __pfx_ksys_read+0x10/0x10 [ 1069.559817][T25208] do_syscall_64+0xcd/0x490 [ 1069.559837][T25208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.559853][T25208] RIP: 0033:0x7f262998ebe9 [ 1069.559866][T25208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.559880][T25208] RSP: 002b:00007f262a7b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1069.559896][T25208] RAX: ffffffffffffffda RBX: 00007f2629bb5fa8 RCX: 00007f262998ebe9 [ 1069.559906][T25208] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2629bb5fa8 [ 1069.559915][T25208] RBP: 00007f2629bb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.559924][T25208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.559933][T25208] R13: 00007f2629bb6038 R14: 00007ffe87a31dc0 R15: 00007ffe87a31ea8 [ 1069.559951][T25208] [ 1069.770766][ C1] vkms_vblank_simulate: vblank timer overrun [ 1070.007905][T20010] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 1070.016957][T22312] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u8:16: iget: checksum invalid [ 1070.065032][T20010] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 1070.074078][T20010] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 1070.082701][T22312] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1070.111142][T22312] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 1070.174926][T22312] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 1071.086965][ T30] audit: type=1800 audit(4294972253.597:38): pid=25229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2813" name="dbroot" dev="configfs" ino=87814 res=0 errno=0 [ 1081.338494][T25299] nbd: socks must be embedded in a SOCK_ITEM attr [ 1081.950123][T25355] warn_alloc: 1 callbacks suppressed [ 1081.950135][T25355] syz.0.2824: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1082.087833][T25355] CPU: 1 UID: 0 PID: 25355 Comm: syz.0.2824 Not tainted syzkaller #0 PREEMPT(full) [ 1082.087863][T25355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1082.087873][T25355] Call Trace: [ 1082.087879][T25355] [ 1082.087885][T25355] dump_stack_lvl+0x16c/0x1f0 [ 1082.087911][T25355] warn_alloc+0x248/0x3a0 [ 1082.087932][T25355] ? __pfx_warn_alloc+0x10/0x10 [ 1082.087961][T25355] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1082.087976][T25355] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1082.087992][T25355] ? __pfx___might_resched+0x10/0x10 [ 1082.088008][T25355] ? rcu_is_watching+0x12/0xc0 [ 1082.088023][T25355] ? trace_contention_end+0xdd/0x130 [ 1082.088043][T25355] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1082.088059][T25355] ? tomoyo_path_number_perm+0x295/0x580 [ 1082.088079][T25355] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1082.088092][T25355] ? __pfx___mutex_lock+0x10/0x10 [ 1082.088117][T25355] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1082.088130][T25355] __vmalloc_node_noprof+0xad/0xf0 [ 1082.088143][T25355] ? dvb_demux_do_ioctl+0x54e/0x12f0 [ 1082.088159][T25355] dvb_demux_do_ioctl+0x54e/0x12f0 [ 1082.088175][T25355] ? do_vfs_ioctl+0x128/0x14f0 [ 1082.088199][T25355] dvb_usercopy+0x167/0x340 [ 1082.088218][T25355] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1082.088233][T25355] ? __pfx_dvb_usercopy+0x10/0x10 [ 1082.088260][T25355] ? __fget_files+0x20e/0x3c0 [ 1082.088280][T25355] dvb_demux_ioctl+0x29/0x40 [ 1082.088299][T25355] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1082.088320][T25355] __x64_sys_ioctl+0x18e/0x210 [ 1082.088343][T25355] do_syscall_64+0xcd/0x490 [ 1082.088364][T25355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.088380][T25355] RIP: 0033:0x7fe91238ebe9 [ 1082.088393][T25355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.088407][T25355] RSP: 002b:00007fe913112038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1082.088422][T25355] RAX: ffffffffffffffda RBX: 00007fe9125b5fa0 RCX: 00007fe91238ebe9 [ 1082.088431][T25355] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1082.088444][T25355] RBP: 00007fe912411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1082.088453][T25355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1082.088462][T25355] R13: 00007fe9125b6038 R14: 00007fe9125b5fa0 R15: 00007ffca4504af8 [ 1082.088481][T25355] [ 1082.735684][T25366] Line length is too long: Should be less than 4094 [ 1083.495257][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2827'. [ 1083.525898][T25374] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2827'. [ 1083.696425][T25355] Mem-Info: [ 1083.699593][T25355] active_anon:6787 inactive_anon:25318 isolated_anon:0 [ 1083.699593][T25355] active_file:18209 inactive_file:47505 isolated_file:0 [ 1083.699593][T25355] unevictable:768 dirty:271 writeback:0 [ 1083.699593][T25355] slab_reclaimable:12413 slab_unreclaimable:101542 [ 1083.699593][T25355] mapped:38049 shmem:21922 pagetables:1327 [ 1083.699593][T25355] sec_pagetables:0 bounce:0 [ 1083.699593][T25355] kernel_misc_reclaimable:0 [ 1083.699593][T25355] free:1266866 free_pcp:12549 free_cma:0 [ 1084.017911][T25355] Node 0 active_anon:27148kB inactive_anon:108448kB active_file:72832kB inactive_file:194436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154768kB dirty:1080kB writeback:0kB shmem:91404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12432kB pagetables:5196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1084.244127][T25355] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1084.435270][T25355] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1084.641080][T25355] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1084.686443][T25355] Node 0 DMA32 free:1124592kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27104kB inactive_anon:116628kB active_file:71628kB inactive_file:197764kB unevictable:1536kB writepending:1028kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:36392kB local_pcp:36392kB free_cma:0kB [ 1084.897157][T25355] lowmem_reserve[]: 0 0 1 1 1 [ 1084.901888][T25355] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:1236kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1085.033535][T25393] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2830: iget: checksum invalid [ 1085.107906][T25355] lowmem_reserve[]: 0 0 0 0 0 [ 1085.112653][T25355] Node 1 Normal free:3903076kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:132kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8400kB local_pcp:8400kB free_cma:0kB [ 1085.160655][T25393] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1085.268058][T25393] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2830: iget: checksum invalid [ 1085.334908][T25355] lowmem_reserve[]: 0 0 0 0 0 [ 1085.361821][T25355] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1085.386074][T25393] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1085.439767][T25355] Node 0 DMA32: 100*4kB (UE) 462*8kB (UME) 55*16kB (UM) 373*32kB (UME) 823*64kB (UME) 364*128kB (ME) 285*256kB (ME) 105*512kB (M) 59*1024kB (UM) 1*2048kB (U) 200*4096kB (UM) = 1124560kB [ 1085.532614][T25393] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2830: iget: checksum invalid [ 1085.548946][T25355] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1085.623632][T25355] Node 1 Normal: 171*4kB (UME) 17*8kB (UME) 41*16kB (UME) 205*32kB (UME) 94*64kB (UME) 23*128kB (UME) 12*256kB (UM) 6*512kB (UM) 3*1024kB (UME) 3*2048kB (UME) 945*4096kB (UM) = 3903076kB [ 1085.657152][T25393] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1085.713744][T25393] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.5.2830: iget: checksum invalid [ 1085.733932][T22314] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 920 with max blocks 3 with error 117 [ 1085.749013][T25355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.794139][T25393] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1085.813194][T25355] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1085.838324][T22314] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1085.838324][T22314] [ 1085.880793][T25355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1085.901315][T25393] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1085.944983][T25355] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1085.965252][T25393] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1086.010343][T25355] 95561 total pagecache pages [ 1086.039492][T25355] 14 pages in swap cache [ 1086.077795][T25355] Free swap = 124940kB [ 1086.097294][T25355] Total swap = 124996kB [ 1086.121863][T25355] 2097051 pages RAM [ 1086.141572][T25355] 0 pages HighMem/MovableOnly [ 1086.170946][T25355] 430192 pages reserved [ 1086.226538][T25355] 0 pages cma reserved [ 1086.809825][T25416] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1090.623374][T25550] ================================================================== [ 1090.623387][T25550] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1090.623417][T25550] Read of size 256 at addr ffff8880793148e2 by task syz.0.2844/25550 [ 1090.623430][T25550] [ 1090.623438][T25550] CPU: 1 UID: 0 PID: 25550 Comm: syz.0.2844 Not tainted syzkaller #0 PREEMPT(full) [ 1090.623456][T25550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1090.623466][T25550] Call Trace: [ 1090.623471][T25550] [ 1090.623478][T25550] dump_stack_lvl+0x116/0x1f0 [ 1090.623498][T25550] print_report+0xcd/0x630 [ 1090.623518][T25550] ? __virt_addr_valid+0x81/0x610 [ 1090.623535][T25550] ? __phys_addr+0xe8/0x180 [ 1090.623553][T25550] ? fbcon_prepare_logo+0xa03/0xc70 [ 1090.623571][T25550] kasan_report+0xe0/0x110 [ 1090.623589][T25550] ? fbcon_prepare_logo+0xa03/0xc70 [ 1090.623608][T25550] kasan_check_range+0x100/0x1b0 [ 1090.623629][T25550] __asan_memcpy+0x23/0x60 [ 1090.623643][T25550] fbcon_prepare_logo+0xa03/0xc70 [ 1090.623663][T25550] fbcon_init+0xd77/0x1900 [ 1090.623682][T25550] visual_init+0x320/0x620 [ 1090.623698][T25550] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1090.623718][T25550] store_bind+0x61d/0x760 [ 1090.623736][T25550] ? sysfs_file_kobj+0xe4/0x290 [ 1090.623751][T25550] ? __pfx_store_bind+0x10/0x10 [ 1090.623768][T25550] dev_attr_store+0x55/0x80 [ 1090.623788][T25550] ? __pfx_dev_attr_store+0x10/0x10 [ 1090.623808][T25550] sysfs_kf_write+0xf2/0x150 [ 1090.623823][T25550] kernfs_fop_write_iter+0x354/0x510 [ 1090.623836][T25550] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1090.623852][T25550] iter_file_splice_write+0xa24/0x12e0 [ 1090.623873][T25550] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1090.623890][T25550] ? __pfx_copy_splice_read+0x10/0x10 [ 1090.623908][T25550] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1090.623933][T25550] direct_splice_actor+0x18f/0x6c0 [ 1090.623949][T25550] splice_direct_to_actor+0x345/0xa30 [ 1090.623965][T25550] ? __pfx_direct_splice_actor+0x10/0x10 [ 1090.623982][T25550] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1090.624010][T25550] do_splice_direct+0x174/0x240 [ 1090.624026][T25550] ? __pfx_do_splice_direct+0x10/0x10 [ 1090.624041][T25550] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1090.624057][T25550] ? rw_verify_area+0xcf/0x6c0 [ 1090.624073][T25550] do_sendfile+0xb06/0xe50 [ 1090.624090][T25550] ? __pfx_do_sendfile+0x10/0x10 [ 1090.624105][T25550] ? __sys_sendmsg+0x18c/0x220 [ 1090.624124][T25550] ? __x64_sys_futex+0x1e0/0x4c0 [ 1090.624141][T25550] ? __x64_sys_futex+0x1e9/0x4c0 [ 1090.624160][T25550] __x64_sys_sendfile64+0x1d8/0x220 [ 1090.624179][T25550] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1090.624201][T25550] do_syscall_64+0xcd/0x490 [ 1090.624221][T25550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.624235][T25550] RIP: 0033:0x7fe91238ebe9 [ 1090.624247][T25550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.624262][T25550] RSP: 002b:00007fe9105f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1090.624276][T25550] RAX: ffffffffffffffda RBX: 00007fe9125b6090 RCX: 00007fe91238ebe9 [ 1090.624287][T25550] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 1090.624296][T25550] RBP: 00007fe912411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1090.624305][T25550] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1090.624314][T25550] R13: 00007fe9125b6128 R14: 00007fe9125b6090 R15: 00007ffca4504af8 [ 1090.624328][T25550] [ 1090.624334][T25550] [ 1090.624338][T25550] Allocated by task 25541: [ 1090.624353][T25550] kasan_save_stack+0x33/0x60 [ 1090.624369][T25550] kasan_save_track+0x14/0x30 [ 1090.624385][T25550] __kasan_kmalloc+0xaa/0xb0 [ 1090.624400][T25550] netdev_create_hash+0x3c/0xc0 [ 1090.624421][T25550] netdev_init+0xa5/0x230 [ 1090.624441][T25550] ops_init+0x1e2/0x5f0 [ 1090.624459][T25550] setup_net+0x10f/0x380 [ 1090.624476][T25550] copy_net_ns+0x2a6/0x5f0 [ 1090.624495][T25550] create_new_namespaces+0x3ea/0xa90 [ 1090.624510][T25550] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1090.624525][T25550] ksys_unshare+0x45b/0xa40 [ 1090.624543][T25550] __x64_sys_unshare+0x31/0x40 [ 1090.624560][T25550] do_syscall_64+0xcd/0x490 [ 1090.624576][T25550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.624589][T25550] [ 1090.624593][T25550] The buggy address belongs to the object at ffff888079314000 [ 1090.624593][T25550] which belongs to the cache kmalloc-2k of size 2048 [ 1090.624609][T25550] The buggy address is located 226 bytes to the right of [ 1090.624609][T25550] allocated 2048-byte region [ffff888079314000, ffff888079314800) [ 1090.624624][T25550] [ 1090.624628][T25550] The buggy address belongs to the physical page: [ 1090.624635][T25550] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79310 [ 1090.624649][T25550] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1090.624661][T25550] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1090.624675][T25550] page_type: f5(slab) [ 1090.624688][T25550] raw: 00fff00000000040 ffff88801b842000 ffffea0000cb3e00 dead000000000002 [ 1090.624700][T25550] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1090.624714][T25550] head: 00fff00000000040 ffff88801b842000 ffffea0000cb3e00 dead000000000002 [ 1090.624727][T25550] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1090.624739][T25550] head: 00fff00000000003 ffffea0001e4c401 00000000ffffffff 00000000ffffffff [ 1090.624752][T25550] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1090.624760][T25550] page dumped because: kasan: bad access detected [ 1090.624767][T25550] page_owner tracks the page as allocated [ 1090.624772][T25550] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 19670, tgid 19654 (syz.0.2444), ts 916350398721, free_ts 916059467679 [ 1090.624797][T25550] post_alloc_hook+0x1c0/0x230 [ 1090.624812][T25550] get_page_from_freelist+0x132b/0x38e0 [ 1090.624828][T25550] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1090.624844][T25550] alloc_pages_mpol+0x1fb/0x550 [ 1090.624861][T25550] new_slab+0x247/0x330 [ 1090.624872][T25550] ___slab_alloc+0xcf2/0x1740 [ 1090.624884][T25550] __slab_alloc.constprop.0+0x56/0xb0 [ 1090.624897][T25550] __kmalloc_noprof+0x2f2/0x510 [ 1090.624911][T25550] sk_prot_alloc+0x1a8/0x2a0 [ 1090.624931][T25550] sk_alloc+0x36/0xc20 [ 1090.624945][T25550] __netlink_create+0x5e/0x2c0 [ 1090.624960][T25550] __netlink_kernel_create+0xed/0x750 [ 1090.624977][T25550] nfnetlink_net_init+0xda/0x160 [ 1090.624990][T25550] ops_init+0x1e2/0x5f0 [ 1090.625013][T25550] setup_net+0x10f/0x380 [ 1090.625031][T25550] copy_net_ns+0x2a6/0x5f0 [ 1090.625051][T25550] page last free pid 19667 tgid 19667 stack trace: [ 1090.625059][T25550] __free_frozen_pages+0x7d5/0x10f0 [ 1090.625072][T25550] __put_partials+0x165/0x1c0 [ 1090.625086][T25550] qlist_free_all+0x4d/0x120 [ 1090.625100][T25550] kasan_quarantine_reduce+0x195/0x1e0 [ 1090.625115][T25550] __kasan_slab_alloc+0x69/0x90 [ 1090.625130][T25550] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1090.625146][T25550] vm_area_dup+0x27/0x8d0 [ 1090.625159][T25550] __split_vma+0x18e/0x1070 [ 1090.625172][T25550] vma_modify+0x16dc/0x2030 [ 1090.625185][T25550] vma_modify_flags+0x212/0x2d0 [ 1090.625200][T25550] mprotect_fixup+0x1df/0xb40 [ 1090.625213][T25550] do_mprotect_pkey+0x9ca/0xd50 [ 1090.625226][T25550] __x64_sys_mprotect+0x78/0xc0 [ 1090.625239][T25550] do_syscall_64+0xcd/0x490 [ 1090.625257][T25550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.625270][T25550] [ 1090.625274][T25550] Memory state around the buggy address: [ 1090.625281][T25550] ffff888079314780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1090.625292][T25550] ffff888079314800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1090.625302][T25550] >ffff888079314880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1090.625310][T25550] ^ [ 1090.625318][T25550] ffff888079314900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1090.625328][T25550] ffff888079314980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1090.625336][T25550] ================================================================== [ 1090.643697][T25550] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1090.643713][T25550] CPU: 1 UID: 0 PID: 25550 Comm: syz.0.2844 Not tainted syzkaller #0 PREEMPT(full) [ 1090.643733][T25550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1090.643743][T25550] Call Trace: [ 1090.643749][T25550] [ 1090.643756][T25550] dump_stack_lvl+0x3d/0x1f0 [ 1090.643779][T25550] vpanic+0x6e8/0x7a0 [ 1090.643799][T25550] ? __pfx_vpanic+0x10/0x10 [ 1090.643821][T25550] ? fbcon_prepare_logo+0xa03/0xc70 [ 1090.643840][T25550] panic+0xca/0xd0 [ 1090.643859][T25550] ? __pfx_panic+0x10/0x10 [ 1090.643879][T25550] ? fbcon_prepare_logo+0xa03/0xc70 [ 1090.643896][T25550] ? preempt_schedule_common+0x44/0xc0 [ 1090.643914][T25550] ? preempt_schedule_thunk+0x16/0x30 [ 1090.643935][T25550] check_panic_on_warn+0xab/0xb0 [ 1090.643955][T25550] end_report+0x107/0x170 [ 1090.643974][T25550] kasan_report+0xee/0x110 [ 1090.643992][T25550] ? fbcon_prepare_logo+0xa03/0xc70 [ 1090.644020][T25550] kasan_check_range+0x100/0x1b0 [ 1090.644041][T25550] __asan_memcpy+0x23/0x60 [ 1090.644058][T25550] fbcon_prepare_logo+0xa03/0xc70 [ 1090.644080][T25550] fbcon_init+0xd77/0x1900 [ 1090.644102][T25550] visual_init+0x320/0x620 [ 1090.644118][T25550] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1090.644139][T25550] store_bind+0x61d/0x760 [ 1090.644157][T25550] ? sysfs_file_kobj+0xe4/0x290 [ 1090.644173][T25550] ? __pfx_store_bind+0x10/0x10 [ 1090.644189][T25550] dev_attr_store+0x55/0x80 [ 1090.644210][T25550] ? __pfx_dev_attr_store+0x10/0x10 [ 1090.644231][T25550] sysfs_kf_write+0xf2/0x150 [ 1090.644246][T25550] kernfs_fop_write_iter+0x354/0x510 [ 1090.644260][T25550] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1090.644276][T25550] iter_file_splice_write+0xa24/0x12e0 [ 1090.644296][T25550] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1090.644313][T25550] ? __pfx_copy_splice_read+0x10/0x10 [ 1090.644332][T25550] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1090.644348][T25550] direct_splice_actor+0x18f/0x6c0 [ 1090.644364][T25550] splice_direct_to_actor+0x345/0xa30 [ 1090.644379][T25550] ? __pfx_direct_splice_actor+0x10/0x10 [ 1090.644395][T25550] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1090.644413][T25550] do_splice_direct+0x174/0x240 [ 1090.644427][T25550] ? __pfx_do_splice_direct+0x10/0x10 [ 1090.644441][T25550] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1090.644457][T25550] ? rw_verify_area+0xcf/0x6c0 [ 1090.644471][T25550] do_sendfile+0xb06/0xe50 [ 1090.644488][T25550] ? __pfx_do_sendfile+0x10/0x10 [ 1090.644503][T25550] ? __sys_sendmsg+0x18c/0x220 [ 1090.644522][T25550] ? __x64_sys_futex+0x1e0/0x4c0 [ 1090.644540][T25550] ? __x64_sys_futex+0x1e9/0x4c0 [ 1090.644558][T25550] __x64_sys_sendfile64+0x1d8/0x220 [ 1090.644578][T25550] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1090.644599][T25550] do_syscall_64+0xcd/0x490 [ 1090.644619][T25550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.644634][T25550] RIP: 0033:0x7fe91238ebe9 [ 1090.644646][T25550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.644660][T25550] RSP: 002b:00007fe9105f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1090.644676][T25550] RAX: ffffffffffffffda RBX: 00007fe9125b6090 RCX: 00007fe91238ebe9 [ 1090.644686][T25550] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 1090.644695][T25550] RBP: 00007fe912411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1090.644704][T25550] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1090.644714][T25550] R13: 00007fe9125b6128 R14: 00007fe9125b6090 R15: 00007ffca4504af8 [ 1090.644728][T25550] [ 1090.644792][T25550] Kernel Offset: disabled