last executing test programs: 5m30.064450258s ago: executing program 1 (id=991): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000800), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'ipvlan1\x00'}) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_EEPROM_PAGE={0x5}, @ETHTOOL_A_MODULE_EEPROM_LENGTH={0x8, 0x3, 0x9}, @ETHTOOL_A_MODULE_EEPROM_OFFSET={0x8, 0x2, 0x4}, @ETHTOOL_A_MODULE_EEPROM_I2C_ADDRESS={0x5, 0x6, 0x6}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) pwrite64$auto(r1, 0x0, 0x8, 0x400000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 5m28.418429188s ago: executing program 1 (id=999): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/modules\x00', 0x88880, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) socket(0x10, 0x2, 0x4) 5m25.338947319s ago: executing program 1 (id=1019): r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_conn\x00', 0x62240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)=""/7, 0x7) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_IMDELTIMER(r0, 0x80044941, 0x0) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000000)="41a01a3a1b3a80ada9917abde8538919ca952a3a221c47806572c6be036ba070da5d11406271e2e1caaca43be101152129b8fe81c1e6e804a99fbaeabd38243df64f7a1fb8b0d16d860fbed6560b733e5dccd9e6393e5811dee4a771d24c1bc6010ede0f2a3c161c0dbe2bc3ef14efc0707aaadf3368e739", 0xfffffff8, &(0x7f0000000180)={&(0x7f0000000080)="ad21c732274f944ea3775a7800abb012694bd5c65f778d24fc3ce53f42773b999ab3a6d090d02b844bebc5f85119df15f2dbb237f3e4af20d269ef6a3b9b6e4cecf7e3a4e99c80da9deabc575bd317eb97105a1a07ee84e7237c6502e2b562ffc1a1860fbe3f35b785667fd54bdea4ea23cd01925b3b377006b28a20a82a6201a2bc0711fd961e118ae37b042438b423993cf17eeff7c63bfa1326335e8e29", 0x5}, 0x5, &(0x7f00000001c0)="c70a459e5c127f5cf92a6e6f17bb7d1b10c9249f5895e2095f39c3c71244c50bfa6c12abdeeb512e0d5a87acf5191e6aee3ab0598f48611e9b140f5479130cfb94a80e21f0b9afefcb4a44a04fedeea4deb48b54bf57ef0fbc8fdf974dbc82ed5588a549d1ce8376ad34bba537e8e907ff", 0x0, 0x7ff}, 0x78}, 0xfffffffa, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(r0, &(0x7f0000000440)={{&(0x7f0000000280)="0efcb3efdcf282e7d6fc97b5ed091751a9fddd599a9ba5739dfc07d7a17e6df868a1b6d0689fbf07b74a70fb78d5a99f2fc1aa0130cc8ad90d23cad982ab4af9c58cbf257231b1556fc64cd23ca1a68373e8ac74d7dc73e42f892a46e0681f3a85e87f130573029ba037a94a3de569160e", 0x5, &(0x7f00000003c0)={&(0x7f0000000340)="dc716b1ac7b770d9d47be14c7a019793973c1d90bc16effd82eddfc86bdc64ad3a7f7ef3870d2dfc9735bc0e300aa184a514cc506796", 0x9}, 0xb, &(0x7f0000000400)="79433ea18dbffb92", 0x7, 0x3469}, 0x80}, 0xffff4535, 0x401) mlock$auto(0xfbe8, 0x4) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip_vs_conn\x00', 0x62240, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)=""/7, 0x7) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) (async) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_IMDELTIMER(r0, 0x80044941, 0x0) (async) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) (async) sendmmsg$auto(r0, &(0x7f0000000240)={{&(0x7f0000000000)="41a01a3a1b3a80ada9917abde8538919ca952a3a221c47806572c6be036ba070da5d11406271e2e1caaca43be101152129b8fe81c1e6e804a99fbaeabd38243df64f7a1fb8b0d16d860fbed6560b733e5dccd9e6393e5811dee4a771d24c1bc6010ede0f2a3c161c0dbe2bc3ef14efc0707aaadf3368e739", 0xfffffff8, &(0x7f0000000180)={&(0x7f0000000080)="ad21c732274f944ea3775a7800abb012694bd5c65f778d24fc3ce53f42773b999ab3a6d090d02b844bebc5f85119df15f2dbb237f3e4af20d269ef6a3b9b6e4cecf7e3a4e99c80da9deabc575bd317eb97105a1a07ee84e7237c6502e2b562ffc1a1860fbe3f35b785667fd54bdea4ea23cd01925b3b377006b28a20a82a6201a2bc0711fd961e118ae37b042438b423993cf17eeff7c63bfa1326335e8e29", 0x5}, 0x5, &(0x7f00000001c0)="c70a459e5c127f5cf92a6e6f17bb7d1b10c9249f5895e2095f39c3c71244c50bfa6c12abdeeb512e0d5a87acf5191e6aee3ab0598f48611e9b140f5479130cfb94a80e21f0b9afefcb4a44a04fedeea4deb48b54bf57ef0fbc8fdf974dbc82ed5588a549d1ce8376ad34bba537e8e907ff", 0x0, 0x7ff}, 0x78}, 0xfffffffa, 0x2) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) (async) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) sendmmsg$auto(r0, &(0x7f0000000440)={{&(0x7f0000000280)="0efcb3efdcf282e7d6fc97b5ed091751a9fddd599a9ba5739dfc07d7a17e6df868a1b6d0689fbf07b74a70fb78d5a99f2fc1aa0130cc8ad90d23cad982ab4af9c58cbf257231b1556fc64cd23ca1a68373e8ac74d7dc73e42f892a46e0681f3a85e87f130573029ba037a94a3de569160e", 0x5, &(0x7f00000003c0)={&(0x7f0000000340)="dc716b1ac7b770d9d47be14c7a019793973c1d90bc16effd82eddfc86bdc64ad3a7f7ef3870d2dfc9735bc0e300aa184a514cc506796", 0x9}, 0xb, &(0x7f0000000400)="79433ea18dbffb92", 0x7, 0x3469}, 0x80}, 0xffff4535, 0x401) (async) mlock$auto(0xfbe8, 0x4) (async) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 5m24.458371455s ago: executing program 1 (id=1015): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000000), r0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xfa3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002dbd7000ffdbdf25c967000006000100ff0f00000400060006000100d3050000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x48000) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) msgsnd$auto(0x5, 0x0, 0xff88, 0x1000) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) 5m22.336953818s ago: executing program 1 (id=1023): mmap$auto(0x0, 0x7, 0xdf, 0x1000000eb2, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x4004890) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3d55, 0x0) (async) read$auto(r0, 0x0, 0x7) (async) fcntl$auto(0xffffffffffffffff, 0x400, 0x1) (async, rerun: 64) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 64) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x3) (async) bpf$auto_BPF_OBJ_GET(0x7, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/module/parameters/sig_enforce\x00', 0x2402, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 32) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x40002, 0x0) 5m21.766230411s ago: executing program 1 (id=1024): socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000340)="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") r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8, &(0x7f0000000100)={0x401, 0xfff, 0x3, 0x4, 0x7, 0x801, 0xffffffffffffffff, [0xfffffffb, 0xfffffff4, 0x4a779cc4], {0x9, 0x22, 0x4, 0x95d, 0x5e, 0xff, 0x2, 0x80000001, 0x1}, {0xab1, 0x4d160000, 0x5, 0x8a, 0x8000, 0x10001, 0x7, 0x2, 0x4aab}}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@generic={0x11, "384b1c77893462bf33b6af6e8213"}, 0x4) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x40000001, 0xad, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0), 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0xfdf3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 5m6.148645326s ago: executing program 32 (id=1024): socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000340)="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") r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8, &(0x7f0000000100)={0x401, 0xfff, 0x3, 0x4, 0x7, 0x801, 0xffffffffffffffff, [0xfffffffb, 0xfffffff4, 0x4a779cc4], {0x9, 0x22, 0x4, 0x95d, 0x5e, 0xff, 0x2, 0x80000001, 0x1}, {0xab1, 0x4d160000, 0x5, 0x8a, 0x8000, 0x10001, 0x7, 0x2, 0x4aab}}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) mmap$auto(0x0, 0x1004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@generic={0x11, "384b1c77893462bf33b6af6e8213"}, 0x4) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x40000001, 0xad, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0), 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0xfdf3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 2m25.983415232s ago: executing program 3 (id=1478): timerfd_create$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/devices/system/memory/memory10/removable\x00', 0x8500, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.unix.gid/channel\x00', 0x41c200, 0x0) getdents$auto(r1, &(0x7f0000000040)={0x9, 0xc0, 0x3}, 0x4) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) open(0x0, 0xa240, 0x15e) 2m25.666115958s ago: executing program 3 (id=1480): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4788, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x924c3, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r6, 0x0, 0x10007c) write$auto_proc_mem_operations_base(r5, &(0x7f0000001100)="a7c1f7", 0x3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0xfff, &(0x7f00000000c0)={0x0, 0x1feff}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{0x0, 0x5aa, 0x0, 0x8, 0x0, 0x6, 0x1000}, 0x5}, 0x2, 0xfd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0xfff8, 0x3}, 0xb3, 0x0, 0x0, 0x8) setresuid$auto(0x0, 0x7, 0x0) unshare$auto(0x6) 2m24.439632083s ago: executing program 3 (id=1485): r0 = socket(0x1d, 0x1, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/bus/usb/016/001\x00', 0x1, 0x0) ioctl$auto_USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0x2, 0x7, "81be"}) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) 2m23.827781139s ago: executing program 3 (id=1488): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.4/usb5/product\x00', 0x8000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) (async) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x2, 0x3) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) (async) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) getsockopt$auto(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x2, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getsockopt$auto_SO_LOCK_FILTER(r1, 0x7f, 0x2c, &(0x7f0000000180)='--*-:,\x00', &(0x7f00000001c0)=0x2) (async) r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) read$auto_proc_environ_operations_base(r4, &(0x7f0000002280)=""/169, 0xa9) (async) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) (async) close_range$auto(r3, r1, 0x10) 2m22.355190052s ago: executing program 3 (id=1491): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$auto_TUNGETDEVNETNS(r0, 0x54e3, 0x0) pidfd_send_signal$auto(0xffffffffffffffff, 0xfff, &(0x7f00000000c0)={@siginfo_0_0={0xfffffffa, 0x9, 0x6, @_sigsys={&(0x7f0000000040)="0f211944cbd9991366622d6f39b2a3cb5717773b59c5faaaf36b5273f4a6f391d55674c7a85d9042ed92b7254ade892cc4fde15d8259c4dec86ff2d525d56ca32ca7428f999c3a", 0x4, 0x101}}}, 0x2) mmap$auto(0xfffffffffffffffb, 0x6, 0x0, 0x50, r0, 0xc) getrandom$auto(&(0x7f0000000140)='/dev/net/tun\x00', 0x5ea6, 0x101) r2 = bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000180)=@prog_bind_map={r1, r1, 0xe40}, 0x77e) io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r2, 0x5, &(0x7f0000000240)="9c7593e76acaaadc3a94e952385ddcdad33cfcbb10e1208bbf59cca43acaa9ac796ef6135d7805cc0cc0621abd3711641fb6f2329d2e09fe89b7be8993c1bcf8cb9e309908f8609818a2c50794c3320abb4c03e3ed11e142729c2962f1e1a2fca2bb6ac4688b02e4b427c14e68f74593e3428a96a7fb76cf3f2389b8b6def8e1fbd6c3aeb4aea3470977f42091e099b1f7201e1ac12c9f7cc3e2e065f90aec", 0x6) getrandom$auto(&(0x7f0000000300)='/dev/net/tun\x00', 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000380), r2) sendmsg$auto_NBD_CMD_STATUS(r4, &(0x7f0000001640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f00000003c0)={0x1240, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x5}, @NBD_ATTR_DEVICE_LIST={0x11ec, 0x9, 0x0, 0x1, [@typed={0x75, 0x6, 0x0, 0x0, @binary="029fd06b25a10529861b41e5ab3f7972fc6377492750ca9b26d2ca161053488c183460c82b036f4b587304e7865a408a95c44c2df8df4a67e950b3d29b0cdbc13b4db45753b1ae745a165a0d072c44c9929f07a80b76b4879680173fe2f045c1e8760e38c6890ac1d41cc3731456c2f4c5"}, @nested={0x54, 0xfd, 0x0, 0x1, [@generic="995aeeaffa3181513e8670fc4104a23f9e0ffcd42653cf4c1b3e2c52b0c137ca80", @typed={0x4, 0x134}, @generic="f9bcc954c4bfe51d60a3789808eb87b03095ebfcafa57b6797967b30f174b2", @nested={0x4, 0xe1}, @typed={0x8, 0x152, 0x0, 0x0, @fd=r2}]}, @generic="a1ae7ad60406aa517bd2f67ebee19327d8758f4f28e71f3dc4428d7fafdd80d4b6b22ef4878bbc8a723597b8da094ec374a55a6c00bd368b4d95effeda9230b51f7f988e87edf738d2ce379415715c5a3a223db0e99a704da115d03363cba06d5c18a309eef766ea72e06b5fe4650832ee13d62090c12a6a697840cc1f952572ca49a8a995802ee968addf006f6e34438c9d443cc374ed78e0c45f12068ad78b8d8bde03300b08fc1004befdfd6dddcfa805cd87ece7eee146c015e3ccf317832721e65d0d7ce15bf53732ad0804a37ee46147cc3878e7a76bc99bbd2ceb2d1246d79162cbefc805204d757311ec4a761d02ef73a9b5615a07a7a61cdf86a0b0febc5d5dc8046a5a60ba00d005c6495947b1a760220d00ec9da4a22e62a3ba119c98cb6fd0e68b4a66813f5b3e8b556a3051b6bbca2cb3f0547b7a38c0923f809f626388211cb5bd7cf85e7a50cf0737ed66ea02ff822c3c3bcdf393e43b999fdc925acc0dd100a5213baa4135029c0b92fd1dcd8f09384b95b159dd5c47dc525a3fdd7146638b417abcc0cce554f6ee9eceb8f3020984156fc3ed699633ba613c6be8ac261327bf14eca0204d543e2edf3f3a535e466615033d4887909c7486db1eb9541e6cff2ec33605d7cc43024f4ab12ba832293f546f4cf92773557ee44a1b58aff94e3feece6d6b06dec5461bc2400913b30a763901625217b3b0fb474a4356bec0c5f48dadb869dde660cad3847a8767a2fa97afab6bc762b819e6421511066c20082a6190153daa19ea53eba788947b154b4d22e0e1b230d0f1faa3aa00b462a43013c9b6d7a909b8517739b15daea40f9b1677b360774dda0e66a9e6683cef08aad4a70f324cb275776271156ce283b42d0fc5e7afba591eb5d653bec1f2a4584c94ab802c6a34e7aa0b50f7b5abde2f7deed9d669bb9b5f1609156d375c40e1f94256e3a65703dbf28ef483791cd2469660c9d5e42004ebeec29b468248284ac430d9f56f9d2ced98cf6399b13f4a1548d668a60303256df1b6cc99f35ac1286012a8014f4c6895a7980b818f581b23e6c71fb32e7f7291b651d4a7a044391fbb07863dc0604f849080a44c17ca42a6aea63a4ec29c36d1fde4f2f46ad794e383558de6de19cf675c97caa45cdd3ee507af962a2bd3699647fd99c338ea606ade516e705555c31d1a6717a69a745d18068b1b715cf3898f580175f60ebb76a979f67732b4307c142367ae5a8ec85efc0996714cb160af552f88ff09e0dbb2693f777646270af9e5742006a5747cbcd10b3ce927fb652bc7262baab35b3dcdfae53a6ad135e30b6a664ef67b58395bc30d367e24d73a3c3e74926b87de4629a3463b82048026550688fa5598644fd8328310c68b4f4df974c9ea2aa2772386ada18a502566d0e87963df559a51e75dcaad76816befb8e29c4f09d4776a3b7e2e4aa6db0c534ecdc7cfe43114e1f3a28085d00ac38647f0ecf8175bc3066ce8afa5dc6970539a687ad34d2fa3201309be23d7c5d9e0058c24e540e2e6fc0bd78d24f57e039532b22fdc62bfd9cd4c9d6ae01752d1c36c08741962b25afd5934220c9438d4db3ad9ea5a2c86ef7d755e714129a2e2f916e996fa667dbf60fbe867276a2687895c7a9aa81b30879e5bf1feb7625758f958daeadf17ca0759d621ece5d5f2c0d1041d7d3e60dc0861004c69115cedcb4983bd1ad110355eb747420597b545b07189afb3a1e5a7d76962fa57b30c2332bed9450bdddbb8168a09a824c62e91f2f58334a37f1ae2df4e5552039b7a61bae0012fff82794d8cf792c8560c045928c3f293d52b448d4e933c81148f147bc02c573abc896b2bb35d093e67b05fc57a60b33588bc5bb00c02508231860e826d7479085a309fe622fee13b6ad0cbd91426499a34bdf1c2713e172fbd5544a8ac8308c36881b10a5f1d066b58716755123113f199f4bdaeca253fffe3c847e2fb71110bd7ce4c21f1c71259e1c7ce1080fcc87e452dc40ad99d9fe1f017be94515af3f2c19742df6871fec6cf4f26d3adadbc75f552f6be657cb7ee277700464fb45a93757fb357eac4d8a9c65f898ea1fbc697e1827f6bc32716444b9c0901f71120dfdf3ca0ef88b31ccb3ace29534a3cb7bfb92be3802c9347dab461af558c57204a5bcf2ace3d1c1c50373d064c969dec6c964d78f4a5c65355d68c8a293162ff30086896cb6c95bde0c8501118fbe7825ec2b6de038f03353bc27777ea15c75a27ff73e7fe272f89fd23bbd734e93d5df36b3a863a38095bace9e05237c8cd09e6ea3d92682dacbc467a643150fcfb51cf924cb2c5eb53c086f1297c2bdb5a21ffe9b05080b4360eeea5c032b83696da8cde24feef4104d1d07cb98ca8f18588ed648610ab06e5742d05e696c12a830c22cf24561cacb50f68a7e6a2f7961ab6318f570551bbbeb1dafbbcb0d521898e45eea205a3d460224aeaef016b87b8e55c9147ff3fcbbf107e6bb5c2908b538bba88fa6c278de4a41b839c26814ca217a29ed1f6ebd903b434bf8954702690749d89bbab33303d698562942bd195195b063da682d7aced0859ed8bd23b9abb12b3d1ee0f6e35ce8f1493d47343d7d52c8d3b9d6ff58e98ac5a02f10869e098fcfea61a56c64d7d828c989d1c9115eb6d5c75e4871232cad2b1b9ee3a7bfbbb61df112ecae1fb692ed1d58ee0f17c54350e58fd786622f592273750eef68b8e90aabc45615d8304b94074b443a02caf9e34bd7e0b20ee23403ba14893a1ce3a20bcaa554981e91e1532824a8e4245324674a4802fb639b32068d90e3bb528a90b50264c06cf77fbbe94a3439eab46339465143ac3f66ae7b90411b800816850372b8a5651d9dd6ba000952a4914ea7e464d51cadad5998bab746ba96fd42f09180df595905b6791f2dcacc0cfa3258124ea1c3c1296f708e730e5eb22cccd5bb03c88bd1146fec33253f5f68dc94cba9af1ef72de9821529ac9e3bd27be808f95e6b91f1e9c88d57360bbb24694c100e357cdd0e894e369cebaca9feab32f025703aaeed92dd8851fa83e44186bddfaeb6a47a7fa3676b849f621e7a7dcd9feb2f8c53701076a5831549eae3b04bee6b68f1ea344898d0c02dcfc4ce92cdd89a2096e43b9432a49cf2a1bf47f5c6fd8210afa3cbd762ea6648f97b49a8b3e9702d9c156461b0afa3a1191563917104aa9f50177cdba0685ea6455d5fbd44120bf738a122a05fb3bb835be9d60f107f03d9bb19a0158be5199a6e62bec7497f7a11672a8e6868aa9f4525b0da006eee63aa765fae74b1a186bee985c96f12cb3c7128c22e0e7f61a53d11fe657aa85b2b8428488fcdd060e429e09b786181dd87522ec5c9a6b7cc66d1d66093f7360983134b7af0af89f3d0932e90f236d25369e6d12790418d24def304ef5707fcd8a0995a92dc6861ae1de0d34107fb227f0adbd5857152f0506ccddcb952a7eb2058ced96342c8fa016b23445a7181b9dbae45ca9756a91070f999b7a19ddfe184ae618eef655eb0efcfb8918556f7b17d0b73338c41eb8df5c77391e77a616df73a55ad739bd68109c217162804cc5a6a0f5653b63d451bfbfc55f1898752784df557df2963218283b76597e523f2f2c27ade8f0fb1cea77d3841bf0756e31a6de6b4596a15e2039ab11ce6097c3c9affa3761f46bca5e46d8ad0e313707dd24c119db4c50194bcfb01f648a1f68bffabcdd4298d561d948a60ed8c853cb71976426c6edc63134f7273ad8c6d6dd6e7d79a527c9470b72899119b5f3b8b248ef4921bba9250ffb21b97dd41b70c23ddb7ec79152bb74c44a4c34d303c1dacb6dc1e19d2f36ef37819fd0af9af353ab0d47eb460db4d0b46413766de68c3cda1c8011b12d92094efbd5c9643a64cc0c01704e9007c7232e702ea539cd30c14d75033affdb32fb947129539920c5537f15916b6a92d94127c142f0c0209e840aab5c30140980ec615ec29cc1ab01c553b127e8c4c0abd95d62f865924efeaeae084d31a725ad714a91db631bd08a00acc9a8b82d9cddbc681a73bda2249aaed41458f038d8c126d1e3313c02e32c0c48fee435a4ed7755148687e6de02eb1170af38578fdc992e1f2be14df503b4c76368387a986fd34dbcddec7a95e667dccc55b7200b21b093258af480b21189aadffcb65baede8a0c0616748b9dbb731a48ef93c04b1a4f987ad28cea3e8a8ad9f8a4e2e4cef9c9a26cfeefbd36b9d967b4443f7ba3f517ac70f16e465f7d09fa6111bbed232b31aadc9ceb061759aae49a970a06f7becd4e3e0f4e3bd9494ce3e83d23c19357f162019a3e071f2f4b430584a27f029fbe68e13e7376366739b921c590b8da897412f470f75d16da8800de9e9840d6ba1697e85a5d817ee8bd79c67fc0806a6c436651a70915819376a1df206f0390665a46cd053ce51f23716054740abe2b9bac13e691a990559b595490285362283a20907d4ffde06430411b3d975d20488af984a5f3b0fd3e6a72e66e42d47e113acdf38667eebadb2caa318bc68c191476ec0edafe3802b1e91966cfa11591a8fef7d5dbb636d816bd23321505cdd658217b29e121e164b39156fc705ccaa9d1942afd9a9439c8830c9648e42dea6645ea018936020b243a183052e9ab327797493b2dcb9519c021881ce8bf185e9c59b33291988b44223f9a241850aa1fc0f0ca4728e4a06aeda11283f7504d70e88db67073cdf5b4e15cc2a414d5a2d642e66c93c20ec93a5b987ba795024eec29479edd44071600964eaeaa0aeecab9bf5c9d68d8d77bfba23546e7f5b7718cd99669a782070ff6fc06bda77c0bb0a51ec7ac880d71a82d6a3b5761ad05b8111722d4147df275b5902e62dff0238bc90445f6fc43158157cccec86a1faf17fa011beef6360efa2491df75db7e45e4b6c5f1d69dbdf20b3a3be6ddf56264b4d7b97e20530b5c639d14db02ce93e24d5c5cb3f24f9b55c36fd7686759b965a9d66318a4e2e7db860eceafebe8639e9c4ef587f57d27142a82be36c4c30f4ea007e055225541444021b77b94a264d852d8a9b6a84bad64247682adca741cbd338eedb9ba6cb327d35da1a77b7a373b8fc913dea463e0653b3c145e66bd05259190fa6d18166f5ef9cf51b5425f412c0c54e4e714ec1c545651d9e09b919248128b4d164dff697215821ad2818aed7a59f18e7955d189c07a852c643f77c9419c697fa83bbe7c7e69064445c3583f4b9ef8e7d2396bfcd84ff73378ecdca66fe30c3371885c4eeb1e96d95f446a4a401e1b8b677534c33c4adf44b450d530f350a2e2609ee9834e9b9b8fd74031868ab816fff49eb0d05b5a4401451d1d0c2b3f6da5e7ac77f58f05c1ad41db4dc7fb3928e89de698684eca41e9fb591c73292ab5626c740458254d2d33a84f2a92b16432afdf4cf731f87a1938759fc7b869a52931ca31d22dce4689291303c6e57887dd5f82e4b80748609be1ad3ec45e6525f50efee02e99e37160762d8eb8a6b158082843a846e20578b9f1d9d22a1e598aa8ad971aa684a79879907405b4e23d67d27c175d76e309dd03242d5578da3aea427e45e9c89f7e755be2ef08544d6b17de50eb3cfecc46b8c59ebfec595a8e37c73f86af7d7312d8e645e122f7cb7029a368d1d96034cae6c1cb1f463922bcccf8b1f40ff83bd33246e5025ccce1e0986e6a8ee9ac5b2b7c05d6e638ed373f9bd039d3081ca24610ea7264250d4197f444b39be4ef8c76e6d18f76acfafddff63b43d6941da662735b205fd7d86157e0efa7390931f763", @generic="109eb18f46881eb0d032585494958ff43a4333", @generic="02dc241acd27f03d1df1906cbd2b8f4febf50464cb938d572f4bcc96a162fab31b7d047c0742c4652f963af09e0747b8395d4a99ea8a23273035867c37027132345f56e2c70ba91d1b265be8217115cb548b3683119db7677fab9fa78db46a03fe2023a9ca2edbbb89ba49ac0e79defb114b6802ac5dc5150a7be01f2d8566e21cae5472cbd2ca64b1c7e173b53fddfb76b9b5d042d34a4c00934da933b47cad5b7206c698b8b6595eab2579250d7d4a1817a54d652ac531c04b9a3e7739d53783a2723f05f4", @generic="625f40cb7d24a328b63bf732dbab0cbf31d3e0f63b1cfa81a2b90b5759f042b810703507cbb1fac35046238c8092ffef605342243c485d88124f8003b3aed897d51257"]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '/dev/net/tun\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}]}, 0x1240}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000016c0), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001700)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r7}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x40800) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001840), r4) sendmsg$auto_NFC_CMD_DEV_DOWN(r3, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_NAME={0xf, 0x2, 'virt_wifi0\x00'}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x39}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, &(0x7f0000001940)=0x51) r9 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r10 = gettid() ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000001980)={@inferred=r10, 0x6, 0x100, 0xa76a, "3a68aa7787185d5000d46f25d79ce74d5de9e4e8303a3b8219b02c9e15c38bc600a7f4de167808930712cfd1", @raw=0x6}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f00000019c0)={@inferred=r10, 0x3, 0xfffff000, 0x0, "11d57679ef719ddf4f4a25fe40d3b7cc85f9c1f3a58d36a803060001dfc1ed05b09f6478ffe88d4bcb7c1dc2", @raw=0x6}) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self/loginuid\x00', 0x0, 0x0) ioctl$auto_VHOST_GET_VRING_BUSYLOOP_TIMEOUT2(r3, 0x4008af24, &(0x7f0000001a40)={0x227, 0x7fff}) mq_notify$auto(r9, &(0x7f0000001b00)={@sival_ptr=&(0x7f0000001a80)="509b5bba089b2161158708fbab3cc79cbd8a7ce462ff0053d392032f14410202f80e3143b51a7453347145ca60d60948fc5c70cd9e721ca393377c7858ec9ad33d27619c7ab84eb64438116a43f13967e1add494ff2328ba7db2bfcef2b5d0a0b214216cc5cd0755e0e8f25742fecd5653b0bd7cd01f4d3523f8", @raw=0x1, 0x1000}) socket(0x1, 0xa, 0xc3) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r3) sendmsg$auto_NL80211_CMD_GET_MPP(r2, &(0x7f0000001d80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x164, r12, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_STA_FLAGS2={0xb3, 0x43, "ab99ec7f1e22c4baf0eaeb0e19613d8c05e383a263970fc03796c6fb236ff1cd818daeb94b01ceba3d1b63ad15ebed12650cf84e392eee0b2e810147034385967774ff2bfc14416be2a72244b40a0dbaa7f567619fdf6c9900379dedf1ad1dc0c20791f1d49f2c0c52119966feab56bdbdb8e7dc987add840c66638a20ba0fd4db61784baefd7bf320daba91e45053103089bf1137e399d8925abf492f02d0090d0cf32085c13cfc551d4ec8f610ff"}, @NL80211_ATTR_FILS_DISCOVERY={0x94, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x9}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x65, 0x3, "c1a45b5c60a6fac8f9ad527cbf3a71e3471a0ce61fb634f25d12206d3bdb11482d9912e83494e56d4d7217fd91e6f8d0d2207a7cecf38cdd135733d7cb8ca5cd7d61d6a4ce1521b32bc2b35a005bec37d35ebdc2b4ebd253bdcbc56165fd8afe1c"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x5}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x4}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x7fffffff}]}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080) r13 = dup$auto(r2) kcmp$auto(r10, r11, 0x6, r3, r13) select$auto(0x8c, &(0x7f0000001dc0)={[0x200, 0x6, 0x10000, 0x7, 0x1, 0x0, 0x9, 0x1, 0x0, 0x4, 0x4, 0x1, 0x6, 0x8cf]}, &(0x7f0000001e40)={[0x5, 0x840d, 0xfffffffffffffff9, 0xc00000, 0x3, 0x8000, 0x3, 0x3800000000000000, 0x200, 0x7fffffff, 0x3, 0x4, 0x2, 0x1, 0x2, 0x8000000000000000]}, &(0x7f0000001ec0)={[0x5, 0x6d6, 0x2, 0xc, 0x5, 0x2, 0x2e, 0x400, 0x6, 0x5, 0x4, 0xeb7, 0x7, 0x4, 0x1, 0x6]}, &(0x7f0000001f40)={0xb23, 0x6}) 2m22.097786857s ago: executing program 3 (id=1493): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r1, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x8000000000000001, 0x0, 0x0) 2m6.628849739s ago: executing program 33 (id=1493): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r1, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x8000000000000001, 0x0, 0x0) 25.03400958s ago: executing program 0 (id=1821): mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) socket(0xa, 0x3, 0x3a) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000240)=@link_create={@map_fd=r0, @target_ifindex, 0x6, 0x1, @tracing={0xffff, 0x7ff}}, 0x7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dmmidi2\x00', 0x20200, 0x0) setsockopt$auto_SO_WIFI_STATUS(r1, 0x4, 0x29, &(0x7f0000000300)='\x05\a\x89\xaa([\xa8\x92\x0e=\xc0\xacJ\x9b\xd9u;\x87\x12eDg[\x11\xfed\x03\x9c\xa8oB\xa62\xec\xb7-cs\x03\xd9\xbc\x7f+\xdb\xc02\xf5;\xb1e\x05\xbd#\xf0\xbbf\xd4\xfe\x99\x7f\xc6j\xb3|\x87\x99\xca\x9b\xa4\x02J\xc6\xfb\x04\x95\x94\xa9\xd1\xa7\t\xe7\xb5\xd1\xf8`\xc1\xb8\x13\xfd;\xc3\xb5\xfeC\x01\xe5G(\xc2\xc7r\x90\xd3Op\x95\x925CZa\xcd*J*1ueJ\x9b\x97\x9e\x04\xa6\t\xa0X\x18\x8fl\xd7c\xf9!\xc3+dW\xf4>\xd8\xa4$\xc7\xa1y\xfc\x9b;r\xc7\xbf\xfdg\xc3\xee\x1a\xe3\xb1\xc3o\xb1\x84y\x93\x7f/ngp\xa1\x92\x88H\xfa\xa8\xb1r\xee\x00'/195, 0x40) mmap$auto(0x100000000009, 0x20009, 0x4000000000df, 0xebd, 0x401, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r4, 0x400454a4, 0x0) prctl$auto(0x3d, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) preadv2$auto(r5, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) mmap$auto(0x0, 0x4120008, 0x46, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r2, &(0x7f0000000240)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xce\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0xffff) socket(0x2a, 0x2, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x100000, 0x2, 0x4000000000e1, 0x40000000000eb1, 0x401, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) 23.748017794s ago: executing program 0 (id=1824): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x1e, 0x1, 0x0) getsockname$auto(r3, &(0x7f0000000000), &(0x7f0000000040)=0x3) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="17000000", @ANYBLOB="7600279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfc2, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/cx231xx/parameters/reg_debug\x00', 0x0, 0x0) landlock_restrict_self$auto(r0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r5, 0x0) 22.880175591s ago: executing program 0 (id=1827): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x3, 0x3}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x4, 0x0, 0x7, 0xfff}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) remap_file_pages$auto(0x6, 0x19, 0x2fe, 0x5, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) 21.176780705s ago: executing program 0 (id=1832): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) ioctl$auto_BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f00000000c0)="5691d235658d72bdb0333a3ba7fa86e2902fcd7228383c11ee6e7d7dbacc1f795702a0a885a906b97113e45f1ca72f6b376f64cc1c2727e9a315bb10c001021d1cef1c39587cbd8ed3e803bf597924de41373471739c1136ebcc0c19315c0ed87febd0588a45d36e9957feaffac6742ba0736f6b3c652fae0f10a53ab9be75f409242c41e054da548b2f", 0x12000}, 0x0, 0x3ff, 0x3, 0x7, 0x400, 0x4, 0x80, 0x1, "821a3a97733fed7f473f5a5233f7b0847cd59e02a03b7816268efe0b2767955b93486a90a75195c2b0ed21c42ef1ce2556998d8da5ad4b2a266ad9bfe08bfee7"}) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xc834, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy11/hwsim/ps\x00', 0x100, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) 18.247549122s ago: executing program 0 (id=1839): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0xae02, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) 17.877366193s ago: executing program 0 (id=1840): r0 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x248103, 0x0) mmap$auto(0x9a71, 0x4000d, 0x3, 0x9b72, r0, 0x4) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) eventfd$auto(0x3) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x80000001, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x6, 0x8000, 0x8000000000000000, 0x0, 0x0, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xffff, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x400480, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x40, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xff\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xbdg', 0x110) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x323a03, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0xffffffdfffffffff, 0xe986, 0x3, 0xeb1, r2, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x200001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x440280, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) 13.72514317s ago: executing program 4 (id=1848): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0xae02, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) 13.500486244s ago: executing program 4 (id=1850): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) write$auto(r1, 0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x271c, 0xfffffffffffffffc, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/modules\x00', 0x88880, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 9.808749222s ago: executing program 2 (id=1861): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004044}, 0x48000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) r4 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x8040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r5, 0x80004507, 0x10000000000402) madvise$auto(0x8000, 0x87fff, 0xc) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r6, r6, 0x0, 0x7fffe000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x2a, 0x2, 0x0) r7 = socket(0x2a, 0x2, 0x1) connect$auto(r7, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x4001}, 0x55) bind$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0x80f0}, 0x6b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 9.374335581s ago: executing program 2 (id=1863): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x1d, 0x5, 0x6) getsockname$auto(0x3, &(0x7f00000002c0), &(0x7f0000000180)=0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0xc8142, 0x0) read$auto(r0, 0x0, 0xb4d3) read$auto(0x3, 0x0, 0xf34) 8.500588189s ago: executing program 4 (id=1864): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x20008, 0x4000000000df, 0xeb1, r0, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x800, 0x0) ioctl$auto(r2, 0x90006441, 0xc35) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) acct$auto(&(0x7f0000000000)='/dev/dsp\x00') write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x5, 0xfffffff3, 0x0) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0xffffffffffffffff}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc800) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000040)="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", 0x2f8) socket(0x6, 0x4, 0xc8bb) ioctl$auto_SNDCTL_SEQ_SYNC(r5, 0x5101, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f00000000c0)=""/147, 0x93) mmap$auto(0x0, 0x8, 0x2, 0x7fffffff, 0xffffffffffffffff, 0x10c) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) 8.485554349s ago: executing program 2 (id=1865): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x90000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x81, 0x4, 0x0, 0x4) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x205, 0x9, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) semget$auto(0x7eb, 0xc7, 0xfffffffd) readlinkat$auto(0x1, 0x0, 0x0, 0x16a) r3 = socket(0x18, 0x1, 0x1) connect$auto(r3, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x6210d6b5, &(0x7f0000000100)=@link_detach={r3}, 0xffff) bpf$auto(0x18, 0x0, 0x92) setsockopt$auto(0x3, 0x1, 0x7, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 6.772162893s ago: executing program 2 (id=1868): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000140), 0xae02, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) 6.604185578s ago: executing program 2 (id=1869): ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) close_range$auto(r0, r1, 0x3) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r0) (async, rerun: 32) r3 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_score_adj\x00', 0x8080, 0x0) (async, rerun: 64) r4 = ioctl$auto_NS_GET_NSTYPE(r0, 0xb703, 0x0) (async, rerun: 64) r5 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xff, "ea22c5071643ff486223e56c61fa4a718d3f4ec37c947025b9d4a62f83462365", @raw=0xca}) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r4}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x20004041) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x9}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x9}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x9}, @NL80211_ATTR_MLO_TTLM_ULINK={0x18, 0x149, "ff6cd8544a11d45aac7f5d1edf213a364c35f45f"}]}, 0x64}}, 0x0) (async) pread64$auto(r1, &(0x7f00000003c0)='TASKSTATS\x00', 0x8, 0x5) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r4, 0x80083314, &(0x7f0000000400)=0x200) setsockopt$auto_SO_BUSY_POLL(r4, 0xffffffff, 0x2e, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x1) (async) r6 = socket(0x1d, 0xa, 0xa45) (async, rerun: 64) r7 = getpgid(0x0) (rerun: 64) r8 = prctl$auto(0x4, 0x5, r7, 0x3, 0xff) (async) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000480), r6) msync$auto(0x1, 0x2, 0x3) (async) recvmmsg$auto(r5, &(0x7f0000001640)={{&(0x7f00000004c0)="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", 0x8, &(0x7f00000015c0)={&(0x7f00000005c0)="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", 0x76}, 0x3, &(0x7f0000001600)="028e542a0300fae25e6837da892caa70c00eb517218da298b02ba79f6c67fb794e6b36b1989237a8c6cdf85508e1e15fbdd4ff84840b821687e1e36d02f6c7", 0x0, 0x7f}, 0x82}, 0xf, 0x4, &(0x7f0000001680)={0x9, 0x2}) (async) r10 = timerfd_create$auto(0x8, 0x80) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000001880)={@sival_ptr=&(0x7f00000016c0)="40913e0d5c234aa266a3ec35b38c88924ca5c9d3e63ecbea48399577f700131dd804fdb5a51f168d06fc512d839fad730292a5a142cec769c2f2bf82cef9f6b87a3918899d96b42a6db44a6ad5d6097fd51f038889964a3f473106dc86ca", @inferred=r10, 0x7, @_sigev_thread={&(0x7f0000001780)=&(0x7f0000001740)=0x2, &(0x7f00000017c0)="60d14d024d2ccac25e9f357c1738f13888e54bfcd40302949ca3a8169e35e79fbf84861348168ef4d5bc1bd9d8beab521f22cb3c4c3c686142a05aa3ec9c19e7f555b989b30a6ff0ba08778d9c277a19ae6d33d4dc5be985010c9ad3cf5b6f5f7e6f1f67ae8a7035fa63fdbaaf4be4fadc8976630f5a6914b7d0855b34fe6cdda4ea5358e187bc4889e14569c722c7f067b727f591f69594b4b56367227b7f89d1a6c6243b06cd8064063f89e40113fa"}}, &(0x7f00000018c0)) r12 = prctl$auto(0x100, 0x3, r7, 0x8000000000000001, 0x3) (async) rseq$auto(&(0x7f0000001900)={0x4, 0x7, 0x1, 0x9, 0x5, 0x9, "9e3bd4bef32877296245f772eb2d7cca56cdbf55553e60a5ce07fc8af700d5294b8954942cd19048be72b7755d77bdf48ea02af7d9677e3aa8782e7ec16a51afaaa2e23294f31a7f059c616d0958fb299170a88e0d06e3882d1612eae10cf6abbfb2ca5f68f7d664aa70029ad75f3769c2a4cc0a4a89b81aba27a25e693cdf9a38fb5ddf181882be830833e6231d0f813544731e0b60a50b490ce6cda64dbd6de11c19ed2f941b1cf8499986b266f61918bf3879ee035fed8bc76ee3a9eace9663a7947ca804d510100748d3b5688a2c2a0ae6ed0eeb9099"}, 0x3, 0x3, 0x10) (async) ioctl$auto_BLKTRACESETUP2(r5, 0xc0481273, &(0x7f0000001a00)={"69575da19c7abc08e63a40b2973fbd15508d4e4cf7dadee6909a20ac2b43dd96", 0x800, 0x7837, 0x80, 0x8, 0x800, r7}) timer_create$auto(0x5, &(0x7f0000001a80)={@sival_int=0x6, @inferred=r8, 0xfffffffc, @_tid=r13}, &(0x7f0000001ac0)=0x1) (async) sendmsg$auto_NL80211_CMD_DEL_PMK(r11, &(0x7f0000002d00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000001b40)={0x115c, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_SAR_SPEC={0x14, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_TYPE={0x8}]}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x80000001}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1110, 0x25, 0x0, 0x1, [@typed={0x102, 0x12e, 0x0, 0x0, @binary="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"}, @generic="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", @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x9}]}, 0x115c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r14 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000002d80), r0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r0, &(0x7f0000002f80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002dc0)={0x178, r14, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGES={0x163, 0x3, 0x0, 0x1, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0xe}, @nested={0x1c, 0x93, 0x0, 0x1, [@nested={0x4, 0x4b}, @nested={0x4, 0x136}, @nested={0x4, 0x129}, @nested={0x4, 0x62}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x17}]}, @typed={0x8, 0x5c, 0x0, 0x0, @u32=0x5}, @generic="966cab1293cd409b4d8b826e858e8d19263ff6aa8c32330a995c8b7627254dc9e199d5854e8e64db4e6d6cc6c0be9ad238e0d4dbf61a70d438a26627b5edafa3eee5921117822ae45cddfeaf6cd6c517c42b9a469475e4beb190dce73044c5e11fc2d92ea7c0bc7090f39da2f6ed6e7cc74b1cb3afef1df9c6d686a9f4b572d1b229ec2298e2d279c7e9b56e8705ca692fb5047d958e0a9e34bf53a5be44071b466d4f0b3961a758c35111bcd5520d88cbd0b253f6c11a4602189474db12", @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x9}, @generic="1446dd3b1a9bc7de02654c62915479b050887607ec05c48fcc92398b2962577eb1f237aa8e3a1412c87f18be74cdfc5e72bd932f613190864f0aa0e8ae7ae2d089447d24a01a477bde531ffe2758452a121cdd1162f1d7aa613e1dac0fa1be0222b60c8959"]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) fcntl$auto_F_GETOWN_EX(r12, 0x10, 0x2b8) r15 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000003000), r11) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r10, &(0x7f0000003200)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000031c0)={&(0x7f0000003040)={0x150, r15, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x134, 0x2f, 0x0, 0x1, [@nested={0x122, 0xd7, 0x0, 0x1, [@typed={0xc, 0xbc, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0xce}, @generic="6e286a5ed96bdc5177ae1e15bad62535d77aca2d2a05f2e8d885741cac27d367c8d92c4cd521e8b9ded767126a961b6c172bdd41078b45ed2473d7", @generic="539f2b9fbc3bbfbe5af2f7bff094d4771b04b71f4774786ebd1e22daf57942ebb8d6ca7aec1d56e8f3dfd14099e029222e7d84e7a933a9671e00df842c64a5752bbb34db3ac39504264716e9aa1fb25a7f93d8f149828f0b4a0197475563d756957c33d7edc7c40a7661bf82d1c14dd8282feea86418c1c3ad1d0dd34a2fde3674332c83865670a4ea01b9789effd13b140695e221783608fd12559996a8366cf5f453575dd8335ebd9aea465e9fc2096035baecb13774a2224331be4c9152bd57666fcf009021", @nested={0x4, 0xe8}, @typed={0x8, 0xbe, 0x0, 0x0, @uid}]}, @typed={0xb, 0x67, 0x0, 0x0, @str='^:]:$\x97\x00'}]}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) 6.3436092s ago: executing program 2 (id=1870): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x422c1, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r0) (async) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptywf\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket(0x2, 0x1, 0x106) (async) shutdown$auto(0x200000003, 0x2) (async) poll$auto(0x0, 0x5, 0x400) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x11, 0x3, 0x9) (async) ioctl$auto_AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_BSDCOMPAT(r3, 0x0, 0xe, 0x0, &(0x7f0000000140)=0x2) (async) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/kvm/preemption_reported\x00', 0x105641, 0x0) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES64=r1, @ANYBLOB="01002cbd7000fbdbdf2581"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) r5 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYRES64=r5], 0x1ac}, 0x1, 0x0, 0x0, 0x24044814}, 0x2004c0c4) (async) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) fadvise64$auto(0xffffffffffffffff, 0x0, 0xffffffff80000001, 0x8) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d) (async) msgget$auto(0x0, 0x5) (async) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) (async) msgctl$auto(0x0, 0x0, 0x0) 6.058665577s ago: executing program 4 (id=1871): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x3, 0x3}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, 0x0, 0x4, 0x0, 0x7, 0xfff}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x2000000000040007) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) tgkill$auto(0x0, 0x0, 0x11) readv$auto(0x3, 0x0, 0x7) 4.633127049s ago: executing program 4 (id=1873): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/register_always\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) 3.879303008s ago: executing program 5 (id=1875): r0 = socket(0x25, 0x6, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffffd, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000040)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x2, 0x5, 0x4000000000df, 0xeb1, r2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/cec3/uevent\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x800, 0x4) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/bus/usb/016/001\x00', 0x1, 0x0) ioctl$auto_USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000000)={0x2, 0x7, "81be"}) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0xa0, 0x6, 0x4025, 0xfffa, 0x9, 0x80000, 0x0}) 3.638130707s ago: executing program 5 (id=1876): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x29, 0x5, 0x9) setresuid$auto(0x8, 0x8, 0x0) (async) socket(0x1, 0x2, 0x6) mmap$auto(0x0, 0x20009, 0x0, 0xeb1, 0x401, 0x40000008000) (async) mount$auto(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0xa, 0x0) (async, rerun: 32) fspick$auto(0xffffffffffffffff, 0x0, 0x9) (rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) open(0x0, 0x161342, 0x130) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/17t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0xc8c6, 0x103) (async, rerun: 64) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0xfffffffffffffe41) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/017/001\x00', 0x129041, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, 0x0, 0x98c7) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket(0x10, 0x2, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0xffffffffffffffff, 0x8, 0x6) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x174, 0x400, 0x9}]}) madvise$auto(0x0, 0x8, 0x15) (async) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/vlan/vlan0\x00', 0x361302, 0x0) (async) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) 3.390665617s ago: executing program 5 (id=1877): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000140), 0xae02, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) 1.977100201s ago: executing program 34 (id=1840): r0 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/psample/out_tc\x00', 0x248103, 0x0) mmap$auto(0x9a71, 0x4000d, 0x3, 0x9b72, r0, 0x4) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) eventfd$auto(0x3) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x80000001, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x6, 0x8000, 0x8000000000000000, 0x0, 0x0, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xffff, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x400480, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x40, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xff\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xbdg', 0x110) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x323a03, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0xffffffdfffffffff, 0xe986, 0x3, 0xeb1, r2, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x200001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x440280, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) 1.953878766s ago: executing program 5 (id=1879): mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x78de, 0x101, 0x17f, 0x2}, {0x1, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0x6, 0x0, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000080)) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) lseek$auto(r0, 0x7, 0x401) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) r2 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r2}, 0x92) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) socket(0xa, 0x2, 0x3a) r3 = socket(0x11, 0x2, 0x40000e) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x80003}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(r1, &(0x7f0000000040)=@phonet={0x23, 0x3, 0x0, 0x6}, 0x66) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 973.299381ms ago: executing program 5 (id=1880): close_range$auto(0x0, 0xfffffffffffff000, 0x2) setresuid$auto(0x0, 0x7, 0x8080) keyctl$auto(0x1e, 0x0, 0x0, 0x0, 0x7) socket(0xa, 0x3, 0x3b) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, 0x0, 0x24000000) setfsuid$auto(0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:480/min_ratio\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000200)='1\x00\\GL\'\xb4\xb7\xb5tF\\\n\xd5\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x800, 0x0) mmap$auto(0xfffffffffffffffe, 0xd5, 0x3, 0x1e, r1, 0x6) madvise$auto(0x0, 0x200007, 0x19) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) r2 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto_component_list_fops_(r2, &(0x7f0000000100)=""/78, 0x4e) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x44000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101200, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c00, 0x0) 658.811906ms ago: executing program 5 (id=1881): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x1}}, 0x71) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) capget$auto(&(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000080)={0xffffffff, 0x9, 0xa82}) prctl$auto(0x4, 0x4, r2, 0x8, 0x2) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x400c089) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) r4 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 0s ago: executing program 4 (id=1882): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) getpid() (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) (async) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r3 = clone3$auto(&(0x7f0000000040)={0xfffffffffffffff8, 0x3, 0x8, 0x5, 0x7fffffff, 0x2, 0xffffffffffffff4b, 0x1, 0x2, 0x9, 0x1ff}, 0x97bb) setfsuid$auto(0xee00) (async) r4 = setfsuid$auto(0xee00) setfsuid$auto(0xee01) (async) r5 = setfsuid$auto(0xee01) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x60080, 0x0) setresuid$auto(r4, r5, r4) rt_tgsigqueueinfo$auto(r1, r2, 0x7, &(0x7f00000000c0)={@siginfo_0_0={0x4, 0x8b18, 0x82, @_rt={r3, r4, @sival_int=0x5000}}}) (async) rt_tgsigqueueinfo$auto(r1, r2, 0x7, &(0x7f00000000c0)={@siginfo_0_0={0x4, 0x8b18, 0x82, @_rt={r3, r4, @sival_int=0x5000}}}) mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) (async) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000040)) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000000)='N>') (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000000)='N>') write$auto(r6, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) kernel console output (not intermixed with test programs): TION: forcing a failure. [ 611.603726][T13063] name failslab, interval 1, probability 0, space 0, times 0 [ 611.807367][T13063] CPU: 0 UID: 0 PID: 13063 Comm: syz.2.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.807408][T13063] Tainted: [L]=SOFTLOCKUP [ 611.807417][T13063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 611.807433][T13063] Call Trace: [ 611.807441][T13063] [ 611.807450][T13063] dump_stack_lvl+0x100/0x190 [ 611.807484][T13063] should_fail_ex.cold+0x5/0xa [ 611.807527][T13063] should_failslab+0xc2/0x120 [ 611.807562][T13063] ? __register_sysctl_table+0xac/0x1650 [ 611.807604][T13063] __kmalloc_noprof+0xf6/0x9c0 [ 611.807637][T13063] ? __register_sysctl_table+0xac/0x1650 [ 611.807677][T13063] __register_sysctl_table+0xac/0x1650 [ 611.807719][T13063] ? is_module_address+0x5f/0xf0 [ 611.807760][T13063] ? __pfx___register_sysctl_table+0x10/0x10 [ 611.807801][T13063] ? is_module_address+0x69/0xf0 [ 611.807841][T13063] ? register_net_sysctl_sz+0x222/0x430 [ 611.807884][T13063] ? __asan_memcpy+0x3c/0x60 [ 611.807915][T13063] sctp_sysctl_net_register+0x15e/0x200 [ 611.807954][T13063] ? __pfx_sctp_defaults_init+0x10/0x10 [ 611.807991][T13063] sctp_defaults_init+0x6d2/0xd90 [ 611.808028][T13063] ? __pfx_sctp_defaults_init+0x10/0x10 [ 611.808064][T13063] ops_init+0x1e2/0x5f0 [ 611.808107][T13063] setup_net+0x118/0x3a0 [ 611.808130][T13063] ? __pfx_setup_net+0x10/0x10 [ 611.808150][T13063] ? lockdep_init_map_type+0x5c/0x250 [ 611.808186][T13063] ? mutex_init_lockep+0x110/0x150 [ 611.808227][T13063] copy_net_ns+0x46f/0x7c0 [ 611.808255][T13063] create_new_namespaces+0x3ea/0xab0 [ 611.808291][T13063] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 611.808322][T13063] ksys_unshare+0x455/0xab0 [ 611.808363][T13063] ? __pfx_ksys_unshare+0x10/0x10 [ 611.808403][T13063] ? xfd_validate_state+0x129/0x190 [ 611.808453][T13063] __x64_sys_unshare+0x31/0x40 [ 611.808489][T13063] do_syscall_64+0xc9/0xf80 [ 611.808522][T13063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.808548][T13063] RIP: 0033:0x7f177f79aeb9 [ 611.808568][T13063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.808593][T13063] RSP: 002b:00007f17805be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 611.808617][T13063] RAX: ffffffffffffffda RBX: 00007f177fa15fa0 RCX: 00007f177f79aeb9 [ 611.808634][T13063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 611.808649][T13063] RBP: 00007f177f808c1f R08: 0000000000000000 R09: 0000000000000000 [ 611.808664][T13063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.808680][T13063] R13: 00007f177fa16038 R14: 00007f177fa15fa0 R15: 00007ffdf9cb5a88 [ 611.808711][T13063] [ 612.841650][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 613.555814][T13078] netlink: 'syz.3.1439': attribute type 2 has an invalid length. [ 614.716438][T13103] futex_wake_op: syz.3.1445 tries to shift op by -2048; fix this program [ 615.120168][T13111] FAULT_INJECTION: forcing a failure. [ 615.120168][T13111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.229580][T13111] CPU: 0 UID: 0 PID: 13111 Comm: syz.2.1447 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.229619][T13111] Tainted: [L]=SOFTLOCKUP [ 615.229627][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 615.229641][T13111] Call Trace: [ 615.229649][T13111] [ 615.229657][T13111] dump_stack_lvl+0x100/0x190 [ 615.229690][T13111] should_fail_ex.cold+0x5/0xa [ 615.229730][T13111] _copy_from_user+0x2e/0xd0 [ 615.229769][T13111] get_timespec64+0x8b/0x1b0 [ 615.229815][T13111] ? __pfx_get_timespec64+0x10/0x10 [ 615.229842][T13111] ? ktime_get+0x200/0x300 [ 615.229877][T13111] __x64_sys_futex+0x21a/0x4d0 [ 615.229913][T13111] ? __pfx___x64_sys_futex+0x10/0x10 [ 615.229945][T13111] ? xfd_validate_state+0x129/0x190 [ 615.229994][T13111] do_syscall_64+0xc9/0xf80 [ 615.230026][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.230050][T13111] RIP: 0033:0x7f177f79aeb9 [ 615.230068][T13111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.230091][T13111] RSP: 002b:00007ffdf9cb5be8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 615.230114][T13111] RAX: ffffffffffffffda RBX: 000000000009660c RCX: 00007f177f79aeb9 [ 615.230129][T13111] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f177fa15fac [ 615.230144][T13111] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 615.230158][T13111] R10: 00007ffdf9cb5cf0 R11: 0000000000000246 R12: 00007ffdf9cb5d10 [ 615.230173][T13111] R13: 00007f177fa15fac R14: 000000000009663e R15: 00007ffdf9cb5cf0 [ 615.230203][T13111] [ 615.848825][T13128] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 616.648395][T13142] sp0: Synchronizing with TNC [ 617.277825][T13122] kexec: Could not allocate control_code_buffer [ 617.613333][T13153] FAULT_INJECTION: forcing a failure. [ 617.613333][T13153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 617.676226][T13153] CPU: 0 UID: 0 PID: 13153 Comm: syz.2.1464 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.676283][T13153] Tainted: [L]=SOFTLOCKUP [ 617.676292][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 617.676307][T13153] Call Trace: [ 617.676315][T13153] [ 617.676324][T13153] dump_stack_lvl+0x100/0x190 [ 617.676366][T13153] should_fail_ex.cold+0x5/0xa [ 617.676404][T13153] ? prepare_alloc_pages+0x16d/0x5f0 [ 617.676447][T13153] should_fail_alloc_page+0xeb/0x140 [ 617.676485][T13153] prepare_alloc_pages+0x1f0/0x5f0 [ 617.676530][T13153] __alloc_frozen_pages_noprof+0x193/0x2410 [ 617.676565][T13153] ? mas_find+0x2dd/0x740 [ 617.676598][T13153] ? validate_mm+0x392/0x4e0 [ 617.676630][T13153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 617.676671][T13153] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 617.676703][T13153] ? __mt_destroy+0xa6/0x390 [ 617.676733][T13153] ? __pfx_uprobe_mmap+0x10/0x10 [ 617.676767][T13153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 617.676793][T13153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 617.676822][T13153] ? policy_nodemask+0xed/0x4f0 [ 617.676861][T13153] alloc_pages_mpol+0x1fb/0x550 [ 617.676898][T13153] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 617.676937][T13153] ? __lock_acquire+0x4a5/0x2630 [ 617.676974][T13153] alloc_pages_noprof+0x131/0x390 [ 617.677012][T13153] pte_alloc_one+0x1e/0x3e0 [ 617.677045][T13153] do_fault+0x8cc/0x1990 [ 617.677089][T13153] __handle_mm_fault+0x1807/0x2b50 [ 617.677121][T13153] ? mt_find+0x45e/0x8e0 [ 617.677154][T13153] ? __pfx___handle_mm_fault+0x10/0x10 [ 617.677180][T13153] ? __pfx_mt_find+0x10/0x10 [ 617.677235][T13153] handle_mm_fault+0x36d/0xa20 [ 617.677268][T13153] __get_user_pages+0xf9c/0x34d0 [ 617.677318][T13153] ? __pfx___get_user_pages+0x10/0x10 [ 617.677371][T13153] populate_vma_page_range+0x267/0x3f0 [ 617.677415][T13153] ? __pfx_populate_vma_page_range+0x10/0x10 [ 617.677456][T13153] ? __pfx_find_vma_intersection+0x10/0x10 [ 617.677495][T13153] ? do_mmap+0x93f/0x12f0 [ 617.677536][T13153] __mm_populate+0x107/0x3a0 [ 617.677560][T13153] ? __pfx___mm_populate+0x10/0x10 [ 617.677603][T13153] ? up_write+0x290/0x4f0 [ 617.677643][T13153] vm_mmap_pgoff+0x37f/0x470 [ 617.677688][T13153] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 617.677725][T13153] ? __fget_files+0x215/0x3d0 [ 617.677757][T13153] ? __fget_files+0x21f/0x3d0 [ 617.677790][T13153] ksys_mmap_pgoff+0x328/0x5b0 [ 617.677832][T13153] __x64_sys_mmap+0x125/0x190 [ 617.677859][T13153] do_syscall_64+0xc9/0xf80 [ 617.677893][T13153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.677919][T13153] RIP: 0033:0x7f177f79aeb9 [ 617.677939][T13153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.677964][T13153] RSP: 002b:00007f17805be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 617.677989][T13153] RAX: ffffffffffffffda RBX: 00007f177fa15fa0 RCX: 00007f177f79aeb9 [ 617.678006][T13153] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 617.678021][T13153] RBP: 00007f177f808c1f R08: 0000000000000003 R09: 0000000000000000 [ 617.678040][T13153] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000000 [ 617.678055][T13153] R13: 00007f177fa16038 R14: 00007f177fa15fa0 R15: 00007ffdf9cb5a88 [ 617.678087][T13153] [ 618.618887][T13129] syz.4.1451 (13129) used greatest stack depth: 19416 bytes left [ 618.813597][T13163] FAULT_INJECTION: forcing a failure. [ 618.813597][T13163] name failslab, interval 1, probability 0, space 0, times 0 [ 618.872955][T13163] CPU: 0 UID: 0 PID: 13163 Comm: syz.0.1458 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.872998][T13163] Tainted: [L]=SOFTLOCKUP [ 618.873007][T13163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 618.873022][T13163] Call Trace: [ 618.873030][T13163] [ 618.873039][T13163] dump_stack_lvl+0x100/0x190 [ 618.873074][T13163] should_fail_ex.cold+0x5/0xa [ 618.873117][T13163] should_failslab+0xc2/0x120 [ 618.873153][T13163] kmem_cache_alloc_noprof+0x83/0x780 [ 618.873195][T13163] ? acpi_ut_create_generic_state+0x61/0xc0 [ 618.873235][T13163] ? acpi_ut_create_generic_state+0x61/0xc0 [ 618.873268][T13163] acpi_ut_create_generic_state+0x61/0xc0 [ 618.873301][T13163] acpi_ps_init_scope+0x3a/0x240 [ 618.873338][T13163] acpi_ds_init_aml_walk+0x1f6/0x680 [ 618.873377][T13163] acpi_ds_call_control_method+0x3a2/0xab0 [ 618.873411][T13163] acpi_ps_parse_aml+0xacd/0x1120 [ 618.873451][T13163] acpi_ps_execute_method+0x5c4/0xe90 [ 618.873494][T13163] acpi_ns_evaluate+0x640/0x1670 [ 618.873540][T13163] acpi_evaluate_object+0x420/0xe00 [ 618.873569][T13163] ? kernfs_fop_read_iter+0x46c/0x610 [ 618.873596][T13163] ? vfs_read+0x825/0xb30 [ 618.873621][T13163] ? ksys_read+0x12a/0x250 [ 618.873652][T13163] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 618.873686][T13163] ? __pfx___might_resched+0x10/0x10 [ 618.873729][T13163] acpi_evaluate_integer+0xdf/0x220 [ 618.873756][T13163] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 618.873793][T13163] ? __pfx_status_show+0x10/0x10 [ 618.873822][T13163] status_show+0xa0/0x120 [ 618.873852][T13163] ? __pfx_status_show+0x10/0x10 [ 618.873890][T13163] dev_attr_show+0x52/0xa0 [ 618.873926][T13163] ? __pfx_dev_attr_show+0x10/0x10 [ 618.873961][T13163] sysfs_kf_seq_show+0x217/0x3a0 [ 618.873998][T13163] seq_read_iter+0x32f/0x1270 [ 618.874036][T13163] kernfs_fop_read_iter+0x46c/0x610 [ 618.874064][T13163] ? rw_verify_area+0xce/0x6d0 [ 618.874087][T13163] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 618.874117][T13163] vfs_read+0x825/0xb30 [ 618.874148][T13163] ? __pfx_vfs_read+0x10/0x10 [ 618.874174][T13163] ? find_held_lock+0x2b/0x80 [ 618.874222][T13163] ksys_read+0x12a/0x250 [ 618.874250][T13163] ? __pfx_ksys_read+0x10/0x10 [ 618.874287][T13163] do_syscall_64+0xc9/0xf80 [ 618.874322][T13163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.874347][T13163] RIP: 0033:0x7f718079aeb9 [ 618.874366][T13163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.874392][T13163] RSP: 002b:00007f7181702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 618.874415][T13163] RAX: ffffffffffffffda RBX: 00007f7180a15fa0 RCX: 00007f718079aeb9 [ 618.874432][T13163] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000007 [ 618.874448][T13163] RBP: 00007f7180808c1f R08: 0000000000000000 R09: 0000000000000000 [ 618.874463][T13163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.874478][T13163] R13: 00007f7180a16038 R14: 00007f7180a15fa0 R15: 00007fff6910fdd8 [ 618.874510][T13163] [ 618.874688][T13163] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 619.890402][T13153] Process accounting resumed [ 620.737262][T13188] program syz.4.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.290228][T13198] FAULT_INJECTION: forcing a failure. [ 621.290228][T13198] name failslab, interval 1, probability 0, space 0, times 0 [ 621.360686][T13198] CPU: 0 UID: 0 PID: 13198 Comm: syz.3.1463 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.360725][T13198] Tainted: [L]=SOFTLOCKUP [ 621.360733][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 621.360747][T13198] Call Trace: [ 621.360755][T13198] [ 621.360764][T13198] dump_stack_lvl+0x100/0x190 [ 621.360798][T13198] should_fail_ex.cold+0x5/0xa [ 621.360838][T13198] should_failslab+0xc2/0x120 [ 621.360873][T13198] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 621.360905][T13198] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 621.360945][T13198] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 621.360994][T13198] ? zswap_store+0xc42/0x29d0 [ 621.361020][T13198] ? zswap_store+0xc42/0x29d0 [ 621.361041][T13198] zswap_store+0xc42/0x29d0 [ 621.361067][T13198] ? __pfx___up_read+0x10/0x10 [ 621.361102][T13198] ? rmap_walk_anon+0x561/0x870 [ 621.361129][T13198] ? __pfx_zswap_store+0x10/0x10 [ 621.361151][T13198] ? folio_free_swap+0x277/0x850 [ 621.361183][T13198] ? folio_free_swap+0x277/0x850 [ 621.361218][T13198] ? do_raw_spin_unlock+0x145/0x1e0 [ 621.361256][T13198] ? _raw_spin_unlock+0x28/0x50 [ 621.361280][T13198] ? folio_free_swap+0x39/0x850 [ 621.361312][T13198] ? try_to_unmap+0xce/0x1c0 [ 621.361337][T13198] ? __pfx_try_to_unmap+0x10/0x10 [ 621.361366][T13198] swap_writeout+0x49d/0x12b0 [ 621.361396][T13198] shrink_folio_list+0x5459/0x6000 [ 621.361434][T13198] ? __pfx_shrink_folio_list+0x10/0x10 [ 621.361459][T13198] ? mark_held_locks+0x40/0x70 [ 621.361492][T13198] ? __lock_acquire+0x4a5/0x2630 [ 621.361527][T13198] ? debug_check_no_obj_freed+0x31f/0x630 [ 621.361568][T13198] ? lock_acquire+0x17c/0x330 [ 621.361601][T13198] ? __lock_acquire+0x4a5/0x2630 [ 621.361663][T13198] reclaim_folio_list+0xdc/0x5a0 [ 621.361694][T13198] ? __pfx_reclaim_folio_list+0x10/0x10 [ 621.361732][T13198] ? lru_gen_update_size+0x431/0xe40 [ 621.361764][T13198] ? lru_gen_del_folio+0x382/0x5f0 [ 621.361790][T13198] reclaim_pages+0x428/0x5e0 [ 621.361821][T13198] ? __pfx_reclaim_pages+0x10/0x10 [ 621.361847][T13198] ? find_held_lock+0x2b/0x80 [ 621.361870][T13198] ? madvise_cold_or_pageout_pte_range+0xb49/0x2710 [ 621.361916][T13198] madvise_cold_or_pageout_pte_range+0x1635/0x2710 [ 621.361972][T13198] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 621.362024][T13198] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 621.362065][T13198] walk_pgd_range+0xc04/0x1eb0 [ 621.362101][T13198] ? do_raw_spin_unlock+0x145/0x1e0 [ 621.362150][T13198] ? __pfx_walk_pgd_range+0x10/0x10 [ 621.362182][T13198] ? folios_put_refs+0x66d/0x840 [ 621.362218][T13198] __walk_page_range+0x163/0x820 [ 621.362262][T13198] walk_page_range_vma_unsafe+0x23f/0x960 [ 621.362300][T13198] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 621.362338][T13198] ? find_held_lock+0x2b/0x80 [ 621.362360][T13198] ? mlock_drain_local+0x254/0x4e0 [ 621.362388][T13198] ? mlock_drain_local+0x254/0x4e0 [ 621.362422][T13198] walk_page_range_vma+0x63/0x90 [ 621.362456][T13198] madvise_pageout+0x259/0x540 [ 621.362492][T13198] ? __pfx_madvise_pageout+0x10/0x10 [ 621.362527][T13198] ? __lock_acquire+0x4a5/0x2630 [ 621.362568][T13198] ? mas_next_slot+0x1003/0x18b0 [ 621.362606][T13198] madvise_vma_behavior+0x3d8/0x2a40 [ 621.362649][T13198] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 621.362690][T13198] ? __pfx_mt_find+0x10/0x10 [ 621.362727][T13198] ? find_vma_prev+0xd8/0x150 [ 621.362770][T13198] ? find_vma+0xbf/0x140 [ 621.362802][T13198] ? __pfx_find_vma+0x10/0x10 [ 621.362842][T13198] madvise_walk_vmas+0x2fe/0xa90 [ 621.362884][T13198] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 621.362930][T13198] madvise_do_behavior+0x1ea/0x510 [ 621.362977][T13198] ? __pfx_madvise_do_behavior+0x10/0x10 [ 621.363016][T13198] ? down_read+0x13b/0x460 [ 621.363062][T13198] do_madvise+0x195/0x240 [ 621.363098][T13198] ? __pfx_do_madvise+0x10/0x10 [ 621.363135][T13198] ? do_futex+0x192/0x350 [ 621.363186][T13198] ? xfd_validate_state+0x129/0x190 [ 621.363230][T13198] __x64_sys_madvise+0xa9/0x110 [ 621.363268][T13198] ? lockdep_hardirqs_on+0x78/0x100 [ 621.363296][T13198] do_syscall_64+0xc9/0xf80 [ 621.363327][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.363352][T13198] RIP: 0033:0x7fa40479aeb9 [ 621.363370][T13198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.363393][T13198] RSP: 002b:00007fa4029f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 621.363416][T13198] RAX: ffffffffffffffda RBX: 00007fa404a15fa0 RCX: 00007fa40479aeb9 [ 621.363432][T13198] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 621.363446][T13198] RBP: 00007fa404808c1f R08: 0000000000000000 R09: 0000000000000000 [ 621.363461][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.363474][T13198] R13: 00007fa404a16038 R14: 00007fa404a15fa0 R15: 00007fffc0e621c8 [ 621.363504][T13198] [ 622.985764][T13201] Process accounting paused [ 623.309766][T13216] usb usb16: usbfs: process 13216 (syz.0.1477) did not claim interface 0 before use [ 623.722661][T13223] ptp ptp0: new virtual clock ptp1 [ 623.769400][T13223] ptp ptp0: guarantee physical clock free running [ 623.796580][T13228] ptp ptp0: delete virtual clock ptp1 [ 623.973037][T13228] ptp ptp0: only physical clock in use now [ 625.497902][T13250] nbd: must specify at least one socket [ 625.880274][T13258] HfR: entered promiscuous mode [ 626.400025][T13257] netlink: 'syz.0.1481': attribute type 2 has an invalid length. [ 626.981624][T13273] usb usb16: usbfs: process 13273 (syz.3.1485) did not claim interface 0 before use [ 627.259651][T13268] vhci_hcd: not connected 4 [ 627.566343][T13288] random: crng reseeded on system resumption [ 630.168984][T13319] usb usb16: usbfs: process 13319 (syz.0.1495) did not claim interface 0 before use [ 630.743284][T13338] netlink: 'syz.0.1497': attribute type 1 has an invalid length. [ 630.796508][T13338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 632.553914][T13360] Invalid ELF header magic: != ELF [ 632.793463][T13071] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.851825][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.858435][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.895157][T13377] ptp ptp0: new virtual clock ptp1 [ 633.972188][T13377] ptp ptp0: guarantee physical clock free running [ 634.044317][T13381] ptp ptp0: delete virtual clock ptp1 [ 634.086764][T13381] ptp ptp0: only physical clock in use now [ 634.558560][T13380] vhci_hcd: not connected 4 [ 635.942354][T13408] FAULT_INJECTION: forcing a failure. [ 635.942354][T13408] name failslab, interval 1, probability 0, space 0, times 0 [ 636.026471][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.4.1514 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.026515][T13408] Tainted: [L]=SOFTLOCKUP [ 636.026524][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 636.026540][T13408] Call Trace: [ 636.026548][T13408] [ 636.026557][T13408] dump_stack_lvl+0x100/0x190 [ 636.026594][T13408] should_fail_ex.cold+0x5/0xa [ 636.026637][T13408] should_failslab+0xc2/0x120 [ 636.026681][T13408] kmem_cache_alloc_noprof+0x83/0x780 [ 636.026717][T13408] ? security_file_alloc+0x34/0x2c0 [ 636.026765][T13408] ? security_file_alloc+0x34/0x2c0 [ 636.026806][T13408] security_file_alloc+0x34/0x2c0 [ 636.026848][T13408] init_file+0x93/0x4c0 [ 636.026885][T13408] alloc_empty_file+0x73/0x1c0 [ 636.026925][T13408] path_openat+0xe8/0x3120 [ 636.026954][T13408] ? getname_flags+0x93/0xf0 [ 636.026978][T13408] ? do_sys_openat2+0xc5/0x220 [ 636.027017][T13408] ? __x64_sys_openat+0x12d/0x210 [ 636.027059][T13408] ? do_syscall_64+0xc9/0xf80 [ 636.027090][T13408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.027124][T13408] ? __pfx_path_openat+0x10/0x10 [ 636.027166][T13408] do_filp_open+0x1f7/0x420 [ 636.027199][T13408] ? __pfx_do_filp_open+0x10/0x10 [ 636.027251][T13408] ? _raw_spin_unlock+0x28/0x50 [ 636.027276][T13408] ? alloc_fd+0x476/0x790 [ 636.027314][T13408] do_sys_openat2+0x12e/0x220 [ 636.027355][T13408] ? __pfx_do_sys_openat2+0x10/0x10 [ 636.027406][T13408] __x64_sys_openat+0x12d/0x210 [ 636.027449][T13408] ? __pfx___x64_sys_openat+0x10/0x10 [ 636.027489][T13408] ? xfd_validate_state+0x129/0x190 [ 636.027541][T13408] do_syscall_64+0xc9/0xf80 [ 636.027575][T13408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.027601][T13408] RIP: 0033:0x7f068059aeb9 [ 636.027622][T13408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.027647][T13408] RSP: 002b:00007f0681540028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 636.027701][T13408] RAX: ffffffffffffffda RBX: 00007f0680815fa0 RCX: 00007f068059aeb9 [ 636.027718][T13408] RDX: 000000000014f602 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 636.027735][T13408] RBP: 00007f0680608c1f R08: 0000000000000000 R09: 0000000000000000 [ 636.027751][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.027767][T13408] R13: 00007f0680816038 R14: 00007f0680815fa0 R15: 00007fff7d5d5b88 [ 636.027799][T13408] [ 638.993401][T13447] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.600183][T13461] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1525'. [ 641.248440][T13480] binder: BINDER_SET_CONTEXT_MGR already set [ 641.269674][T13480] binder: 13479:13480 ioctl 4018620d 9 returned -16 [ 642.647284][T13499] usb usb16: usbfs: process 13499 (syz.4.1533) did not claim interface 0 before use [ 643.493296][T13510] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 644.497131][T11097] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 644.678357][T11097] CPU: 0 UID: 0 PID: 11097 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 644.678399][T11097] Tainted: [L]=SOFTLOCKUP [ 644.678407][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 644.678421][T11097] Call Trace: [ 644.678430][T11097] [ 644.678439][T11097] dump_stack_lvl+0x100/0x190 [ 644.678473][T11097] dump_header+0xfb/0x606 [ 644.678498][T11097] oom_kill_process.cold+0xd/0x321 [ 644.678525][T11097] out_of_memory+0x340/0x14f0 [ 644.678563][T11097] ? __pfx_out_of_memory+0x10/0x10 [ 644.678601][T11097] mem_cgroup_out_of_memory+0xc6/0x130 [ 644.678627][T11097] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 644.678651][T11097] ? find_held_lock+0x2b/0x80 [ 644.678681][T11097] ? do_raw_spin_unlock+0x145/0x1e0 [ 644.678719][T11097] ? _raw_spin_unlock+0x28/0x50 [ 644.678746][T11097] try_charge_memcg+0x652/0xc90 [ 644.678785][T11097] ? __pfx_try_charge_memcg+0x10/0x10 [ 644.678824][T11097] ? find_held_lock+0x2b/0x80 [ 644.678846][T11097] ? rcu_read_unlock+0x17/0x60 [ 644.678880][T11097] ? rcu_read_unlock+0x17/0x60 [ 644.678917][T11097] charge_memcg+0xa6/0x280 [ 644.678949][T11097] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 644.678991][T11097] __read_swap_cache_async+0x449/0x610 [ 644.679024][T11097] ? __pfx___read_swap_cache_async+0x10/0x10 [ 644.679052][T11097] ? rcu_is_watching+0x12/0xc0 [ 644.679082][T11097] ? finish_task_switch.isra.0+0x204/0xb70 [ 644.679110][T11097] ? lockdep_hardirqs_on+0x78/0x100 [ 644.679138][T11097] ? finish_task_switch.isra.0+0x204/0xb70 [ 644.679170][T11097] swap_cluster_readahead+0x414/0x770 [ 644.679196][T11097] ? __schedule+0xff6/0x5e10 [ 644.679226][T11097] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 644.679253][T11097] ? rcu_is_watching+0x12/0xc0 [ 644.679278][T11097] ? __update_load_avg_se+0x5c7/0xe80 [ 644.679314][T11097] ? update_load_avg+0x234/0x2090 [ 644.679348][T11097] ? get_vma_policy+0x23f/0x3b0 [ 644.679387][T11097] swapin_readahead+0x14b/0x12e0 [ 644.679422][T11097] ? __pfx_swapin_readahead+0x10/0x10 [ 644.679448][T11097] ? find_held_lock+0x2b/0x80 [ 644.679471][T11097] ? swap_cache_get_folio+0x272/0x920 [ 644.679500][T11097] ? swap_cache_get_folio+0x272/0x920 [ 644.679523][T11097] ? swap_cache_get_folio+0x1f/0x920 [ 644.679545][T11097] ? swap_cache_get_folio+0x2a2/0x920 [ 644.679572][T11097] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 644.679595][T11097] ? __pfx_get_swap_device+0x10/0x10 [ 644.679634][T11097] ? do_swap_page+0x9ba/0x6810 [ 644.679655][T11097] do_swap_page+0x9ba/0x6810 [ 644.679684][T11097] ? __lock_acquire+0x4a5/0x2630 [ 644.679722][T11097] ? __pfx_do_swap_page+0x10/0x10 [ 644.679765][T11097] ? __pfx_default_wake_function+0x10/0x10 [ 644.679793][T11097] ? rcu_is_watching+0x12/0xc0 [ 644.679814][T11097] ? __free_object+0x2a8/0x400 [ 644.679845][T11097] ? rcu_is_watching+0x12/0xc0 [ 644.679868][T11097] ? ___pte_offset_map+0x179/0x310 [ 644.679906][T11097] __handle_mm_fault+0x18b9/0x2b50 [ 644.679938][T11097] ? reacquire_held_locks+0xce/0x1e0 [ 644.679970][T11097] ? __pfx___handle_mm_fault+0x10/0x10 [ 644.680000][T11097] ? lock_vma_under_rcu+0x17c/0x5a0 [ 644.680033][T11097] ? get_timespec64+0x136/0x1b0 [ 644.680073][T11097] handle_mm_fault+0x36d/0xa20 [ 644.680104][T11097] do_user_addr_fault+0x5a3/0x12f0 [ 644.680139][T11097] exc_page_fault+0x6f/0xd0 [ 644.680173][T11097] asm_exc_page_fault+0x26/0x30 [ 644.680196][T11097] RIP: 0033:0x7f068055b78e [ 644.680215][T11097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 644.680237][T11097] RSP: 002b:00007fff7d5d5e68 EFLAGS: 00010246 [ 644.680256][T11097] RAX: 0000000000000000 RBX: 000055555b44e500 RCX: 00007f068055b78e [ 644.680271][T11097] RDX: 00007fff7d5d5ec0 RSI: 0000000000000000 RDI: 0000000000000000 [ 644.680285][T11097] RBP: 00007fff7d5d5f2c R08: 0000000000000000 R09: 0000000000000000 [ 644.680299][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 644.680313][T11097] R13: 00000000000927c0 R14: 000000000009d5d8 R15: 00007fff7d5d5f80 [ 644.680343][T11097] [ 644.680351][T11097] memory: usage 3072kB, limit 3072kB, failcnt 13672 [ 645.802385][T13069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.842330][T13069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.923880][T13536] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.003065][T13536] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.036449][T13536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.144870][T11097] memory+swap: usage 40224kB, limit 9007199254740988kB, failcnt 0 [ 646.169972][T11097] kmem: usage 2952kB, limit 9007199254740988kB, failcnt 0 [ 646.177125][T11097] Memory cgroup stats for /syz4: [ 646.177546][T11097] cache 0 [ 646.219918][T11097] rss 0 [ 646.222727][T11097] rss_huge 0 [ 646.225930][T11097] shmem 0 [ 646.228875][T11097] mapped_file 0 [ 646.311818][T11097] dirty 0 [ 646.314803][T11097] writeback 0 [ 646.318136][T11097] workingset_refault_anon 4311 [ 646.361695][T11097] workingset_refault_file 1308 [ 646.366527][T11097] swap 38043648 [ 646.398780][T11097] swapcached 122880 [ 646.422334][T11097] pgpgin 63478 [ 646.438045][T11097] pgpgout 82355 [ 646.450433][T11097] pgfault 46560 [ 646.453973][T11097] pgmajfault 1590 [ 646.480424][T11097] inactive_anon 122880 [ 646.484569][T11097] active_anon 0 [ 646.522110][T11097] inactive_file 0 [ 646.525793][T11097] active_file 0 [ 646.558774][T11097] unevictable 0 [ 646.562452][T11097] hierarchical_memory_limit 3145728 [ 646.567718][T11097] hierarchical_memsw_limit 9223372036854771712 [ 646.642079][T11097] total_cache 0 [ 646.645587][T11097] total_rss 0 [ 646.671172][T11097] total_rss_huge 0 [ 646.683034][T13529] chnl_net:caif_netlink_parms(): no params data found [ 646.695786][T11097] total_shmem 0 [ 646.717105][T11097] total_mapped_file 0 [ 646.721143][T11097] total_dirty 0 [ 646.756028][T11097] total_writeback 0 [ 646.795578][T11097] total_workingset_refault_anon 4311 [ 646.826502][T11097] total_workingset_refault_file 1308 [ 646.831837][T11097] total_swap 38043648 [ 646.835821][T11097] total_swapcached 122880 [ 646.895672][T11097] total_pgpgin 63478 [ 646.921524][T11097] total_pgpgout 82355 [ 646.955913][T11097] total_pgfault 46560 [ 646.980376][T11097] total_pgmajfault 1590 [ 646.984578][T11097] total_inactive_anon 122880 [ 647.033172][T11097] total_active_anon 0 [ 647.045667][T11097] total_inactive_file 0 [ 647.061643][T11097] total_active_file 0 [ 647.086348][T11097] total_unevictable 0 [ 647.090468][T11097] anon_cost 0 [ 647.093776][T11097] file_cost 0 [ 647.120295][T13529] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.141508][T11097] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1490,pid=13347,uid=0 [ 647.185470][T13529] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.221430][T13529] bridge_slave_0: entered allmulticast mode [ 647.231787][T11097] Memory cgroup out of memory: Killed process 13347 (syz.4.1490) total-vm:110732kB, anon-rss:3220kB, file-rss:46584kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:1000 [ 647.265502][T13529] bridge_slave_0: entered promiscuous mode [ 647.288841][T13529] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.322841][T13529] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.356590][T13529] bridge_slave_1: entered allmulticast mode [ 647.385534][T13529] bridge_slave_1: entered promiscuous mode [ 647.537436][T13529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.593860][T13529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.784051][T13529] team0: Port device team_slave_0 added [ 647.978359][T13529] team0: Port device team_slave_1 added [ 648.160578][T13529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.167638][T13529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.212762][T13536] Bluetooth: hci2: command tx timeout [ 648.342853][T13529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.399119][T13529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.406119][T13529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.547857][T13529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.635932][T13578] usb usb16: usbfs: process 13578 (syz.4.1546) did not claim interface 0 before use [ 648.963897][T13529] hsr_slave_0: entered promiscuous mode [ 649.011304][T13529] hsr_slave_1: entered promiscuous mode [ 649.038229][T13529] debugfs: 'hsr0' already exists in 'hsr' [ 649.044004][T13529] Cannot create hsr debugfs directory [ 650.143582][T13590] Process accounting paused [ 650.239860][T13536] Bluetooth: hci2: command tx timeout [ 650.513411][T13593] FAULT_INJECTION: forcing a failure. [ 650.513411][T13593] name failslab, interval 1, probability 0, space 0, times 0 [ 650.564762][T13593] CPU: 0 UID: 0 PID: 13593 Comm: syz.2.1549 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.564801][T13593] Tainted: [L]=SOFTLOCKUP [ 650.564809][T13593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 650.564824][T13593] Call Trace: [ 650.564831][T13593] [ 650.564840][T13593] dump_stack_lvl+0x100/0x190 [ 650.564873][T13593] should_fail_ex.cold+0x5/0xa [ 650.564913][T13593] should_failslab+0xc2/0x120 [ 650.564947][T13593] ? tomoyo_encode2+0xfb/0x3c0 [ 650.564969][T13593] __kmalloc_noprof+0xf6/0x9c0 [ 650.565001][T13593] ? tomoyo_encode2+0xfb/0x3c0 [ 650.565022][T13593] tomoyo_encode2+0xfb/0x3c0 [ 650.565048][T13593] tomoyo_encode+0x29/0x50 [ 650.565069][T13593] tomoyo_realpath_from_path+0x18c/0x690 [ 650.565100][T13593] tomoyo_path_number_perm+0x23c/0x580 [ 650.565133][T13593] ? tomoyo_path_number_perm+0x22e/0x580 [ 650.565170][T13593] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 650.565242][T13593] ? find_held_lock+0x2b/0x80 [ 650.565266][T13593] ? hook_file_ioctl_common+0x146/0x410 [ 650.565301][T13593] ? __fget_files+0x215/0x3d0 [ 650.565339][T13593] ? __fget_files+0x21f/0x3d0 [ 650.565369][T13593] security_file_ioctl+0xd3/0x230 [ 650.565407][T13593] __x64_sys_ioctl+0xb7/0x210 [ 650.565448][T13593] do_syscall_64+0xc9/0xf80 [ 650.565480][T13593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.565504][T13593] RIP: 0033:0x7f177f79aeb9 [ 650.565522][T13593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.565545][T13593] RSP: 002b:00007f17805be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.565568][T13593] RAX: ffffffffffffffda RBX: 00007f177fa15fa0 RCX: 00007f177f79aeb9 [ 650.565584][T13593] RDX: 0000200000000000 RSI: 000000008008551d RDI: 0000000000000004 [ 650.565599][T13593] RBP: 00007f17805be090 R08: 0000000000000000 R09: 0000000000000000 [ 650.565613][T13593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.565627][T13593] R13: 00007f177fa16038 R14: 00007f177fa15fa0 R15: 00007ffdf9cb5a88 [ 650.565657][T13593] [ 650.565676][T13593] ERROR: Out of memory at tomoyo_realpath_from_path. [ 650.995142][T13347] syz.4.1490 (13347) used greatest stack depth: 18624 bytes left [ 651.511561][T13529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 651.553237][T13598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 651.572615][T13529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 651.726039][T13529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 651.797485][T13529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 652.314470][T13095] Bluetooth: hci2: command tx timeout [ 652.767772][T13529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.878475][T13529] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.980732][T13274] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.987973][T13274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.051798][T13274] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.059122][T13274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.417824][T13577] Process accounting resumed [ 653.858339][T13636] FAULT_INJECTION: forcing a failure. [ 653.858339][T13636] name failslab, interval 1, probability 0, space 0, times 0 [ 653.918781][T13529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.978349][T13636] CPU: 0 UID: 0 PID: 13636 Comm: syz.0.1557 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.978391][T13636] Tainted: [L]=SOFTLOCKUP [ 653.978399][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 653.978413][T13636] Call Trace: [ 653.978422][T13636] [ 653.978430][T13636] dump_stack_lvl+0x100/0x190 [ 653.978465][T13636] should_fail_ex.cold+0x5/0xa [ 653.978505][T13636] should_failslab+0xc2/0x120 [ 653.978543][T13636] ? parse_usbdevfs_streams+0xfe/0x510 [ 653.978567][T13636] __kmalloc_noprof+0xf6/0x9c0 [ 653.978591][T13636] ? __might_fault+0xc5/0x140 [ 653.978627][T13636] ? parse_usbdevfs_streams+0xfe/0x510 [ 653.978650][T13636] parse_usbdevfs_streams+0xfe/0x510 [ 653.978675][T13636] ? find_held_lock+0x2b/0x80 [ 653.978699][T13636] ? tomoyo_path_number_perm+0x28f/0x580 [ 653.978745][T13636] usbdev_ioctl+0xece/0x3aa0 [ 653.978775][T13636] ? __pfx_usbdev_ioctl+0x10/0x10 [ 653.978807][T13636] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 653.978836][T13636] ? do_vfs_ioctl+0x226/0x13e0 [ 653.978876][T13636] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 653.978924][T13636] ? find_held_lock+0x2b/0x80 [ 653.978946][T13636] ? hook_file_ioctl_common+0x146/0x410 [ 653.978990][T13636] ? __fget_files+0x21f/0x3d0 [ 653.979021][T13636] ? __pfx_usbdev_ioctl+0x10/0x10 [ 653.979048][T13636] __x64_sys_ioctl+0x18e/0x210 [ 653.979089][T13636] do_syscall_64+0xc9/0xf80 [ 653.979122][T13636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.979146][T13636] RIP: 0033:0x7f718079aeb9 [ 653.979165][T13636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.979188][T13636] RSP: 002b:00007f7181702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.979222][T13636] RAX: ffffffffffffffda RBX: 00007f7180a15fa0 RCX: 00007f718079aeb9 [ 653.979238][T13636] RDX: 0000200000000000 RSI: 000000008008551d RDI: 0000000000000004 [ 653.979253][T13636] RBP: 00007f7181702090 R08: 0000000000000000 R09: 0000000000000000 [ 653.979268][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.979282][T13636] R13: 00007f7180a16038 R14: 00007f7180a15fa0 R15: 00007fff6910fdd8 [ 653.979313][T13636] [ 654.537173][T13536] Bluetooth: hci2: command tx timeout [ 655.581574][T13529] veth0_vlan: entered promiscuous mode [ 655.641106][T13529] veth1_vlan: entered promiscuous mode [ 655.804752][T13529] veth0_macvtap: entered promiscuous mode [ 655.851965][T13529] veth1_macvtap: entered promiscuous mode [ 655.951238][T13529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.971724][T13669] can: request_module (can-proto-0) failed. [ 656.016246][T13529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.079303][T13274] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.112152][T13274] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.180893][T13274] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.229962][T13274] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.578374][T13071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.627513][T13071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.810498][T13068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.829113][T13068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.596463][T13686] usb usb16: usbfs: process 13686 (syz.2.1569) did not claim interface 0 before use [ 658.032819][T13679] binder: 13677:13679 ioctl c0306201 200000000000 returned -11 [ 658.666847][T13697] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 658.702898][T13697] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 658.721014][T13697] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 658.759005][T13697] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 658.794751][T13697] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 658.808739][T13697] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 658.859103][T13697] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 659.156446][T13715] FAULT_INJECTION: forcing a failure. [ 659.156446][T13715] name failslab, interval 1, probability 0, space 0, times 0 [ 659.242676][T13715] CPU: 0 UID: 0 PID: 13715 Comm: syz.0.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.242724][T13715] Tainted: [L]=SOFTLOCKUP [ 659.242732][T13715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 659.242758][T13715] Call Trace: [ 659.242766][T13715] [ 659.242780][T13715] dump_stack_lvl+0x100/0x190 [ 659.242815][T13715] should_fail_ex.cold+0x5/0xa [ 659.242857][T13715] should_failslab+0xc2/0x120 [ 659.242893][T13715] kmem_cache_alloc_noprof+0x83/0x780 [ 659.242926][T13715] ? d_instantiate+0x90/0xb0 [ 659.242964][T13715] ? alloc_empty_file+0x55/0x1c0 [ 659.243006][T13715] ? alloc_empty_file+0x55/0x1c0 [ 659.243047][T13715] alloc_empty_file+0x55/0x1c0 [ 659.243089][T13715] alloc_file_pseudo+0x13a/0x230 [ 659.243128][T13715] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 659.243167][T13715] ? alloc_fd+0x476/0x790 [ 659.243200][T13715] sock_alloc_file+0x50/0x210 [ 659.243248][T13715] __sys_socket+0x1c0/0x260 [ 659.243276][T13715] ? fput+0x79/0x100 [ 659.243309][T13715] ? __pfx___sys_socket+0x10/0x10 [ 659.243338][T13715] ? xfd_validate_state+0x129/0x190 [ 659.243391][T13715] __x64_sys_socket+0x72/0xb0 [ 659.243420][T13715] ? lockdep_hardirqs_on+0x78/0x100 [ 659.243450][T13715] do_syscall_64+0xc9/0xf80 [ 659.243491][T13715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.243517][T13715] RIP: 0033:0x7f718079aeb9 [ 659.243536][T13715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.243561][T13715] RSP: 002b:00007f7181702028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 659.243584][T13715] RAX: ffffffffffffffda RBX: 00007f7180a15fa0 RCX: 00007f718079aeb9 [ 659.243601][T13715] RDX: 00000000ffffffff RSI: 0000000000000002 RDI: 000000000000002a [ 659.243623][T13715] RBP: 00007f7180808c1f R08: 0000000000000000 R09: 0000000000000000 [ 659.243639][T13715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.243655][T13715] R13: 00007f7180a16038 R14: 00007f7180a15fa0 R15: 00007fff6910fdd8 [ 659.243686][T13715] [ 660.062099][T13095] Bluetooth: hci0: command 0x0c1a tx timeout [ 660.147346][ T30] audit: type=1800 audit(1770498003.988:13): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1581" name="trace_pipe" dev="tracefs" ino=184 res=0 errno=0 [ 660.744966][T13536] Bluetooth: hci3: command 0x0c1a tx timeout [ 660.751074][T13095] Bluetooth: hci1: command 0x0c1a tx timeout [ 660.824600][T13095] Bluetooth: hci2: command 0x0c1a tx timeout [ 660.830718][T13536] Bluetooth: hci4: command 0x0c1a tx timeout [ 662.893458][T13095] Bluetooth: hci2: command 0x0c1a tx timeout [ 663.791142][T13793] random: crng reseeded on system resumption [ 663.873260][T13793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1594'. [ 663.920336][T13793] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1594'. [ 663.933850][T13797] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 664.346178][T13805] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1600'. [ 664.566179][T13809] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 664.605032][T13812] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 664.785894][T13818] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1601'. [ 664.962694][T13095] Bluetooth: hci2: command 0x0c1a tx timeout [ 665.404121][T13827] netlink: 'syz.2.1604': attribute type 8 has an invalid length. [ 665.439259][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 665.498149][T13827] nbd: must specify at least one socket [ 665.552132][T13095] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 665.561274][T13095] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 665.932034][T13840] blktrace: Concurrent blktraces are not allowed on loop2 [ 668.467517][T13095] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 670.207079][ T30] audit: type=1800 audit(1770563551.122:14): pid=13898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1615" name="features" dev="configfs" ino=57053 res=0 errno=0 [ 671.823724][T13920] FAULT_INJECTION: forcing a failure. [ 671.823724][T13920] name failslab, interval 1, probability 0, space 0, times 0 [ 671.942397][T13920] CPU: 0 UID: 0 PID: 13920 Comm: syz.5.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 671.942438][T13920] Tainted: [L]=SOFTLOCKUP [ 671.942447][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 671.942463][T13920] Call Trace: [ 671.942471][T13920] [ 671.942480][T13920] dump_stack_lvl+0x100/0x190 [ 671.942514][T13920] should_fail_ex.cold+0x5/0xa [ 671.942556][T13920] should_failslab+0xc2/0x120 [ 671.942593][T13920] kmem_cache_alloc_noprof+0x83/0x780 [ 671.942626][T13920] ? __proc_create+0xc2/0x8c0 [ 671.942665][T13920] ? __proc_create+0x2cb/0x8c0 [ 671.942710][T13920] ? __proc_create+0x2cb/0x8c0 [ 671.942748][T13920] __proc_create+0x2cb/0x8c0 [ 671.942789][T13920] ? __pfx___proc_create+0x10/0x10 [ 671.942829][T13920] ? debug_object_activate+0x331/0x490 [ 671.942871][T13920] proc_create_reg+0x75/0x170 [ 671.942896][T13920] proc_create_data+0x86/0x110 [ 671.942919][T13920] ? __pfx_proc_create_data+0x10/0x10 [ 671.942946][T13920] ? net_generic+0xf4/0x2a0 [ 671.942981][T13920] nfsd_net_init+0x11b/0x3d0 [ 671.943020][T13920] ? __pfx_nfsd_net_init+0x10/0x10 [ 671.943058][T13920] ops_init+0x1e2/0x5f0 [ 671.943101][T13920] setup_net+0x118/0x3a0 [ 671.943123][T13920] ? __pfx_setup_net+0x10/0x10 [ 671.943143][T13920] ? lockdep_init_map_type+0x5c/0x250 [ 671.943180][T13920] ? mutex_init_lockep+0x110/0x150 [ 671.943230][T13920] copy_net_ns+0x46f/0x7c0 [ 671.943258][T13920] create_new_namespaces+0x3ea/0xab0 [ 671.943332][T13920] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 671.943365][T13920] ksys_unshare+0x455/0xab0 [ 671.943404][T13920] ? __pfx_ksys_unshare+0x10/0x10 [ 671.943444][T13920] ? xfd_validate_state+0x129/0x190 [ 671.943493][T13920] __x64_sys_unshare+0x31/0x40 [ 671.943530][T13920] do_syscall_64+0xc9/0xf80 [ 671.943563][T13920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.943588][T13920] RIP: 0033:0x7f2a7619aeb9 [ 671.943608][T13920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.943633][T13920] RSP: 002b:00007f2a770c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 671.943657][T13920] RAX: ffffffffffffffda RBX: 00007f2a76415fa0 RCX: 00007f2a7619aeb9 [ 671.943674][T13920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 671.943689][T13920] RBP: 00007f2a76208c1f R08: 0000000000000000 R09: 0000000000000000 [ 671.943705][T13920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.943719][T13920] R13: 00007f2a76416038 R14: 00007f2a76415fa0 R15: 00007ffd2d81b5a8 [ 671.943751][T13920] [ 673.909579][T13931] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 674.319009][T13938] ubi0: attaching mtd1 [ 674.361005][T13938] ubi0: scanning is finished [ 674.423235][T13938] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 674.815715][T13938] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 674.990146][T13095] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 676.844684][T13933] syz.4.1624 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 676.945642][T13933] CPU: 0 UID: 0 PID: 13933 Comm: syz.4.1624 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.945680][T13933] Tainted: [L]=SOFTLOCKUP [ 676.945688][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 676.945702][T13933] Call Trace: [ 676.945711][T13933] [ 676.945719][T13933] dump_stack_lvl+0x100/0x190 [ 676.945753][T13933] dump_header+0xfb/0x606 [ 676.945777][T13933] oom_kill_process.cold+0xd/0x321 [ 676.945809][T13933] out_of_memory+0x340/0x14f0 [ 676.945846][T13933] ? __pfx_out_of_memory+0x10/0x10 [ 676.945885][T13933] mem_cgroup_out_of_memory+0xc6/0x130 [ 676.945911][T13933] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 676.945935][T13933] ? find_held_lock+0x2b/0x80 [ 676.945964][T13933] ? do_raw_spin_unlock+0x145/0x1e0 [ 676.946001][T13933] ? _raw_spin_unlock+0x28/0x50 [ 676.946028][T13933] try_charge_memcg+0x652/0xc90 [ 676.946069][T13933] ? __pfx_try_charge_memcg+0x10/0x10 [ 676.946109][T13933] ? find_held_lock+0x2b/0x80 [ 676.946132][T13933] ? rcu_read_unlock+0x17/0x60 [ 676.946166][T13933] ? rcu_read_unlock+0x17/0x60 [ 676.946205][T13933] charge_memcg+0xa6/0x280 [ 676.946237][T13933] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 676.946279][T13933] __read_swap_cache_async+0x449/0x610 [ 676.946310][T13933] ? __pfx___read_swap_cache_async+0x10/0x10 [ 676.946336][T13933] ? mlock_drain_local+0x254/0x4e0 [ 676.946364][T13933] ? mlock_drain_local+0x254/0x4e0 [ 676.946401][T13933] swap_cluster_readahead+0x414/0x770 [ 676.946434][T13933] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 676.946463][T13933] ? __lock_acquire+0x4a5/0x2630 [ 676.946493][T13933] ? __lock_acquire+0x4a5/0x2630 [ 676.946536][T13933] ? get_vma_policy+0x23f/0x3b0 [ 676.946574][T13933] swapin_readahead+0x14b/0x12e0 [ 676.946609][T13933] ? __pfx_swapin_readahead+0x10/0x10 [ 676.946636][T13933] ? find_held_lock+0x2b/0x80 [ 676.946659][T13933] ? swap_cache_get_folio+0x272/0x920 [ 676.946688][T13933] ? swap_cache_get_folio+0x272/0x920 [ 676.946711][T13933] ? swap_cache_get_folio+0x1f/0x920 [ 676.946733][T13933] ? swap_cache_get_folio+0x2a2/0x920 [ 676.946761][T13933] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 676.946785][T13933] ? __pfx_get_swap_device+0x10/0x10 [ 676.946830][T13933] ? do_swap_page+0x9ba/0x6810 [ 676.946852][T13933] do_swap_page+0x9ba/0x6810 [ 676.946880][T13933] ? __lock_acquire+0x4a5/0x2630 [ 676.946919][T13933] ? __pfx_do_swap_page+0x10/0x10 [ 676.946946][T13933] ? __pfx_default_wake_function+0x10/0x10 [ 676.946981][T13933] ? rcu_is_watching+0x12/0xc0 [ 676.947005][T13933] ? ___pte_offset_map+0x179/0x310 [ 676.947043][T13933] __handle_mm_fault+0x18b9/0x2b50 [ 676.947076][T13933] ? reacquire_held_locks+0xce/0x1e0 [ 676.947108][T13933] ? __pfx___handle_mm_fault+0x10/0x10 [ 676.947138][T13933] ? lock_vma_under_rcu+0x17c/0x5a0 [ 676.947180][T13933] handle_mm_fault+0x36d/0xa20 [ 676.947211][T13933] do_user_addr_fault+0x5a3/0x12f0 [ 676.947246][T13933] exc_page_fault+0x6f/0xd0 [ 676.947274][T13933] asm_exc_page_fault+0x26/0x30 [ 676.947298][T13933] RIP: 0033:0x7f068044f73f [ 676.947317][T13933] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d d2 28 3b 00 89 f0 4c 8d 05 c9 08 3b 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 676.947340][T13933] RSP: 002b:00007fff7d5d5bc8 EFLAGS: 00010206 [ 676.947359][T13933] RAX: 00000000893dd2bb RBX: ffffffff893dd2bb RCX: 0000001b3251b810 [ 676.947375][T13933] RDX: 00000000000012bb RSI: ffffffff893dd2bb RDI: 0000000000000006 [ 676.947390][T13933] RBP: 0000000000000006 R08: 00007f0680800000 R09: 00007f0680802000 [ 676.947405][T13933] R10: 00000000893dd2bf R11: 0000000000000006 R12: 00007f0680816308 [ 676.947420][T13933] R13: 0000000000000006 R14: ffffffff893dd0c4 R15: 00007f0681345720 [ 676.947436][T13933] ? __sock_create+0x64/0x860 [ 676.947464][T13933] ? __sock_create+0x25b/0x860 [ 676.947493][T13933] ? __sock_create+0x25b/0x860 [ 676.947523][T13933] [ 676.947531][T13933] memory: usage 3072kB, limit 3072kB, failcnt 20196 [ 678.376830][T13933] memory+swap: usage 4308kB, limit 9007199254740988kB, failcnt 0 [ 678.432905][T13933] kmem: usage 2948kB, limit 9007199254740988kB, failcnt 0 [ 678.463361][T13933] Memory cgroup stats for /syz4: [ 678.463519][T13933] cache 69632 [ 678.471773][T13933] rss 0 [ 678.551643][T13933] rss_huge 0 [ 678.554935][T13933] shmem 0 [ 678.557881][T13933] mapped_file 0 [ 678.561353][T13933] dirty 0 [ 678.610479][T13933] writeback 0 [ 678.628897][T13933] workingset_refault_anon 5094 [ 678.647605][T13933] workingset_refault_file 2017 [ 678.666772][T13933] swap 1265664 [ 678.670239][T13933] swapcached 57344 [ 678.694206][T13933] pgpgin 75277 [ 678.700966][T13933] pgpgout 94153 [ 678.720650][T13933] pgfault 59869 [ 678.724166][T13933] pgmajfault 2134 [ 678.748136][T13933] inactive_anon 0 [ 678.762665][T13933] active_anon 57344 [ 678.778901][T13933] inactive_file 0 [ 678.790092][T13933] active_file 69632 [ 678.801399][T13933] unevictable 0 [ 678.805366][T13933] hierarchical_memory_limit 3145728 [ 678.834581][T13933] hierarchical_memsw_limit 9223372036854771712 [ 678.859739][T13933] total_cache 69632 [ 678.873788][T13933] total_rss 0 [ 678.884805][T13933] total_rss_huge 0 [ 678.898612][T13933] total_shmem 0 [ 678.908811][T13933] total_mapped_file 0 [ 678.920633][T13933] total_dirty 0 [ 678.932978][T13933] total_writeback 0 [ 678.947684][T13933] total_workingset_refault_anon 5094 [ 678.972473][T13933] total_workingset_refault_file 2017 [ 678.987854][T13933] total_swap 1265664 [ 679.002093][T13933] total_swapcached 57344 [ 679.014085][T13933] total_pgpgin 75277 [ 679.027734][T13933] total_pgpgout 94153 [ 679.040526][T13933] total_pgfault 59869 [ 679.055568][T13933] total_pgmajfault 2134 [ 679.074258][T13933] total_inactive_anon 0 [ 679.093660][T13933] total_active_anon 57344 [ 679.103796][T13933] total_inactive_file 0 [ 679.116740][T13933] total_active_file 69632 [ 679.133693][T13933] total_unevictable 0 [ 679.144602][T13933] anon_cost 0 [ 679.156842][T13933] file_cost 0 [ 679.166922][T13933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1624,pid=13933,uid=0 [ 679.220223][T13933] Memory cgroup out of memory: Killed process 13933 (syz.4.1624) total-vm:112984kB, anon-rss:3296kB, file-rss:26524kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 679.871708][T13960] kexec: Could not allocate control_code_buffer [ 680.237341][T13979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1634'. [ 680.282084][T13983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1634'. [ 680.408912][T13979] openvswitch: netlink: IP tunnel dst address not specified [ 680.442551][T13983] openvswitch: netlink: IP tunnel dst address not specified [ 681.229028][T13975] Process accounting resumed [ 681.772456][T14002] usb usb16: usbfs: process 14002 (syz.5.1638) did not claim interface 0 before use [ 683.122260][T13993] syz.4.1636 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 683.230345][T13993] CPU: 0 UID: 0 PID: 13993 Comm: syz.4.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.230385][T13993] Tainted: [L]=SOFTLOCKUP [ 683.230394][T13993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 683.230409][T13993] Call Trace: [ 683.230417][T13993] [ 683.230425][T13993] dump_stack_lvl+0x100/0x190 [ 683.230459][T13993] dump_header+0xfb/0x606 [ 683.230484][T13993] oom_kill_process.cold+0xd/0x321 [ 683.230511][T13993] out_of_memory+0x340/0x14f0 [ 683.230549][T13993] ? __pfx_out_of_memory+0x10/0x10 [ 683.230587][T13993] mem_cgroup_out_of_memory+0xc6/0x130 [ 683.230613][T13993] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 683.230637][T13993] ? find_held_lock+0x2b/0x80 [ 683.230666][T13993] ? do_raw_spin_unlock+0x145/0x1e0 [ 683.230704][T13993] ? _raw_spin_unlock+0x28/0x50 [ 683.230732][T13993] try_charge_memcg+0x652/0xc90 [ 683.230772][T13993] ? __pfx_try_charge_memcg+0x10/0x10 [ 683.230805][T13993] ? rcu_read_unlock+0x17/0x60 [ 683.230839][T13993] ? rcu_read_unlock+0x17/0x60 [ 683.230880][T13993] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 683.230910][T13993] obj_cgroup_charge_account+0x335/0x7e0 [ 683.230951][T13993] __memcg_slab_post_alloc_hook+0x2e4/0x880 [ 683.230997][T13993] __kmalloc_node_track_caller_noprof+0x77f/0x9d0 [ 683.231029][T13993] ? __pfx___register_sysctl_table+0x10/0x10 [ 683.231069][T13993] ? is_module_address+0x69/0xf0 [ 683.231103][T13993] ? __addrconf_sysctl_register+0xbb/0x360 [ 683.231145][T13993] ? kmemdup_noprof+0x29/0x60 [ 683.231175][T13993] kmemdup_noprof+0x29/0x60 [ 683.231206][T13993] __addrconf_sysctl_register+0xbb/0x360 [ 683.231245][T13993] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 683.231292][T13993] ? lockdep_init_map_type+0x5c/0x250 [ 683.231325][T13993] ? mld_in_v1_mode+0x2b2/0x3a0 [ 683.231355][T13993] addrconf_sysctl_register+0x163/0x200 [ 683.231394][T13993] ipv6_add_dev+0xaf2/0x1520 [ 683.231434][T13993] addrconf_notify+0x563/0x19c0 [ 683.231461][T13993] ? ip6mr_device_event+0x1bc/0x230 [ 683.231494][T13993] notifier_call_chain+0x99/0x3b0 [ 683.231533][T13993] call_netdevice_notifiers_info+0xbe/0x110 [ 683.231563][T13993] register_netdevice+0x16b9/0x21d0 [ 683.231592][T13993] ? __pfx_register_netdevice+0x10/0x10 [ 683.231615][T13993] ? net_generic+0xea/0x2a0 [ 683.231642][T13993] register_netdev+0x34/0x50 [ 683.231663][T13993] vti6_init_net+0x2c7/0x440 [ 683.231688][T13993] ? __pfx_vti6_init_net+0x10/0x10 [ 683.231710][T13993] ops_init+0x1e2/0x5f0 [ 683.231751][T13993] setup_net+0x118/0x3a0 [ 683.231773][T13993] ? __pfx_setup_net+0x10/0x10 [ 683.231792][T13993] ? lockdep_init_map_type+0x5c/0x250 [ 683.231826][T13993] ? mutex_init_lockep+0x110/0x150 [ 683.231866][T13993] copy_net_ns+0x46f/0x7c0 [ 683.231893][T13993] create_new_namespaces+0x3ea/0xab0 [ 683.231927][T13993] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 683.231958][T13993] ksys_unshare+0x455/0xab0 [ 683.231995][T13993] ? __pfx_ksys_unshare+0x10/0x10 [ 683.232036][T13993] ? xfd_validate_state+0x129/0x190 [ 683.232084][T13993] __x64_sys_unshare+0x31/0x40 [ 683.232117][T13993] do_syscall_64+0xc9/0xf80 [ 683.232149][T13993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.232173][T13993] RIP: 0033:0x7f068059aeb9 [ 683.232192][T13993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.232215][T13993] RSP: 002b:00007f068151f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 683.232238][T13993] RAX: ffffffffffffffda RBX: 00007f0680816090 RCX: 00007f068059aeb9 [ 683.232254][T13993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 683.232275][T13993] RBP: 00007f0680608c1f R08: 0000000000000000 R09: 0000000000000000 [ 683.232290][T13993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.232304][T13993] R13: 00007f0680816128 R14: 00007f0680816090 R15: 00007fff7d5d5b88 [ 683.232334][T13993] [ 683.232343][T13993] memory: usage 3072kB, limit 3072kB, failcnt 22279 [ 684.335286][T14007] Process accounting paused [ 684.910585][T13993] memory+swap: usage 6632kB, limit 9007199254740988kB, failcnt 0 [ 684.940088][T13993] kmem: usage 3012kB, limit 9007199254740988kB, failcnt 0 [ 684.974714][T13993] Memory cgroup stats for /syz4: [ 684.974965][T13993] cache 0 [ 685.018769][T13993] rss 8192 [ 685.022597][T13993] rss_huge 0 [ 685.035987][T13993] shmem 0 [ 685.052146][T13993] mapped_file 0 [ 685.081740][T13993] dirty 0 [ 685.084797][T13993] writeback 0 [ 685.100241][T13993] workingset_refault_anon 5159 [ 685.125984][T13993] workingset_refault_file 2017 [ 685.146486][T13993] swap 3645440 [ 685.174679][T13993] swapcached 45056 [ 685.189127][T13993] pgpgin 77259 [ 685.204330][T13993] pgpgout 96155 [ 685.215997][T13993] pgfault 61910 [ 685.291626][T13993] pgmajfault 2178 [ 685.301845][T13993] inactive_anon 4096 [ 685.331356][T13993] active_anon 40960 [ 685.351117][T13993] inactive_file 0 [ 685.365453][T13993] active_file 0 [ 685.381941][T13993] unevictable 0 [ 685.396776][T13993] hierarchical_memory_limit 3145728 [ 685.422587][T13993] hierarchical_memsw_limit 9223372036854771712 [ 685.447288][T13993] total_cache 0 [ 685.462939][T13993] total_rss 8192 [ 685.479563][T13993] total_rss_huge 0 [ 685.493578][T13993] total_shmem 0 [ 685.500989][T13993] total_mapped_file 0 [ 685.527380][T13993] total_dirty 0 [ 685.533190][T13993] total_writeback 0 [ 685.545870][T13993] total_workingset_refault_anon 5159 [ 685.557595][T13993] total_workingset_refault_file 2017 [ 685.569231][T13993] total_swap 3645440 [ 685.583578][T13993] total_swapcached 45056 [ 685.593707][T13993] total_pgpgin 77259 [ 685.603827][T13993] total_pgpgout 96155 [ 685.620391][T13993] total_pgfault 61910 [ 685.641625][T13993] total_pgmajfault 2178 [ 685.668237][T13993] total_inactive_anon 4096 [ 685.680378][T13993] total_active_anon 40960 [ 685.697152][T13993] total_inactive_file 0 [ 685.715952][T13993] total_active_file 0 [ 685.735711][T13993] total_unevictable 0 [ 685.753856][T13993] anon_cost 0 [ 685.781266][T13993] file_cost 0 [ 685.795712][T13993] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1636,pid=13987,uid=0 [ 685.880307][T13993] Memory cgroup out of memory: Killed process 13987 (syz.4.1636) total-vm:106440kB, anon-rss:3204kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 688.007210][T14078] binder: 14076:14078 ioctl c018620c 0 returned -1 [ 688.451243][T14087] usb usb16: usbfs: process 14087 (syz.2.1652) did not claim interface 0 before use [ 688.516741][T14087] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1652'. [ 688.580014][T14087] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1652'. [ 690.736930][T14133] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 690.840031][T14134] FAULT_INJECTION: forcing a failure. [ 690.840031][T14134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.921360][T14134] CPU: 0 UID: 0 PID: 14134 Comm: syz.2.1661 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.921397][T14134] Tainted: [L]=SOFTLOCKUP [ 690.921405][T14134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 690.921419][T14134] Call Trace: [ 690.921427][T14134] [ 690.921436][T14134] dump_stack_lvl+0x100/0x190 [ 690.921468][T14134] should_fail_ex.cold+0x5/0xa [ 690.921507][T14134] _copy_from_user+0x2e/0xd0 [ 690.921545][T14134] usbdev_ioctl+0x2a89/0x3aa0 [ 690.921574][T14134] ? __pfx_usbdev_ioctl+0x10/0x10 [ 690.921604][T14134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 690.921632][T14134] ? do_vfs_ioctl+0x226/0x13e0 [ 690.921670][T14134] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 690.921716][T14134] ? find_held_lock+0x2b/0x80 [ 690.921739][T14134] ? hook_file_ioctl_common+0x146/0x410 [ 690.921799][T14134] ? __pfx_usbdev_ioctl+0x10/0x10 [ 690.921825][T14134] __x64_sys_ioctl+0x18e/0x210 [ 690.921865][T14134] do_syscall_64+0xc9/0xf80 [ 690.921897][T14134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.921920][T14134] RIP: 0033:0x7f177f79aeb9 [ 690.921938][T14134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.921961][T14134] RSP: 002b:00007f178059d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.921983][T14134] RAX: ffffffffffffffda RBX: 00007f177fa16090 RCX: 00007f177f79aeb9 [ 690.921998][T14134] RDX: 0000200000000340 RSI: 000000008038550a RDI: 000000000000000b [ 690.922012][T14134] RBP: 00007f177f808c1f R08: 0000000000000000 R09: 0000000000000000 [ 690.922026][T14134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.922040][T14134] R13: 00007f177fa16128 R14: 00007f177fa16090 R15: 00007ffdf9cb5a88 [ 690.922070][T14134] [ 691.797078][T14143] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1662'. [ 691.855114][T14143] usb usb16: usbfs: process 14143 (syz.4.1662) did not claim interface 0 before use [ 691.939227][T14147] blktrace: Concurrent blktraces are not allowed on loop2 [ 692.166454][T14110] kexec: Could not allocate control_code_buffer [ 693.446678][T14150] syz.4.1665 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 693.606338][T14150] CPU: 0 UID: 0 PID: 14150 Comm: syz.4.1665 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.606376][T14150] Tainted: [L]=SOFTLOCKUP [ 693.606385][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 693.606400][T14150] Call Trace: [ 693.606407][T14150] [ 693.606416][T14150] dump_stack_lvl+0x100/0x190 [ 693.606450][T14150] dump_header+0xfb/0x606 [ 693.606475][T14150] oom_kill_process.cold+0xd/0x321 [ 693.606502][T14150] out_of_memory+0x340/0x14f0 [ 693.606539][T14150] ? __pfx_out_of_memory+0x10/0x10 [ 693.606578][T14150] mem_cgroup_out_of_memory+0xc6/0x130 [ 693.606604][T14150] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 693.606628][T14150] ? find_held_lock+0x2b/0x80 [ 693.606658][T14150] ? do_raw_spin_unlock+0x145/0x1e0 [ 693.606696][T14150] ? _raw_spin_unlock+0x28/0x50 [ 693.606724][T14150] try_charge_memcg+0x652/0xc90 [ 693.606764][T14150] ? __pfx_try_charge_memcg+0x10/0x10 [ 693.606796][T14150] ? rcu_read_unlock+0x17/0x60 [ 693.606830][T14150] ? rcu_read_unlock+0x17/0x60 [ 693.606871][T14150] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 693.606902][T14150] obj_cgroup_charge_account+0x335/0x7e0 [ 693.606947][T14150] __memcg_slab_post_alloc_hook+0x2e4/0x880 [ 693.606993][T14150] __kmalloc_node_track_caller_noprof+0x77f/0x9d0 [ 693.607027][T14150] ? neigh_sysctl_register+0xb4/0x660 [ 693.607068][T14150] ? kmemdup_noprof+0x29/0x60 [ 693.607096][T14150] kmemdup_noprof+0x29/0x60 [ 693.607127][T14150] neigh_sysctl_register+0xb4/0x660 [ 693.607161][T14150] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 693.607193][T14150] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 693.607235][T14150] ? lockdep_init_map_type+0x5c/0x250 [ 693.607267][T14150] ? mld_in_v1_mode+0x2b2/0x3a0 [ 693.607302][T14150] addrconf_sysctl_register+0xb9/0x200 [ 693.607341][T14150] ipv6_add_dev+0xaf2/0x1520 [ 693.607381][T14150] addrconf_notify+0x563/0x19c0 [ 693.607407][T14150] ? ip6mr_device_event+0x1bc/0x230 [ 693.607440][T14150] notifier_call_chain+0x99/0x3b0 [ 693.607479][T14150] call_netdevice_notifiers_info+0xbe/0x110 [ 693.607509][T14150] register_netdevice+0x16b9/0x21d0 [ 693.607536][T14150] ? __pfx_register_netdevice+0x10/0x10 [ 693.607561][T14150] ? alloc_netdev_mqs+0x1163/0x14f0 [ 693.607603][T14150] register_netdev+0x34/0x50 [ 693.607624][T14150] sit_init_net+0x2c0/0x5f0 [ 693.607653][T14150] ? __pfx_sit_init_net+0x10/0x10 [ 693.607680][T14150] ops_init+0x1e2/0x5f0 [ 693.607722][T14150] setup_net+0x118/0x3a0 [ 693.607743][T14150] ? __pfx_setup_net+0x10/0x10 [ 693.607762][T14150] ? lockdep_init_map_type+0x5c/0x250 [ 693.607796][T14150] ? mutex_init_lockep+0x110/0x150 [ 693.607834][T14150] copy_net_ns+0x46f/0x7c0 [ 693.607861][T14150] create_new_namespaces+0x3ea/0xab0 [ 693.607900][T14150] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 693.607931][T14150] ksys_unshare+0x455/0xab0 [ 693.607967][T14150] ? rcu_is_watching+0x12/0xc0 [ 693.607990][T14150] ? __pfx_ksys_unshare+0x10/0x10 [ 693.608027][T14150] ? kcov_ioctl+0x16a/0x720 [ 693.608051][T14150] ? kcov_ioctl+0x16a/0x720 [ 693.608076][T14150] ? fput+0x79/0x100 [ 693.608112][T14150] __x64_sys_unshare+0x31/0x40 [ 693.608147][T14150] do_syscall_64+0xc9/0xf80 [ 693.608180][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.608205][T14150] RIP: 0033:0x7f068059aeb9 [ 693.608224][T14150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.608248][T14150] RSP: 002b:00007f0681540028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 693.608272][T14150] RAX: ffffffffffffffda RBX: 00007f0680815fa0 RCX: 00007f068059aeb9 [ 693.608288][T14150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 693.608308][T14150] RBP: 00007f0680608c1f R08: 0000000000000000 R09: 0000000000000000 [ 693.608323][T14150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.608337][T14150] R13: 00007f0680816038 R14: 00007f0680815fa0 R15: 00007fff7d5d5b88 [ 693.608369][T14150] [ 694.577430][T14150] memory: usage 3072kB, limit 3072kB, failcnt 25203 [ 694.607792][T14150] memory+swap: usage 4520kB, limit 9007199254740988kB, failcnt 0 [ 694.634451][T14150] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 694.653401][T14150] Memory cgroup stats for /syz4: [ 694.653562][T14150] cache 0 [ 694.672728][T14150] rss 0 [ 694.675618][T14150] rss_huge 0 [ 694.682808][T14150] shmem 0 [ 694.692942][T14150] mapped_file 0 [ 694.696443][T14150] dirty 0 [ 694.707855][T14150] writeback 0 [ 694.711296][T14150] workingset_refault_anon 5518 [ 694.721381][T14150] workingset_refault_file 2017 [ 694.739147][T14150] swap 1482752 [ 694.742641][T14150] swapcached 12288 [ 694.746370][T14150] pgpgin 80600 [ 694.757565][T14150] pgpgout 99504 [ 694.761065][T14150] pgfault 65539 [ 694.775118][T14150] pgmajfault 2410 [ 694.785255][T14150] inactive_anon 8192 [ 694.795369][T14150] active_anon 4096 [ 694.800891][T14150] inactive_file 0 [ 694.804581][T14150] active_file 0 [ 694.816915][T14150] unevictable 0 [ 694.826261][T14150] hierarchical_memory_limit 3145728 [ 694.837571][T14150] hierarchical_memsw_limit 9223372036854771712 [ 694.854595][T14150] total_cache 0 [ 694.860365][T14150] total_rss 0 [ 694.863676][T14150] total_rss_huge 0 [ 694.878387][T14150] total_shmem 0 [ 694.884424][T14150] total_mapped_file 0 [ 694.896475][T14150] total_dirty 0 [ 694.901847][T14150] total_writeback 0 [ 694.910236][T14150] total_workingset_refault_anon 5518 [ 694.915640][T14150] total_workingset_refault_file 2017 [ 694.936274][T14150] total_swap 1482752 [ 694.943082][T14150] total_swapcached 12288 [ 694.957795][T14150] total_pgpgin 80600 [ 694.975349][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.981820][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.990717][T14150] total_pgpgout 99504 [ 694.998413][T14150] total_pgfault 65539 [ 695.002764][T14150] total_pgmajfault 2410 [ 695.007521][T14150] total_inactive_anon 8192 [ 695.011953][T14150] total_active_anon 4096 [ 695.016605][T14150] total_inactive_file 0 [ 695.020778][T14150] total_active_file 0 [ 695.024797][T14150] total_unevictable 0 [ 695.030090][T14150] anon_cost 0 [ 695.033403][T14150] file_cost 0 [ 695.037010][T14150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1665,pid=14149,uid=0 [ 695.056290][T14150] Memory cgroup out of memory: Killed process 14149 (syz.4.1665) total-vm:108488kB, anon-rss:3296kB, file-rss:21772kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 695.740175][T14182] random: crng reseeded on system resumption [ 695.877463][T13095] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 695.877498][T13095] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 695.893352][T13095] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 695.893409][T13095] Bluetooth: hci1: adv larger than maximum supported [ 695.900690][T13095] Bluetooth: hci1: Malformed LE Event: 0x0d [ 696.029174][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 696.105372][T14187] usb usb16: usbfs: process 14187 (syz.2.1674) did not claim interface 0 before use [ 699.056148][T14236] binder: 14233:14236 ioctl c00c620f 200000001100 returned -22 [ 700.091645][T14249] mkiss: ax0: crc mode is auto. [ 700.360393][T14250] kAFS: Invalid Command on /proc/fs/afs/cells file [ 702.069054][T14256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1688'. [ 703.416550][T14288] usb usb16: usbfs: process 14288 (syz.0.1697) did not claim interface 0 before use [ 704.193770][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1698'. [ 705.915082][T14320] syz.5.1702 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 705.989394][T14320] CPU: 0 UID: 0 PID: 14320 Comm: syz.5.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.989433][T14320] Tainted: [L]=SOFTLOCKUP [ 705.989442][T14320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 705.989457][T14320] Call Trace: [ 705.989464][T14320] [ 705.989473][T14320] dump_stack_lvl+0x100/0x190 [ 705.989507][T14320] dump_header+0xfb/0x606 [ 705.989531][T14320] oom_kill_process.cold+0xd/0x321 [ 705.989558][T14320] out_of_memory+0x340/0x14f0 [ 705.989594][T14320] ? __pfx_out_of_memory+0x10/0x10 [ 705.989633][T14320] mem_cgroup_out_of_memory+0xc6/0x130 [ 705.989659][T14320] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 705.989682][T14320] ? find_held_lock+0x2b/0x80 [ 705.989711][T14320] ? do_raw_spin_unlock+0x145/0x1e0 [ 705.989749][T14320] ? _raw_spin_unlock+0x28/0x50 [ 705.989776][T14320] try_charge_memcg+0x652/0xc90 [ 705.989823][T14320] ? __pfx_try_charge_memcg+0x10/0x10 [ 705.989863][T14320] ? find_held_lock+0x2b/0x80 [ 705.989886][T14320] ? rcu_read_unlock+0x17/0x60 [ 705.989921][T14320] ? rcu_read_unlock+0x17/0x60 [ 705.989959][T14320] charge_memcg+0xa6/0x280 [ 705.989992][T14320] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 705.990035][T14320] __read_swap_cache_async+0x449/0x610 [ 705.990067][T14320] ? __pfx___read_swap_cache_async+0x10/0x10 [ 705.990100][T14320] ? swap_entries_put_map+0x39e/0x710 [ 705.990131][T14320] ? swap_entries_put_map+0x39e/0x710 [ 705.990166][T14320] swap_cluster_readahead+0x414/0x770 [ 705.990201][T14320] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 705.990227][T14320] ? swap_cache_get_folio+0x272/0x920 [ 705.990251][T14320] ? swap_cache_get_folio+0x272/0x920 [ 705.990280][T14320] ? swap_cache_get_folio+0x272/0x920 [ 705.990304][T14320] ? swap_cache_get_folio+0x1f/0x920 [ 705.990343][T14320] shmem_swapin_folio+0x2290/0x2f10 [ 705.990393][T14320] ? filemap_get_entry+0x1a7/0x3b0 [ 705.990433][T14320] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 705.990461][T14320] ? __pfx_filemap_get_entry+0x10/0x10 [ 705.990493][T14320] ? mod_memcg_lruvec_state+0x1a6/0x5d0 [ 705.990527][T14320] shmem_get_folio_gfp+0x56c/0x1900 [ 705.990564][T14320] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 705.990596][T14320] ? find_held_lock+0x2b/0x80 [ 705.990623][T14320] shmem_get_folio+0x84/0xb0 [ 705.990655][T14320] collapse_file+0x11fb/0x39f0 [ 705.990699][T14320] ? __lock_acquire+0x4a5/0x2630 [ 705.990732][T14320] ? __pfx_collapse_file+0x10/0x10 [ 705.990780][T14320] ? find_held_lock+0x2b/0x80 [ 705.990802][T14320] ? hpage_collapse_scan_file+0x583/0x1f20 [ 705.990850][T14320] ? hpage_collapse_scan_file+0x583/0x1f20 [ 705.990894][T14320] hpage_collapse_scan_file+0x603/0x1f20 [ 705.990939][T14320] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 705.990982][T14320] ? madvise_collapse+0x3ac/0xa30 [ 705.991019][T14320] ? madvise_collapse+0x3ac/0xa30 [ 705.991064][T14320] madvise_collapse+0x3c9/0xa30 [ 705.991109][T14320] ? __pfx_madvise_collapse+0x10/0x10 [ 705.991153][T14320] ? mtree_range_walk+0x6ce/0xcd0 [ 705.991180][T14320] madvise_vma_behavior+0x14f7/0x2a40 [ 705.991219][T14320] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 705.991250][T14320] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 705.991288][T14320] ? mas_prev+0x9b/0xf0 [ 705.991319][T14320] ? __pfx_mas_prev+0x10/0x10 [ 705.991357][T14320] ? find_vma_prev+0xd8/0x150 [ 705.991402][T14320] ? __pfx_find_vma_prev+0x10/0x10 [ 705.991447][T14320] ? __futex_wait+0x256/0x300 [ 705.991475][T14320] madvise_walk_vmas+0x2fe/0xa90 [ 705.991517][T14320] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 705.991564][T14320] madvise_do_behavior+0x1ea/0x510 [ 705.991604][T14320] ? __pfx_madvise_do_behavior+0x10/0x10 [ 705.991644][T14320] ? down_read+0x13b/0x460 [ 705.991689][T14320] do_madvise+0x195/0x240 [ 705.991726][T14320] ? __pfx_do_madvise+0x10/0x10 [ 705.991763][T14320] ? do_futex+0x192/0x350 [ 705.991809][T14320] ? __sys_sendmsg+0x18f/0x220 [ 705.991857][T14320] ? syscall_user_dispatch+0x76/0x130 [ 705.991899][T14320] __x64_sys_madvise+0xa9/0x110 [ 705.991938][T14320] do_syscall_64+0xc9/0xf80 [ 705.991970][T14320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.991994][T14320] RIP: 0033:0x7f2a7619aeb9 [ 705.992013][T14320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.992036][T14320] RSP: 002b:00007f2a770c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 705.992059][T14320] RAX: ffffffffffffffda RBX: 00007f2a76415fa0 RCX: 00007f2a7619aeb9 [ 705.992074][T14320] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 705.992089][T14320] RBP: 00007f2a76208c1f R08: 0000000000000000 R09: 0000000000000000 [ 705.992103][T14320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.992117][T14320] R13: 00007f2a76416038 R14: 00007f2a76415fa0 R15: 00007ffd2d81b5a8 [ 705.992148][T14320] [ 705.992156][T14320] memory: usage 3072kB, limit 3072kB, failcnt 31110 [ 707.207404][T14320] memory+swap: usage 3288kB, limit 9007199254740988kB, failcnt 0 [ 707.241078][T14320] kmem: usage 3028kB, limit 9007199254740988kB, failcnt 0 [ 707.260657][T14320] Memory cgroup stats for /syz4: [ 707.260901][T14320] cache 0 [ 707.296630][T14320] rss 0 [ 707.314929][T14320] rss_huge 0 [ 707.324631][T14320] shmem 0 [ 707.341745][T14320] mapped_file 0 [ 707.345240][T14320] dirty 0 [ 707.348185][T14320] writeback 0 [ 707.351473][T14320] workingset_refault_anon 6452 [ 707.390124][T14320] workingset_refault_file 2017 [ 707.410773][T14320] swap 221184 [ 707.424782][T14320] swapcached 45056 [ 707.435339][T14320] pgpgin 87884 [ 707.444818][T14320] pgpgout 106780 [ 707.454667][T14320] pgfault 72923 [ 707.465847][T14320] pgmajfault 2796 [ 707.476280][T14320] inactive_anon 45056 [ 707.487404][T14320] active_anon 0 [ 707.497060][T14320] inactive_file 0 [ 707.507215][T14320] active_file 0 [ 707.519138][T14320] unevictable 0 [ 707.534080][T14320] hierarchical_memory_limit 3145728 [ 707.549538][T14320] hierarchical_memsw_limit 9223372036854771712 [ 707.560103][T14320] total_cache 0 [ 707.570179][T14320] total_rss 0 [ 707.576887][T14320] total_rss_huge 0 [ 707.592119][T14320] total_shmem 0 [ 707.595624][T14320] total_mapped_file 0 [ 707.599608][T14320] total_dirty 0 [ 707.611067][T14320] total_writeback 0 [ 707.614915][T14320] total_workingset_refault_anon 6452 [ 707.620234][T14320] total_workingset_refault_file 2017 [ 707.650215][T14320] total_swap 221184 [ 707.660527][T14320] total_swapcached 45056 [ 707.669079][T14320] total_pgpgin 87884 [ 707.680132][T14320] total_pgpgout 106780 [ 707.684251][T14320] total_pgfault 72923 [ 707.688239][T14320] total_pgmajfault 2796 [ 707.710007][T14320] total_inactive_anon 45056 [ 707.714738][T14320] total_active_anon 0 [ 707.718729][T14320] total_inactive_file 0 [ 707.736990][T14320] total_active_file 0 [ 707.746648][T14320] total_unevictable 0 [ 707.751125][T14320] anon_cost 0 [ 707.754431][T14320] file_cost 0 [ 707.757803][T14320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1700,pid=14296,uid=0 [ 707.777637][T14320] Memory cgroup out of memory: Killed process 14296 (syz.4.1700) total-vm:174424kB, anon-rss:3296kB, file-rss:25996kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 709.802090][T14365] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 712.661326][T14394] usb usb16: usbfs: process 14394 (syz.5.1718) did not claim interface 0 before use [ 713.112407][T14399] usb usb16: usbfs: process 14399 (syz.5.1720) did not claim interface 0 before use [ 713.202933][T14389] syz.4.1717 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 713.290769][T14389] CPU: 0 UID: 0 PID: 14389 Comm: syz.4.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.290809][T14389] Tainted: [L]=SOFTLOCKUP [ 713.290818][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 713.290832][T14389] Call Trace: [ 713.290839][T14389] [ 713.290848][T14389] dump_stack_lvl+0x100/0x190 [ 713.290882][T14389] dump_header+0xfb/0x606 [ 713.290907][T14389] oom_kill_process.cold+0xd/0x321 [ 713.290934][T14389] out_of_memory+0x340/0x14f0 [ 713.290970][T14389] ? __pfx_out_of_memory+0x10/0x10 [ 713.291009][T14389] mem_cgroup_out_of_memory+0xc6/0x130 [ 713.291035][T14389] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 713.291059][T14389] ? find_held_lock+0x2b/0x80 [ 713.291088][T14389] ? do_raw_spin_unlock+0x145/0x1e0 [ 713.291126][T14389] ? _raw_spin_unlock+0x28/0x50 [ 713.291154][T14389] try_charge_memcg+0x652/0xc90 [ 713.291193][T14389] ? __pfx_try_charge_memcg+0x10/0x10 [ 713.291227][T14389] ? find_held_lock+0x2b/0x80 [ 713.291250][T14389] ? rcu_read_unlock+0x17/0x60 [ 713.291284][T14389] ? rcu_read_unlock+0x17/0x60 [ 713.291331][T14389] charge_memcg+0xa6/0x280 [ 713.291364][T14389] __mem_cgroup_charge+0x2b/0x1e0 [ 713.291404][T14389] do_anonymous_page+0xb38/0x1f40 [ 713.291440][T14389] __handle_mm_fault+0x1d3a/0x2b50 [ 713.291519][T14389] ? __pfx___handle_mm_fault+0x10/0x10 [ 713.291548][T14389] ? __pte_offset_map_lock+0x174/0x320 [ 713.291584][T14389] ? find_held_lock+0x2b/0x80 [ 713.291617][T14389] ? follow_page_pte+0x5b4/0x1410 [ 713.291659][T14389] handle_mm_fault+0x36d/0xa20 [ 713.291691][T14389] __get_user_pages+0xf9c/0x34d0 [ 713.291738][T14389] ? __pfx___get_user_pages+0x10/0x10 [ 713.291783][T14389] populate_vma_page_range+0x267/0x3f0 [ 713.291824][T14389] ? __pfx_populate_vma_page_range+0x10/0x10 [ 713.291863][T14389] ? __pfx_find_vma_intersection+0x10/0x10 [ 713.291899][T14389] ? do_mmap+0x93f/0x12f0 [ 713.291938][T14389] __mm_populate+0x107/0x3a0 [ 713.291960][T14389] ? __pfx___mm_populate+0x10/0x10 [ 713.292001][T14389] ? up_write+0x290/0x4f0 [ 713.292040][T14389] vm_mmap_pgoff+0x37f/0x470 [ 713.292080][T14389] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 713.292116][T14389] ? __pfx_get_nodes+0x10/0x10 [ 713.292145][T14389] ? find_held_lock+0x2b/0x80 [ 713.292171][T14389] ? __x64_sys_futex+0x34f/0x4d0 [ 713.292204][T14389] ? __x64_sys_futex+0x358/0x4d0 [ 713.292241][T14389] ksys_mmap_pgoff+0x7d/0x5b0 [ 713.292281][T14389] __x64_sys_mmap+0x125/0x190 [ 713.292307][T14389] do_syscall_64+0xc9/0xf80 [ 713.292339][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.292363][T14389] RIP: 0033:0x7f068059aeb9 [ 713.292381][T14389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.292404][T14389] RSP: 002b:00007f068151f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 713.292427][T14389] RAX: ffffffffffffffda RBX: 00007f0680816090 RCX: 00007f068059aeb9 [ 713.292443][T14389] RDX: 0000000000000002 RSI: 0000000000400008 RDI: 0000000000000000 [ 713.292462][T14389] RBP: 00007f0680608c1f R08: 0000000000000002 R09: 0000000000008000 [ 713.292476][T14389] R10: 0000000040009b72 R11: 0000000000000246 R12: 0000000000000000 [ 713.292491][T14389] R13: 00007f0680816128 R14: 00007f0680816090 R15: 00007fff7d5d5b88 [ 713.292521][T14389] [ 713.292530][T14389] memory: usage 3072kB, limit 3072kB, failcnt 31744 [ 713.789740][T14382] Process accounting paused [ 714.069163][T14402] can: request_module (can-proto-0) failed. [ 714.564582][T14411] netlink: 'syz.5.1724': attribute type 1 has an invalid length. [ 714.669871][T14389] memory+swap: usage 3852kB, limit 9007199254740988kB, failcnt 0 [ 714.713512][T14389] kmem: usage 3052kB, limit 9007199254740988kB, failcnt 0 [ 714.732372][T14397] Process accounting resumed [ 714.743238][T14389] Memory cgroup stats for /syz4: [ 714.743493][T14389] cache 0 [ 714.772478][T14389] rss 0 [ 714.789879][T14389] rss_huge 0 [ 714.822891][T14389] shmem 0 [ 714.825897][T14389] mapped_file 0 [ 714.829380][T14389] dirty 0 [ 714.832357][T14389] writeback 0 [ 714.867001][T14389] workingset_refault_anon 6515 [ 714.871812][T14389] workingset_refault_file 2017 [ 714.907943][T14389] swap 798720 [ 714.911274][T14389] swapcached 20480 [ 714.937992][T14389] pgpgin 88200 [ 714.941425][T14389] pgpgout 107102 [ 714.972086][T14389] pgfault 73895 [ 714.997232][T14389] pgmajfault 2820 [ 715.019930][T14389] inactive_anon 20480 [ 715.032640][T14389] active_anon 0 [ 715.042215][T14389] inactive_file 0 [ 715.045879][T14389] active_file 0 [ 715.082187][T14389] unevictable 0 [ 715.098647][T14389] hierarchical_memory_limit 3145728 [ 715.118288][T14389] hierarchical_memsw_limit 9223372036854771712 [ 715.151150][T14389] total_cache 0 [ 715.163513][T14389] total_rss 0 [ 715.182496][T14389] total_rss_huge 0 [ 715.200468][T14389] total_shmem 0 [ 715.216117][T14389] total_mapped_file 0 [ 715.235258][T14389] total_dirty 0 [ 715.252447][T14389] total_writeback 0 [ 715.273352][T14389] total_workingset_refault_anon 6515 [ 715.302631][T14389] total_workingset_refault_file 2017 [ 715.331402][T14389] total_swap 798720 [ 715.351446][T14389] total_swapcached 20480 [ 715.370514][T14389] total_pgpgin 88200 [ 715.382901][T14389] total_pgpgout 107102 [ 715.404147][T14389] total_pgfault 73895 [ 715.408205][T14389] total_pgmajfault 2820 [ 715.443366][T14389] total_inactive_anon 20480 [ 715.458577][T14389] total_active_anon 0 [ 715.477218][T14389] total_inactive_file 0 [ 715.498961][T14389] total_active_file 0 [ 715.519420][T14389] total_unevictable 0 [ 715.523451][T14389] anon_cost 0 [ 715.557691][T14389] file_cost 0 [ 715.572378][T14389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1717,pid=14386,uid=0 [ 715.634958][T14389] Memory cgroup out of memory: Killed process 14386 (syz.4.1717) total-vm:135240kB, anon-rss:3296kB, file-rss:21772kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 716.226344][T14425] warning: `syz.2.1726' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 717.451590][T14452] FAULT_INJECTION: forcing a failure. [ 717.451590][T14452] name fail_futex, interval 1, probability 0, space 0, times 0 [ 717.607826][T14452] CPU: 0 UID: 0 PID: 14452 Comm: syz.2.1730 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.607867][T14452] Tainted: [L]=SOFTLOCKUP [ 717.607876][T14452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 717.607891][T14452] Call Trace: [ 717.607899][T14452] [ 717.607909][T14452] dump_stack_lvl+0x100/0x190 [ 717.607966][T14452] should_fail_ex.cold+0x5/0xa [ 717.608019][T14452] get_futex_key+0x1d2/0x1620 [ 717.608067][T14452] ? __pfx_get_futex_key+0x10/0x10 [ 717.608108][T14452] ? __pfx_wake_up_new_task+0x10/0x10 [ 717.608146][T14452] ? kernel_clone+0x732/0x930 [ 717.608196][T14452] futex_wake+0xea/0x530 [ 717.608236][T14452] ? put_pid+0x24/0x30 [ 717.608270][T14452] ? __pfx_futex_wake+0x10/0x10 [ 717.608334][T14452] do_futex+0x32b/0x350 [ 717.608372][T14452] ? __pfx_do_futex+0x10/0x10 [ 717.608409][T14452] ? __do_sys_clone+0xd9/0x120 [ 717.608453][T14452] ? __pfx___do_sys_clone+0x10/0x10 [ 717.608493][T14452] __x64_sys_futex+0x34f/0x4d0 [ 717.608532][T14452] ? __pfx___x64_sys_futex+0x10/0x10 [ 717.608567][T14452] ? xfd_validate_state+0x129/0x190 [ 717.608626][T14452] do_syscall_64+0xc9/0xf80 [ 717.608661][T14452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.608686][T14452] RIP: 0033:0x7f177f79aeb9 [ 717.608706][T14452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.608740][T14452] RSP: 002b:00007f178059d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 717.608764][T14452] RAX: ffffffffffffffda RBX: 00007f177fa16098 RCX: 00007f177f79aeb9 [ 717.608790][T14452] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f177fa1609c [ 717.608805][T14452] RBP: 00007f177fa16090 R08: 0000000000000000 R09: 0000000000000000 [ 717.608820][T14452] R10: 0000000000000749 R11: 0000000000000246 R12: 0000000000000000 [ 717.608844][T14452] R13: 00007f177fa16128 R14: 00007ffdf9cb59a0 R15: 00007ffdf9cb5a88 [ 717.608884][T14452] [ 720.858515][T14495] syz.4.1740 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 720.966867][T14495] CPU: 0 UID: 0 PID: 14495 Comm: syz.4.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.966906][T14495] Tainted: [L]=SOFTLOCKUP [ 720.966915][T14495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 720.966930][T14495] Call Trace: [ 720.966938][T14495] [ 720.966946][T14495] dump_stack_lvl+0x100/0x190 [ 720.966980][T14495] dump_header+0xfb/0x606 [ 720.967006][T14495] oom_kill_process.cold+0xd/0x321 [ 720.967033][T14495] out_of_memory+0x340/0x14f0 [ 720.967070][T14495] ? __pfx_out_of_memory+0x10/0x10 [ 720.967108][T14495] mem_cgroup_out_of_memory+0xc6/0x130 [ 720.967134][T14495] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 720.967159][T14495] ? find_held_lock+0x2b/0x80 [ 720.967187][T14495] ? do_raw_spin_unlock+0x145/0x1e0 [ 720.967231][T14495] ? _raw_spin_unlock+0x28/0x50 [ 720.967258][T14495] try_charge_memcg+0x652/0xc90 [ 720.967297][T14495] ? __pfx_try_charge_memcg+0x10/0x10 [ 720.967329][T14495] ? rcu_read_unlock+0x17/0x60 [ 720.967364][T14495] ? rcu_read_unlock+0x17/0x60 [ 720.967405][T14495] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 720.967435][T14495] obj_cgroup_charge_account+0x335/0x7e0 [ 720.967476][T14495] __memcg_slab_post_alloc_hook+0x2e4/0x880 [ 720.967522][T14495] __kmalloc_cache_noprof+0x62a/0x810 [ 720.967549][T14495] ? ipv6_add_dev+0x670/0x1520 [ 720.967589][T14495] ? ipv6_add_dev+0x670/0x1520 [ 720.967623][T14495] ipv6_add_dev+0x670/0x1520 [ 720.967663][T14495] addrconf_notify+0x563/0x19c0 [ 720.967689][T14495] ? ip6mr_device_event+0x1bc/0x230 [ 720.967722][T14495] notifier_call_chain+0x99/0x3b0 [ 720.967761][T14495] call_netdevice_notifiers_info+0xbe/0x110 [ 720.967797][T14495] register_netdevice+0x16b9/0x21d0 [ 720.967825][T14495] ? __pfx_register_netdevice+0x10/0x10 [ 720.967857][T14495] __ip_tunnel_create+0x52b/0x670 [ 720.967897][T14495] ? __pfx___ip_tunnel_create+0x10/0x10 [ 720.967935][T14495] ? net_generic+0xea/0x2a0 [ 720.967964][T14495] ip_tunnel_init_net+0x230/0x780 [ 720.967990][T14495] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 720.968026][T14495] ? __pfx_erspan_init_net+0x10/0x10 [ 720.968059][T14495] ops_init+0x1e2/0x5f0 [ 720.968100][T14495] setup_net+0x118/0x3a0 [ 720.968121][T14495] ? __pfx_setup_net+0x10/0x10 [ 720.968140][T14495] ? lockdep_init_map_type+0x5c/0x250 [ 720.968174][T14495] ? mutex_init_lockep+0x110/0x150 [ 720.968213][T14495] copy_net_ns+0x46f/0x7c0 [ 720.968240][T14495] create_new_namespaces+0x3ea/0xab0 [ 720.968274][T14495] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 720.968305][T14495] ksys_unshare+0x455/0xab0 [ 720.968342][T14495] ? __pfx_ksys_unshare+0x10/0x10 [ 720.968376][T14495] ? xfd_validate_state+0x129/0x190 [ 720.968427][T14495] __x64_sys_unshare+0x31/0x40 [ 720.968461][T14495] do_syscall_64+0xc9/0xf80 [ 720.968492][T14495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.968516][T14495] RIP: 0033:0x7f068059aeb9 [ 720.968535][T14495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.968558][T14495] RSP: 002b:00007f068151f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 720.968581][T14495] RAX: ffffffffffffffda RBX: 00007f0680816090 RCX: 00007f068059aeb9 [ 720.968596][T14495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 720.968611][T14495] RBP: 00007f0680608c1f R08: 0000000000000000 R09: 0000000000000000 [ 720.968625][T14495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.968639][T14495] R13: 00007f0680816128 R14: 00007f0680816090 R15: 00007fff7d5d5b88 [ 720.968670][T14495] [ 721.691852][T14495] memory: usage 3072kB, limit 3072kB, failcnt 32119 [ 721.707713][T14495] memory+swap: usage 3204kB, limit 9007199254740988kB, failcnt 0 [ 721.717077][T14495] kmem: usage 2988kB, limit 9007199254740988kB, failcnt 0 [ 721.724866][T14495] Memory cgroup stats for /syz4: [ 721.725022][T14495] cache 0 [ 721.733635][T14495] rss 0 [ 721.736425][T14495] rss_huge 0 [ 721.740073][T14495] shmem 0 [ 721.743018][T14495] mapped_file 0 [ 721.746505][T14495] dirty 0 [ 721.749529][T14495] writeback 0 [ 721.752820][T14495] workingset_refault_anon 6654 [ 721.757644][T14495] workingset_refault_file 2041 [ 721.762411][T14495] swap 135168 [ 721.765722][T14495] swapcached 86016 [ 721.769629][T14495] pgpgin 88696 [ 721.773005][T14495] pgpgout 107582 [ 721.776556][T14495] pgfault 74661 [ 721.780072][T14495] pgmajfault 2909 [ 721.784774][T14495] inactive_anon 86016 [ 721.788883][T14495] active_anon 0 [ 721.792357][T14495] inactive_file 0 [ 721.796112][T14495] active_file 0 [ 721.799651][T14495] unevictable 0 [ 721.803118][T14495] hierarchical_memory_limit 3145728 [ 721.814723][T14495] hierarchical_memsw_limit 9223372036854771712 [ 721.832292][T14495] total_cache 0 [ 721.837476][T14495] total_rss 0 [ 721.840793][T14495] total_rss_huge 0 [ 721.844554][T14495] total_shmem 0 [ 721.848456][T14495] total_mapped_file 0 [ 721.852443][T14495] total_dirty 0 [ 721.855913][T14495] total_writeback 0 [ 721.859977][T14495] total_workingset_refault_anon 6654 [ 721.865276][T14495] total_workingset_refault_file 2041 [ 721.870756][T14495] total_swap 135168 [ 721.874605][T14495] total_swapcached 86016 [ 721.886189][T14495] total_pgpgin 88696 [ 721.890935][T14495] total_pgpgout 107582 [ 721.895070][T14495] total_pgfault 74661 [ 721.899249][T14495] total_pgmajfault 2909 [ 721.903437][T14495] total_inactive_anon 86016 [ 721.908016][T14495] total_active_anon 0 [ 721.912021][T14495] total_inactive_file 0 [ 721.916358][T14495] total_active_file 0 [ 721.920362][T14495] total_unevictable 0 [ 721.925052][T14495] anon_cost 0 [ 721.929298][T14495] file_cost 0 [ 721.932602][T14495] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1740,pid=14483,uid=0 [ 721.954130][T14495] Memory cgroup out of memory: Killed process 14483 (syz.4.1740) total-vm:135372kB, anon-rss:3296kB, file-rss:21900kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 723.632876][T14554] usb usb16: usbfs: process 14554 (syz.4.1752) did not claim interface 0 before use [ 723.807579][T14546] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 723.848023][T14546] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 723.876044][T14546] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 723.911933][T14546] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 723.961414][T14546] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 725.288493][T13095] Bluetooth: hci0: command 0x0c1a tx timeout [ 725.845713][T13095] Bluetooth: hci3: command 0x0c1a tx timeout [ 725.926670][T13095] Bluetooth: hci4: command 0x0c1a tx timeout [ 725.932748][T13095] Bluetooth: hci1: command 0x0c1a tx timeout [ 726.008753][T13095] Bluetooth: hci2: command 0x0c1a tx timeout [ 726.710533][T14582] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 727.462002][T14599] random: crng reseeded on system resumption [ 727.907039][T14601] [U] [ 727.909891][T14601] [U] [ 727.912605][T14601] [U] [ 727.915352][T14601] [U] [ 727.918069][T14601] [U] [ 727.987895][T14601] [U] [ 727.990663][T14601] [U] [ 727.993380][T14601] [U] [ 727.996089][T14601] [U] [ 728.101064][T14601] netlink: 'syz.5.1763': attribute type 11 has an invalid length. [ 728.143623][T14601] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1763'. [ 728.257930][T14601] [U] [ 728.377084][T14609] usb usb16: usbfs: process 14609 (syz.2.1761) did not claim interface 0 before use [ 728.744341][T14615] writes to the poll attribute are ignored. [ 728.790593][T14615] please use driver specific parameters instead. [ 728.837327][T14616] writes to the poll attribute are ignored. [ 728.880978][T14616] please use driver specific parameters instead. [ 731.689430][T14663] zswap: compressor not available [ 733.268613][T14640] syz.4.1770 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 733.329285][T14640] CPU: 0 UID: 0 PID: 14640 Comm: syz.4.1770 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.329324][T14640] Tainted: [L]=SOFTLOCKUP [ 733.329332][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 733.329346][T14640] Call Trace: [ 733.329355][T14640] [ 733.329363][T14640] dump_stack_lvl+0x100/0x190 [ 733.329397][T14640] dump_header+0xfb/0x606 [ 733.329422][T14640] oom_kill_process.cold+0xd/0x321 [ 733.329449][T14640] out_of_memory+0x340/0x14f0 [ 733.329489][T14640] ? __pfx_out_of_memory+0x10/0x10 [ 733.329528][T14640] mem_cgroup_out_of_memory+0xc6/0x130 [ 733.329555][T14640] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 733.329579][T14640] ? find_held_lock+0x2b/0x80 [ 733.329608][T14640] ? do_raw_spin_unlock+0x145/0x1e0 [ 733.329646][T14640] ? _raw_spin_unlock+0x28/0x50 [ 733.329673][T14640] try_charge_memcg+0x652/0xc90 [ 733.329713][T14640] ? __pfx_try_charge_memcg+0x10/0x10 [ 733.329753][T14640] ? find_held_lock+0x2b/0x80 [ 733.329775][T14640] ? rcu_read_unlock+0x17/0x60 [ 733.329810][T14640] ? rcu_read_unlock+0x17/0x60 [ 733.329848][T14640] charge_memcg+0xa6/0x280 [ 733.329888][T14640] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 733.329930][T14640] __read_swap_cache_async+0x449/0x610 [ 733.329962][T14640] ? __pfx___read_swap_cache_async+0x10/0x10 [ 733.329993][T14640] ? __xa_erase+0xec/0x150 [ 733.330024][T14640] ? __pfx___xa_erase+0x10/0x10 [ 733.330057][T14640] swap_cluster_readahead+0x414/0x770 [ 733.330091][T14640] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 733.330126][T14640] ? move_cluster+0x1f7/0x570 [ 733.330163][T14640] ? get_vma_policy+0x23f/0x3b0 [ 733.330202][T14640] swapin_readahead+0x14b/0x12e0 [ 733.330238][T14640] ? __pfx_swapin_readahead+0x10/0x10 [ 733.330266][T14640] ? find_held_lock+0x2b/0x80 [ 733.330289][T14640] ? swap_cache_get_folio+0x272/0x920 [ 733.330313][T14640] ? swap_cache_get_folio+0x272/0x920 [ 733.330342][T14640] ? swap_cache_get_folio+0x272/0x920 [ 733.330365][T14640] ? swap_cache_get_folio+0x1f/0x920 [ 733.330389][T14640] ? swap_cache_get_folio+0x2a2/0x920 [ 733.330416][T14640] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 733.330440][T14640] ? __pfx_get_swap_device+0x10/0x10 [ 733.330479][T14640] ? do_swap_page+0x9ba/0x6810 [ 733.330502][T14640] do_swap_page+0x9ba/0x6810 [ 733.330531][T14640] ? __lock_acquire+0x4a5/0x2630 [ 733.330569][T14640] ? __pfx_do_swap_page+0x10/0x10 [ 733.330597][T14640] ? __pfx_default_wake_function+0x10/0x10 [ 733.330628][T14640] ? __lock_acquire+0x4a5/0x2630 [ 733.330661][T14640] ? rcu_is_watching+0x12/0xc0 [ 733.330685][T14640] ? ___pte_offset_map+0x179/0x310 [ 733.330723][T14640] __handle_mm_fault+0x18b9/0x2b50 [ 733.330756][T14640] ? __pfx___handle_mm_fault+0x10/0x10 [ 733.330785][T14640] ? __pte_offset_map_lock+0x174/0x320 [ 733.330821][T14640] ? find_held_lock+0x2b/0x80 [ 733.330854][T14640] ? follow_page_pte+0x5b4/0x1410 [ 733.330901][T14640] handle_mm_fault+0x36d/0xa20 [ 733.330933][T14640] __get_user_pages+0xf9c/0x34d0 [ 733.330977][T14640] ? down_read_killable+0x30e/0x4c0 [ 733.331013][T14640] ? __pfx___get_user_pages+0x10/0x10 [ 733.331058][T14640] __gup_longterm_locked+0x87d/0x16f0 [ 733.331095][T14640] ? __bpf_address_lookup+0x2e1/0x320 [ 733.331133][T14640] ? is_bpf_text_address+0x8a/0x1a0 [ 733.331160][T14640] ? __pfx___gup_longterm_locked+0x10/0x10 [ 733.331202][T14640] ? find_held_lock+0x2b/0x80 [ 733.331225][T14640] ? gup_fast_fallback+0x7e5/0x2460 [ 733.331261][T14640] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 733.331304][T14640] gup_fast_fallback+0x18c6/0x2460 [ 733.331346][T14640] ? __pfx_stack_trace_save+0x10/0x10 [ 733.331388][T14640] ? __pfx_gup_fast_fallback+0x10/0x10 [ 733.331424][T14640] ? vfs_readv+0x4d3/0x8d0 [ 733.331447][T14640] ? __x64_sys_preadv2+0x11f/0x160 [ 733.331476][T14640] ? do_syscall_64+0xc9/0xf80 [ 733.331503][T14640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.331538][T14640] pin_user_pages_fast+0xa7/0xf0 [ 733.331576][T14640] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 733.331622][T14640] iov_iter_extract_pages+0xa0d/0x1ef0 [ 733.331672][T14640] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 733.331710][T14640] ? find_held_lock+0x2b/0x80 [ 733.331733][T14640] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 733.331760][T14640] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 733.331797][T14640] bio_iov_iter_get_pages+0x35e/0x12c0 [ 733.331837][T14640] ? bio_associate_blkg+0x137/0x2a0 [ 733.331865][T14640] ? bio_associate_blkg+0x137/0x2a0 [ 733.331905][T14640] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 733.331945][T14640] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 733.331984][T14640] ? iov_iter_npages+0xf8/0x500 [ 733.332020][T14640] blkdev_direct_IO+0x1302/0x1fb0 [ 733.332063][T14640] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 733.332099][T14640] ? __pfx_aa_file_perm+0x10/0x10 [ 733.332124][T14640] ? __pfx___schedule+0x10/0x10 [ 733.332153][T14640] blkdev_read_iter+0x225/0x4f0 [ 733.332188][T14640] do_iter_readv_writev+0x60d/0x920 [ 733.332216][T14640] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 733.332239][T14640] ? common_file_perm+0x1ab/0x4f0 [ 733.332279][T14640] ? bpf_lsm_file_permission+0x9/0x10 [ 733.332313][T14640] ? security_file_permission+0x76/0x210 [ 733.332353][T14640] ? rw_verify_area+0xce/0x6d0 [ 733.332379][T14640] vfs_readv+0x4d3/0x8d0 [ 733.332410][T14640] ? __pfx_vfs_readv+0x10/0x10 [ 733.332436][T14640] ? __pfx_futex_wake+0x10/0x10 [ 733.332492][T14640] ? __fget_files+0x21f/0x3d0 [ 733.332525][T14640] ? do_readv+0x13e/0x340 [ 733.332547][T14640] do_readv+0x13e/0x340 [ 733.332572][T14640] ? __pfx_do_readv+0x10/0x10 [ 733.332597][T14640] ? xfd_validate_state+0x129/0x190 [ 733.332641][T14640] __x64_sys_preadv2+0x11f/0x160 [ 733.332674][T14640] do_syscall_64+0xc9/0xf80 [ 733.332706][T14640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.332730][T14640] RIP: 0033:0x7f068059aeb9 [ 733.332750][T14640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.332773][T14640] RSP: 002b:00007f0681540028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 733.332795][T14640] RAX: ffffffffffffffda RBX: 00007f0680815fa0 RCX: 00007f068059aeb9 [ 733.332811][T14640] RDX: 0004000000000006 RSI: 0000200000000080 RDI: 000000000000000d [ 733.332826][T14640] RBP: 00007f0680608c1f R08: 0000000000000009 R09: 000000000000002f [ 733.332841][T14640] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 733.332856][T14640] R13: 00007f0680816038 R14: 00007f0680815fa0 R15: 00007fff7d5d5b88 [ 733.332892][T14640] [ 734.002203][T14640] memory: usage 3072kB, limit 3072kB, failcnt 35783 [ 734.009934][T14640] memory+swap: usage 7036kB, limit 9007199254740988kB, failcnt 0 [ 734.017772][T14640] kmem: usage 2688kB, limit 9007199254740988kB, failcnt 0 [ 734.025084][T14640] Memory cgroup stats for /syz4: [ 734.025242][T14640] cache 0 [ 734.033620][T14640] rss 335872 [ 734.036857][T14640] rss_huge 0 [ 734.040089][T14640] shmem 0 [ 734.043170][T14640] mapped_file 0 [ 734.047363][T14640] dirty 0 [ 734.050329][T14640] writeback 0 [ 734.053748][T14640] workingset_refault_anon 7217 [ 734.059483][T14640] workingset_refault_file 3101 [ 734.064332][T14640] swap 4059136 [ 734.067736][T14640] swapcached 57344 [ 734.071457][T14640] pgpgin 92766 [ 734.074882][T14640] pgpgout 111577 [ 734.078439][T14640] pgfault 78706 [ 734.082003][T14640] pgmajfault 3248 [ 734.085709][T14640] inactive_anon 389120 [ 734.089789][T14640] active_anon 0 [ 734.093333][T14640] inactive_file 4096 [ 734.097252][T14640] active_file 0 [ 734.100722][T14640] unevictable 0 [ 734.104260][T14640] hierarchical_memory_limit 3145728 [ 734.110563][T14640] hierarchical_memsw_limit 9223372036854771712 [ 734.116811][T14640] total_cache 0 [ 734.120281][T14640] total_rss 335872 [ 734.124380][T14640] total_rss_huge 0 [ 734.128112][T14640] total_shmem 0 [ 734.131607][T14640] total_mapped_file 0 [ 734.135662][T14640] total_dirty 0 [ 734.139152][T14640] total_writeback 0 [ 734.143018][T14640] total_workingset_refault_anon 7217 [ 734.148959][T14640] total_workingset_refault_file 3101 [ 734.154298][T14640] total_swap 4059136 [ 734.158276][T14640] total_swapcached 57344 [ 734.163531][T14640] total_pgpgin 92766 [ 734.167457][T14640] total_pgpgout 111577 [ 734.171540][T14640] total_pgfault 78706 [ 734.175599][T14640] total_pgmajfault 3248 [ 734.179782][T14640] total_inactive_anon 389120 [ 734.184498][T14640] total_active_anon 0 [ 734.188549][T14640] total_inactive_file 4096 [ 734.193131][T14640] total_active_file 0 [ 734.197125][T14640] total_unevictable 0 [ 734.201112][T14640] anon_cost 0 [ 734.205819][T14640] file_cost 0 [ 734.209122][T14640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1770,pid=14639,uid=0 [ 734.225253][T14640] Memory cgroup out of memory: Killed process 14639 (syz.4.1770) total-vm:106572kB, anon-rss:3436kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 736.471828][ T32] oom_reaper: reaped process 14639 (syz.4.1770), now anon-rss:4kB, file-rss:21100kB, shmem-rss:0kB [ 738.199468][T14725] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 740.967109][T14761] netlink: 'syz.5.1801': attribute type 2 has an invalid length. [ 741.008442][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1801'. [ 745.059456][T14824] Process accounting paused [ 745.645156][T14805] Process accounting resumed [ 748.388530][T14866] zswap: compressor not available [ 751.522445][T14914] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 753.905935][T14935] syz.4.1834 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 754.026017][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.4.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.026055][T14935] Tainted: [L]=SOFTLOCKUP [ 754.026064][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 754.026078][T14935] Call Trace: [ 754.026086][T14935] [ 754.026095][T14935] dump_stack_lvl+0x100/0x190 [ 754.026127][T14935] dump_header+0xfb/0x606 [ 754.026152][T14935] oom_kill_process.cold+0xd/0x321 [ 754.026179][T14935] out_of_memory+0x340/0x14f0 [ 754.026218][T14935] ? __pfx_out_of_memory+0x10/0x10 [ 754.026257][T14935] mem_cgroup_out_of_memory+0xc6/0x130 [ 754.026290][T14935] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 754.026314][T14935] ? find_held_lock+0x2b/0x80 [ 754.026343][T14935] ? do_raw_spin_unlock+0x145/0x1e0 [ 754.026381][T14935] ? _raw_spin_unlock+0x28/0x50 [ 754.026413][T14935] try_charge_memcg+0x652/0xc90 [ 754.026452][T14935] ? __pfx_try_charge_memcg+0x10/0x10 [ 754.026485][T14935] ? rcu_read_unlock+0x17/0x60 [ 754.026520][T14935] ? rcu_read_unlock+0x17/0x60 [ 754.026561][T14935] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 754.026593][T14935] obj_cgroup_charge_account+0x335/0x7e0 [ 754.026634][T14935] __memcg_slab_post_alloc_hook+0x2e4/0x880 [ 754.026681][T14935] __kmalloc_node_track_caller_noprof+0x77f/0x9d0 [ 754.026713][T14935] ? __pfx___register_sysctl_table+0x10/0x10 [ 754.026752][T14935] ? is_module_address+0x69/0xf0 [ 754.026786][T14935] ? register_net_sysctl_sz+0x222/0x430 [ 754.026829][T14935] ? __addrconf_sysctl_register+0xbb/0x360 [ 754.026871][T14935] ? kmemdup_noprof+0x29/0x60 [ 754.026901][T14935] kmemdup_noprof+0x29/0x60 [ 754.026933][T14935] __addrconf_sysctl_register+0xbb/0x360 [ 754.026973][T14935] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 754.027015][T14935] ? lockdep_init_map_type+0x5c/0x250 [ 754.027048][T14935] ? mld_in_v1_mode+0x2b2/0x3a0 [ 754.027079][T14935] addrconf_sysctl_register+0x163/0x200 [ 754.027118][T14935] ipv6_add_dev+0xaf2/0x1520 [ 754.027159][T14935] addrconf_notify+0x563/0x19c0 [ 754.027186][T14935] ? ip6mr_device_event+0x1bc/0x230 [ 754.027219][T14935] notifier_call_chain+0x99/0x3b0 [ 754.027259][T14935] call_netdevice_notifiers_info+0xbe/0x110 [ 754.027290][T14935] register_netdevice+0x16b9/0x21d0 [ 754.027319][T14935] ? __pfx_register_netdevice+0x10/0x10 [ 754.027351][T14935] __ip_tunnel_create+0x52b/0x670 [ 754.027393][T14935] ? __pfx___ip_tunnel_create+0x10/0x10 [ 754.027431][T14935] ? net_generic+0xea/0x2a0 [ 754.027465][T14935] ip_tunnel_init_net+0x230/0x780 [ 754.027493][T14935] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 754.027529][T14935] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 754.027564][T14935] ops_init+0x1e2/0x5f0 [ 754.027605][T14935] setup_net+0x118/0x3a0 [ 754.027628][T14935] ? __pfx_setup_net+0x10/0x10 [ 754.027648][T14935] ? lockdep_init_map_type+0x5c/0x250 [ 754.027682][T14935] ? mutex_init_lockep+0x110/0x150 [ 754.027721][T14935] copy_net_ns+0x46f/0x7c0 [ 754.027748][T14935] create_new_namespaces+0x3ea/0xab0 [ 754.027783][T14935] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 754.027818][T14935] ksys_unshare+0x455/0xab0 [ 754.027854][T14935] ? rcu_is_watching+0x12/0xc0 [ 754.027878][T14935] ? __pfx_ksys_unshare+0x10/0x10 [ 754.027915][T14935] ? kcov_ioctl+0x16a/0x720 [ 754.027940][T14935] ? kcov_ioctl+0x16a/0x720 [ 754.027964][T14935] ? fput+0x79/0x100 [ 754.028002][T14935] __x64_sys_unshare+0x31/0x40 [ 754.028037][T14935] do_syscall_64+0xc9/0xf80 [ 754.028070][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.028096][T14935] RIP: 0033:0x7f068059aeb9 [ 754.028116][T14935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.028140][T14935] RSP: 002b:00007f06814fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 754.028164][T14935] RAX: ffffffffffffffda RBX: 00007f0680816180 RCX: 00007f068059aeb9 [ 754.028181][T14935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 754.028195][T14935] RBP: 00007f0680608c1f R08: 0000000000000000 R09: 0000000000000000 [ 754.028211][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.028226][T14935] R13: 00007f0680816218 R14: 00007f0680816180 R15: 00007fff7d5d5b88 [ 754.028258][T14935] [ 754.768078][T14935] memory: usage 3072kB, limit 3072kB, failcnt 46750 [ 754.774775][T14935] memory+swap: usage 3320kB, limit 9007199254740988kB, failcnt 0 [ 754.782581][T14935] kmem: usage 2988kB, limit 9007199254740988kB, failcnt 0 [ 754.790751][T14935] Memory cgroup stats for /syz4: [ 754.790907][T14935] cache 0 [ 754.798882][T14935] rss 0 [ 754.801655][T14935] rss_huge 0 [ 754.804892][T14935] shmem 0 [ 754.807835][T14935] mapped_file 0 [ 754.811397][T14935] dirty 0 [ 754.814341][T14935] writeback 0 [ 754.817776][T14935] workingset_refault_anon 9583 [ 754.822636][T14935] workingset_refault_file 5811 [ 754.828099][T14935] swap 253952 [ 754.831392][T14935] swapcached 86016 [ 754.835373][T14935] pgpgin 103994 [ 754.838837][T14935] pgpgout 122880 [ 754.843371][T14935] pgfault 87253 [ 754.846886][T14935] pgmajfault 3916 [ 754.851308][T14935] inactive_anon 81920 [ 754.855394][T14935] active_anon 4096 [ 754.859125][T14935] inactive_file 0 [ 754.862761][T14935] active_file 0 [ 754.866250][T14935] unevictable 0 [ 754.869719][T14935] hierarchical_memory_limit 3145728 [ 754.884489][T14935] hierarchical_memsw_limit 9223372036854771712 [ 754.901952][T14935] total_cache 0 [ 754.905555][T14935] total_rss 0 [ 754.908851][T14935] total_rss_huge 0 [ 754.912578][T14935] total_shmem 0 [ 754.926206][T14935] total_mapped_file 0 [ 754.930937][T14935] total_dirty 0 [ 754.944136][T14935] total_writeback 0 [ 754.954438][T14935] total_workingset_refault_anon 9583 [ 754.964703][T14935] total_workingset_refault_file 5811 [ 754.974912][T14935] total_swap 253952 [ 754.978751][T14935] total_swapcached 86016 [ 754.989451][T14935] total_pgpgin 103994 [ 755.004233][T14935] total_pgpgout 122880 [ 755.008336][T14935] total_pgfault 87253 [ 755.012348][T14935] total_pgmajfault 3916 [ 755.027196][T14935] total_inactive_anon 81920 [ 755.032379][T14935] total_active_anon 4096 [ 755.041011][T14935] total_inactive_file 0 [ 755.054071][T14935] total_active_file 0 [ 755.080124][T14935] total_unevictable 0 [ 755.103004][T14935] anon_cost 0 [ 755.108243][T14935] file_cost 0 [ 755.111660][T14935] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1834,pid=14915,uid=0 [ 755.143180][T14935] Memory cgroup out of memory: Killed process 14915 (syz.4.1834) total-vm:135372kB, anon-rss:3296kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 755.451801][T14953] ima: policy update failed [ 755.483941][ T30] audit: type=1802 audit(1770563636.806:15): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1842" res=0 errno=0 [ 756.102391][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.109249][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.158737][T14961] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 756.190753][T14961] File: /dev/ram7 PID: 14961 Comm: syz.2.1845 [ 759.588372][T14992] kexec: Could not allocate control_code_buffer [ 761.223471][T15026] usb usb16: usbfs: process 15026 (syz.2.1859) did not claim interface 0 before use [ 761.691249][T15039] binder: 15034:15039 ioctl c018620c 0 returned -1 [ 765.676649][T15083] FAULT_INJECTION: forcing a failure. [ 765.676649][T15083] name failslab, interval 1, probability 0, space 0, times 0 [ 765.707025][T15083] CPU: 0 UID: 0 PID: 15083 Comm: syz.5.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.707065][T15083] Tainted: [L]=SOFTLOCKUP [ 765.707073][T15083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 765.707089][T15083] Call Trace: [ 765.707097][T15083] [ 765.707106][T15083] dump_stack_lvl+0x100/0x190 [ 765.707141][T15083] should_fail_ex.cold+0x5/0xa [ 765.707181][T15083] should_failslab+0xc2/0x120 [ 765.707216][T15083] kmem_cache_alloc_node_noprof+0x8c/0x880 [ 765.707267][T15083] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 765.707308][T15083] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 765.707348][T15083] ? zswap_store+0xc42/0x29d0 [ 765.707375][T15083] ? zswap_store+0xc42/0x29d0 [ 765.707397][T15083] zswap_store+0xc42/0x29d0 [ 765.707423][T15083] ? __pfx___up_read+0x10/0x10 [ 765.707459][T15083] ? rmap_walk_anon+0x561/0x870 [ 765.707486][T15083] ? __pfx_zswap_store+0x10/0x10 [ 765.707509][T15083] ? folio_free_swap+0x277/0x850 [ 765.707541][T15083] ? folio_free_swap+0x277/0x850 [ 765.707584][T15083] ? do_raw_spin_unlock+0x145/0x1e0 [ 765.707624][T15083] ? _raw_spin_unlock+0x28/0x50 [ 765.707648][T15083] ? folio_free_swap+0x39/0x850 [ 765.707681][T15083] ? try_to_unmap+0xce/0x1c0 [ 765.707707][T15083] ? __pfx_try_to_unmap+0x10/0x10 [ 765.707737][T15083] swap_writeout+0x49d/0x12b0 [ 765.707768][T15083] shrink_folio_list+0x5459/0x6000 [ 765.707806][T15083] ? __pfx_shrink_folio_list+0x10/0x10 [ 765.707832][T15083] ? mark_held_locks+0x40/0x70 [ 765.707864][T15083] ? rcu_is_cpu_rrupt_from_idle+0x260/0x270 [ 765.707902][T15083] ? update_load_avg+0x234/0x2090 [ 765.707947][T15083] ? set_next_entity+0x11a/0x9b0 [ 765.708003][T15083] ? lock_acquire+0x17c/0x330 [ 765.708033][T15083] ? find_held_lock+0x2b/0x80 [ 765.708068][T15083] reclaim_folio_list+0xdc/0x5a0 [ 765.708094][T15083] ? lockdep_hardirqs_on+0x78/0x100 [ 765.708127][T15083] ? __pfx_reclaim_folio_list+0x10/0x10 [ 765.708165][T15083] ? lru_gen_update_size+0x431/0xe40 [ 765.708198][T15083] ? lru_gen_del_folio+0x382/0x5f0 [ 765.708225][T15083] reclaim_pages+0x428/0x5e0 [ 765.708256][T15083] ? __pfx_reclaim_pages+0x10/0x10 [ 765.708282][T15083] ? find_held_lock+0x2b/0x80 [ 765.708306][T15083] ? madvise_cold_or_pageout_pte_range+0xb49/0x2710 [ 765.708352][T15083] madvise_cold_or_pageout_pte_range+0x1635/0x2710 [ 765.708404][T15083] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 765.708454][T15083] ? css_rstat_updated+0x1ce/0x5a0 [ 765.708486][T15083] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 765.708528][T15083] walk_pgd_range+0xc04/0x1eb0 [ 765.708579][T15083] ? __pfx_walk_pgd_range+0x10/0x10 [ 765.708612][T15083] ? folios_put_refs+0x66d/0x840 [ 765.708649][T15083] __walk_page_range+0x163/0x820 [ 765.708694][T15083] walk_page_range_vma_unsafe+0x23f/0x960 [ 765.708738][T15083] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 765.708783][T15083] ? find_held_lock+0x2b/0x80 [ 765.708806][T15083] ? mlock_drain_local+0x254/0x4e0 [ 765.708835][T15083] ? mlock_drain_local+0x254/0x4e0 [ 765.708869][T15083] walk_page_range_vma+0x63/0x90 [ 765.708904][T15083] madvise_pageout+0x259/0x540 [ 765.708948][T15083] ? __pfx_madvise_pageout+0x10/0x10 [ 765.708984][T15083] ? __lock_acquire+0x4a5/0x2630 [ 765.709035][T15083] madvise_vma_behavior+0x3d8/0x2a40 [ 765.709078][T15083] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 765.709120][T15083] ? __pfx_mt_find+0x10/0x10 [ 765.709159][T15083] ? find_vma_prev+0xd8/0x150 [ 765.709203][T15083] ? find_vma+0xbf/0x140 [ 765.709235][T15083] ? __pfx_find_vma+0x10/0x10 [ 765.709275][T15083] madvise_walk_vmas+0x2fe/0xa90 [ 765.709318][T15083] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 765.709364][T15083] madvise_do_behavior+0x1ea/0x510 [ 765.709406][T15083] ? __pfx_madvise_do_behavior+0x10/0x10 [ 765.709446][T15083] ? down_read+0x13b/0x460 [ 765.709492][T15083] do_madvise+0x195/0x240 [ 765.709529][T15083] ? __pfx_do_madvise+0x10/0x10 [ 765.709566][T15083] ? do_futex+0x192/0x350 [ 765.709618][T15083] ? xfd_validate_state+0x129/0x190 [ 765.709664][T15083] __x64_sys_madvise+0xa9/0x110 [ 765.709702][T15083] ? lockdep_hardirqs_on+0x78/0x100 [ 765.709730][T15083] do_syscall_64+0xc9/0xf80 [ 765.709763][T15083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.709787][T15083] RIP: 0033:0x7f2a7619aeb9 [ 765.709807][T15083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.709831][T15083] RSP: 002b:00007f2a770c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 765.709854][T15083] RAX: ffffffffffffffda RBX: 00007f2a76415fa0 RCX: 00007f2a7619aeb9 [ 765.709871][T15083] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 765.709886][T15083] RBP: 00007f2a76208c1f R08: 0000000000000000 R09: 0000000000000000 [ 765.709901][T15083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.709915][T15083] R13: 00007f2a76416038 R14: 00007f2a76415fa0 R15: 00007ffd2d81b5a8 [ 765.709953][T15083] [ 767.443862][T15098] usb usb16: usbfs: process 15098 (syz.5.1875) did not claim interface 0 before use [ 769.286573][T13071] kworker/u10:2 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 769.383189][T13071] CPU: 0 UID: 0 PID: 13071 Comm: kworker/u10:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.383228][T13071] Tainted: [L]=SOFTLOCKUP [ 769.383237][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 769.383265][T13071] Workqueue: writeback wb_workfn (flush-1:7) [ 769.383305][T13071] Call Trace: [ 769.383314][T13071] [ 769.383323][T13071] dump_stack_lvl+0x100/0x190 [ 769.383354][T13071] dump_header+0xfb/0x606 [ 769.383379][T13071] oom_kill_process.cold+0xd/0x321 [ 769.383406][T13071] out_of_memory+0x340/0x14f0 [ 769.383444][T13071] ? __pfx_out_of_memory+0x10/0x10 [ 769.383484][T13071] mem_cgroup_out_of_memory+0xc6/0x130 [ 769.383511][T13071] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 769.383537][T13071] ? find_held_lock+0x2b/0x80 [ 769.383567][T13071] ? do_raw_spin_unlock+0x145/0x1e0 [ 769.383605][T13071] ? _raw_spin_unlock+0x28/0x50 [ 769.383632][T13071] try_charge_memcg+0x652/0xc90 [ 769.383672][T13071] ? __pfx_try_charge_memcg+0x10/0x10 [ 769.383703][T13071] ? rcu_read_unlock+0x17/0x60 [ 769.383739][T13071] ? rcu_read_unlock+0x17/0x60 [ 769.383780][T13071] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 769.383812][T13071] obj_cgroup_charge_account+0x335/0x7e0 [ 769.383853][T13071] __memcg_slab_post_alloc_hook+0x2e4/0x880 [ 769.383895][T13071] ? kasan_save_track+0x14/0x30 [ 769.383929][T13071] kmem_cache_alloc_noprof+0x5d9/0x780 [ 769.383962][T13071] ? alloc_buffer_head+0x21/0x140 [ 769.383999][T13071] ? alloc_buffer_head+0x21/0x140 [ 769.384028][T13071] alloc_buffer_head+0x21/0x140 [ 769.384059][T13071] folio_alloc_buffers+0x2a0/0x8f0 [ 769.384102][T13071] create_empty_buffers+0x3a/0x660 [ 769.384146][T13071] ? find_held_lock+0x2b/0x80 [ 769.384172][T13071] folio_create_buffers+0x13b/0x1a0 [ 769.384210][T13071] __block_write_full_folio+0xed/0xee0 [ 769.384247][T13071] ? folio_clear_dirty_for_io+0x128/0x820 [ 769.384291][T13071] ? __pfx_blkdev_get_block+0x10/0x10 [ 769.384324][T13071] block_write_full_folio+0x3b5/0x4e0 [ 769.384349][T13071] ? __pfx_blkdev_get_block+0x10/0x10 [ 769.384381][T13071] blkdev_writepages+0xc7/0x150 [ 769.384411][T13071] ? __pfx_blkdev_writepages+0x10/0x10 [ 769.384453][T13071] ? __lock_acquire+0x4a5/0x2630 [ 769.384483][T13071] ? __pfx_blkdev_writepages+0x10/0x10 [ 769.384514][T13071] do_writepages+0x278/0x600 [ 769.384543][T13071] ? __pfx_do_writepages+0x10/0x10 [ 769.384573][T13071] __writeback_single_inode+0x164/0x13c0 [ 769.384612][T13071] ? find_held_lock+0x2b/0x80 [ 769.384640][T13071] ? __pfx___writeback_single_inode+0x10/0x10 [ 769.384679][T13071] ? do_raw_spin_unlock+0x145/0x1e0 [ 769.384722][T13071] writeback_sb_inodes+0x72e/0x1b90 [ 769.384774][T13071] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 769.384849][T13071] ? _raw_spin_unlock+0x28/0x50 [ 769.384873][T13071] ? move_expired_inodes+0x5ea/0x8f0 [ 769.384916][T13071] __writeback_inodes_wb+0xf8/0x2d0 [ 769.384960][T13071] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 769.385001][T13071] ? queue_io+0x286/0x4f0 [ 769.385037][T13071] wb_writeback+0x6b4/0xab0 [ 769.385082][T13071] ? __pfx_wb_writeback+0x10/0x10 [ 769.385129][T13071] ? get_nr_dirty_inodes+0x115/0x190 [ 769.385171][T13071] wb_workfn+0x83a/0xbb0 [ 769.385200][T13071] ? __pfx_wb_workfn+0x10/0x10 [ 769.385230][T13071] ? process_one_work+0x80b/0x1840 [ 769.385269][T13071] ? rcu_is_watching+0x12/0xc0 [ 769.385303][T13071] process_one_work+0x9c2/0x1840 [ 769.385357][T13071] ? __pfx_process_one_work+0x10/0x10 [ 769.385404][T13071] ? assign_work+0x19c/0x250 [ 769.385441][T13071] worker_thread+0x5da/0xe40 [ 769.385489][T13071] ? kthread+0x17d/0x730 [ 769.385521][T13071] ? __pfx_worker_thread+0x10/0x10 [ 769.385560][T13071] kthread+0x3b3/0x730 [ 769.385595][T13071] ? __pfx_kthread+0x10/0x10 [ 769.385628][T13071] ? ret_from_fork+0x79/0xaf0 [ 769.385650][T13071] ? ret_from_fork+0x79/0xaf0 [ 769.385672][T13071] ? rcu_is_watching+0x12/0xc0 [ 769.385696][T13071] ? __pfx_kthread+0x10/0x10 [ 769.385731][T13071] ret_from_fork+0x754/0xaf0 [ 769.385755][T13071] ? __pfx_ret_from_fork+0x10/0x10 [ 769.385795][T13071] ? __switch_to+0x7b9/0x10c0 [ 769.385826][T13071] ? __pfx_kthread+0x10/0x10 [ 769.385862][T13071] ret_from_fork_asm+0x1a/0x30 [ 769.385915][T13071] [ 769.385924][T13071] memory: usage 3068kB, limit 3072kB, failcnt 56794 [ 770.060703][T13536] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 770.077447][T13536] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 770.086565][T13536] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 770.094401][T13536] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 770.103680][T13536] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 770.236381][T13071] memory+swap: usage 3180kB, limit 9007199254740988kB, failcnt 0 [ 770.244171][T13071] kmem: usage 2376kB, limit 9007199254740988kB, failcnt 0 [ 770.291184][T13071] Memory cgroup stats for /syz4: [ 770.291449][T13071] cache 360448 [ 770.304886][T13071] rss 16384 [ 770.308036][T13071] rss_huge 0 [ 770.311257][T13071] shmem 61440 [ 770.344494][T13071] mapped_file 0 [ 770.348036][T13071] dirty 110592 [ 770.355405][T15117] loop6: detected capacity change from 0 to 8 [ 770.368203][T13071] writeback 0 [ 770.371539][T13071] workingset_refault_anon 10708 [ 770.414695][T13071] workingset_refault_file 8870 [ 770.419516][T13071] swap 163840 [ 770.422819][T13071] swapcached 45056 [ 770.497643][T13071] pgpgin 114268 [ 770.534706][T13071] pgpgout 133096 [ 770.538421][T13071] pgfault 96389 [ 770.541899][T13071] pgmajfault 4827 [ 770.603995][T13071] inactive_anon 106496 [ 770.608112][T13071] active_anon 4096 [ 770.611837][T13071] inactive_file 249856 [ 770.679498][T13071] active_file 49152 [ 770.702499][T13071] unevictable 0 [ 770.706143][T13071] hierarchical_memory_limit 3145728 [ 770.711444][T13071] hierarchical_memsw_limit 9223372036854771712 [ 770.780183][T13071] total_cache 360448 [ 770.804493][T13071] total_rss 16384 [ 770.808354][T13071] total_rss_huge 0 [ 770.842916][T13071] total_shmem 61440 [ 770.846806][T13071] total_mapped_file 0 [ 770.850795][T13071] total_dirty 110592 [ 770.905398][T13071] total_writeback 0 [ 770.909274][T13071] total_workingset_refault_anon 10708 [ 770.936487][T13071] total_workingset_refault_file 8870 [ 770.946627][T13071] total_swap 163840 [ 770.950479][T13071] total_swapcached 45056 [ 770.965214][T13071] total_pgpgin 114268 [ 770.969240][T13071] total_pgpgout 133096 [ 770.987555][T13071] total_pgfault 96389 [ 770.997861][T13071] total_pgmajfault 4827 [ 771.005434][T13071] total_inactive_anon 106496 [ 771.010060][T13071] total_active_anon 4096 [ 771.018211][T15113] chnl_net:caif_netlink_parms(): no params data found [ 771.033007][T13071] total_inactive_file 249856 [ 771.052640][T13071] total_active_file 49152 [ 771.057034][T13071] total_unevictable 0 [ 771.075907][T13071] anon_cost 0 [ 771.085263][T13071] file_cost 0 [ 771.101844][T13071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1873,pid=15086,uid=0 [ 771.135950][T13071] Memory cgroup out of memory: OOM victim 15086 (syz.4.1873) is already exiting. Skip killing the task [ 771.434452][T15113] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.458922][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.508577][T15113] bridge_slave_0: entered allmulticast mode [ 771.530875][T15113] bridge_slave_0: entered promiscuous mode [ 771.605986][T15113] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.627840][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.663532][T15113] bridge_slave_1: entered allmulticast mode [ 771.687315][T15113] bridge_slave_1: entered promiscuous mode [ 771.918951][T15113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.007565][ T31] INFO: task kworker/u10:1:13070 blocked for more than 143 seconds. [ 772.022242][ T31] Tainted: G L syzkaller #0 [ 772.029806][T15113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 772.055227][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 772.097149][ T31] task:kworker/u10:1 state:D stack:26776 pid:13070 tgid:13070 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 772.145659][ T31] Workqueue: netns cleanup_net [ 772.163054][ T31] Call Trace: [ 772.166609][T15115] Bluetooth: hci5: command tx timeout [ 772.181571][ T31] [ 772.190409][ T31] ? __schedule+0xf65/0x5e10 [ 772.213360][ T31] __schedule+0xfe4/0x5e10 [ 772.230223][ T31] ? __lock_acquire+0x4a5/0x2630 [ 772.244295][ T31] ? __pfx___schedule+0x10/0x10 [ 772.362746][ T31] ? find_held_lock+0x2b/0x80 [ 772.375149][ T31] ? schedule+0x2bf/0x390 [ 772.379574][ T31] schedule+0xdd/0x390 [ 772.404346][ T31] schedule_timeout+0x1b2/0x280 [ 772.409333][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 772.437417][ T31] ? mark_held_locks+0x40/0x70 [ 772.442279][ T31] __wait_for_common+0x2e7/0x4c0 [ 772.473538][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 772.479003][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 772.492974][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 772.498354][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 772.515457][ T31] __flush_workqueue+0x3f7/0x1200 [ 772.520622][ T31] ? __lock_acquire+0x4a5/0x2630 [ 772.543039][ T31] ? __lock_acquire+0x4a5/0x2630 [ 772.548071][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 772.566419][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 772.571793][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 772.592465][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 772.598362][ T31] rds_tcp_listen_stop+0x104/0x160 [ 772.612335][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 772.631262][ T31] rds_tcp_exit_net+0xcb/0x810 [ 772.640876][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 772.652080][ T31] ? __pfx___might_resched+0x10/0x10 [ 772.668480][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 772.678427][ T31] ops_undo_list+0x2ee/0xab0 [ 772.687320][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 772.701958][ T31] ? cleanup_net+0x345/0x830 [ 772.706715][ T31] ? idr_destroy+0x62/0x2e0 [ 772.711549][ T31] cleanup_net+0x419/0x830 [ 772.732548][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 772.737569][ T31] ? rcu_is_watching+0x12/0xc0 [ 772.756985][ T31] process_one_work+0x9c2/0x1840 [ 772.764387][ T31] ? __pfx_process_one_work+0x10/0x10 [ 772.771313][ T31] ? assign_work+0x19c/0x250 [ 772.776321][ T31] worker_thread+0x5da/0xe40 [ 772.781081][ T31] ? kthread+0x17d/0x730 [ 772.785951][ T31] ? __pfx_worker_thread+0x10/0x10 [ 772.791548][ T31] kthread+0x3b3/0x730 [ 772.795754][ T31] ? __pfx_kthread+0x10/0x10 [ 772.800382][ T31] ? ret_from_fork+0x79/0xaf0 [ 772.805800][ T31] ? ret_from_fork+0x79/0xaf0 [ 772.810514][ T31] ? rcu_is_watching+0x12/0xc0 [ 772.815638][ T31] ? __pfx_kthread+0x10/0x10 [ 772.821742][ T31] ret_from_fork+0x754/0xaf0 [ 772.826382][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 772.831921][ T31] ? __switch_to+0x7b9/0x10c0 [ 772.836659][ T31] ? __pfx_kthread+0x10/0x10 [ 772.842305][ T31] ret_from_fork_asm+0x1a/0x30 [ 772.847233][ T31] [ 772.948119][ T31] [ 772.948119][ T31] Showing all locks held in the system: [ 772.983700][ T31] 1 lock held by khungtaskd/31: [ 772.988742][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 773.015970][ T31] 2 locks held by getty/12178: [ 773.021232][ T31] #0: ffff88814de390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 773.032533][ T31] #1: ffffc900041732f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 773.043421][ T31] 3 locks held by kworker/u10:1/13070: [ 773.048921][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 773.059688][ T31] #1: ffffc9000b39fc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 773.070829][ T31] #2: ffffffff903dd3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 773.084379][ T31] 1 lock held by syz.3.1493/13311: [ 773.089526][ T31] #0: ffffffff903dd3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 773.099562][ T31] 1 lock held by syz.0.1840/14943: [ 773.105214][ T31] #0: ffffffff903dd3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 773.114958][ T31] 1 lock held by syz.2.1870/15073: [ 773.124719][ T31] #0: ffffffff903dd3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 773.135830][ T31] 1 lock held by syz-executor/15113: [ 773.141452][ T31] #0: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 773.151874][ T31] 2 locks held by syz.5.1881/15124: [ 773.157282][ T31] #0: ffffffff903dd3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 773.167958][ T31] #1: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 773.179567][ T31] 1 lock held by syz.4.1882/15128: [ 773.184735][ T31] #0: ffffffff8e5ef7c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 773.239061][ T31] [ 773.241549][ T31] ============================================= [ 773.241549][ T31] [ 773.297457][ T31] NMI backtrace for cpu 0 [ 773.297482][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 773.297516][ T31] Tainted: [L]=SOFTLOCKUP [ 773.297524][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 773.297539][ T31] Call Trace: [ 773.297554][ T31] [ 773.297563][ T31] dump_stack_lvl+0x100/0x190 [ 773.297595][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 773.297628][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 773.297668][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 773.297710][ T31] sys_info+0x141/0x190 [ 773.297741][ T31] watchdog+0xcc3/0xfe0 [ 773.297782][ T31] ? __pfx_watchdog+0x10/0x10 [ 773.297809][ T31] ? __kthread_parkme+0x18c/0x230 [ 773.297838][ T31] ? __pfx_watchdog+0x10/0x10 [ 773.297865][ T31] ? __pfx_watchdog+0x10/0x10 [ 773.297889][ T31] kthread+0x3b3/0x730 [ 773.297924][ T31] ? __pfx_kthread+0x10/0x10 [ 773.297956][ T31] ? ret_from_fork+0x79/0xaf0 [ 773.297978][ T31] ? ret_from_fork+0x79/0xaf0 [ 773.298001][ T31] ? rcu_is_watching+0x12/0xc0 [ 773.298025][ T31] ? __pfx_kthread+0x10/0x10 [ 773.298061][ T31] ret_from_fork+0x754/0xaf0 [ 773.298085][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 773.298111][ T31] ? __switch_to+0x7b9/0x10c0 [ 773.298142][ T31] ? __pfx_kthread+0x10/0x10 [ 773.298178][ T31] ret_from_fork_asm+0x1a/0x30 [ 773.298232][ T31] [ 773.856855][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 773.863764][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 773.874569][ T31] Tainted: [L]=SOFTLOCKUP [ 773.878932][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 773.889477][ T31] Call Trace: [ 773.892785][ T31] [ 773.895770][ T31] dump_stack_lvl+0x100/0x190 [ 773.900557][ T31] vpanic+0x20d/0x630 [ 773.904925][ T31] panic+0xd1/0xd1 [ 773.908733][ T31] ? __pfx_panic+0x10/0x10 [ 773.913185][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 773.919472][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 773.925684][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 773.931872][ T31] ? watchdog.cold+0x198/0x1ca [ 773.936655][ T31] ? watchdog+0xcd3/0xfe0 [ 773.941022][ T31] watchdog.cold+0x1a9/0x1ca [ 773.945659][ T31] ? __pfx_watchdog+0x10/0x10 [ 773.950365][ T31] ? __kthread_parkme+0x18c/0x230 [ 773.955419][ T31] ? __pfx_watchdog+0x10/0x10 [ 773.960290][ T31] ? __pfx_watchdog+0x10/0x10 [ 773.965000][ T31] kthread+0x3b3/0x730 [ 773.969140][ T31] ? __pfx_kthread+0x10/0x10 [ 773.973807][ T31] ? ret_from_fork+0x79/0xaf0 [ 773.978518][ T31] ? ret_from_fork+0x79/0xaf0 [ 773.983218][ T31] ? rcu_is_watching+0x12/0xc0 [ 773.988000][ T31] ? __pfx_kthread+0x10/0x10 [ 773.992634][ T31] ret_from_fork+0x754/0xaf0 [ 773.997271][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 774.002505][ T31] ? __switch_to+0x7b9/0x10c0 [ 774.007296][ T31] ? __pfx_kthread+0x10/0x10 [ 774.011912][ T31] ret_from_fork_asm+0x1a/0x30 [ 774.016807][ T31] [ 774.019903][ T31] Kernel Offset: disabled [ 774.024248][ T31] Rebooting in 86400 seconds..