last executing test programs: 20m42.61754961s ago: executing program 3 (id=998): ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000280)={0xffffffffffffffff, 0xb}) rseq$auto(&(0x7f0000000200)={0xe, 0x400, 0xfb82, 0xfc, 0xffffffff, 0x200}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mincore$auto(0x1000, 0x8003, 0x0) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getpgid(0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/tracing_on\x00', 0x84201, 0x0) futex$auto(0x0, 0x8b, 0x7, 0x0, 0x0, 0x71e8dcdc) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/mb_stats\x00', 0x88000, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x1}, 0x40004) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0xea) 20m38.881766118s ago: executing program 3 (id=1005): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rpc/nfsd\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a666f5879830000000", @ANYRES16=r1, @ANYBLOB="0100253d7000fddbdf2501000000100007800c00018008000180000000000c0002000600000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) munmap$auto(0x0, 0xffffffff) 20m34.795406523s ago: executing program 3 (id=1015): openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/ns/cgroup\x00', 0x440081, 0x0) rseq$auto(&(0x7f0000000200)={0xe, 0x400, 0xfb82, 0xfc, 0xffffffff, 0x200}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mincore$auto(0x1000, 0x8003, 0x0) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r0, 0x40085203, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getpgid(0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/tracing_on\x00', 0x84201, 0x0) futex$auto(0x0, 0x8b, 0x7, 0x0, 0x0, 0x71e8dcdc) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/mb_stats\x00', 0x88000, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x1}, 0x40004) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0xea) 20m31.208451497s ago: executing program 3 (id=1025): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000000180)="0a1b9a5c7d00006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabd", 0x27) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7e, 0x0, 0x175c}}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) 20m29.266503104s ago: executing program 3 (id=1029): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "313bf5eb195a060000002af9ffb683dba3931f33828bbfba40f03510bf6b7fe5e2f94ba460d57d448667798d"}, 0x401, 0x5, 0x4, @inferred, @integer={0x4, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 20m27.074282155s ago: executing program 3 (id=1033): socketcall$auto(0x8008, 0x0) mmap$auto(0x2, 0x2020009, 0x4000000000000003, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000640)={0x2a4, r4, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_BANDS={0x284, 0x4, 0x0, 0x1, [@generic, @nested={0x27d, 0x10d, 0x0, 0x1, [@generic="430b9d17a8ecfa48c0e17755ecd5d46a8588fcd7cc3ad678edd7dac0aa4f92db17405d344d3202b390afa845d5378143a8f98e1ac2ec2396fa0ef5e35851efee7eec", @generic="d844d437e16a767fd1e4f94ca4e001894820f11f7c08f1a63851783f64a351d8b194575afba6e3d3334aa84448a2a59c5522386d2acf3163ec517e558256747ac80cb9235605d79e304c779ee91c1115172e3012daf3662a479d26c054c0b6f826cab6fc1ee0a0b18419c94b6a5ed58587256cf0a6ed968bedf42e9a70fc66f0a4be7f845d0d39e3fe1471583353d7c2862b523dd589a993e7cfe591a58afe6130b5be028264cc902c792a892246d064c4bcae0f45e40caf8170224200d461364828", @typed={0x8, 0xc4, 0x0, 0x0, @pid}, @nested={0x3f, 0x122, 0x0, 0x1, [@generic="da0b0f3687a69245b6f6730a58dec2fcf783f8ec2c6e77d8f3098e3a45b17ad31f3ded4947974900350b7216ee8f68ad096bd66649b48f2edf7458"]}, @generic="57bd5577b095bc0707", @typed={0x52, 0x9b, 0x0, 0x0, @binary="1ccdaff36829caeffe8ca2bec7831839bb8e9bbedfcc7bc9c6f99e6d9873a1af1f8d7d06e20fc6c8c7e2877a7f46735318f474ceb4bd161be52f5716f6f019b1cefa8a526f3a5ac78057b4bd8455"}, @typed={0x16, 0xcb, 0x0, 0x0, @binary="0853f092e07d31f8eb8809564d700de8aa06"}, @nested={0xb7, 0xca, 0x0, 0x1, [@nested={0x23, 0x104, 0x0, 0x1, [@generic="be5fc8351fe62be0bc1551fd3e077313b4a95a2d7580a454a57e36", @nested={0x4, 0xee}]}, @generic="5009778284e30825f5cade16ca948ca5c396ea01254ca4a0a9390d7b57f915624d33817847cf6182fd92e8eb5c4f883fe75ee2e35c17e4de7becf724583e2b38159a40d8db0d3224811d9668ae91121a15293863e017d310613b1aabb6ce8bafc0973d48738630d6459d4765cf541d610e413cc5c984cb368ac9c5b44bd3e51a8e79c3e14eaf5712ffcffa7c38cd0e"]}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) ioctl$auto(r2, 0x900064b5, 0xc14) socket(0x28, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) socket(0x28, 0x801, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') unshare$auto(0x6) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 20m26.685056621s ago: executing program 32 (id=1033): socketcall$auto(0x8008, 0x0) mmap$auto(0x2, 0x2020009, 0x4000000000000003, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000640)={0x2a4, r4, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_BANDS={0x284, 0x4, 0x0, 0x1, [@generic, @nested={0x27d, 0x10d, 0x0, 0x1, [@generic="430b9d17a8ecfa48c0e17755ecd5d46a8588fcd7cc3ad678edd7dac0aa4f92db17405d344d3202b390afa845d5378143a8f98e1ac2ec2396fa0ef5e35851efee7eec", @generic="d844d437e16a767fd1e4f94ca4e001894820f11f7c08f1a63851783f64a351d8b194575afba6e3d3334aa84448a2a59c5522386d2acf3163ec517e558256747ac80cb9235605d79e304c779ee91c1115172e3012daf3662a479d26c054c0b6f826cab6fc1ee0a0b18419c94b6a5ed58587256cf0a6ed968bedf42e9a70fc66f0a4be7f845d0d39e3fe1471583353d7c2862b523dd589a993e7cfe591a58afe6130b5be028264cc902c792a892246d064c4bcae0f45e40caf8170224200d461364828", @typed={0x8, 0xc4, 0x0, 0x0, @pid}, @nested={0x3f, 0x122, 0x0, 0x1, [@generic="da0b0f3687a69245b6f6730a58dec2fcf783f8ec2c6e77d8f3098e3a45b17ad31f3ded4947974900350b7216ee8f68ad096bd66649b48f2edf7458"]}, @generic="57bd5577b095bc0707", @typed={0x52, 0x9b, 0x0, 0x0, @binary="1ccdaff36829caeffe8ca2bec7831839bb8e9bbedfcc7bc9c6f99e6d9873a1af1f8d7d06e20fc6c8c7e2877a7f46735318f474ceb4bd161be52f5716f6f019b1cefa8a526f3a5ac78057b4bd8455"}, @typed={0x16, 0xcb, 0x0, 0x0, @binary="0853f092e07d31f8eb8809564d700de8aa06"}, @nested={0xb7, 0xca, 0x0, 0x1, [@nested={0x23, 0x104, 0x0, 0x1, [@generic="be5fc8351fe62be0bc1551fd3e077313b4a95a2d7580a454a57e36", @nested={0x4, 0xee}]}, @generic="5009778284e30825f5cade16ca948ca5c396ea01254ca4a0a9390d7b57f915624d33817847cf6182fd92e8eb5c4f883fe75ee2e35c17e4de7becf724583e2b38159a40d8db0d3224811d9668ae91121a15293863e017d310613b1aabb6ce8bafc0973d48738630d6459d4765cf541d610e413cc5c984cb368ac9c5b44bd3e51a8e79c3e14eaf5712ffcffa7c38cd0e"]}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) ioctl$auto(r2, 0x900064b5, 0xc14) socket(0x28, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) socket(0x28, 0x801, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') unshare$auto(0x6) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 11m41.52345032s ago: executing program 1 (id=2197): socket(0xf, 0x800, 0x80000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x80005fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) r1 = epoll_create$auto(0x4) epoll_pwait$auto(r1, 0x0, 0x800, 0x4d, 0x0, 0x8) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0xffffffffffffffff, 0x0, 0x8) 11m38.382028312s ago: executing program 1 (id=2208): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20007, 0x10000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) ioctl$auto(0x3, 0x8108551b, 0x1) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x80, 0x0) r1 = socket(0x1d, 0x3, 0x1) r2 = getsockopt$auto(r1, 0x65, 0x1, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x10, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x102, 0x7, 0x466, 0x0}) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) process_vm_readv$auto(0x0, &(0x7f0000000200)={0x0, 0xfff}, 0x0, &(0x7f0000000280)={&(0x7f0000000300)="1138f4bff347ce668eca0a893000d4b6228272771f0708bfd770573ee574f8ebcd04de3df6f402ebde1a", 0x400000fffffffe}, 0xa, 0x3b9f) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000040)={@sival_int=0x6, @raw=0x9}, &(0x7f0000000080)=0x2) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x119040, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0xffffff71, 0x10000}) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/devices\x00', 0x0, 0x0) r6 = clone$auto(0x1, 0xf, &(0x7f00000001c0)=0x80000001, &(0x7f00000002c0)=0x1aa, 0x1) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, r6) preadv$auto(r5, &(0x7f0000009180)={0x0, 0x7}, 0x26, 0x800000000080, 0x5) 11m34.403751428s ago: executing program 1 (id=2214): socket(0xa, 0x1, 0x84) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x1e, 0x1, 0x106) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x2, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x5, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x1a, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x8000001, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44811}, 0x800) close_range$auto(0x2, 0x8, 0x0) 11m32.010792188s ago: executing program 1 (id=2216): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20007, 0x10000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x80, 0x0) r1 = socket(0x1d, 0x3, 0x1) r2 = getsockopt$auto(r1, 0x65, 0x1, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x10, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x102, 0x7, 0x466, 0x0}) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) process_vm_readv$auto(0x0, &(0x7f0000000200)={0x0, 0xfff}, 0x0, &(0x7f0000000280)={&(0x7f0000000300)="1138f4bff347ce668eca0a893000d4b6228272771f0708bfd770573ee574f8ebcd04de3df6f402ebde1a4cbee55f9037676ef3c76763da", 0x400000fffffffe}, 0xa, 0x3b9f) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000040)={@sival_int=0x6, @raw=0x9}, &(0x7f0000000080)=0x2) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x119040, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0x800000ff, 0xffffff71, 0x10000}) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/devices\x00', 0x0, 0x0) r6 = clone$auto(0x1, 0xf, &(0x7f00000001c0)=0x80000001, &(0x7f00000002c0)=0x1aa, 0x1) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, r6) preadv$auto(r5, &(0x7f0000009180)={0x0, 0x7}, 0x26, 0x800000000080, 0x5) 11m26.941273036s ago: executing program 1 (id=2229): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=ANY=[@ANYBLOB="267466a62958b213d250b71567a2a1295dcda93d5e4652b7354db9aa73473eedabc1b8c84a09f249e39b0dc0956b69", @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf255f0000006800c8002cc63c58a5b98fa7d6eca4e325a871c9238b1227015c8ff1128759b6240baa3220e665cce23cabccaec79442d2d13f81ea41d5fa902b641033041ec5fe134ff839900c46bbb2b2611ed8b1e82058680778641f42bde1b309108bbf7bc04afefe8c58df5708000b01ffffffff050020010e00000008000d00060000001c001b8004000300040002000400030005000100080000000400030004006c000600f70007060000040041"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0xc804) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) ioctl$auto_UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, &(0x7f0000000140)=0xc) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x1fdfe]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) getuid() 11m16.512955893s ago: executing program 1 (id=2247): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x1e, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x8000001, 0x3, 0x3, 0x15f4da0a, 0x3, 0x20a, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xe, 0x1]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 11m15.81558147s ago: executing program 33 (id=2247): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x1e, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x8000001, 0x3, 0x3, 0x15f4da0a, 0x3, 0x20a, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xe, 0x1]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m53.606147432s ago: executing program 5 (id=3398): socket(0x11, 0x80003, 0x300) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) clock_gettime$auto(0x80000020, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket(0x11, 0x2, 0x9) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, 0xffffffffffffffff, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x44, r1, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0xc, 0xb0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x1e}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x44}}, 0x24048084) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0xe, 0x0, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/name_assign_type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/213, 0xd5) fcntl$auto(0xff80000000000000, 0x409, 0x3f) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) 3m52.235153631s ago: executing program 5 (id=3402): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x2) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x816}, 0x9, 0x0, 0x4001000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0xf, 0xa, 0xf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_MEMGETINFO(r0, 0x80204d01, &(0x7f0000000240)={0x5, 0x6, 0x1, 0xc, 0x8, 0x2}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/delayed_allocation_blocks\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000840)=""/4079, 0xfef) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x16240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000200)=""/53, 0x35) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') inotify_init1$auto(0x0) 3m51.061885388s ago: executing program 5 (id=3406): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x800, 0x0) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x101041, 0x0) 3m50.563010986s ago: executing program 5 (id=3408): bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc804) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x400280, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x80000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) 3m48.66789137s ago: executing program 5 (id=3412): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/nilfs2/features/revision\x00', 0x200c00, 0x0) getgroups$auto(0xffffffff, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x924a, &(0x7f0000000140)="576d65c5b1ba3b8141b55e23acd3dd459455c8697b8adc541d61788e699d36838703c736bf921e1f845d0b21c62f13afe7a3a941c75e7f59b37d7706d6dcded643a88cebe1e771a55c548f2201ab2d708f58697c71298f847ef167bf53e6208b7632e2bd8bf5bd55ee663d7abe5df79ecec7a8011c7574d4c6476226cd0ca80031cce6e9437df2ba1f28f84d1d725a77aec5c2e43dea6f67336bf63f834260887c688f8bc0fb4927d7ddebaf52d0134504e9021175d5d941b5d60602437711beb9fc207358f691e882c83bf8d0584a7ea7") syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), 0xffffffffffffffff) statx$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x7, 0xff, &(0x7f0000000240)={0x3, 0x1, 0x80000004, 0x9, 0x0, 0xee00, 0x5, 0x899, 0xfffffffffffffc00, 0x2000000000000001, 0xe1, 0x8, {0x9, 0x81}, {0x6, 0x7fff}, {0xd14b845, 0xfffffffc}, {0x4, 0x8}, 0xae1, 0xb, 0x6, 0x3, 0xa121, 0x0, 0x5, 0x8, 0x0, 0x5, 0x8, 0xfe, [0x8000000008, 0x6, 0xffff, 0x83, 0x41, 0x5, 0x8001, 0x7, 0x1000]}) mmap$auto(0xffffffffffffa3d9, 0x4020009, 0xdf, 0x80000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0xb) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x9, 0x800, 0x3b) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x890) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = set_tid_address$auto(0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0x40) getdents$auto(r2, 0x0, 0xa2b0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcd) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/add_random\x00', 0x1a1842, 0x0) write$auto(r4, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd3\x00', 0x56f602, 0x0) mmap$auto(0x800000000, 0x40000000081, 0x2, 0x18, 0xfffffffffffffffa, 0x4) write$auto(r0, &(0x7f00000001c0)='//\xf2\x00', 0x880000000) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) unshare$auto(0x40000080) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyz7\x00', 0x40a81, 0x0) 3m46.883094266s ago: executing program 5 (id=3417): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r0, 0x4c82, 0x0) r1 = epoll_create$auto(0x4) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r4) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f00000050c0)={0x0, 0xf5, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_THREADS_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000814}, 0x4004846) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) epoll_ctl$auto(r1, 0x1, r2, 0x0) ioctl$auto_OTPGETREGIONINFO(r1, 0x400c4d0f, &(0x7f0000000000)={0x9, 0x0, 0x56b}) 3m31.238448951s ago: executing program 34 (id=3417): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r0, 0x4c82, 0x0) r1 = epoll_create$auto(0x4) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r4) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f00000050c0)={0x0, 0xf5, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_THREADS_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000814}, 0x4004846) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) epoll_ctl$auto(r1, 0x1, r2, 0x0) ioctl$auto_OTPGETREGIONINFO(r1, 0x400c4d0f, &(0x7f0000000000)={0x9, 0x0, 0x56b}) 1m14.456633837s ago: executing program 6 (id=3826): ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)={0x20d, 0xf89, [{0xffffffffffffffff, 0x0, 0x8, 0x80000001}]}) r0 = getpid() mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b72, r2) 1m14.129186705s ago: executing program 6 (id=3827): r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x30, 0x0, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x4) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0c\x00', 0x2800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES2(r1, 0x40184152, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x8000, 0x0) ioctl$auto_tracing_buffers_fops_trace(r2, 0x5220, 0x0) 1m13.098366951s ago: executing program 6 (id=3829): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x816}, 0x9, 0x0, 0x4001000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0xf, 0xa, 0xf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, &(0x7f0000000240)={0x5, 0x6, 0x1, 0xc, 0x8, 0x2}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/delayed_allocation_blocks\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000840)=""/4079, 0xfef) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(0x0, 0x22240, 0x154) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x16240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000200)=""/53, 0x35) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') inotify_init1$auto(0x0) 1m13.096344685s ago: executing program 0 (id=3837): r0 = socket(0x2, 0x801, 0x106) r1 = getsockopt$auto(r0, 0x11c, 0x3, 0x0, 0x0) ioctl$auto(r1, 0x541c, r1) 1m12.946606135s ago: executing program 0 (id=3831): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) getdents64$auto(r0, &(0x7f0000000180)={0x9d, 0x1582, 0x7f, 0x44, "2c43fac185b93ee0be6831aceea7276822ab4ffd4e057297a9ee5608157ea8dd163b"}, 0x3ff) futex_wait$auto(&(0x7f00000000c0)="e867b0ac2cd328e42640942a134a69e079e5e8b18c990cb4b177074acf53d5a93eef82dd75be45068c39c5b6cad9d8d341f72759a0b7678f42ce196441dd15b741798b2f915d004d81fd19d237178d87b5e6b2be9de7a0754b497fae46e91ce9869a2dd49cd734547eac8e3e9ca8fec0cf682537908fdb1bb6793a13049467ceab28ee55ba8d7f7532015d84eeb56e5086925e32ea", 0xb6, 0xf, 0x5, &(0x7f0000000040)={0x4, 0x4}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpid() r1 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x8925, 0x0) prctl$auto(0x1d, 0x6b, r1, 0xfffffffffffffff5, 0x7fffffff) 1m11.514663631s ago: executing program 0 (id=3834): r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r0, &(0x7f0000000240)='!', 0x1) 1m11.514020176s ago: executing program 6 (id=3835): bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, 0x0, 0x1fe, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc804) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x400280, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/usb/usbmon/27u\x00', 0x80000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) 1m11.26979625s ago: executing program 0 (id=3838): ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)="1b339a38e0199810619858cc3e878be9890ea66ac5dc7f88ed2bc6c27d014e33e5d6f460647d7f422491eaed299dfdea64a84e6f3e66ccbc7d0fe14ee7a772b0ef9922a5e28036a119d73f93312dc1132e3125beecf5ab", 0x0, &(0x7f0000000140)="6cf8dcfc0e0766277938acd5fb4741cd5647d7aca1d55178c647afec9a19338a94308a07196ba644366690d8343817ad80707558e22e3be1e36760baf35925e60053a559c2355617055220806faf55bd18cc8d0647a4f7573ed08d5fc9f6", 0x11d5b572, &(0x7f0000000000)="3edce2649600ae4fd83977ad86fd815a54e821a87f", &(0x7f00000001c0)=0x1abd}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x200001, 0x200a, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/block/loop7/hctx0/tags_bitmap\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptyw9/power/runtime_active_time\x00', 0x38000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS2\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r1, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r1, &(0x7f0000000040)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x8, 0x1060}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x1, 0x4a, 0x0, 0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="000126bd7000fcdbdf25200000001c00e7008725e692331bbc0c00f8787786dfc2d1bc76234c5be705a4d10017003ae3e102691a0f767200141d60b793fe6e0c2c3cf1d297fbfb536c5edc8c1a75e75edeb49494723a59a65ee798449f8b6d1d9141219f4c10f8a679ae7442e1fddc821481853ce596b2e688c662ca75912cffffe479716da1d0b50bcb264cf594e28da43312408829d1e153fe2ca8916b50afe8d36ec6a43789d1dc50462465eafe325e17b43a5b7b2a5d5f9c9f3d886fc5f5d2b755d37160bface910b30197922ed2ea60eac414e69d639d91bdf7b16d9b16fb1ccdc2320a7cb6d5934aeb89e38da14dbe537263021a8607713100000064000600209736b5a68089b32f4ddf389cfd683e2cf4fc575c7a17382e44c165b6e5cb31419f6ce1289709c8a0ba6b1aa96d4e18d42490add52d2fed0f673517ec265faa6d0383bccf530395e2ddb0d3512c36076fec55db8aab510cdb9757e436a981960c003f6bb9bb347b4832000004000b00b4002801c276c7d3d1e379ff047e0a279dd4b16360b5d93a7a6e3d4b452eebb1b204f37398fde42dff3187b348e1a2011074842bedbcc09c756ed4c91a13d9fa46d8f3afb31c41e60c39c53f2e72075025a4a06af6845f1c66cb232f1c1b204c5ac51c9b48312199473d91a5202aa5bfd19cb53f3d6726c57e4537fdb12993c5700ffa7a4b3e2e3c50d6a3d659c4848389355d2e493e067ddd3d5878d5074206497f0912f23aebdcc0d72b4133d83ac01118e67d0600b30001000000"], 0x234}, 0x1, 0x0, 0x0, 0x6000}, 0x8080) 1m10.838511376s ago: executing program 0 (id=3839): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) r1 = pidfd_open$auto(0x1, 0xf0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') readv$auto(r0, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r2 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$auto_FIOASYNC(r2, 0x5452, 0x30) 1m10.296271454s ago: executing program 6 (id=3841): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) r1 = pidfd_open$auto(0x1, 0x0) (fail_nth: 4) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') readv$auto(r0, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r2 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$auto_FIOASYNC(r2, 0x5452, 0x30) 1m9.378366857s ago: executing program 0 (id=3843): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="5e0027b4839f301539", @ANYRES32, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m9.103606104s ago: executing program 6 (id=3844): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setsockopt$auto_SO_TIMESTAMPNS_OLD(r1, 0x4, 0x23, &(0x7f0000000000)='+\x00', 0x9) timer_gettime$auto(0x76376b40, &(0x7f0000000040)={{0xe30}, {0x0, 0x2}}) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(&(0x7f0000000000)='P\x02\xb9\xd5\x02r\xbc\xd0\t^\xc0!\x7f\xc0\xdd8\xb0\x80\xfa;\x97\x05n\xf4~Z\x05\xf1\xef\xd1\xf1\b\xd9J\x9bp\xdf\xe7\xcd\x1f\x84-\xbb\x05\xa5\xb8\xfc\xf7v<)\xddR\x02\xd8\r_\x03\xe7\x8eWta\xfa\xbd\xaf\x06kG\xf7\xaa6\x1ch\vmD\xfc|v\xd4Q', 0xfe, 0x9, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) pwritev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x5}, 0x80000001, 0x3, 0x9) madvise$auto(0x0, 0x600009, 0x19) 53.658533748s ago: executing program 35 (id=3843): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="5e0027b4839f301539", @ANYRES32, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 53.61344332s ago: executing program 36 (id=3844): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) init_module$auto(0x0, 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setsockopt$auto_SO_TIMESTAMPNS_OLD(r1, 0x4, 0x23, &(0x7f0000000000)='+\x00', 0x9) timer_gettime$auto(0x76376b40, &(0x7f0000000040)={{0xe30}, {0x0, 0x2}}) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(&(0x7f0000000000)='P\x02\xb9\xd5\x02r\xbc\xd0\t^\xc0!\x7f\xc0\xdd8\xb0\x80\xfa;\x97\x05n\xf4~Z\x05\xf1\xef\xd1\xf1\b\xd9J\x9bp\xdf\xe7\xcd\x1f\x84-\xbb\x05\xa5\xb8\xfc\xf7v<)\xddR\x02\xd8\r_\x03\xe7\x8eWta\xfa\xbd\xaf\x06kG\xf7\xaa6\x1ch\vmD\xfc|v\xd4Q', 0xfe, 0x9, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) pwritev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x5}, 0x80000001, 0x3, 0x9) madvise$auto(0x0, 0x600009, 0x19) 37.539764775s ago: executing program 2 (id=3885): ioprio_set$auto(0x3, 0x0, 0x4b34) mbind$auto(0x3, 0x2, 0x2, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xe, 0x0) r0 = socket(0xa, 0x801, 0x84) r1 = getsockopt$auto(r0, 0x84, 0x6f, 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r1, r4, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(r3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x4b564d04, 0x400, 0x1}, {0x9, 0x4, 0x5}, {0x402, 0x5, 0x1}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x18, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) sysfs$auto(0x2, 0x44, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) mmap$auto(0x0, 0x810005, 0xffc, 0x8000000008011, 0x3, 0x7ffe) 32.492594893s ago: executing program 2 (id=3894): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000980), 0x40200, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x9d) socket(0xa, 0x5, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x7, 0x5, 0x1, 0x948b, 0x3, 0x7, 0x8000000000003, 0x3, 0x62, 0xc, 0x6, 0x6d44, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r3 = socket(0x29, 0x6, 0x285) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)='-7', 0xfffffc49) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x80000000, 0x5, 0xfffffffffffffffe) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r5, 0x0, 0x10001) pselect6$auto(0x1ff, &(0x7f0000000100)={[0xb7c, 0x5, 0x4, 0xbd3, 0x5, 0x4, 0x3, 0x8, 0x3, 0x3ff, 0x941, 0x5, 0x8, 0x3, 0x8, 0x10000]}, &(0x7f0000000340)={[0x14ae07a8, 0x4, 0x7, 0x7, 0xff, 0x5, 0x6, 0x4, 0x400, 0x7, 0x80000000, 0xa73d, 0x2, 0x8, 0x5, 0x3]}, &(0x7f00000003c0)={[0x7fffffffffffffff, 0x7, 0x3, 0x1ff, 0xb6, 0x2, 0xad6e, 0xc32c, 0xf2d, 0xa, 0x2, 0x10001, 0x0, 0x80000001, 0x8, 0x7]}, &(0x7f0000000440)={0x5, 0x9}, &(0x7f0000000480)="2df09959f28b577cf13bed2d") madvise$auto(0x0, 0xffffffffffff0005, 0x17) write$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000200)="a86090d4e9", 0x5) mbind$auto(0x8000, 0xfa9d, 0x5, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0xffffffff) r6 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r6, &(0x7f0000000240)='!', 0x1) mmap$auto(0x10004, 0x820009, 0xdf, 0x1878, r3, 0x8000) capset$auto(0x0, 0x0) setsockopt$auto(r0, 0x0, 0x9, 0x0, 0x29) 29.236290324s ago: executing program 2 (id=3900): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x6b000000000000) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x816}, 0x9, 0x0, 0x4001000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0xf, 0xa, 0xf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, &(0x7f0000000240)={0x5, 0x6, 0x1, 0xc, 0x8, 0x2}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/delayed_allocation_blocks\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000840)=""/4079, 0xfef) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x16240, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000200)=""/53, 0x35) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execveat$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') inotify_init1$auto(0x0) 26.040133305s ago: executing program 2 (id=3906): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x2, 0x5c61fa2c, 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) lchown$auto(&(0x7f0000000040)='./file0\x00', r1, r2) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) 22.823433687s ago: executing program 2 (id=3916): futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) kexec_load$auto(0x4, 0x5, &(0x7f0000000300)={@buf=&(0x7f0000000180)="0ca781c06fc3b7642ce5638ae06bd18b2a4dec66d957802992cc217cfe90bace4dfda105c463278540f52749db46005c45692ab0aa2b8d0f287d767575be7fa5ad1f3e170a4e4ff2e906e493be2fb81fd3a9f6a31f8967", 0x3, 0x2, 0xffffffff}, 0x10) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040000) setsockopt$auto(r1, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9) ioctl$auto(r0, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) sysfs$auto(0x2, 0x10, 0x0) sysfs$auto(0x7fffffff, 0x0, 0xfffffffffffffffb) r2 = fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000340), r2) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) sysfs$auto(0xa, 0xffff, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x1, 0x0) 17.098442861s ago: executing program 2 (id=3929): mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x5, 0x2, 0x70) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400e983, 0x3, 0xe31, 0xffffffffffffffff, 0x8000) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x254, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x816, 0x2, 0x0, 0x1000004000000d, 0x100) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = socket(0x2, 0x801, 0x106) r2 = getsockopt$auto(r1, 0x11c, 0x3, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r2) ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f00000000c0)=0x33a) 10.333409256s ago: executing program 7 (id=3943): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x22303, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000003c0)="26bbb0ffce93a5f190209af87544c3327634b411e291c452524084df0ca2011ac30d5dd2869e94e7f5dcc8da67c6990d944f413e61c4c82fb93a5993", 0x41}, 0x6, 0x0) socket(0xa, 0x5, 0x84) ioctl$auto_XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, &(0x7f00000000c0)={0x4, 0x1, 0x3, 0x1, 0x6, 0x5b0f, 0x8001, 0x80000001}) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) ioctl$auto(r0, 0x40246f4c, 0x38) 8.585949726s ago: executing program 7 (id=3944): mmap$auto(0xfffffffffffffffd, 0x20009, 0x800e3, 0x12, 0x40000000000a1, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28341, 0x0) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(0x0, 0x63c5, 0x7bf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/oom_adj\x00', 0x300, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000140)) read$auto(r1, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto(0xc8, 0x400454d0, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/memory/memory0/power/runtime_suspended_time\x00', 0x11ba80, 0x0) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) read$auto(r4, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r5, 0x6f2d, 0xffffffffffffffff) 7.217363081s ago: executing program 4 (id=3945): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x0, 0xeb17, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x10df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) socket(0xa, 0x1, 0x100) 6.99981494s ago: executing program 8 (id=3946): setresuid$auto(0x8, 0x8, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000340)="c80c1b5d529b5881", 0x8) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/255, 0xff) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x100000000000000, 0x1, 0x4}}, 0x92) 6.797779733s ago: executing program 4 (id=3947): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) getdents64$auto(r0, &(0x7f0000000180)={0x9d, 0x1582, 0x7f, 0x44, "2c43fac185b93ee0be6831aceea7276822ab4ffd4e057297a9ee5608157ea8dd163b"}, 0x3ff) futex_wait$auto(&(0x7f00000000c0)="e867b0ac2cd328e42640942a134a69e079e5e8b18c990cb4b177074acf53d5a93eef82dd75be45068c39c5b6cad9d8d341f72759a0b7678f42ce196441dd15b741798b2f915d004d81fd19d237178d87b5e6b2be9de7a0754b497fae46e91ce9869a2dd49cd734547eac8e3e9ca8fec0cf682537908fdb1bb6793a13049467ceab28ee55ba8d7f7532015d84eeb56e5086925e32ea", 0xb6, 0xf, 0x5, &(0x7f0000000040)={0x4, 0x4}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpid() r1 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x100) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x8925, 0x0) prctl$auto(0x1d, 0x6b, r1, 0xfffffffffffffff5, 0x7fffffff) 5.946899211s ago: executing program 4 (id=3948): setresuid$auto(0x8, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x20, &(0x7f0000000080)={0x0, 0xfffc}, 0x4, 0x0, 0x5, 0x20b}, 0xfff}, 0x8, 0x311) ioctl$auto(r0, 0x541b, r0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000340)="c80c1b5d529b588143e1", 0xa) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x40041, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x121682, 0x0) read$auto(r5, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/c\x85m\xe9\"t\xab[\xc4c/data\x00', 0x2000007) ioctl$auto_XFS_IOC_FREESP64(r4, 0x40305825, &(0x7f0000000300)={0x3, 0x0, 0x8, 0x2, 0x101, 0xffffffffffffffff}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/dma_mask_bits\x00', 0x40, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x8001, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)=""/255, 0xff) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) newfstatat$auto(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)={0x21d, 0x6, 0xae19, 0x5, r2, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x2cf80000000000, 0x3, 0x3, 0x8, 0x8000000000000001, 0x8, 0x8c, 0xfffffffffffffbff}, 0xfffffff7) statx$auto(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)={0x400, 0x3, 0x31, 0x3, r2, r8, 0x7, 0xfff, 0x4, 0x7fffffffffffffff, 0x0, 0xb, {0x9, 0xafbe}, {0x7, 0xbc0b}, {0x815, 0x1}, {0x1, 0x4}, 0xfff, 0x1, 0x2f17, 0x7fffffff, 0x4000000000000000, 0xfffffffe, 0x4000002, 0xff, 0x0, 0x8000, 0xf, 0xffffffff, [0x8, 0x9, 0x8, 0x0, 0x9, 0xb5e, 0x200, 0x4, 0x2]}) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r9, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 5.94619265s ago: executing program 8 (id=3956): socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x25, 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x3, 0xeb1, 0x404, 0x10008000) sysfs$auto(0x2, 0x1f, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae67, r1) close_range$auto(0x2, 0x8, 0x0) r2 = fsopen$auto(0x0, 0x1) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) r3 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r3, 0x0, 0x17) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3dd) mmap$auto(0x0, 0xa, 0xb7ed, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) write$auto_qrtr_tun_ops_tun(r2, &(0x7f0000000040)="ffa2dbcd9e7511fdf6cdc139ec3842045a87094193fbc3c3ee24f9c0231e697004e535469378959c6e2709a95df1fc97a6b21a", 0x33) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) 4.698476853s ago: executing program 4 (id=3949): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) capget$auto(0x0, 0x0) r0 = socket(0x2c, 0x3, 0x0) getsockopt$auto(r0, 0x11b, 0x7, 0x0, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x5) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0xba85, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) setsockopt$auto_SO_TYPE(r1, 0x6, 0x3, &(0x7f0000000000)='/proc/consoles\x00', 0x2) ioctl$auto__ctl_fops_dm_ioctl(r1, 0x2, &(0x7f0000000380)="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") ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) open(0x0, 0x163340, 0x16e) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setreuid$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4140aecd, &(0x7f0000000040)={0x7}) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 4.69466474s ago: executing program 7 (id=3958): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) getdents64$auto(r0, &(0x7f0000000180)={0x9d, 0x1582, 0x7f, 0x44, "2c43fac185b93ee0be6831aceea7276822ab4ffd4e057297a9ee5608157ea8dd163b"}, 0x3ff) futex_wait$auto(&(0x7f00000000c0)="e867b0ac2cd328e42640942a134a69e079e5e8b18c990cb4b177074acf53d5a93eef82dd75be45068c39c5b6cad9d8d341f72759a0b7678f42ce196441dd15b741798b2f915d004d81fd19d237178d87b5e6b2be9de7a0754b497fae46e91ce9869a2dd49cd734547eac8e3e9ca8fec0cf682537908fdb1bb6793a13049467ceab28ee55ba8d7f7532015d84eeb56e5086925e32ea", 0xb6, 0xf, 0x5, &(0x7f0000000040)={0x4, 0x4}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpid() r1 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x8925, 0x0) prctl$auto(0x1d, 0x6b, r1, 0xfffffffffffffff5, 0x7fffffff) ioperm$auto(0x3, 0xe, 0x2000000000000149) 4.49384091s ago: executing program 8 (id=3950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003b00)={0x1c, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0xf000000, 0x8041}, 0x20000000) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7f, 0x2, 0x8000) io_uring_enter$auto(0xffffffffffffffff, 0x8000, 0x8, 0x4, &(0x7f0000000380)="15418fe3a2cb815061faf9feae11dc76ee245fc1e0f3ef803062c8009cc56cc79df8ed4cbf1a03e5eb2eaab07dc3e3baa0f3164425d4fdff6859ac6d0d02c8a2c3deff6aa1af02bad30689e4ec78fe1995cce1117b159e33e2d21115fbb402e551a3e31cc6ec9c2e49e7533697407f3a74226ea0e2398d393f450daee5b580e2b4bab8b96695b4f63a5d5214c509dffc9eb9fdc369387430d6a40efb671e8d7c050bd870e6a96d2a089c47a9f057ef755f006e43640dc9b3046e411be6834a79810869683ff271c5b11d12a1e723500ff7aca2706141ab4934d92dae7ef9708d711d49d578d4dcef1c1c297bcf87edf78b2c276c6e25241f23b1d7", 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64$auto(r3, &(0x7f0000000040)=':\'*&\x04!\x00', 0x2001, 0x23) r4 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/usb/usbmon/13s\x00', 0x40040, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0x8000) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r5, 0x800, 0x7f, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x40}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x2}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x6a62}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) sendmsg$auto_NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40c8000}, 0x4008000) 4.261711281s ago: executing program 8 (id=3951): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) futex_wait$auto(&(0x7f00000000c0)="e867b0ac2cd328e42640942a134a69e079e5e8b18c990cb4b177074acf53d5a93eef82dd75be45068c39c5b6cad9d8d341f72759a0b7678f42ce196441dd15b741798b2f915d004d81fd19d237178d87b5e6b2be9de7a0754b497fae46e91ce9869a2dd49cd734547eac8e3e9ca8fec0cf682537908fdb1bb6793a13049467ceab28ee55ba8d7f7532015d84eeb56e5086925e32ea", 0xb6, 0xf, 0x5, &(0x7f0000000040)={0x4, 0x4}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpid() r0 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x8925, 0x0) prctl$auto(0x1d, 0x6b, r0, 0xfffffffffffffff5, 0x7fffffff) ioperm$auto(0x3, 0xe, 0x2000000000000149) 3.479548194s ago: executing program 7 (id=3953): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x2, 0x5c61fa2c, 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, 0x0, 0x800) lchown$auto(&(0x7f0000000040)='./file0\x00', r1, r2) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) 3.479386004s ago: executing program 4 (id=3954): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) init_module$auto(&(0x7f00000001c0)="359e0e5f660b148e3672dd0af4fac9b7b7cdc8783754e83cb08ea68087fde1b352bc936511a6ca1766940c2853bd439b90af0167824053b760ba09cf7a5b709b7865f53c143be93b12399d830edf68e8bb7f9e264bd24cded6e70bc83c53b72434bab4a315f979c6dbbab5ceaabf27d8b111553e3228dbb1c78f440256b0f5de392fbc470a632ee21b9dc075d2500675e9ececbd323f4162a9078f9d302850868d31bb949a742875960090d6cb469e9e9744819910844b1ea88489257bb5320a171f434df6f7d38978e596a52d11eb816ab3a1bc2cf0dbd615b9d60cd3", 0x1ff, &(0x7f00000002c0)='\x94\x19\xac\x80/der/S\x1auenc9\xf6a\x1b`\b\xab\xfaf\x94;\xc9\xc2,x1y\xd4\x1e\xba\xe4\x84\xcbWW\x8eK`lT\x9c\xc1\x98G \xad\v\x82U\x80w\xac\xe4OW?\xd6\x1e]\xac\x19\xf2\xc2\x98\x9d\xe3-\x95\xc1\x90\x99J\xccB\xd2,\x99R\x85\xd6h\xc8\xe4Ex\x18\x19\x8b\x9e\x05\a\x94l\xde\xc1x/lB\xf6\xe6\x00\xef6\xd6wJ') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setsockopt$auto_SO_TIMESTAMPNS_OLD(r1, 0x4, 0x23, &(0x7f0000000000)='+\x00', 0x9) timer_gettime$auto(0x76376b40, &(0x7f0000000040)={{0xe30}, {0x0, 0x2}}) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mq_open$auto(&(0x7f0000000000)='P\x02\xb9\xd5\x02r\xbc\xd0\t^\xc0!\x7f\xc0\xdd8\xb0\x80\xfa;\x97\x05n\xf4~Z\x05\xf1\xef\xd1\xf1\b\xd9J\x9bp\xdf\xe7\xcd\x1f\x84-\xbb\x05\xa5\xb8\xfc\xf7v<)\xddR\x02\xd8\r_\x03\xe7\x8eWta\xfa\xbd\xaf\x06kG\xf7\xaa6\x1ch\vmD\xfc|v\xd4Q', 0xfe, 0x9, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) pwritev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x5}, 0x80000001, 0x3, 0x9) madvise$auto(0x0, 0x600009, 0x19) 1.063739339s ago: executing program 7 (id=3955): mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000b9cc6af068b7b19b046f6cd0c9e7ee5bb741415649", @ANYRES16=0x0, @ANYBLOB="000303000000fedbdf250a0000000800030004000000080001000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x82942, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$auto_VHOST_SET_VRING_ADDR2(r1, 0x4028af11, &(0x7f0000000040)={0x7, 0x3, 0x3, 0x7fffffffffffffff, 0x1, 0x1}) r2 = bpf$auto(0x11, 0xfffffffffffffffc, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r3) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) io_cancel$auto(0x5, &(0x7f0000000080)={0x0, 0xffffffff, 0x1, 0x9, 0x4, r0, 0x0, 0x5, 0x5, 0x0, 0x5, r1}, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0x3}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = clone$auto(0x6, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x20000000000005) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r5) sendmsg$auto_TASKSTATS_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000d25595ca263abf83100", @ANYRES16=r6, @ANYBLOB="010a27bd7000fddbdf250100000008000200", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto(r7, 0x0, 0x30, 0x0, 0x20088) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x180, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 1.063443579s ago: executing program 8 (id=3957): r0 = socket(0xa, 0x5, 0x84) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x6a) (rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf25020000"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async) r1 = socket(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) (rerun: 32) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) (async) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) (async) futex_wake$auto(0x0, 0x5, 0x0, 0x82) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x3, 0xa) (async, rerun: 64) semctl$auto(0x7, 0x2, 0x13, 0x1) (async, rerun: 64) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) (async, rerun: 32) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) (async, rerun: 32) r3 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_GETPDP(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040814) (async) shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f0000001140)={{0x3ff, 0x0, 0xffffffffffffffff, 0x6, 0xd, 0x4c98, 0x9}, 0x0, 0x9, 0x6, 0x1, @inferred, @inferred=0xffffffffffffffff, 0xffff, 0x0, &(0x7f0000001080)="372b1e22da72c60b92e3971dde87b0a3cde745393db76ea8e8e1f8118b5f3b12ed03c4118995ebf57938b2606a57d8b1d7f54c53870c33918102fcf363b6380a0d327d4b683091cb0a3e6f576231f34ebdd24e25a026f0ab149f1fa24bd56f75816f2c08e2ddf1a6429e26d9ec89dadfc7e83fe881d6aa58db", &(0x7f0000001100)="a6e620830e68912ded2aaff23ce96fec1ac1a99dae3dd81b4d455ddfaa884b1b137f82991bbce25d"}) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f0000001780)='/proc/thread-self/comm\x00', 0x12001, 0x0) (async, rerun: 64) r7 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, r7) msgctl$auto_IPC_STAT(0x3, 0x2, &(0x7f0000001240)={{0x3, 0xee00, 0xee00, 0x1, 0xacc6, 0x2, 0x401}, &(0x7f00000011c0)=0x1, &(0x7f0000001200)=0x10, 0x1, 0x7, 0x101, 0xffffffffffffffff, 0x5, 0xffc5, 0xfff, 0x45a, @raw=0xff, @inferred=0xffffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001cc0)={0x500, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c1, 0x2, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x2, 0x0, 0x0, @pid=r7}, @generic="4de03b7d2cbec6511c656ba6b58e9537f7247a648c8ed6efeaeaec4afa7aefc9d1205f8e0f1dd70fe962921bdb26657046ee16f006c02bac36b872f1629e421be7cbf57c9caec2cf0b3844f9cce3538de0152ecadbb378f3adee33bcab59d472419fa458ddb715157ba8fdf52d72ad4e786e5165d1403ead25", @nested={0x233, 0x13d, 0x0, 0x1, [@nested={0x4, 0xc9}, @generic="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", @generic="caa560b47afa10af7fd0a2021d4f51a994cb2864bee9752bbb9f6d989a85e60c6a4a7755d54b4c7194a382c6f9c2c1106edd51c1e251aff5c5ba3bf599019a", @generic="c0a623bc6f55db5af381de16f6186ce0949e03484cb876cbd2d6af3a1d05eb83e1349e3bcbd66c89999120d1035313f274a8cbb440e253990c2cd1b1a99bfc314da2eb447a7ea98beb751df2d1f9cc02f1fc65866a10daefc27f4a4d9d51d209051239cfc1d27c186370f266451326058a7ed4f6f4884ef9b09d6b987a823f2b9049feadc7b927827f95fe78296647da1d7b69f2a1610dcec548fd6168683d87c8df68f672957c005612d8517cf2123ceb2b36a5a0fb575f7376577eabac3cc575bd4ff23d55e14634de5438cc83bf1eb859caf07ce748d84c64d2503a3e260c6ba3da207541efd95145c1cc28c4f6c7"]}]}, @TIPC_NLA_NODE={0x15a, 0x6, 0x0, 0x1, [@generic="e0061d29dcd61508d6270e898372194fcc000deb72cd3f52704d74312dbdb035fb9d3c5dcb88254fa999eced5ef3ac6e984815515175662d89ca6986023c286e4e0b7eef34c576923ab9f1224105f60a596750896760", @typed={0x8, 0x89, 0x0, 0x0, @fd=r0}, @nested={0xf6, 0x63, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @uid=r8}, @nested={0x4, 0xf6}, @nested={0x4, 0x20}, @nested={0x4, 0x3f}, @nested={0x4, 0xc6}, @nested={0x4, 0x54}, @generic="b24b2747396320cc44d42fdbff86a53108852f460ec5d4548c5af78d3154a4b260c9a74ab179fb5e0d08c836eb2f5e795b40f6a7c742307eac5e369ff7a5001d41490e84f360d636e1caaf31f8084e47295aae026e214fc42d190c9e506c92bcf2dc9652b8b7475b195f57d1324bccd26399481f1ffa33754d5acce7c6b1ad4b3b65180ef93ee1e2e27b8c8b5b53433fa6470c11c44508ddaefb9c0275786a0e98d3c00886b72a794b24992876cbdcda20bfabf8ac153b90486ec3d64436d38ab99013a438b4d3f5744d", @typed={0x8, 0x95, 0x0, 0x0, @u32=0xfffffffe}, @nested={0x4, 0x19}]}]}, @TIPC_NLA_SOCK={0xc9, 0x2, 0x0, 0x1, [@generic="7959e75ec2a20a4030b0d280082f179526a8d662be6de1a197731994dbead541cbe96ba5f138b64b68a49138012c39c5cb3d732909668306c42edda0b8595a199b7a42d965868e8d235f84f81f17f14c88553255ff7eef50b9021e78866bf8b2ec900e8961f441d507639f7be42c9545ac12b280feab070e3d2221c67b369981e40e6742c3", @nested={0x3f, 0xcd, 0x0, 0x1, [@generic, @typed={0x4, 0x13a}, @generic="b29b9c098f53c5b811355c9fc1369d094fa56de1a811a74f139d11eb8f45e864704c50ac797547f03efc85e0a1353b027a742b6549cfc9"]}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x8}, 0x40) (async) read$auto_lsm_ops_inode(r3, &(0x7f0000000040)=""/4096, 0x1000) (async) mmap$auto(0x7, 0x400008, 0xe2, 0x9b72, r3, 0x8000000000000) (async) bpf$auto(0x8, &(0x7f0000000440)=@query={@target_fd, 0x8, 0x7, 0x6, 0x0, @prog_cnt=0x2, 0x0, 0x8ba0, 0x277, 0xa}, 0xf) (async) madvise$auto(0x0, 0x200007, 0x8) 528.688117ms ago: executing program 7 (id=3959): setresuid$auto(0x8, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x20, &(0x7f0000000080)={0x0, 0xfffc}, 0x4, 0x0, 0x5, 0x20b}, 0xfff}, 0x8, 0x311) ioctl$auto(r0, 0x541b, r0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000340)="c80c1b5d529b588143e1", 0xa) r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x40041, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x121682, 0x0) read$auto(r5, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/c\x85m\xe9\"t\xab[\xc4c/data\x00', 0x2000007) ioctl$auto_XFS_IOC_FREESP64(r4, 0x40305825, &(0x7f0000000300)={0x3, 0x0, 0x8, 0x2, 0x101, 0xffffffffffffffff}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/dma_mask_bits\x00', 0x40, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x8001, 0x0) write$auto(r7, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)=""/255, 0xff) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) newfstatat$auto(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)={0x21d, 0x6, 0xae19, 0x5, r2, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x2cf80000000000, 0x3, 0x3, 0x8, 0x8000000000000001, 0x8, 0x8c, 0xfffffffffffffbff}, 0xfffffff7) statx$auto(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000580)={0x400, 0x3, 0x31, 0x3, r2, r8, 0x7, 0xfff, 0x4, 0x7fffffffffffffff, 0x0, 0xb, {0x9, 0xafbe}, {0x7, 0xbc0b}, {0x815, 0x1}, {0x1, 0x4}, 0xfff, 0x1, 0x2f17, 0x7fffffff, 0x4000000000000000, 0xfffffffe, 0x4000002, 0xff, 0x0, 0x8000, 0xf, 0xffffffff, [0x8, 0x9, 0x8, 0x0, 0x9, 0xb5e, 0x200, 0x4, 0x2]}) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r9, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 478.825771ms ago: executing program 8 (id=3960): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x2, 0x5c61fa2c, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) 0s ago: executing program 4 (id=3961): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x214000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0xffffffffffffffd9, 0xdf, 0xdc, 0x7, 0xfffffffffffffffc) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b71, 0x1) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x4, 0x400008, 0x9, 0x19, r1, 0xffff) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20809, 0xdf, 0xeb1, 0x40000000000a5, 0x7ffe) r2 = socketpair$auto(0x5e, 0x5, 0x8000000000000000, 0x0) socket(0x29, 0xa, 0x8) rseq$auto(&(0x7f00000001c0)={0xe, 0x421, 0xf735, 0x7, 0xffffffff, 0x2, "3457c6218c9fcc7acfc948566c068db54b5d135e0d35ac8b3d1fe732e81396e2337ad75d7034d734486d3462f1dd3c3ff8cb695be1af9e173a8b5fc5e688e58a4a65a76091d579aed8e12b469397c0468caf036a6fad5117cad28bacd604568d8d5253fb98d80a8d5fe4be71dab745812bef5243bf6a784616cf8650f588d68830bc0e1b60c909ce000000000000006924d1da3b"}, 0x7ffe, 0x0, 0x6) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) write$auto(0x3, 0x0, 0xfdef) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x9, 0x49c, 0x8000, 0x2, 0x948b, 0x3, 0x15f4da0b, 0x800, 0x3, 0x9, 0x80000009, 0x1, 0x893, 0x20000000000046, 0x1, 0xfffffffffffffffe]}, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000280), 0x6c4}, 0xa, 0x0) ioctl$auto(0x3, 0x402454ca, r2) write$auto(0x3, 0x0, 0xffd8) kernel console output (not intermixed with test programs): ty 0, space 0, times 0 [ 1520.004050][T20984] CPU: 0 UID: 0 PID: 20984 Comm: syz.4.3743 Not tainted syzkaller #0 PREEMPT(full) [ 1520.004094][T20984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1520.004112][T20984] Call Trace: [ 1520.004123][T20984] [ 1520.004135][T20984] dump_stack_lvl+0x16c/0x1f0 [ 1520.004178][T20984] should_fail_ex+0x512/0x640 [ 1520.004232][T20984] get_futex_key+0x1d0/0x1560 [ 1520.004278][T20984] ? __pfx_get_futex_key+0x10/0x10 [ 1520.004333][T20984] futex_wake+0xea/0x530 [ 1520.004382][T20984] ? rcu_is_watching+0x12/0xc0 [ 1520.004417][T20984] ? __pfx_futex_wake+0x10/0x10 [ 1520.004469][T20984] ? kmem_cache_free+0x2d4/0x6c0 [ 1520.004501][T20984] ? putname+0x154/0x1a0 [ 1520.004555][T20984] do_futex+0x1e3/0x350 [ 1520.004599][T20984] ? __pfx_do_futex+0x10/0x10 [ 1520.004643][T20984] ? __pfx___might_resched+0x10/0x10 [ 1520.004691][T20984] __x64_sys_futex+0x1e0/0x4c0 [ 1520.004738][T20984] ? __x64_sys_openat+0x174/0x210 [ 1520.004786][T20984] ? __pfx___x64_sys_futex+0x10/0x10 [ 1520.004849][T20984] do_syscall_64+0xcd/0xfa0 [ 1520.004892][T20984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.004921][T20984] RIP: 0033:0x7f8f1558f6c9 [ 1520.004946][T20984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.004976][T20984] RSP: 002b:00007f8f163da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1520.005006][T20984] RAX: ffffffffffffffda RBX: 00007f8f157e5fa8 RCX: 00007f8f1558f6c9 [ 1520.005027][T20984] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8f157e5fac [ 1520.005047][T20984] RBP: 00007f8f157e5fa0 R08: 00007f8f163db000 R09: 0000000000000000 [ 1520.005068][T20984] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1520.005087][T20984] R13: 00007f8f157e6038 R14: 00007ffdcb7aa830 R15: 00007ffdcb7aa918 [ 1520.005130][T20984] [ 1520.811314][T20990] warn_alloc: 1 callbacks suppressed [ 1520.811329][T20990] syz.4.3743: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1520.871156][T20990] CPU: 1 UID: 0 PID: 20990 Comm: syz.4.3743 Not tainted syzkaller #0 PREEMPT(full) [ 1520.871202][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1520.871221][T20990] Call Trace: [ 1520.871232][T20990] [ 1520.871244][T20990] dump_stack_lvl+0x16c/0x1f0 [ 1520.871287][T20990] warn_alloc+0x248/0x3a0 [ 1520.871321][T20990] ? __pfx_warn_alloc+0x10/0x10 [ 1520.871379][T20990] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1520.871423][T20990] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 1520.871471][T20990] ? __pfx___might_resched+0x10/0x10 [ 1520.871506][T20990] ? rcu_is_watching+0x12/0xc0 [ 1520.871538][T20990] ? trace_contention_end+0xdd/0x130 [ 1520.871582][T20990] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1520.871626][T20990] ? tomoyo_path_number_perm+0x295/0x580 [ 1520.871693][T20990] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1520.871739][T20990] ? __pfx___mutex_lock+0x10/0x10 [ 1520.871785][T20990] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1520.871847][T20990] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1520.871891][T20990] __vmalloc_node_noprof+0xad/0xf0 [ 1520.871945][T20990] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1520.871996][T20990] dvb_dvr_do_ioctl+0x15d/0x290 [ 1520.872050][T20990] dvb_usercopy+0x167/0x340 [ 1520.872091][T20990] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1520.872139][T20990] ? __pfx_dvb_usercopy+0x10/0x10 [ 1520.872202][T20990] ? __fget_files+0x20e/0x3c0 [ 1520.872244][T20990] dvb_dvr_ioctl+0x29/0x40 [ 1520.872286][T20990] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1520.872330][T20990] __x64_sys_ioctl+0x18e/0x210 [ 1520.872382][T20990] do_syscall_64+0xcd/0xfa0 [ 1520.872426][T20990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.872458][T20990] RIP: 0033:0x7f8f1558f6c9 [ 1520.872485][T20990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.872516][T20990] RSP: 002b:00007f8f163b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.872546][T20990] RAX: ffffffffffffffda RBX: 00007f8f157e6090 RCX: 00007f8f1558f6c9 [ 1520.872567][T20990] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000009 [ 1520.872587][T20990] RBP: 00007f8f15611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1520.872606][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.872623][T20990] R13: 00007f8f157e6128 R14: 00007f8f157e6090 R15: 00007ffdcb7aa918 [ 1520.872666][T20990] [ 1520.872696][T20990] Mem-Info: [ 1521.156760][T20990] active_anon:12977 inactive_anon:9 isolated_anon:0 [ 1521.156760][T20990] active_file:9704 inactive_file:49399 isolated_file:0 [ 1521.156760][T20990] unevictable:768 dirty:1003 writeback:0 [ 1521.156760][T20990] slab_reclaimable:12184 slab_unreclaimable:102985 [ 1521.156760][T20990] mapped:33432 shmem:1364 pagetables:1410 [ 1521.156760][T20990] sec_pagetables:0 bounce:0 [ 1521.156760][T20990] kernel_misc_reclaimable:0 [ 1521.156760][T20990] free:1283746 free_pcp:10012 free_cma:0 [ 1521.208805][T20990] Node 0 active_anon:51908kB inactive_anon:32kB active_file:38816kB inactive_file:197460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133728kB dirty:4020kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12720kB pagetables:5504kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1521.246334][T20990] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1521.320461][T20990] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1521.371197][T20988] Falling back ldisc for ptm0. [ 1521.412698][T20990] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1521.426276][T20990] Node 0 DMA32 free:1214360kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:50808kB inactive_anon:32kB active_file:38816kB inactive_file:197460kB unevictable:1536kB writepending:4020kB zspages:436kB present:3129332kB managed:2545080kB mlocked:0kB bounce:0kB free_pcp:31560kB local_pcp:20336kB free_cma:0kB [ 1521.463498][T20990] lowmem_reserve[]: 0 0 1 1 1 [ 1521.468239][T20990] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1521.514395][T20990] lowmem_reserve[]: 0 0 0 0 0 [ 1521.550077][T20990] Node 1 Normal free:3905264kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9952kB local_pcp:3264kB free_cma:0kB [ 1521.701341][T20990] lowmem_reserve[]: 0 0 0 0 0 [ 1521.707710][T20990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1521.768502][T20990] Node 0 DMA32: 556*4kB (M) 965*8kB (UM) 988*16kB (UME) 954*32kB (UME) 715*64kB (UME) 420*128kB (UME) 197*256kB (ME) 91*512kB (ME) 43*1024kB (ME) 10*2048kB (UME) 219*4096kB (UM) = 1214360kB [ 1521.792957][T20990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1521.809446][T20990] Node 1 Normal: 194*4kB (UME) 67*8kB (UME) 37*16kB (UME) 226*32kB (UME) 121*64kB (UME) 36*128kB (UME) 9*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3905264kB [ 1521.877016][T20990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.887585][T20990] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1521.906308][T20990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1521.991917][T20990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1522.003591][T20990] 60490 total pagecache pages [ 1522.019185][T20990] 27 pages in swap cache [ 1522.025349][T20990] Free swap = 123188kB [ 1522.030680][T20990] Total swap = 124996kB [ 1522.034873][T20990] 2097051 pages RAM [ 1522.114728][T20990] 0 pages HighMem/MovableOnly [ 1522.129880][T20990] 428691 pages reserved [ 1522.155062][T20990] 0 pages cma reserved [ 1524.510590][T21023] FAULT_INJECTION: forcing a failure. [ 1524.510590][T21023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1524.542418][T21023] CPU: 0 UID: 0 PID: 21023 Comm: syz.6.3753 Not tainted syzkaller #0 PREEMPT(full) [ 1524.542460][T21023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1524.542478][T21023] Call Trace: [ 1524.542488][T21023] [ 1524.542500][T21023] dump_stack_lvl+0x16c/0x1f0 [ 1524.542544][T21023] should_fail_ex+0x512/0x640 [ 1524.542618][T21023] should_fail_alloc_page+0xe7/0x130 [ 1524.542662][T21023] prepare_alloc_pages+0x3c2/0x610 [ 1524.542702][T21023] ? rcu_is_watching+0x12/0xc0 [ 1524.542740][T21023] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1524.542777][T21023] ? __lock_acquire+0xb8a/0x1c90 [ 1524.542848][T21023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1524.542883][T21023] ? do_raw_spin_lock+0x12c/0x2b0 [ 1524.542930][T21023] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1524.542977][T21023] ? find_held_lock+0x2b/0x80 [ 1524.543024][T21023] ? __lock_acquire+0xb8a/0x1c90 [ 1524.543064][T21023] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1524.543117][T21023] ? policy_nodemask+0xea/0x4e0 [ 1524.543163][T21023] alloc_pages_mpol+0x1fb/0x550 [ 1524.543207][T21023] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1524.543263][T21023] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1524.543314][T21023] shmem_alloc_folio+0x135/0x160 [ 1524.543361][T21023] shmem_alloc_and_add_folio+0x494/0xc20 [ 1524.543406][T21023] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1524.543459][T21023] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1524.543504][T21023] shmem_get_folio_gfp+0x67f/0x1610 [ 1524.543542][T21023] ? filemap_map_pages+0x11a2/0x1d50 [ 1524.543574][T21023] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1524.543608][T21023] ? filemap_map_pages+0x121f/0x1d50 [ 1524.543642][T21023] shmem_fault+0x1fe/0xa30 [ 1524.543675][T21023] ? __pfx_shmem_fault+0x10/0x10 [ 1524.543713][T21023] ? __pfx_filemap_map_pages+0x10/0x10 [ 1524.543752][T21023] ? __pfx_filemap_map_pages+0x10/0x10 [ 1524.543779][T21023] __do_fault+0x10d/0x490 [ 1524.543815][T21023] ? __pfx_filemap_map_pages+0x10/0x10 [ 1524.543851][T21023] do_pte_missing+0xf4a/0x3ba0 [ 1524.543898][T21023] ? find_held_lock+0x2b/0x80 [ 1524.543932][T21023] ? __handle_mm_fault+0x1529/0x2aa0 [ 1524.543985][T21023] __handle_mm_fault+0x1556/0x2aa0 [ 1524.544048][T21023] ? __pfx___handle_mm_fault+0x10/0x10 [ 1524.544099][T21023] ? __pte_offset_map_lock+0x174/0x310 [ 1524.544138][T21023] ? find_held_lock+0x2b/0x80 [ 1524.544186][T21023] ? follow_page_pte+0x5cf/0x1390 [ 1524.544236][T21023] handle_mm_fault+0x589/0xd10 [ 1524.544295][T21023] __get_user_pages+0x54e/0x3530 [ 1524.544354][T21023] ? down_read_killable+0x220/0x4b0 [ 1524.544395][T21023] ? __lock_acquire+0x622/0x1c90 [ 1524.544435][T21023] ? __pfx___get_user_pages+0x10/0x10 [ 1524.544491][T21023] __gup_longterm_locked+0xa92/0x17e0 [ 1524.544549][T21023] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1524.544594][T21023] ? try_get_folio+0x255/0x730 [ 1524.544632][T21023] ? find_held_lock+0x2b/0x80 [ 1524.544662][T21023] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 1524.544713][T21023] gup_fast_fallback+0xee2/0x22a0 [ 1524.544786][T21023] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1524.544830][T21023] ? __lock_acquire+0xb8a/0x1c90 [ 1524.544895][T21023] pin_user_pages_fast+0xa7/0xf0 [ 1524.544938][T21023] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1524.544984][T21023] ? __debug_object_init+0x2de/0x3d0 [ 1524.545027][T21023] iov_iter_extract_pages+0x3a2/0x1ed0 [ 1524.545087][T21023] ? __lock_acquire+0xb8a/0x1c90 [ 1524.545127][T21023] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1524.545189][T21023] ? __lock_acquire+0x622/0x1c90 [ 1524.545235][T21023] ? do_raw_spin_lock+0x12c/0x2b0 [ 1524.545280][T21023] ? find_held_lock+0x2b/0x80 [ 1524.545318][T21023] bio_iov_iter_get_pages+0x395/0x1300 [ 1524.545365][T21023] ? find_held_lock+0x2b/0x80 [ 1524.545396][T21023] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 1524.545448][T21023] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 1524.545489][T21023] ? bio_associate_blkg+0x137/0x2a0 [ 1524.545536][T21023] __blkdev_direct_IO_simple+0x39f/0x860 [ 1524.545580][T21023] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 1524.545650][T21023] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 1524.545697][T21023] ? rcu_is_watching+0x12/0xc0 [ 1524.545730][T21023] ? iov_iter_npages+0xf0/0x5a0 [ 1524.545776][T21023] blkdev_direct_IO+0xcc6/0x2100 [ 1524.545831][T21023] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 1524.545876][T21023] ? rcu_is_watching+0x12/0xc0 [ 1524.545910][T21023] ? filemap_check_errors+0xa9/0x160 [ 1524.545962][T21023] blkdev_write_iter+0x703/0xe00 [ 1524.546007][T21023] vfs_write+0x7d3/0x11d0 [ 1524.546043][T21023] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1524.546082][T21023] ? __pfx_vfs_write+0x10/0x10 [ 1524.546112][T21023] ? find_held_lock+0x2b/0x80 [ 1524.546170][T21023] ksys_write+0x12a/0x250 [ 1524.546204][T21023] ? __pfx_ksys_write+0x10/0x10 [ 1524.546250][T21023] do_syscall_64+0xcd/0xfa0 [ 1524.546291][T21023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.546322][T21023] RIP: 0033:0x7f6a89f8f6c9 [ 1524.546348][T21023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1524.546377][T21023] RSP: 002b:00007f6a8add5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1524.546408][T21023] RAX: ffffffffffffffda RBX: 00007f6a8a1e5fa0 RCX: 00007f6a89f8f6c9 [ 1524.546428][T21023] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1524.546445][T21023] RBP: 00007f6a8add5090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.546463][T21023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.546481][T21023] R13: 00007f6a8a1e6038 R14: 00007f6a8a1e5fa0 R15: 00007ffd685fb7e8 [ 1524.546525][T21023] [ 1525.531871][T21030] Unable to find swap-space signature [ 1528.173812][T21053] queue_state_write: operation too long [ 1528.181770][T21053] queue_state_write: use 'run', 'start' or 'kick' [ 1529.643127][T21071] Invalid ELF header magic: != ELF [ 1531.049408][T21089] syz.0.3772: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1531.064615][T21089] CPU: 0 UID: 0 PID: 21089 Comm: syz.0.3772 Not tainted syzkaller #0 PREEMPT(full) [ 1531.064657][T21089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1531.064676][T21089] Call Trace: [ 1531.064687][T21089] [ 1531.064699][T21089] dump_stack_lvl+0x16c/0x1f0 [ 1531.064743][T21089] warn_alloc+0x248/0x3a0 [ 1531.064780][T21089] ? __pfx_warn_alloc+0x10/0x10 [ 1531.064838][T21089] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1531.064885][T21089] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 1531.064932][T21089] ? __pfx___might_resched+0x10/0x10 [ 1531.064967][T21089] ? rcu_is_watching+0x12/0xc0 [ 1531.064999][T21089] ? trace_contention_end+0xdd/0x130 [ 1531.065041][T21089] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1531.065085][T21089] ? tomoyo_path_number_perm+0x295/0x580 [ 1531.065142][T21089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1531.065184][T21089] ? __pfx___mutex_lock+0x10/0x10 [ 1531.065226][T21089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1531.065282][T21089] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1531.065323][T21089] __vmalloc_node_noprof+0xad/0xf0 [ 1531.065367][T21089] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1531.065415][T21089] dvb_dvr_do_ioctl+0x15d/0x290 [ 1531.065466][T21089] dvb_usercopy+0x167/0x340 [ 1531.065507][T21089] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1531.065560][T21089] ? __pfx_dvb_usercopy+0x10/0x10 [ 1531.065625][T21089] ? __fget_files+0x20e/0x3c0 [ 1531.065669][T21089] dvb_dvr_ioctl+0x29/0x40 [ 1531.065707][T21089] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1531.065749][T21089] __x64_sys_ioctl+0x18e/0x210 [ 1531.065806][T21089] do_syscall_64+0xcd/0xfa0 [ 1531.065848][T21089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.065879][T21089] RIP: 0033:0x7f2daa38f6c9 [ 1531.065905][T21089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.065934][T21089] RSP: 002b:00007f2dab26e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1531.065964][T21089] RAX: ffffffffffffffda RBX: 00007f2daa5e6090 RCX: 00007f2daa38f6c9 [ 1531.065984][T21089] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000009 [ 1531.066004][T21089] RBP: 00007f2daa411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1531.066022][T21089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1531.066041][T21089] R13: 00007f2daa5e6128 R14: 00007f2daa5e6090 R15: 00007ffe5e963948 [ 1531.066087][T21089] [ 1531.066099][T21089] Mem-Info: [ 1531.316178][T21089] active_anon:12914 inactive_anon:10 isolated_anon:0 [ 1531.316178][T21089] active_file:9704 inactive_file:49404 isolated_file:0 [ 1531.316178][T21089] unevictable:768 dirty:541 writeback:0 [ 1531.316178][T21089] slab_reclaimable:12176 slab_unreclaimable:103167 [ 1531.316178][T21089] mapped:34912 shmem:2844 pagetables:1472 [ 1531.316178][T21089] sec_pagetables:0 bounce:0 [ 1531.316178][T21089] kernel_misc_reclaimable:0 [ 1531.316178][T21089] free:1282103 free_pcp:11263 free_cma:0 [ 1531.370927][T21089] Node 0 active_anon:51656kB inactive_anon:40kB active_file:38816kB inactive_file:197480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139648kB dirty:2164kB writeback:0kB shmem:9836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12736kB pagetables:5752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1531.409284][T21089] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1531.474713][T21089] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1531.561337][T21089] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1531.596918][T21089] Node 0 DMA32 free:1207732kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53956kB inactive_anon:40kB active_file:38816kB inactive_file:197480kB unevictable:1536kB writepending:2164kB zspages:392kB present:3129332kB managed:2545080kB mlocked:0kB bounce:0kB free_pcp:33624kB local_pcp:19892kB free_cma:0kB [ 1531.700530][T21089] lowmem_reserve[]: 0 0 1 1 1 [ 1531.705567][T21089] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1531.748318][T21089] lowmem_reserve[]: 0 0 0 0 0 [ 1531.761093][T21089] Node 1 Normal free:3905520kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9696kB local_pcp:6688kB free_cma:0kB [ 1531.802600][T21089] lowmem_reserve[]: 0 0 0 0 0 [ 1531.807467][T21089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1531.915854][T21089] Node 0 DMA32: 2174*4kB (UME) 1189*8kB (UME) 918*16kB (UME) 980*32kB (UME) 720*64kB (UME) 423*128kB (UME) 198*256kB (ME) 92*512kB (UME) 44*1024kB (UME) 9*2048kB (UME) 218*4096kB (M) = 1218688kB [ 1531.964567][T21089] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1531.980031][T21089] Node 1 Normal: 194*4kB (UME) 67*8kB (UME) 37*16kB (UME) 224*32kB (UME) 122*64kB (UME) 36*128kB (UME) 10*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3905520kB [ 1532.007520][T21089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1532.105558][T21089] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1532.138895][T21089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1532.218009][T21089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1532.310244][T21089] 60523 total pagecache pages [ 1532.338649][T21089] 56 pages in swap cache [ 1532.358736][T21089] Free swap = 124672kB [ 1532.406735][T21089] Total swap = 124996kB [ 1532.430825][T21089] 2097051 pages RAM [ 1532.468964][T21089] 0 pages HighMem/MovableOnly [ 1532.473674][T21089] 428691 pages reserved [ 1532.489735][T21082] Process accounting resumed [ 1532.513351][T21089] 0 pages cma reserved [ 1533.807520][ T5831] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1533.939393][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1533.939431][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1533.939441][ T5831] Call Trace: [ 1533.939447][ T5831] [ 1533.939455][ T5831] dump_stack_lvl+0x16c/0x1f0 [ 1533.939482][ T5831] dump_header+0x101/0x930 [ 1533.939516][ T5831] oom_kill_process+0x272/0xa40 [ 1533.939551][ T5831] out_of_memory+0x350/0x1700 [ 1533.939593][ T5831] ? __pfx_out_of_memory+0x10/0x10 [ 1533.939637][ T5831] mem_cgroup_out_of_memory+0x118/0x130 [ 1533.939682][ T5831] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1533.939738][ T5831] ? do_raw_spin_unlock+0x172/0x230 [ 1533.939785][ T5831] try_charge_memcg+0x695/0xd30 [ 1533.939830][ T5831] ? __pfx_try_charge_memcg+0x10/0x10 [ 1533.939876][ T5831] ? find_held_lock+0x2b/0x80 [ 1533.939915][ T5831] charge_memcg+0x8a/0x230 [ 1533.939951][ T5831] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 1533.939981][ T5831] __read_swap_cache_async+0x397/0x500 [ 1533.940004][ T5831] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1533.940024][ T5831] ? rcu_is_watching+0x12/0xc0 [ 1533.940044][ T5831] ? trace_sched_exit_tp+0xd1/0x120 [ 1533.940072][ T5831] ? __schedule+0x11a3/0x5de0 [ 1533.940095][ T5831] swap_cluster_readahead+0x528/0x770 [ 1533.940120][ T5831] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1533.940143][ T5831] ? rcu_is_watching+0x12/0xc0 [ 1533.940162][ T5831] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 1533.940178][ T5831] ? css_rstat_updated+0x1c2/0x510 [ 1533.940202][ T5831] ? __lock_acquire+0xb8a/0x1c90 [ 1533.940229][ T5831] ? get_vma_policy+0x242/0x3c0 [ 1533.940257][ T5831] swapin_readahead+0x160/0x1180 [ 1533.940283][ T5831] ? __pfx_swapin_readahead+0x10/0x10 [ 1533.940302][ T5831] ? find_held_lock+0x2b/0x80 [ 1533.940319][ T5831] ? swap_cache_get_folio+0x267/0x8e0 [ 1533.940336][ T5831] ? swap_cache_get_folio+0x267/0x8e0 [ 1533.940352][ T5831] ? swap_cache_get_folio+0x267/0x8e0 [ 1533.940371][ T5831] ? swap_cache_get_folio+0x267/0x8e0 [ 1533.940388][ T5831] ? swap_cache_get_folio+0x1f/0x8e0 [ 1533.940403][ T5831] ? swap_cache_get_folio+0x293/0x8e0 [ 1533.940427][ T5831] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1533.940444][ T5831] ? __pfx_get_swap_device+0x10/0x10 [ 1533.940468][ T5831] ? do_swap_page+0x125/0x6340 [ 1533.940502][ T5831] ? do_swap_page+0x86c/0x6340 [ 1533.940528][ T5831] do_swap_page+0x86c/0x6340 [ 1533.940563][ T5831] ? __pfx_do_swap_page+0x10/0x10 [ 1533.940589][ T5831] ? __pfx_default_wake_function+0x10/0x10 [ 1533.940610][ T5831] ? __lock_acquire+0x622/0x1c90 [ 1533.940636][ T5831] ? rcu_is_watching+0x12/0xc0 [ 1533.940655][ T5831] ? ___pte_offset_map+0x2ad/0x4f0 [ 1533.940682][ T5831] __handle_mm_fault+0x17d1/0x2aa0 [ 1533.940725][ T5831] ? __pfx___handle_mm_fault+0x10/0x10 [ 1533.940756][ T5831] ? lock_vma_under_rcu+0x176/0x530 [ 1533.940798][ T5831] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1533.940825][ T5831] ? get_timespec64+0x136/0x1b0 [ 1533.940854][ T5831] handle_mm_fault+0x589/0xd10 [ 1533.940883][ T5831] ? __pkru_allows_pkey+0x21/0xb0 [ 1533.940913][ T5831] do_user_addr_fault+0x60c/0x1370 [ 1533.940933][ T5831] ? rcu_is_watching+0x12/0xc0 [ 1533.940977][ T5831] exc_page_fault+0x64/0xc0 [ 1533.940999][ T5831] asm_exc_page_fault+0x26/0x30 [ 1533.941016][ T5831] RIP: 0033:0x7f264edc1f88 [ 1533.941032][ T5831] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 1533.941049][ T5831] RSP: 002b:00007ffe7b727dc0 EFLAGS: 00010293 [ 1533.941078][ T5831] RAX: 0000000000000000 RBX: 00000000000006de RCX: 00007f264edc1f85 [ 1533.941089][ T5831] RDX: 00007ffe7b727e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1533.941106][ T5831] RBP: 00007ffe7b727e6c R08: 0000000000000000 R09: 0000000000000000 [ 1533.941116][ T5831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1533.941127][ T5831] R13: 00000000000927c0 R14: 0000000000176259 R15: 00007ffe7b727ec0 [ 1533.941151][ T5831] [ 1533.941390][ T5831] memory: usage 3072kB, limit 3072kB, failcnt 308873 [ 1534.418718][ T5831] memory+swap: usage 7300kB, limit 9007199254740988kB, failcnt 0 [ 1534.538949][ T5831] kmem: usage 3048kB, limit 9007199254740988kB, failcnt 0 [ 1534.600380][ T5831] Memory cgroup stats for /syz2: [ 1534.600576][ T5831] cache 0 [ 1534.608917][ T5831] rss 0 [ 1534.612462][ T5831] rss_huge 0 [ 1534.615691][ T5831] shmem 0 [ 1534.620599][ T5831] mapped_file 0 [ 1534.624361][ T5831] dirty 0 [ 1534.627320][ T5831] writeback 0 [ 1534.630902][ T5831] workingset_refault_anon 135529 [ 1534.653096][ T5831] workingset_refault_file 19359 [ 1534.658484][ T5831] swap 4329472 [ 1534.668641][ T5831] swapcached 24576 [ 1534.672559][ T5831] pgpgin 321809 [ 1534.676217][ T5831] pgpgout 321803 [ 1534.683087][ T5831] pgfault 726200 [ 1534.686784][ T5831] pgmajfault 121722 [ 1534.704764][ T5831] inactive_anon 24576 [ 1534.709585][ T5831] active_anon 0 [ 1534.713658][ T5831] inactive_file 0 [ 1534.717589][ T5831] active_file 0 [ 1534.746982][ T5831] unevictable 0 [ 1534.795068][ T5831] hierarchical_memory_limit 3145728 [ 1534.814125][ T5831] hierarchical_memsw_limit 9223372036854771712 [ 1534.848660][ T5831] total_cache 0 [ 1534.852193][ T5831] total_rss 0 [ 1534.855515][ T5831] total_rss_huge 0 [ 1534.893757][ T5831] total_shmem 0 [ 1534.924557][ T5831] total_mapped_file 0 [ 1534.939149][ T5831] total_dirty 0 [ 1535.006882][ T5831] total_writeback 0 [ 1535.040232][ T5831] total_workingset_refault_anon 135529 [ 1535.068627][ T5831] total_workingset_refault_file 19359 [ 1535.128896][T21138] FAULT_INJECTION: forcing a failure. [ 1535.128896][T21138] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.143584][ T5831] total_swap 4329472 [ 1535.147632][ T5831] total_swapcached 24576 [ 1535.152035][ T5831] total_pgpgin 321809 [ 1535.153311][T21138] CPU: 1 UID: 0 PID: 21138 Comm: syz.0.3785 Not tainted syzkaller #0 PREEMPT(full) [ 1535.153348][T21138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1535.153365][T21138] Call Trace: [ 1535.153376][T21138] [ 1535.153387][T21138] dump_stack_lvl+0x16c/0x1f0 [ 1535.153427][T21138] should_fail_ex+0x512/0x640 [ 1535.153465][T21138] ? fs_reclaim_acquire+0xae/0x150 [ 1535.153504][T21138] should_failslab+0xc2/0x120 [ 1535.153540][T21138] __kmalloc_noprof+0xdd/0x880 [ 1535.153581][T21138] ? kfree+0x252/0x6d0 [ 1535.153602][T21138] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1535.153641][T21138] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1535.153672][T21138] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1535.153707][T21138] ? tomoyo_profile+0x47/0x60 [ 1535.153746][T21138] tomoyo_mkdev_perm+0x22b/0x570 [ 1535.153769][T21138] ? tomoyo_mkdev_perm+0x217/0x570 [ 1535.153805][T21138] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1535.153832][T21138] ? do_raw_spin_lock+0x12c/0x2b0 [ 1535.153883][T21138] ? do_raw_spin_unlock+0x172/0x230 [ 1535.153932][T21138] ? __pfx_current_check_access_path+0x10/0x10 [ 1535.153966][T21138] ? simple_lookup+0x105/0x1d0 [ 1535.154000][T21138] tomoyo_path_mknod+0x12a/0x190 [ 1535.154035][T21138] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1535.154074][T21138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1535.154124][T21138] security_path_mknod+0x161/0x310 [ 1535.154153][T21138] do_mknodat+0x239/0x5d0 [ 1535.154187][T21138] ? __pfx_do_mknodat+0x10/0x10 [ 1535.154215][T21138] ? getname_flags.part.0+0x1c5/0x550 [ 1535.154262][T21138] __x64_sys_mknod+0x87/0xb0 [ 1535.154293][T21138] do_syscall_64+0xcd/0xfa0 [ 1535.154334][T21138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.154360][T21138] RIP: 0033:0x7f2daa38f6c9 [ 1535.154383][T21138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1535.154409][T21138] RSP: 002b:00007f2dab28f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1535.154436][T21138] RAX: ffffffffffffffda RBX: 00007f2daa5e5fa0 RCX: 00007f2daa38f6c9 [ 1535.154454][T21138] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1535.154470][T21138] RBP: 00007f2daa411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1535.154487][T21138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1535.154503][T21138] R13: 00007f2daa5e6038 R14: 00007f2daa5e5fa0 R15: 00007ffe5e963948 [ 1535.154545][T21138] [ 1535.156849][T21138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1535.318697][ T5831] total_pgpgout 321803 [ 1535.489587][ T5831] total_pgfault 726200 [ 1535.493814][ T5831] total_pgmajfault 121722 [ 1535.522183][ T5831] total_inactive_anon 24576 [ 1535.588741][ T5831] total_active_anon 0 [ 1535.593649][ T5831] total_inactive_file 0 [ 1535.608370][ T5831] total_active_file 0 [ 1535.620473][ T5831] total_unevictable 0 [ 1535.624999][ T5831] anon_cost 0 [ 1535.628314][ T5831] file_cost 0 [ 1535.669208][ T5831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3773,pid=21094,uid=0 [ 1535.732671][ T5831] Memory cgroup out of memory: Killed process 21094 (syz.2.3773) total-vm:108300kB, anon-rss:1268kB, file-rss:21796kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1538.084920][T20573] Bluetooth: hci1: command 0x0406 tx timeout [ 1539.837986][T21172] Unable to find swap-space signature [ 1540.554543][T21177] FAULT_INJECTION: forcing a failure. [ 1540.554543][T21177] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.616848][T21177] CPU: 0 UID: 0 PID: 21177 Comm: syz.0.3797 Not tainted syzkaller #0 PREEMPT(full) [ 1540.616895][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1540.616914][T21177] Call Trace: [ 1540.616925][T21177] [ 1540.616938][T21177] dump_stack_lvl+0x16c/0x1f0 [ 1540.616983][T21177] should_fail_ex+0x512/0x640 [ 1540.617029][T21177] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1540.617065][T21177] should_failslab+0xc2/0x120 [ 1540.617107][T21177] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1540.617139][T21177] ? __x64_sys_futex+0x1e0/0x4c0 [ 1540.617180][T21177] ? getname_flags.part.0+0x4c/0x550 [ 1540.617234][T21177] ? getname_flags.part.0+0x4c/0x550 [ 1540.617276][T21177] getname_flags.part.0+0x4c/0x550 [ 1540.617326][T21177] getname_flags+0x93/0xf0 [ 1540.617358][T21177] __x64_sys_mknod+0x74/0xb0 [ 1540.617395][T21177] do_syscall_64+0xcd/0xfa0 [ 1540.617436][T21177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.617469][T21177] RIP: 0033:0x7f2daa38f6c9 [ 1540.617495][T21177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.617524][T21177] RSP: 002b:00007f2dab28f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1540.617553][T21177] RAX: ffffffffffffffda RBX: 00007f2daa5e5fa0 RCX: 00007f2daa38f6c9 [ 1540.617574][T21177] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1540.617593][T21177] RBP: 00007f2daa411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1540.617612][T21177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1540.617630][T21177] R13: 00007f2daa5e6038 R14: 00007f2daa5e5fa0 R15: 00007ffe5e963948 [ 1540.617673][T21177] [ 1541.067329][T21177] warn_alloc: 2 callbacks suppressed [ 1541.067345][T21177] syz.0.3797: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1541.158898][T21177] CPU: 1 UID: 0 PID: 21177 Comm: syz.0.3797 Not tainted syzkaller #0 PREEMPT(full) [ 1541.158933][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1541.158946][T21177] Call Trace: [ 1541.158952][T21177] [ 1541.158959][T21177] dump_stack_lvl+0x16c/0x1f0 [ 1541.158981][T21177] warn_alloc+0x248/0x3a0 [ 1541.158998][T21177] ? __pfx_warn_alloc+0x10/0x10 [ 1541.159024][T21177] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1541.159046][T21177] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 1541.159068][T21177] ? __pfx___might_resched+0x10/0x10 [ 1541.159085][T21177] ? rcu_is_watching+0x12/0xc0 [ 1541.159101][T21177] ? trace_contention_end+0xdd/0x130 [ 1541.159121][T21177] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1541.159142][T21177] ? tomoyo_path_number_perm+0x295/0x580 [ 1541.159168][T21177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1541.159188][T21177] ? __pfx___mutex_lock+0x10/0x10 [ 1541.159207][T21177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1541.159233][T21177] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1541.159252][T21177] __vmalloc_node_noprof+0xad/0xf0 [ 1541.159272][T21177] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1541.159294][T21177] dvb_dvr_do_ioctl+0x15d/0x290 [ 1541.159317][T21177] dvb_usercopy+0x167/0x340 [ 1541.159335][T21177] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1541.159356][T21177] ? __pfx_dvb_usercopy+0x10/0x10 [ 1541.159381][T21177] ? __fget_files+0x20e/0x3c0 [ 1541.159400][T21177] dvb_dvr_ioctl+0x29/0x40 [ 1541.159418][T21177] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1541.159436][T21177] __x64_sys_ioctl+0x18e/0x210 [ 1541.159459][T21177] do_syscall_64+0xcd/0xfa0 [ 1541.159480][T21177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.159495][T21177] RIP: 0033:0x7f2daa38f6c9 [ 1541.159507][T21177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.159521][T21177] RSP: 002b:00007f2dab28f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.159535][T21177] RAX: ffffffffffffffda RBX: 00007f2daa5e5fa0 RCX: 00007f2daa38f6c9 [ 1541.159545][T21177] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000009 [ 1541.159553][T21177] RBP: 00007f2daa411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1541.159561][T21177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1541.159569][T21177] R13: 00007f2daa5e6038 R14: 00007f2daa5e5fa0 R15: 00007ffe5e963948 [ 1541.159587][T21177] [ 1541.159593][T21177] Mem-Info: [ 1541.404302][T21177] active_anon:12434 inactive_anon:7 isolated_anon:0 [ 1541.404302][T21177] active_file:9714 inactive_file:49409 isolated_file:0 [ 1541.404302][T21177] unevictable:768 dirty:457 writeback:0 [ 1541.404302][T21177] slab_reclaimable:12176 slab_unreclaimable:102298 [ 1541.404302][T21177] mapped:32408 shmem:1363 pagetables:1442 [ 1541.404302][T21177] sec_pagetables:0 bounce:0 [ 1541.404302][T21177] kernel_misc_reclaimable:0 [ 1541.404302][T21177] free:1278212 free_pcp:15709 free_cma:0 [ 1541.459080][T21177] Node 0 active_anon:49736kB inactive_anon:28kB active_file:38856kB inactive_file:197500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129632kB dirty:1828kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12744kB pagetables:5632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1541.519933][T21177] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1541.586708][T21177] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1541.653104][T21177] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1541.662967][T21177] Node 0 DMA32 free:1195568kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49872kB inactive_anon:180kB active_file:38856kB inactive_file:197500kB unevictable:1536kB writepending:1828kB zspages:216kB present:3129332kB managed:2545080kB mlocked:0kB bounce:0kB free_pcp:49444kB local_pcp:18492kB free_cma:0kB [ 1541.887760][T21177] lowmem_reserve[]: 0 0 1 1 1 [ 1541.920645][T21177] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1541.999154][T21177] lowmem_reserve[]: 0 0 0 0 0 [ 1542.007914][T21177] Node 1 Normal free:3905520kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9728kB local_pcp:6688kB free_cma:0kB [ 1542.075217][T21177] lowmem_reserve[]: 0 0 0 0 0 [ 1542.086722][T21177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1542.128873][T21177] Node 0 DMA32: 1872*4kB (UME) 1292*8kB (UME) 1095*16kB (UME) 794*32kB (UME) 614*64kB (UME) 427*128kB (UME) 204*256kB (UME) 95*512kB (UME) 43*1024kB (ME) 9*2048kB (UME) 214*4096kB (M) = 1194576kB [ 1542.487481][T21177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1542.543568][T21177] Node 1 Normal: 194*4kB (UME) 67*8kB (UME) 37*16kB (UME) 224*32kB (UME) 122*64kB (UME) 36*128kB (UME) 10*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3905520kB [ 1542.626855][T21177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1542.645578][T21177] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1542.675955][T21177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1542.736835][T21177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1542.803360][T21177] 60506 total pagecache pages [ 1542.808096][T21177] 15 pages in swap cache [ 1542.849546][T21177] Free swap = 118684kB [ 1542.862112][T21177] Total swap = 124996kB [ 1542.882130][T21177] 2097051 pages RAM [ 1542.885962][T21177] 0 pages HighMem/MovableOnly [ 1542.918808][T21177] 428691 pages reserved [ 1542.968820][T21177] 0 pages cma reserved [ 1545.815251][T21231] Unable to find swap-space signature [ 1550.470028][T21278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1551.376187][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.382777][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.067587][T21320] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3835'. [ 1555.181290][T21342] FAULT_INJECTION: forcing a failure. [ 1555.181290][T21342] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.235589][T21342] CPU: 0 UID: 0 PID: 21342 Comm: syz.6.3841 Not tainted syzkaller #0 PREEMPT(full) [ 1555.235630][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1555.235648][T21342] Call Trace: [ 1555.235657][T21342] [ 1555.235669][T21342] dump_stack_lvl+0x16c/0x1f0 [ 1555.235711][T21342] should_fail_ex+0x512/0x640 [ 1555.235753][T21342] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1555.235788][T21342] should_failslab+0xc2/0x120 [ 1555.235828][T21342] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1555.235859][T21342] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1555.235897][T21342] ? __d_alloc+0x32/0xae0 [ 1555.235938][T21342] ? __d_alloc+0x32/0xae0 [ 1555.235968][T21342] __d_alloc+0x32/0xae0 [ 1555.236007][T21342] path_from_stashed+0x427/0x750 [ 1555.236039][T21342] ? alloc_fd+0x471/0x7d0 [ 1555.236075][T21342] pidfs_alloc_file+0xf8/0x290 [ 1555.236103][T21342] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1555.236136][T21342] ? _raw_spin_unlock_irq+0x23/0x50 [ 1555.236171][T21342] pidfd_prepare+0x129/0x200 [ 1555.236209][T21342] __x64_sys_pidfd_open+0x105/0x1a0 [ 1555.236255][T21342] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 1555.236302][T21342] ? rcu_is_watching+0x12/0xc0 [ 1555.236337][T21342] do_syscall_64+0xcd/0xfa0 [ 1555.236375][T21342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.236404][T21342] RIP: 0033:0x7f6a89f8f6c9 [ 1555.236428][T21342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.236457][T21342] RSP: 002b:00007f6a8add5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 1555.236485][T21342] RAX: ffffffffffffffda RBX: 00007f6a8a1e5fa0 RCX: 00007f6a89f8f6c9 [ 1555.236503][T21342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1555.236519][T21342] RBP: 00007f6a8add5090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.236544][T21342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.236561][T21342] R13: 00007f6a8a1e6038 R14: 00007f6a8a1e5fa0 R15: 00007ffd685fb7e8 [ 1555.236606][T21342] [ 1556.183366][ T5831] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1556.215087][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1556.215132][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1556.215150][ T5831] Call Trace: [ 1556.215161][ T5831] [ 1556.215173][ T5831] dump_stack_lvl+0x16c/0x1f0 [ 1556.215217][ T5831] dump_header+0x101/0x930 [ 1556.215254][ T5831] oom_kill_process+0x272/0xa40 [ 1556.215303][ T5831] out_of_memory+0x350/0x1700 [ 1556.215346][ T5831] ? __pfx_out_of_memory+0x10/0x10 [ 1556.215393][ T5831] mem_cgroup_out_of_memory+0x118/0x130 [ 1556.215442][ T5831] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1556.215501][ T5831] ? do_raw_spin_unlock+0x172/0x230 [ 1556.215539][ T5831] try_charge_memcg+0x695/0xd30 [ 1556.215588][ T5831] ? __pfx_try_charge_memcg+0x10/0x10 [ 1556.215638][ T5831] ? find_held_lock+0x2b/0x80 [ 1556.215680][ T5831] charge_memcg+0x8a/0x230 [ 1556.215720][ T5831] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 1556.215769][ T5831] __read_swap_cache_async+0x397/0x500 [ 1556.215809][ T5831] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1556.215845][ T5831] ? rcu_is_watching+0x12/0xc0 [ 1556.215878][ T5831] ? trace_sched_exit_tp+0xd1/0x120 [ 1556.215926][ T5831] ? __schedule+0x11a3/0x5de0 [ 1556.215967][ T5831] swap_cluster_readahead+0x432/0x770 [ 1556.216013][ T5831] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1556.216059][ T5831] ? css_rstat_updated+0x1c2/0x510 [ 1556.216101][ T5831] ? __lock_acquire+0xb8a/0x1c90 [ 1556.216147][ T5831] ? get_vma_policy+0x242/0x3c0 [ 1556.216194][ T5831] swapin_readahead+0x160/0x1180 [ 1556.216243][ T5831] ? __pfx_swapin_readahead+0x10/0x10 [ 1556.216286][ T5831] ? find_held_lock+0x2b/0x80 [ 1556.216315][ T5831] ? swap_cache_get_folio+0x267/0x8e0 [ 1556.216342][ T5831] ? swap_cache_get_folio+0x267/0x8e0 [ 1556.216369][ T5831] ? swap_cache_get_folio+0x267/0x8e0 [ 1556.216401][ T5831] ? swap_cache_get_folio+0x267/0x8e0 [ 1556.216430][ T5831] ? swap_cache_get_folio+0x1f/0x8e0 [ 1556.216456][ T5831] ? swap_cache_get_folio+0x293/0x8e0 [ 1556.216488][ T5831] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1556.216515][ T5831] ? __pfx_get_swap_device+0x10/0x10 [ 1556.216552][ T5831] ? do_swap_page+0x125/0x6340 [ 1556.216597][ T5831] ? do_swap_page+0x86c/0x6340 [ 1556.216633][ T5831] do_swap_page+0x86c/0x6340 [ 1556.216693][ T5831] ? __pfx_do_swap_page+0x10/0x10 [ 1556.216738][ T5831] ? __pfx_default_wake_function+0x10/0x10 [ 1556.216772][ T5831] ? __lock_acquire+0x622/0x1c90 [ 1556.216815][ T5831] ? rcu_is_watching+0x12/0xc0 [ 1556.216847][ T5831] ? ___pte_offset_map+0x2ad/0x4f0 [ 1556.216892][ T5831] __handle_mm_fault+0x17d1/0x2aa0 [ 1556.216951][ T5831] ? __pfx___handle_mm_fault+0x10/0x10 [ 1556.217004][ T5831] ? lock_vma_under_rcu+0x176/0x530 [ 1556.217064][ T5831] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1556.217107][ T5831] ? get_timespec64+0x136/0x1b0 [ 1556.217156][ T5831] handle_mm_fault+0x589/0xd10 [ 1556.217204][ T5831] ? __pkru_allows_pkey+0x21/0xb0 [ 1556.217253][ T5831] do_user_addr_fault+0x60c/0x1370 [ 1556.217298][ T5831] ? rcu_is_watching+0x12/0xc0 [ 1556.217337][ T5831] exc_page_fault+0x64/0xc0 [ 1556.217376][ T5831] asm_exc_page_fault+0x26/0x30 [ 1556.217405][ T5831] RIP: 0033:0x7f264edc1f88 [ 1556.217431][ T5831] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 1556.217460][ T5831] RSP: 002b:00007ffe7b727dc0 EFLAGS: 00010293 [ 1556.217486][ T5831] RAX: 0000000000000000 RBX: 00000000000006f1 RCX: 00007f264edc1f85 [ 1556.217506][ T5831] RDX: 00007ffe7b727e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1556.217523][ T5831] RBP: 00007ffe7b727e6c R08: 0000000000000000 R09: 0000000000000000 [ 1556.217541][ T5831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1556.217559][ T5831] R13: 00000000000927c0 R14: 000000000017b614 R15: 00007ffe7b727ec0 [ 1556.217603][ T5831] [ 1556.598745][ T5831] memory: usage 3072kB, limit 3072kB, failcnt 314234 [ 1556.605495][ T5831] memory+swap: usage 7288kB, limit 9007199254740988kB, failcnt 0 [ 1556.651212][ T5831] kmem: usage 3032kB, limit 9007199254740988kB, failcnt 0 [ 1556.658481][ T5831] Memory cgroup stats for /syz2: [ 1556.659025][ T5831] cache 0 [ 1556.669744][ T5831] rss 0 [ 1556.673005][ T5831] rss_huge 0 [ 1556.676235][ T5831] shmem 0 [ 1556.679778][ T5831] mapped_file 0 [ 1556.683266][ T5831] dirty 0 [ 1556.686235][ T5831] writeback 0 [ 1556.692657][ T5831] workingset_refault_anon 137866 [ 1556.697642][ T5831] workingset_refault_file 19359 [ 1556.702741][ T5831] swap 4317184 [ 1556.706160][ T5831] swapcached 12288 [ 1556.710264][ T5831] pgpgin 326499 [ 1556.713767][ T5831] pgpgout 326496 [ 1556.717337][ T5831] pgfault 731444 [ 1556.728198][ T5831] pgmajfault 123821 [ 1556.732344][ T5831] inactive_anon 12288 [ 1556.738385][ T5831] active_anon 0 [ 1556.742069][ T5831] inactive_file 0 [ 1556.745727][ T5831] active_file 0 [ 1556.749438][ T5831] unevictable 0 [ 1556.752918][ T5831] hierarchical_memory_limit 3145728 [ 1556.758139][ T5831] hierarchical_memsw_limit 9223372036854771712 [ 1556.764455][ T5831] total_cache 0 [ 1556.767936][ T5831] total_rss 0 [ 1556.771355][ T5831] total_rss_huge 0 [ 1556.775560][ T5831] total_shmem 0 [ 1556.779124][ T5831] total_mapped_file 0 [ 1556.783131][ T5831] total_dirty 0 [ 1556.786606][ T5831] total_writeback 0 [ 1556.791145][ T5831] total_workingset_refault_anon 137866 [ 1556.796643][ T5831] total_workingset_refault_file 19359 [ 1556.802238][ T5831] total_swap 4317184 [ 1556.806190][ T5831] total_swapcached 12288 [ 1556.811026][ T5831] total_pgpgin 326499 [ 1556.815036][ T5831] total_pgpgout 326496 [ 1556.819195][ T5831] total_pgfault 731444 [ 1556.823285][ T5831] total_pgmajfault 123821 [ 1556.827657][ T5831] total_inactive_anon 12288 [ 1556.832284][ T5831] total_active_anon 0 [ 1556.836301][ T5831] total_inactive_file 0 [ 1556.842694][ T5831] total_active_file 0 [ 1556.846719][ T5831] total_unevictable 0 [ 1556.850806][ T5831] anon_cost 0 [ 1556.854113][ T5831] file_cost 0 [ 1556.857419][ T5831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3836,pid=21323,uid=0 [ 1556.872488][ T5831] Memory cgroup out of memory: Killed process 21323 (syz.2.3836) total-vm:108300kB, anon-rss:1268kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1556.894991][T21351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1557.995959][T21353] syz.2.3846 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1558.012468][T21353] CPU: 0 UID: 0 PID: 21353 Comm: syz.2.3846 Not tainted syzkaller #0 PREEMPT(full) [ 1558.012509][T21353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1558.012526][T21353] Call Trace: [ 1558.012534][T21353] [ 1558.012543][T21353] dump_stack_lvl+0x16c/0x1f0 [ 1558.012578][T21353] dump_header+0x101/0x930 [ 1558.012606][T21353] oom_kill_process+0x272/0xa40 [ 1558.012634][T21353] out_of_memory+0x350/0x1700 [ 1558.012665][T21353] ? __pfx_out_of_memory+0x10/0x10 [ 1558.012698][T21353] mem_cgroup_out_of_memory+0x118/0x130 [ 1558.012736][T21353] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1558.012780][T21353] ? do_raw_spin_unlock+0x172/0x230 [ 1558.012808][T21353] try_charge_memcg+0x695/0xd30 [ 1558.012845][T21353] ? __pfx_try_charge_memcg+0x10/0x10 [ 1558.012883][T21353] ? find_held_lock+0x2b/0x80 [ 1558.012913][T21353] charge_memcg+0x8a/0x230 [ 1558.012943][T21353] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 1558.012981][T21353] __read_swap_cache_async+0x397/0x500 [ 1558.013011][T21353] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1558.013042][T21353] ? __xa_erase+0xee/0x150 [ 1558.013077][T21353] swap_cluster_readahead+0x528/0x770 [ 1558.013111][T21353] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1558.013155][T21353] ? lock_acquire+0x179/0x350 [ 1558.013186][T21353] ? get_vma_policy+0x242/0x3c0 [ 1558.013222][T21353] swapin_readahead+0x160/0x1180 [ 1558.013266][T21353] ? __pfx_swapin_readahead+0x10/0x10 [ 1558.013292][T21353] ? find_held_lock+0x2b/0x80 [ 1558.013315][T21353] ? swap_cache_get_folio+0x267/0x8e0 [ 1558.013336][T21353] ? swap_cache_get_folio+0x267/0x8e0 [ 1558.013357][T21353] ? swap_cache_get_folio+0x267/0x8e0 [ 1558.013382][T21353] ? swap_cache_get_folio+0x267/0x8e0 [ 1558.013405][T21353] ? swap_cache_get_folio+0x1f/0x8e0 [ 1558.013425][T21353] ? swap_cache_get_folio+0x293/0x8e0 [ 1558.013451][T21353] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1558.013473][T21353] ? __pfx_get_swap_device+0x10/0x10 [ 1558.013504][T21353] ? do_swap_page+0x125/0x6340 [ 1558.013541][T21353] ? do_swap_page+0x86c/0x6340 [ 1558.013570][T21353] do_swap_page+0x86c/0x6340 [ 1558.013620][T21353] ? __pfx_do_swap_page+0x10/0x10 [ 1558.013655][T21353] ? __pfx_default_wake_function+0x10/0x10 [ 1558.013682][T21353] ? __lock_acquire+0x622/0x1c90 [ 1558.013718][T21353] ? rcu_is_watching+0x12/0xc0 [ 1558.013743][T21353] ? ___pte_offset_map+0x2ad/0x4f0 [ 1558.013781][T21353] __handle_mm_fault+0x17d1/0x2aa0 [ 1558.013829][T21353] ? __pfx___handle_mm_fault+0x10/0x10 [ 1558.013871][T21353] ? lock_vma_under_rcu+0x176/0x530 [ 1558.013920][T21353] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1558.013968][T21353] handle_mm_fault+0x589/0xd10 [ 1558.014006][T21353] ? __pkru_allows_pkey+0x21/0xb0 [ 1558.014046][T21353] do_user_addr_fault+0x60c/0x1370 [ 1558.014073][T21353] ? rcu_is_watching+0x12/0xc0 [ 1558.014102][T21353] exc_page_fault+0x64/0xc0 [ 1558.014132][T21353] asm_exc_page_fault+0x26/0x30 [ 1558.014154][T21353] RIP: 0033:0x7f264ec5264d [ 1558.014175][T21353] Code: 1c 00 48 8d 3d 78 01 1c 00 31 c0 e8 9d c7 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 48 8b 1d 58 57 39 00 45 31 d2 31 c9 <48> 8b 17 45 31 db 4c 8d 83 00 00 40 00 48 89 d0 0f 1f 00 4c 39 c0 [ 1558.014205][T21353] RSP: 002b:00007ffe7b727bb0 EFLAGS: 00010246 [ 1558.014226][T21353] RAX: 0000000000000000 RBX: 0000001b2fb20000 RCX: 0000000000000000 [ 1558.014240][T21353] RDX: ffffffffffffffff RSI: 00007ffe7b727d20 RDI: 00007f264efe5fb0 [ 1558.014264][T21353] RBP: 00007f264efe5fb0 R08: 00007f264efe5fa0 R09: 00007f264fb2b000 [ 1558.014279][T21353] R10: 0000000000000000 R11: 00310180f93ab3fd R12: 00007f264efe5fa0 [ 1558.014294][T21353] R13: 0000200000000000 R14: 00007ffe7b727bc8 R15: 00007ffe7b727d20 [ 1558.014328][T21353] [ 1558.014337][T21353] memory: usage 3072kB, limit 3072kB, failcnt 315769 [ 1558.384374][T21353] memory+swap: usage 7260kB, limit 9007199254740988kB, failcnt 0 [ 1558.392546][T21353] kmem: usage 3028kB, limit 9007199254740988kB, failcnt 0 [ 1558.399936][T21353] Memory cgroup stats for /syz2: [ 1558.400198][T21353] cache 0 [ 1558.408071][T21353] rss 0 [ 1558.410899][T21353] rss_huge 0 [ 1558.414361][T21353] shmem 0 [ 1558.417321][T21353] mapped_file 0 [ 1558.420914][T21353] dirty 0 [ 1558.423862][T21353] writeback 0 [ 1558.427134][T21353] workingset_refault_anon 138033 [ 1558.432318][T21353] workingset_refault_file 19359 [ 1558.437169][T21353] swap 4288512 [ 1558.440711][T21353] swapcached 45056 [ 1558.444478][T21353] pgpgin 327708 [ 1558.447936][T21353] pgpgout 327697 [ 1558.451549][T21353] pgfault 732675 [ 1558.455106][T21353] pgmajfault 123962 [ 1558.458988][T21353] inactive_anon 0 [ 1558.462807][T21353] active_anon 45056 [ 1558.466604][T21353] inactive_file 0 [ 1558.470296][T21353] active_file 0 [ 1558.474031][T21353] unevictable 0 [ 1558.479581][T21353] hierarchical_memory_limit 3145728 [ 1558.484801][T21353] hierarchical_memsw_limit 9223372036854771712 [ 1558.491076][T21353] total_cache 0 [ 1558.494898][T21353] total_rss 0 [ 1558.498179][T21353] total_rss_huge 0 [ 1558.501971][T21353] total_shmem 0 [ 1558.505625][T21353] total_mapped_file 0 [ 1558.509688][T21353] total_dirty 0 [ 1558.513178][T21353] total_writeback 0 [ 1558.517417][T21353] total_workingset_refault_anon 138033 [ 1558.522948][T21353] total_workingset_refault_file 19359 [ 1558.528651][T21353] total_swap 4288512 [ 1558.532821][T21353] total_swapcached 45056 [ 1558.537226][T21353] total_pgpgin 327708 [ 1558.541257][T21353] total_pgpgout 327697 [ 1558.545331][T21353] total_pgfault 732675 [ 1558.549470][T21353] total_pgmajfault 123962 [ 1558.553837][T21353] total_inactive_anon 0 [ 1558.557998][T21353] total_active_anon 45056 [ 1558.562467][T21353] total_inactive_file 0 [ 1558.566745][T21353] total_active_file 0 [ 1558.570830][T21353] total_unevictable 0 [ 1558.574825][T21353] anon_cost 0 [ 1558.578363][T21353] file_cost 0 [ 1558.583365][T21353] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3846,pid=21353,uid=0 [ 1558.598802][T21353] Memory cgroup out of memory: Killed process 21353 (syz.2.3846) total-vm:106252kB, anon-rss:1132kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1558.710666][T21357] Failed to initialize the IGMP6 control socket (err -105) [ 1559.663905][T21366] syz.2.3847 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 1559.677059][T21366] CPU: 0 UID: 0 PID: 21366 Comm: syz.2.3847 Not tainted syzkaller #0 PREEMPT(full) [ 1559.677102][T21366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1559.677121][T21366] Call Trace: [ 1559.677132][T21366] [ 1559.677144][T21366] dump_stack_lvl+0x16c/0x1f0 [ 1559.677186][T21366] dump_header+0x101/0x930 [ 1559.677222][T21366] oom_kill_process+0x272/0xa40 [ 1559.677259][T21366] out_of_memory+0x350/0x1700 [ 1559.677309][T21366] ? __pfx_out_of_memory+0x10/0x10 [ 1559.677354][T21366] mem_cgroup_out_of_memory+0x118/0x130 [ 1559.677405][T21366] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1559.677466][T21366] ? do_raw_spin_unlock+0x172/0x230 [ 1559.677504][T21366] try_charge_memcg+0x695/0xd30 [ 1559.677553][T21366] ? __pfx_try_charge_memcg+0x10/0x10 [ 1559.677593][T21366] ? find_held_lock+0x2b/0x80 [ 1559.677627][T21366] ? rcu_read_unlock+0x17/0x60 [ 1559.677681][T21366] obj_cgroup_charge_account+0x292/0x500 [ 1559.677731][T21366] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 1559.677781][T21366] ? kasan_unpoison+0x27/0x60 [ 1559.677821][T21366] __kmalloc_noprof+0x67e/0x880 [ 1559.677872][T21366] ? __register_sysctl_table+0xb3/0x1900 [ 1559.677929][T21366] ? __register_sysctl_table+0xb3/0x1900 [ 1559.677975][T21366] __register_sysctl_table+0xb3/0x1900 [ 1559.678022][T21366] ? is_module_address+0x5f/0xf0 [ 1559.678075][T21366] ? __pfx___register_sysctl_table+0x10/0x10 [ 1559.678120][T21366] ? is_module_address+0x69/0xf0 [ 1559.678163][T21366] ? register_net_sysctl_sz+0x228/0x3e0 [ 1559.678213][T21366] ? __asan_memcpy+0x3c/0x60 [ 1559.678250][T21366] nf_conntrack_pernet_init+0x83e/0xb40 [ 1559.678308][T21366] ? __pfx_nf_conntrack_pernet_init+0x10/0x10 [ 1559.678348][T21366] ops_init+0x1e2/0x5f0 [ 1559.678385][T21366] setup_net+0x100/0x390 [ 1559.678419][T21366] ? __pfx_setup_net+0x10/0x10 [ 1559.678455][T21366] ? debug_mutex_init+0x37/0x70 [ 1559.678493][T21366] copy_net_ns+0x2f8/0x690 [ 1559.678539][T21366] create_new_namespaces+0x3ea/0xa90 [ 1559.678585][T21366] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1559.678625][T21366] ksys_unshare+0x45b/0xa40 [ 1559.678666][T21366] ? __pfx_ksys_unshare+0x10/0x10 [ 1559.678712][T21366] ? do_user_addr_fault+0x843/0x1370 [ 1559.678751][T21366] __x64_sys_unshare+0x31/0x40 [ 1559.678789][T21366] do_syscall_64+0xcd/0xfa0 [ 1559.678830][T21366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.678861][T21366] RIP: 0033:0x7f264ed8f6c9 [ 1559.678887][T21366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.678916][T21366] RSP: 002b:00007f264cfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1559.678947][T21366] RAX: ffffffffffffffda RBX: 00007f264efe6090 RCX: 00007f264ed8f6c9 [ 1559.678967][T21366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1559.678985][T21366] RBP: 00007f264ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.679003][T21366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.679021][T21366] R13: 00007f264efe6128 R14: 00007f264efe6090 R15: 00007ffe7b727aa8 [ 1559.679067][T21366] [ 1559.993254][T21366] memory: usage 3072kB, limit 3072kB, failcnt 317228 [ 1560.007642][T21366] memory+swap: usage 7284kB, limit 9007199254740988kB, failcnt 0 [ 1560.018358][T21366] kmem: usage 3052kB, limit 9007199254740988kB, failcnt 0 [ 1560.025647][T21366] Memory cgroup stats for /syz2: [ 1560.025855][T21366] cache 0 [ 1560.059513][T21366] rss 0 [ 1560.064306][T21366] rss_huge 0 [ 1560.077060][T21366] shmem 0 [ 1560.081484][T21366] mapped_file 0 [ 1560.085004][T21366] dirty 0 [ 1560.088234][T21366] writeback 0 [ 1560.091770][T21366] workingset_refault_anon 138158 [ 1560.097180][T21366] workingset_refault_file 19359 [ 1560.102091][T21366] swap 4313088 [ 1560.105489][T21366] swapcached 20480 [ 1560.109267][T21366] pgpgin 328876 [ 1560.113455][T21366] pgpgout 328871 [ 1560.119507][T21366] pgfault 733881 [ 1560.123111][T21366] pgmajfault 124080 [ 1560.126952][T21366] inactive_anon 20480 [ 1560.131116][T21366] active_anon 0 [ 1560.134606][T21366] inactive_file 0 [ 1560.138355][T21366] active_file 0 [ 1560.141872][T21366] unevictable 0 [ 1560.145358][T21366] hierarchical_memory_limit 3145728 [ 1560.150618][T21366] hierarchical_memsw_limit 9223372036854771712 [ 1560.157407][T21366] total_cache 0 [ 1560.161629][T21366] total_rss 0 [ 1560.164961][T21366] total_rss_huge 0 [ 1560.179850][T21366] total_shmem 0 [ 1560.183400][T21366] total_mapped_file 0 [ 1560.221523][T21366] total_dirty 0 [ 1560.225330][T21366] total_writeback 0 [ 1560.229324][T21366] total_workingset_refault_anon 138158 [ 1560.234836][T21366] total_workingset_refault_file 19359 [ 1560.240439][T21366] total_swap 4313088 [ 1560.244366][T21366] total_swapcached 20480 [ 1560.248768][T21366] total_pgpgin 328876 [ 1560.252865][T21366] total_pgpgout 328871 [ 1560.257381][T21366] total_pgfault 733881 [ 1560.261977][T21366] total_pgmajfault 124080 [ 1560.266424][T21366] total_inactive_anon 20480 [ 1560.271005][T21366] total_active_anon 0 [ 1560.275006][T21366] total_inactive_file 0 [ 1560.279238][T21366] total_active_file 0 [ 1560.283252][T21366] total_unevictable 0 [ 1560.287263][T21366] anon_cost 0 [ 1560.290678][T21366] file_cost 0 [ 1560.293988][T21366] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3847,pid=21360,uid=0 [ 1560.309014][T21366] Memory cgroup out of memory: Killed process 21360 (syz.2.3847) total-vm:108300kB, anon-rss:1116kB, file-rss:21532kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1560.852132][T21372] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3850'. [ 1562.697474][T21392] FAULT_INJECTION: forcing a failure. [ 1562.697474][T21392] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.713810][T21392] CPU: 1 UID: 0 PID: 21392 Comm: syz.4.3854 Not tainted syzkaller #0 PREEMPT(full) [ 1562.713845][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1562.713859][T21392] Call Trace: [ 1562.713867][T21392] [ 1562.713876][T21392] dump_stack_lvl+0x16c/0x1f0 [ 1562.713916][T21392] should_fail_ex+0x512/0x640 [ 1562.713950][T21392] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1562.713978][T21392] should_failslab+0xc2/0x120 [ 1562.714010][T21392] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1562.714035][T21392] ? __pmd_alloc+0xbf/0x8b0 [ 1562.714073][T21392] ? __pmd_alloc+0xbf/0x8b0 [ 1562.714102][T21392] __pmd_alloc+0xbf/0x8b0 [ 1562.714131][T21392] ? find_held_lock+0x2b/0x80 [ 1562.714158][T21392] __handle_mm_fault+0xada/0x2aa0 [ 1562.714205][T21392] ? __pfx___handle_mm_fault+0x10/0x10 [ 1562.714285][T21392] handle_mm_fault+0x589/0xd10 [ 1562.714328][T21392] __get_user_pages+0x54e/0x3530 [ 1562.714378][T21392] ? __pfx___get_user_pages+0x10/0x10 [ 1562.714423][T21392] populate_vma_page_range+0x267/0x3f0 [ 1562.714458][T21392] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1562.714492][T21392] ? __pfx_find_vma_intersection+0x10/0x10 [ 1562.714526][T21392] ? do_mmap+0x69c/0x1210 [ 1562.714560][T21392] __mm_populate+0x1d8/0x380 [ 1562.714596][T21392] ? __pfx___mm_populate+0x10/0x10 [ 1562.714633][T21392] ? up_write+0x1b2/0x520 [ 1562.714674][T21392] vm_mmap_pgoff+0x37f/0x470 [ 1562.714709][T21392] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1562.714745][T21392] ? __fget_files+0x20e/0x3c0 [ 1562.714786][T21392] ksys_mmap_pgoff+0x7d/0x5c0 [ 1562.714817][T21392] ? __pfx_ksys_write+0x10/0x10 [ 1562.714851][T21392] __x64_sys_mmap+0x125/0x190 [ 1562.714894][T21392] do_syscall_64+0xcd/0xfa0 [ 1562.714925][T21392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.714948][T21392] RIP: 0033:0x7f8f1558f6c9 [ 1562.714968][T21392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.714990][T21392] RSP: 002b:00007f8f16398038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1562.715014][T21392] RAX: ffffffffffffffda RBX: 00007f8f157e6180 RCX: 00007f8f1558f6c9 [ 1562.715030][T21392] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1562.715044][T21392] RBP: 00007f8f16398090 R08: 0000000000000006 R09: 0000000000008000 [ 1562.715058][T21392] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 1562.715073][T21392] R13: 00007f8f157e6218 R14: 00007f8f157e6180 R15: 00007ffdcb7aa918 [ 1562.715111][T21392] [ 1564.046956][T21390] Process accounting paused [ 1564.680831][T21398] syz.2.3856 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 1564.735747][T21398] CPU: 1 UID: 0 PID: 21398 Comm: syz.2.3856 Not tainted syzkaller #0 PREEMPT(full) [ 1564.735788][T21398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1564.735805][T21398] Call Trace: [ 1564.735815][T21398] [ 1564.735827][T21398] dump_stack_lvl+0x16c/0x1f0 [ 1564.735866][T21398] dump_header+0x101/0x930 [ 1564.735899][T21398] oom_kill_process+0x272/0xa40 [ 1564.735934][T21398] out_of_memory+0x350/0x1700 [ 1564.735972][T21398] ? __pfx_out_of_memory+0x10/0x10 [ 1564.736012][T21398] mem_cgroup_out_of_memory+0x118/0x130 [ 1564.736055][T21398] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1564.736106][T21398] ? do_raw_spin_unlock+0x172/0x230 [ 1564.736140][T21398] try_charge_memcg+0x695/0xd30 [ 1564.736182][T21398] ? __pfx_try_charge_memcg+0x10/0x10 [ 1564.736214][T21398] ? find_held_lock+0x2b/0x80 [ 1564.736244][T21398] ? rcu_read_unlock+0x17/0x60 [ 1564.736291][T21398] obj_cgroup_charge_account+0x292/0x500 [ 1564.736332][T21398] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 1564.736376][T21398] ? kasan_unpoison+0x27/0x60 [ 1564.736410][T21398] __kmalloc_noprof+0x67e/0x880 [ 1564.736460][T21398] ? __register_sysctl_table+0xb3/0x1900 [ 1564.736508][T21398] ? __register_sysctl_table+0xb3/0x1900 [ 1564.736544][T21398] __register_sysctl_table+0xb3/0x1900 [ 1564.736582][T21398] ? is_module_address+0x5f/0xf0 [ 1564.736627][T21398] ? __pfx___register_sysctl_table+0x10/0x10 [ 1564.736664][T21398] ? is_module_address+0x69/0xf0 [ 1564.736699][T21398] ? register_net_sysctl_sz+0x228/0x3e0 [ 1564.736749][T21398] __addrconf_sysctl_register+0x1a2/0x360 [ 1564.736788][T21398] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1564.736831][T21398] ? __asan_memcpy+0x3c/0x60 [ 1564.736864][T21398] addrconf_init_net+0x53a/0x8e0 [ 1564.736900][T21398] ? __pfx_addrconf_init_net+0x10/0x10 [ 1564.736934][T21398] ops_init+0x1e2/0x5f0 [ 1564.736971][T21398] setup_net+0x100/0x390 [ 1564.737002][T21398] ? __pfx_setup_net+0x10/0x10 [ 1564.737033][T21398] ? debug_mutex_init+0x37/0x70 [ 1564.737067][T21398] copy_net_ns+0x2f8/0x690 [ 1564.737106][T21398] create_new_namespaces+0x3ea/0xa90 [ 1564.737150][T21398] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1564.737184][T21398] ksys_unshare+0x45b/0xa40 [ 1564.737222][T21398] ? __pfx_ksys_unshare+0x10/0x10 [ 1564.737263][T21398] ? do_user_addr_fault+0x843/0x1370 [ 1564.737303][T21398] __x64_sys_unshare+0x31/0x40 [ 1564.737338][T21398] do_syscall_64+0xcd/0xfa0 [ 1564.737375][T21398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.737405][T21398] RIP: 0033:0x7f264ed8f6c9 [ 1564.737428][T21398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.737461][T21398] RSP: 002b:00007f264cfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1564.737488][T21398] RAX: ffffffffffffffda RBX: 00007f264efe6090 RCX: 00007f264ed8f6c9 [ 1564.737506][T21398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1564.737524][T21398] RBP: 00007f264ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1564.737542][T21398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1564.737558][T21398] R13: 00007f264efe6128 R14: 00007f264efe6090 R15: 00007ffe7b727aa8 [ 1564.737599][T21398] [ 1564.737610][T21398] memory: usage 3072kB, limit 3072kB, failcnt 319868 [ 1565.069071][T21398] memory+swap: usage 7280kB, limit 9007199254740988kB, failcnt 0 [ 1565.077464][T21398] kmem: usage 3048kB, limit 9007199254740988kB, failcnt 0 [ 1565.084742][T21398] Memory cgroup stats for /syz2: [ 1565.084918][T21398] cache 0 [ 1565.093078][T21398] rss 0 [ 1565.095875][T21398] rss_huge 0 [ 1565.099483][T21398] shmem 0 [ 1565.102459][T21398] mapped_file 0 [ 1565.105936][T21398] dirty 0 [ 1565.109407][T21398] writeback 0 [ 1565.112723][T21398] workingset_refault_anon 139154 [ 1565.117691][T21398] workingset_refault_file 19359 [ 1565.123747][T21398] swap 4308992 [ 1565.127161][T21398] swapcached 24576 [ 1565.131257][T21398] pgpgin 330953 [ 1565.137417][T21398] pgpgout 330947 [ 1565.143901][T21398] pgfault 740182 [ 1565.147492][T21398] pgmajfault 125035 [ 1565.152907][T21398] inactive_anon 20480 [ 1565.157103][T21398] active_anon 4096 [ 1565.162577][T21398] inactive_file 0 [ 1565.166262][T21398] active_file 0 [ 1565.170974][T21398] unevictable 0 [ 1565.175149][T21398] hierarchical_memory_limit 3145728 [ 1565.181199][T21398] hierarchical_memsw_limit 9223372036854771712 [ 1565.187402][T21398] total_cache 0 [ 1565.191392][T21398] total_rss 0 [ 1565.194725][T21398] total_rss_huge 0 [ 1565.198481][T21398] total_shmem 0 [ 1565.204287][T21398] total_mapped_file 0 [ 1565.208312][T21398] total_dirty 0 [ 1565.212868][T21398] total_writeback 0 [ 1565.216710][T21398] total_workingset_refault_anon 139154 [ 1565.222320][T21398] total_workingset_refault_file 19359 [ 1565.227740][T21398] total_swap 4308992 [ 1565.231775][T21398] total_swapcached 24576 [ 1565.239528][T21398] total_pgpgin 330953 [ 1565.243556][T21398] total_pgpgout 330947 [ 1565.247648][T21398] total_pgfault 740182 [ 1565.251831][T21398] total_pgmajfault 125035 [ 1565.256178][T21398] total_inactive_anon 20480 [ 1565.260783][T21398] total_active_anon 4096 [ 1565.265061][T21398] total_inactive_file 0 [ 1565.269716][T21398] total_active_file 0 [ 1565.273735][T21398] total_unevictable 0 [ 1565.278425][T21398] anon_cost 0 [ 1565.281964][T21398] file_cost 0 [ 1565.285280][T21398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3856,pid=21393,uid=0 [ 1565.300807][T21398] Memory cgroup out of memory: Killed process 21393 (syz.2.3856) total-vm:106252kB, anon-rss:1260kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1572.258589][T20573] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1572.269420][T20573] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1572.277834][T20573] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1572.287086][T20573] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1572.299334][T20573] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1572.902875][T20573] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1572.928908][T20573] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1572.932295][T21421] chnl_net:caif_netlink_parms(): no params data found [ 1572.945440][T20573] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1572.956335][T20573] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1572.965418][T20573] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1573.257511][T21421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.279216][T21421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.286640][T21421] bridge_slave_0: entered allmulticast mode [ 1573.296245][T21421] bridge_slave_0: entered promiscuous mode [ 1573.322264][T21421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.343872][T21421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.352999][T21421] bridge_slave_1: entered allmulticast mode [ 1573.366489][T21421] bridge_slave_1: entered promiscuous mode [ 1573.559693][T21421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.617302][T21421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.935337][T21421] team0: Port device team_slave_0 added [ 1573.974763][T21421] team0: Port device team_slave_1 added [ 1574.178090][T21421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.190754][T21421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.284379][T21421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.383166][T21421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.391329][T21421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.436080][T16489] Bluetooth: hci6: command tx timeout [ 1574.579854][T21421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.665892][T21427] chnl_net:caif_netlink_parms(): no params data found [ 1574.771618][T21421] hsr_slave_0: entered promiscuous mode [ 1574.779730][T21421] hsr_slave_1: entered promiscuous mode [ 1574.786356][T21421] debugfs: 'hsr0' already exists in 'hsr' [ 1574.794511][T21421] Cannot create hsr debugfs directory [ 1575.038921][T16489] Bluetooth: hci7: command tx timeout [ 1575.141167][T21427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.148377][T21427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.166965][T21427] bridge_slave_0: entered allmulticast mode [ 1575.180099][T21427] bridge_slave_0: entered promiscuous mode [ 1575.212209][T21427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.220674][T21427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.228237][T21427] bridge_slave_1: entered allmulticast mode [ 1575.238989][T21427] bridge_slave_1: entered promiscuous mode [ 1575.348818][T21427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.375283][T21427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.555240][T21427] team0: Port device team_slave_0 added [ 1575.583248][T21427] team0: Port device team_slave_1 added [ 1575.697120][T21427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.714934][T21427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.770911][T21427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.822587][T21427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.830520][T21427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.857724][T21427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.960754][T21421] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1576.017153][T21421] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1576.044023][T21427] hsr_slave_0: entered promiscuous mode [ 1576.051468][T21427] hsr_slave_1: entered promiscuous mode [ 1576.058045][T21427] debugfs: 'hsr0' already exists in 'hsr' [ 1576.064574][T21427] Cannot create hsr debugfs directory [ 1576.070457][T21421] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1576.159071][T21421] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1576.479562][T16489] Bluetooth: hci6: command tx timeout [ 1576.764397][T21421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.772385][T21427] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1576.805700][T21427] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1576.816027][T21459] Invalid ELF header magic: != ELF [ 1576.826891][T21427] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1576.849978][T21421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.864383][T21427] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1576.904657][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.911997][T12346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.954462][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.961805][T12346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.119055][T16489] Bluetooth: hci7: command tx timeout [ 1577.293955][T21427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.346802][T21427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.385196][T17242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.392461][T17242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.472627][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.479873][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.636345][T21427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1577.810824][T21421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.138295][T21478] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input314 [ 1578.204336][T21427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.558852][T16489] Bluetooth: hci6: command tx timeout [ 1579.039325][T21421] veth0_vlan: entered promiscuous mode [ 1579.071264][T21421] veth1_vlan: entered promiscuous mode [ 1579.200007][T16489] Bluetooth: hci7: command tx timeout [ 1579.369203][T21421] veth0_macvtap: entered promiscuous mode [ 1579.409938][T21421] veth1_macvtap: entered promiscuous mode [ 1579.452555][T21427] veth0_vlan: entered promiscuous mode [ 1579.483367][T21421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.536979][T21421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.585332][T21427] veth1_vlan: entered promiscuous mode [ 1579.633463][T17242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.664752][T17242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.712218][T17242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.746003][T17242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.931694][T21427] veth0_macvtap: entered promiscuous mode [ 1579.971165][T21427] veth1_macvtap: entered promiscuous mode [ 1580.024680][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.065083][T21427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.076053][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.221749][T21427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.297153][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.321337][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.346768][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.364594][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.402127][T12346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.481418][T12346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.640624][T16489] Bluetooth: hci6: command tx timeout [ 1580.719236][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.727138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.899944][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.916254][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.280768][T16489] Bluetooth: hci7: command tx timeout [ 1582.445195][T21520] syz.8.3873 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1582.528345][T21520] CPU: 1 UID: 0 PID: 21520 Comm: syz.8.3873 Not tainted syzkaller #0 PREEMPT(full) [ 1582.528384][T21520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1582.528397][T21520] Call Trace: [ 1582.528407][T21520] [ 1582.528414][T21520] dump_stack_lvl+0x16c/0x1f0 [ 1582.528442][T21520] dump_header+0x101/0x930 [ 1582.528463][T21520] oom_kill_process+0x272/0xa40 [ 1582.528485][T21520] out_of_memory+0x350/0x1700 [ 1582.528508][T21520] ? __pfx_out_of_memory+0x10/0x10 [ 1582.528547][T21520] mem_cgroup_out_of_memory+0x118/0x130 [ 1582.528591][T21520] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1582.528626][T21520] ? do_raw_spin_unlock+0x172/0x230 [ 1582.528647][T21520] try_charge_memcg+0x695/0xd30 [ 1582.528675][T21520] ? __pfx_try_charge_memcg+0x10/0x10 [ 1582.528703][T21520] ? find_held_lock+0x2b/0x80 [ 1582.528726][T21520] charge_memcg+0x8a/0x230 [ 1582.528749][T21520] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 1582.528778][T21520] __read_swap_cache_async+0x397/0x500 [ 1582.528801][T21520] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1582.528823][T21520] ? __lock_acquire+0x622/0x1c90 [ 1582.528852][T21520] swap_cluster_readahead+0x432/0x770 [ 1582.528877][T21520] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1582.528895][T21520] ? swap_cache_get_folio+0x267/0x8e0 [ 1582.528912][T21520] ? swap_cache_get_folio+0x267/0x8e0 [ 1582.528928][T21520] ? swap_cache_get_folio+0x1c0/0x8e0 [ 1582.528949][T21520] ? swap_cache_get_folio+0x1f/0x8e0 [ 1582.528977][T21520] shmem_swapin_folio+0x1d9c/0x2570 [ 1582.528997][T21520] ? find_held_lock+0x2b/0x80 [ 1582.529023][T21520] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 1582.529042][T21520] ? __pfx_filemap_get_entry+0x10/0x10 [ 1582.529073][T21520] shmem_get_folio_gfp+0x2c5/0x1610 [ 1582.529098][T21520] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1582.529119][T21520] ? find_held_lock+0x2b/0x80 [ 1582.529139][T21520] shmem_get_folio+0x84/0xb0 [ 1582.529160][T21520] collapse_file+0xd31/0x3180 [ 1582.529191][T21520] ? find_held_lock+0x2b/0x80 [ 1582.529209][T21520] ? __pfx_collapse_file+0x10/0x10 [ 1582.529234][T21520] ? rcu_is_watching+0x12/0xc0 [ 1582.529253][T21520] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1582.529274][T21520] ? lockdep_hardirqs_on+0x7c/0x110 [ 1582.529304][T21520] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1582.529336][T21520] hpage_collapse_scan_file+0xe1e/0x1970 [ 1582.529363][T21520] ? hpage_collapse_scan_file+0x1a8/0x1970 [ 1582.529392][T21520] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 1582.529422][T21520] ? madvise_collapse+0x3d3/0xab0 [ 1582.529456][T21520] madvise_collapse+0x3f0/0xab0 [ 1582.529487][T21520] ? __pfx_madvise_collapse+0x10/0x10 [ 1582.529522][T21520] madvise_vma_behavior+0x1096/0x2d50 [ 1582.529552][T21520] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 1582.529574][T21520] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1582.529601][T21520] ? mas_prev+0x9b/0xf0 [ 1582.529624][T21520] ? __pfx_mas_prev+0x10/0x10 [ 1582.529653][T21520] ? find_vma_prev+0xd3/0x150 [ 1582.529677][T21520] ? __pfx_find_vma_prev+0x10/0x10 [ 1582.529699][T21520] ? page_table_check_set+0x627/0x750 [ 1582.529732][T21520] madvise_walk_vmas+0x31f/0x9c0 [ 1582.529762][T21520] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1582.529795][T21520] madvise_do_behavior+0x1e2/0x530 [ 1582.529823][T21520] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1582.529850][T21520] ? down_read+0x13d/0x480 [ 1582.529880][T21520] ? __lock_acquire+0x622/0x1c90 [ 1582.529909][T21520] do_madvise+0x176/0x240 [ 1582.529937][T21520] ? __pfx_do_madvise+0x10/0x10 [ 1582.529975][T21520] ? handle_mm_fault+0x2ab/0xd10 [ 1582.530014][T21520] ? do_user_addr_fault+0x843/0x1370 [ 1582.530038][T21520] __x64_sys_madvise+0xa9/0x110 [ 1582.530064][T21520] ? lockdep_hardirqs_on+0x7c/0x110 [ 1582.530085][T21520] do_syscall_64+0xcd/0xfa0 [ 1582.530110][T21520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.530128][T21520] RIP: 0033:0x7f4fa6b8f6c9 [ 1582.530143][T21520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1582.530161][T21520] RSP: 002b:00007f4fa7950038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1582.530179][T21520] RAX: ffffffffffffffda RBX: 00007f4fa6de6180 RCX: 00007f4fa6b8f6c9 [ 1582.530190][T21520] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 1582.530201][T21520] RBP: 00007f4fa6c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1582.530212][T21520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1582.530222][T21520] R13: 00007f4fa6de6218 R14: 00007f4fa6de6180 R15: 00007fff3c1816e8 [ 1582.530246][T21520] [ 1583.129508][T21520] memory: usage 3072kB, limit 3072kB, failcnt 327750 [ 1583.136253][T21520] memory+swap: usage 3188kB, limit 9007199254740988kB, failcnt 0 [ 1583.144979][T21520] kmem: usage 2972kB, limit 9007199254740988kB, failcnt 0 [ 1583.152431][T21520] Memory cgroup stats for /syz2: [ 1583.152544][T21520] cache 0 [ 1583.162984][T21520] rss 0 [ 1583.166103][T21520] rss_huge 0 [ 1583.169383][T21520] shmem 0 [ 1583.172313][T21520] mapped_file 0 [ 1583.175765][T21520] dirty 0 [ 1583.178736][T21520] writeback 0 [ 1583.182035][T21520] workingset_refault_anon 143700 [ 1583.187050][T21520] workingset_refault_file 19359 [ 1583.192202][T21520] swap 118784 [ 1583.195748][T21520] swapcached 102400 [ 1583.200421][T21520] pgpgin 337729 [ 1583.203880][T21520] pgpgout 337704 [ 1583.207415][T21520] pgfault 747375 [ 1583.211099][T21520] pgmajfault 129364 [ 1583.222670][T21520] inactive_anon 102400 [ 1583.226829][T21520] active_anon 0 [ 1583.230790][T21520] inactive_file 0 [ 1583.234533][T21520] active_file 0 [ 1583.237991][T21520] unevictable 0 [ 1583.241515][T21520] hierarchical_memory_limit 3145728 [ 1583.246704][T21520] hierarchical_memsw_limit 9223372036854771712 [ 1583.253428][T21520] total_cache 0 [ 1583.256897][T21520] total_rss 0 [ 1583.261938][T21520] total_rss_huge 0 [ 1583.265665][T21520] total_shmem 0 [ 1583.269294][T21520] total_mapped_file 0 [ 1583.282678][T21520] total_dirty 0 [ 1583.286130][T21520] total_writeback 0 [ 1583.290066][T21520] total_workingset_refault_anon 143700 [ 1583.295536][T21520] total_workingset_refault_file 19359 [ 1583.301253][T21520] total_swap 118784 [ 1583.305075][T21520] total_swapcached 102400 [ 1583.309535][T21520] total_pgpgin 337729 [ 1583.313581][T21520] total_pgpgout 337704 [ 1583.317657][T21520] total_pgfault 747375 [ 1583.321759][T21520] total_pgmajfault 129364 [ 1583.326090][T21520] total_inactive_anon 102400 [ 1583.331135][T21520] total_active_anon 0 [ 1583.335132][T21520] total_inactive_file 0 [ 1583.339335][T21520] total_active_file 0 [ 1583.343311][T21520] total_unevictable 0 [ 1583.347283][T21520] anon_cost 0 [ 1583.350648][T21520] file_cost 0 [ 1583.353920][T21520] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3874,pid=21514,uid=0 [ 1583.370740][T21520] Memory cgroup out of memory: Killed process 21514 (syz.2.3874) total-vm:104332kB, anon-rss:1236kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1586.671501][T16489] Bluetooth: hci7: Malformed Event: 0x02 [ 1587.437515][T21557] FAULT_INJECTION: forcing a failure. [ 1587.437515][T21557] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.468662][T21557] CPU: 0 UID: 0 PID: 21557 Comm: syz.4.3884 Not tainted syzkaller #0 PREEMPT(full) [ 1587.468707][T21557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1587.468725][T21557] Call Trace: [ 1587.468736][T21557] [ 1587.468748][T21557] dump_stack_lvl+0x16c/0x1f0 [ 1587.468787][T21557] should_fail_ex+0x512/0x640 [ 1587.468831][T21557] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1587.468868][T21557] should_failslab+0xc2/0x120 [ 1587.468908][T21557] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1587.468943][T21557] ? __d_alloc+0x32/0xae0 [ 1587.468985][T21557] ? __d_alloc+0x32/0xae0 [ 1587.469017][T21557] __d_alloc+0x32/0xae0 [ 1587.469057][T21557] d_alloc_pseudo+0x1c/0xc0 [ 1587.469102][T21557] alloc_file_pseudo+0xcf/0x230 [ 1587.469148][T21557] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1587.469193][T21557] ? alloc_fd+0x471/0x7d0 [ 1587.469231][T21557] sock_alloc_file+0x50/0x210 [ 1587.469277][T21557] __sys_socket+0x1c0/0x260 [ 1587.469320][T21557] ? __pfx___sys_socket+0x10/0x10 [ 1587.469362][T21557] ? xfd_validate_state+0x61/0x180 [ 1587.469405][T21557] ? __pfx_do_writev+0x10/0x10 [ 1587.469448][T21557] __x64_sys_socket+0x72/0xb0 [ 1587.469487][T21557] ? lockdep_hardirqs_on+0x7c/0x110 [ 1587.469525][T21557] do_syscall_64+0xcd/0xfa0 [ 1587.469567][T21557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.469597][T21557] RIP: 0033:0x7f8f1558f6c9 [ 1587.469623][T21557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.469654][T21557] RSP: 002b:00007f8f163da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1587.469684][T21557] RAX: ffffffffffffffda RBX: 00007f8f157e5fa0 RCX: 00007f8f1558f6c9 [ 1587.469705][T21557] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 1587.469724][T21557] RBP: 00007f8f15611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1587.469743][T21557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1587.469762][T21557] R13: 00007f8f157e6038 R14: 00007f8f157e5fa0 R15: 00007ffdcb7aa918 [ 1587.469804][T21557] [ 1588.698989][T21573] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1589.667302][T21564] syz.2.3885 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1589.750394][T21564] CPU: 1 UID: 0 PID: 21564 Comm: syz.2.3885 Not tainted syzkaller #0 PREEMPT(full) [ 1589.750440][T21564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1589.750459][T21564] Call Trace: [ 1589.750470][T21564] [ 1589.750482][T21564] dump_stack_lvl+0x16c/0x1f0 [ 1589.750529][T21564] dump_header+0x101/0x930 [ 1589.750567][T21564] oom_kill_process+0x272/0xa40 [ 1589.750605][T21564] out_of_memory+0x350/0x1700 [ 1589.750648][T21564] ? __pfx_out_of_memory+0x10/0x10 [ 1589.750694][T21564] mem_cgroup_out_of_memory+0x118/0x130 [ 1589.750746][T21564] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1589.750806][T21564] ? do_raw_spin_unlock+0x172/0x230 [ 1589.750844][T21564] try_charge_memcg+0x695/0xd30 [ 1589.750893][T21564] ? __pfx_try_charge_memcg+0x10/0x10 [ 1589.750932][T21564] ? find_held_lock+0x2b/0x80 [ 1589.750966][T21564] ? rcu_read_unlock+0x17/0x60 [ 1589.751030][T21564] obj_cgroup_charge_account+0x292/0x500 [ 1589.751079][T21564] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 1589.751132][T21564] ? kasan_save_track+0x14/0x30 [ 1589.751175][T21564] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 1589.751213][T21564] ? __d_alloc+0x32/0xae0 [ 1589.751259][T21564] ? __d_alloc+0x32/0xae0 [ 1589.751292][T21564] ? is_bpf_text_address+0x8a/0x1a0 [ 1589.751334][T21564] __d_alloc+0x32/0xae0 [ 1589.751367][T21564] ? bpf_ksym_find+0x124/0x1c0 [ 1589.751408][T21564] d_alloc_parallel+0x111/0x1510 [ 1589.751456][T21564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.751491][T21564] ? unwind_get_return_address+0x59/0xa0 [ 1589.751525][T21564] ? arch_stack_walk+0xa6/0x100 [ 1589.751566][T21564] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1589.751619][T21564] ? lockdep_init_map_type+0x5c/0x280 [ 1589.751667][T21564] ? lockdep_init_map_type+0x5c/0x280 [ 1589.751723][T21564] __lookup_slow+0x193/0x460 [ 1589.751771][T21564] ? __pfx___lookup_slow+0x10/0x10 [ 1589.751826][T21564] ? __mod_node_page_state+0xc0/0x1d0 [ 1589.751886][T21564] ? __mod_node_page_state+0xc0/0x1d0 [ 1589.751933][T21564] ? d_lookup+0xe7/0x190 [ 1589.751996][T21564] lookup_noperm+0xe1/0x110 [ 1589.752045][T21564] simple_start_creating+0xd1/0x1b0 [ 1589.752103][T21564] debugfs_start_creating.part.0+0x82/0x190 [ 1589.752140][T21564] __debugfs_create_file+0xa7/0x6b0 [ 1589.752179][T21564] debugfs_create_file_full+0x41/0x60 [ 1589.752217][T21564] kvm_dev_ioctl+0x1708/0x1a80 [ 1589.752272][T21564] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1589.752326][T21564] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1589.752366][T21564] __x64_sys_ioctl+0x18e/0x210 [ 1589.752416][T21564] do_syscall_64+0xcd/0xfa0 [ 1589.752458][T21564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.752489][T21564] RIP: 0033:0x7f264ed8f6c9 [ 1589.752515][T21564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1589.752546][T21564] RSP: 002b:00007f264cff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1589.752576][T21564] RAX: ffffffffffffffda RBX: 00007f264efe5fa0 RCX: 00007f264ed8f6c9 [ 1589.752597][T21564] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 1589.752615][T21564] RBP: 00007f264ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1589.752633][T21564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1589.752651][T21564] R13: 00007f264efe6038 R14: 00007f264efe5fa0 R15: 00007ffe7b727aa8 [ 1589.752694][T21564] [ 1589.752706][T21564] memory: usage 3072kB, limit 3072kB, failcnt 328879 [ 1590.216842][T21564] memory+swap: usage 3260kB, limit 9007199254740988kB, failcnt 0 [ 1590.228056][T21564] kmem: usage 3040kB, limit 9007199254740988kB, failcnt 0 [ 1590.235767][T21564] Memory cgroup stats for /syz2: [ 1590.235961][T21564] cache 0 [ 1590.244337][T21564] rss 0 [ 1590.247174][T21564] rss_huge 0 [ 1590.250579][T21564] shmem 0 [ 1590.253548][T21564] mapped_file 0 [ 1590.257113][T21564] dirty 0 [ 1590.260661][T21564] writeback 0 [ 1590.263982][T21564] workingset_refault_anon 144290 [ 1590.269116][T21564] workingset_refault_file 19359 [ 1590.274110][T21564] swap 192512 [ 1590.277432][T21564] swapcached 32768 [ 1590.281265][T21564] pgpgin 338446 [ 1590.284853][T21564] pgpgout 338438 [ 1590.288496][T21564] pgfault 748258 [ 1590.292199][T21564] pgmajfault 129897 [ 1590.303216][T21564] inactive_anon 0 [ 1590.338798][T21564] active_anon 32768 [ 1590.342680][T21564] inactive_file 0 [ 1590.411248][T21564] active_file 0 [ 1590.418729][T21564] unevictable 0 [ 1590.422262][T21564] hierarchical_memory_limit 3145728 [ 1590.428755][T21564] hierarchical_memsw_limit 9223372036854771712 [ 1590.434975][T21564] total_cache 0 [ 1590.438515][T21564] total_rss 0 [ 1590.491831][T21564] total_rss_huge 0 [ 1590.505098][T21564] total_shmem 0 [ 1590.519290][T21564] total_mapped_file 0 [ 1590.535129][T21564] total_dirty 0 [ 1590.549220][T21564] total_writeback 0 [ 1590.589296][T21564] total_workingset_refault_anon 144290 [ 1590.616229][T21564] total_workingset_refault_file 19359 [ 1590.640245][T21564] total_swap 192512 [ 1590.646394][T21564] total_swapcached 32768 [ 1590.662773][T21564] total_pgpgin 338446 [ 1590.678329][T21564] total_pgpgout 338438 [ 1590.700821][T21564] total_pgfault 748258 [ 1590.705037][T21564] total_pgmajfault 129897 [ 1590.713857][T21564] total_inactive_anon 0 [ 1590.718145][T21564] total_active_anon 32768 [ 1590.723251][T21564] total_inactive_file 0 [ 1590.727567][T21564] total_active_file 0 [ 1590.731933][T21564] total_unevictable 0 [ 1590.737824][T21564] anon_cost 0 [ 1590.742778][T21564] file_cost 0 [ 1590.747506][T21564] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3885,pid=21563,uid=0 [ 1590.780655][T21564] Memory cgroup out of memory: Killed process 21563 (syz.2.3885) total-vm:135052kB, anon-rss:1244kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1591.902061][T21592] syz.4.3891: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1591.916866][T21592] CPU: 0 UID: 0 PID: 21592 Comm: syz.4.3891 Not tainted syzkaller #0 PREEMPT(full) [ 1591.916906][T21592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1591.916923][T21592] Call Trace: [ 1591.916933][T21592] [ 1591.916945][T21592] dump_stack_lvl+0x16c/0x1f0 [ 1591.916986][T21592] warn_alloc+0x248/0x3a0 [ 1591.917019][T21592] ? __pfx_warn_alloc+0x10/0x10 [ 1591.917077][T21592] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1591.917123][T21592] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 1591.917167][T21592] ? __pfx___might_resched+0x10/0x10 [ 1591.917202][T21592] ? rcu_is_watching+0x12/0xc0 [ 1591.917234][T21592] ? trace_contention_end+0xdd/0x130 [ 1591.917287][T21592] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1591.917329][T21592] ? tomoyo_path_number_perm+0x295/0x580 [ 1591.917383][T21592] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1591.917427][T21592] ? __pfx___mutex_lock+0x10/0x10 [ 1591.917469][T21592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1591.917527][T21592] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1591.917568][T21592] __vmalloc_node_noprof+0xad/0xf0 [ 1591.917613][T21592] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1591.917661][T21592] dvb_dvr_do_ioctl+0x15d/0x290 [ 1591.917712][T21592] dvb_usercopy+0x167/0x340 [ 1591.917752][T21592] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1591.917799][T21592] ? __pfx_dvb_usercopy+0x10/0x10 [ 1591.917858][T21592] ? __fget_files+0x20e/0x3c0 [ 1591.917900][T21592] dvb_dvr_ioctl+0x29/0x40 [ 1591.917939][T21592] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1591.917982][T21592] __x64_sys_ioctl+0x18e/0x210 [ 1591.918028][T21592] do_syscall_64+0xcd/0xfa0 [ 1591.918068][T21592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.918100][T21592] RIP: 0033:0x7f8f1558f6c9 [ 1591.918125][T21592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.918154][T21592] RSP: 002b:00007f8f163b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1591.918184][T21592] RAX: ffffffffffffffda RBX: 00007f8f157e6090 RCX: 00007f8f1558f6c9 [ 1591.918204][T21592] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000008 [ 1591.918223][T21592] RBP: 00007f8f15611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1591.918241][T21592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1591.918268][T21592] R13: 00007f8f157e6128 R14: 00007f8f157e6090 R15: 00007ffdcb7aa918 [ 1591.918313][T21592] [ 1591.918325][T21592] Mem-Info: [ 1592.172131][T21592] active_anon:17683 inactive_anon:8 isolated_anon:0 [ 1592.172131][T21592] active_file:9715 inactive_file:49433 isolated_file:0 [ 1592.172131][T21592] unevictable:768 dirty:580 writeback:0 [ 1592.172131][T21592] slab_reclaimable:12558 slab_unreclaimable:109757 [ 1592.172131][T21592] mapped:42897 shmem:6215 pagetables:1553 [ 1592.172131][T21592] sec_pagetables:0 bounce:0 [ 1592.172131][T21592] kernel_misc_reclaimable:0 [ 1592.172131][T21592] free:1245714 free_pcp:11461 free_cma:0 [ 1592.245067][T21592] Node 0 active_anon:70732kB inactive_anon:32kB active_file:38860kB inactive_file:197596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171588kB dirty:2320kB writeback:0kB shmem:23320kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13436kB pagetables:6076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1592.364339][T21592] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1592.489568][T21592] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.543700][T21592] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1592.587456][T21592] Node 0 DMA32 free:1068596kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56240kB inactive_anon:0kB active_file:38860kB inactive_file:197596kB unevictable:1536kB writepending:2412kB zspages:456kB present:3129332kB managed:2545080kB mlocked:0kB bounce:0kB free_pcp:44076kB local_pcp:24028kB free_cma:0kB [ 1592.628605][T21592] lowmem_reserve[]: 0 0 1 1 1 [ 1592.634662][T21592] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1592.677317][T21592] lowmem_reserve[]: 0 0 0 0 0 [ 1592.689233][T21592] Node 1 Normal free:3906180kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8928kB local_pcp:2496kB free_cma:0kB [ 1592.726116][T21592] lowmem_reserve[]: 0 0 0 0 0 [ 1592.759166][T21592] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1592.772859][T21592] Node 0 DMA32: 658*4kB (UME) 518*8kB (UME) 612*16kB (UM) 872*32kB (M) 681*64kB (ME) 419*128kB (UME) 201*256kB (UME) 93*512kB (UME) 44*1024kB (UME) 6*2048kB (UME) 189*4096kB (M) = 1072248kB [ 1592.825675][T21592] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1592.869521][T21592] Node 1 Normal: 191*4kB (UME) 61*8kB (UME) 34*16kB (UME) 224*32kB (UME) 112*64kB (UME) 39*128kB (UME) 14*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3906180kB [ 1592.905718][T21592] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.915951][T21592] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1592.935271][T21592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1592.974030][T21592] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1593.019856][T21592] 60544 total pagecache pages [ 1593.027238][T21592] 20 pages in swap cache [ 1593.033236][T21592] Free swap = 124828kB [ 1593.037615][T21592] Total swap = 124996kB [ 1593.078820][T21592] 2097051 pages RAM [ 1593.148812][T21592] 0 pages HighMem/MovableOnly [ 1593.153572][T21592] 428691 pages reserved [ 1593.164521][T21592] 0 pages cma reserved [ 1594.803256][T21603] Process accounting resumed [ 1600.522375][T21680] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input315 [ 1600.742370][T21674] syz.2.3906 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 1600.754681][T21674] CPU: 1 UID: 0 PID: 21674 Comm: syz.2.3906 Not tainted syzkaller #0 PREEMPT(full) [ 1600.754723][T21674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1600.754742][T21674] Call Trace: [ 1600.754753][T21674] [ 1600.754765][T21674] dump_stack_lvl+0x16c/0x1f0 [ 1600.754810][T21674] dump_header+0x101/0x930 [ 1600.754847][T21674] oom_kill_process+0x272/0xa40 [ 1600.754893][T21674] out_of_memory+0x350/0x1700 [ 1600.754936][T21674] ? __pfx_out_of_memory+0x10/0x10 [ 1600.754981][T21674] mem_cgroup_out_of_memory+0x118/0x130 [ 1600.755032][T21674] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1600.755092][T21674] ? do_raw_spin_unlock+0x172/0x230 [ 1600.755128][T21674] try_charge_memcg+0x695/0xd30 [ 1600.755174][T21674] ? __pfx_try_charge_memcg+0x10/0x10 [ 1600.755214][T21674] ? find_held_lock+0x2b/0x80 [ 1600.755249][T21674] ? rcu_read_unlock+0x17/0x60 [ 1600.755305][T21674] obj_cgroup_charge_account+0x292/0x500 [ 1600.755354][T21674] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 1600.755405][T21674] ? kasan_unpoison+0x27/0x60 [ 1600.755446][T21674] __kmalloc_noprof+0x67e/0x880 [ 1600.755496][T21674] ? __register_sysctl_table+0xb3/0x1900 [ 1600.755552][T21674] ? __register_sysctl_table+0xb3/0x1900 [ 1600.755596][T21674] __register_sysctl_table+0xb3/0x1900 [ 1600.755643][T21674] ? is_module_address+0x5f/0xf0 [ 1600.755703][T21674] ? __pfx___register_sysctl_table+0x10/0x10 [ 1600.755749][T21674] ? is_module_address+0x69/0xf0 [ 1600.755793][T21674] ? register_net_sysctl_sz+0x228/0x3e0 [ 1600.755851][T21674] __addrconf_sysctl_register+0x1a2/0x360 [ 1600.755904][T21674] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1600.755954][T21674] ? __asan_memcpy+0x3c/0x60 [ 1600.755992][T21674] addrconf_init_net+0x50c/0x8e0 [ 1600.756035][T21674] ? __pfx_addrconf_init_net+0x10/0x10 [ 1600.756075][T21674] ops_init+0x1e2/0x5f0 [ 1600.756114][T21674] setup_net+0x100/0x390 [ 1600.756147][T21674] ? __pfx_setup_net+0x10/0x10 [ 1600.756183][T21674] ? debug_mutex_init+0x37/0x70 [ 1600.756222][T21674] copy_net_ns+0x2f8/0x690 [ 1600.756265][T21674] create_new_namespaces+0x3ea/0xa90 [ 1600.756312][T21674] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1600.756352][T21674] ksys_unshare+0x45b/0xa40 [ 1600.756390][T21674] ? __pfx_ksys_unshare+0x10/0x10 [ 1600.756431][T21674] ? do_user_addr_fault+0x843/0x1370 [ 1600.756470][T21674] __x64_sys_unshare+0x31/0x40 [ 1600.756507][T21674] do_syscall_64+0xcd/0xfa0 [ 1600.756544][T21674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.756575][T21674] RIP: 0033:0x7f264ed8f6c9 [ 1600.756602][T21674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.756633][T21674] RSP: 002b:00007f264cfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1600.756664][T21674] RAX: ffffffffffffffda RBX: 00007f264efe6090 RCX: 00007f264ed8f6c9 [ 1600.756685][T21674] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1600.756704][T21674] RBP: 00007f264ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1600.756724][T21674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.756742][T21674] R13: 00007f264efe6128 R14: 00007f264efe6090 R15: 00007ffe7b727aa8 [ 1600.756787][T21674] [ 1600.756891][T21674] memory: usage 3072kB, limit 3072kB, failcnt 332036 [ 1601.102888][ T30] audit: type=1804 audit(4294968735.350:32): pid=21681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3909" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/trace" dev="tracefs" ino=81 res=1 errno=0 [ 1601.183439][T21674] memory+swap: usage 7280kB, limit 9007199254740988kB, failcnt 0 [ 1601.191930][T21674] kmem: usage 3036kB, limit 9007199254740988kB, failcnt 0 [ 1601.211163][T21674] Memory cgroup stats for /syz2: [ 1601.211362][T21674] cache 0 [ 1601.220566][T21674] rss 0 [ 1601.223480][T21674] rss_huge 0 [ 1601.229090][T21674] shmem 0 [ 1601.290612][T21674] mapped_file 0 [ 1601.341421][T21674] dirty 0 [ 1601.360673][T21674] writeback 0 [ 1601.364059][T21674] workingset_refault_anon 145215 [ 1601.398613][T21674] workingset_refault_file 19359 [ 1601.407511][T21674] swap 4308992 [ 1601.412631][T21674] swapcached 36864 [ 1601.424453][T21682] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input316 [ 1601.446547][T21674] pgpgin 340965 [ 1601.467823][T21674] pgpgout 340956 [ 1601.478810][T21674] pgfault 750927 [ 1601.499019][T21674] pgmajfault 130702 [ 1601.509899][T21674] inactive_anon 0 [ 1601.523101][T21674] active_anon 36864 [ 1601.532885][T21674] inactive_file 0 [ 1601.547862][T21674] active_file 0 [ 1601.558508][T21674] unevictable 0 [ 1601.562083][T21674] hierarchical_memory_limit 3145728 [ 1601.633576][T21674] hierarchical_memsw_limit 9223372036854771712 [ 1601.667280][T21674] total_cache 0 [ 1601.698614][T21674] total_rss 0 [ 1601.701982][T21674] total_rss_huge 0 [ 1601.717818][T21674] total_shmem 0 [ 1601.733400][T21674] total_mapped_file 0 [ 1601.737451][T21674] total_dirty 0 [ 1601.752960][T21674] total_writeback 0 [ 1601.756840][T21674] total_workingset_refault_anon 145215 [ 1601.799750][T21674] total_workingset_refault_file 19359 [ 1601.808276][T21674] total_swap 4308992 [ 1601.835308][T21674] total_swapcached 36864 [ 1601.852092][T21674] total_pgpgin 340965 [ 1601.859775][T21674] total_pgpgout 340956 [ 1601.864854][T21674] total_pgfault 750927 [ 1601.871229][T21674] total_pgmajfault 130702 [ 1601.875672][T21674] total_inactive_anon 0 [ 1601.883708][T21674] total_active_anon 36864 [ 1601.888208][T21674] total_inactive_file 0 [ 1601.896842][T21674] total_active_file 0 [ 1601.906298][T21674] total_unevictable 0 [ 1601.911661][T21674] anon_cost 0 [ 1601.914995][T21674] file_cost 0 [ 1601.918395][T21674] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3906,pid=21658,uid=0 [ 1601.949139][T21674] Memory cgroup out of memory: Killed process 21658 (syz.2.3906) total-vm:108300kB, anon-rss:1268kB, file-rss:21796kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1605.626504][T21731] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1608.991069][T21753] syz.2.3929 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 1609.102720][T21753] CPU: 0 UID: 0 PID: 21753 Comm: syz.2.3929 Not tainted syzkaller #0 PREEMPT(full) [ 1609.102768][T21753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1609.102787][T21753] Call Trace: [ 1609.102798][T21753] [ 1609.102811][T21753] dump_stack_lvl+0x16c/0x1f0 [ 1609.102866][T21753] dump_header+0x101/0x930 [ 1609.102905][T21753] oom_kill_process+0x272/0xa40 [ 1609.102945][T21753] out_of_memory+0x350/0x1700 [ 1609.102990][T21753] ? __pfx_out_of_memory+0x10/0x10 [ 1609.103038][T21753] mem_cgroup_out_of_memory+0x118/0x130 [ 1609.103088][T21753] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1609.103148][T21753] ? do_raw_spin_unlock+0x172/0x230 [ 1609.103188][T21753] try_charge_memcg+0x695/0xd30 [ 1609.103238][T21753] ? __pfx_try_charge_memcg+0x10/0x10 [ 1609.103279][T21753] ? find_held_lock+0x2b/0x80 [ 1609.103313][T21753] ? rcu_read_unlock+0x17/0x60 [ 1609.103370][T21753] obj_cgroup_charge_account+0x292/0x500 [ 1609.103421][T21753] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 1609.103473][T21753] ? kasan_unpoison+0x27/0x60 [ 1609.103511][T21753] __kmalloc_noprof+0x67e/0x880 [ 1609.103562][T21753] ? __register_sysctl_table+0xb3/0x1900 [ 1609.103616][T21753] ? __register_sysctl_table+0xb3/0x1900 [ 1609.103663][T21753] __register_sysctl_table+0xb3/0x1900 [ 1609.103710][T21753] ? is_module_address+0x5f/0xf0 [ 1609.103762][T21753] ? __pfx___register_sysctl_table+0x10/0x10 [ 1609.103807][T21753] ? is_module_address+0x69/0xf0 [ 1609.103858][T21753] ? register_net_sysctl_sz+0x228/0x3e0 [ 1609.103907][T21753] ? __asan_memcpy+0x3c/0x60 [ 1609.103945][T21753] sctp_sysctl_net_register+0x15d/0x200 [ 1609.103988][T21753] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1609.104027][T21753] sctp_defaults_init+0x6d2/0xd90 [ 1609.104067][T21753] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1609.104104][T21753] ops_init+0x1e2/0x5f0 [ 1609.104144][T21753] setup_net+0x100/0x390 [ 1609.104179][T21753] ? __pfx_setup_net+0x10/0x10 [ 1609.104216][T21753] ? debug_mutex_init+0x37/0x70 [ 1609.104256][T21753] copy_net_ns+0x2f8/0x690 [ 1609.104300][T21753] create_new_namespaces+0x3ea/0xa90 [ 1609.104350][T21753] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1609.104391][T21753] ksys_unshare+0x45b/0xa40 [ 1609.104433][T21753] ? __pfx_ksys_unshare+0x10/0x10 [ 1609.104472][T21753] ? do_user_addr_fault+0x843/0x1370 [ 1609.104512][T21753] __x64_sys_unshare+0x31/0x40 [ 1609.104547][T21753] do_syscall_64+0xcd/0xfa0 [ 1609.104583][T21753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.104610][T21753] RIP: 0033:0x7f264ed8f6c9 [ 1609.104634][T21753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.104663][T21753] RSP: 002b:00007f264cff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1609.104693][T21753] RAX: ffffffffffffffda RBX: 00007f264efe5fa0 RCX: 00007f264ed8f6c9 [ 1609.104711][T21753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1609.104728][T21753] RBP: 00007f264ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1609.104746][T21753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.104764][T21753] R13: 00007f264efe6038 R14: 00007f264efe5fa0 R15: 00007ffe7b727aa8 [ 1609.104809][T21753] [ 1609.105227][T21753] memory: usage 3072kB, limit 3072kB, failcnt 333294 [ 1609.560391][T21753] memory+swap: usage 3228kB, limit 9007199254740988kB, failcnt 0 [ 1609.588853][T21753] kmem: usage 3024kB, limit 9007199254740988kB, failcnt 0 [ 1609.634468][T21753] Memory cgroup stats for /syz2: [ 1609.653970][T21753] cache 0 [ 1609.758734][T20573] Bluetooth: hci5: command 0x0406 tx timeout [ 1609.817522][T21753] rss 4096 [ 1609.827667][T21753] rss_huge 0 [ 1609.920212][T21753] shmem 0 [ 1609.930598][T21753] mapped_file 0 [ 1609.952128][T21753] dirty 0 [ 1609.955135][T21753] writeback 0 [ 1609.958451][T21753] workingset_refault_anon 146130 [ 1610.048759][T21753] workingset_refault_file 19359 [ 1610.062296][T21753] swap 159744 [ 1610.075114][T21753] swapcached 49152 [ 1610.093702][T21753] pgpgin 341952 [ 1610.097228][T21753] pgpgout 341940 [ 1610.118766][T21753] pgfault 752071 [ 1610.135270][T21753] pgmajfault 131560 [ 1610.158124][T21753] inactive_anon 49152 [ 1610.174309][T21753] active_anon 0 [ 1610.177839][T21753] inactive_file 0 [ 1610.218651][T21753] active_file 0 [ 1610.222134][T21753] unevictable 0 [ 1610.261351][T21753] hierarchical_memory_limit 3145728 [ 1610.266624][T21753] hierarchical_memsw_limit 9223372036854771712 [ 1610.336289][T21753] total_cache 0 [ 1610.356273][T21753] total_rss 4096 [ 1610.386019][T21753] total_rss_huge 0 [ 1610.407260][T21753] total_shmem 0 [ 1610.432199][T21753] total_mapped_file 0 [ 1610.436765][T21753] total_dirty 0 [ 1610.487893][T21753] total_writeback 0 [ 1610.517431][T21753] total_workingset_refault_anon 146130 [ 1610.539055][T21753] total_workingset_refault_file 19359 [ 1610.546652][T21753] total_swap 159744 [ 1610.563394][T21753] total_swapcached 49152 [ 1610.574438][T21753] total_pgpgin 341952 [ 1610.612636][T21753] total_pgpgout 341940 [ 1610.648114][T21753] total_pgfault 752071 [ 1610.691594][T21753] total_pgmajfault 131560 [ 1610.737878][T21753] total_inactive_anon 49152 [ 1610.764790][T21753] total_active_anon 0 [ 1610.792847][T21753] total_inactive_file 0 [ 1610.811280][T21753] total_active_file 0 [ 1610.849243][T21753] total_unevictable 0 [ 1610.911770][T21753] anon_cost 0 [ 1610.942306][T21753] file_cost 0 [ 1610.956434][T21753] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3929,pid=21752,uid=0 [ 1611.047547][T21753] Memory cgroup out of memory: Killed process 21752 (syz.2.3929) total-vm:104068kB, anon-rss:1116kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1611.542181][T21778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.886182][T21783] netlink: 290 bytes leftover after parsing attributes in process `syz.8.3936'. [ 1612.816669][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.823339][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.652606][T20573] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1614.663834][T20573] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1614.676389][T20573] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1614.739355][T20573] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1614.749744][T20573] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1615.990921][T17165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.638283][T21816] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2472098489 out of range (51000000..2150000000) [ 1616.808712][T20573] Bluetooth: hci8: command tx timeout [ 1616.992515][T17165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.076568][T21801] chnl_net:caif_netlink_parms(): no params data found [ 1617.392472][T17165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.604133][T21823] syz.7.3944: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1617.620054][T17165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.644148][T21823] CPU: 1 UID: 0 PID: 21823 Comm: syz.7.3944 Not tainted syzkaller #0 PREEMPT(full) [ 1617.644175][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1617.644186][T21823] Call Trace: [ 1617.644193][T21823] [ 1617.644200][T21823] dump_stack_lvl+0x16c/0x1f0 [ 1617.644228][T21823] warn_alloc+0x248/0x3a0 [ 1617.644248][T21823] ? __pfx_warn_alloc+0x10/0x10 [ 1617.644282][T21823] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1617.644308][T21823] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 1617.644338][T21823] ? __pfx___might_resched+0x10/0x10 [ 1617.644360][T21823] ? rcu_is_watching+0x12/0xc0 [ 1617.644379][T21823] ? trace_contention_end+0xdd/0x130 [ 1617.644406][T21823] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1617.644431][T21823] ? tomoyo_path_number_perm+0x295/0x580 [ 1617.644465][T21823] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1617.644491][T21823] ? __pfx___mutex_lock+0x10/0x10 [ 1617.644517][T21823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1617.644545][T21823] ? futex_wake+0x1ad/0x530 [ 1617.644577][T21823] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1617.644601][T21823] __vmalloc_node_noprof+0xad/0xf0 [ 1617.644627][T21823] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 1617.644655][T21823] dvb_dvr_do_ioctl+0x15d/0x290 [ 1617.644684][T21823] dvb_usercopy+0x167/0x340 [ 1617.644708][T21823] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1617.644735][T21823] ? __pfx_dvb_usercopy+0x10/0x10 [ 1617.644776][T21823] ? __fget_files+0x20e/0x3c0 [ 1617.644799][T21823] dvb_dvr_ioctl+0x29/0x40 [ 1617.644823][T21823] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1617.644848][T21823] __x64_sys_ioctl+0x18e/0x210 [ 1617.644877][T21823] do_syscall_64+0xcd/0xfa0 [ 1617.644901][T21823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.644919][T21823] RIP: 0033:0x7f6993d8f6c9 [ 1617.644936][T21823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1617.644954][T21823] RSP: 002b:00007f6994ca9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1617.644971][T21823] RAX: ffffffffffffffda RBX: 00007f6993fe6090 RCX: 00007f6993d8f6c9 [ 1617.644983][T21823] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000008 [ 1617.644997][T21823] RBP: 00007f6993e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1617.645008][T21823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.645018][T21823] R13: 00007f6993fe6128 R14: 00007f6993fe6090 R15: 00007ffd2164f9f8 [ 1617.645042][T21823] [ 1617.645049][T21823] Mem-Info: [ 1617.899344][T21823] active_anon:13076 inactive_anon:0 isolated_anon:0 [ 1617.899344][T21823] active_file:9715 inactive_file:49442 isolated_file:0 [ 1617.899344][T21823] unevictable:768 dirty:387 writeback:0 [ 1617.899344][T21823] slab_reclaimable:12585 slab_unreclaimable:109894 [ 1617.899344][T21823] mapped:43002 shmem:1399 pagetables:1547 [ 1617.899344][T21823] sec_pagetables:0 bounce:0 [ 1617.899344][T21823] kernel_misc_reclaimable:0 [ 1617.899344][T21823] free:1242866 free_pcp:17495 free_cma:0 [ 1617.945309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1617.970706][T21823] Node 0 active_anon:52304kB inactive_anon:0kB active_file:38860kB inactive_file:197632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172008kB dirty:1548kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13584kB pagetables:6052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1618.032767][T21823] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1618.128991][T21823] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1618.161993][T21823] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1618.171686][T21823] Node 0 DMA32 free:1059876kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52108kB inactive_anon:0kB active_file:38860kB inactive_file:197640kB unevictable:1536kB writepending:1620kB zspages:4kB present:3129332kB managed:2545080kB mlocked:0kB bounce:0kB free_pcp:51280kB local_pcp:27096kB free_cma:0kB [ 1618.230615][T21823] lowmem_reserve[]: 0 0 1 1 1 [ 1618.250498][T21823] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1618.283456][T21801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.303300][T21823] lowmem_reserve[]: 0 0 0 0 [ 1618.304132][T21801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.344039][T21801] bridge_slave_0: entered allmulticast mode [ 1618.354094][T21823] 0 [ 1618.363732][T21823] Node 1 Normal free:3898876kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16276kB local_pcp:7260kB free_cma:0kB [ 1618.368714][T21801] bridge_slave_0: entered promiscuous mode [ 1618.396310][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.408664][T21823] lowmem_reserve[]: 0 0 0 0 0 [ 1618.417800][T21823] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1618.433778][T21823] Node 0 DMA32: 1604*4kB (UME) 716*8kB (UME) 657*16kB (UME) 665*32kB (UME) 682*64kB (UME) 429*128kB (UME) 218*256kB (UME) 100*512kB (UME) 48*1024kB (UME) 10*2048kB (UME) 181*4096kB (M) = 1060512kB [ 1618.499982][T21823] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1618.518496][T21823] Node 1 Normal: 195*4kB (UME) 64*8kB (UME) 37*16kB (UME) 223*32kB (UME) 111*64kB (UME) 38*128kB (UME) 12*256kB (UME) 6*512kB (UME) 1*1024kB (E) 2*2048kB (ME) 944*4096kB (UM) = 3898876kB [ 1618.544589][T21801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.553333][T21801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.565417][T21823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1618.577222][T21801] bridge_slave_1: entered allmulticast mode [ 1618.590365][T21801] bridge_slave_1: entered promiscuous mode [ 1618.599699][T21823] Node 0 hugepages_total=5 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 1618.619444][T21823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1618.640666][T21823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1618.650556][T21823] 60530 total pagecache pages [ 1618.655456][T21823] 13 pages in swap cache [ 1618.662522][T21823] Free swap = 124940kB [ 1618.672914][T21823] Total swap = 124996kB [ 1618.682199][T21823] 2097051 pages RAM [ 1618.707744][T21823] 0 pages HighMem/MovableOnly [ 1618.724217][T21823] 428691 pages reserved [ 1618.730727][T21823] 0 pages cma reserved [ 1618.852322][T21801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.879673][T20573] Bluetooth: hci8: command tx timeout [ 1618.914847][T21801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.929167][T17165] bridge_slave_1: left allmulticast mode [ 1618.935310][T17165] bridge_slave_1: left promiscuous mode [ 1618.943545][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.955815][T17165] bridge_slave_0: left allmulticast mode [ 1618.966168][T17165] bridge_slave_0: left promiscuous mode [ 1618.973652][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.992286][T17165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1620.046462][T17165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1620.076759][T17165] bond0 (unregistering): Released all slaves [ 1620.470999][T21801] team0: Port device team_slave_0 added [ 1620.485035][T21801] team0: Port device team_slave_1 added [ 1620.796070][T21854] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1620.915473][T21801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.922830][T21801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.949024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1620.959276][T20573] Bluetooth: hci8: command tx timeout [ 1620.991125][T21801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.052150][T21801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.098657][T21801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.189096][T21801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1621.475516][T21801] hsr_slave_0: entered promiscuous mode [ 1621.496054][T21801] hsr_slave_1: entered promiscuous mode [ 1621.503826][T21801] debugfs: 'hsr0' already exists in 'hsr' [ 1621.511085][T21801] Cannot create hsr debugfs directory [ 1622.031938][T21876] Invalid ELF header magic: != ELF [ 1623.049840][T20573] Bluetooth: hci8: command tx timeout [ 1624.479597][T21905] netlink: 342 bytes leftover after parsing attributes in process `syz.8.3957'. [ 1624.609999][T21801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1624.705677][T21801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1624.914499][T21801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1625.020414][T21801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1625.281427][T21875] Process accounting paused [ 1625.667802][T21801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.968075][T21801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.239222][ T31] INFO: task syz.0.2426:15391 blocked for more than 143 seconds. [ 1626.269511][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1626.293721][ T31] Blocked by coredump. [ 1626.334698][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1626.354276][ T31] task:syz.0.2426 state:D stack:27016 pid:15391 tgid:15391 ppid:12209 task_flags:0x40044c flags:0x00080003 [ 1626.379646][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.386982][T12346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.400069][ T31] Call Trace: [ 1626.403416][ T31] [ 1626.406395][ T31] __schedule+0x1190/0x5de0 [ 1626.412387][ T31] ? check_path.constprop.0+0x24/0x50 [ 1626.417845][ T31] ? __lock_acquire+0x622/0x1c90 [ 1626.427402][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.434601][T12346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.450278][ T31] ? __pfx___schedule+0x10/0x10 [ 1626.455369][ T31] ? find_held_lock+0x2b/0x80 [ 1626.483568][ T31] ? schedule+0x2d7/0x3a0 [ 1626.507124][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1626.520002][ T31] schedule+0xe7/0x3a0 [ 1626.524161][ T31] schedule_preempt_disabled+0x13/0x30 [ 1626.565051][ T31] __mutex_lock+0x818/0x1060 [ 1626.608058][ T31] ? __lock_acquire+0x622/0x1c90 [ 1626.658565][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1626.663970][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1626.712278][T21801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1626.728217][ T31] ? net_generic+0xea/0x2a0 [ 1626.738652][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1626.744026][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1626.766931][ T31] nfsd_umount+0x48/0xe0 [ 1626.779707][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1626.795217][ T31] deactivate_super+0xde/0x100 [ 1626.810763][ T31] cleanup_mnt+0x225/0x450 [ 1626.822819][ T31] task_work_run+0x150/0x240 [ 1626.827518][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1626.888831][ T31] do_exit+0x86f/0x2bf0 [ 1626.893098][ T31] ? __pfx_do_exit+0x10/0x10 [ 1626.928916][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1626.934047][ T31] ? find_held_lock+0x2b/0x80 [ 1626.988865][ T31] do_group_exit+0xd3/0x2a0 [ 1626.999230][ T31] get_signal+0x2671/0x26d0 [ 1627.024458][ T31] ? css_rstat_updated+0x1c2/0x510 [ 1627.069040][ T31] ? __pfx_get_signal+0x10/0x10 [ 1627.079217][ T31] ? do_futex+0x122/0x350 [ 1627.083635][ T31] ? __pfx_do_futex+0x10/0x10 [ 1627.127462][ T31] arch_do_signal_or_restart+0x8f/0x790 [ 1627.150106][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1627.156389][ T31] exit_to_user_mode_loop+0x85/0x130 [ 1627.191638][ T31] do_syscall_64+0x426/0xfa0 [ 1627.196413][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.218746][ T31] RIP: 0033:0x7fcd1158f6c9 [ 1627.233390][ T31] RSP: 002b:00007fcd1235a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1627.259353][ T31] RAX: fffffffffffffe00 RBX: 00007fcd117e5fa8 RCX: 00007fcd1158f6c9 [ 1627.267415][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcd117e5fa8 [ 1627.318691][ T31] RBP: 00007fcd117e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.326793][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1627.372655][ T31] R13: 00007fcd117e6038 R14: 00007ffc0a59fd40 R15: 00007ffc0a59fe28 [ 1627.388661][ T31] [ 1627.408762][ T31] [ 1627.408762][ T31] Showing all locks held in the system: [ 1627.435628][ T31] 3 locks held by kworker/0:0/9: [ 1627.563025][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1627.588734][ T31] #1: ffffc900000e7d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1627.638713][ T31] #2: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1627.658882][ T31] 1 lock held by khungtaskd/31: [ 1627.663899][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1627.692509][ T31] 2 locks held by getty/5590: [ 1627.697253][ T31] #0: ffff88814cee70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1627.761228][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1627.788719][ T31] 2 locks held by syz.0.2426/15391: [ 1627.793977][ T31] #0: ffff88807a5180e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1627.818573][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1627.828283][ T31] 6 locks held by kworker/u8:5/17165: [ 1627.855159][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1627.879010][ T31] #1: ffffc9000a9d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1627.896697][ T31] #2: ffffffff900d4a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 1627.918639][ T31] #3: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 1627.938630][ T31] #4: ffff888059470788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x2b5/0x1120 [ 1627.968600][ T31] #5: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1628.001955][ T31] 3 locks held by kworker/u8:7/17242: [ 1628.011514][ T31] #0: ffff8880306ac148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1628.022848][ T31] #1: ffffc9000b697d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1628.035457][ T31] #2: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 1628.045267][ T31] 2 locks held by syz.5.3417/19572: [ 1628.050792][ T31] #0: ffffffff9018ec50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1628.059573][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1628.069792][ T31] 2 locks held by syz-executor/19749: [ 1628.075204][ T31] #0: ffff8880681ac0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1628.088307][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1628.099946][ T31] 2 locks held by syz-executor/20572: [ 1628.105384][ T31] #0: ffff888052ea20e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1628.131124][ T31] #1: ffffffff8e7ed248 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1628.141292][ T31] 4 locks held by syz-executor/21421: [ 1628.146709][ T31] #0: ffff888060208dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1628.157161][ T31] #1: ffff8880602080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1628.188999][ T31] #2: ffffffff9035edc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1628.208758][ T31] #3: ffff88804ef57b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1628.228750][ T31] 3 locks held by syz-executor/21801: [ 1628.234367][ T31] #0: ffff8880764a0dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1628.258595][ T31] #1: ffff8880764a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1628.268399][ T31] #2: ffffffff9035edc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1628.308687][ T31] 2 locks held by syz.8.3960/21926: [ 1628.316597][ T31] #0: ffffffff900d4a50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 1628.338658][ T31] #1: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 1628.348006][ T31] 2 locks held by syz.4.3961/21943: [ 1628.367947][ T31] #0: ffffffff900d4a50 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 1628.388628][ T31] #1: ffffffff900eae88 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230 [ 1628.398227][ T31] 1 lock held by dhcpcd-run-hook/21965: [ 1628.418781][ T31] [ 1628.421184][ T31] ============================================= [ 1628.421184][ T31] [ 1628.436041][ T31] NMI backtrace for cpu 0 [ 1628.436067][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1628.436100][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1628.436118][ T31] Call Trace: [ 1628.436128][ T31] [ 1628.436140][ T31] dump_stack_lvl+0x116/0x1f0 [ 1628.436182][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1628.436225][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1628.436261][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1628.436304][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1628.436354][ T31] watchdog+0xf3f/0x1170 [ 1628.436399][ T31] ? rcu_is_watching+0x12/0xc0 [ 1628.436432][ T31] ? __pfx_watchdog+0x10/0x10 [ 1628.436458][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1628.436497][ T31] ? __kthread_parkme+0x19e/0x250 [ 1628.436537][ T31] ? __pfx_watchdog+0x10/0x10 [ 1628.436565][ T31] kthread+0x3c5/0x780 [ 1628.436617][ T31] ? __pfx_kthread+0x10/0x10 [ 1628.436664][ T31] ? rcu_is_watching+0x12/0xc0 [ 1628.436695][ T31] ? __pfx_kthread+0x10/0x10 [ 1628.436736][ T31] ret_from_fork+0x675/0x7d0 [ 1628.436777][ T31] ? __pfx_kthread+0x10/0x10 [ 1628.436821][ T31] ret_from_fork_asm+0x1a/0x30 [ 1628.436883][ T31] [ 1628.436896][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1628.571804][ C1] NMI backtrace for cpu 1 [ 1628.571825][ C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 1628.571861][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1628.571877][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1628.571933][ C1] RIP: 0010:lock_is_held_type+0x6f/0x150 [ 1628.571965][ C1] Code: 85 d2 0f 85 b6 00 00 00 48 89 fd 41 89 f6 9c 8f 04 24 fa 48 c7 c7 03 85 b1 8d 4d 8d ac 24 30 0b 00 00 45 31 ff e8 01 15 00 00 <65> ff 05 72 eb 43 08 41 8b 84 24 28 0b 00 00 85 c0 7f 17 e9 92 00 [ 1628.571986][ C1] RSP: 0018:ffffc90000bc78d0 EFLAGS: 00000092 [ 1628.572004][ C1] RAX: 0000000000000001 RBX: ffffffff93a35ec0 RCX: 0000000000000001 [ 1628.572020][ C1] RDX: 0000000000000000 RSI: ffffffff8db18503 RDI: ffffffff8bf075c0 [ 1628.572035][ C1] RBP: ffff8880b8542ec0 R08: ffff888060a823c0 R09: 0000000000000001 [ 1628.572050][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b770000 [ 1628.572064][ C1] R13: ffff88801b770b30 R14: 00000000ffffffff R15: 0000000000000000 [ 1628.572079][ C1] FS: 0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 1628.572103][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1628.572119][ C1] CR2: 00007f6138ddda10 CR3: 000000006184e000 CR4: 00000000003526f0 [ 1628.572135][ C1] Call Trace: [ 1628.572143][ C1] [ 1628.572156][ C1] ___slab_alloc+0x92e/0x1a50 [ 1628.572192][ C1] ? __alloc_skb+0x2b2/0x380 [ 1628.572235][ C1] ? __alloc_skb+0x2b2/0x380 [ 1628.572268][ C1] ? __slab_alloc.constprop.0+0x63/0x110 [ 1628.572300][ C1] __slab_alloc.constprop.0+0x63/0x110 [ 1628.572337][ C1] kmem_cache_alloc_node_noprof+0x43c/0x770 [ 1628.572360][ C1] ? __alloc_skb+0x2b2/0x380 [ 1628.572397][ C1] ? __alloc_skb+0x2b2/0x380 [ 1628.572428][ C1] __alloc_skb+0x2b2/0x380 [ 1628.572460][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1628.572494][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1628.572521][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1628.572550][ C1] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 1628.572591][ C1] process_one_work+0x9cf/0x1b70 [ 1628.572630][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1628.572665][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1628.572702][ C1] ? assign_work+0x1a0/0x250 [ 1628.572735][ C1] worker_thread+0x6c8/0xf10 [ 1628.572762][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1628.572796][ C1] kthread+0x3c5/0x780 [ 1628.572828][ C1] ? __pfx_kthread+0x10/0x10 [ 1628.572867][ C1] ? rcu_is_watching+0x12/0xc0 [ 1628.572892][ C1] ? __pfx_kthread+0x10/0x10 [ 1628.572923][ C1] ret_from_fork+0x675/0x7d0 [ 1628.572955][ C1] ? __pfx_kthread+0x10/0x10 [ 1628.572987][ C1] ret_from_fork_asm+0x1a/0x30 [ 1628.573025][ C1] [ 1629.683604][T17165] hsr_slave_0: left promiscuous mode [ 1629.692575][T17165] hsr_slave_1: left promiscuous mode [ 1629.704359][T17165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.711964][T17165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.721049][T17165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.729373][T17165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.746194][T17165] veth1_macvtap: left promiscuous mode [ 1629.753198][T17165] veth0_macvtap: left promiscuous mode [ 1630.176932][T17165] team0 (unregistering): Port device team_slave_1 removed [ 1630.221286][T17165] team0 (unregistering): Port device team_slave_0 removed [ 1631.631366][T17165] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.727216][T17165] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.813045][T17165] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.925221][T17165] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.144409][T17165] bridge_slave_1: left allmulticast mode [ 1632.154379][T17165] bridge_slave_1: left promiscuous mode [ 1632.164835][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.183581][T17165] bridge_slave_0: left allmulticast mode [ 1632.190635][T17165] bridge_slave_0: left promiscuous mode [ 1632.196461][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.222442][T17165] bridge_slave_1: left allmulticast mode [ 1632.228334][T17165] bridge_slave_1: left promiscuous mode [ 1632.237402][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.255763][T17165] bridge_slave_0: left allmulticast mode [ 1632.262294][T17165] bridge_slave_0: left promiscuous mode [ 1632.269188][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.702930][T17165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1632.714156][T17165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1632.728248][T17165] bond0 (unregistering): Released all slaves [ 1633.076045][T17165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.086746][T17165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.097802][T17165] bond0 (unregistering): Released all slaves [ 1633.745896][T17165] hsr_slave_0: left promiscuous mode [ 1633.753645][T17165] hsr_slave_1: left promiscuous mode [ 1633.765856][T17165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1633.776255][T17165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1633.796283][T17165] hsr_slave_0: left promiscuous mode [ 1633.803485][T17165] hsr_slave_1: left promiscuous mode [ 1633.810204][T17165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1633.817633][T17165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1633.826431][T17165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1633.834255][T17165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1633.892404][T17165] veth1_macvtap: left promiscuous mode [ 1633.898027][T17165] veth0_macvtap: left promiscuous mode [ 1633.904742][T17165] veth1_vlan: left promiscuous mode [ 1633.910913][T17165] veth0_vlan: left promiscuous mode [ 1634.317317][T17165] team0 (unregistering): Port device team_slave_1 removed [ 1634.368057][T17165] team0 (unregistering): Port device team_slave_0 removed [ 1635.183981][T17165] team0 (unregistering): Port device team_slave_1 removed [ 1635.240294][T17165] team0 (unregistering): Port device team_slave_0 removed