last executing test programs: 12.260826552s ago: executing program 2 (id=1948): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) setsockopt$auto_SO_NOFCS(r0, 0xf1c, 0x2b, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x3, 0x5, 0x7, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0xa, 0x0) r1 = getpgrp(0x0) prctl$auto(0x6, 0xb250, r1, 0x6, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x298000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7bdb, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x800000000000000, 0x40000e, 0x5, 0x1c, 0x2, 0x8000) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x6a) 11.268787699s ago: executing program 0 (id=1950): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000425bd7000fddbdf3e42669f31bcd03c12c71b877535f5f9c2e6e0d3ecec5b99f3549e007202340900003d0e0000a7de09cd2e"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0xe2054b76c099dec) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r3, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r4, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r4, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae1]}, 0x9, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd11, &(0x7f00000001c0)) read$auto(0xffffffffffffffff, 0x0, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000014cfd72bd958c54ecc9c55af5795a258b1a2a234472920fe6fc6edea7925489ceb6847c2533c79d9cb5bf838c05b20e8546e8809168de7e2f83e93f452dfbcaac01631bdb3352a752a6b43b410decb0b7b0f9f87bc99fc39ba53f8684f2ea3ef7cabe022a8ab7dd6c6273d6dae3b43fa13979f4f3f2e4e87ccb16a98363f1fa479e2f85640310b310c46f4f47c", @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000100000010000a800c000180080001000100000008000800", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000d0) 10.957004816s ago: executing program 2 (id=1952): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000425bd7000fddbdf3e42669f31bcd03c12c71b877535f5f9c2e6e0d3ecec5b99f3549e007202340900003d0e0000a7de09cd2e"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0xe2054b76c099dec) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r3, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r4, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r4, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae1]}, 0x9, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd11, &(0x7f00000001c0)) read$auto(0xffffffffffffffff, 0x0, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000014cfd72bd958c54ecc9c55af5795a258b1a2a234472920fe6fc6edea7925489ceb6847c2533c79d9cb5bf838c05b20e8546e8809168de7e2f83e93f452dfbcaac01631bdb3352a752a6b43b410decb0b7b0f9f87bc99fc39ba53f8684f2ea3ef7cabe022a8ab7dd6c6273d6dae3b43fa13979f4f3f2e4e87ccb16a98363f1fa479e2f85640310b310c46f4f47c", @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000100000010000a800c000180080001000100000008000800", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000d0) 10.149763901s ago: executing program 0 (id=1955): socket(0x1e, 0x2, 0x1) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x100, 0xffffffffffff8001, 0x1, 0x8019, r0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x40104d00, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x3}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x5, 0x106) rseq$auto(&(0x7f0000000340)={0x10, 0x401, 0x0, 0x803, 0x7, 0x2}, 0x8000, 0x0, 0x8000006) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) read$auto_i2cdev_fops_i2c_dev(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.993815985s ago: executing program 0 (id=1961): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x0, 0x5, 0x0) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = socket(0x15, 0x5, 0x0) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x5b7e, 0x0, 0x0, 0x0, 0x7f, 0x7}, 0x3}, 0x6015, 0x3, 0x0) ppoll$auto(&(0x7f0000000340)={r4, 0x0, 0x89}, 0x2, 0x0, 0x0, 0x8) pipe$auto(0x0) r5 = pipe$auto(0x0) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x206000, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/free_buffer\x00', 0x0, 0x0) tee$auto(0x2000000000000, r5, 0x35f, 0x5) write$auto(0x1, 0x0, 0x100) setresuid$auto(0x2, 0x7, 0x8080) socket(0x2, 0xa, 0x106) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) r6 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r8, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4a083, 0x0) ioctl$auto_BLKRRPART(r9, 0x125f, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0xfff5, &(0x7f0000000000)={0x9, 0x6, 0x5, @raw=0x40dfb0}}) ioctl$auto(r6, 0x4020ae46, 0xffffffffffffffff) 8.72888519s ago: executing program 2 (id=1962): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/uevent\x00', 0xa001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x1, 0x0) ioctl$auto(r2, 0x9210640d, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r4) sendmsg$auto_TASKSTATS_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r3, 0x1, &(0x7f00000002c0)="7d4d6bac0100120f61d46fa8bde75da51a623287db278095f41e2b4d632ace21614c750afbd0191b8c164503877b7cd66c378cf6425762ea79b301a6db57cb5ef3a0392c34dd645277ef7199cdac255e8daf7be8a03eca2e82abad870123f1187331598ca1cd9d375d24dfcac162dc073ba50c4e37c90144536919e57f0010f3c308ddc398c6acbf510e69d2bb0f40f36093da09288350830000274aadaa47cf39641f3242a828d217cd3166f273aebc3d42c6dca5a8") statmount$auto(0x0, 0x0, 0x1fe, 0xd) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r5, &(0x7f0000000900)=""/4096, 0x1000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) futex_wake$auto(0x0, 0x5, 0x4, 0xa) socket(0xa, 0x3, 0x84) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xa7a, 0x400008, 0xdf, 0x1f, 0x2, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0x80b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f00000024c0)={0x0, 0x4f, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000646c945d4272e755fa1e0f62fd3cb55518d879731556c18002baea871e224a174d70ecd6c3744019880a8ed41bff734e01eb6a1861c513573e95338af1fd5c41189db6a1d1f38ea5a4079f42f700e990b951a6b19fe0953c", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2511000000"], 0x14}}, 0x200088b0) setfsuid$auto(0xee00) 7.396817611s ago: executing program 0 (id=1965): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r0) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000425bd7000fddbdf3e42669f31bcd03c12c71b877535f5f9c2e6e0d3ecec5b99f3549e007202340900003d0e0000a7de09cd2e"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0xe2054b76c099dec) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r3, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r4, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r4, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae1]}, 0x9, 0xd) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd11, &(0x7f00000001c0)) read$auto(0xffffffffffffffff, 0x0, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000014cfd72bd958c54ecc9c55af5795a258b1a2a234472920fe6fc6edea7925489ceb6847c2533c79d9cb5bf838c05b20e8546e8809168de7e2f83e93f452dfbcaac01631bdb3352a752a6b43b410decb0b7b0f9f87bc99fc39ba53f8684f2ea3ef7cabe022a8ab7dd6c6273d6dae3b43fa13979f4f3f2e4e87ccb16a98363f1fa479e2f85640310b310c46f4f47c7cfe2f5a4b9b73a74dbd", @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000100000010000a800c000180080001000100000008000800", @ANYRES32=r8, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000d0) 4.251287047s ago: executing program 1 (id=1973): fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 4.062456456s ago: executing program 1 (id=1975): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) r1 = ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000001c0)=0x7) fsconfig$auto_FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)=']^\x00', &(0x7f0000000b40)="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", 0xfffffe01) settimeofday$auto(0x0, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) setresuid$auto(0x0, 0x7, 0x8080) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') setfsuid$auto(0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r4 = fcntl$auto_F_GETOWN(r3, 0x9, 0xea6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x40084504, 0x10000000000402) r5 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@task_fd_query={r4, r3, 0x6, 0xa, 0x5, 0x5, r2, 0x3, 0xffff}, 0x19) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r7, 0x0, 0x20) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000480)=@bpf_attr_7={@btf_id=0xfffff801, 0x80, 0x3, r6}, 0x2) r8 = setfsgid$auto(0xee01) setresgid$auto(r8, 0x0, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000000140)={0x6, r8, 0x3, 0x1}) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r9, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)=':,\x00', 0x1000, 0x7ff) writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7) 3.912402763s ago: executing program 3 (id=1976): mmap$auto(0x0, 0x1, 0xdd, 0x9b72, 0x2, 0x0) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) read$auto(r0, &(0x7f0000000040)='\x00', 0x3) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) prlimit64$auto(0x0, 0x7, 0x0, &(0x7f0000000080)={0x3ff}) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201", @ANYBLOB='B'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 3.764202499s ago: executing program 1 (id=1977): prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x2100, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) close_range$auto(0x2, 0x8, 0x3f000000) 3.578170124s ago: executing program 1 (id=1978): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101300, 0x0) pidfd_open$auto(0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/192, 0xc0) setgroups$auto(0x10, &(0x7f0000000000)) r1 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000140)=0x4) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, r1, 0x0, 0x802) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/usbip-vudc.0/udc/usbip-vudc.0/is_a_peripheral\x00', 0x101000, 0x0) read$auto(r2, &(0x7f00000000c0)='/\x91\xecsys/dfices/platfm/vhci_hcd.7/usb\fQ3{\x04\x7f23/23-0:1.0/ep_81/int\x00\x0fS\xe6x\x13\xbaCSJUkZ7\xcf\x9b-\xd7%\xae\x15\xf2\xd4\x93G\xf4\x9e.\xb52\xdd\x8e\x16>\x86Nl\x16\xeb', 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x1a1a00, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) madvise$auto(0x0, 0x8, 0x3) pread64$auto(r3, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) 3.50420667s ago: executing program 3 (id=1979): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) mmap$auto(0x4000000, 0x2000000002020009, 0xf, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000c16745579338a0bd48357abde96a3cc34821e96af572d2dfe52e1d6f1d64deed0c30b601d235789145da0b31aa1fce3c1513d8b044c9da2845b69cc7c8ab240c69b41b4ba515195a27b394241ae6235a718367f80ab50e9a6f7e59e131f5455ef47804b38e3d0975d3807291591e1b60ca85313df0b0919b4eff1bd286ab708f5167903038364df240f45e5b210f68dfc397f33902970a8efe058b1a721a2df1588be606d620ed8a5fba81db31cb55dbf5", @ANYRES16=r3, @ANYBLOB="010025bd7000fbcbdf25010000000400018004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) write$auto(0x3, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) r4 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r4, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x64881, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 3.439773677s ago: executing program 0 (id=1980): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.301048917s ago: executing program 1 (id=1981): openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) eventfd$auto(0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netlink\x00', 0x40080, 0x0) socket(0x18, 0xa, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/usb21-port6/power/runtime_status\x00', 0xa0001, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0xc) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x4) shutdown$auto(0x200000003, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x1098c7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose12/iflink\x00', 0x40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000340)=""/138, 0x8a) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) capset$auto(0x0, &(0x7f0000000200)={0x8, 0x8, 0x1}) mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x82000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.644041496s ago: executing program 3 (id=1982): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) eventfd$auto(0x8a) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb2, 0xfffffffffffffffb, 0x40000000008000) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/free_buffer\x00', 0x2000, 0x0) 2.368405829s ago: executing program 2 (id=1983): fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000140)) 2.308162078s ago: executing program 1 (id=1984): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=@enable_stats={0x1ff}, 0x7) setpgid$auto(0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0xc8, 0x4, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffefffffffff7fff) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) ioctl$auto_BLKFRAGET(r2, 0x1265, 0x0) truncate$auto(0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) (async) read$auto(r1, 0x0, 0x20) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=@enable_stats={0x1ff}, 0x7) (async) setpgid$auto(0x0, 0x0) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) clone$auto(0xc8, 0x4, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffefffffffff7fff) (async) get_mempolicy$auto(0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x3) (async) ioctl$auto_BLKFRAGET(r2, 0x1265, 0x0) (async) truncate$auto(0x0, 0x6) (async) 2.264574621s ago: executing program 3 (id=1985): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop13\x00', 0x610301, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmmsg$auto(r0, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x25}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="1200", @ANYBLOB="56e1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(0xffffffffffffffff, 0x89f0, 0x24) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r2, 0x40246f4c, 0x38) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) read$auto(r1, &(0x7f0000000140)='@],#!*:$\x00', 0x8) r4 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r4, 0x11b, 0x9, 0xffffffffffffffff, 0x18) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) vmsplice$auto(r3, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) socket(0x28, 0x800, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10, 0x0) mlockall$auto(0x7) mmap$auto(0x2, 0x7, 0x2000df, 0x9b71, 0x2, 0x8000) socket(0x3, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x2, 0xa) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(r5, 0x5407, 0x38) 2.130611808s ago: executing program 2 (id=1986): r0 = socket(0x5, 0x2, 0xf1ac) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r2 = open(&(0x7f0000000040)='./file0\x00', 0x169443, 0x114) r3 = fcntl$auto(r2, 0x40a, 0x0) close_range$auto(r3, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) sendto$auto(r6, &(0x7f0000000200)="69481a9a48941a567e00", 0x1, 0x5, &(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x3a) (async) sendto$auto(r6, &(0x7f0000000200)="69481a9a48941a567e00", 0x1, 0x5, &(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x2}}, 0x3a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x100000000000000) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3ff, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x6, 0x5]}, 0x0) (async) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3ff, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x6, 0x5]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0x6]}, 0x0) listen$auto(r4, 0xffffffff) (async) listen$auto(r4, 0xffffffff) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mtd/mtd0/mtdblock0/integrity/read_verify\x00', 0x8502, 0x0) write$auto(r7, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) getsockopt$auto_SO_SNDBUF(r0, 0x0, 0x7, 0x0, &(0x7f0000000100)) (async) getsockopt$auto_SO_SNDBUF(r0, 0x0, 0x7, 0x0, &(0x7f0000000100)) 1.875073318s ago: executing program 0 (id=1987): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) setsockopt$auto_SO_NOFCS(r0, 0xf1c, 0x2b, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x3, 0x5, 0x7, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0xa, 0x0) r1 = getpgrp(0x0) prctl$auto(0x6, 0xb250, r1, 0x6, 0x6) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x298000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7bdb, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x800000000000000, 0x40000e, 0x5, 0x1c, 0x2, 0x8000) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x6a) 977.07876ms ago: executing program 2 (id=1988): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x6a4, 0x400, 0x2}]}) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x5, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x0, 0x9, @_sigsys={&(0x7f00000000c0)="811eaf84ad5ffde93d0d5ebe24b440fd8f99c028507e4faffa5e5debcbc4018877438419b2bd7cb50813f34ea0d8473a3e", 0x1, 0x100}}}, 0x2) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(0xffffffffffffffff, 0x89f1, 0x24) 956.884482ms ago: executing program 3 (id=1989): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r1, 0x4018620d, 0x9) ioctl$auto(0xffffffffffffffff, 0x4018620d, 0x9) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) mmap$auto(0x0, 0x29, 0x800, 0x14, r0, 0x100) r2 = getpid() mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x21, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) 0s ago: executing program 3 (id=1990): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/025/001\x00', 0x0, 0x0) r1 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000240)="b94da69e011796f61c342dd69565108270bcfd18bc9929257a6b70e09bd4591d49eeff33490a681b89855e183fd52317fa6bb90846ecd2694c7ed94cac807beaffb66259f5e1b7c38d7c64edc88d8d71c812e780aa0ade54cbfbe9c6e8f3ba2349a60dc97320f089c07ff3bf3945898c000731abf6c41d4611c89bc755", 0x7d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000200)={0xfff, 0x81, 0x20, &(0x7f0000000180)="fa9fac3e059420411d9ae72cd034d9016aaf975255f801a745b26908c89c3adaa84fd56b7acaf282fa15ff9f218c5e27385e8be1e8c5db9802075258abdd31970bd26bbec1d75d6e"}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/oss\x00', 0x88400, 0x0) r3 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) ppoll$auto(&(0x7f0000000380)={r3, 0x8, 0x8}, 0x7, &(0x7f00000003c0)={0xc816, 0x7}, &(0x7f0000000400)={0x401}, 0x8) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/config/target/dbroot\x00', 0x53b003, 0x0) fchown$auto(r4, 0x0, 0x0) shmget$auto(0x7fff, 0x80, 0x6f92) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x3ff, 0x1000000000012, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000840)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348", 0xbdc) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x940, 0x0) r8 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_FIONREAD(r8, 0x541b, 0x7fffffffffffffff) ioctl$auto_MEMGETBADBLOCK(r7, 0x40084d0b, &(0x7f0000000080)=0x7) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        syzkaller syzkaller login: [ 638.330516][T14204] zswap: compressor not available syzkaller syzkaller login: [ 639.646796][T14230] FAULT_INJECTION: forcing a failure. [ 639.646796][T14230] name failslab, interval 1, probability 0, space 0, times 0 [ 639.669878][T14230] CPU: 0 UID: 0 PID: 14230 Comm: syz.1.1924 Tainted: G U syzkaller #0 PREEMPT(full) [ 639.669925][T14230] Tainted: [U]=USER [ 639.669935][T14230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 639.669952][T14230] Call Trace: [ 639.669962][T14230] [ 639.669973][T14230] dump_stack_lvl+0x16c/0x1f0 [ 639.670009][T14230] should_fail_ex+0x512/0x640 [ 639.670047][T14230] ? __kmalloc_noprof+0xca/0x880 [ 639.670090][T14230] ? __pfx_stats_fop_open+0x10/0x10 [ 639.670121][T14230] should_failslab+0xc2/0x120 [ 639.670157][T14230] __kmalloc_noprof+0xdd/0x880 [ 639.670196][T14230] ? __seq_open_private+0x22/0xd0 [ 639.670238][T14230] ? __pfx_stats_fop_open+0x10/0x10 [ 639.670268][T14230] ? __seq_open_private+0x22/0xd0 [ 639.670302][T14230] ? __kasan_kmalloc+0xaa/0xb0 [ 639.670336][T14230] __seq_open_private+0x22/0xd0 [ 639.670373][T14230] sc_common_open+0x6b/0x200 [ 639.670407][T14230] full_proxy_open_regular+0x1b9/0x360 [ 639.670449][T14230] do_dentry_open+0x982/0x1530 [ 639.670480][T14230] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 639.670524][T14230] vfs_open+0x82/0x3f0 [ 639.670563][T14230] path_openat+0x1de4/0x2cb0 [ 639.670603][T14230] ? __pfx_path_openat+0x10/0x10 [ 639.670634][T14230] ? __lock_acquire+0xb8a/0x1c90 [ 639.670673][T14230] do_filp_open+0x20b/0x470 [ 639.670705][T14230] ? __pfx_do_filp_open+0x10/0x10 [ 639.670760][T14230] ? alloc_fd+0x471/0x7d0 [ 639.670796][T14230] do_sys_openat2+0x11b/0x1d0 [ 639.670832][T14230] ? __pfx_do_sys_openat2+0x10/0x10 [ 639.670882][T14230] __x64_sys_openat+0x174/0x210 [ 639.670919][T14230] ? __pfx___x64_sys_openat+0x10/0x10 [ 639.670970][T14230] do_syscall_64+0xcd/0xfa0 [ 639.671002][T14230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.671029][T14230] RIP: 0033:0x7f13c4d8efc9 [ 639.671052][T14230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.671078][T14230] RSP: 002b:00007f13c2ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 639.671104][T14230] RAX: ffffffffffffffda RBX: 00007f13c4fe6090 RCX: 00007f13c4d8efc9 [ 639.671123][T14230] RDX: 0000000000004000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 639.671141][T14230] RBP: 00007f13c4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 639.671158][T14230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.671176][T14230] R13: 00007f13c4fe6128 R14: 00007f13c4fe6090 R15: 00007ffc1d90b008 [ 639.671216][T14230] syzkaller syzkaller login: [ 642.383410][T14261] FAULT_INJECTION: forcing a failure. [ 642.383410][T14261] name failslab, interval 1, probability 0, space 0, times 0 [ 642.396578][T14261] CPU: 0 UID: 0 PID: 14261 Comm: syz.2.1932 Tainted: G U syzkaller #0 PREEMPT(full) [ 642.396626][T14261] Tainted: [U]=USER [ 642.396637][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 642.396654][T14261] Call Trace: [ 642.396662][T14261] [ 642.396673][T14261] dump_stack_lvl+0x16c/0x1f0 [ 642.396717][T14261] should_fail_ex+0x512/0x640 [ 642.396756][T14261] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 642.396792][T14261] should_failslab+0xc2/0x120 [ 642.396825][T14261] kmem_cache_alloc_noprof+0x75/0x6e0 [ 642.396857][T14261] ? alloc_empty_file+0x55/0x1e0 [ 642.396899][T14261] ? alloc_empty_file+0x55/0x1e0 [ 642.396933][T14261] alloc_empty_file+0x55/0x1e0 [ 642.396969][T14261] alloc_file_pseudo+0x13a/0x230 [ 642.397010][T14261] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 642.397045][T14261] ? alloc_fd+0x471/0x7d0 [ 642.397076][T14261] sock_alloc_file+0x50/0x210 [ 642.397108][T14261] __sys_socket+0x1c0/0x260 [ 642.397139][T14261] ? __x64_sys_openat+0x174/0x210 [ 642.397175][T14261] ? __pfx___sys_socket+0x10/0x10 [ 642.397210][T14261] ? xfd_validate_state+0x61/0x180 [ 642.397258][T14261] __x64_sys_socket+0x72/0xb0 [ 642.397297][T14261] ? lockdep_hardirqs_on+0x7c/0x110 [ 642.397330][T14261] do_syscall_64+0xcd/0xfa0 [ 642.397362][T14261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.397392][T14261] RIP: 0033:0x7fdca7b8efc9 [ 642.397414][T14261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.397443][T14261] RSP: 002b:00007fdca8aa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 642.397469][T14261] RAX: ffffffffffffffda RBX: 00007fdca7de5fa0 RCX: 00007fdca7b8efc9 [ 642.397487][T14261] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 642.397504][T14261] RBP: 00007fdca7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 642.397523][T14261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.397538][T14261] R13: 00007fdca7de6038 R14: 00007fdca7de5fa0 R15: 00007ffc13d1da18 [ 642.397575][T14261] [ 642.866450][T14266] binder: BINDER_SET_CONTEXT_MGR already set [ 642.879054][ T5838] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 642.905871][T14266] binder: 14265:14266 ioctl 4018620d 9 returned -16 [ 644.654473][T14291] zero sized request [ 644.858333][T14291] FAULT_INJECTION: forcing a failure. [ 644.858333][T14291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.924082][T14291] CPU: 1 UID: 0 PID: 14291 Comm: syz.1.1939 Tainted: G U syzkaller #0 PREEMPT(full) [ 644.924127][T14291] Tainted: [U]=USER [ 644.924136][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.924145][T14291] Call Trace: [ 644.924151][T14291] [ 644.924158][T14291] dump_stack_lvl+0x16c/0x1f0 [ 644.924186][T14291] should_fail_ex+0x512/0x640 [ 644.924213][T14291] should_fail_alloc_page+0xe7/0x130 [ 644.924235][T14291] prepare_alloc_pages+0x3c2/0x610 [ 644.924258][T14291] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 644.924278][T14291] ? stack_trace_save+0x8e/0xc0 [ 644.924295][T14291] ? __pfx_stack_trace_save+0x10/0x10 [ 644.924310][T14291] ? is_bpf_text_address+0x94/0x1a0 [ 644.924331][T14291] ? stack_depot_save_flags+0x29/0x9c0 [ 644.924355][T14291] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 644.924369][T14291] ? kasan_save_stack+0x42/0x60 [ 644.924385][T14291] ? kasan_save_track+0x14/0x30 [ 644.924401][T14291] ? snd_pcm_attach_substream+0x441/0xd60 [ 644.924424][T14291] ? snd_pcm_open_substream+0x8d/0x17f0 [ 644.924445][T14291] ? snd_pcm_oss_open+0x735/0x1400 [ 644.924462][T14291] ? soundcore_open+0x40c/0x580 [ 644.924477][T14291] ? chrdev_open+0x234/0x6a0 [ 644.924493][T14291] ? do_dentry_open+0x982/0x1530 [ 644.924508][T14291] ? vfs_open+0x82/0x3f0 [ 644.924528][T14291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.924548][T14291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 644.924573][T14291] ? policy_nodemask+0xea/0x4e0 [ 644.924594][T14291] alloc_pages_mpol+0x1fb/0x550 [ 644.924613][T14291] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 644.924638][T14291] alloc_pages_noprof+0x131/0x390 [ 644.924657][T14291] alloc_pages_exact_noprof+0x37/0xe0 [ 644.924679][T14291] snd_pcm_attach_substream+0x468/0xd60 [ 644.924712][T14291] snd_pcm_open_substream+0x8d/0x17f0 [ 644.924750][T14291] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 644.924781][T14291] snd_pcm_oss_open+0x735/0x1400 [ 644.924817][T14291] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 644.924837][T14291] ? __lock_acquire+0xb8a/0x1c90 [ 644.924857][T14291] ? __pfx_default_wake_function+0x10/0x10 [ 644.924875][T14291] ? __lock_acquire+0xb8a/0x1c90 [ 644.924898][T14291] ? do_raw_spin_lock+0x12c/0x2b0 [ 644.924920][T14291] ? soundcore_open+0x35a/0x580 [ 644.924938][T14291] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 644.924957][T14291] soundcore_open+0x40c/0x580 [ 644.924974][T14291] ? __pfx_soundcore_open+0x10/0x10 [ 644.924990][T14291] chrdev_open+0x234/0x6a0 [ 644.925007][T14291] ? __pfx_apparmor_file_open+0x10/0x10 [ 644.925028][T14291] ? __pfx_chrdev_open+0x10/0x10 [ 644.925049][T14291] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 644.925069][T14291] do_dentry_open+0x982/0x1530 [ 644.925087][T14291] ? __pfx_chrdev_open+0x10/0x10 [ 644.925108][T14291] vfs_open+0x82/0x3f0 [ 644.925130][T14291] path_openat+0x1de4/0x2cb0 [ 644.925152][T14291] ? __pfx_path_openat+0x10/0x10 [ 644.925169][T14291] ? __lock_acquire+0xb8a/0x1c90 [ 644.925190][T14291] do_filp_open+0x20b/0x470 [ 644.925206][T14291] ? __pfx_do_filp_open+0x10/0x10 [ 644.925236][T14291] ? alloc_fd+0x471/0x7d0 [ 644.925256][T14291] do_sys_openat2+0x11b/0x1d0 [ 644.925276][T14291] ? __pfx_do_sys_openat2+0x10/0x10 [ 644.925304][T14291] __x64_sys_openat+0x174/0x210 [ 644.925324][T14291] ? __pfx___x64_sys_openat+0x10/0x10 [ 644.925353][T14291] do_syscall_64+0xcd/0xfa0 [ 644.925371][T14291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.925386][T14291] RIP: 0033:0x7f13c4d8efc9 [ 644.925399][T14291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.925414][T14291] RSP: 002b:00007f13c5b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 644.925429][T14291] RAX: ffffffffffffffda RBX: 00007f13c4fe5fa0 RCX: 00007f13c4d8efc9 [ 644.925440][T14291] RDX: 0000000000020342 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 644.925450][T14291] RBP: 00007f13c4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.925459][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.925468][T14291] R13: 00007f13c4fe6038 R14: 00007f13c4fe5fa0 R15: 00007ffc1d90b008 [ 644.925489][T14291] [ 645.669529][T14302] net_ratelimit: 8 callbacks suppressed [ 645.669552][T14302] openvswitch: netlink: nsh attr 36 is out of range max 3 [ 646.328453][ T5838] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 646.451795][T14317] FAULT_INJECTION: forcing a failure. [ 646.451795][T14317] name failslab, interval 1, probability 0, space 0, times 0 [ 646.541042][T14317] CPU: 1 UID: 0 PID: 14317 Comm: syz.1.1947 Tainted: G U syzkaller #0 PREEMPT(full) [ 646.541084][T14317] Tainted: [U]=USER [ 646.541093][T14317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 646.541108][T14317] Call Trace: [ 646.541117][T14317] [ 646.541128][T14317] dump_stack_lvl+0x16c/0x1f0 [ 646.541159][T14317] should_fail_ex+0x512/0x640 [ 646.541195][T14317] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 646.541222][T14317] ? __pfx_stats_fop_open+0x10/0x10 [ 646.541252][T14317] should_failslab+0xc2/0x120 [ 646.541282][T14317] kmem_cache_alloc_noprof+0x75/0x6e0 [ 646.541307][T14317] ? seq_open+0x55/0x170 [ 646.541341][T14317] ? __pfx_stats_fop_open+0x10/0x10 [ 646.541364][T14317] ? seq_open+0x55/0x170 [ 646.541384][T14317] seq_open+0x55/0x170 [ 646.541412][T14317] __seq_open_private+0x3e/0xd0 [ 646.541445][T14317] sc_common_open+0x6b/0x200 [ 646.541476][T14317] full_proxy_open_regular+0x1b9/0x360 [ 646.541511][T14317] do_dentry_open+0x982/0x1530 [ 646.541539][T14317] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 646.541580][T14317] vfs_open+0x82/0x3f0 [ 646.541678][T14317] path_openat+0x1de4/0x2cb0 [ 646.541718][T14317] ? __pfx_path_openat+0x10/0x10 [ 646.541747][T14317] ? __lock_acquire+0xb8a/0x1c90 [ 646.541785][T14317] do_filp_open+0x20b/0x470 [ 646.541814][T14317] ? __pfx_do_filp_open+0x10/0x10 [ 646.541866][T14317] ? alloc_fd+0x471/0x7d0 [ 646.541902][T14317] do_sys_openat2+0x11b/0x1d0 [ 646.541936][T14317] ? __pfx_do_sys_openat2+0x10/0x10 [ 646.541986][T14317] __x64_sys_openat+0x174/0x210 [ 646.542022][T14317] ? __pfx___x64_sys_openat+0x10/0x10 [ 646.542073][T14317] do_syscall_64+0xcd/0xfa0 [ 646.542104][T14317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.542130][T14317] RIP: 0033:0x7f13c4d8efc9 [ 646.542153][T14317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.542179][T14317] RSP: 002b:00007f13c2ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.542205][T14317] RAX: ffffffffffffffda RBX: 00007f13c4fe6090 RCX: 00007f13c4d8efc9 [ 646.542224][T14317] RDX: 0000000000004000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 646.542242][T14317] RBP: 00007f13c4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 646.542259][T14317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.542275][T14317] R13: 00007f13c4fe6128 R14: 00007f13c4fe6090 R15: 00007ffc1d90b008 [ 646.542312][T14317] [ 647.344151][T14338] FAULT_INJECTION: forcing a failure. [ 647.344151][T14338] name failslab, interval 1, probability 0, space 0, times 0 [ 647.417129][T14338] CPU: 1 UID: 0 PID: 14338 Comm: syz.1.1953 Tainted: G U syzkaller #0 PREEMPT(full) [ 647.417168][T14338] Tainted: [U]=USER [ 647.417176][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.417191][T14338] Call Trace: [ 647.417199][T14338] [ 647.417208][T14338] dump_stack_lvl+0x16c/0x1f0 [ 647.417239][T14338] should_fail_ex+0x512/0x640 [ 647.417271][T14338] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 647.417300][T14338] should_failslab+0xc2/0x120 [ 647.417331][T14338] kmem_cache_alloc_noprof+0x75/0x6e0 [ 647.417354][T14338] ? taskstats_exit+0x654/0xbe0 [ 647.417382][T14338] ? taskstats_exit+0x654/0xbe0 [ 647.417402][T14338] ? acct_update_integrals+0x2ce/0x4a0 [ 647.417423][T14338] taskstats_exit+0x654/0xbe0 [ 647.417448][T14338] ? __pfx_taskstats_exit+0x10/0x10 [ 647.417487][T14338] ? exit_signals+0x38e/0xb40 [ 647.417517][T14338] do_exit+0x5dc/0x2bf0 [ 647.417563][T14338] ? __pfx_do_exit+0x10/0x10 [ 647.417594][T14338] ? do_raw_spin_lock+0x12c/0x2b0 [ 647.417628][T14338] ? find_held_lock+0x2b/0x80 [ 647.417659][T14338] do_group_exit+0xd3/0x2a0 [ 647.417691][T14338] get_signal+0x2671/0x26d0 [ 647.417730][T14338] ? __pfx_get_signal+0x10/0x10 [ 647.417757][T14338] ? do_futex+0x122/0x350 [ 647.417788][T14338] ? __pfx_do_futex+0x10/0x10 [ 647.417823][T14338] arch_do_signal_or_restart+0x8f/0x790 [ 647.417855][T14338] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 647.417896][T14338] ? ksys_mmap_pgoff+0x85/0x5c0 [ 647.417924][T14338] ? xfd_validate_state+0x61/0x180 [ 647.417965][T14338] exit_to_user_mode_loop+0x85/0x130 [ 647.418000][T14338] do_syscall_64+0x426/0xfa0 [ 647.418029][T14338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.418052][T14338] RIP: 0033:0x7f13c4d8efc9 [ 647.418073][T14338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.418096][T14338] RSP: 002b:00007f13c5b5b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 647.418119][T14338] RAX: fffffffffffffe00 RBX: 00007f13c4fe5fa8 RCX: 00007f13c4d8efc9 [ 647.418134][T14338] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f13c4fe5fa8 [ 647.418149][T14338] RBP: 00007f13c4fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 647.418163][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.418178][T14338] R13: 00007f13c4fe6038 R14: 00007ffc1d90af20 R15: 00007ffc1d90b008 [ 647.418213][T14338] [ 647.959570][T14349] FAULT_INJECTION: forcing a failure. [ 647.959570][T14349] name failslab, interval 1, probability 0, space 0, times 0 [ 647.995811][T14349] CPU: 1 UID: 0 PID: 14349 Comm: syz.1.1954 Tainted: G U syzkaller #0 PREEMPT(full) [ 647.995851][T14349] Tainted: [U]=USER [ 647.995859][T14349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.995873][T14349] Call Trace: [ 647.995882][T14349] [ 647.995893][T14349] dump_stack_lvl+0x16c/0x1f0 [ 647.995925][T14349] should_fail_ex+0x512/0x640 [ 647.995959][T14349] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 647.995988][T14349] should_failslab+0xc2/0x120 [ 647.996019][T14349] kmem_cache_alloc_noprof+0x75/0x6e0 [ 647.996044][T14349] ? __kernfs_new_node+0xd2/0x8e0 [ 647.996080][T14349] ? __kernfs_new_node+0xd2/0x8e0 [ 647.996109][T14349] __kernfs_new_node+0xd2/0x8e0 [ 647.996144][T14349] ? __pfx___kernfs_new_node+0x10/0x10 [ 647.996183][T14349] ? find_held_lock+0x2b/0x80 [ 647.996209][T14349] ? kernfs_root+0xee/0x2a0 [ 647.996245][T14349] kernfs_new_node+0x13c/0x1e0 [ 647.996285][T14349] __kernfs_create_file+0x53/0x350 [ 647.996315][T14349] sysfs_add_file_mode_ns+0x207/0x3c0 [ 647.996349][T14349] internal_create_group+0x578/0xf30 [ 647.996389][T14349] ? __pfx_internal_create_group+0x10/0x10 [ 647.996431][T14349] sysfs_slab_add+0x1a9/0x1f0 [ 647.996459][T14349] do_kmem_cache_create+0x5bb/0x740 [ 647.996495][T14349] __kmem_cache_create_args+0x202/0x3c0 [ 647.996535][T14349] mon_text_open+0x333/0x510 [ 647.996565][T14349] ? __pfx_mon_text_open+0x10/0x10 [ 647.996593][T14349] ? __pfx_mon_text_ctor+0x10/0x10 [ 647.996622][T14349] ? __pfx_apparmor_file_open+0x10/0x10 [ 647.996654][T14349] ? lockdown_is_locked_down+0x3f/0x130 [ 647.996684][T14349] ? bpf_lsm_locked_down+0x9/0x10 [ 647.996724][T14349] ? __pfx_mon_text_open+0x10/0x10 [ 647.996747][T14349] full_proxy_open_regular+0x1b9/0x360 [ 647.996785][T14349] do_dentry_open+0x982/0x1530 [ 647.996814][T14349] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 647.996854][T14349] vfs_open+0x82/0x3f0 [ 647.996891][T14349] path_openat+0x1de4/0x2cb0 [ 647.996931][T14349] ? __pfx_path_openat+0x10/0x10 [ 647.996960][T14349] ? __lock_acquire+0xb8a/0x1c90 [ 647.996997][T14349] do_filp_open+0x20b/0x470 [ 647.997026][T14349] ? __pfx_do_filp_open+0x10/0x10 [ 647.997081][T14349] ? alloc_fd+0x471/0x7d0 [ 647.997116][T14349] do_sys_openat2+0x11b/0x1d0 [ 647.997150][T14349] ? __pfx_do_sys_openat2+0x10/0x10 [ 647.997188][T14349] ? __fget_files+0x20e/0x3c0 [ 647.997220][T14349] __x64_sys_openat+0x174/0x210 [ 647.997253][T14349] ? __pfx___x64_sys_openat+0x10/0x10 [ 647.997285][T14349] ? ksys_write+0x1ac/0x250 [ 647.997326][T14349] do_syscall_64+0xcd/0xfa0 [ 647.997357][T14349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.997382][T14349] RIP: 0033:0x7f13c4d8efc9 [ 647.997403][T14349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.997425][T14349] RSP: 002b:00007f13c5b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 647.997450][T14349] RAX: ffffffffffffffda RBX: 00007f13c4fe5fa0 RCX: 00007f13c4d8efc9 [ 647.997466][T14349] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 647.997482][T14349] RBP: 00007f13c5b5b090 R08: 0000000000000000 R09: 0000000000000000 [ 647.997498][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 647.997513][T14349] R13: 00007f13c4fe6038 R14: 00007f13c4fe5fa0 R15: 00007ffc1d90b008 [ 647.997549][T14349] [ 648.419792][T14349] SLUB: Unable to add cache mon_text_ffff88805ae91400 to sysfs [ 648.529418][T14360] zero sized request [ 648.557038][T14360] FAULT_INJECTION: forcing a failure. [ 648.557038][T14360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 648.651613][T14360] CPU: 1 UID: 0 PID: 14360 Comm: syz.0.1955 Tainted: G U syzkaller #0 PREEMPT(full) [ 648.651657][T14360] Tainted: [U]=USER [ 648.651666][T14360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.651682][T14360] Call Trace: [ 648.651691][T14360] [ 648.651702][T14360] dump_stack_lvl+0x16c/0x1f0 [ 648.651738][T14360] should_fail_ex+0x512/0x640 [ 648.651781][T14360] should_fail_alloc_page+0xe7/0x130 [ 648.651816][T14360] prepare_alloc_pages+0x3c2/0x610 [ 648.651852][T14360] ? rcu_is_watching+0x12/0xc0 [ 648.651883][T14360] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 648.651919][T14360] ? stack_trace_save+0x8e/0xc0 [ 648.651947][T14360] ? __pfx_stack_trace_save+0x10/0x10 [ 648.651976][T14360] ? stack_depot_save_flags+0x29/0x9c0 [ 648.652019][T14360] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 648.652048][T14360] ? __lock_acquire+0x622/0x1c90 [ 648.652089][T14360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.652125][T14360] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 648.652167][T14360] ? policy_nodemask+0xea/0x4e0 [ 648.652200][T14360] alloc_pages_mpol+0x1fb/0x550 [ 648.652234][T14360] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 648.652277][T14360] alloc_pages_noprof+0x131/0x390 [ 648.652308][T14360] alloc_pages_exact_noprof+0x37/0xe0 [ 648.652339][T14360] ? __asan_memset+0x23/0x50 [ 648.652364][T14360] snd_pcm_attach_substream+0x4bb/0xd60 [ 648.652409][T14360] snd_pcm_open_substream+0x8d/0x17f0 [ 648.652450][T14360] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 648.652508][T14360] snd_pcm_oss_open+0x735/0x1400 [ 648.652556][T14360] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 648.652591][T14360] ? __lock_acquire+0xb8a/0x1c90 [ 648.652623][T14360] ? __pfx_default_wake_function+0x10/0x10 [ 648.652651][T14360] ? __lock_acquire+0xb8a/0x1c90 [ 648.652688][T14360] ? do_raw_spin_lock+0x12c/0x2b0 [ 648.652727][T14360] ? soundcore_open+0x35a/0x580 [ 648.652758][T14360] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 648.652790][T14360] soundcore_open+0x40c/0x580 [ 648.652821][T14360] ? __pfx_soundcore_open+0x10/0x10 [ 648.652849][T14360] chrdev_open+0x234/0x6a0 [ 648.652878][T14360] ? __pfx_apparmor_file_open+0x10/0x10 [ 648.652913][T14360] ? __pfx_chrdev_open+0x10/0x10 [ 648.652944][T14360] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 648.652982][T14360] do_dentry_open+0x982/0x1530 [ 648.653011][T14360] ? __pfx_chrdev_open+0x10/0x10 [ 648.653048][T14360] vfs_open+0x82/0x3f0 [ 648.653087][T14360] path_openat+0x1de4/0x2cb0 [ 648.653128][T14360] ? __pfx_path_openat+0x10/0x10 [ 648.653157][T14360] ? __lock_acquire+0xb8a/0x1c90 [ 648.653195][T14360] do_filp_open+0x20b/0x470 [ 648.653223][T14360] ? __pfx_do_filp_open+0x10/0x10 [ 648.653277][T14360] ? alloc_fd+0x471/0x7d0 [ 648.653314][T14360] do_sys_openat2+0x11b/0x1d0 [ 648.653349][T14360] ? __pfx_do_sys_openat2+0x10/0x10 [ 648.653398][T14360] __x64_sys_openat+0x174/0x210 [ 648.653435][T14360] ? __pfx___x64_sys_openat+0x10/0x10 [ 648.653485][T14360] do_syscall_64+0xcd/0xfa0 [ 648.653525][T14360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.653553][T14360] RIP: 0033:0x7fbd04b8efc9 [ 648.653575][T14360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.653600][T14360] RSP: 002b:00007fbd059e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 648.653625][T14360] RAX: ffffffffffffffda RBX: 00007fbd04de5fa0 RCX: 00007fbd04b8efc9 [ 648.653644][T14360] RDX: 0000000000020342 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 648.653662][T14360] RBP: 00007fbd04c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.653678][T14360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.653694][T14360] R13: 00007fbd04de6038 R14: 00007fbd04de5fa0 R15: 00007fffe5c1f6e8 [ 648.653730][T14360] [ 649.122866][T14370] FAULT_INJECTION: forcing a failure. [ 649.122866][T14370] name failslab, interval 1, probability 0, space 0, times 0 [ 649.137348][T14370] CPU: 1 UID: 0 PID: 14370 Comm: syz.1.1960 Tainted: G U syzkaller #0 PREEMPT(full) [ 649.137394][T14370] Tainted: [U]=USER [ 649.137405][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 649.137422][T14370] Call Trace: [ 649.137432][T14370] [ 649.137453][T14370] dump_stack_lvl+0x16c/0x1f0 [ 649.137490][T14370] should_fail_ex+0x512/0x640 [ 649.137528][T14370] ? __kmalloc_noprof+0xca/0x880 [ 649.137570][T14370] should_failslab+0xc2/0x120 [ 649.137602][T14370] __kmalloc_noprof+0xdd/0x880 [ 649.137637][T14370] ? lockdep_init_map_type+0x5c/0x280 [ 649.137672][T14370] ? xfrm_hash_alloc+0xd1/0x100 [ 649.137711][T14370] ? xfrm_hash_alloc+0xd1/0x100 [ 649.137744][T14370] xfrm_hash_alloc+0xd1/0x100 [ 649.137778][T14370] xfrm_net_init+0x35f/0xcc0 [ 649.137818][T14370] ? __pfx_xfrm_net_init+0x10/0x10 [ 649.137850][T14370] ops_init+0x1e2/0x5f0 [ 649.137879][T14370] setup_net+0x100/0x390 [ 649.137904][T14370] ? __pfx_setup_net+0x10/0x10 [ 649.137933][T14370] ? debug_mutex_init+0x37/0x70 [ 649.137963][T14370] copy_net_ns+0x2f8/0x690 [ 649.137995][T14370] create_new_namespaces+0x3ea/0xa90 [ 649.138030][T14370] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 649.138062][T14370] ksys_unshare+0x45b/0xa40 [ 649.138093][T14370] ? __pfx_ksys_unshare+0x10/0x10 [ 649.138125][T14370] ? xfd_validate_state+0x61/0x180 [ 649.138166][T14370] __x64_sys_unshare+0x31/0x40 [ 649.138198][T14370] do_syscall_64+0xcd/0xfa0 [ 649.138229][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.138256][T14370] RIP: 0033:0x7f13c4d8efc9 [ 649.138278][T14370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.138304][T14370] RSP: 002b:00007f13c5b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 649.138330][T14370] RAX: ffffffffffffffda RBX: 00007f13c4fe5fa0 RCX: 00007f13c4d8efc9 [ 649.138348][T14370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 649.138364][T14370] RBP: 00007f13c4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 649.138381][T14370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.138398][T14370] R13: 00007f13c4fe6038 R14: 00007f13c4fe5fa0 R15: 00007ffc1d90b008 [ 649.138438][T14370] [ 649.522545][T14376] program syz.2.1962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 650.152027][T14388] FAULT_INJECTION: forcing a failure. [ 650.152027][T14388] name failslab, interval 1, probability 0, space 0, times 0 [ 650.205998][T14388] CPU: 0 UID: 0 PID: 14388 Comm: syz.1.1964 Tainted: G U syzkaller #0 PREEMPT(full) [ 650.206037][T14388] Tainted: [U]=USER [ 650.206045][T14388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 650.206059][T14388] Call Trace: [ 650.206068][T14388] [ 650.206079][T14388] dump_stack_lvl+0x16c/0x1f0 [ 650.206109][T14388] should_fail_ex+0x512/0x640 [ 650.206148][T14388] should_failslab+0xc2/0x120 [ 650.206179][T14388] kmem_cache_alloc_noprof+0x75/0x6e0 [ 650.206204][T14388] ? dst_alloc+0x99/0x1a0 [ 650.206242][T14388] ? dst_alloc+0x99/0x1a0 [ 650.206271][T14388] dst_alloc+0x99/0x1a0 [ 650.206315][T14388] rt_dst_alloc+0x35/0x3a0 [ 650.206344][T14388] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 650.206389][T14388] ip_route_output_key_hash+0x10f/0x2b0 [ 650.206422][T14388] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 650.206454][T14388] ? release_sock+0x21/0x220 [ 650.206485][T14388] ? find_held_lock+0x2b/0x80 [ 650.206514][T14388] ip_route_output_flow+0x27/0x150 [ 650.206549][T14388] raw_sendmsg+0xd5b/0x38b0 [ 650.206594][T14388] ? __pfx_raw_sendmsg+0x10/0x10 [ 650.206625][T14388] ? __lock_acquire+0x622/0x1c90 [ 650.206664][T14388] ? __lock_acquire+0x622/0x1c90 [ 650.206739][T14388] ? __pfx_raw_sendmsg+0x10/0x10 [ 650.206773][T14388] inet_sendmsg+0x11c/0x140 [ 650.206807][T14388] ____sys_sendmsg+0x973/0xc70 [ 650.206836][T14388] ? copy_msghdr_from_user+0x10a/0x160 [ 650.206860][T14388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.206893][T14388] ? kfree+0x252/0x6d0 [ 650.206911][T14388] ? __pfx__kstrtoull+0x10/0x10 [ 650.206947][T14388] ___sys_sendmsg+0x134/0x1d0 [ 650.206972][T14388] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.207029][T14388] ? __pfx___might_resched+0x10/0x10 [ 650.207063][T14388] __sys_sendmmsg+0x200/0x420 [ 650.207091][T14388] ? __pfx___sys_sendmmsg+0x10/0x10 [ 650.207127][T14388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 650.207170][T14388] ? fput+0x9b/0xd0 [ 650.207201][T14388] ? ksys_write+0x1ac/0x250 [ 650.207226][T14388] ? __pfx_ksys_write+0x10/0x10 [ 650.207258][T14388] __x64_sys_sendmmsg+0x9c/0x100 [ 650.207281][T14388] ? lockdep_hardirqs_on+0x7c/0x110 [ 650.207313][T14388] do_syscall_64+0xcd/0xfa0 [ 650.207342][T14388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.207367][T14388] RIP: 0033:0x7f13c4d8efc9 [ 650.207387][T14388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.207411][T14388] RSP: 002b:00007f13c2fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 650.207434][T14388] RAX: ffffffffffffffda RBX: 00007f13c4fe6180 RCX: 00007f13c4d8efc9 [ 650.207451][T14388] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 650.207466][T14388] RBP: 00007f13c2fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 650.207482][T14388] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.207497][T14388] R13: 00007f13c4fe6218 R14: 00007f13c4fe6180 R15: 00007ffc1d90b008 [ 650.207533][T14388] [ 650.393180][T14388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1964'. [ 652.094192][T14414] zero sized request [ 652.109670][T14414] FAULT_INJECTION: forcing a failure. [ 652.109670][T14414] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 652.123253][T14414] CPU: 0 UID: 0 PID: 14414 Comm: syz.1.1969 Tainted: G U syzkaller #0 PREEMPT(full) [ 652.123296][T14414] Tainted: [U]=USER [ 652.123305][T14414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 652.123319][T14414] Call Trace: [ 652.123329][T14414] [ 652.123339][T14414] dump_stack_lvl+0x16c/0x1f0 [ 652.123381][T14414] should_fail_ex+0x512/0x640 [ 652.123424][T14414] should_fail_alloc_page+0xe7/0x130 [ 652.123460][T14414] prepare_alloc_pages+0x3c2/0x610 [ 652.123493][T14414] ? rcu_is_watching+0x12/0xc0 [ 652.123521][T14414] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 652.123553][T14414] ? stack_trace_save+0x8e/0xc0 [ 652.123580][T14414] ? __pfx_stack_trace_save+0x10/0x10 [ 652.123605][T14414] ? is_bpf_text_address+0x94/0x1a0 [ 652.123639][T14414] ? stack_depot_save_flags+0x29/0x9c0 [ 652.123675][T14414] ? __kernel_text_address+0xd/0x40 [ 652.123706][T14414] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 652.123735][T14414] ? __lock_acquire+0x622/0x1c90 [ 652.123774][T14414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.123811][T14414] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 652.123854][T14414] ? policy_nodemask+0xea/0x4e0 [ 652.123889][T14414] alloc_pages_mpol+0x1fb/0x550 [ 652.123923][T14414] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 652.123965][T14414] alloc_pages_noprof+0x131/0x390 [ 652.123998][T14414] alloc_pages_exact_noprof+0x37/0xe0 [ 652.124031][T14414] ? __asan_memset+0x23/0x50 [ 652.124056][T14414] snd_pcm_attach_substream+0x4bb/0xd60 [ 652.124112][T14414] snd_pcm_open_substream+0x8d/0x17f0 [ 652.124155][T14414] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 652.124206][T14414] snd_pcm_oss_open+0x735/0x1400 [ 652.124252][T14414] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 652.124285][T14414] ? __lock_acquire+0xb8a/0x1c90 [ 652.124317][T14414] ? __pfx_default_wake_function+0x10/0x10 [ 652.124346][T14414] ? __lock_acquire+0xb8a/0x1c90 [ 652.124391][T14414] ? do_raw_spin_lock+0x12c/0x2b0 [ 652.124430][T14414] ? soundcore_open+0x35a/0x580 [ 652.124462][T14414] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 652.124496][T14414] soundcore_open+0x40c/0x580 [ 652.124529][T14414] ? __pfx_soundcore_open+0x10/0x10 [ 652.124557][T14414] chrdev_open+0x234/0x6a0 [ 652.124586][T14414] ? __pfx_apparmor_file_open+0x10/0x10 [ 652.124620][T14414] ? __pfx_chrdev_open+0x10/0x10 [ 652.124652][T14414] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 652.124686][T14414] do_dentry_open+0x982/0x1530 [ 652.124715][T14414] ? __pfx_chrdev_open+0x10/0x10 [ 652.124751][T14414] vfs_open+0x82/0x3f0 [ 652.124790][T14414] path_openat+0x1de4/0x2cb0 [ 652.124830][T14414] ? __pfx_path_openat+0x10/0x10 [ 652.124860][T14414] ? __lock_acquire+0xb8a/0x1c90 [ 652.124897][T14414] do_filp_open+0x20b/0x470 [ 652.124925][T14414] ? __pfx_do_filp_open+0x10/0x10 [ 652.124979][T14414] ? alloc_fd+0x471/0x7d0 [ 652.125015][T14414] do_sys_openat2+0x11b/0x1d0 [ 652.125049][T14414] ? __pfx_do_sys_openat2+0x10/0x10 [ 652.125098][T14414] __x64_sys_openat+0x174/0x210 [ 652.125133][T14414] ? __pfx___x64_sys_openat+0x10/0x10 [ 652.125183][T14414] do_syscall_64+0xcd/0xfa0 [ 652.125215][T14414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.125242][T14414] RIP: 0033:0x7f13c4d8efc9 [ 652.125264][T14414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.125290][T14414] RSP: 002b:00007f13c5b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 652.125315][T14414] RAX: ffffffffffffffda RBX: 00007f13c4fe5fa0 RCX: 00007f13c4d8efc9 [ 652.125332][T14414] RDX: 0000000000020342 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 652.125349][T14414] RBP: 00007f13c4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 652.125364][T14414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.125387][T14414] R13: 00007f13c4fe6038 R14: 00007f13c4fe5fa0 R15: 00007ffc1d90b008 [ 652.125426][T14414] [ 654.754629][T14439] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 654.993294][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 656.078867][T14454] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 656.206208][T14451] zswap: compressor not available [ 657.058156][ T5838] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 657.122465][T14467] zswap: compressor not available [ 657.295823][T14497] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1988'. [ 657.305025][T14497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 657.379909][T14497] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1988'. [ 657.440799][T14497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 658.396850][T14506] ================================================================== [ 658.396869][T14506] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 658.396910][T14506] Write of size 8 at addr ffffc900039594e0 by task syz.3.1990/14506 [ 658.396935][T14506] [ 658.396952][T14506] CPU: 1 UID: 0 PID: 14506 Comm: syz.3.1990 Tainted: G U syzkaller #0 PREEMPT(full) [ 658.396991][T14506] Tainted: [U]=USER [ 658.397000][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 658.397017][T14506] Call Trace: [ 658.397027][T14506] [ 658.397038][T14506] dump_stack_lvl+0x116/0x1f0 [ 658.397068][T14506] print_report+0xcd/0x630 [ 658.397102][T14506] ? __virt_addr_valid+0x81/0x610 [ 658.397138][T14506] ? sys_imageblit+0x1a6f/0x1e60 [ 658.397166][T14506] kasan_report+0xe0/0x110 [ 658.397199][T14506] ? sys_imageblit+0x1a6f/0x1e60 [ 658.397231][T14506] sys_imageblit+0x1a6f/0x1e60 [ 658.397265][T14506] ? __pfx_sys_imageblit+0x10/0x10 [ 658.397294][T14506] ? __pfx__prb_read_valid+0x10/0x10 [ 658.397330][T14506] ? find_held_lock+0x2b/0x80 [ 658.397357][T14506] ? up+0xcb/0x140 [ 658.397386][T14506] ? do_raw_spin_unlock+0x172/0x230 [ 658.397427][T14506] ? prb_read_valid+0x78/0xa0 [ 658.397463][T14506] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 658.397494][T14506] soft_cursor+0x524/0xa10 [ 658.397533][T14506] ? fb_get_color_depth+0x120/0x250 [ 658.397570][T14506] bit_cursor+0xe8c/0x17e0 [ 658.397609][T14506] ? __pfx_bit_cursor+0x10/0x10 [ 658.397650][T14506] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 658.397692][T14506] ? get_color+0x1da/0x450 [ 658.397723][T14506] ? __pfx_bit_cursor+0x10/0x10 [ 658.397758][T14506] fbcon_cursor+0x40c/0x5a0 [ 658.397797][T14506] ? add_softcursor+0x1/0x290 [ 658.397838][T14506] set_cursor+0x1db/0x250 [ 658.397878][T14506] con_write+0x89/0xb0 [ 658.397906][T14506] n_tty_write+0x41e/0x11e0 [ 658.397947][T14506] ? __pfx_n_tty_write+0x10/0x10 [ 658.397979][T14506] ? trace_kmalloc+0x2b/0xd0 [ 658.398010][T14506] ? __pfx_woken_wake_function+0x10/0x10 [ 658.398050][T14506] ? kfree+0x252/0x6d0 [ 658.398073][T14506] ? __pfx_n_tty_write+0x10/0x10 [ 658.398106][T14506] file_tty_write.constprop.0+0x503/0x9b0 [ 658.398140][T14506] redirected_tty_write+0xd4/0x150 [ 658.398170][T14506] vfs_write+0x7d3/0x11d0 [ 658.398198][T14506] ? __pfx_redirected_tty_write+0x10/0x10 [ 658.398228][T14506] ? __pfx_vfs_write+0x10/0x10 [ 658.398254][T14506] ? find_held_lock+0x2b/0x80 [ 658.398291][T14506] ksys_write+0x12a/0x250 [ 658.398318][T14506] ? __pfx_ksys_write+0x10/0x10 [ 658.398351][T14506] do_syscall_64+0xcd/0xfa0 [ 658.398380][T14506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.398407][T14506] RIP: 0033:0x7fc2cc18efc9 [ 658.398429][T14506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.398456][T14506] RSP: 002b:00007fc2cd0d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 658.398482][T14506] RAX: ffffffffffffffda RBX: 00007fc2cc3e6090 RCX: 00007fc2cc18efc9 [ 658.398502][T14506] RDX: 0000000000000bdc RSI: 0000200000000840 RDI: 0000000000000007 [ 658.398520][T14506] RBP: 00007fc2cc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.398537][T14506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.398554][T14506] R13: 00007fc2cc3e6128 R14: 00007fc2cc3e6090 R15: 00007ffcc37b1d68 [ 658.398582][T14506] [ 658.398592][T14506] [ 658.398600][T14506] The buggy address belongs to a vmalloc virtual mapping [ 658.398620][T14506] Memory state around the buggy address: [ 658.398642][T14506] ffffc90003959380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 658.398662][T14506] ffffc90003959400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 658.398682][T14506] >ffffc90003959480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 658.398697][T14506] ^ [ 658.398712][T14506] ffffc90003959500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 658.398731][T14506] ffffc90003959580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 658.398747][T14506] ================================================================== [ 658.398762][T14506] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 658.398782][T14506] CPU: 1 UID: 0 PID: 14506 Comm: syz.3.1990 Tainted: G U syzkaller #0 PREEMPT(full) [ 658.398827][T14506] Tainted: [U]=USER [ 658.398837][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 658.398853][T14506] Call Trace: [ 658.398862][T14506] [ 658.398874][T14506] dump_stack_lvl+0x3d/0x1f0 [ 658.398902][T14506] vpanic+0x640/0x6f0 [ 658.398940][T14506] panic+0xca/0xd0 [ 658.398973][T14506] ? __pfx_panic+0x10/0x10 [ 658.399014][T14506] check_panic_on_warn+0xab/0xb0 [ 658.399051][T14506] end_report+0x107/0x170 [ 658.399083][T14506] kasan_report+0xee/0x110 [ 658.399116][T14506] ? sys_imageblit+0x1a6f/0x1e60 [ 658.399149][T14506] sys_imageblit+0x1a6f/0x1e60 [ 658.399182][T14506] ? __pfx_sys_imageblit+0x10/0x10 [ 658.399212][T14506] ? __pfx__prb_read_valid+0x10/0x10 [ 658.399247][T14506] ? find_held_lock+0x2b/0x80 [ 658.399273][T14506] ? up+0xcb/0x140 [ 658.399302][T14506] ? do_raw_spin_unlock+0x172/0x230 [ 658.399344][T14506] ? prb_read_valid+0x78/0xa0 [ 658.399381][T14506] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 658.399411][T14506] soft_cursor+0x524/0xa10 [ 658.399452][T14506] ? fb_get_color_depth+0x120/0x250 [ 658.399490][T14506] bit_cursor+0xe8c/0x17e0 [ 658.399531][T14506] ? __pfx_bit_cursor+0x10/0x10 [ 658.399574][T14506] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 658.399615][T14506] ? get_color+0x1da/0x450 [ 658.399648][T14506] ? __pfx_bit_cursor+0x10/0x10 [ 658.399684][T14506] fbcon_cursor+0x40c/0x5a0 [ 658.399717][T14506] ? add_softcursor+0x1/0x290 [ 658.399756][T14506] set_cursor+0x1db/0x250 [ 658.399799][T14506] con_write+0x89/0xb0 [ 658.399827][T14506] n_tty_write+0x41e/0x11e0 [ 658.399869][T14506] ? __pfx_n_tty_write+0x10/0x10 [ 658.399903][T14506] ? trace_kmalloc+0x2b/0xd0 [ 658.399935][T14506] ? __pfx_woken_wake_function+0x10/0x10 [ 658.399975][T14506] ? kfree+0x252/0x6d0 [ 658.399999][T14506] ? __pfx_n_tty_write+0x10/0x10 [ 658.400033][T14506] file_tty_write.constprop.0+0x503/0x9b0 [ 658.400067][T14506] redirected_tty_write+0xd4/0x150 [ 658.400096][T14506] vfs_write+0x7d3/0x11d0 [ 658.400124][T14506] ? __pfx_redirected_tty_write+0x10/0x10 [ 658.400155][T14506] ? __pfx_vfs_write+0x10/0x10 [ 658.400181][T14506] ? find_held_lock+0x2b/0x80 [ 658.400218][T14506] ksys_write+0x12a/0x250 [ 658.400245][T14506] ? __pfx_ksys_write+0x10/0x10 [ 658.400278][T14506] do_syscall_64+0xcd/0xfa0 [ 658.400308][T14506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.400335][T14506] RIP: 0033:0x7fc2cc18efc9 [ 658.400355][T14506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.400380][T14506] RSP: 002b:00007fc2cd0d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 658.400406][T14506] RAX: ffffffffffffffda RBX: 00007fc2cc3e6090 RCX: 00007fc2cc18efc9 [ 658.400425][T14506] RDX: 0000000000000bdc RSI: 0000200000000840 RDI: 0000000000000007 [ 658.400443][T14506] RBP: 00007fc2cc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.400461][T14506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.400482][T14506] R13: 00007fc2cc3e6128 R14: 00007fc2cc3e6090 R15: 00007ffcc37b1d68 [ 658.400530][T14506] [ 658.400806][T14506] Kernel Offset: disabled