last executing test programs: 5m38.34123396s ago: executing program 2 (id=363): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone(0x14082891, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x20000014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="02032dbd7000fedbdf252e0000000400018030000180140002007663616e30000000000000", @ANYRES32=0x0, @ANYBLOB="0800030000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="ea58d309abedc6c284ef22e4c08554d20072a93319f395c66e1ffa445fba73df482d5efb81ea14836d7ea5a2499e5d9ff2722b0a5881226fea1c5c54a65e97aa6a9549d1146173325842aefb80d14ed9b20adf94478cb3d2ace01db7140b124de586a69102303a397e231a52289b15191314c97c45d29de1525a9212a7f8292caa8541627683d15f1273ffa384a20c3b77f4ed72971305b37965db9c8d959d228b0f859c97d963ca00382078009382b32320b8b3f7deb001d3807d692b6efea1c13231e2ec6095c71c459f3640e8accb8845f100e79da4f1f856", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="180001801400020076657468305f74", @ANYBLOB, @ANYRES32, @ANYRES32=r0, @ANYBLOB="08000100", @ANYBLOB="f59a"], 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x4044094) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x1012, 0x2, 0x800000008000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x4e8080, 0x4a) pipe2$auto(&(0x7f00000001c0), 0x3ff) memfd_secret$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b45, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x66042, 0xe4) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(r2, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24044881}, 0x48001) mmap$auto(0x0, 0xe983, 0xff, 0xeb1, 0x401, 0xfffffffffffff801) socket(0x11, 0x3, 0x9) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r3, 0x5404, 0x0) 5m37.212420639s ago: executing program 2 (id=365): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) (async, rerun: 64) acct$auto(&(0x7f00000000c0)='/dev/vcs\x00') (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) (async) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c") (async) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f00000000c0)='0\n\xf48\x97\xff*\x8a\xeb+l\\\x9e@\\}\x04|\x03\xcb\x12\xfa\b\x1c\vr\xc0\\\x17\xcb\xb4Q\xe1)@J}\x7fw\xc7\xe58,.\xf6p\x8d\xa0\x1f\xe3\xc5\xff\r\xde\xaf\x84\xd6P\b\xdf\xfe\x1f\xa1\xb4\x89\xa0\xac\x9a\xb8\x88\xca\x00\x15\x9d`>\xcd\xcb\xbe#k\xaf\xe9\x9a0\xb6\xe2#\xc1u\xfa\xe1\x19\x92qH\x80\xb9\xa4a\xba%\xc7\xc5\xb8\v\x00\xa5\xdd\xa2\x8c\xacBY\x9b\"\x14*\xfd\x87\x84~\x94\xb5\xfd/\xe2\xadz9\xbe!7\xf9\x88F\xe9@L\x1cD\xc2ia*\x81\x10L\x8d\xde\xdf\xc5)$\x03,\xb5\x88\a\xfe\x8c\xea\x16|\x11x\xdaE\x1c\xce\xe1\xdb\xc1\x86\xd9!.\xfb\xb7\xd4%\\\x1eJ\x175\x9c\xc0\x83\x89k+\x1bKk\xc4\x8f\xb01\x9a\x94_r\xa5W\xe0\x16A', 0x2) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) socket(0x8, 0x6, 0x1) (async) socket(0x2, 0x1, 0x84) (async) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) (async) listen$auto(0x3, 0x0) connect$auto(0x3, 0x0, 0x55) 5m35.011251979s ago: executing program 2 (id=368): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/name\x00', 0xa000, 0x0) (rerun: 32) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x180, 0x0) (async, rerun: 64) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x7) (async) socket(0xa, 0x801, 0x84) mmap$auto(0x8000000000000000, 0xaf, 0x401, 0x2009b7f, r1, 0x1) (async) socket(0x3, 0x4, 0x0) socket(0x2, 0x1, 0x0) pipe$auto(0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x1c, 0x3a, 0x0, 0x9) (async) mincore$auto(0x20000000000002, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) r2 = socket(0x2, 0x3, 0x400fd) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb1, r3, 0x300000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), r2) socketpair$auto(0x1, 0x5, 0x1, 0x0) (async) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) (async, rerun: 64) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (async, rerun: 64) write$auto(0x6, 0x0, 0x100000001) recvmmsg$auto(r4, 0x0, 0xfffffe0c, 0x8e0, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) 5m34.323785225s ago: executing program 2 (id=369): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) setsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0x1, 0x41, 0x0, 0x4) r1 = socket(0x10, 0x2, 0x0) fcntl$auto_F_RDLCK(r1, 0x1000, 0x0) ioctl$auto_RNDADDTOENTCNT2(0xffffffffffffffff, 0x40045201, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x6, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x5, 0x6, 0x2, 0x9, 0x7, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, 0x1fe, 0x200d) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x5, 0x6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x80c0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_rm_watch$auto(r4, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, 0x0, 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0x34000) accept$auto(0x3, 0x0, 0x0) 5m30.804074762s ago: executing program 2 (id=376): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(r0, 0x1, 0x9, 0x0, 0xeb66) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) socket(0x2c, 0x80003, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/dynamic_events\x00', 0x201, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f00000002c0), 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5m28.854898507s ago: executing program 2 (id=384): r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x8000, 0x0) mmap$auto(0x80000, 0x401, 0x2, 0xeb1, r0, 0x8000000080) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x0, 0x0) ioctl$auto(r1, 0xc0945662, r1) socket(0x2, 0x5, 0x9) madvise$auto(0x1, 0x9, 0xa) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000080)='o2\xf0T\x7f\xb9\x00\x00\x00\x00\x00\x00\n\xe5Fb\xb7\x8b\x11wW\xb6\xbf\xe9\xbe\x15\xc9\xd8\xd3\x93\xfb\n\xb7\x88T\x06\xb1\x9b\xdd\xe7Y\xbe\xba\xb8\x11#z)&5\xc8p\x9a\xfa@\x8c\xbc\xe8\xa5\xbb\x8f\"HF\xb20\x13\x90', 0x20000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x9, 0x1, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) 5m13.364329204s ago: executing program 32 (id=384): r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x8000, 0x0) mmap$auto(0x80000, 0x401, 0x2, 0xeb1, r0, 0x8000000080) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x0, 0x0) ioctl$auto(r1, 0xc0945662, r1) socket(0x2, 0x5, 0x9) madvise$auto(0x1, 0x9, 0xa) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0xfffffffe, 0x85, 0x20e, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0x42, 0x3, 0x4, 0x6, 0x9, 0xfffffffffffffffb, 0x9, 0x3, 0x101, 0xff, 0x22, 0x4, 0x6, 0x4, 0x7, 0xfffffffffffffffa, 0x1ff, 0x1, 0x400, 0x8, 0x5, 0x2, 0xe294, 0xa2, 0x8, 0x100000000, 0x2, 0x8, 0xae, 0xaeb, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0xfffffffffffffffe, 0x10000, 0x55e2, 0x7, 0x8000, 0xe, 0xffffffffffffffff, 0x6, 0x9, 0x14f3, 0x1ff, 0x1, 0x6e7, 0x3, 0x8, 0x9, 0x0, 0x2, 0x7fffffff, 0x7, 0x9, 0x0, 0x401, 0x9, 0x6, 0x100000001, 0xffffffff, 0x800, 0x8001, 0x5, 0x5ed4, 0x1, 0x7, 0x80000000, 0x962, 0x5, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff7, 0x401, 0x1, 0x3e44, 0x8, 0x4, 0x9, 0x1, 0xc98c, 0x68, 0x2, 0x6, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff, 0x55, 0x8, 0x30, 0x2d, 0x0, 0x3, 0x2, 0x0, 0x726, 0x7fffffff, 0x1000, 0x10000, 0x0, 0x4, 0x1, 0xbf, 0x2, 0x4, 0x0, 0x5, 0x1, 0x0, 0x6, 0x9, 0x8000, 0xffff, 0x7, 0x140, 0x0, 0xc7dd, 0xfc05, 0x0, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000080)='o2\xf0T\x7f\xb9\x00\x00\x00\x00\x00\x00\n\xe5Fb\xb7\x8b\x11wW\xb6\xbf\xe9\xbe\x15\xc9\xd8\xd3\x93\xfb\n\xb7\x88T\x06\xb1\x9b\xdd\xe7Y\xbe\xba\xb8\x11#z)&5\xc8p\x9a\xfa@\x8c\xbc\xe8\xa5\xbb\x8f\"HF\xb20\x13\x90', 0x20000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x9, 0x1, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(0x200000003, 0x2) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) 2m32.879570972s ago: executing program 0 (id=805): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x9, 0x9, 0xffff, 0x4, 0x200000000001, 0xb4, 0xb, 0x8, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x81, 0x968c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x404c084}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="244df46e", @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x2, 0xeb2, 0x401, 0x8003) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000b00)=""/4077, 0xffd0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) socket(0x11, 0x2, 0x9) capset$auto(0x0, 0x0) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0xac2e6400, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 2m30.498716946s ago: executing program 0 (id=812): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001640)={0x2b8, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_TX_RATES={0x287, 0x5a, 0x0, 0x1, [@generic="d265bd6340bc896f9e198bdb50294436e4df406290d5f39817d48c578aadf05f37199364571c3052e15fb3cc9a82f85afaf598928517610c8ef6adf6f260cd7ad6ac564430859a87afd6adb16ab000f86d1e82d27eca6bb8045caf3cd00d7dd82c6121052b619b928ed7ed372727a5864ed62bab55b54ed97fea3b60e1f271b41e61d1b007c1162a3c4303200ca2ba2722b501fd80b0185e480760c5fbc982862c65016707a64a75c764aaebe6d0344f1875930afbdf8bc4b829c943b2a894a08f5be508edce0100f0faab90b17ffb79ab4064a47149d018e491507cbdd2402ac2d9bff80037c072566bb14f5c", @generic="30c477a81d21321dd82cbe266ba52635ce1ffd3d61ef6220b02027397501b265dd8014dfcf541676198dbe4328d432eb84ab980affb54765035890a03bc07f57fe13c4a6453905a3b5ba5153344acf6d7ab2bba4426fe1fab98ae09a92c2685dc5c1f474f9559083aee7266d5abd928378c9801b359162d43c40be781da856b76cf33256c6a517752088dfceaa08e488", @nested={0xcb, 0x54, 0x0, 0x1, [@nested={0x4, 0x2b}, @generic="1e68db798a40ed845075bce3c8d4785e9b6f25f51ba04f4b2c41fcabb1b865d3cf82845fd11dfffcc63b476c2bc49eba5b00b969472e2d13cd222b37edbf5e35545a37829eac43f5a15e3949ae4b3110280b269159087ec2e3d3f59e4f1a21816041c78ad66812da4318c54b2c1287a8a5ab9bda7fcd2705cf17a0cf180bd64ef19d6d22653d2af2c911f6d9956505113c4a5df5681a7d74947e7d772dc2afe2b26c581a196613483a00a4a636d863b4574ebcdae8fb8ea21ab838ec9aa19c", @nested={0x4, 0xad}]}, @generic="c377969ff37663b92b10f0292a79a8c99849250d078ed1ff588a73f6f7f9d5d3547951a363de7dfea04c126789ff48b3b0f35f32a0aedd6eeb6c"]}, @NL80211_ATTR_PMK={0x9, 0xfe, "d28b7a82ae"}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x10}]}, 0x2b8}, 0x1, 0x0, 0x0, 0xc004}, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x3a) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x6]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) prctl$auto_PR_GET_TIMERSLACK(0x1e, 0x7ffeffffffffffff, 0x6, 0x4007fff, 0xa41) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r4, 0x0, 0x39b8) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) 2m25.952270768s ago: executing program 0 (id=821): socket(0x9, 0xa, 0x6fffffff) socket(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x3, 0xd) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r2, &(0x7f0000000000)='system.posix_acl_access\x00') truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x6) mmap$auto(0x0, 0x8, 0x2000000000000df, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto_SO_TIMESTAMPING_NEW(r3, 0x0, 0x41, 0x0, &(0x7f00000000c0)=0xffff) fanotify_init$auto(0x5, 0x2000000000002) 2m20.157383658s ago: executing program 0 (id=838): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nullb/features\x00', 0x40240, 0x0) 2m19.595465319s ago: executing program 0 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) (async) mmap$auto(0x0, 0x5810, 0x11d, 0x8000000008011, 0x3, 0x0) mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) (async) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20040001) (async) statmount$auto(0x0, &(0x7f0000000580)={0x8, 0x8, 0x2000000000009, 0x6, 0x7, 0x3, 0x5, 0x400, 0x2000000000010006, 0x0, 0x7, 0x7, 0x2, 0x3486c12a, 0xaf, 0x9, 0x2, 0x3, 0x8001, 0x6, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2ee, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x9, 0x6, 0x0, 0x5, 0x180000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x400000, 0xd, 0x0, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x9, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x20, 0x400000000000, 0xe9e], "d8c50c5e4d590d3b5db60c07cf594dfface862d6eaafee7351c07dc63ca9f44b8cd99551f113ca7f88637394605a975f06cbaca05884e83c7e3699c185d13fe566132f17e4679feeaed1b5a561e31b79bb439058c7f9cbb45c809b82ecb8d83f663d943b414133d233a609f791320063d6bcb072aac75ebe8ee8"}, 0x200, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x1, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/fail-nth\x00', 0xc42, 0x0) (async) write$auto(r3, &(0x7f0000000400)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfd\xc4(\xc5\xfa\xb4\bPKC$\xef\xbd\x81\'\x03\xee\x94\x03\xd9\xf2\xf5\xfb\xb9\xf0\xa5\xd5\x00v\xed\xe1\xf8\xf6\xda\xf6\xdd\xf7R\x84x\"N\x00\xf8t\xa7g\xa6\x81Ok\xd0&r\x13\b\xce\xffC\x7fW\x82y\xb2T\xac\xa6\xa2\x9c0\x819\xc88\xd7b\xd7\xc2E\xa1\x18\x88\xa9\xd7\x87\x9aj3\xba\xcf+A\xd8\xd0DA\xffqtvc\xb5q\xfb\bb?\x81\xf9\xb1\x81\xe4F\xd7\x16$\xef\xe9\xf5\xf3\xbf\xc3\xa6U5H\xe7\x01\rx\x8c\x9f\xf79\x9ev\xb3\x12\xc1\xc2U\x12\x81\x80(\xa4\x9b\xabzN\xf8\xb4x\xf4\xbd\x16\x14\x99\x8e\"\x8eS\x9e\x9dG\t\xccfM\xfc\x13T\"-\xe9\xbb\xff\xc4\xbfj\xb6\x10\xc3\xea\x99S \xb0\x850\x17\xfc$\xbbDY1\x94\x9c\x91\xf3\xfeA\xf7\r\x17t\x9cKB\x85V\x89\xad6\x11\x8a\xc3\xd5?\x9c\xd4v\x96#*\xf2t+z\xbas\xb5\xc7M\x931G\xe1zJ\xc4\r\xe0\x91kh$!H.$m\x86\x0e7V-\xa8\xc0\x9e\xf7\x99d\xe5\x14\xab', 0x12d2) epoll_ctl$auto(r5, 0x2f, r5, &(0x7f0000000000)={0xffff0001, 0x5}) (async) unshare$auto(0x20000080) pread64$auto(r2, 0x0, 0x10000000d, 0x5) 2m17.153109335s ago: executing program 0 (id=849): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x13, 0x3, 0x180000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40100, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x4b3a, r0) 2m1.377905965s ago: executing program 33 (id=849): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x13, 0x3, 0x180000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x1000000fffd}, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40100, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x4b3a, r0) 14.975004063s ago: executing program 1 (id=1188): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x200000000, 0x5, 0x9, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$auto_PR_SET_MM(0x23, 0xb, r0, 0x9, 0x7ffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x201, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D2\x00', 0x101100, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) mmap$auto(0x10, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xb63) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x400004, &(0x7f0000000280)={@siginfo_0_0={0x1fd, 0x0, 0x6, @_sigchld={0x0, 0x0, 0xfffff001, 0x3ff, 0x5}}}, 0xffffffff, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x70c, 0x2}, 0x4000000000b, 0x9, 0xffe, 0xd11f, 0xb871, 0x6, 0x1, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0x1000000000000b}) madvise$auto(0x0, 0x2003f2, 0x15) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2000002) socket(0x11, 0x80003, 0x300) 11.945484646s ago: executing program 4 (id=1199): symlink$auto(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x903080, 0x10) r0 = gettid() r1 = getpid() shmctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000300)={{0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001}, 0x6, 0x0, 0x9, 0x7fffffffffffffff, @raw=0x3, @inferred=r0, 0x4, 0x0, &(0x7f0000000000)="1e8e1872fe07061e824d0854d58aa9f47880ae6d515515dad2bc4f1f", &(0x7f00000001c0)="2a7f34e99f1ba1e15d3f601de24e993a25b49c2e960c0006eb62250e73e25aa6bf92e9efffab4d58bbd826f34fc0e2ca7796dc1010a849dd761a200a9305ee8195ac2a6149e2ff84d4e0115f97fb16b8a12e63098d8963db418a2c1fc1efceca3d79f964849e14483d5b6c253f39314b724ee9f8f9abb22c82259fe969a43d43881fa66954e5fd9cc5ce9e80b0104ccd0c6b36e0c0ae6f12f639f2d98ae097dc2c76735856387656aba1747d2c7b8bbf231b8b9b168eac81b62d8fc691fcfb813e954d77e30605d2932b0e66976c3318bcc6"}) rt_tgsigqueueinfo$auto(r1, r3, 0x1, &(0x7f0000000140)={@siginfo_0_0={0x8, 0x3, 0x80, @_rt={r0, r2, @sival_int=0xffffd622}}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x800005411, 0x38) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) r5 = socketpair$auto(0x80001, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) setsockopt$auto_SO_SELECT_ERR_QUEUE(r4, 0x7fffffff, 0x2d, &(0x7f00000000c0)='$\x00', 0x10000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000400), r4) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACINFO={0x94, 0x7, 0x0, 0x1, [@nested={0x90, 0xd0, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x3a}, @generic="e56100e0eb5c445c0035e662ad0ceda5187c333b724b8a0cac5426caa0ab8ee6dcbe6f780cada821e96c6f8ddbe8892520aa23fc1b1b0b0b1d61d2d7263ad92c36bf95d57f0168b0c976266c60ba0cee2b2abedb54f8b2787de495f8e90dd224f000c8f5", @typed={0xc, 0x30, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0x10f, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0x119, 0x0, 0x0, @u32=0x101}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) close_range$auto(0x2, 0x8, 0x0) 9.735826704s ago: executing program 4 (id=1205): r0 = socket(0x1d, 0x2, 0x7) fanotify_init$auto(0x5, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x89, 0x40015, 0x6, 0x0, &(0x7f0000000000)=0x4, 0x1bd) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) socket(0x1d, 0x2, 0x7) (async) fanotify_init$auto(0x5, 0x0) (async) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) (async) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) (async) futex$auto(&(0x7f0000000080)=0x89, 0x40015, 0x6, 0x0, &(0x7f0000000000)=0x4, 0x1bd) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) socket(0x2b, 0x1, 0x1) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) (async) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) (async) 8.50824999s ago: executing program 4 (id=1207): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.descendants\x00', 0x22062, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x20840, 0x0) (async) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_CREATE_VM(r0, 0x4080aebf, 0x0) 7.225461723s ago: executing program 4 (id=1211): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r1 = socket(0x22, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x5) ioctl$auto(r0, 0x40104d01, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000012c0)) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @local}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.76783777s ago: executing program 4 (id=1213): capget$auto(0x0, 0xfffffffffffffffe) r0 = socket(0xa, 0x5, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) io_uring_setup$auto(0x406, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x0, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x1, 0xfffffffb, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xfffffffe}, 0x2, 0x5, 0x4, @inferred, @integer64={0x8, 0x0, 0xf}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) 6.434860506s ago: executing program 1 (id=1214): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r0, 0x7) syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sysfs$auto(0x2, 0x10000000000002d, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/fs/cifs/cifsFYI\x00', 0x88400, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) setresuid$auto(0x0, 0x0, 0x8080) setfsuid$auto(0x0) open(&(0x7f0000000040)='./file0\x00', 0x1494c3, 0x1d) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0xc00, 0x409) open(0x0, 0x0, 0x408) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_DUPFD(r2, 0x0, r3) pipe2$auto(0x0, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptytd\x00', 0x3042, 0x0) 5.923441185s ago: executing program 4 (id=1215): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYBLOB="1c6fc815ce48dabd064e4de9a5137cd0bb4ff947f0a9681b5a0903e65c0fb63eb57c57b9ccdc0853deee2eed553ba646acd36a11b4e901e6d1050f78409901ce92ddd2dde6e0e3d23281d017f223e76334ba8568f13920ec4f9bc098ccd630051ed0a273", @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r1, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001bc0)="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", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@iter_create={0xffffffffffffffff, 0xa7}, 0x62e) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x10000005, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) 5.841569054s ago: executing program 3 (id=1216): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) ppoll$auto(&(0x7f0000000040)={r0, 0x9, 0x3}, 0x8, &(0x7f0000000080)={0x8000000000000001, 0x8}, &(0x7f0000000100)={0x4}, 0x8) 4.558190631s ago: executing program 3 (id=1219): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/orangefs/dcache_timeout_msecs\x00', 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x1) mmap$auto(0xc, 0x2020009, 0x3, 0x100000000000eb1, r0, 0xda17) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0205, 0x9c39) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xfffffffffffffffd, 0x4020009, 0xde, 0x15, r0, 0x8000) socketpair$auto(0xfffffffd, 0x4, 0x3, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r2, 0x40005504, 0xffffffffffffffff) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.337920201s ago: executing program 1 (id=1220): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket(0xa, 0x2, 0x3a) bind$auto(r1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x66) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x40000000000002, &(0x7f0000000040)={@buf=&(0x7f00000001c0)="28f202b8be299a360a81ed6dd1c4723de73865d884e7c1139b94b4f40b7e42fffcdde886c6fdbe7113984ca51fead4b528b0832cfb07a1eebf4e4533e1667eda297a43d52cff034dc2ca53a4a5f837e90d0cbf091529e66ea357e4560b6a121ea2544ae1329bac8d89d6e7e04124add178a911b064627e05e085fd2be73188f9d38a0d66ba577324dc5b09dd2adb16c0ee9c2aeb0e67cfd4ac18b740da2d627fe9c4327e75f65e17cddddf7919b3b3c8843a6b76e319ce8bf222badb757ff83b208b", 0x800c000, 0x4800bfff, 0x800c000}, 0x4) 3.418518905s ago: executing program 5 (id=1222): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r1 = socket(0x22, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/ocfs2_dlmfs/parameters/capabilities\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000840)=""/41, 0x29) ioctl$auto(r0, 0x40104d01, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) fsconfig$auto_SHMEM_HUGE_FORCE(r4, 0x5, &(0x7f0000000280)='/sys/module/ocfs2_dlmfs/parameters/capabilities\x00', &(0x7f0000000300)="40a6cbab6feda56cfc3a6f6962ef95ef124617a48bcda367a8e0269333d7a5f5f639d93277f51452fe9728d798f18bf357dfaeacdaf3", 0xfffffffffffffffe) ioctl$auto_SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f00000012c0)) socket(0xb, 0x80000, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @local}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r6 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) writev$auto(r6, &(0x7f00000000c0)={0x0, 0x7ff}, 0x4) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000140)={0x4, 0x3, 0x7ff, 0x0, 0x1000, 0x0}) ioctl$auto_BLKTRACESETUP2(r6, 0xc0481273, &(0x7f0000000180)={"5035a75035e8c7707b81cb11442088148681948ae6351097db11d9e51f8652fd", 0x1f92, 0xf93, 0xa, 0x2, 0x9, r7}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.225517342s ago: executing program 3 (id=1223): socket(0x2b, 0x1, 0x0) (async) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000004780)='/dev/sequencer\x00', 0x80, 0x0) ioctl$auto_SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) (async) listen$auto(0x3, 0x81) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0xa05, 0x70bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20004000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0xa, 0x106) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) (async) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r4) r6 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000003c0), 0x28000, 0x0) read$auto_fops_atomic_t_ro_(r6, 0x0, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) sendfile$auto(r7, r7, 0x0, 0x7ffff000) (async) r8 = gettid() r9 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x900, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r4, &(0x7f0000001c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000005dc0)={0x2dc0, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0xc4f}, @THERMAL_GENL_ATTR_TZ={0x13b1, 0x1, 0x0, 0x1, [@generic="56efbdd70292994b5f9628f4692506922d06bc9c19cc2cae43341c9ecf511b56e02d6a8786dbe59f5821e0994aeb81173dba3f60159da7945e13ff379470d4c69091bba8486f2e12d258033a0c96ef49eb0be1fa89bf393558abd566ed4e0a6db16f856d5b855349cc43dcd23373c014d352d158a1b4202a886af8a16f417346ade69c7c2b3a5d57812861ea791e00f30c4b67e2719628", @nested={0x219, 0x12e, 0x0, 0x1, [@generic="517296aceeeb6b60d85945b7ea12dabebd0d8b22d103f736153dfae1b0a59f36434a91539867f3fc6ada40ecda33d52dd8a2c250a5eeea1a612907583a78d728b4ddbb2e59bad57d50934925d4b01e00", @generic="054d5ccc5a418ef09c72612efdc6895022774a3a9050f9d5244142fa3cbe7ca691eb209f684c8fdac7c9c04995fa93478532bca40fb414741ca9d422a64eb5589438e729c1dd9ee5163b60501f5b0871e693fd557c860341cd52c587a09413a4648aed2ed38cb38877385c2f4a783cac06929debb9e4baaca4f83299ce277e8651c1b68005d5fba84444accf07687b8767fcb981f9791f4cf991cbae4b39869c9f0669bab3673edef220072d8a13caa98b5ea405dba845f805ac30e90d360d736e2ad524945246112fa86c4f5dc7fa19b6c14c1a7b4fe966cbd750c4fca0f2fdeabe5947425f4d87f07c", @generic="f5d8251a26ecbe76fa7a2f9166d62d910de59ff8b79c42760cf39bb30c37962bef5e079f417a55afed93826aa6f0ba585e116c2f83f322eae522b249b154fb2c7a7094f294ef2e3c09be3f47af58633f1413727fcce944605e755c4155f1d1ad6e54b65fcfc15aae7cc6fe490e9859e7341e4d956bc67564dfdd9b97bd0f9d8a332e5e04fab3e198f89345b67ef4f84916a4ebef3aaf3cbb0a00118dd163b91fa90c1edf73a150caf15612e5ff840ce5a4100fe67afcf015694de5dd8a4c73f7bb68986ef80aa4c64957", @typed={0x8, 0x132, 0x0, 0x0, @fd=r6}, @generic="081c078ebc6bd7af2d"]}, @generic="a4d3e09bebcfe9f1d75e041b6f1a6dd409835d6977b7290438d4764a392862b4b1a66fe9", @typed={0x8, 0xf0, 0x0, 0x0, @fd=r4}, @generic="3bc0258df86e5ecbd17bcd5e26439512cbdb64ecd9efd32004c96b94ae5064464867d2f10da0e0e0e788d366a8e0b9da4ac43f18b0cdcd56e45a26f79c5a2ac1745a1f5af0a3cbc7ac1463c52f328b7bae14ede8712bdeb60b53637c607587fb10b37c301ca7fe4d0094fbd972f606ca7fc3b26ee1e9a69c2b56e7119e1717a106228565b7d2e2a9c3b0b84743fdc7f2033cbe90352fef4252c2166fcf588421a4a304abc4d766b23b56919c61475e18fb060e18a45ab368cfe17de69c98ae872a3f6a1fa8eab0b514e6", @typed={0x1004, 0x7c, 0x0, 0x0, @binary="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"}]}, @THERMAL_GENL_ATTR_TZ={0x200, 0x1, 0x0, 0x1, [@nested={0xe3, 0x1e, 0x0, 0x1, [@nested={0x4, 0xcc}, @nested={0x4, 0xdf}, @generic="2e33af459966d5bca9b4c8c385acf3ec170534721792b657c9d88c0f16eab5ddbbd42d585cf5c092b63de43af01d4d3b264e2aecf8e1974e0d27edbc9f6c05145a5ba7a03a79fd2bd5e65dcf85dfb2279e059e33f2e78f1f3617d6c5805e99b4892ca6833334000d69d897a2e9008166b040a6bd3676499442fc48442e4c4ca53a312b907a1342650022689782d13adc97210bb6b550b962565892a2ef75921959c0c9271171fd2df434f4ce713fa025b929fa90f30f44980dd286d0b6387981d625c8", @typed={0x8, 0xb, 0x0, 0x0, @pid=r8}, @typed={0xc, 0x70, 0x0, 0x0, @u64=0xfffffffffffffff7}]}, @nested={0xec, 0x48, 0x0, 0x1, [@generic="9379bbc58d06192483beefc4bcc7598157cf2d524c5199f58b5c8c94880939b582014b006c0c3afb8f416d83570655f9f8d0d6bc78b9dbb4c584ef57564b22cd4f84fc67e65b3cfa7f9a10794e70a38341f97e585529e1f4879467c58466708a719c6824a2ee8f0256ca94188d0c89453df13b26469905cf5d4602fe8692ec4ccc4baa135ea5eb0e9566c0f648923a2ecc3721dd088bffe424520774510e4100232b2df98af5eb4270a192d708916d035b9d7d26acb0b342e2a903c9fa846ac525d3c6819dec1f8b816faf9af74b16a5024798140c03ef56", @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x95, 0x0, 0x0, @fd=r4}]}, @typed={0x4, 0x41}, @typed={0x8, 0x133, 0x0, 0x0, @pid}, @generic="132e2355a155cdc75420b985", @nested={0x14, 0x5f, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @u32=0x200}, @typed={0x8, 0xe0, 0x0, 0x0, @fd=r9}]}]}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x4}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x6}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth0\x00'}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0xe, 0xd, 'NLBL_MGMT\x00'}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x9}, @THERMAL_GENL_ATTR_TZ_GOV={0x17ac, 0xc, 0x0, 0x1, [@nested={0xa2, 0xb3, 0x0, 0x1, [@typed={0xe, 0x136, 0x0, 0x0, @str='NLBL_MGMT\x00'}, @generic="b4413fa93966c720fe963dc92674e7f8b58c7501786407beec140e18c33ec364b92bcd57dd8b6d9146fec15ff261842b10a9292ebb83084ab0e24048928649ea7ee5274c070203a0839a6690b889704c098de2d70fe17d456031b9aa9bb4f9e799fe4b51db614efb4154fdcab848a3c294927fbf0fd2bb919edaec7f6bfa68f58d97bf6401ec", @typed={0x4, 0x82}, @nested={0x4, 0x8}]}, @nested={0xa2, 0x139, 0x0, 0x1, [@generic="d71184aadf115c15d5bebb52cc84c18ce7eb6ccd9a7178e89f87f5e17acb44cbec266b56b9073cba17721a3349780cd93483152f8d27b3d0a1d7e5edf7ad8e721957db7eb62e7728303a625a1f86c60587af1ebbbabf017c9c9d3efb23b64fcde323701021930d0899c87828426c8c7db8b23e1db95e9d3dcdca53872cdd9e95914c37ee25a7e58a298f4541504f17b5c3d937843e31e5125a25eb3c3817"]}, @nested={0x10, 0xad, 0x0, 0x1, [@typed={0x8, 0x4a, 0x0, 0x0, @u32=0x2400}, @nested={0x4, 0x14d}]}, @typed={0x8, 0x7e, 0x0, 0x0, @pid}, @nested={0xfc, 0x46, 0x0, 0x1, [@generic="bc36e01b6c340d8f6c9f402346c1b41b26883f54bbb2064be3ae37d2ce33aa683bc58f4b1b557082bde4dfdfad6c161b4d19e3b0d2e4aa8bb3e407510902a9c7b7d4d55012e0d4080185af33bf155fd64cd8aaa232f7a4db0279261e959b48de717fd33a2b1810ba5daef9507d7a9035d6b5fbd427b03216140bb86f42be001bc7c7e9f73246f2883cd4f78622e834ed3caf7d689288296f877ec167f1702f73d5a4465a4706604049f8b43d5fe6ae43941b13be3709854955b242166777c13a42c16bd9228ceb9f9c87b2003f79e3f3fae4799bfc9f049829ba63e9f547b0f3e484cb33ca66d500c4e7f7a97d69cbfe19e4b9bd", @nested={0x4, 0xf6}]}, @nested={0x151c, 0x81, 0x0, 0x1, [@nested={0x1487, 0xfe, 0x0, 0x1, [@nested={0xfa, 0xc, 0x0, 0x1, [@generic="238d0b3e97d525c742751c105613d2d591b3caa937638e125084c60daa787db133f20e2af0b010d1abbbd142ed60e79eb02e05", @nested={0x4, 0x5e}, @generic="ccf9b626f3a3a6ce87ba52427e643b8ae0d02ba9d62d693968e1b6a7ed45f6c99161457d4960142a0db7c094a73ba13759299213ad2883131b8fdc08530e78c27cc27f799f01a50b978013374314f93651f98beeefeb097216b6394dd655bc685bac1dbd4117fc6144a844b39dddcee4b83d739c9ab026820c1b44ecce17854ed6349048c875e53ee80b27e4d7c390434d4e564109c129c91add117566c67e47f871c902e6d2c84983901437bd1be5eb634f9e2054d8f400362b60", @nested={0x4, 0x12f}]}, @generic="fb371909eab0a2ce4c44fdcbbca114c750352e731043a652dd09dd22af7248446374961cd3c7af0690f7312fe0474458b032c4eaeabd5aad7e98cf6a60fbaedfeb3cad4ff31fa0be3fd3f639f325943c1261407c8761f74cecb83576f8ef71cff97a0c1dce014543365252759e147f72fde12fe73089f86fa2b37a8208301d5a41800bbfd6e88d6f0c882e9ee2e1194d", @generic="5f598a3e3c5422d8ca727e8b611e3d4524351e00ccc0933deb0c65a994bffe21adeedcf3daade35bf462e6566119481fda4ab16d1b4d54d1f58fe542be1e2f2d3407917653ffa91dc82bb8d85a6be09e60e273726d1bfcb480bb441e7db88ef1be6a7241ee88cfac2b4895adc28d81b87ad4ac81dae882b97a3ba272c0fbf7362108b31fa5618d1a70cc065215f5c51528fa16062bf9613fa4a322", @generic="cbbb7b88b3fff617d181260e135f00706271b2397e59c316650d619d8388b91e8211d3173594bcce95e7c80f85d95fe54ac4cf8fd7e5bd5a9630b2272be17ff9e92a1cee7abd178624b33a144f4385d355cac40dcd70d75516dfb583882cc983fc4c0576fddb3116db0fe9f1245f7d8935096b8b03606ba68d8bb981196bd158e8cea769b36860e0eaa0f4aca10de436f6574a3f02891c5dc1feead06a3a65dadbc5e159c4516ec159ec5109c72856", @nested={0x10ec, 0xdf, 0x0, 0x1, [@generic="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", @typed={0xe, 0xa8, 0x0, 0x0, @str='+))}[#+::\x00'}, @nested={0x4, 0x6e}, @typed={0x8, 0x141, 0x0, 0x0, @pid}, @generic="37a48bbcd223d8b6191d7795295d6ba7b5fa5665bc2d472897db6ec473e1aa7312d183d7fa1a8952ddfbb945104290f6c9d37a37abb67c", @nested={0x4, 0x105}, @generic="d8783d9bb0294e459c0cd231ff12107981ce75ec210c48701d14b70feaecf21eb6a43edb6f195d7d159acec7b9e719565e03a751064635913bf96786501b83bee9a22d514b39657dbfd36879eecc37d2964a0a1a85bc0951f2950dc32039b40359168112a958230c76d0657c654a4f1c8b71c261de1be56abbccc5b7378368f698bff3b8883833624b", @typed={0x8, 0xf, 0x0, 0x0, @u32=0x3}]}, @nested={0xbf, 0x95, 0x0, 0x1, [@typed={0x8, 0xce, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x44}, @generic="db15ea881c3bb3ab19e63d2b30bc8309dae8feb6bf98cb08951dbec39f3b61de5a9208138be14565a376c667024dcb2a6c9b19a9e81672a2ac68df38d4d9278c3059d8321b6fb8cc09a64fd2622263df1b2750e351375f71c6c8a69ea0d176c41272492a5c6c4c45fcb48d943024182afe7bf0ccdee75cc0aeea25ef3c12fed91a91d73cf8378419feffffffffffffff56d4597e4f898a7e8006baa91bcd30cea7b776bb4fd149b300000000000000"]}, @generic='Y']}, @typed={0x89, 0xf4, 0x0, 0x0, @binary="2b792f6dacca461a2cfe5a60d8c10c9b88543b0c0db1e5b0d24d1e73e92072fb6b6f57a058f930f05d08c757f3b6ed4030f60bd711b922387d07a6631a197dfe31f2011355f0f6dd5d05cde0797f3aa8f8295dfe6dc9dd4072d901bbf623614f1d908bee4c1729d8f175a62ffd74fdc1bdd04970fab718acda82af093be9335fb0b8666fc4"}, @nested={0x4, 0x139}]}, @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x37, 0x0, 0x0, @fd=r4}]}]}, 0x2dc0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1d8, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV={0x1bc, 0xe, 0x0, 0x1, [@nested={0xc9, 0x3f, 0x0, 0x1, [@typed={0x4, 0x8a}, @typed={0x4, 0x9b}, @generic="de1a32ca79cabdcdcedaadb0c5fbc5fab192c7771f970dd2b446c528bce6bc3e7eb05614792963e5c9d9c7b0daf662379c681cda05756bbbe4e439aa3ca58ad52dbba10394c2bcf6b2af0603951dfde7091669913ecd77c0bed899b8ef7c1880fd453c18ae4fceba1ceb637dc0b51a4e2fa3aa96116c86ed9c82fe5caa3d89d8a54c3ccf9fc2b19e346bd28315fda3898fda86293b4273e1ff355c8891da9a02c03c0b0f68b24562aea3533b0c21566fa82b7117dc8fbd6f51e6f98ae5"]}, @nested={0xe9, 0xc6, 0x0, 0x1, [@nested={0x4, 0xaf}, @generic="139dc80f49f9685955d1ffcade567c1412d010417b0e4a7c346e2a8e1483ddd9675b634cd1714652a7e6a09a0ac19405a710177b5700ef891683c43d69c918e9e56ecb2007a076382331636e227de765aa71cd1462c40b9e77a4d7dc41aec4b38b00f826dbb48859de58253457063d6046fa42bb12a5b7236a7c2395b70de9e00ed6326efd3bd355343608ba6d453fa00ad19c04a63493aef017118bf87d32fd91f72e0b2456e4f21cd04503ba02675ff00633d29362864337", @nested={0x4, 0x4c}, @typed={0xc, 0x122, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x3b, 0x0, 0x0, @fd=r1}, @typed={0xe, 0x55, 0x0, 0x0, @str='TASKSTATS\x00'}]}]}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0x87}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40400}, 0x20000004) 2.773055083s ago: executing program 5 (id=1224): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) setrlimit$auto(0xb, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00058008000600", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790481008286dd000004000280"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) 2.539541667s ago: executing program 3 (id=1225): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535"}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x9, 0xc4, 0x8, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x9, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb78, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x3, 0x71, 0x0, 0x8, 0x2, 0x3, 0xffffffffffffffbb, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000000, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0x9, 0x3ff, 0x8, 0x7, 0xffff, 0x50ce0883, 0x3d9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x2, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x6, 0x4, 0x2, 0x3, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x1000, 0x45f3, 0x1, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x6, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x8, 0x9, 0xfffffffffffffffb, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) pselect6$auto(0x8, &(0x7f0000000000)={[0x4, 0x8, 0x8, 0x8000, 0x1, 0x0, 0x3, 0x9, 0xdc, 0x7fff, 0x10000, 0x7, 0x9, 0x2, 0x4, 0x80000000]}, &(0x7f0000000600)={[0x998, 0x3, 0xd83f, 0x9e, 0x9, 0x9db, 0x7, 0x769d, 0x6fc1, 0x5044, 0x6, 0x78, 0x406ba7f2, 0x0, 0x7, 0x2]}, &(0x7f0000000680)={[0xff, 0x9, 0x3, 0xce, 0x9, 0x1, 0x6e5, 0x2, 0x1, 0x7f, 0x100, 0x5, 0x1, 0x3, 0x45, 0x4]}, &(0x7f0000000700)={0x7ff, 0x80000000}, &(0x7f0000000740)="5a43c5a4627a91177c43530cc7fea0f5e3c80df5dc340a4579ffe42c953c2c0d2493ec57ffbabe81c5416187c134c509399a1c90da1a337540fb6a1b8b20eb863fb283d3d058e769b0125112b8ce6707e4c17397565400cf54608dcf260e12d131363731cfb4fe30d7e40cd229b2f9f67343eea68c80ce367143b904c01bd3c3183e542f5337d6e76e6019ea6d5fd1ce98b5be0ce3dbe0529837c24f815ec6fadefedf118a3d9cbb450e5173acee084ea7cfda547b66d608d44bae1394aac705fc18d339baf26e774f837f8f2f23c56dfd8f5da80c84f2ce6694f881ed0cc7b1d13d") sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) 2.349677922s ago: executing program 5 (id=1226): mmap$auto(0x3, 0x401, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x5, 0x200004, 0x4000000000e2, 0x40eb2, 0xffffffffffffffff, 0x27fffffffffc) (async) clone3$auto(0x0, 0x40) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) r0 = socket(0xa, 0x3, 0x3914) (async) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) (async) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer1\x00', 0x620c00, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0xa, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000db3d16cfe0c5c98bce2d607e95ec61d169d9ece0efef6364bac761c062a7b3b68f6dbace364b9bccf35baf5e5828b3bf9584f723b2c7b6f5963e9f9e2b47de6f61eca0f6adc88e4c669e451a04a11e", @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf251200000008000900010000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0800070006000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) mbind$auto(0xd, 0x2091d2, 0xc, 0x0, 0x27, 0x2) mmap$auto(0x7, 0x20009, 0x40, 0x17, r0, 0xffef) (async) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, 0x0) (async) brk$auto(0x8) (async) fstat$auto(0xffffffffffffffff, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) (async) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0x1) (async) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) (async) mmap$auto(0xfffffffffffffffc, 0x2000d, 0x4000000000db, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x1c, 0x2, 0x4) 2.279626155s ago: executing program 3 (id=1227): mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x11, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x80002, 0x0) openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$auto_F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28adc1, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mincore$auto(0x1000, 0x8002, 0x0) fcntl$auto(0x8000000000000001, 0x3, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r2 = fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = getpgid$auto(0xffffffffffffffff) ptrace$auto_PTRACE_SETFPREGS(0xf, r3, 0xfffffffffffffffc, 0xffffffffffff1b02) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) mmap$auto(0x4, 0xbd, 0x4000000000df, 0x12, r1, 0x7ffe) close_range$auto(0x0, 0xfffffffffffff000, 0x2) sendmsg$auto_TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5c030000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf25120000006800028008003a002c2c5d00100053800c001900080000000000000008004a00", @ANYRES32=r0, @ANYBLOB="3900bd800b0006006e732f6d6e740000130cf8b1bb3dab0971a6788b976c0d2895daf3d70de22ebd602b444f3994cd010085ffb41827f60ac90000000800ae00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="2f00097432a41186f0e7767054f0f9f0a3560d17f3c4cc2e8272875455bc14f7ff3b8fbc17a23549479f5b4558612a7e8db19ae0710b483783fa82c21622a902f7427be353dfbdf060de25bdc6234f4ea8ad01b0c7a113615b54165e94eabd03ebd97ffc98cbc4727a468629121a30d3c0c82c19338656cac5956a9bdb21964d9428f4924d6cf41b50dcc5e3e6641632a2c37831f93adb80e1e26da603a09b7ca20d698557627a7134579783fdef001aca8ad248f1d02cb0c00d94326ee9aa3cb01f19f27704f277008648997d2b0a391804c4502db93ce8d0024a7b6e0411ce3de61c08004a00", @ANYRES32=r3, @ANYBLOB="00c30000006c1ff57064860a10c14ed63387674c0372db5d480c93e681be142ad2cfda5190b067898000b583ec0f3ec08c76456e45d3d7547cb1b1c4d7676e8954360e0ff070bdde5b05390e5f504b48b4b0729ff95b7a9158a7e3ceb5821ea5e94b28da40490b29c56377a55ca34e58a61df90530c9a8af6d98c13de219b7114d943785dcdd6abab0dab64158fe16dd57e4e32c2426b0b4532bd99284ca595a60035a39e3890384ab2ba8bac31bb3d475cf27739d372133d11e76093edbd5c0cd4820eb0a67c100"], 0x35c}, 0x1, 0x0, 0x0, 0x1}, 0x801) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/mnt\x00') socket(0x2, 0x1, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0xce1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01006abd7000fcdbdf251400000008001400000000000c00018008000100", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4089c}, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) ioctl$auto(0x1, 0x890b, 0x8) 2.126142389s ago: executing program 1 (id=1228): close_range$auto(0x2, 0x8, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ptyy3\x00', 0x7bbfaf896657e87c, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) select$auto(0x8, 0x0, 0x0, &(0x7f0000000200)={[0x2, 0xffffffffffffff49, 0x2, 0x200000000015, 0x80000001, 0x7, 0x5, 0x5, 0x8, 0x40000000000000, 0x2de1, 0x8, 0x7fff, 0xe, 0x8000000000000, 0x4]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffffe) ioctl$auto_FIBMAP(r1, 0x1, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x74c) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0x400000eb1, r0, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x199600, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), r2) sendmsg$auto_BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="b20a", @ANYRES16=r3, @ANYBLOB="21032bbd7000ffdbdf251000000008003c00000100000a001f00b6b82d7d73b20000060028000400000005000a0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x1a3000, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioctl$auto_EVIOCSREP(r4, 0x40084503, 0x0) 1.555476266s ago: executing program 5 (id=1229): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x43, 0x0) r0 = accept$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock, &(0x7f0000000040)=0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x8, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) init_module$auto(&(0x7f0000000100)="2d78acf211730000a92b0fb0d2d045c41b24f60648e550929b228a71cb240f4ea86e85000000", 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x40502, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101042, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4138ae84, &(0x7f0000000040)={0x2, 0x179}) fcntl$getown(r0, 0x9) fsopen$auto(0x0, 0x1) 1.460733313s ago: executing program 3 (id=1230): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) ioctl$auto(0x4000000000000c8, 0x1000, 0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40200, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3) getsockopt$auto_SO_WIFI_STATUS(r0, 0x7, 0x29, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1ab40, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40, 0x0) read$auto(r4, 0x0, 0x2000e1d) writev$auto(r3, &(0x7f0000000200)={0x0, 0xb}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x5, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty24\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='L', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) connect$auto(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x1b, 0x80, 0x4, 0x81, 0x7f, @broadcast}, 0x80) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/syz_tun/dad_transmits\x00', 0x2000, 0x0) read$auto(r6, 0x0, 0x1ff) write$auto(0x3, 0x0, 0x7) 891.22027ms ago: executing program 1 (id=1231): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x2a00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x13, r2, 0x8000) io_uring_setup$auto(0x58, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) 289.48292ms ago: executing program 5 (id=1232): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r1 = socket(0x22, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x5) ioctl$auto(r0, 0x40104d01, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000012c0)) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @local}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 234.782836ms ago: executing program 1 (id=1233): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', &(0x7f0000001100)={0x8, 0xd, "2e5710c910109d7e"}, &(0x7f0000001180), 0x2) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) statx$auto(0x564, 0xfffffffffffffffc, 0x1000, 0x3, 0x0) fanotify_init$auto(0x602, 0x1) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0xc0002, 0x0) write$auto_sg_fops_sg(r2, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c0ae2c7", 0x30) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/286, 0x11e) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000640), 0x8182, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000440)={0x1}) chown$auto(&(0x7f0000000080)='}[,&*}\x00', 0x0, 0xffffffffffffffff) 0s ago: executing program 5 (id=1234): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0\x00', 0x48000, 0x0) ioctl$auto_MEMGETINFO(r0, 0x80204d01, &(0x7f0000000240)={0x40, 0xfffffff0, 0x4, 0x5, 0x3, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb4, 0x401, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2d36bf14f4f911e8, 0x5, 0x0) r2 = socket(0xa, 0x1, 0x8536) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile$auto(r3, r0, 0x0, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) rename$auto(&(0x7f0000000140)='.\x00', 0x0) fstatfs$auto(0x3, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) r4 = prctl$auto(0x0, 0x20000000000000a, 0x7fffffffefff, 0x0, 0xfffffffffffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/batadv_slave_0/keep_addr_on_down\x00', 0xb83a40, 0x0) epoll_ctl$auto(r4, 0x8000, r5, &(0x7f0000000040)={0xce2, 0x80}) mmap$auto(0x2000000000000, 0x5, 0x7, 0x15, 0x2, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000000c0), r1) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) socket(0xa, 0x1, 0x81) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq0/type\x00', 0x442380, 0x0) kernel console output (not intermixed with test programs): folio+0x267/0x8e0 [ 279.831505][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 279.831531][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 279.831560][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 279.831587][ T5837] ? swap_cache_get_folio+0x293/0x8e0 [ 279.831616][ T5837] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 279.831642][ T5837] ? __pfx_get_swap_device+0x10/0x10 [ 279.831677][ T5837] ? rcu_read_unlock+0x2d/0xb0 [ 279.831708][ T5837] ? do_swap_page+0x962/0x64a0 [ 279.831730][ T5837] do_swap_page+0x962/0x64a0 [ 279.831758][ T5837] ? __lock_acquire+0x436/0x2890 [ 279.831787][ T5837] ? __pfx_do_swap_page+0x10/0x10 [ 279.831814][ T5837] ? __pfx_default_wake_function+0x10/0x10 [ 279.831855][ T5837] ? rcu_is_watching+0x12/0xc0 [ 279.831888][ T5837] ? ___pte_offset_map+0x175/0x380 [ 279.831925][ T5837] __handle_mm_fault+0x19cb/0x2bb0 [ 279.831955][ T5837] ? reacquire_held_locks+0xcd/0x1f0 [ 279.831978][ T5837] ? __pfx___handle_mm_fault+0x10/0x10 [ 279.832007][ T5837] ? lock_vma_under_rcu+0x176/0x580 [ 279.832041][ T5837] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 279.832082][ T5837] handle_mm_fault+0x3fe/0xad0 [ 279.832112][ T5837] do_user_addr_fault+0x60c/0x1370 [ 279.832148][ T5837] ? rcu_is_watching+0x12/0xc0 [ 279.832184][ T5837] exc_page_fault+0x64/0xc0 [ 279.832221][ T5837] asm_exc_page_fault+0x26/0x30 [ 279.832243][ T5837] RIP: 0033:0x7f4e24f8563c [ 279.832263][ T5837] Code: 89 e9 31 d2 be 01 00 00 00 89 df e8 de fe ff ff 48 8b 94 24 98 00 00 00 64 48 2b 14 25 28 00 00 00 75 24 48 81 c4 a8 00 00 00 <5b> 5d c3 90 48 c7 c0 a8 ff ff ff 64 c7 00 14 00 00 00 89 df e8 cb [ 279.832285][ T5837] RSP: 002b:00007ffd7f117488 EFLAGS: 00010206 [ 279.832304][ T5837] RAX: 000055558b52c590 RBX: 0000000000000003 RCX: 00007f4e251bacc0 [ 279.832319][ T5837] RDX: 0000000000000000 RSI: 0000000000008030 RDI: 000055558b52c590 [ 279.832333][ T5837] RBP: 00007ffd7f1173e0 R08: 0000000000000000 R09: 0000000000000000 [ 279.832347][ T5837] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000000081 [ 279.832361][ T5837] R13: 0000000000000000 R14: 0000000000043992 R15: 00007ffd7f117530 [ 279.832391][ T5837] [ 279.832399][ T5837] memory: usage 3072kB, limit 3072kB, failcnt 7080 [ 280.821326][ T8351] zero sized request [ 281.616701][ T5837] memory+swap: usage 536kB, limit 9007199254740988kB, failcnt 0 [ 281.658364][ T5837] kmem: usage 432kB, limit 9007199254740988kB, failcnt 0 [ 281.722122][ T5837] Memory cgroup stats for /syz0: [ 281.722560][ T5837] cache 0 [ 281.783357][ T5837] rss 0 [ 281.787513][ T5837] rss_huge 0 [ 281.833677][ T5837] shmem 0 [ 281.837057][ T5837] mapped_file 0 [ 281.891339][ T5837] dirty 0 [ 281.894538][ T5837] writeback 0 [ 281.898365][ T5837] workingset_refault_anon 2890 [ 281.964765][ T5837] workingset_refault_file 1761 [ 281.994251][ T8365] zero sized request [ 282.010743][ T5837] swap 53248 [ 282.014778][ T5837] swapcached 16384 [ 282.049531][ T5837] pgpgin 111663 [ 282.074781][ T5837] pgpgout 112170 [ 282.095899][ T8367] netlink: 334 bytes leftover after parsing attributes in process `syz.1.520'. [ 282.112206][ T5837] pgfault 120888 [ 282.116023][ T5837] pgmajfault 973 [ 282.159206][ T5837] inactive_anon 16384 [ 282.168826][ T5837] active_anon 0 [ 282.188538][ T5837] inactive_file 0 [ 282.205605][ T5837] active_file 0 [ 282.229096][ T5837] unevictable 0 [ 282.236818][ T5837] hierarchical_memory_limit 3145728 [ 282.254593][ T5837] hierarchical_memsw_limit 9223372036854771712 [ 282.303344][ T5837] total_cache 0 [ 282.338295][ T5837] total_rss 0 [ 282.355521][ T5837] total_rss_huge 0 [ 282.371355][ T5837] total_shmem 0 [ 282.391063][ T5837] total_mapped_file 0 [ 282.401308][ T5837] total_dirty 0 [ 282.413159][ T5837] total_writeback 0 [ 282.428696][ T5837] total_workingset_refault_anon 2890 [ 282.449952][ T5837] total_workingset_refault_file 1761 [ 282.476879][ T5837] total_swap 53248 [ 282.511932][ T5837] total_swapcached 16384 [ 282.534131][ T5837] total_pgpgin 111663 [ 282.547683][ T5837] total_pgpgout 112170 [ 282.569652][ T5837] total_pgfault 120888 [ 282.586333][ T5837] total_pgmajfault 973 [ 282.607908][ T5837] total_inactive_anon 16384 [ 282.624884][ T5837] total_active_anon 0 [ 282.639620][ T5837] total_inactive_file 0 [ 282.663536][ T5837] total_active_file 0 [ 282.682925][ T5837] total_unevictable 0 [ 282.695011][ T5837] anon_cost 0 [ 282.703407][ T5837] file_cost 0 [ 282.714105][ T5837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.507,pid=8270,uid=0 [ 282.749614][ T5837] Memory cgroup out of memory: OOM victim 8270 (syz.0.507) is already exiting. Skip killing the task [ 283.009260][ T8376] zero sized request [ 284.344433][ T8398] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 284.371788][ T8400] zero sized request [ 286.392840][ T8423] zero sized request [ 287.619357][ T8434] zero sized request [ 287.652635][ T8434] netlink: 334 bytes leftover after parsing attributes in process `syz.0.540'. [ 287.960165][ T8439] zero sized request [ 288.202513][ T8443] netlink: 334 bytes leftover after parsing attributes in process `syz.0.533'. [ 289.244070][ T8448] zero sized request [ 289.253726][ T8446] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 292.144298][ T8480] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 292.473655][ T8485] netlink: 334 bytes leftover after parsing attributes in process `syz.3.544'. [ 293.369540][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 293.706233][ T8489] FAULT_INJECTION: forcing a failure. [ 293.706233][ T8489] name failslab, interval 1, probability 0, space 0, times 0 [ 293.780320][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.3.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.780359][ T8489] Tainted: [L]=SOFTLOCKUP [ 293.780368][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.780382][ T8489] Call Trace: [ 293.780390][ T8489] [ 293.780399][ T8489] dump_stack_lvl+0x16c/0x1f0 [ 293.780441][ T8489] should_fail_ex+0x512/0x640 [ 293.780468][ T8489] ? __kmalloc_cache_noprof+0x5f/0x800 [ 293.780500][ T8489] should_failslab+0xc2/0x120 [ 293.780538][ T8489] __kmalloc_cache_noprof+0x80/0x800 [ 293.780567][ T8489] ? alloc_info_private+0xc4/0x1b0 [ 293.780617][ T8489] ? alloc_info_private+0xc4/0x1b0 [ 293.780638][ T8489] alloc_info_private+0xc4/0x1b0 [ 293.780662][ T8489] snd_info_text_entry_open+0xae/0x2e0 [ 293.780686][ T8489] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 293.780716][ T8489] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 293.780741][ T8489] proc_reg_open+0x2ab/0x5f0 [ 293.780780][ T8489] do_dentry_open+0x748/0x1590 [ 293.780816][ T8489] ? __pfx_proc_reg_open+0x10/0x10 [ 293.780855][ T8489] vfs_open+0x82/0x3f0 [ 293.780885][ T8489] path_openat+0x2078/0x3140 [ 293.780931][ T8489] ? __pfx_path_openat+0x10/0x10 [ 293.780979][ T8489] do_filp_open+0x20b/0x470 [ 293.781017][ T8489] ? __pfx_do_filp_open+0x10/0x10 [ 293.781075][ T8489] ? alloc_fd+0x471/0x7d0 [ 293.781119][ T8489] do_sys_openat2+0x121/0x290 [ 293.781146][ T8489] ? __pfx_do_sys_openat2+0x10/0x10 [ 293.781174][ T8489] ? find_held_lock+0x2b/0x80 [ 293.781213][ T8489] __x64_sys_openat+0x174/0x210 [ 293.781242][ T8489] ? __pfx___x64_sys_openat+0x10/0x10 [ 293.781281][ T8489] do_syscall_64+0xcd/0xf80 [ 293.781321][ T8489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.781345][ T8489] RIP: 0033:0x7fdc1738f7c9 [ 293.781365][ T8489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.781388][ T8489] RSP: 002b:00007fdc181eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.781410][ T8489] RAX: ffffffffffffffda RBX: 00007fdc175e6090 RCX: 00007fdc1738f7c9 [ 293.781426][ T8489] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 293.781442][ T8489] RBP: 00007fdc17413f91 R08: 0000000000000000 R09: 0000000000000000 [ 293.781457][ T8489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.781471][ T8489] R13: 00007fdc175e6128 R14: 00007fdc175e6090 R15: 00007ffc9c89bb48 [ 293.781502][ T8489] [ 294.077177][ T7801] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 294.089844][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 294.089881][ T7801] Tainted: [L]=SOFTLOCKUP [ 294.089889][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.089903][ T7801] Call Trace: [ 294.089913][ T7801] [ 294.089923][ T7801] dump_stack_lvl+0x16c/0x1f0 [ 294.089965][ T7801] dump_header+0x101/0x960 [ 294.089995][ T7801] oom_kill_process+0x176/0x910 [ 294.090041][ T7801] out_of_memory+0x350/0x1700 [ 294.090068][ T7801] ? __lock_acquire+0x436/0x2890 [ 294.090094][ T7801] ? __pfx_out_of_memory+0x10/0x10 [ 294.090128][ T7801] mem_cgroup_out_of_memory+0x118/0x130 [ 294.090157][ T7801] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 294.090192][ T7801] ? do_raw_spin_unlock+0x172/0x230 [ 294.090225][ T7801] try_charge_memcg+0x695/0xd30 [ 294.090268][ T7801] ? __pfx_try_charge_memcg+0x10/0x10 [ 294.090311][ T7801] ? find_held_lock+0x2b/0x80 [ 294.090347][ T7801] charge_memcg+0x8a/0x230 [ 294.090383][ T7801] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 294.090412][ T7801] __read_swap_cache_async+0x397/0x500 [ 294.090446][ T7801] ? __pfx___read_swap_cache_async+0x10/0x10 [ 294.090475][ T7801] ? finish_task_switch.isra.0+0x202/0xbd0 [ 294.090511][ T7801] ? rcu_is_watching+0x12/0xc0 [ 294.090543][ T7801] ? finish_task_switch.isra.0+0x207/0xbd0 [ 294.090575][ T7801] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.090615][ T7801] swap_cluster_readahead+0x432/0x770 [ 294.090651][ T7801] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 294.090684][ T7801] ? __lock_acquire+0x436/0x2890 [ 294.090718][ T7801] ? get_vma_policy+0x242/0x3c0 [ 294.090742][ T7801] swapin_readahead+0x160/0x1220 [ 294.090790][ T7801] ? __pfx_swapin_readahead+0x10/0x10 [ 294.090821][ T7801] ? find_held_lock+0x2b/0x80 [ 294.090850][ T7801] ? swap_cache_get_folio+0x267/0x8e0 [ 294.090877][ T7801] ? swap_cache_get_folio+0x267/0x8e0 [ 294.090903][ T7801] ? swap_cache_get_folio+0x267/0x8e0 [ 294.090933][ T7801] ? swap_cache_get_folio+0x267/0x8e0 [ 294.090960][ T7801] ? swap_cache_get_folio+0x293/0x8e0 [ 294.090990][ T7801] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 294.091021][ T7801] ? __pfx_get_swap_device+0x10/0x10 [ 294.091056][ T7801] ? rcu_read_unlock+0x2d/0xb0 [ 294.091087][ T7801] ? do_swap_page+0x962/0x64a0 [ 294.091109][ T7801] do_swap_page+0x962/0x64a0 [ 294.091138][ T7801] ? __lock_acquire+0x436/0x2890 [ 294.091167][ T7801] ? __pfx_do_swap_page+0x10/0x10 [ 294.091194][ T7801] ? __pfx_default_wake_function+0x10/0x10 [ 294.091235][ T7801] ? rcu_is_watching+0x12/0xc0 [ 294.091267][ T7801] ? ___pte_offset_map+0x175/0x380 [ 294.091313][ T7801] __handle_mm_fault+0x19cb/0x2bb0 [ 294.091343][ T7801] ? reacquire_held_locks+0xcd/0x1f0 [ 294.091366][ T7801] ? __pfx___handle_mm_fault+0x10/0x10 [ 294.091395][ T7801] ? lock_vma_under_rcu+0x176/0x580 [ 294.091429][ T7801] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 294.091469][ T7801] handle_mm_fault+0x3fe/0xad0 [ 294.091500][ T7801] do_user_addr_fault+0x60c/0x1370 [ 294.091532][ T7801] ? rcu_is_watching+0x12/0xc0 [ 294.091568][ T7801] exc_page_fault+0x64/0xc0 [ 294.091603][ T7801] asm_exc_page_fault+0x26/0x30 [ 294.091626][ T7801] RIP: 0033:0x7f2fb47b75f0 [ 294.091646][ T7801] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 294.091668][ T7801] RSP: 002b:00007ffc53c8cbe8 EFLAGS: 00010246 [ 294.091686][ T7801] RAX: 0000000000000000 RBX: 000000000000005e RCX: 00007f2fb47c2085 [ 294.091701][ T7801] RDX: 00007ffc53c8cc30 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.091715][ T7801] RBP: 00007ffc53c8cc9c R08: 0000000000000000 R09: 0000000000000000 [ 294.091729][ T7801] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 294.091742][ T7801] R13: 00000000000927c0 R14: 00000000000474d5 R15: 00007ffc53c8ccf0 [ 294.091775][ T7801] [ 294.091784][ T7801] memory: usage 3072kB, limit 3072kB, failcnt 3982 [ 294.986580][ T7801] memory+swap: usage 5436kB, limit 9007199254740988kB, failcnt 0 [ 295.019677][ T7801] kmem: usage 452kB, limit 9007199254740988kB, failcnt 0 [ 295.038302][ T7801] Memory cgroup stats for /syz4: [ 295.038468][ T7801] cache 692224 [ 295.070637][ T7801] rss 1921024 [ 295.082391][ T7801] rss_huge 0 [ 295.096640][ T7801] shmem 692224 [ 295.105010][ T7801] mapped_file 692224 [ 295.109338][ T7801] dirty 0 [ 295.149479][ T7801] writeback 0 [ 295.162193][ T7801] workingset_refault_anon 1647 [ 295.199514][ T7801] workingset_refault_file 0 [ 295.224484][ T7801] swap 2420736 [ 295.235779][ T7801] swapcached 69632 [ 295.259192][ T7801] pgpgin 12763 [ 295.275691][ T7801] pgpgout 13641 [ 295.288484][ T7801] pgfault 14286 [ 295.301297][ T7801] pgmajfault 415 [ 295.311702][ T7801] inactive_anon 40960 [ 295.371386][ T7801] active_anon 28672 [ 295.376016][ T7801] inactive_file 0 [ 295.404413][ T7801] active_file 0 [ 295.424058][ T7801] unevictable 2613248 [ 295.445723][ T7801] hierarchical_memory_limit 3145728 [ 295.473518][ T7801] hierarchical_memsw_limit 9223372036854771712 [ 295.509033][ T7801] total_cache 692224 [ 295.530894][ T7801] total_rss 1921024 [ 295.564155][ T7801] total_rss_huge 0 [ 295.599571][ T7801] total_shmem 692224 [ 295.619679][ T7801] total_mapped_file 692224 [ 295.656408][ T7801] total_dirty 0 [ 295.699499][ T7801] total_writeback 0 [ 295.715842][ T7801] total_workingset_refault_anon 1647 [ 295.764488][ T7801] total_workingset_refault_file 0 [ 295.804130][ T7801] total_swap 2420736 [ 295.849776][ T7801] total_swapcached 69632 [ 295.855044][ T7801] total_pgpgin 12763 [ 295.891537][ T7801] total_pgpgout 13641 [ 295.896557][ T7801] total_pgfault 14286 [ 295.934112][ T7801] total_pgmajfault 415 [ 295.971483][ T7801] total_inactive_anon 40960 [ 296.018322][ T7801] total_active_anon 28672 [ 296.037767][ T7801] total_inactive_file 0 [ 296.063557][ T7801] total_active_file 0 [ 296.101878][ T7801] total_unevictable 2613248 [ 296.106827][ T7801] anon_cost 0 [ 296.136012][ T7801] file_cost 0 [ 296.169686][ T7801] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.539,pid=8460,uid=0 [ 296.280406][ T7801] Memory cgroup out of memory: Killed process 8460 (syz.4.539) total-vm:170012kB, anon-rss:2932kB, file-rss:22332kB, shmem-rss:640kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 296.385305][ T8512] zero sized request [ 296.949552][ T5848] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 297.604634][ T8527] zero sized request [ 299.648458][ T8554] openvswitch: netlink: Duplicate or invalid key (type 0). [ 299.791984][ T8566] openvswitch: netlink: Duplicate or invalid key (type 0). [ 300.329796][ T8570] netlink: 334 bytes leftover after parsing attributes in process `syz.0.561'. [ 300.657495][ T8574] zero sized request [ 300.689962][ T8574] netlink: 334 bytes leftover after parsing attributes in process `syz.0.571'. [ 301.445023][ T8581] zswap: compressor ®ÄsÖ!œÂ<æ“ not available [ 303.339962][ T8600] zero sized request [ 303.664530][ T8607] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 303.718827][ T8607] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 303.811606][ T8607] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 303.960384][ T8607] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 304.087749][ T8607] page dumped because: unmovable page [ 304.119163][ T8607] page_owner info is not present (never set?) [ 304.410334][ T8614] zero sized request [ 304.710309][ T5848] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 305.117990][ T8622] random: crng reseeded on system resumption [ 305.281488][ T5848] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 306.608433][ T8635] openvswitch: netlink: Duplicate or invalid key (type 0). [ 307.248471][ T8636] binder: 8629:8636 ioctl c0306201 0 returned -14 [ 309.403289][ T8646] syz.4.576 (8646) used greatest stack depth: 18800 bytes left [ 309.658536][ T8630] kexec: Could not allocate control_code_buffer [ 309.951610][ T8683] zero sized request [ 311.487847][ T8707] zero sized request [ 312.761683][ T8712] FAULT_INJECTION: forcing a failure. [ 312.761683][ T8712] name failslab, interval 1, probability 0, space 0, times 0 [ 312.826611][ T8712] CPU: 0 UID: 0 PID: 8712 Comm: syz.1.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.826652][ T8712] Tainted: [L]=SOFTLOCKUP [ 312.826661][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.826676][ T8712] Call Trace: [ 312.826685][ T8712] [ 312.826694][ T8712] dump_stack_lvl+0x16c/0x1f0 [ 312.826738][ T8712] should_fail_ex+0x512/0x640 [ 312.826765][ T8712] ? __kmalloc_cache_noprof+0x5f/0x800 [ 312.826797][ T8712] should_failslab+0xc2/0x120 [ 312.826836][ T8712] __kmalloc_cache_noprof+0x80/0x800 [ 312.826864][ T8712] ? alloc_info_private+0xc4/0x1b0 [ 312.826891][ T8712] ? alloc_info_private+0xc4/0x1b0 [ 312.826913][ T8712] alloc_info_private+0xc4/0x1b0 [ 312.826937][ T8712] snd_info_text_entry_open+0xae/0x2e0 [ 312.826961][ T8712] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 312.826991][ T8712] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 312.827016][ T8712] proc_reg_open+0x2ab/0x5f0 [ 312.827050][ T8712] do_dentry_open+0x748/0x1590 [ 312.827086][ T8712] ? __pfx_proc_reg_open+0x10/0x10 [ 312.827132][ T8712] vfs_open+0x82/0x3f0 [ 312.827161][ T8712] path_openat+0x2078/0x3140 [ 312.827208][ T8712] ? __pfx_path_openat+0x10/0x10 [ 312.827257][ T8712] do_filp_open+0x20b/0x470 [ 312.827296][ T8712] ? __pfx_do_filp_open+0x10/0x10 [ 312.827356][ T8712] ? alloc_fd+0x471/0x7d0 [ 312.827400][ T8712] do_sys_openat2+0x121/0x290 [ 312.827427][ T8712] ? __pfx_do_sys_openat2+0x10/0x10 [ 312.827456][ T8712] ? find_held_lock+0x2b/0x80 [ 312.827496][ T8712] __x64_sys_openat+0x174/0x210 [ 312.827524][ T8712] ? __pfx___x64_sys_openat+0x10/0x10 [ 312.827564][ T8712] do_syscall_64+0xcd/0xf80 [ 312.827604][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.827629][ T8712] RIP: 0033:0x7f0dbf58f7c9 [ 312.827649][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.827673][ T8712] RSP: 002b:00007f0dc0446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 312.827696][ T8712] RAX: ffffffffffffffda RBX: 00007f0dbf7e5fa0 RCX: 00007f0dbf58f7c9 [ 312.827712][ T8712] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 312.827728][ T8712] RBP: 00007f0dbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.827744][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.827758][ T8712] R13: 00007f0dbf7e6038 R14: 00007f0dbf7e5fa0 R15: 00007fff547d1638 [ 312.827789][ T8712] [ 314.237847][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 314.581209][ T8733] zero sized request [ 314.622538][ T8733] netlink: 334 bytes leftover after parsing attributes in process `syz.3.593'. [ 314.943413][ T8738] openvswitch: netlink: Duplicate or invalid key (type 0). [ 316.097209][ T8754] random: crng reseeded on system resumption [ 318.816654][ T8779] random: crng reseeded on system resumption [ 320.031857][ T8792] zero sized request [ 320.397891][ T8797] random: crng reseeded on system resumption [ 320.550790][ T5848] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 321.701710][ T8806] openvswitch: netlink: Duplicate or invalid key (type 0). [ 321.813001][ T8809] kernel read not supported for file /\*)A (pid: 8809 comm: syz.3.609) [ 321.856612][ T31] audit: type=1800 audit(1766930253.100:8): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.609" name="\*)A" dev="mqueue" ino=24957 res=0 errno=0 [ 322.203316][ T8812] zero sized request [ 322.478976][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 326.720205][ T8871] kernel read not supported for file /\*)A (pid: 8871 comm: syz.1.620) [ 326.775075][ T31] audit: type=1800 audit(1766930258.020:9): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.620" name="\*)A" dev="mqueue" ino=8568 res=0 errno=0 [ 327.369834][ T8880] zero sized request [ 327.755579][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.762656][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.840317][ T8897] zero sized request [ 330.118551][ T8918] zero sized request [ 331.554393][ T8930] zero sized request [ 331.609015][ T8930] netlink: 334 bytes leftover after parsing attributes in process `syz.0.636'. [ 332.759973][ T8948] zero sized request [ 335.639620][ T8985] vhci_hcd vhci_hcd.0: invalid port number 16 [ 335.780041][ T8988] zero sized request [ 336.253916][ T8996] zero sized request [ 337.072102][ T9001] zero sized request [ 337.614532][ T31] audit: type=1800 audit(1766930268.860:10): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.648" name="features" dev="configfs" ino=31506 res=0 errno=0 [ 338.320711][ T9017] zero sized request [ 339.561298][ T9032] zero sized request [ 339.595676][ T9032] netlink: 334 bytes leftover after parsing attributes in process `syz.1.653'. [ 339.938563][ T9036] zero sized request [ 340.962574][ T9043] zero sized request [ 345.499026][ T9084] zero sized request [ 345.527119][ T9087] zero sized request [ 347.059728][ T9110] FAULT_INJECTION: forcing a failure. [ 347.059728][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 347.125282][ T9110] CPU: 0 UID: 0 PID: 9110 Comm: syz.3.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.125320][ T9110] Tainted: [L]=SOFTLOCKUP [ 347.125328][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.125342][ T9110] Call Trace: [ 347.125349][ T9110] [ 347.125358][ T9110] dump_stack_lvl+0x16c/0x1f0 [ 347.125399][ T9110] should_fail_ex+0x512/0x640 [ 347.125424][ T9110] ? __kmalloc_noprof+0xca/0x910 [ 347.125453][ T9110] should_failslab+0xc2/0x120 [ 347.125490][ T9110] __kmalloc_noprof+0xeb/0x910 [ 347.125516][ T9110] ? __pfx_aa_file_perm+0x10/0x10 [ 347.125548][ T9110] ? kernfs_fop_write_iter+0x237/0x570 [ 347.125589][ T9110] ? kernfs_fop_write_iter+0x237/0x570 [ 347.125623][ T9110] ? __lock_acquire+0x436/0x2890 [ 347.125643][ T9110] kernfs_fop_write_iter+0x237/0x570 [ 347.125683][ T9110] do_iter_readv_writev+0x662/0x9e0 [ 347.125718][ T9110] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 347.125764][ T9110] vfs_writev+0x35f/0xde0 [ 347.125796][ T9110] ? rcu_is_watching+0x12/0xc0 [ 347.125835][ T9110] ? __pfx_vfs_writev+0x10/0x10 [ 347.125866][ T9110] ? fdget_pos+0x2a2/0x370 [ 347.125922][ T9110] ? __fget_files+0x20e/0x3c0 [ 347.125954][ T9110] ? __fget_files+0x190/0x3c0 [ 347.125994][ T9110] ? do_writev+0x132/0x340 [ 347.126023][ T9110] do_writev+0x132/0x340 [ 347.126054][ T9110] ? __pfx_do_writev+0x10/0x10 [ 347.126095][ T9110] do_syscall_64+0xcd/0xf80 [ 347.126134][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.126157][ T9110] RIP: 0033:0x7fdc1738f7c9 [ 347.126177][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.126200][ T9110] RSP: 002b:00007fdc1820c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 347.126223][ T9110] RAX: ffffffffffffffda RBX: 00007fdc175e5fa0 RCX: 00007fdc1738f7c9 [ 347.126239][ T9110] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 347.126259][ T9110] RBP: 00007fdc1820c090 R08: 0000000000000000 R09: 0000000000000000 [ 347.126274][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.126293][ T9110] R13: 00007fdc175e6038 R14: 00007fdc175e5fa0 R15: 00007ffc9c89bb48 [ 347.126324][ T9110] [ 350.058828][ T9147] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 350.133409][ T9151] zero sized request [ 350.706817][ T5949] smpboot: CPU 1 is now offline [ 350.784940][ T9167] syz.1.679 (9167): /proc/9165/oom_adj is deprecated, please use /proc/9165/oom_score_adj instead. [ 351.397110][ T9178] FAULT_INJECTION: forcing a failure. [ 351.397110][ T9178] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 351.512457][ T9178] CPU: 0 UID: 0 PID: 9178 Comm: syz.0.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.512496][ T9178] Tainted: [L]=SOFTLOCKUP [ 351.512504][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.512525][ T9178] Call Trace: [ 351.512532][ T9178] [ 351.512542][ T9178] dump_stack_lvl+0x16c/0x1f0 [ 351.512584][ T9178] should_fail_ex+0x512/0x640 [ 351.512616][ T9178] _copy_from_iter+0x43b/0x16c0 [ 351.512650][ T9178] ? __pfx__copy_from_iter+0x10/0x10 [ 351.512676][ T9178] ? rcu_is_watching+0x12/0xc0 [ 351.512710][ T9178] ? trace_kmalloc+0x2b/0xb0 [ 351.512745][ T9178] ? __kmalloc_noprof+0x35d/0x910 [ 351.512770][ T9178] ? __pfx_aa_file_perm+0x10/0x10 [ 351.512803][ T9178] ? kernfs_fop_write_iter+0x237/0x570 [ 351.512845][ T9178] kernfs_fop_write_iter+0x19a/0x570 [ 351.512898][ T9178] do_iter_readv_writev+0x662/0x9e0 [ 351.512933][ T9178] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 351.512979][ T9178] vfs_writev+0x35f/0xde0 [ 351.513010][ T9178] ? rcu_is_watching+0x12/0xc0 [ 351.513049][ T9178] ? __pfx_vfs_writev+0x10/0x10 [ 351.513080][ T9178] ? fdget_pos+0x2a2/0x370 [ 351.513136][ T9178] ? __fget_files+0x20e/0x3c0 [ 351.513167][ T9178] ? __fget_files+0x190/0x3c0 [ 351.513208][ T9178] ? do_writev+0x132/0x340 [ 351.513237][ T9178] do_writev+0x132/0x340 [ 351.513268][ T9178] ? __pfx_do_writev+0x10/0x10 [ 351.513308][ T9178] do_syscall_64+0xcd/0xf80 [ 351.513347][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.513371][ T9178] RIP: 0033:0x7f4e24f8f7c9 [ 351.513392][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.513415][ T9178] RSP: 002b:00007f4e25e58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 351.513437][ T9178] RAX: ffffffffffffffda RBX: 00007f4e251e5fa0 RCX: 00007f4e24f8f7c9 [ 351.513453][ T9178] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 351.513468][ T9178] RBP: 00007f4e25e58090 R08: 0000000000000000 R09: 0000000000000000 [ 351.513482][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.513496][ T9178] R13: 00007f4e251e6038 R14: 00007f4e251e5fa0 R15: 00007ffd7f117118 [ 351.513528][ T9178] [ 353.180563][ T9198] zero sized request [ 353.375955][ T9201] FAULT_INJECTION: forcing a failure. [ 353.375955][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 353.460899][ T9201] CPU: 0 UID: 0 PID: 9201 Comm: syz.1.685 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.460939][ T9201] Tainted: [L]=SOFTLOCKUP [ 353.460958][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.460973][ T9201] Call Trace: [ 353.460981][ T9201] [ 353.460990][ T9201] dump_stack_lvl+0x16c/0x1f0 [ 353.461032][ T9201] should_fail_ex+0x512/0x640 [ 353.461059][ T9201] ? __kmalloc_cache_noprof+0x5f/0x800 [ 353.461091][ T9201] should_failslab+0xc2/0x120 [ 353.461129][ T9201] __kmalloc_cache_noprof+0x80/0x800 [ 353.461156][ T9201] ? rcu_is_watching+0x12/0xc0 [ 353.461191][ T9201] ? vidtv_psi_eit_event_init+0xe0/0x3f0 [ 353.461220][ T9201] ? vidtv_psi_eit_event_init+0xe0/0x3f0 [ 353.461244][ T9201] vidtv_psi_eit_event_init+0xe0/0x3f0 [ 353.461269][ T9201] ? __pfx_vidtv_psi_eit_event_init+0x10/0x10 [ 353.461302][ T9201] ? vidtv_psi_desc_clone+0x2a0/0x5d0 [ 353.461342][ T9201] vidtv_channel_si_init+0x897/0x1a50 [ 353.461377][ T9201] vidtv_mux_init+0x526/0xbe0 [ 353.461406][ T9201] vidtv_start_feed+0x33e/0x4d0 [ 353.461439][ T9201] ? __pfx_vidtv_start_feed+0x10/0x10 [ 353.461473][ T9201] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 353.461514][ T9201] ? mark_held_locks+0x49/0x80 [ 353.461541][ T9201] ? __pfx_vidtv_start_feed+0x10/0x10 [ 353.461574][ T9201] dmx_ts_feed_start_filtering+0xf6/0x220 [ 353.461608][ T9201] dvb_dmxdev_start_feed+0x273/0x3f0 [ 353.461636][ T9201] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 353.461665][ T9201] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 353.461701][ T9201] dvb_demux_do_ioctl+0x9de/0x12f0 [ 353.461737][ T9201] dvb_usercopy+0x167/0x340 [ 353.461782][ T9201] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 353.461810][ T9201] ? __pfx_dvb_usercopy+0x10/0x10 [ 353.461860][ T9201] ? __fget_files+0x20e/0x3c0 [ 353.461901][ T9201] dvb_demux_ioctl+0x29/0x40 [ 353.461922][ T9201] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 353.461945][ T9201] __x64_sys_ioctl+0x18e/0x210 [ 353.461977][ T9201] do_syscall_64+0xcd/0xf80 [ 353.462017][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.462041][ T9201] RIP: 0033:0x7f0dbf58f7c9 [ 353.462061][ T9201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.462085][ T9201] RSP: 002b:00007f0dc0446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.462108][ T9201] RAX: ffffffffffffffda RBX: 00007f0dbf7e5fa0 RCX: 00007f0dbf58f7c9 [ 353.462124][ T9201] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 353.462139][ T9201] RBP: 00007f0dbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 353.462154][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.462168][ T9201] R13: 00007f0dbf7e6038 R14: 00007f0dbf7e5fa0 R15: 00007fff547d1638 [ 353.462200][ T9201] [ 354.433048][ T9209] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 354.686107][ T5824] smpboot: CPU 1 is now offline [ 355.028849][ T9223] FAULT_INJECTION: forcing a failure. [ 355.028849][ T9223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.094623][ T9223] CPU: 0 UID: 0 PID: 9223 Comm: syz.0.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.094663][ T9223] Tainted: [L]=SOFTLOCKUP [ 355.094671][ T9223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.094686][ T9223] Call Trace: [ 355.094693][ T9223] [ 355.094704][ T9223] dump_stack_lvl+0x16c/0x1f0 [ 355.094746][ T9223] should_fail_ex+0x512/0x640 [ 355.094777][ T9223] _copy_from_iter+0x43b/0x16c0 [ 355.094812][ T9223] ? __pfx__copy_from_iter+0x10/0x10 [ 355.094838][ T9223] ? rcu_is_watching+0x12/0xc0 [ 355.094873][ T9223] ? trace_kmalloc+0x2b/0xb0 [ 355.094907][ T9223] ? __kmalloc_noprof+0x35d/0x910 [ 355.094933][ T9223] ? __pfx_aa_file_perm+0x10/0x10 [ 355.094965][ T9223] ? kernfs_fop_write_iter+0x237/0x570 [ 355.095008][ T9223] kernfs_fop_write_iter+0x19a/0x570 [ 355.095048][ T9223] do_iter_readv_writev+0x662/0x9e0 [ 355.095083][ T9223] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 355.095129][ T9223] vfs_writev+0x35f/0xde0 [ 355.095161][ T9223] ? rcu_is_watching+0x12/0xc0 [ 355.095200][ T9223] ? __pfx_vfs_writev+0x10/0x10 [ 355.095231][ T9223] ? fdget_pos+0x2a2/0x370 [ 355.095287][ T9223] ? __fget_files+0x20e/0x3c0 [ 355.095319][ T9223] ? __fget_files+0x190/0x3c0 [ 355.095359][ T9223] ? do_writev+0x132/0x340 [ 355.095389][ T9223] do_writev+0x132/0x340 [ 355.095420][ T9223] ? __pfx_do_writev+0x10/0x10 [ 355.095486][ T9223] do_syscall_64+0xcd/0xf80 [ 355.095525][ T9223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.095550][ T9223] RIP: 0033:0x7f4e24f8f7c9 [ 355.095664][ T9223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.095687][ T9223] RSP: 002b:00007f4e25e58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 355.095710][ T9223] RAX: ffffffffffffffda RBX: 00007f4e251e5fa0 RCX: 00007f4e24f8f7c9 [ 355.095726][ T9223] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 355.095741][ T9223] RBP: 00007f4e25e58090 R08: 0000000000000000 R09: 0000000000000000 [ 355.095755][ T9223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.095769][ T9223] R13: 00007f4e251e6038 R14: 00007f4e251e5fa0 R15: 00007ffd7f117118 [ 355.095801][ T9223] [ 359.359078][ T9264] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 359.422254][ T9268] zero sized request [ 361.654735][ T9030] syz.4.649 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 361.672624][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.4.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.672678][ T9030] Tainted: [L]=SOFTLOCKUP [ 361.672701][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.672722][ T9030] Call Trace: [ 361.672732][ T9030] [ 361.672744][ T9030] dump_stack_lvl+0x16c/0x1f0 [ 361.672800][ T9030] dump_header+0x101/0x960 [ 361.672841][ T9030] oom_kill_process+0x176/0x910 [ 361.672884][ T9030] out_of_memory+0x350/0x1700 [ 361.672921][ T9030] ? __lock_acquire+0x436/0x2890 [ 361.672957][ T9030] ? __pfx_out_of_memory+0x10/0x10 [ 361.673006][ T9030] mem_cgroup_out_of_memory+0x118/0x130 [ 361.673046][ T9030] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 361.673095][ T9030] ? do_raw_spin_unlock+0x172/0x230 [ 361.673140][ T9030] try_charge_memcg+0x695/0xd30 [ 361.673201][ T9030] ? __pfx_try_charge_memcg+0x10/0x10 [ 361.673262][ T9030] ? find_held_lock+0x11/0x80 [ 361.673305][ T9030] ? rcu_read_unlock+0x17/0x60 [ 361.673345][ T9030] charge_memcg+0x8a/0x230 [ 361.673397][ T9030] __mem_cgroup_charge+0x2b/0x1e0 [ 361.673432][ T9030] shmem_alloc_and_add_folio+0x50c/0xc20 [ 361.673489][ T9030] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 361.673531][ T9030] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 361.673581][ T9030] shmem_get_folio_gfp+0x67f/0x1610 [ 361.673630][ T9030] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 361.673680][ T9030] shmem_write_begin+0x1a4/0x3b0 [ 361.673724][ T9030] ? __pfx_shmem_write_begin+0x10/0x10 [ 361.673763][ T9030] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 361.673814][ T9030] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.673869][ T9030] generic_perform_write+0x3c4/0x900 [ 361.673916][ T9030] ? __pfx_generic_perform_write+0x10/0x10 [ 361.673978][ T9030] ? file_update_time_flags+0x35c/0x520 [ 361.674018][ T9030] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 361.674060][ T9030] shmem_file_write_iter+0x10e/0x140 [ 361.674107][ T9030] __kernel_write_iter+0x31a/0xb10 [ 361.674159][ T9030] ? __pfx___kernel_write_iter+0x10/0x10 [ 361.674207][ T9030] ? __up_read+0x2d1/0x700 [ 361.674249][ T9030] ? dump_user_range+0x756/0xb70 [ 361.674303][ T9030] ? dump_user_range+0x16e/0xb70 [ 361.674358][ T9030] dump_user_range+0x413/0xb70 [ 361.674419][ T9030] ? __pfx_dump_user_range+0x10/0x10 [ 361.674472][ T9030] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 361.674517][ T9030] ? __pfx_writenote+0x10/0x10 [ 361.674579][ T9030] elf_core_dump+0x29c3/0x3c10 [ 361.674633][ T9030] ? __pfx_elf_core_dump+0x10/0x10 [ 361.674662][ T9030] ? kasan_save_stack+0x33/0x60 [ 361.674703][ T9030] ? kasan_save_track+0x14/0x30 [ 361.674744][ T9030] ? __kasan_kmalloc+0xaa/0xb0 [ 361.674786][ T9030] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 361.674828][ T9030] ? vfs_coredump+0x1dd9/0x55e0 [ 361.674876][ T9030] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 361.674945][ T9030] ? irqentry_exit+0x38a/0x8c0 [ 361.674990][ T9030] ? asm_exc_page_fault+0x26/0x30 [ 361.675032][ T9030] ? 0xffffffffff600000 [ 361.675126][ T9030] ? vfs_coredump+0x2b85/0x55e0 [ 361.675174][ T9030] vfs_coredump+0x2b85/0x55e0 [ 361.675237][ T9030] ? __pfx_vfs_coredump+0x10/0x10 [ 361.675293][ T9030] ? __lock_acquire+0x436/0x2890 [ 361.675332][ T9030] ? __lock_acquire+0x436/0x2890 [ 361.675368][ T9030] ? lock_acquire+0x179/0x330 [ 361.675408][ T9030] ? lock_acquire+0x179/0x330 [ 361.675467][ T9030] ? arch_stack_walk+0xa6/0x100 [ 361.675523][ T9030] ? stack_trace_save+0x8e/0xc0 [ 361.675576][ T9030] ? __pfx_stack_trace_save+0x10/0x10 [ 361.675627][ T9030] ? stack_depot_save_flags+0x29/0x9b0 [ 361.675667][ T9030] ? __lock_acquire+0x436/0x2890 [ 361.675702][ T9030] ? kasan_save_stack+0x42/0x60 [ 361.675814][ T9030] ? proc_coredump_connector+0x2d1/0x4f0 [ 361.675866][ T9030] ? __pfx_proc_coredump_connector+0x10/0x10 [ 361.675928][ T9030] ? rcu_is_watching+0x12/0xc0 [ 361.675979][ T9030] get_signal+0x22e1/0x26d0 [ 361.676041][ T9030] ? __pfx_get_signal+0x10/0x10 [ 361.676100][ T9030] arch_do_signal_or_restart+0x8f/0x7a0 [ 361.676150][ T9030] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.676213][ T9030] ? do_user_addr_fault+0x926/0x1370 [ 361.676267][ T9030] irqentry_exit+0x38a/0x8c0 [ 361.676323][ T9030] asm_exc_page_fault+0x26/0x30 [ 361.676355][ T9030] RIP: 0033:0x40c8b62b8e25 [ 361.676389][ T9030] Code: Unable to access opcode bytes at 0x40c8b62b8dfb. [ 361.676404][ T9030] RSP: 002b:0000200000000378 EFLAGS: 00010217 [ 361.676430][ T9030] RAX: 0000000000000000 RBX: 00007f2fb49e5fa0 RCX: 00007f2fb478f7c9 [ 361.676450][ T9030] RDX: 0000200000000380 RSI: 0000200000000370 RDI: 0000000000220000 [ 361.676471][ T9030] RBP: 00007f2fb4813f91 R08: 0000200000000400 R09: 0000200000000400 [ 361.676493][ T9030] R10: 00002000000003c0 R11: 0000000000000206 R12: 0000000000000000 [ 361.676513][ T9030] R13: 00007f2fb49e6038 R14: 00007f2fb49e5fa0 R15: 00007ffc53c8c8d8 [ 361.676559][ T9030] [ 362.219581][ T9030] memory: usage 3072kB, limit 3072kB, failcnt 37969 [ 362.227453][ T9030] memory+swap: usage 121056kB, limit 9007199254740988kB, failcnt 0 [ 362.294088][ T9030] kmem: usage 1376kB, limit 9007199254740988kB, failcnt 0 [ 362.304104][ T9030] Memory cgroup stats for /syz4: [ 362.304487][ T9030] cache 1585152 [ 362.316841][ T9030] rss 8192 [ 362.321260][ T9030] rss_huge 0 [ 362.324534][ T9030] shmem 1585152 [ 362.328140][ T9030] mapped_file 0 [ 362.331762][ T9030] dirty 0 [ 362.334784][ T9030] writeback 0 [ 362.338134][ T9030] workingset_refault_anon 4093 [ 362.344493][ T9030] workingset_refault_file 15 [ 362.349890][ T9030] swap 120815616 [ 362.353491][ T9030] swapcached 143360 [ 362.357336][ T9030] pgpgin 59774 [ 362.361066][ T9030] pgpgout 60883 [ 362.364953][ T9030] pgfault 43299 [ 362.368898][ T9030] pgmajfault 1036 [ 362.372829][ T9030] inactive_anon 1040384 [ 362.377282][ T9030] active_anon 696320 [ 362.382020][ T9030] inactive_file 0 [ 362.387603][ T9030] active_file 0 [ 362.391461][ T9030] unevictable 0 [ 362.395152][ T9030] hierarchical_memory_limit 3145728 [ 362.400699][ T9030] hierarchical_memsw_limit 9223372036854771712 [ 362.406986][ T9030] total_cache 1585152 [ 362.411902][ T9030] total_rss 8192 [ 362.415714][ T9030] total_rss_huge 0 [ 362.420160][ T9030] total_shmem 1585152 [ 362.424318][ T9030] total_mapped_file 0 [ 362.428459][ T9030] total_dirty 0 [ 362.432199][ T9030] total_writeback 0 [ 362.436330][ T9030] total_workingset_refault_anon 4093 [ 362.442423][ T9030] total_workingset_refault_file 15 [ 362.449175][ T9030] total_swap 120815616 [ 362.453470][ T9030] total_swapcached 143360 [ 362.458830][ T9030] total_pgpgin 59774 [ 362.463166][ T9030] total_pgpgout 60883 [ 362.467401][ T9030] total_pgfault 43299 [ 362.472746][ T9030] total_pgmajfault 1036 [ 362.477473][ T9030] total_inactive_anon 1040384 [ 362.482223][ T9030] total_active_anon 696320 [ 362.486778][ T9030] total_inactive_file 0 [ 362.491219][ T9030] total_active_file 0 [ 362.495361][ T9030] total_unevictable 0 [ 362.499705][ T9030] anon_cost 0 [ 362.503711][ T9030] file_cost 0 [ 362.507126][ T9030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.587,pid=8723,uid=0 [ 362.524641][ T9030] Memory cgroup out of memory: Killed process 8723 (syz.4.587) total-vm:137112kB, anon-rss:1248kB, file-rss:59884kB, shmem-rss:0kB, UID:0 pgtables:272kB oom_score_adj:1000 [ 362.552491][ T9292] syz.0.708 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 362.563399][ T9292] CPU: 1 UID: 0 PID: 9292 Comm: syz.0.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.563455][ T9292] Tainted: [L]=SOFTLOCKUP [ 362.563468][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.563489][ T9292] Call Trace: [ 362.563501][ T9292] [ 362.563514][ T9292] dump_stack_lvl+0x16c/0x1f0 [ 362.563572][ T9292] dump_header+0x101/0x960 [ 362.563614][ T9292] oom_kill_process+0x176/0x910 [ 362.563658][ T9292] out_of_memory+0x350/0x1700 [ 362.563699][ T9292] ? __lock_acquire+0x436/0x2890 [ 362.563744][ T9292] ? __pfx_out_of_memory+0x10/0x10 [ 362.563795][ T9292] mem_cgroup_out_of_memory+0x118/0x130 [ 362.563838][ T9292] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 362.563888][ T9292] ? do_raw_spin_unlock+0x172/0x230 [ 362.563935][ T9292] try_charge_memcg+0x695/0xd30 [ 362.564006][ T9292] ? __pfx_try_charge_memcg+0x10/0x10 [ 362.564061][ T9292] ? find_held_lock+0x11/0x80 [ 362.564107][ T9292] ? rcu_read_unlock+0x17/0x60 [ 362.564149][ T9292] charge_memcg+0x8a/0x230 [ 362.564326][ T9292] __mem_cgroup_charge+0x2b/0x1e0 [ 362.564367][ T9292] do_anonymous_page+0xca9/0x2190 [ 362.564421][ T9292] __handle_mm_fault+0x1ecf/0x2bb0 [ 362.564474][ T9292] ? __pfx___handle_mm_fault+0x10/0x10 [ 362.564515][ T9292] ? __pte_offset_map_lock+0x174/0x310 [ 362.564575][ T9292] ? find_held_lock+0x2b/0x80 [ 362.564631][ T9292] ? follow_page_pte+0x5cf/0x1390 [ 362.564698][ T9292] handle_mm_fault+0x3fe/0xad0 [ 362.564747][ T9292] __get_user_pages+0x54e/0x3590 [ 362.564826][ T9292] ? __pfx___get_user_pages+0x10/0x10 [ 362.564894][ T9292] populate_vma_page_range+0x267/0x3f0 [ 362.564949][ T9292] ? __pfx_populate_vma_page_range+0x10/0x10 [ 362.565003][ T9292] ? __pfx_find_vma_intersection+0x10/0x10 [ 362.565056][ T9292] ? do_mmap+0x69c/0x1210 [ 362.565111][ T9292] __mm_populate+0x1d8/0x380 [ 362.565167][ T9292] ? __pfx___mm_populate+0x10/0x10 [ 362.565236][ T9292] ? up_write+0x282/0x4e0 [ 362.565277][ T9292] vm_mmap_pgoff+0x37f/0x470 [ 362.565329][ T9292] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 362.565388][ T9292] ? __x64_sys_futex+0x1e0/0x4c0 [ 362.565428][ T9292] ? __x64_sys_futex+0x1e9/0x4c0 [ 362.565477][ T9292] ksys_mmap_pgoff+0x7d/0x5c0 [ 362.565525][ T9292] ? syscall_user_dispatch+0x78/0x140 [ 362.565573][ T9292] __x64_sys_mmap+0x125/0x190 [ 362.565612][ T9292] do_syscall_64+0xcd/0xf80 [ 362.565667][ T9292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.565704][ T9292] RIP: 0033:0x7f4e24f8f7c9 [ 362.565733][ T9292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.565769][ T9292] RSP: 002b:00007f4e25e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 362.565802][ T9292] RAX: ffffffffffffffda RBX: 00007f4e251e6090 RCX: 00007f4e24f8f7c9 [ 362.565826][ T9292] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 362.565848][ T9292] RBP: 00007f4e25013f91 R08: ffffffffffffffff R09: 0000000000000000 [ 362.565870][ T9292] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 362.565890][ T9292] R13: 00007f4e251e6128 R14: 00007f4e251e6090 R15: 00007ffd7f117118 [ 362.565933][ T9292] [ 362.565946][ T9292] memory: usage 3072kB, limit 3072kB, failcnt 13351 [ 362.979696][ T9292] memory+swap: usage 5628kB, limit 9007199254740988kB, failcnt 0 [ 362.988211][ T9292] kmem: usage 1380kB, limit 9007199254740988kB, failcnt 0 [ 362.996847][ T9292] Memory cgroup stats for /syz0: [ 362.997167][ T9292] cache 0 [ 363.007076][ T9292] rss 1712128 [ 363.011507][ T9292] rss_huge 0 [ 363.015011][ T9292] shmem 0 [ 363.018784][ T9292] mapped_file 0 [ 363.031159][ T9292] dirty 0 [ 363.034311][ T9292] writeback 0 [ 363.038415][ T9292] workingset_refault_anon 3462 [ 363.046030][ T9292] workingset_refault_file 2541 [ 363.052164][ T9292] swap 2617344 [ 363.058648][ T9292] swapcached 20480 [ 363.064978][ T9292] pgpgin 128221 [ 363.068980][ T9292] pgpgout 128309 [ 363.074702][ T9292] pgfault 168173 [ 363.078595][ T9292] pgmajfault 1409 [ 363.083968][ T9292] inactive_anon 1204224 [ 363.092124][ T9292] active_anon 528384 [ 363.096490][ T9292] inactive_file 0 [ 363.101555][ T9292] active_file 0 [ 363.105183][ T9292] unevictable 0 [ 363.108923][ T9292] hierarchical_memory_limit 3145728 [ 363.115747][ T9292] hierarchical_memsw_limit 9223372036854771712 [ 363.124955][ T9304] random: crng reseeded on system resumption [ 363.131932][ T9292] total_cache 0 [ 363.135574][ T9292] total_rss 1712128 [ 363.142069][ T9292] total_rss_huge 0 [ 363.153303][ T9292] total_shmem 0 [ 363.167547][ T9292] total_mapped_file 0 [ 363.178151][ T9292] total_dirty 0 [ 363.188299][ T9292] total_writeback 0 [ 363.192889][ T9292] total_workingset_refault_anon 3462 [ 363.206209][ T9292] total_workingset_refault_file 2541 [ 363.227402][ T5949] smpboot: CPU 1 is now offline [ 363.248310][ T9292] total_swap 2617344 [ 363.277315][ T9306] FAULT_INJECTION: forcing a failure. [ 363.277315][ T9306] name failslab, interval 1, probability 0, space 0, times 0 [ 363.298086][ T9292] total_swapcached 20480 [ 363.349531][ T9292] total_pgpgin 128221 [ 363.359885][ T9292] total_pgpgout 128309 [ 363.390689][ T9306] CPU: 0 UID: 0 PID: 9306 Comm: syz.3.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.390729][ T9306] Tainted: [L]=SOFTLOCKUP [ 363.390737][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.390752][ T9306] Call Trace: [ 363.390759][ T9306] [ 363.390769][ T9306] dump_stack_lvl+0x16c/0x1f0 [ 363.390811][ T9306] should_fail_ex+0x512/0x640 [ 363.390838][ T9306] ? kmem_cache_alloc_noprof+0x62/0x770 [ 363.390877][ T9306] should_failslab+0xc2/0x120 [ 363.390914][ T9306] kmem_cache_alloc_noprof+0x83/0x770 [ 363.390943][ T9306] ? __kernfs_new_node+0xd2/0x9b0 [ 363.390976][ T9306] ? __kernfs_new_node+0xd2/0x9b0 [ 363.391002][ T9306] __kernfs_new_node+0xd2/0x9b0 [ 363.391032][ T9306] ? __lock_acquire+0x436/0x2890 [ 363.391054][ T9306] ? __pfx___kernfs_new_node+0x10/0x10 [ 363.391089][ T9306] ? find_held_lock+0x2b/0x80 [ 363.391121][ T9306] ? kernfs_root+0xee/0x2a0 [ 363.391155][ T9306] kernfs_new_node+0x13c/0x1e0 [ 363.391192][ T9306] __kernfs_create_file+0x53/0x350 [ 363.391235][ T9306] sysfs_add_file_mode_ns+0x207/0x3c0 [ 363.391269][ T9306] internal_create_group+0x597/0xf70 [ 363.391306][ T9306] ? __pfx_internal_create_group+0x10/0x10 [ 363.391334][ T9306] ? __pfx_rcutree_prepare_cpu+0x10/0x10 [ 363.391363][ T9306] ? mark_held_locks+0x49/0x80 [ 363.391386][ T9306] ? __pfx_topology_add_dev+0x10/0x10 [ 363.391412][ T9306] ? rcu_is_watching+0x12/0xc0 [ 363.391448][ T9306] ? __pfx_topology_add_dev+0x10/0x10 [ 363.391471][ T9306] cpuhp_invoke_callback+0x3d5/0xa10 [ 363.391506][ T9306] ? __pfx_topology_add_dev+0x10/0x10 [ 363.391535][ T9306] __cpuhp_invoke_callback_range+0x101/0x210 [ 363.391573][ T9306] ? __pfx___cpuhp_invoke_callback_range+0x10/0x10 [ 363.391617][ T9306] _cpu_up+0x3f5/0x960 [ 363.391658][ T9306] cpu_up+0x1bf/0x240 [ 363.391694][ T9306] cpu_subsys_online+0x84/0x190 [ 363.391729][ T9306] ? __pfx_cpu_subsys_online+0x10/0x10 [ 363.391755][ T9306] device_online+0x114/0x1c0 [ 363.391790][ T9306] ? __pfx_online_store+0x10/0x10 [ 363.391824][ T9306] online_store+0x145/0x180 [ 363.391862][ T9306] ? __pfx_online_store+0x10/0x10 [ 363.391895][ T9306] ? find_held_lock+0x11/0x80 [ 363.391926][ T9306] ? sysfs_file_kobj+0xe4/0x290 [ 363.391951][ T9306] dev_attr_store+0x58/0x80 [ 363.391981][ T9306] ? __pfx_dev_attr_store+0x10/0x10 [ 363.392011][ T9306] sysfs_kf_write+0xf2/0x150 [ 363.392037][ T9306] kernfs_fop_write_iter+0x3af/0x570 [ 363.392071][ T9306] ? __pfx_sysfs_kf_write+0x10/0x10 [ 363.392098][ T9306] do_iter_readv_writev+0x662/0x9e0 [ 363.392133][ T9306] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 363.392180][ T9306] vfs_writev+0x35f/0xde0 [ 363.392212][ T9306] ? rcu_is_watching+0x12/0xc0 [ 363.392251][ T9306] ? __pfx_vfs_writev+0x10/0x10 [ 363.392282][ T9306] ? fdget_pos+0x2a2/0x370 [ 363.392340][ T9306] ? __fget_files+0x20e/0x3c0 [ 363.392372][ T9306] ? __fget_files+0x190/0x3c0 [ 363.392413][ T9306] ? do_writev+0x132/0x340 [ 363.392442][ T9306] do_writev+0x132/0x340 [ 363.392474][ T9306] ? __pfx_do_writev+0x10/0x10 [ 363.392519][ T9306] do_syscall_64+0xcd/0xf80 [ 363.392558][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.392583][ T9306] RIP: 0033:0x7fdc1738f7c9 [ 363.392602][ T9306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.392625][ T9306] RSP: 002b:00007fdc1820c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 363.392648][ T9306] RAX: ffffffffffffffda RBX: 00007fdc175e5fa0 RCX: 00007fdc1738f7c9 [ 363.392664][ T9306] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 363.392678][ T9306] RBP: 00007fdc1820c090 R08: 0000000000000000 R09: 0000000000000000 [ 363.392693][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.392707][ T9306] R13: 00007fdc175e6038 R14: 00007fdc175e5fa0 R15: 00007ffc9c89bb48 [ 363.392739][ T9306] [ 363.850318][ T9292] total_pgfault 168173 [ 363.855031][ T9292] total_pgmajfault 1409 [ 363.859313][ T9292] total_inactive_anon 1204224 [ 363.864784][ T9292] total_active_anon 528384 [ 363.869844][ T9292] total_inactive_file 0 [ 363.875178][ T9292] total_active_file 0 [ 363.880338][ T9292] total_unevictable 0 [ 363.884828][ T9292] anon_cost 0 [ 363.888337][ T9292] file_cost 0 [ 363.892344][ T9292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.708,pid=9286,uid=0 [ 363.908530][ T9292] Memory cgroup out of memory: Killed process 9286 (syz.0.708) total-vm:135064kB, anon-rss:2744kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 364.652120][ T33] oom_reaper: reaped process 8723 (syz.4.587), now anon-rss:12kB, file-rss:58780kB, shmem-rss:0kB [ 365.393973][ T9335] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 366.069755][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 366.705528][ T9355] zero sized request [ 368.096575][ T9368] zero sized request [ 369.703967][ T9390] Invalid ELF header magic: != ELF [ 369.823951][ T9394] Invalid ELF header magic: != ELF [ 370.067849][ T8723] syz.4.587 (8723) used greatest stack depth: 17640 bytes left [ 370.232658][ T9399] FAULT_INJECTION: forcing a failure. [ 370.232658][ T9399] name failslab, interval 1, probability 0, space 0, times 0 [ 370.309191][ T9399] CPU: 0 UID: 0 PID: 9399 Comm: syz.3.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.309232][ T9399] Tainted: [L]=SOFTLOCKUP [ 370.309240][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.309255][ T9399] Call Trace: [ 370.309263][ T9399] [ 370.309272][ T9399] dump_stack_lvl+0x16c/0x1f0 [ 370.309314][ T9399] should_fail_ex+0x512/0x640 [ 370.309348][ T9399] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 370.309382][ T9399] should_failslab+0xc2/0x120 [ 370.309421][ T9399] kmem_cache_alloc_noprof+0x83/0x770 [ 370.309452][ T9399] ? skb_clone+0x190/0x3f0 [ 370.309488][ T9399] ? skb_clone+0x190/0x3f0 [ 370.309518][ T9399] skb_clone+0x190/0x3f0 [ 370.309551][ T9399] netlink_deliver_tap+0xabd/0xd30 [ 370.309597][ T9399] netlink_unicast+0x64c/0x870 [ 370.309637][ T9399] ? __pfx_netlink_unicast+0x10/0x10 [ 370.309673][ T9399] ? __pfx___might_resched+0x10/0x10 [ 370.309709][ T9399] ? __lock_acquire+0x436/0x2890 [ 370.309740][ T9399] netlink_sendmsg+0x8c8/0xdd0 [ 370.309780][ T9399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.309820][ T9399] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 370.309868][ T9399] ____sys_sendmsg+0xa5d/0xc30 [ 370.309909][ T9399] ? copy_msghdr_from_user+0x10a/0x160 [ 370.309940][ T9399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.309986][ T9399] ? __pfx_futex_wake_mark+0x10/0x10 [ 370.310025][ T9399] ___sys_sendmsg+0x134/0x1d0 [ 370.310058][ T9399] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.310090][ T9399] ? futex_private_hash_put+0x160/0x1b0 [ 370.310148][ T9399] __sys_sendmsg+0x16d/0x220 [ 370.310180][ T9399] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.310211][ T9399] ? __x64_sys_futex+0x1e0/0x4c0 [ 370.310256][ T9399] do_syscall_64+0xcd/0xf80 [ 370.310297][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.310323][ T9399] RIP: 0033:0x7fdc1738f7c9 [ 370.310343][ T9399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.310368][ T9399] RSP: 002b:00007fdc181eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.310391][ T9399] RAX: ffffffffffffffda RBX: 00007fdc175e6090 RCX: 00007fdc1738f7c9 [ 370.310407][ T9399] RDX: 0000000024004084 RSI: 0000200000000240 RDI: 0000000000000002 [ 370.310422][ T9399] RBP: 00007fdc17413f91 R08: 0000000000000000 R09: 0000000000000000 [ 370.310437][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.310451][ T9399] R13: 00007fdc175e6128 R14: 00007fdc175e6090 R15: 00007ffc9c89bb48 [ 370.310483][ T9399] [ 370.889776][ T9401] zero sized request [ 371.260582][ T9409] zero sized request [ 371.560446][ T9409] netlink: 342 bytes leftover after parsing attributes in process `syz.4.734'. [ 373.091984][ T9433] random: crng reseeded on system resumption [ 373.259120][ T9429] deleting an unspecified loop device is not supported. [ 373.560499][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 374.785472][ T31] audit: type=1800 audit(1766930306.030:11): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=34195 res=0 errno=0 [ 375.807377][ T9458] zero sized request [ 376.122369][ T9461] zero sized request [ 376.256712][ T9461] netlink: 342 bytes leftover after parsing attributes in process `syz.3.745'. [ 380.107386][ T9503] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 380.184938][ T9505] zero sized request [ 380.256811][ T9505] netlink: 342 bytes leftover after parsing attributes in process `syz.3.756'. [ 382.091901][ T9531] zero sized request [ 383.292281][ T9546] netlink: 342 bytes leftover after parsing attributes in process `syz.4.760'. [ 383.410138][ T9547] netlink: 342 bytes leftover after parsing attributes in process `syz.4.760'. [ 383.620522][ T9547] netlink: 342 bytes leftover after parsing attributes in process `syz.4.760'. [ 383.725056][ T9550] zero sized request [ 383.780345][ T9550] netlink: 342 bytes leftover after parsing attributes in process `syz.0.767'. [ 384.308488][ T6703] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 388.536427][ T9595] FAULT_INJECTION: forcing a failure. [ 388.536427][ T9595] name failslab, interval 1, probability 0, space 0, times 0 [ 388.634312][ T9595] CPU: 0 UID: 0 PID: 9595 Comm: syz.3.779 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.634352][ T9595] Tainted: [L]=SOFTLOCKUP [ 388.634361][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.634375][ T9595] Call Trace: [ 388.634384][ T9595] [ 388.634393][ T9595] dump_stack_lvl+0x16c/0x1f0 [ 388.634437][ T9595] should_fail_ex+0x512/0x640 [ 388.634464][ T9595] ? __kmalloc_cache_noprof+0x5f/0x800 [ 388.634495][ T9595] should_failslab+0xc2/0x120 [ 388.634534][ T9595] __kmalloc_cache_noprof+0x80/0x800 [ 388.634560][ T9595] ? trace_kmalloc+0x2b/0xb0 [ 388.634595][ T9595] ? __kmalloc_noprof+0x35d/0x910 [ 388.634620][ T9595] ? kvm_dev_ioctl+0x1358/0x1a80 [ 388.634657][ T9595] ? kvm_dev_ioctl+0x1358/0x1a80 [ 388.634689][ T9595] kvm_dev_ioctl+0x1358/0x1a80 [ 388.634730][ T9595] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 388.634768][ T9595] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 388.634812][ T9595] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 388.634847][ T9595] __x64_sys_ioctl+0x18e/0x210 [ 388.634879][ T9595] do_syscall_64+0xcd/0xf80 [ 388.634918][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.634943][ T9595] RIP: 0033:0x7fdc1738f7c9 [ 388.634962][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.635080][ T9595] RSP: 002b:00007fdc1820c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.635114][ T9595] RAX: ffffffffffffffda RBX: 00007fdc175e5fa0 RCX: 00007fdc1738f7c9 [ 388.635131][ T9595] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 388.635146][ T9595] RBP: 00007fdc17413f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.635161][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.635177][ T9595] R13: 00007fdc175e6038 R14: 00007fdc175e5fa0 R15: 00007ffc9c89bb48 [ 388.635211][ T9595] [ 389.160255][ T9593] zswap: compressor not available [ 389.224360][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.231114][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.748481][ T9652] zswap: compressor not available [ 394.490589][ T9657] can: request_module (can-proto-3) failed. [ 394.703395][ T9657] can: request_module (can-proto-3) failed. [ 394.904747][ T9657] can: request_module (can-proto-3) failed. [ 395.072977][ T9657] can: request_module (can-proto-3) failed. [ 395.283129][ T9657] can: request_module (can-proto-3) failed. [ 395.492274][ T9657] can: request_module (can-proto-3) failed. [ 395.596129][ T9657] can: request_module (can-proto-3) failed. [ 396.579705][ T9688] zero sized request [ 398.009704][ T9688] netlink: 342 bytes leftover after parsing attributes in process `syz.3.793'. [ 399.179192][ T9716] zero sized request [ 399.245676][ T9716] netlink: 342 bytes leftover after parsing attributes in process `syz.1.798'. [ 399.860453][ T9722] zero sized request [ 400.845846][ T9738] zero sized request [ 400.900278][ T9738] netlink: 342 bytes leftover after parsing attributes in process `syz.1.806'. [ 401.230123][ T9741] netlink: 'syz.1.807': attribute type 32 has an invalid length. [ 401.545970][ T9748] size and base must be multiples of 4 kiB [ 401.553524][ T9747] zero sized request [ 401.601789][ T9748] CPU: 0 UID: 0 PID: 9748 Comm: syz.3.808 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.601830][ T9748] Tainted: [L]=SOFTLOCKUP [ 401.601839][ T9748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.601854][ T9748] Call Trace: [ 401.601861][ T9748] [ 401.601870][ T9748] dump_stack_lvl+0x16c/0x1f0 [ 401.601921][ T9748] mtrr_add+0xdf/0x110 [ 401.601962][ T9748] mtrr_ioctl+0x7ef/0xcf0 [ 401.601985][ T9748] ? __pfx_mtrr_ioctl+0x10/0x10 [ 401.602012][ T9748] ? find_held_lock+0x2b/0x80 [ 401.602052][ T9748] ? __fget_files+0x20e/0x3c0 [ 401.602088][ T9748] ? __pfx_mtrr_ioctl+0x10/0x10 [ 401.602110][ T9748] proc_reg_unlocked_ioctl+0x229/0x320 [ 401.602141][ T9748] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 401.602176][ T9748] __x64_sys_ioctl+0x18e/0x210 [ 401.602208][ T9748] do_syscall_64+0xcd/0xf80 [ 401.602247][ T9748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.602272][ T9748] RIP: 0033:0x7fdc1738f7c9 [ 401.602291][ T9748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.602315][ T9748] RSP: 002b:00007fdc181ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.602338][ T9748] RAX: ffffffffffffffda RBX: 00007fdc175e6180 RCX: 00007fdc1738f7c9 [ 401.602355][ T9748] RDX: 0000000000000004 RSI: 0000000040104d01 RDI: 0000000000000004 [ 401.602369][ T9748] RBP: 00007fdc17413f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.602384][ T9748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.602399][ T9748] R13: 00007fdc175e6218 R14: 00007fdc175e6180 R15: 00007ffc9c89bb48 [ 401.602430][ T9748] [ 401.606995][ T9747] netlink: 342 bytes leftover after parsing attributes in process `syz.4.809'. [ 403.656254][ T9774] nfs: Unknown parameter '£m?¥ŒÁLH>®ï½¢^Ñe„°àko}* »' [ 403.693401][ T9773] nfs: Unknown parameter '£m?¥ŒÁLH>®ï½¢^Ñe„°àko}* »' [ 405.657498][ T9788] futex_wake_op: syz.3.817 tries to shift op by -2048; fix this program [ 405.680629][ T9789] zero sized request [ 405.777866][ T9791] zero sized request [ 405.823538][ T9791] netlink: 342 bytes leftover after parsing attributes in process `syz.4.816'. [ 408.088395][ T9809] zswap: compressor not available [ 409.309719][ T9837] FAULT_INJECTION: forcing a failure. [ 409.309719][ T9837] name failslab, interval 1, probability 0, space 0, times 0 [ 409.324385][ T9837] CPU: 0 UID: 0 PID: 9837 Comm: syz.1.828 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.324424][ T9837] Tainted: [L]=SOFTLOCKUP [ 409.324432][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.324447][ T9837] Call Trace: [ 409.324458][ T9837] [ 409.324468][ T9837] dump_stack_lvl+0x16c/0x1f0 [ 409.324511][ T9837] should_fail_ex+0x512/0x640 [ 409.324542][ T9837] should_failslab+0xc2/0x120 [ 409.324581][ T9837] kmem_cache_alloc_noprof+0x83/0x770 [ 409.324611][ T9837] ? trace_kmem_cache_alloc+0x28/0xb0 [ 409.324647][ T9837] ? kmem_cache_alloc_noprof+0x2af/0x770 [ 409.324675][ T9837] ? inet_bind2_bucket_create+0x36/0x5f0 [ 409.324712][ T9837] ? inet_bind2_bucket_create+0x36/0x5f0 [ 409.324740][ T9837] inet_bind2_bucket_create+0x36/0x5f0 [ 409.324770][ T9837] ? inet_bind_bucket_create+0x2d/0x280 [ 409.324803][ T9837] inet_csk_get_port+0x17c9/0x2890 [ 409.324854][ T9837] ? trace_inet_sock_set_state+0x194/0x1f0 [ 409.324882][ T9837] ? __pfx_inet_csk_get_port+0x10/0x10 [ 409.324921][ T9837] inet_csk_listen_start+0x158/0x380 [ 409.324961][ T9837] __inet_listen_sk+0x20f/0x520 [ 409.324991][ T9837] ? __pfx___inet_listen_sk+0x10/0x10 [ 409.325020][ T9837] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 409.325058][ T9837] ? __local_bh_enable_ip+0xa4/0x120 [ 409.325097][ T9837] inet_listen+0x93/0xd0 [ 409.325126][ T9837] smc_listen+0x5ff/0xbb0 [ 409.325159][ T9837] __sys_listen_socket+0x117/0x160 [ 409.325186][ T9837] __sys_listen+0xa7/0x130 [ 409.325211][ T9837] __x64_sys_listen+0x53/0x80 [ 409.325236][ T9837] do_syscall_64+0xcd/0xf80 [ 409.325276][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.325309][ T9837] RIP: 0033:0x7f0dbf58f7c9 [ 409.325329][ T9837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.325353][ T9837] RSP: 002b:00007f0dc0446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 409.325376][ T9837] RAX: ffffffffffffffda RBX: 00007f0dbf7e5fa0 RCX: 00007f0dbf58f7c9 [ 409.325392][ T9837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000006 [ 409.325407][ T9837] RBP: 00007f0dbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.325422][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.325436][ T9837] R13: 00007f0dbf7e6038 R14: 00007f0dbf7e5fa0 R15: 00007fff547d1638 [ 409.325468][ T9837] [ 409.912696][ T9840] zero sized request [ 411.421482][ T9858] batman_adv: Routing algorithm '' is not supported [ 412.670252][ T9875] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 413.304611][ T31] audit: type=1800 audit(1766930344.550:12): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.838" name="features" dev="configfs" ino=36857 res=0 errno=0 [ 413.646648][ T9888] sctp: [Deprecated]: syz.4.839 (pid 9888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.646648][ T9888] Use struct sctp_sack_info instead [ 413.786060][ T5849] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 413.818101][ T31] audit: type=1800 audit(1766930345.060:13): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.842" name="lu_gp_id" dev="configfs" ino=36902 res=0 errno=0 [ 414.071062][ T31] audit: type=1800 audit(1766930345.100:14): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.842" name="lu_gp_id" dev="configfs" ino=36906 res=0 errno=0 [ 414.531616][ T9913] zero sized request [ 414.597928][ T9913] netlink: 342 bytes leftover after parsing attributes in process `syz.3.844'. [ 414.700166][ T9917] zero sized request [ 416.981761][ T9952] futex_wake_op: syz.4.851 tries to shift op by -2048; fix this program [ 417.463170][ T9952] zswap: compressor not available [ 418.394624][ T9965] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 418.830650][ T9971] zero sized request [ 418.901968][ T9971] netlink: 342 bytes leftover after parsing attributes in process `syz.3.855'. [ 419.694517][ T9985] netlink: 342 bytes leftover after parsing attributes in process `syz.1.859'. [ 420.035055][ T9990] Unable to find swap-space signature [ 420.634359][ T9997] zero sized request [ 424.474541][T10056] zero sized request [ 429.098348][T10095] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 430.787701][T10116] sp0: Synchronizing with TNC [ 432.015112][T10150] zero sized request [ 432.700119][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 432.719904][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 432.746130][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 432.757816][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 432.765715][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 433.948217][T10155] chnl_net:caif_netlink_parms(): no params data found [ 433.995986][T10173] netlink: 342 bytes leftover after parsing attributes in process `syz.1.897'. [ 434.493583][T10155] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.553864][T10155] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.596140][T10155] bridge_slave_0: entered allmulticast mode [ 434.669583][T10155] bridge_slave_0: entered promiscuous mode [ 434.740601][T10155] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.773253][T10155] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.807789][T10155] bridge_slave_1: entered allmulticast mode [ 434.838621][T10155] bridge_slave_1: entered promiscuous mode [ 434.870405][ T5849] Bluetooth: hci3: command tx timeout [ 434.946892][T10188] netlink: 206 bytes leftover after parsing attributes in process `syz.1.901'. [ 435.076595][T10155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.228858][T10155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.522273][T10155] team0: Port device team_slave_0 added [ 435.562835][T10155] team0: Port device team_slave_1 added [ 435.584400][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 435.736771][T10155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.776443][T10155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.932823][T10155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.019688][T10155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.027174][T10155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.216345][T10155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.496842][T10155] hsr_slave_0: entered promiscuous mode [ 436.560446][T10155] hsr_slave_1: entered promiscuous mode [ 436.952766][ T5849] Bluetooth: hci3: command tx timeout [ 436.996815][T10214] zero sized request [ 437.042540][T10211] futex_wake_op: syz.4.906 tries to shift op by -2048; fix this program [ 437.094646][T10210] 0x200000000001-0x2000000001ad : "" [ 437.132836][T10210] mtd: partition "" is out of reach -- disabled [ 437.203607][T10210] ftl_cs: FTL header not found. [ 437.694977][T10155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.763781][T10155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.901809][T10155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.061121][T10155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 439.030773][ T5849] Bluetooth: hci3: command tx timeout [ 439.149828][T10155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.645768][ T9682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.821761][T10155] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.922096][ T9682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.124464][ T9682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.163751][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.171212][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.285656][ T9682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.363149][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.373851][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.423499][T10250] zero sized request [ 441.010040][ T9682] bridge_slave_1: left allmulticast mode [ 441.072228][ T9682] bridge_slave_1: left promiscuous mode [ 441.078857][ T9682] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.115076][ T5849] Bluetooth: hci3: command tx timeout [ 441.131064][T10259] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 441.204778][ T9682] bridge_slave_0: left allmulticast mode [ 441.236028][ T9682] bridge_slave_0: left promiscuous mode [ 441.264912][ T9682] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.395201][ T9682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.434121][ T9682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.510700][ T9682] bond0 (unregistering): Released all slaves [ 444.137765][T10303] zero sized request [ 444.241967][T10155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.489184][ T9682] hsr_slave_0: left promiscuous mode [ 445.588988][ T9682] hsr_slave_1: left promiscuous mode [ 445.652307][ T9682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.708242][ T9682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.763408][ T9682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.860245][ T9682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.875459][T10337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.929'. [ 446.063254][ T9682] veth1_macvtap: left promiscuous mode [ 446.081770][ T9682] veth0_macvtap: left promiscuous mode [ 446.113289][ T9682] veth1_vlan: left promiscuous mode [ 446.144520][ T9682] veth0_vlan: left promiscuous mode [ 446.683856][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030003400: rx timeout, send abort [ 447.195599][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030003400: abort rx timeout. Force session deactivation [ 447.442749][ T9682] team0 (unregistering): Port device team_slave_1 removed [ 447.496702][ T9682] team0 (unregistering): Port device team_slave_0 removed [ 448.962455][T10155] veth0_vlan: entered promiscuous mode [ 449.036570][T10155] veth1_vlan: entered promiscuous mode [ 449.189094][T10155] veth0_macvtap: entered promiscuous mode [ 449.244616][T10155] veth1_macvtap: entered promiscuous mode [ 449.380114][T10155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.506809][T10155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.585854][ T152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.635462][ T152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.715990][ T152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.745712][T10356] FAULT_INJECTION: forcing a failure. [ 449.745712][T10356] name failslab, interval 1, probability 0, space 0, times 0 [ 449.789652][ T152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.802119][T10372] zero sized request [ 449.833023][T10356] CPU: 0 UID: 0 PID: 10356 Comm: syz.3.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.833063][T10356] Tainted: [L]=SOFTLOCKUP [ 449.833071][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.833086][T10356] Call Trace: [ 449.833094][T10356] [ 449.833104][T10356] dump_stack_lvl+0x16c/0x1f0 [ 449.833147][T10356] should_fail_ex+0x512/0x640 [ 449.833175][T10356] ? kmem_cache_alloc_noprof+0x62/0x770 [ 449.833209][T10356] should_failslab+0xc2/0x120 [ 449.833248][T10356] kmem_cache_alloc_noprof+0x83/0x770 [ 449.833278][T10356] ? vm_area_dup+0x27/0x8d0 [ 449.833308][T10356] ? vm_area_dup+0x27/0x8d0 [ 449.833331][T10356] vm_area_dup+0x27/0x8d0 [ 449.833358][T10356] dup_mmap+0x6a4/0x20e0 [ 449.833403][T10356] ? __pfx_dup_mmap+0x10/0x10 [ 449.833461][T10356] copy_process+0x3b9f/0x7430 [ 449.833500][T10356] ? __pfx___futex_wait+0x10/0x10 [ 449.833545][T10356] ? __pfx_copy_process+0x10/0x10 [ 449.833582][T10356] ? find_held_lock+0x2b/0x80 [ 449.833619][T10356] ? futex_private_hash_put+0x160/0x1b0 [ 449.833650][T10356] kernel_clone+0xfc/0x910 [ 449.833689][T10356] ? __pfx_kernel_clone+0x10/0x10 [ 449.833751][T10356] __do_sys_clone+0xce/0x120 [ 449.833788][T10356] ? __pfx___do_sys_clone+0x10/0x10 [ 449.833840][T10356] ? xfd_validate_state+0x61/0x180 [ 449.833862][T10356] ? __pfx_do_writev+0x10/0x10 [ 449.833904][T10356] do_syscall_64+0xcd/0xf80 [ 449.833955][T10356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.833982][T10356] RIP: 0033:0x7fdc1738f7c9 [ 449.834002][T10356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.834026][T10356] RSP: 002b:00007fdc181eafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 449.834049][T10356] RAX: ffffffffffffffda RBX: 00007fdc175e6090 RCX: 00007fdc1738f7c9 [ 449.834065][T10356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 449.834081][T10356] RBP: 00007fdc17413f91 R08: 0000000000000000 R09: 0000000000000000 [ 449.834095][T10356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 449.834110][T10356] R13: 00007fdc175e6128 R14: 00007fdc175e6090 R15: 00007ffc9c89bb48 [ 449.834142][T10356] [ 450.655069][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.662763][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.969515][ T31] audit: type=1326 audit(1766930382.190:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10382 comm="syz.4.935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fb478f7c9 code=0x0 [ 451.011654][ T6705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.041188][ T6705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.162328][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.183595][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.314174][ T31] audit: type=1800 audit(1766930383.560:16): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.936" name="features" dev="configfs" ino=40766 res=0 errno=0 [ 453.475760][T10429] zero sized request [ 454.280674][T10441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.944'. [ 454.388749][T10435] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 456.288660][T10491] IPVS: length: 131 != 8 [ 456.301071][T10489] FAULT_INJECTION: forcing a failure. [ 456.301071][T10489] name failslab, interval 1, probability 0, space 0, times 0 [ 456.377112][T10489] CPU: 0 UID: 0 PID: 10489 Comm: syz.4.954 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.377152][T10489] Tainted: [L]=SOFTLOCKUP [ 456.377160][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.377175][T10489] Call Trace: [ 456.377183][T10489] [ 456.377192][T10489] dump_stack_lvl+0x16c/0x1f0 [ 456.377233][T10489] should_fail_ex+0x512/0x640 [ 456.377259][T10489] ? __kmalloc_noprof+0xca/0x910 [ 456.377288][T10489] should_failslab+0xc2/0x120 [ 456.377326][T10489] __kmalloc_noprof+0xeb/0x910 [ 456.377352][T10489] ? lsm_blob_alloc+0x68/0x90 [ 456.377390][T10489] ? lsm_blob_alloc+0x68/0x90 [ 456.377423][T10489] lsm_blob_alloc+0x68/0x90 [ 456.377458][T10489] security_task_alloc+0x2c/0x260 [ 456.377491][T10489] copy_process+0x2456/0x7430 [ 456.377528][T10489] ? __pfx___futex_wait+0x10/0x10 [ 456.377571][T10489] ? __pfx_copy_process+0x10/0x10 [ 456.377613][T10489] ? futex_private_hash_put+0x160/0x1b0 [ 456.377642][T10489] kernel_clone+0xfc/0x910 [ 456.377680][T10489] ? __pfx_kernel_clone+0x10/0x10 [ 456.377731][T10489] __do_sys_clone+0xce/0x120 [ 456.377766][T10489] ? __pfx___do_sys_clone+0x10/0x10 [ 456.377814][T10489] ? xfd_validate_state+0x61/0x180 [ 456.377835][T10489] ? __pfx_do_writev+0x10/0x10 [ 456.377875][T10489] do_syscall_64+0xcd/0xf80 [ 456.377913][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.377937][T10489] RIP: 0033:0x7f2fb478f7c9 [ 456.377956][T10489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.377979][T10489] RSP: 002b:00007f2fb55cffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 456.378000][T10489] RAX: ffffffffffffffda RBX: 00007f2fb49e5fa0 RCX: 00007f2fb478f7c9 [ 456.378016][T10489] RDX: 00002000000000c0 RSI: 0000200000000340 RDI: 0000000000000200 [ 456.378031][T10489] RBP: 00007f2fb4813f91 R08: 0000200000000380 R09: 0000200000000380 [ 456.378057][T10489] R10: 0000200000000100 R11: 0000000000000206 R12: 0000000000000000 [ 456.378072][T10489] R13: 00007f2fb49e6038 R14: 00007f2fb49e5fa0 R15: 00007ffc53c8c8d8 [ 456.378102][T10489] [ 456.969740][ T5849] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 458.841420][T10528] FAULT_INJECTION: forcing a failure. [ 458.841420][T10528] name failslab, interval 1, probability 0, space 0, times 0 [ 458.949660][T10528] CPU: 0 UID: 0 PID: 10528 Comm: syz.4.959 Tainted: G L syzkaller #0 PREEMPT(full) [ 458.949700][T10528] Tainted: [L]=SOFTLOCKUP [ 458.949709][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.949724][T10528] Call Trace: [ 458.949732][T10528] [ 458.949741][T10528] dump_stack_lvl+0x16c/0x1f0 [ 458.949784][T10528] should_fail_ex+0x512/0x640 [ 458.949811][T10528] ? __kmalloc_cache_noprof+0x5f/0x800 [ 458.949851][T10528] should_failslab+0xc2/0x120 [ 458.949890][T10528] __kmalloc_cache_noprof+0x80/0x800 [ 458.949919][T10528] ? cuse_channel_open+0x4f/0x7f0 [ 458.949959][T10528] ? __pfx_cuse_channel_open+0x10/0x10 [ 458.949993][T10528] ? cuse_channel_open+0x4f/0x7f0 [ 458.950030][T10528] ? find_held_lock+0x2b/0x80 [ 458.950061][T10528] cuse_channel_open+0x4f/0x7f0 [ 458.950096][T10528] ? __pfx_cuse_channel_open+0x10/0x10 [ 458.950132][T10528] misc_open+0x26d/0x450 [ 458.950161][T10528] ? __pfx_misc_open+0x10/0x10 [ 458.950187][T10528] chrdev_open+0x234/0x6a0 [ 458.950225][T10528] ? __pfx_apparmor_file_open+0x10/0x10 [ 458.950251][T10528] ? __pfx_chrdev_open+0x10/0x10 [ 458.950291][T10528] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 458.950337][T10528] do_dentry_open+0x748/0x1590 [ 458.950373][T10528] ? __pfx_chrdev_open+0x10/0x10 [ 458.950418][T10528] vfs_open+0x82/0x3f0 [ 458.950448][T10528] path_openat+0x2078/0x3140 [ 458.950494][T10528] ? __pfx_path_openat+0x10/0x10 [ 458.950542][T10528] do_filp_open+0x20b/0x470 [ 458.950581][T10528] ? __pfx_do_filp_open+0x10/0x10 [ 458.950639][T10528] ? alloc_fd+0x471/0x7d0 [ 458.950683][T10528] do_sys_openat2+0x121/0x290 [ 458.950710][T10528] ? __pfx_do_sys_openat2+0x10/0x10 [ 458.950749][T10528] __x64_sys_openat+0x174/0x210 [ 458.950777][T10528] ? __pfx___x64_sys_openat+0x10/0x10 [ 458.950807][T10528] ? syscall_user_dispatch+0x78/0x140 [ 458.950852][T10528] do_syscall_64+0xcd/0xf80 [ 458.950892][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.950918][T10528] RIP: 0033:0x7f2fb478f7c9 [ 458.950938][T10528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.950962][T10528] RSP: 002b:00007f2fb55d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 458.950984][T10528] RAX: ffffffffffffffda RBX: 00007f2fb49e5fa0 RCX: 00007f2fb478f7c9 [ 458.951001][T10528] RDX: 0000000000181041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 458.951017][T10528] RBP: 00007f2fb4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.951032][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.951046][T10528] R13: 00007f2fb49e6038 R14: 00007f2fb49e5fa0 R15: 00007ffc53c8c8d8 [ 458.951078][T10528] [ 459.880051][T10538] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 459.912920][T10538] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 459.959788][ T31] audit: type=1800 audit(1766930391.120:17): pid=10538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.962" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 459.989651][T10538] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 460.101182][T10547] FAULT_INJECTION: forcing a failure. [ 460.101182][T10547] name failslab, interval 1, probability 0, space 0, times 0 [ 460.151616][T10547] CPU: 0 UID: 0 PID: 10547 Comm: syz.5.964 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.151658][T10547] Tainted: [L]=SOFTLOCKUP [ 460.151666][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.151681][T10547] Call Trace: [ 460.151691][T10547] [ 460.151700][T10547] dump_stack_lvl+0x16c/0x1f0 [ 460.152027][T10547] should_fail_ex+0x512/0x640 [ 460.152055][T10547] ? __kmalloc_cache_noprof+0x5f/0x800 [ 460.152088][T10547] should_failslab+0xc2/0x120 [ 460.152127][T10547] __kmalloc_cache_noprof+0x80/0x800 [ 460.152157][T10547] ? create_filter_start.constprop.0+0xa5/0x300 [ 460.152197][T10547] ? create_filter_start.constprop.0+0xa5/0x300 [ 460.152232][T10547] create_filter_start.constprop.0+0xa5/0x300 [ 460.152271][T10547] create_filter+0xb5/0x210 [ 460.152305][T10547] ? __pfx_create_filter+0x10/0x10 [ 460.152343][T10547] ? find_held_lock+0x2b/0x80 [ 460.152379][T10547] apply_event_filter+0x220/0x500 [ 460.152416][T10547] ? __pfx_apply_event_filter+0x10/0x10 [ 460.152459][T10547] ? __pfx_event_filter_write+0x10/0x10 [ 460.152482][T10547] event_filter_write+0x16d/0x290 [ 460.152507][T10547] vfs_writev+0x5df/0xde0 [ 460.152551][T10547] ? __pfx_vfs_writev+0x10/0x10 [ 460.152591][T10547] ? fdget_pos+0x2a2/0x370 [ 460.152655][T10547] ? __fget_files+0x20e/0x3c0 [ 460.152700][T10547] ? do_writev+0x132/0x340 [ 460.152756][T10547] do_writev+0x132/0x340 [ 460.152791][T10547] ? __pfx_do_writev+0x10/0x10 [ 460.152834][T10547] do_syscall_64+0xcd/0xf80 [ 460.152876][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.152903][T10547] RIP: 0033:0x7f06ec58f7c9 [ 460.152924][T10547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.152949][T10547] RSP: 002b:00007f06ed3c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 460.152973][T10547] RAX: ffffffffffffffda RBX: 00007f06ec7e5fa0 RCX: 00007f06ec58f7c9 [ 460.152992][T10547] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 460.153008][T10547] RBP: 00007f06ec613f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.153023][T10547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.153038][T10547] R13: 00007f06ec7e6038 R14: 00007f06ec7e5fa0 R15: 00007fffd3f49d98 [ 460.153070][T10547] [ 461.178645][T10558] zero sized request [ 462.028210][T10569] netlink: 146 bytes leftover after parsing attributes in process `syz.5.969'. [ 462.602641][T10576] netlink: 342 bytes leftover after parsing attributes in process `syz.4.971'. [ 463.689896][T10598] zswap: compressor not available [ 464.134205][T10615] FAULT_INJECTION: forcing a failure. [ 464.134205][T10615] name failslab, interval 1, probability 0, space 0, times 0 [ 464.242241][T10615] CPU: 0 UID: 0 PID: 10615 Comm: syz.1.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.242281][T10615] Tainted: [L]=SOFTLOCKUP [ 464.242289][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.242304][T10615] Call Trace: [ 464.242312][T10615] [ 464.242321][T10615] dump_stack_lvl+0x16c/0x1f0 [ 464.242363][T10615] should_fail_ex+0x512/0x640 [ 464.242390][T10615] ? __kmalloc_cache_noprof+0x5f/0x800 [ 464.242422][T10615] should_failslab+0xc2/0x120 [ 464.242471][T10615] __kmalloc_cache_noprof+0x80/0x800 [ 464.242501][T10615] ? cuse_channel_open+0x4f/0x7f0 [ 464.242541][T10615] ? __pfx_cuse_channel_open+0x10/0x10 [ 464.242579][T10615] ? cuse_channel_open+0x4f/0x7f0 [ 464.242612][T10615] ? find_held_lock+0x2b/0x80 [ 464.242643][T10615] cuse_channel_open+0x4f/0x7f0 [ 464.242678][T10615] ? __pfx_cuse_channel_open+0x10/0x10 [ 464.242715][T10615] misc_open+0x26d/0x450 [ 464.242743][T10615] ? __pfx_misc_open+0x10/0x10 [ 464.242769][T10615] chrdev_open+0x234/0x6a0 [ 464.242817][T10615] ? __pfx_apparmor_file_open+0x10/0x10 [ 464.242842][T10615] ? __pfx_chrdev_open+0x10/0x10 [ 464.242882][T10615] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 464.242929][T10615] do_dentry_open+0x748/0x1590 [ 464.242965][T10615] ? __pfx_chrdev_open+0x10/0x10 [ 464.243012][T10615] vfs_open+0x82/0x3f0 [ 464.243041][T10615] path_openat+0x2078/0x3140 [ 464.243088][T10615] ? __pfx_path_openat+0x10/0x10 [ 464.243136][T10615] do_filp_open+0x20b/0x470 [ 464.243174][T10615] ? __pfx_do_filp_open+0x10/0x10 [ 464.243232][T10615] ? alloc_fd+0x471/0x7d0 [ 464.243277][T10615] do_sys_openat2+0x121/0x290 [ 464.243303][T10615] ? __pfx_do_sys_openat2+0x10/0x10 [ 464.243342][T10615] __x64_sys_openat+0x174/0x210 [ 464.243370][T10615] ? __pfx___x64_sys_openat+0x10/0x10 [ 464.243400][T10615] ? syscall_user_dispatch+0x78/0x140 [ 464.243445][T10615] do_syscall_64+0xcd/0xf80 [ 464.243485][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.243510][T10615] RIP: 0033:0x7f0dbf58f7c9 [ 464.243530][T10615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.243555][T10615] RSP: 002b:00007f0dc0446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 464.243578][T10615] RAX: ffffffffffffffda RBX: 00007f0dbf7e5fa0 RCX: 00007f0dbf58f7c9 [ 464.243594][T10615] RDX: 0000000000181041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 464.243610][T10615] RBP: 00007f0dbf613f91 R08: 0000000000000000 R09: 0000000000000000 [ 464.243624][T10615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.243639][T10615] R13: 00007f0dbf7e6038 R14: 00007f0dbf7e5fa0 R15: 00007fff547d1638 [ 464.243671][T10615] [ 465.105818][T10628] zero sized request [ 466.700176][T10660] openvswitch: netlink: Message has 4 unknown bytes. [ 467.180406][T10655] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 467.575260][T10670] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 468.259809][T10688] zero sized request [ 469.103750][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 469.303920][T10706] zero sized request [ 472.863291][T10711] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.912108][T10711] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.970391][T10711] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 473.000104][T10711] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 473.188615][T10711] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 473.257135][T10711] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 473.296207][T10711] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 473.419149][T10711] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 473.989584][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.952340][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 475.029851][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 475.282323][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 475.765246][T10789] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 476.855223][T10794] binder: BINDER_SET_CONTEXT_MGR already set [ 476.888265][T10794] binder: 10792:10794 ioctl 4018620d 9 returned -16 [ 477.109423][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 477.354025][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 477.563086][T10822] zero sized request [ 478.904339][T10841] FAULT_INJECTION: forcing a failure. [ 478.904339][T10841] name failslab, interval 1, probability 0, space 0, times 0 [ 478.969955][T10841] CPU: 0 UID: 0 PID: 10841 Comm: syz.4.1018 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.969995][T10841] Tainted: [L]=SOFTLOCKUP [ 478.970003][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.970018][T10841] Call Trace: [ 478.970030][T10841] [ 478.970039][T10841] dump_stack_lvl+0x16c/0x1f0 [ 478.970081][T10841] should_fail_ex+0x512/0x640 [ 478.970108][T10841] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 478.970156][T10841] should_failslab+0xc2/0x120 [ 478.970194][T10841] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 478.970229][T10841] ? devinet_init_net+0xc3/0x910 [ 478.970258][T10841] ? kmemdup_noprof+0x29/0x60 [ 478.970286][T10841] kmemdup_noprof+0x29/0x60 [ 478.970314][T10841] devinet_init_net+0xc3/0x910 [ 478.970339][T10841] ? __pfx_devinet_init_net+0x10/0x10 [ 478.970363][T10841] ops_init+0x1e2/0x5f0 [ 478.970399][T10841] setup_net+0x11d/0x3a0 [ 478.970432][T10841] ? __pfx_setup_net+0x10/0x10 [ 478.970462][T10841] ? lockdep_init_map_type+0x5c/0x270 [ 478.970487][T10841] ? mutex_init_lockep+0x110/0x150 [ 478.970515][T10841] copy_net_ns+0x351/0x7c0 [ 478.970553][T10841] create_new_namespaces+0x3ea/0xab0 [ 478.970592][T10841] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 478.970628][T10841] ksys_unshare+0x45b/0xa40 [ 478.970668][T10841] ? __pfx_ksys_unshare+0x10/0x10 [ 478.970707][T10841] ? xfd_validate_state+0x61/0x180 [ 478.970737][T10841] __x64_sys_unshare+0x31/0x40 [ 478.970757][T10841] do_syscall_64+0xcd/0xf80 [ 478.970796][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.970819][T10841] RIP: 0033:0x7f2fb478f7c9 [ 478.970838][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.970862][T10841] RSP: 002b:00007f2fb55d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 478.970885][T10841] RAX: ffffffffffffffda RBX: 00007f2fb49e5fa0 RCX: 00007f2fb478f7c9 [ 478.970900][T10841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 478.970914][T10841] RBP: 00007f2fb4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 478.970928][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.970942][T10841] R13: 00007f2fb49e6038 R14: 00007f2fb49e5fa0 R15: 00007ffc53c8c8d8 [ 478.970972][T10841] [ 479.554594][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 479.572685][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 479.672778][T10840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 479.756018][T10850] zero sized request [ 480.021145][T10852] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 481.741066][T10893] zero sized request [ 483.552260][ T31] audit: type=1800 audit(1766930414.800:18): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1033" name="dbroot" dev="configfs" ino=43615 res=0 errno=0 [ 484.839261][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 488.079635][T10996] zero sized request [ 488.942282][T10979] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1042'. [ 489.017563][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1049'. [ 489.157124][T11015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.224893][T11015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.343182][T11015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.444321][T11015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.300041][T11075] netlink: set zone limit has 8 unknown bytes [ 493.464557][T11083] HfR: entered promiscuous mode [ 494.295330][T11100] zero sized request [ 497.933392][ T5848] Bluetooth: hci4: unexpected event 0x36 length: 123 > 7 [ 498.118253][T11167] zero sized request [ 498.140349][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 498.278704][T11167] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1073'. [ 500.673329][T11204] vhci_hcd vhci_hcd.1: invalid port number 37 [ 500.733426][T11204] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 503.770456][T11243] zero sized request [ 504.995804][T11250] netlink: 302 bytes leftover after parsing attributes in process `syz.1.1088'. [ 506.186909][T11264] netlink: set zone limit has 8 unknown bytes [ 506.384752][T11264] HfR: entered promiscuous mode [ 506.599105][T11268] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1092'. [ 507.574622][T11286] FAULT_INJECTION: forcing a failure. [ 507.574622][T11286] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.662429][T11286] CPU: 0 UID: 0 PID: 11286 Comm: syz.4.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.662468][T11286] Tainted: [L]=SOFTLOCKUP [ 507.662475][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.662490][T11286] Call Trace: [ 507.662497][T11286] [ 507.662507][T11286] dump_stack_lvl+0x16c/0x1f0 [ 507.662549][T11286] should_fail_ex+0x512/0x640 [ 507.662580][T11286] should_fail_alloc_page+0xe7/0x130 [ 507.662642][T11286] prepare_alloc_pages+0x401/0x670 [ 507.662684][T11286] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 507.662729][T11286] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 507.662760][T11286] ? find_held_lock+0x2b/0x80 [ 507.662792][T11286] ? process_measurement+0x4a6/0x22d0 [ 507.662834][T11286] ? up_write+0x282/0x4e0 [ 507.662866][T11286] ? process_measurement+0x1e6/0x22d0 [ 507.662902][T11286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.662941][T11286] ? policy_nodemask+0xea/0x4e0 [ 507.662984][T11286] alloc_pages_mpol+0x1fb/0x550 [ 507.663022][T11286] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 507.663067][T11286] alloc_pages_noprof+0x131/0x390 [ 507.663105][T11286] __pmd_alloc+0x3b/0x9c0 [ 507.663145][T11286] __handle_mm_fault+0xbeb/0x2bb0 [ 507.663178][T11286] ? __pfx___handle_mm_fault+0x10/0x10 [ 507.663220][T11286] ? find_vma+0xbf/0x140 [ 507.663252][T11286] ? __pfx_find_vma+0x10/0x10 [ 507.663288][T11286] handle_mm_fault+0x3fe/0xad0 [ 507.663318][T11286] do_user_addr_fault+0x7a6/0x1370 [ 507.663351][T11286] ? rcu_is_watching+0x12/0xc0 [ 507.663388][T11286] exc_page_fault+0x64/0xc0 [ 507.663423][T11286] asm_exc_page_fault+0x26/0x30 [ 507.663447][T11286] RIP: 0010:__get_user_1+0x14/0x30 [ 507.663476][T11286] Code: cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca e9 3f 7a 04 00 66 66 2e 0f 1f 84 00 00 00 [ 507.663499][T11286] RSP: 0018:ffffc9000bb27c08 EFLAGS: 00050287 [ 507.663518][T11286] RAX: 0000000000000000 RBX: ffff88807cc53800 RCX: ffffc9000bb27bac [ 507.663534][T11286] RDX: 00007ffffffff000 RSI: ffffffff8795019c RDI: ffffffff8bf2b580 [ 507.663549][T11286] RBP: 0000000000000000 R08: 00000000ffffffff R09: 00000000ffffffff [ 507.663564][T11286] R10: 0000000000000001 R11: ffff88802cbfc830 R12: dffffc0000000000 [ 507.663579][T11286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000007111 [ 507.663602][T11286] ? mousedev_write+0x17c/0x850 [ 507.663634][T11286] mousedev_write+0x189/0x850 [ 507.663665][T11286] ? __pfx_mousedev_write+0x10/0x10 [ 507.663690][T11286] vfs_writev+0x5df/0xde0 [ 507.663730][T11286] ? __pfx_vfs_writev+0x10/0x10 [ 507.663781][T11286] ? __fget_files+0x20e/0x3c0 [ 507.663815][T11286] ? __fget_files+0x190/0x3c0 [ 507.663855][T11286] ? do_writev+0x28c/0x340 [ 507.663884][T11286] do_writev+0x28c/0x340 [ 507.663916][T11286] ? __pfx_do_writev+0x10/0x10 [ 507.663956][T11286] do_syscall_64+0xcd/0xf80 [ 507.664000][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.664023][T11286] RIP: 0033:0x7f2fb478f7c9 [ 507.664041][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.664064][T11286] RSP: 002b:00007f2fb55af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 507.664085][T11286] RAX: ffffffffffffffda RBX: 00007f2fb49e6090 RCX: 00007f2fb478f7c9 [ 507.664101][T11286] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 507.664115][T11286] RBP: 00007f2fb55af090 R08: 0000000000000000 R09: 0000000000000000 [ 507.664130][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.664144][T11286] R13: 00007f2fb49e6128 R14: 00007f2fb49e6090 R15: 00007ffc53c8c8d8 [ 507.664174][T11286] [ 509.108119][ T5848] Bluetooth: hci4: unexpected event 0x31 length: 19 > 6 [ 509.517881][T11301] binder: 11297:11301 ioctl c018620c 0 returned -22 [ 512.079066][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.086223][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.982619][T11361] FAULT_INJECTION: forcing a failure. [ 513.982619][T11361] name failslab, interval 1, probability 0, space 0, times 0 [ 514.168187][T11361] CPU: 0 UID: 0 PID: 11361 Comm: syz.3.1108 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.168225][T11361] Tainted: [L]=SOFTLOCKUP [ 514.168233][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 514.168248][T11361] Call Trace: [ 514.168255][T11361] [ 514.168264][T11361] dump_stack_lvl+0x16c/0x1f0 [ 514.168311][T11361] should_fail_ex+0x512/0x640 [ 514.168337][T11361] ? kmem_cache_alloc_noprof+0x62/0x770 [ 514.168370][T11361] should_failslab+0xc2/0x120 [ 514.168407][T11361] kmem_cache_alloc_noprof+0x83/0x770 [ 514.168436][T11361] ? __pmd_alloc+0xbf/0x9c0 [ 514.168478][T11361] ? __pmd_alloc+0xbf/0x9c0 [ 514.168513][T11361] __pmd_alloc+0xbf/0x9c0 [ 514.168552][T11361] __handle_mm_fault+0xbeb/0x2bb0 [ 514.168585][T11361] ? __pfx___handle_mm_fault+0x10/0x10 [ 514.168626][T11361] ? find_vma+0xbf/0x140 [ 514.168658][T11361] ? __pfx_find_vma+0x10/0x10 [ 514.168693][T11361] handle_mm_fault+0x3fe/0xad0 [ 514.168724][T11361] do_user_addr_fault+0x7a6/0x1370 [ 514.168755][T11361] ? rcu_is_watching+0x12/0xc0 [ 514.168793][T11361] exc_page_fault+0x64/0xc0 [ 514.168907][T11361] asm_exc_page_fault+0x26/0x30 [ 514.168931][T11361] RIP: 0010:__get_user_1+0x14/0x30 [ 514.168960][T11361] Code: cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca e9 3f 7a 04 00 66 66 2e 0f 1f 84 00 00 00 [ 514.168983][T11361] RSP: 0018:ffffc9000b61fc08 EFLAGS: 00050287 [ 514.169002][T11361] RAX: 0000000000000000 RBX: ffff888059b76000 RCX: ffffc9000b61fbac [ 514.169018][T11361] RDX: 00007ffffffff000 RSI: ffffffff8795019c RDI: ffffffff8bf2b580 [ 514.169034][T11361] RBP: 0000000000000000 R08: 00000000ffffffff R09: 00000000ffffffff [ 514.169049][T11361] R10: 0000000000000001 R11: ffff8880317f8b30 R12: dffffc0000000000 [ 514.169064][T11361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000007111 [ 514.169087][T11361] ? mousedev_write+0x17c/0x850 [ 514.169120][T11361] mousedev_write+0x189/0x850 [ 514.169152][T11361] ? __pfx_mousedev_write+0x10/0x10 [ 514.169178][T11361] vfs_writev+0x5df/0xde0 [ 514.169223][T11361] ? __pfx_vfs_writev+0x10/0x10 [ 514.169278][T11361] ? __fget_files+0x20e/0x3c0 [ 514.169314][T11361] ? __fget_files+0x190/0x3c0 [ 514.169366][T11361] ? do_writev+0x28c/0x340 [ 514.169396][T11361] do_writev+0x28c/0x340 [ 514.169429][T11361] ? __pfx_do_writev+0x10/0x10 [ 514.169469][T11361] do_syscall_64+0xcd/0xf80 [ 514.169508][T11361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.169541][T11361] RIP: 0033:0x7fdc1738f7c9 [ 514.169560][T11361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.169584][T11361] RSP: 002b:00007fdc181eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 514.169605][T11361] RAX: ffffffffffffffda RBX: 00007fdc175e6090 RCX: 00007fdc1738f7c9 [ 514.169621][T11361] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 514.169636][T11361] RBP: 00007fdc181eb090 R08: 0000000000000000 R09: 0000000000000000 [ 514.169650][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.169665][T11361] R13: 00007fdc175e6128 R14: 00007fdc175e6090 R15: 00007ffc9c89bb48 [ 514.169695][T11361] [ 515.580669][T11373] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 516.372914][T11389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1113'. [ 516.433281][T11389] bond0: entered promiscuous mode [ 516.477942][T11389] bond_slave_0: entered promiscuous mode [ 516.514671][T11389] bond_slave_1: entered promiscuous mode [ 516.545825][T11389] bond0: entered allmulticast mode [ 516.589498][T11389] bond_slave_0: entered allmulticast mode [ 516.603208][T11389] bond_slave_1: entered allmulticast mode [ 516.649052][T11396] zero sized request [ 517.716268][T11415] nbd: socks must be embedded in a SOCK_ITEM attr [ 517.865270][T11415] block nbd1: shutting down sockets [ 518.347238][T11433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1121'. [ 518.630422][T11433] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 520.788226][T11450] vhci_hcd vhci_hcd.1: invalid port number 37 [ 520.881218][T11450] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 520.922264][T11470] rtc_cmos 00:00: Alarms can be up to one day in the future [ 524.786768][T11536] program syz.1.1139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.266590][T11544] hub 1-0:1.0: USB hub found [ 525.315503][T11544] hub 1-0:1.0: 1 port detected [ 528.413144][T11581] ALSA: mixer_oss: invalid OSS volume '' [ 534.865723][ T5848] Bluetooth: hci3: unknown advertising packet type: 0xea [ 534.887399][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1172'. [ 536.067952][T11712] FAULT_INJECTION: forcing a failure. [ 536.067952][T11712] name failslab, interval 1, probability 0, space 0, times 0 [ 536.170770][T11712] CPU: 0 UID: 0 PID: 11712 Comm: syz.5.1181 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.170810][T11712] Tainted: [L]=SOFTLOCKUP [ 536.170818][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.170833][T11712] Call Trace: [ 536.170840][T11712] [ 536.170850][T11712] dump_stack_lvl+0x16c/0x1f0 [ 536.170893][T11712] should_fail_ex+0x512/0x640 [ 536.170919][T11712] ? __kmalloc_noprof+0xca/0x910 [ 536.170949][T11712] should_failslab+0xc2/0x120 [ 536.170988][T11712] __kmalloc_noprof+0xeb/0x910 [ 536.171014][T11712] ? iter_file_splice_write+0x1cc/0x12b0 [ 536.171059][T11712] ? iter_file_splice_write+0x1cc/0x12b0 [ 536.171096][T11712] iter_file_splice_write+0x1cc/0x12b0 [ 536.171138][T11712] ? kfree+0x2f8/0x6e0 [ 536.171162][T11712] ? copy_splice_read+0x897/0xc20 [ 536.171202][T11712] ? copy_splice_read+0x897/0xc20 [ 536.171240][T11712] ? copy_splice_read+0x89c/0xc20 [ 536.171276][T11712] ? __pfx_iter_file_splice_write+0x10/0x10 [ 536.171320][T11712] ? __pfx_copy_splice_read+0x10/0x10 [ 536.171366][T11712] ? look_up_lock_class+0x59/0x130 [ 536.171411][T11712] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 536.171449][T11712] ? __pfx_iter_file_splice_write+0x10/0x10 [ 536.171489][T11712] direct_splice_actor+0x192/0x6c0 [ 536.171531][T11712] splice_direct_to_actor+0x345/0xa30 [ 536.171570][T11712] ? __pfx_direct_splice_actor+0x10/0x10 [ 536.171618][T11712] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 536.171664][T11712] do_splice_direct+0x174/0x240 [ 536.171704][T11712] ? __pfx_do_splice_direct+0x10/0x10 [ 536.171743][T11712] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 536.171780][T11712] ? bpf_lsm_file_permission+0x9/0x10 [ 536.171813][T11712] ? security_file_permission+0x71/0x210 [ 536.171846][T11712] ? rw_verify_area+0xcf/0x6c0 [ 536.171880][T11712] do_sendfile+0xb06/0xe50 [ 536.171919][T11712] ? __pfx_do_sendfile+0x10/0x10 [ 536.171957][T11712] ? __x64_sys_futex+0x1e0/0x4c0 [ 536.171984][T11712] ? __x64_sys_futex+0x1e9/0x4c0 [ 536.172017][T11712] __x64_sys_sendfile64+0x1d8/0x220 [ 536.172041][T11712] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 536.172073][T11712] do_syscall_64+0xcd/0xf80 [ 536.172113][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.172139][T11712] RIP: 0033:0x7f06ec58f7c9 [ 536.172158][T11712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.172182][T11712] RSP: 002b:00007f06ed3c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 536.172205][T11712] RAX: ffffffffffffffda RBX: 00007f06ec7e5fa0 RCX: 00007f06ec58f7c9 [ 536.172221][T11712] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 536.172235][T11712] RBP: 00007f06ec613f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.172250][T11712] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000000 [ 536.172265][T11712] R13: 00007f06ec7e6038 R14: 00007f06ec7e5fa0 R15: 00007fffd3f49d98 [ 536.172296][T11712] [ 536.782268][ T31] audit: type=1800 audit(1766930468.030:19): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1178" name="version" dev="configfs" ino=47944 res=0 errno=0 [ 537.487527][T11727] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 538.554106][T11733] FAULT_INJECTION: forcing a failure. [ 538.554106][T11733] name failslab, interval 1, probability 0, space 0, times 0 [ 538.599964][T11742] input: 00 [ 538.599964][T11742] as /devices/virtual/input/input18 [ 538.644524][T11742] FAULT_INJECTION: forcing a failure. [ 538.644524][T11742] name failslab, interval 1, probability 0, space 0, times 0 [ 538.708925][T11733] CPU: 0 UID: 0 PID: 11733 Comm: syz.3.1186 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.708970][T11733] Tainted: [L]=SOFTLOCKUP [ 538.708979][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.708994][T11733] Call Trace: [ 538.709001][T11733] [ 538.709010][T11733] dump_stack_lvl+0x16c/0x1f0 [ 538.709052][T11733] should_fail_ex+0x512/0x640 [ 538.709079][T11733] ? __kmalloc_cache_noprof+0x5f/0x800 [ 538.709111][T11733] should_failslab+0xc2/0x120 [ 538.709149][T11733] __kmalloc_cache_noprof+0x80/0x800 [ 538.709178][T11733] ? ring_buffer_read_start+0x149/0x500 [ 538.709216][T11733] ? ring_buffer_read_start+0x149/0x500 [ 538.709259][T11733] ring_buffer_read_start+0x149/0x500 [ 538.709293][T11733] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 538.709326][T11733] ? lockdep_init_map_type+0x5c/0x270 [ 538.709352][T11733] ? ring_buffer_overruns+0x195/0x1f0 [ 538.709382][T11733] tracing_open+0x93f/0xe10 [ 538.709415][T11733] do_dentry_open+0x748/0x1590 [ 538.709451][T11733] ? __pfx_tracing_open+0x10/0x10 [ 538.709486][T11733] vfs_open+0x82/0x3f0 [ 538.709515][T11733] path_openat+0x2078/0x3140 [ 538.709562][T11733] ? __pfx_path_openat+0x10/0x10 [ 538.709610][T11733] do_filp_open+0x20b/0x470 [ 538.709648][T11733] ? __pfx_do_filp_open+0x10/0x10 [ 538.709707][T11733] ? alloc_fd+0x471/0x7d0 [ 538.709751][T11733] do_sys_openat2+0x121/0x290 [ 538.709778][T11733] ? __pfx_do_sys_openat2+0x10/0x10 [ 538.709817][T11733] __x64_sys_openat+0x174/0x210 [ 538.709845][T11733] ? __pfx___x64_sys_openat+0x10/0x10 [ 538.709885][T11733] do_syscall_64+0xcd/0xf80 [ 538.709925][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.709950][T11733] RIP: 0033:0x7fdc1738f7c9 [ 538.709969][T11733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.709993][T11733] RSP: 002b:00007fdc1820c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 538.710015][T11733] RAX: ffffffffffffffda RBX: 00007fdc175e5fa0 RCX: 00007fdc1738f7c9 [ 538.710032][T11733] RDX: 1a6b75d638828712 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 538.710048][T11733] RBP: 00007fdc17413f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.710063][T11733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.710077][T11733] R13: 00007fdc175e6038 R14: 00007fdc175e5fa0 R15: 00007ffc9c89bb48 [ 538.710109][T11733] [ 538.950714][T11742] CPU: 0 UID: 0 PID: 11742 Comm: syz.4.1189 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.950753][T11742] Tainted: [L]=SOFTLOCKUP [ 538.950762][T11742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.950776][T11742] Call Trace: [ 538.950784][T11742] [ 538.950793][T11742] dump_stack_lvl+0x16c/0x1f0 [ 538.950836][T11742] should_fail_ex+0x512/0x640 [ 538.950863][T11742] ? kmem_cache_alloc_noprof+0x62/0x770 [ 538.950896][T11742] should_failslab+0xc2/0x120 [ 538.950935][T11742] kmem_cache_alloc_noprof+0x83/0x770 [ 538.950965][T11742] ? __kernfs_new_node+0xd2/0x9b0 [ 538.950999][T11742] ? __kernfs_new_node+0xd2/0x9b0 [ 538.951025][T11742] __kernfs_new_node+0xd2/0x9b0 [ 538.951057][T11742] ? __pfx___kernfs_new_node+0x10/0x10 [ 538.951093][T11742] ? find_held_lock+0x2b/0x80 [ 538.951126][T11742] ? kernfs_root+0xee/0x2a0 [ 538.951160][T11742] kernfs_new_node+0x13c/0x1e0 [ 538.951206][T11742] __kernfs_create_file+0x53/0x350 [ 538.951249][T11742] sysfs_add_file_mode_ns+0x207/0x3c0 [ 538.951283][T11742] sysfs_merge_group+0x1aa/0x340 [ 538.951315][T11742] ? __pfx_sysfs_merge_group+0x10/0x10 [ 538.951349][T11742] ? __pfx_dev_add_physical_location+0x10/0x10 [ 538.951385][T11742] ? bus_to_subsys+0x131/0x160 [ 538.951426][T11742] dpm_sysfs_add+0x237/0x280 [ 538.951460][T11742] device_add+0x9cc/0x1980 [ 538.951497][T11742] ? __pfx_device_add+0x10/0x10 [ 538.951531][T11742] ? __pfx_exact_lock+0x10/0x10 [ 538.951573][T11742] ? kobject_get+0xbb/0x150 [ 538.951615][T11742] cdev_device_add+0x12b/0x270 [ 538.951655][T11742] evdev_connect+0x3a4/0x4c0 [ 538.951693][T11742] input_attach_handler.isra.0+0x176/0x250 [ 538.951733][T11742] input_register_device+0xab9/0x11b0 [ 538.951770][T11742] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 538.951797][T11742] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 538.951827][T11742] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 538.951859][T11742] ? find_held_lock+0x2b/0x80 [ 538.951905][T11742] ? __pfx_uinput_ioctl+0x10/0x10 [ 538.951930][T11742] __x64_sys_ioctl+0x18e/0x210 [ 538.951961][T11742] do_syscall_64+0xcd/0xf80 [ 538.952001][T11742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.952025][T11742] RIP: 0033:0x7f2fb478f7c9 [ 538.952046][T11742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.952070][T11742] RSP: 002b:00007f2fb55d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.952093][T11742] RAX: ffffffffffffffda RBX: 00007f2fb49e5fa0 RCX: 00007f2fb478f7c9 [ 538.952109][T11742] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 538.952124][T11742] RBP: 00007f2fb4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 538.952140][T11742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.952154][T11742] R13: 00007f2fb49e6038 R14: 00007f2fb49e5fa0 R15: 00007ffc53c8c8d8 [ 538.952192][T11742] [ 539.571898][T11742] input: failed to attach handler evdev to device input18, error: -12 [ 541.488650][ T5848] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 542.239159][T11799] zero sized request [ 542.843609][T11804] zero sized request [ 543.501902][T11812] FAULT_INJECTION: forcing a failure. [ 543.501902][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 543.572081][T11812] CPU: 0 UID: 0 PID: 11812 Comm: syz.5.1204 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.572121][T11812] Tainted: [L]=SOFTLOCKUP [ 543.572129][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.572144][T11812] Call Trace: [ 543.572152][T11812] [ 543.572161][T11812] dump_stack_lvl+0x16c/0x1f0 [ 543.572202][T11812] should_fail_ex+0x512/0x640 [ 543.572234][T11812] ? __kvmalloc_node_noprof+0x129/0xa40 [ 543.572272][T11812] should_failslab+0xc2/0x120 [ 543.572311][T11812] __kvmalloc_node_noprof+0x14a/0xa40 [ 543.572349][T11812] ? alloc_shrinker_info+0xf0/0x470 [ 543.572387][T11812] ? alloc_shrinker_info+0xf0/0x470 [ 543.572416][T11812] alloc_shrinker_info+0xf0/0x470 [ 543.572455][T11812] mem_cgroup_css_online+0x217/0x640 [ 543.572485][T11812] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 543.572517][T11812] online_css+0xb2/0x350 [ 543.572548][T11812] cgroup_apply_control_enable+0x702/0xbb0 [ 543.572595][T11812] cgroup_mkdir+0x5e0/0x12e0 [ 543.572642][T11812] ? __pfx_cgroup_mkdir+0x10/0x10 [ 543.572680][T11812] kernfs_iop_mkdir+0x111/0x190 [ 543.572711][T11812] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 543.572738][T11812] vfs_mkdir+0x731/0xb60 [ 543.572772][T11812] do_mkdirat+0x442/0x5e0 [ 543.572823][T11812] ? __pfx_do_mkdirat+0x10/0x10 [ 543.572861][T11812] ? strncpy_from_user+0x203/0x2e0 [ 543.572889][T11812] ? getname_flags.part.0+0x1c5/0x550 [ 543.572920][T11812] __x64_sys_mkdir+0xef/0x140 [ 543.572960][T11812] do_syscall_64+0xcd/0xf80 [ 543.573001][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.573025][T11812] RIP: 0033:0x7f06ec58f7c9 [ 543.573044][T11812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.573068][T11812] RSP: 002b:00007f06ed3a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 543.573091][T11812] RAX: ffffffffffffffda RBX: 00007f06ec7e6090 RCX: 00007f06ec58f7c9 [ 543.573108][T11812] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 543.573123][T11812] RBP: 00007f06ec613f91 R08: 0000000000000000 R09: 0000000000000000 [ 543.573138][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.573153][T11812] R13: 00007f06ec7e6128 R14: 00007f06ec7e6090 R15: 00007fffd3f49d98 [ 543.573185][T11812] [ 545.842741][T11845] binder: 11844:11845 ioctl 400c620e 200000000b40 returned -22 [ 545.907014][T11841] FAULT_INJECTION: forcing a failure. [ 545.907014][T11841] name failslab, interval 1, probability 0, space 0, times 0 [ 546.019358][T11841] CPU: 0 UID: 0 PID: 11841 Comm: syz.5.1209 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.019415][T11841] Tainted: [L]=SOFTLOCKUP [ 546.019423][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.019438][T11841] Call Trace: [ 546.019446][T11841] [ 546.019455][T11841] dump_stack_lvl+0x16c/0x1f0 [ 546.019498][T11841] should_fail_ex+0x512/0x640 [ 546.019526][T11841] ? fs_reclaim_acquire+0xae/0x150 [ 546.019575][T11841] should_failslab+0xc2/0x120 [ 546.019622][T11841] kmem_cache_alloc_noprof+0x83/0x770 [ 546.019651][T11841] ? __pfx_map_id_range_down+0x10/0x10 [ 546.019696][T11841] ? security_inode_alloc+0x3b/0x2b0 [ 546.019727][T11841] ? security_inode_alloc+0x3b/0x2b0 [ 546.019750][T11841] security_inode_alloc+0x3b/0x2b0 [ 546.019777][T11841] inode_init_always_gfp+0xced/0x1040 [ 546.019819][T11841] alloc_inode+0x86/0x240 [ 546.019846][T11841] iget_locked+0x1d9/0x6d0 [ 546.019874][T11841] ? __pfx_iget_locked+0x10/0x10 [ 546.019903][T11841] ? kernfs_root+0xee/0x2a0 [ 546.019944][T11841] kernfs_get_inode+0x46/0x470 [ 546.019973][T11841] kernfs_iop_lookup+0x1a7/0x2d0 [ 546.020007][T11841] __lookup_slow+0x251/0x460 [ 546.020035][T11841] ? __pfx___lookup_slow+0x10/0x10 [ 546.020077][T11841] ? __d_lookup+0x266/0x4a0 [ 546.020114][T11841] lookup_slow+0x50/0x70 [ 546.020141][T11841] path_lookupat+0x5e9/0xc40 [ 546.020178][T11841] filename_lookup+0x224/0x5f0 [ 546.020214][T11841] ? __pfx_filename_lookup+0x10/0x10 [ 546.020273][T11841] ? getname_flags.part.0+0x1c5/0x550 [ 546.020306][T11841] user_path_at+0x3a/0x60 [ 546.020341][T11841] __x64_sys_name_to_handle_at+0x1e7/0x310 [ 546.020384][T11841] ? __pfx___x64_sys_name_to_handle_at+0x10/0x10 [ 546.020434][T11841] do_syscall_64+0xcd/0xf80 [ 546.020474][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.020499][T11841] RIP: 0033:0x7f06ec58f7c9 [ 546.020519][T11841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.020547][T11841] RSP: 002b:00007f06ed3c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 546.020570][T11841] RAX: ffffffffffffffda RBX: 00007f06ec7e5fa0 RCX: 00007f06ec58f7c9 [ 546.020586][T11841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 546.020602][T11841] RBP: 00007f06ec613f91 R08: 0000000000000002 R09: 0000000000000000 [ 546.020617][T11841] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000000 [ 546.020632][T11841] R13: 00007f06ec7e6038 R14: 00007f06ec7e5fa0 R15: 00007fffd3f49d98 [ 546.020664][T11841] [ 546.302907][T11848] zero sized request [ 546.315206][T11849] zero sized request [ 547.409491][T11863] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 548.541182][T11858] kexec: Could not allocate control_code_buffer [ 548.578432][T11880] FAULT_INJECTION: forcing a failure. [ 548.578432][T11880] name failslab, interval 1, probability 0, space 0, times 0 [ 548.659390][T11880] CPU: 0 UID: 0 PID: 11880 Comm: syz.5.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.659434][T11880] Tainted: [L]=SOFTLOCKUP [ 548.659442][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.659457][T11880] Call Trace: [ 548.659466][T11880] [ 548.659476][T11880] dump_stack_lvl+0x16c/0x1f0 [ 548.659518][T11880] should_fail_ex+0x512/0x640 [ 548.659545][T11880] ? __kmalloc_noprof+0xca/0x910 [ 548.659575][T11880] should_failslab+0xc2/0x120 [ 548.659613][T11880] __kmalloc_noprof+0xeb/0x910 [ 548.659640][T11880] ? ring_buffer_read_start+0x1b9/0x500 [ 548.659678][T11880] ? ring_buffer_read_start+0x1b9/0x500 [ 548.659710][T11880] ring_buffer_read_start+0x1b9/0x500 [ 548.659744][T11880] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 548.659776][T11880] ? lockdep_init_map_type+0x5c/0x270 [ 548.659802][T11880] ? ring_buffer_overruns+0x195/0x1f0 [ 548.659838][T11880] tracing_open+0x93f/0xe10 [ 548.659871][T11880] do_dentry_open+0x748/0x1590 [ 548.659907][T11880] ? __pfx_tracing_open+0x10/0x10 [ 548.659942][T11880] vfs_open+0x82/0x3f0 [ 548.659972][T11880] path_openat+0x2078/0x3140 [ 548.660018][T11880] ? __pfx_path_openat+0x10/0x10 [ 548.660066][T11880] do_filp_open+0x20b/0x470 [ 548.660104][T11880] ? __pfx_do_filp_open+0x10/0x10 [ 548.660163][T11880] ? alloc_fd+0x471/0x7d0 [ 548.660207][T11880] do_sys_openat2+0x121/0x290 [ 548.660234][T11880] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.660272][T11880] __x64_sys_openat+0x174/0x210 [ 548.660300][T11880] ? __pfx___x64_sys_openat+0x10/0x10 [ 548.660347][T11880] do_syscall_64+0xcd/0xf80 [ 548.660387][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.660412][T11880] RIP: 0033:0x7f06ec58f7c9 [ 548.660432][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.660456][T11880] RSP: 002b:00007f06ed3a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.660479][T11880] RAX: ffffffffffffffda RBX: 00007f06ec7e6090 RCX: 00007f06ec58f7c9 [ 548.660496][T11880] RDX: 1a6b75d638828712 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 548.660512][T11880] RBP: 00007f06ec613f91 R08: 0000000000000000 R09: 0000000000000000 [ 548.660527][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.660542][T11880] R13: 00007f06ec7e6128 R14: 00007f06ec7e6090 R15: 00007fffd3f49d98 [ 548.660573][T11880] [ 549.451908][T11891] FAULT_INJECTION: forcing a failure. [ 549.451908][T11891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.451950][T11891] CPU: 0 UID: 0 PID: 11891 Comm: syz.5.1221 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.451985][T11891] Tainted: [L]=SOFTLOCKUP [ 549.451994][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.452008][T11891] Call Trace: [ 549.452015][T11891] [ 549.452024][T11891] dump_stack_lvl+0x16c/0x1f0 [ 549.452065][T11891] should_fail_ex+0x512/0x640 [ 549.452096][T11891] strncpy_from_user+0x3b/0x2e0 [ 549.452124][T11891] getname_flags.part.0+0x8f/0x550 [ 549.452155][T11891] getname_flags+0x93/0xf0 [ 549.452188][T11891] user_path_at+0x24/0x60 [ 549.452222][T11891] __x64_sys_mount+0x1fb/0x310 [ 549.452246][T11891] ? __pfx___x64_sys_mount+0x10/0x10 [ 549.452278][T11891] do_syscall_64+0xcd/0xf80 [ 549.452324][T11891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.452349][T11891] RIP: 0033:0x7f06ec58f7c9 [ 549.452367][T11891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.452391][T11891] RSP: 002b:00007f06ed3a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 549.452414][T11891] RAX: ffffffffffffffda RBX: 00007f06ec7e6090 RCX: 00007f06ec58f7c9 [ 549.452430][T11891] RDX: 0000200000000280 RSI: 0000000000000000 RDI: 0000200000000180 [ 549.452445][T11891] RBP: 00007f06ec613f91 R08: 0000200000000280 R09: 0000000000000000 [ 549.452460][T11891] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 549.452475][T11891] R13: 00007f06ec7e6128 R14: 00007f06ec7e6090 R15: 00007fffd3f49d98 [ 549.452506][T11891] [ 549.960970][T11900] zero sized request [ 550.219944][T11896] zswap: compressor not available [ 550.695622][T11908] netlink: Failed to add  helper -22 [ 550.722969][T11911] netlink: 62 bytes leftover after parsing attributes in process `syz.3.1225'. [ 551.379605][T11928] program syz.1.1228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.161593][T11938] FAULT_INJECTION: forcing a failure. [ 552.161593][T11938] name fail_futex, interval 1, probability 0, space 0, times 0 [ 552.161637][T11938] CPU: 0 UID: 0 PID: 11938 Comm: syz.3.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.161672][T11938] Tainted: [L]=SOFTLOCKUP [ 552.161680][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.161696][T11938] Call Trace: [ 552.161703][T11938] [ 552.161712][T11938] dump_stack_lvl+0x16c/0x1f0 [ 552.161753][T11938] should_fail_ex+0x512/0x640 [ 552.161785][T11938] get_futex_key+0x1d0/0x15f0 [ 552.161815][T11938] ? __pfx_get_futex_key+0x10/0x10 [ 552.161843][T11938] ? mmap_region+0x1ee/0x3f0 [ 552.161873][T11938] ? __get_unmapped_area+0x267/0x3f0 [ 552.161913][T11938] futex_wake+0xea/0x530 [ 552.161948][T11938] ? __pfx_futex_wake+0x10/0x10 [ 552.161987][T11938] ? up_write+0x282/0x4e0 [ 552.162024][T11938] do_futex+0x1e3/0x350 [ 552.162053][T11938] ? __pfx_do_futex+0x10/0x10 [ 552.162082][T11938] ? 0xffffffffff600000 [ 552.162104][T11938] __x64_sys_futex+0x1e0/0x4c0 [ 552.162137][T11938] ? __pfx___x64_sys_futex+0x10/0x10 [ 552.162164][T11938] ? ksys_mmap_pgoff+0x85/0x5c0 [ 552.162198][T11938] ? xfd_validate_state+0x61/0x180 [ 552.162230][T11938] do_syscall_64+0xcd/0xf80 [ 552.162269][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.162293][T11938] RIP: 0033:0x7fdc1738f7c9 [ 552.162311][T11938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.162335][T11938] RSP: 002b:00007fdc1820c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 552.162358][T11938] RAX: ffffffffffffffda RBX: 00007fdc175e5fa8 RCX: 00007fdc1738f7c9 [ 552.162374][T11938] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdc175e5fac [ 552.162389][T11938] RBP: 00007fdc175e5fa0 R08: 00007fdc1820d000 R09: 0000000000000000 [ 552.162405][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.162419][T11938] R13: 00007fdc175e6038 R14: 00007ffc9c89ba60 R15: 00007ffc9c89bb48 [ 552.162450][T11938] [ 553.008085][T11947] zero sized request [ 553.038202][T11947] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1232'. [ 553.300213][T11952] syz.5.1234 (11952): attempted to duplicate a private mapping with mremap. This is not supported. [ 553.519410][T11866] ================================================================== [ 553.519427][T11866] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 553.519471][T11866] Write of size 8 at addr ffffc90003c590a0 by task syz.4.1215/11866 [ 553.519492][T11866] [ 553.519505][T11866] CPU: 0 UID: 0 PID: 11866 Comm: syz.4.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.519540][T11866] Tainted: [L]=SOFTLOCKUP [ 553.519548][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.519563][T11866] Call Trace: [ 553.519570][T11866] [ 553.519579][T11866] dump_stack_lvl+0x116/0x1f0 [ 553.519617][T11866] print_report+0xcd/0x630 [ 553.519653][T11866] ? __virt_addr_valid+0x81/0x610 [ 553.519694][T11866] ? sys_imageblit+0x1a6f/0x1e60 [ 553.519728][T11866] kasan_report+0xe0/0x110 [ 553.519769][T11866] ? sys_imageblit+0x1a6f/0x1e60 [ 553.519808][T11866] sys_imageblit+0x1a6f/0x1e60 [ 553.519854][T11866] ? __pfx_sys_imageblit+0x10/0x10 [ 553.519909][T11866] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 553.519948][T11866] soft_cursor+0x524/0xa10 [ 553.519983][T11866] bit_cursor+0xe8c/0x17e0 [ 553.520014][T11866] ? __pfx_bit_cursor+0x10/0x10 [ 553.520048][T11866] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.520086][T11866] ? get_color+0x1da/0x450 [ 553.520109][T11866] ? __pfx_bit_cursor+0x10/0x10 [ 553.520136][T11866] fbcon_cursor+0x437/0x5d0 [ 553.520160][T11866] ? mark_lock+0x981/0x9f0 [ 553.520182][T11866] hide_cursor+0x87/0x220 [ 553.520212][T11866] do_con_write+0x23fc/0x8280 [ 553.520247][T11866] ? __pfx___might_resched+0x10/0x10 [ 553.520282][T11866] ? rcu_is_watching+0x12/0xc0 [ 553.520317][T11866] ? trace_contention_end+0xdd/0x110 [ 553.520341][T11866] ? __mutex_lock+0x27b/0x1ca0 [ 553.520381][T11866] ? find_held_lock+0x2b/0x80 [ 553.520410][T11866] ? n_tty_write+0x4ff/0x1280 [ 553.520433][T11866] ? n_tty_write+0x463/0x1280 [ 553.520456][T11866] ? __pfx_do_con_write+0x10/0x10 [ 553.520491][T11866] ? __pfx___mutex_lock+0x10/0x10 [ 553.520528][T11866] ? __mutex_unlock_slowpath+0x161/0x790 [ 553.520569][T11866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.520612][T11866] con_write+0x23/0xb0 [ 553.520645][T11866] do_output_char+0x5d9/0x840 [ 553.520686][T11866] n_tty_write+0x514/0x1280 [ 553.520715][T11866] ? __pfx_n_tty_write+0x10/0x10 [ 553.520740][T11866] ? __pfx_woken_wake_function+0x10/0x10 [ 553.520770][T11866] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 553.520804][T11866] ? HUF_decompress4X2_usingDTable_internal_bmi2.part.0+0x8040/0xa570 [ 553.520840][T11866] ? __pfx_n_tty_write+0x10/0x10 [ 553.520864][T11866] file_tty_write.constprop.0+0x503/0x9b0 [ 553.520909][T11866] redirected_tty_write+0xd4/0x120 [ 553.520944][T11866] vfs_write+0x7d3/0x11d0 [ 553.520979][T11866] ? __pfx_redirected_tty_write+0x10/0x10 [ 553.521015][T11866] ? __pfx_vfs_write+0x10/0x10 [ 553.521048][T11866] ? find_held_lock+0x2b/0x80 [ 553.521088][T11866] ksys_write+0x12a/0x250 [ 553.521122][T11866] ? __pfx_ksys_write+0x10/0x10 [ 553.521160][T11866] do_syscall_64+0xcd/0xf80 [ 553.521198][T11866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.521222][T11866] RIP: 0033:0x7f2fb478f7c9 [ 553.521242][T11866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.521266][T11866] RSP: 002b:00007f2fb55af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 553.521289][T11866] RAX: ffffffffffffffda RBX: 00007f2fb49e6090 RCX: 00007f2fb478f7c9 [ 553.521306][T11866] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000008 [ 553.521321][T11866] RBP: 00007f2fb4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 553.521337][T11866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.521352][T11866] R13: 00007f2fb49e6128 R14: 00007f2fb49e6090 R15: 00007ffc53c8c8d8 [ 553.521376][T11866] [ 553.521383][T11866] [ 553.521389][T11866] The buggy address belongs to a vmalloc virtual mapping [ 553.521411][T11866] Memory state around the buggy address: [ 553.521424][T11866] ffffc90003c58f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 553.521441][T11866] ffffc90003c59000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 553.521458][T11866] >ffffc90003c59080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 553.521472][T11866] ^ [ 553.521484][T11866] ffffc90003c59100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 553.521501][T11866] ffffc90003c59180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 553.521514][T11866] ================================================================== [ 553.539787][T11866] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 553.539811][T11866] CPU: 0 UID: 0 PID: 11866 Comm: syz.4.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.539847][T11866] Tainted: [L]=SOFTLOCKUP [ 553.539856][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.539877][T11866] Call Trace: [ 553.539885][T11866] [ 553.539894][T11866] dump_stack_lvl+0x3d/0x1f0 [ 553.539937][T11866] vpanic+0x640/0x6f0 [ 553.539962][T11866] panic+0xca/0xd0 [ 553.539984][T11866] ? __pfx_panic+0x10/0x10 [ 553.540007][T11866] ? sys_imageblit+0x1a6f/0x1e60 [ 553.540044][T11866] ? preempt_schedule_common+0x44/0xc0 [ 553.540080][T11866] ? preempt_schedule_thunk+0x16/0x30 [ 553.540107][T11866] check_panic_on_warn+0xab/0xb0 [ 553.540132][T11866] end_report+0x107/0x160 [ 553.540169][T11866] kasan_report+0xee/0x110 [ 553.540206][T11866] ? sys_imageblit+0x1a6f/0x1e60 [ 553.540245][T11866] sys_imageblit+0x1a6f/0x1e60 [ 553.540285][T11866] ? __pfx_sys_imageblit+0x10/0x10 [ 553.540333][T11866] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 553.540374][T11866] soft_cursor+0x524/0xa10 [ 553.540416][T11866] bit_cursor+0xe8c/0x17e0 [ 553.540448][T11866] ? __pfx_bit_cursor+0x10/0x10 [ 553.540482][T11866] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.540521][T11866] ? get_color+0x1da/0x450 [ 553.540544][T11866] ? __pfx_bit_cursor+0x10/0x10 [ 553.540572][T11866] fbcon_cursor+0x437/0x5d0 [ 553.540596][T11866] ? mark_lock+0x981/0x9f0 [ 553.540619][T11866] hide_cursor+0x87/0x220 [ 553.540649][T11866] do_con_write+0x23fc/0x8280 [ 553.540685][T11866] ? __pfx___might_resched+0x10/0x10 [ 553.540721][T11866] ? rcu_is_watching+0x12/0xc0 [ 553.540755][T11866] ? trace_contention_end+0xdd/0x110 [ 553.540780][T11866] ? __mutex_lock+0x27b/0x1ca0 [ 553.540819][T11866] ? find_held_lock+0x2b/0x80 [ 553.540850][T11866] ? n_tty_write+0x4ff/0x1280 [ 553.540879][T11866] ? n_tty_write+0x463/0x1280 [ 553.540903][T11866] ? __pfx_do_con_write+0x10/0x10 [ 553.540938][T11866] ? __pfx___mutex_lock+0x10/0x10 [ 553.540977][T11866] ? __mutex_unlock_slowpath+0x161/0x790 [ 553.541018][T11866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.541062][T11866] con_write+0x23/0xb0 [ 553.541097][T11866] do_output_char+0x5d9/0x840 [ 553.541137][T11866] n_tty_write+0x514/0x1280 [ 553.541167][T11866] ? __pfx_n_tty_write+0x10/0x10 [ 553.541192][T11866] ? __pfx_woken_wake_function+0x10/0x10 [ 553.541222][T11866] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 553.541258][T11866] ? HUF_decompress4X2_usingDTable_internal_bmi2.part.0+0x8040/0xa570 [ 553.541294][T11866] ? __pfx_n_tty_write+0x10/0x10 [ 553.541318][T11866] file_tty_write.constprop.0+0x503/0x9b0 [ 553.541358][T11866] redirected_tty_write+0xd4/0x120 [ 553.541394][T11866] vfs_write+0x7d3/0x11d0 [ 553.541429][T11866] ? __pfx_redirected_tty_write+0x10/0x10 [ 553.541467][T11866] ? __pfx_vfs_write+0x10/0x10 [ 553.541501][T11866] ? find_held_lock+0x2b/0x80 [ 553.541541][T11866] ksys_write+0x12a/0x250 [ 553.541576][T11866] ? __pfx_ksys_write+0x10/0x10 [ 553.541616][T11866] do_syscall_64+0xcd/0xf80 [ 553.541654][T11866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.541679][T11866] RIP: 0033:0x7f2fb478f7c9 [ 553.541698][T11866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.541722][T11866] RSP: 002b:00007f2fb55af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 553.541746][T11866] RAX: ffffffffffffffda RBX: 00007f2fb49e6090 RCX: 00007f2fb478f7c9 [ 553.541763][T11866] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000008 [ 553.541779][T11866] RBP: 00007f2fb4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 553.541794][T11866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.541809][T11866] R13: 00007f2fb49e6128 R14: 00007f2fb49e6090 R15: 00007ffc53c8c8d8 [ 553.541834][T11866] [ 553.541894][T11866] Kernel Offset: disabled