last executing test programs: 10.22161032s ago: executing program 2 (id=704): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x0, 0x3, 0x5) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, 0x0, 0x7, 0x20020000) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) ioctl$auto_TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=0x79b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8, 0x5d7, 0xd) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/uvcvideo/parameters/nodrop\x00', 0x80400, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x1f) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 10.054424466s ago: executing program 3 (id=705): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x80200, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 9.837214153s ago: executing program 3 (id=706): socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000002c0)="7d4d6bac0100120f61d46fa8bde75da51a623287db278095f41e2b4d632ace21614c750afbd0191b8c164503877b7cd66c") statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000900)=""/4096, 0x1000) socket(0xa, 0x3, 0x84) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/locals\x00', 0x40, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20500, 0x0) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000140), 0xa0100, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 9.056311533s ago: executing program 1 (id=708): r0 = socket(0x10, 0x2, 0x4) r1 = socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r2, r2, &(0x7f0000000040)=0x8, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'nicvf0\x00'}) shmctl$auto_SHM_UNLOCK(0x1, 0xc, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket(0xa, 0x2, 0x88) bpf$auto(0x0, 0x0, 0xf) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x8004) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x445f, 0x15f4da0a, 0x1, 0x81, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.90471293s ago: executing program 3 (id=710): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x40, r2, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0x9, 0x5, 0x0, 0x1, [@generic="5647f82231"]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x40}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 8.482951473s ago: executing program 1 (id=711): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae67, 0x38) 8.368405744s ago: executing program 2 (id=712): mmap$auto(0xfffffffffffff223, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) socketpair$auto(0x0, 0x9, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr4\x00', 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48844}, 0x40015) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000280)={0x5, 0x2, 0x9, @inferred, &(0x7f0000000240)={@raw=0x1, 0xd, 0x10, 0x3, "9d12c53bede1937fc49ad56e74f8a561c1ec50f80bc1b9c70e6730b70eed17c1a830c2e9ab0bb5fea2cd9e45"}, "138d200a8776e1889cf9d43a24cadf2242564cbe04f16c3ea330bb0d6db3a4160dd6f1827293558eee71ed842cf6ef06abc7"}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.375047445s ago: executing program 0 (id=714): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c02, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x52, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xbf, 0x1a, "175e7adb18753b5e532bd1ce33a072a5f3cf31a4fd9272b3fe5f40b3402c8cb52b57988934c2bdc46618e1ec0319f730815ffde6a49ced5c401519429d3c803997db32e04ad87ed9d84418c516eb7135e4f80327a2c2b708bd2a05f343180897c5a9d3f4d54d3ee5cf89f964bd22e7409076a00d577eb12cb28ff58316d4ed6c79977136c02fac793a50a710ef4a09e3eabab8623c21b2d0e674f36fb19e9fa15f800ea6a0a5e5ad2c266c4e6afb7b435c60389c19dbffa2f00000"}, @NL80211_ATTR_PREV_BSSID={0x9b, 0x4f, "cd170e450e00c56940024a66c8c4588cc0475ee98218e1db298aee7a9767e127ce117b55dfed41d4e7e136901f9da82824081750d0eac87b528a68ea8563030a192d02064275d4bf856765dcbfc6bdc9712b3c5cec15d6635481a55c9a7c9d7c58d885763ffc669514dbef8ec5d0ef71b8dcab6d0cc4f3efaacb2b3261cc60fff89333c60725d51784814413300d787009ac151e7e8fbc"}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x6}, @NL80211_ATTR_S1G_CAPABILITY={0xda, 0x128, "994fb0344891362f55a2420bac9cfbf42d21041166405b54203000360b7e829b30c48f80fa5cd08f3921bee40938236b3b28695d8e2ba31416d52a3287a49bec119176346f24236b30747a79a3312bd9e41bccd173c07c91aa0f8f553f72999f32c805baf2863d2e2bcbdd9a32aca7b761060f83e2dd6afe6a2df87a09db9030ef13bd266e0cd327c5ff2595fa407190b1136f006e06bd0b4dd56a3d633094ccec02a15f08a175cbdb986a4605d2ef0a55264deb218d8ee07fec200854c3c8049973e063b4c63fc6566163680d10b53182f79d1a8229"}]}, 0x254}, 0x1, 0x0, 0x0, 0x44880}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0xf) r4 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r3, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r4, 0x98}, 0xff) write$auto(r1, &(0x7f00000003c0)='nl80211\x00', 0x13c) r5 = socket(0x2c, 0x3, 0x0) bind$auto(r5, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x1c}, 0x6b) 7.191122767s ago: executing program 0 (id=715): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x880c1, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x9, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) mknod$auto(0x0, 0x1001, 0x9) close_range$auto(0x2, 0x8, 0x0) r1 = timerfd_create$auto(0x8, 0x800) read$auto_ppp_device_fops_ppp_generic(r1, &(0x7f00000000c0)=""/94, 0x5e) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec3\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x0) 7.086267425s ago: executing program 1 (id=716): mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0) mincore$auto(0x1000, 0x8003, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb2, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000b, 0x5, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000001c0)="e206ac8d920024215f82d56a1a3e3096640cd174124bc3fc2dfe15e8978ac0e07b9ec43c906320efb742196b6b38fe797302bd2a48dee2ffeaa391a2aa884d50643066f1bf10ba726178def672be77df8ebe71aebf936d79bc5bb95cd3b1f45c455236003bd4fa9f323aa9aa86bb4d12a58555e6a7b519ff20c9ec48fe29c6eb7f0aecaf536abdf21acc3678db75498ee6ef7b7d211632f7e723413c090e95143b5ec44899fecf931a78d2431ea8b03d7898c91b19c4c1e067ded34a918d2ac6afd6f4", 0x5}, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 6.910399926s ago: executing program 2 (id=717): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(0x0, 0x1e7d43, 0xa6) socket(0xa, 0x2, 0x88) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b4a, 0x8, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r2, r1, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) 6.793099473s ago: executing program 2 (id=718): mmap$auto(0xfffffffffffff223, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socketpair$auto(0x0, 0x9, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr4\x00', 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48844}, 0x40015) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000280)={0x5, 0x2, 0x9, @inferred, &(0x7f0000000240)={@raw=0x1, 0xd, 0x10, 0x3, "9d12c53bede1937fc49ad56e74f8a561c1ec50f80bc1b9c70e6730b70eed17c1a830c2e9ab0bb5fea2cd9e45"}, "138d200a8776e1889cf9d43a24cadf2242564cbe04f16c3ea330bb0d6db3a4160dd6f1827293558eee71ed842cf6ef06abc7"}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.120020044s ago: executing program 0 (id=719): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0xffffffffffffffff, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, 0x0, 0xda) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) mlockall$auto(0x7) personality$auto(0xfffff032) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, 0x0, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) 6.067518123s ago: executing program 1 (id=720): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x40900, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x8000fff5) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, r2, 0x0, 0x80000001, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0b45545, 0xffffffffffffffff) 5.591384344s ago: executing program 3 (id=721): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) readv$auto(r0, 0x0, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x63, 0x0, 0xbde, 0x7fffffffefff, 0xfffffffffffffffe, 0x9702, 0x0, 0x50b301a, 0x4, 0x5f, 0x0, 0x8}) r4 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x2000, 0x0) fcntl$auto_F_DUPFD(r4, 0x0, r2) set_tid_address$auto(0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 4.957724085s ago: executing program 1 (id=722): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptycd\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/sub0/xrun_injection\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) socket(0x2, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty29\x00', 0x800, 0x0) ioctl$auto(r0, 0x560a, r0) 4.843790437s ago: executing program 2 (id=723): set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x2e2102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0xda9) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008014, r2, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x55) socket(0x10, 0x2, 0x14) 4.787052095s ago: executing program 0 (id=724): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x80000) r1 = getpid() pwrite64$auto(0xc8, 0x0, 0xfdef, 0x500000000000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x42841, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) ioctl$auto(r0, 0x40246f4c, 0x38) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 4.631561017s ago: executing program 1 (id=725): mmap$auto(0xfffffffffffff223, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socketpair$auto(0x0, 0x9, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr4\x00', 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48844}, 0x40015) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000280)={0x5, 0x2, 0x9, @inferred, &(0x7f0000000240)={@raw=0x1, 0xd, 0x10, 0x3, "9d12c53bede1937fc49ad56e74f8a561c1ec50f80bc1b9c70e6730b70eed17c1a830c2e9ab0bb5fea2cd9e45"}, "138d200a8776e1889cf9d43a24cadf2242564cbe04f16c3ea330bb0d6db3a4160dd6f1827293558eee71ed842cf6ef06abc7"}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.300609001s ago: executing program 0 (id=726): mmap$auto(0xfffffffffffff223, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) socketpair$auto(0x0, 0x9, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr4\x00', 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48844}, 0x40015) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x7) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000280)={0x5, 0x2, 0x9, @inferred, &(0x7f0000000240)={@raw=0x1, 0xd, 0x10, 0x3, "9d12c53bede1937fc49ad56e74f8a561c1ec50f80bc1b9c70e6730b70eed17c1a830c2e9ab0bb5fea2cd9e45"}, "138d200a8776e1889cf9d43a24cadf2242564cbe04f16c3ea330bb0d6db3a4160dd6f1827293558eee71ed842cf6ef06abc7"}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.072099035s ago: executing program 3 (id=727): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) sendmsg$auto_TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x20000048) semget$auto(0x5, 0x0, 0x49c4) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, 0x0) r1 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r1, 0x0) socket(0x11, 0x80003, 0x300) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2.90650516s ago: executing program 3 (id=728): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/midiC2D0\x00', 0x40041, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0) ioctl$auto_XFS_IOC_FREESP64(r2, 0x40305825, &(0x7f0000000300)={0x3, 0x0, 0x8, 0x2, 0x101, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0x6, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 927.651358ms ago: executing program 2 (id=729): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy2\x00', 0x100, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x141e83, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(r0, 0x0, 0x73) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=730): write$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffffff, 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x10003c, 0x1, 0x1ffde, 0x7, 0x3, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x9, 0x10005, 0x80, 0x4, 0xffefffff, 0x7, 0x2000, 0x203, 0x0, 0x20e9d17d, 0x400300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x20000000000007, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff5b, 0xc72, 0x0, 0x9, 0x0, 0x66, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8c]}, 0x2, 0xd) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r2, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) mmap$auto(0x800000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): ilslab, interval 1, probability 0, space 0, times 0 [ 111.691077][ T6109] FAULT_INJECTION: forcing a failure. [ 111.691077][ T6109] name failslab, interval 1, probability 0, space 0, times 0 [ 111.716560][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT(full) [ 111.716606][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.716625][ T6109] Call Trace: [ 111.716635][ T6109] [ 111.716648][ T6109] dump_stack_lvl+0x16c/0x1f0 [ 111.716694][ T6109] should_fail_ex+0x512/0x640 [ 111.716742][ T6109] ? __kmalloc_noprof+0xca/0x880 [ 111.716800][ T6109] should_failslab+0xc2/0x120 [ 111.716845][ T6109] __kmalloc_noprof+0xdd/0x880 [ 111.716898][ T6109] ? lsm_blob_alloc+0x68/0x90 [ 111.716945][ T6109] ? lsm_blob_alloc+0x68/0x90 [ 111.716982][ T6109] lsm_blob_alloc+0x68/0x90 [ 111.717020][ T6109] security_sk_alloc+0x30/0x270 [ 111.717070][ T6109] sk_prot_alloc+0xfb/0x2a0 [ 111.717113][ T6109] sk_alloc+0x36/0xc20 [ 111.717164][ T6109] inet6_create+0x381/0x12b0 [ 111.717207][ T6109] ? inet6_create+0x7f/0x12b0 [ 111.717249][ T6109] __sock_create+0x338/0x8d0 [ 111.717298][ T6109] __sys_socket+0x14d/0x260 [ 111.717342][ T6109] ? __pfx___sys_socket+0x10/0x10 [ 111.717390][ T6109] ? xfd_validate_state+0x61/0x180 [ 111.717434][ T6109] ? __pfx_ksys_write+0x10/0x10 [ 111.717484][ T6109] __x64_sys_socket+0x72/0xb0 [ 111.717523][ T6109] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.717559][ T6109] do_syscall_64+0xcd/0xfa0 [ 111.717599][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.717629][ T6109] RIP: 0033:0x7f5af7b8f6c9 [ 111.717653][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.717682][ T6109] RSP: 002b:00007f5af8a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.717713][ T6109] RAX: ffffffffffffffda RBX: 00007f5af7de5fa0 RCX: 00007f5af7b8f6c9 [ 111.717734][ T6109] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 111.717752][ T6109] RBP: 00007f5af7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.717770][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.717788][ T6109] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 111.717828][ T6109] [ 111.752308][ T6107] CPU: 1 UID: 0 PID: 6107 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(full) [ 111.752356][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.752378][ T6107] Call Trace: [ 111.752390][ T6107] [ 111.752428][ T6107] dump_stack_lvl+0x16c/0x1f0 [ 111.752478][ T6107] should_fail_ex+0x512/0x640 [ 111.752532][ T6107] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 111.752574][ T6107] should_failslab+0xc2/0x120 [ 111.752623][ T6107] kmem_cache_alloc_noprof+0x75/0x6e0 [ 111.752661][ T6107] ? sk_prot_alloc+0x60/0x2a0 [ 111.752721][ T6107] ? sk_prot_alloc+0x60/0x2a0 [ 111.752761][ T6107] sk_prot_alloc+0x60/0x2a0 [ 111.752808][ T6107] sk_alloc+0x36/0xc20 [ 111.752868][ T6107] kcm_create+0xfc/0x690 [ 111.752905][ T6107] __sock_create+0x338/0x8d0 [ 111.752961][ T6107] __sys_socket+0x14d/0x260 [ 111.753007][ T6107] ? __fget_files+0x20e/0x3c0 [ 111.753044][ T6107] ? __pfx___sys_socket+0x10/0x10 [ 111.753107][ T6107] __x64_sys_socket+0x72/0xb0 [ 111.753154][ T6107] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.753196][ T6107] do_syscall_64+0xcd/0xfa0 [ 111.753242][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.753279][ T6107] RIP: 0033:0x7f9af4d8f6c9 [ 111.753307][ T6107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.753342][ T6107] RSP: 002b:00007f9af5bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 111.753377][ T6107] RAX: ffffffffffffffda RBX: 00007f9af4fe5fa0 RCX: 00007f9af4d8f6c9 [ 111.753400][ T6107] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 111.753423][ T6107] RBP: 00007f9af4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.753445][ T6107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.753465][ T6107] R13: 00007f9af4fe6038 R14: 00007f9af4fe5fa0 R15: 00007ffea283a298 [ 111.753513][ T6107] [ 116.252514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.472561][ T6201] Zero length message leads to an empty skb [ 116.762169][ T6210] FAULT_INJECTION: forcing a failure. [ 116.762169][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 116.803303][ T6210] CPU: 0 UID: 0 PID: 6210 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT(full) [ 116.803347][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.803365][ T6210] Call Trace: [ 116.803375][ T6210] [ 116.803387][ T6210] dump_stack_lvl+0x16c/0x1f0 [ 116.803431][ T6210] should_fail_ex+0x512/0x640 [ 116.803478][ T6210] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 116.803542][ T6210] should_failslab+0xc2/0x120 [ 116.803586][ T6210] __kvmalloc_node_noprof+0x141/0x9c0 [ 116.803629][ T6210] ? io_uring_setup+0x3ad/0x20e0 [ 116.803675][ T6210] ? io_uring_setup+0x3ad/0x20e0 [ 116.803711][ T6210] io_uring_setup+0x3ad/0x20e0 [ 116.803753][ T6210] ? __pfx_io_uring_setup+0x10/0x10 [ 116.803789][ T6210] ? do_futex+0x122/0x350 [ 116.803834][ T6210] ? __pfx_do_futex+0x10/0x10 [ 116.803900][ T6210] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 116.803948][ T6210] __x64_sys_io_uring_setup+0xc2/0x170 [ 116.804003][ T6210] do_syscall_64+0xcd/0xfa0 [ 116.804045][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.804076][ T6210] RIP: 0033:0x7fbda498f6c9 [ 116.804101][ T6210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.804131][ T6210] RSP: 002b:00007fbda5850038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 116.804163][ T6210] RAX: ffffffffffffffda RBX: 00007fbda4be5fa0 RCX: 00007fbda498f6c9 [ 116.804184][ T6210] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 116.804204][ T6210] RBP: 00007fbda4a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.804223][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.804242][ T6210] R13: 00007fbda4be6038 R14: 00007fbda4be5fa0 R15: 00007ffe072d33b8 [ 116.804287][ T6210] [ 119.713261][ T6272] FAULT_INJECTION: forcing a failure. [ 119.713261][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 119.792135][ T6272] CPU: 1 UID: 0 PID: 6272 Comm: syz.3.119 Not tainted syzkaller #0 PREEMPT(full) [ 119.792178][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.792195][ T6272] Call Trace: [ 119.792206][ T6272] [ 119.792219][ T6272] dump_stack_lvl+0x16c/0x1f0 [ 119.792262][ T6272] should_fail_ex+0x512/0x640 [ 119.792312][ T6272] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 119.792351][ T6272] should_failslab+0xc2/0x120 [ 119.792397][ T6272] kmem_cache_alloc_noprof+0x75/0x6e0 [ 119.792429][ T6272] ? copy_fs_struct+0x49/0x340 [ 119.792480][ T6272] ? copy_fs_struct+0x49/0x340 [ 119.792526][ T6272] copy_fs_struct+0x49/0x340 [ 119.792573][ T6272] ksys_unshare+0x356/0xa40 [ 119.792623][ T6272] ? __pfx_ksys_unshare+0x10/0x10 [ 119.792665][ T6272] ? ksys_write+0x1ac/0x250 [ 119.792712][ T6272] __x64_sys_unshare+0x31/0x40 [ 119.792752][ T6272] do_syscall_64+0xcd/0xfa0 [ 119.792792][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.792823][ T6272] RIP: 0033:0x7f5af7b8f6c9 [ 119.792849][ T6272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.792881][ T6272] RSP: 002b:00007f5af8a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.792912][ T6272] RAX: ffffffffffffffda RBX: 00007f5af7de5fa0 RCX: 00007f5af7b8f6c9 [ 119.792934][ T6272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 119.792961][ T6272] RBP: 00007f5af7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.792981][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.793000][ T6272] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 119.793044][ T6272] [ 120.402998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.502497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.515866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 120.525465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.534383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.668573][ T6292] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.812317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 120.821550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 121.161789][ T6299] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 121.521190][ T6305] aoe: could not set interface list: too many interfaces [ 127.371600][ T6413] kAFS: No cell specified [ 127.657542][ T6422] random: crng reseeded on system resumption [ 129.342078][ T6456] FAULT_INJECTION: forcing a failure. [ 129.342078][ T6456] name failslab, interval 1, probability 0, space 0, times 0 [ 129.365006][ T6456] CPU: 0 UID: 0 PID: 6456 Comm: syz.3.177 Not tainted syzkaller #0 PREEMPT(full) [ 129.365050][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.365068][ T6456] Call Trace: [ 129.365078][ T6456] [ 129.365090][ T6456] dump_stack_lvl+0x16c/0x1f0 [ 129.365134][ T6456] should_fail_ex+0x512/0x640 [ 129.365182][ T6456] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 129.365229][ T6456] should_failslab+0xc2/0x120 [ 129.365271][ T6456] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 129.365312][ T6456] ? snd_timer_instance_new+0x65/0x2e0 [ 129.365359][ T6456] ? kstrdup+0x53/0x100 [ 129.365390][ T6456] kstrdup+0x53/0x100 [ 129.365424][ T6456] snd_timer_instance_new+0x65/0x2e0 [ 129.365465][ T6456] __snd_timer_user_ioctl.isra.0+0x1522/0x2520 [ 129.365517][ T6456] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 129.365566][ T6456] ? rcu_is_watching+0x12/0xc0 [ 129.365599][ T6456] ? trace_contention_end+0xdd/0x130 [ 129.365646][ T6456] ? __mutex_lock+0x1c5/0x1060 [ 129.365697][ T6456] ? __pfx___mutex_lock+0x10/0x10 [ 129.365740][ T6456] ? find_held_lock+0x2b/0x80 [ 129.365793][ T6456] snd_timer_user_ioctl+0x76/0xd0 [ 129.365844][ T6456] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 129.365901][ T6456] __x64_sys_ioctl+0x18e/0x210 [ 129.365951][ T6456] do_syscall_64+0xcd/0xfa0 [ 129.365990][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.366021][ T6456] RIP: 0033:0x7f5af7b8f6c9 [ 129.366045][ T6456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.366075][ T6456] RSP: 002b:00007f5af8a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.366120][ T6456] RAX: ffffffffffffffda RBX: 00007f5af7de5fa0 RCX: 00007f5af7b8f6c9 [ 129.366140][ T6456] RDX: 0000200000000080 RSI: 0000000040345410 RDI: 0000000000000004 [ 129.366160][ T6456] RBP: 00007f5af7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 129.366179][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.366196][ T6456] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 129.366241][ T6456] [ 130.427957][ T6488] netlink: 326 bytes leftover after parsing attributes in process `syz.2.188'. [ 134.175229][ T6557] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.531640][ T6596] kAFS: No cell specified [ 136.582478][ T6619] FAULT_INJECTION: forcing a failure. [ 136.582478][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.597103][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.3.229 Not tainted syzkaller #0 PREEMPT(full) [ 136.597146][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.597165][ T6619] Call Trace: [ 136.597175][ T6619] [ 136.597187][ T6619] dump_stack_lvl+0x16c/0x1f0 [ 136.597249][ T6619] should_fail_ex+0x512/0x640 [ 136.597305][ T6619] core_sys_select+0x9cf/0xc20 [ 136.597349][ T6619] ? __pfx_core_sys_select+0x10/0x10 [ 136.597388][ T6619] ? futex_wait+0x120/0x380 [ 136.597472][ T6619] ? __pfx_do_futex+0x10/0x10 [ 136.597536][ T6619] kern_select+0x15d/0x1e0 [ 136.597573][ T6619] ? __pfx_kern_select+0x10/0x10 [ 136.597609][ T6619] ? xfd_validate_state+0x61/0x180 [ 136.597652][ T6619] ? __pfx_ksys_write+0x10/0x10 [ 136.597694][ T6619] __x64_sys_select+0xbd/0x160 [ 136.597723][ T6619] ? do_syscall_64+0x91/0xfa0 [ 136.597759][ T6619] ? lockdep_hardirqs_on+0x7c/0x110 [ 136.597797][ T6619] do_syscall_64+0xcd/0xfa0 [ 136.597838][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.597872][ T6619] RIP: 0033:0x7f5af7b8f6c9 [ 136.597898][ T6619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.597929][ T6619] RSP: 002b:00007f5af8a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 136.597960][ T6619] RAX: ffffffffffffffda RBX: 00007f5af7de5fa0 RCX: 00007f5af7b8f6c9 [ 136.597981][ T6619] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 136.598001][ T6619] RBP: 00007f5af7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 136.598021][ T6619] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 136.598042][ T6619] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 136.598085][ T6619] [ 136.972177][ T6629] FAULT_INJECTION: forcing a failure. [ 136.972177][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 136.986014][ T6629] CPU: 1 UID: 0 PID: 6629 Comm: syz.3.231 Not tainted syzkaller #0 PREEMPT(full) [ 136.986058][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.986077][ T6629] Call Trace: [ 136.986087][ T6629] [ 136.986099][ T6629] dump_stack_lvl+0x16c/0x1f0 [ 136.986144][ T6629] should_fail_ex+0x512/0x640 [ 136.986194][ T6629] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 136.986234][ T6629] should_failslab+0xc2/0x120 [ 136.986279][ T6629] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 136.986313][ T6629] ? d_alloc_parallel+0x864/0x1510 [ 136.986363][ T6629] ? proc_alloc_inode+0x25/0x200 [ 136.986412][ T6629] ? __pfx_proc_alloc_inode+0x10/0x10 [ 136.986451][ T6629] ? proc_alloc_inode+0x25/0x200 [ 136.986492][ T6629] proc_alloc_inode+0x25/0x200 [ 136.986540][ T6629] alloc_inode+0x64/0x240 [ 136.986586][ T6629] new_inode+0x22/0x1c0 [ 136.986634][ T6629] proc_pid_make_inode+0x22/0x160 [ 136.986677][ T6629] proc_ns_dir_lookup+0x25b/0x390 [ 136.986724][ T6629] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 136.986765][ T6629] lookup_open.isra.0+0x4da/0x1580 [ 136.986828][ T6629] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 136.986906][ T6629] ? mnt_get_write_access+0x1e9/0x2f0 [ 136.986958][ T6629] path_openat+0x893/0x2cb0 [ 136.987009][ T6629] ? __pfx_path_openat+0x10/0x10 [ 136.987048][ T6629] ? __lock_acquire+0xb8a/0x1c90 [ 136.987099][ T6629] do_filp_open+0x20b/0x470 [ 136.987135][ T6629] ? __pfx_do_filp_open+0x10/0x10 [ 136.987186][ T6629] ? __pfx_kfree_link+0x10/0x10 [ 136.987245][ T6629] ? alloc_fd+0x471/0x7d0 [ 136.987290][ T6629] do_sys_openat2+0x11b/0x1d0 [ 136.987339][ T6629] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.987404][ T6629] __x64_sys_openat+0x174/0x210 [ 136.987453][ T6629] ? __pfx___x64_sys_openat+0x10/0x10 [ 136.987537][ T6629] do_syscall_64+0xcd/0xfa0 [ 136.987581][ T6629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.987613][ T6629] RIP: 0033:0x7f5af7b8df10 [ 136.987639][ T6629] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 136.987671][ T6629] RSP: 002b:00007f5af8a89f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 136.987701][ T6629] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5af7b8df10 [ 136.987721][ T6629] RDX: 0000000000000002 RSI: 00007f5af8a89fa0 RDI: 00000000ffffff9c [ 136.987742][ T6629] RBP: 00007f5af8a89fa0 R08: 0000000000000000 R09: 0000000000000000 [ 136.987761][ T6629] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.987781][ T6629] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 136.987826][ T6629] [ 138.008695][ T6645] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 138.038243][ T6645] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 138.075847][ T6645] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 138.112103][ T6645] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 138.136342][ T6645] page dumped because: unmovable page [ 138.153808][ T6645] page_owner info is not present (never set?) [ 142.302596][ T6735] process 'syz.0.269' launched ':,' with NULL argv: empty string added [ 142.693656][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 142.739944][ T6748] netlink: 25 bytes leftover after parsing attributes in process `syz.1.275'. [ 143.312972][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.319616][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.340209][ T6759] FAULT_INJECTION: forcing a failure. [ 143.340209][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 143.474222][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.0.278 Not tainted syzkaller #0 PREEMPT(full) [ 143.474270][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.474289][ T6759] Call Trace: [ 143.474299][ T6759] [ 143.474311][ T6759] dump_stack_lvl+0x16c/0x1f0 [ 143.474357][ T6759] should_fail_ex+0x512/0x640 [ 143.474406][ T6759] ? __kmalloc_noprof+0xca/0x880 [ 143.474463][ T6759] should_failslab+0xc2/0x120 [ 143.474507][ T6759] __kmalloc_noprof+0xdd/0x880 [ 143.474557][ T6759] ? lsm_blob_alloc+0x68/0x90 [ 143.474604][ T6759] ? lsm_blob_alloc+0x68/0x90 [ 143.474642][ T6759] lsm_blob_alloc+0x68/0x90 [ 143.474683][ T6759] security_prepare_creds+0x30/0x270 [ 143.474724][ T6759] prepare_creds+0x56f/0x7d0 [ 143.474777][ T6759] join_session_keyring+0x17/0x340 [ 143.474833][ T6759] lookup_user_key+0x576/0x1300 [ 143.474899][ T6759] ? __pfx_lookup_user_key+0x10/0x10 [ 143.474954][ T6759] ? __pfx_do_futex+0x10/0x10 [ 143.475006][ T6759] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 143.475068][ T6759] ? __sys_socket+0xac/0x260 [ 143.475120][ T6759] keyctl_keyring_move+0xb4/0x150 [ 143.475171][ T6759] __do_sys_keyctl+0x171/0x590 [ 143.475219][ T6759] do_syscall_64+0xcd/0xfa0 [ 143.475260][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.475293][ T6759] RIP: 0033:0x7f9af4d8f6c9 [ 143.475318][ T6759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.475349][ T6759] RSP: 002b:00007f9af5bac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 143.475382][ T6759] RAX: ffffffffffffffda RBX: 00007f9af4fe5fa0 RCX: 00007f9af4d8f6c9 [ 143.475403][ T6759] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 000000000000001e [ 143.475425][ T6759] RBP: 00007f9af4e11f91 R08: 0000000000000001 R09: 0000000000000000 [ 143.475444][ T6759] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 143.475464][ T6759] R13: 00007f9af4fe6038 R14: 00007f9af4fe5fa0 R15: 00007ffea283a298 [ 143.475507][ T6759] [ 144.643024][ T6775] netlink: 334 bytes leftover after parsing attributes in process `syz.2.282'. [ 145.186656][ T6790] netlink: 330 bytes leftover after parsing attributes in process `syz.0.286'. [ 150.643185][ T6898] FAULT_INJECTION: forcing a failure. [ 150.643185][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 150.664661][ T6898] CPU: 1 UID: 0 PID: 6898 Comm: syz.0.318 Not tainted syzkaller #0 PREEMPT(full) [ 150.664703][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.664721][ T6898] Call Trace: [ 150.664731][ T6898] [ 150.664744][ T6898] dump_stack_lvl+0x16c/0x1f0 [ 150.664787][ T6898] should_fail_ex+0x512/0x640 [ 150.664836][ T6898] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 150.664874][ T6898] should_failslab+0xc2/0x120 [ 150.664918][ T6898] kmem_cache_alloc_noprof+0x75/0x6e0 [ 150.664951][ T6898] ? __do_sys_getcwd+0xe0/0x930 [ 150.665002][ T6898] ? __do_sys_getcwd+0xe0/0x930 [ 150.665044][ T6898] __do_sys_getcwd+0xe0/0x930 [ 150.665097][ T6898] ? do_raw_spin_unlock+0x172/0x230 [ 150.665157][ T6898] ? __x64_sys_futex+0x1e0/0x4c0 [ 150.665201][ T6898] ? __x64_sys_futex+0x1e9/0x4c0 [ 150.665246][ T6898] ? __pfx___do_sys_getcwd+0x10/0x10 [ 150.665296][ T6898] ? xfd_validate_state+0x61/0x180 [ 150.665340][ T6898] ? __pfx_do_writev+0x10/0x10 [ 150.665385][ T6898] do_syscall_64+0xcd/0xfa0 [ 150.665426][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.665458][ T6898] RIP: 0033:0x7f9af4d8f6c9 [ 150.665483][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.665514][ T6898] RSP: 002b:00007f9af5bac038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 150.665545][ T6898] RAX: ffffffffffffffda RBX: 00007f9af4fe5fa0 RCX: 00007f9af4d8f6c9 [ 150.665566][ T6898] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 150.665585][ T6898] RBP: 00007f9af4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 150.665604][ T6898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.665623][ T6898] R13: 00007f9af4fe6038 R14: 00007f9af4fe5fa0 R15: 00007ffea283a298 [ 150.665666][ T6898] [ 152.297231][ T6921] FAULT_INJECTION: forcing a failure. [ 152.297231][ T6921] name failslab, interval 1, probability 0, space 0, times 0 [ 152.315530][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.3.325 Not tainted syzkaller #0 PREEMPT(full) [ 152.315574][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.315594][ T6921] Call Trace: [ 152.315604][ T6921] [ 152.315617][ T6921] dump_stack_lvl+0x16c/0x1f0 [ 152.315663][ T6921] should_fail_ex+0x512/0x640 [ 152.315713][ T6921] ? fs_reclaim_acquire+0xae/0x150 [ 152.315760][ T6921] should_failslab+0xc2/0x120 [ 152.315806][ T6921] kmem_cache_alloc_noprof+0x75/0x6e0 [ 152.315839][ T6921] ? __pfx_map_id_range_down+0x10/0x10 [ 152.315899][ T6921] ? security_inode_alloc+0x3b/0x2b0 [ 152.315957][ T6921] ? security_inode_alloc+0x3b/0x2b0 [ 152.316005][ T6921] security_inode_alloc+0x3b/0x2b0 [ 152.316057][ T6921] inode_init_always_gfp+0xce4/0x1030 [ 152.316097][ T6921] alloc_inode+0x86/0x240 [ 152.316141][ T6921] new_inode+0x22/0x1c0 [ 152.316182][ T6921] ? proc_lookup_de+0x201/0x360 [ 152.316233][ T6921] proc_get_inode+0x1d/0x780 [ 152.316279][ T6921] proc_lookup_de+0x236/0x360 [ 152.316333][ T6921] proc_tgid_net_lookup+0x75/0x120 [ 152.316389][ T6921] __lookup_slow+0x251/0x460 [ 152.316436][ T6921] ? __pfx___lookup_slow+0x10/0x10 [ 152.316509][ T6921] ? lookup_fast+0x156/0x610 [ 152.316545][ T6921] walk_component+0x353/0x5b0 [ 152.316579][ T6921] link_path_walk+0x627/0xe20 [ 152.316626][ T6921] path_openat+0x1b0/0x2cb0 [ 152.316685][ T6921] ? __pfx_path_openat+0x10/0x10 [ 152.316725][ T6921] ? __lock_acquire+0xb8a/0x1c90 [ 152.316777][ T6921] do_filp_open+0x20b/0x470 [ 152.316814][ T6921] ? __pfx_do_filp_open+0x10/0x10 [ 152.316865][ T6921] ? __pfx_kfree_link+0x10/0x10 [ 152.316931][ T6921] ? alloc_fd+0x471/0x7d0 [ 152.316976][ T6921] do_sys_openat2+0x11b/0x1d0 [ 152.317024][ T6921] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.317096][ T6921] __x64_sys_openat+0x174/0x210 [ 152.317145][ T6921] ? __pfx___x64_sys_openat+0x10/0x10 [ 152.317213][ T6921] do_syscall_64+0xcd/0xfa0 [ 152.317258][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.317290][ T6921] RIP: 0033:0x7f5af7b8f6c9 [ 152.317315][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.317347][ T6921] RSP: 002b:00007f5af8a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.317378][ T6921] RAX: ffffffffffffffda RBX: 00007f5af7de5fa0 RCX: 00007f5af7b8f6c9 [ 152.317399][ T6921] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 152.317419][ T6921] RBP: 00007f5af7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.317439][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.317459][ T6921] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 152.317504][ T6921] [ 152.610106][ T6926] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[6926] [ 153.282637][ T6945] FAULT_INJECTION: forcing a failure. [ 153.282637][ T6945] name failslab, interval 1, probability 0, space 0, times 0 [ 153.316899][ T6945] CPU: 1 UID: 0 PID: 6945 Comm: syz.2.330 Not tainted syzkaller #0 PREEMPT(full) [ 153.316943][ T6945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.316962][ T6945] Call Trace: [ 153.316972][ T6945] [ 153.316986][ T6945] dump_stack_lvl+0x16c/0x1f0 [ 153.317033][ T6945] should_fail_ex+0x512/0x640 [ 153.317084][ T6945] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 153.317128][ T6945] should_failslab+0xc2/0x120 [ 153.317171][ T6945] kmem_cache_alloc_noprof+0x75/0x6e0 [ 153.317204][ T6945] ? __proc_create+0x2ce/0x8e0 [ 153.317259][ T6945] ? __proc_create+0x2ce/0x8e0 [ 153.317305][ T6945] __proc_create+0x2ce/0x8e0 [ 153.317354][ T6945] ? __pfx___proc_create+0x10/0x10 [ 153.317408][ T6945] ? _raw_write_unlock+0x28/0x50 [ 153.317443][ T6945] ? proc_register+0x559/0x8b0 [ 153.317496][ T6945] proc_create_reg+0x7d/0x180 [ 153.317548][ T6945] proc_create_data+0x86/0x110 [ 153.317596][ T6945] ? __pfx_proc_create_data+0x10/0x10 [ 153.317647][ T6945] ? cache_register_net+0x137/0x5e0 [ 153.317696][ T6945] cache_register_net+0x25a/0x5e0 [ 153.317750][ T6945] gss_svc_init_net+0x151/0x660 [ 153.317782][ T6945] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 153.317828][ T6945] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 153.317862][ T6945] ops_init+0x1e2/0x5f0 [ 153.317901][ T6945] setup_net+0x100/0x390 [ 153.317935][ T6945] ? __pfx_setup_net+0x10/0x10 [ 153.317971][ T6945] ? debug_mutex_init+0x37/0x70 [ 153.318010][ T6945] copy_net_ns+0x2f8/0x690 [ 153.318053][ T6945] create_new_namespaces+0x3ea/0xa90 [ 153.318101][ T6945] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 153.318144][ T6945] ksys_unshare+0x45b/0xa40 [ 153.318189][ T6945] ? __pfx_ksys_unshare+0x10/0x10 [ 153.318235][ T6945] ? xfd_validate_state+0x61/0x180 [ 153.318294][ T6945] __x64_sys_unshare+0x31/0x40 [ 153.318337][ T6945] do_syscall_64+0xcd/0xfa0 [ 153.318379][ T6945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.318411][ T6945] RIP: 0033:0x7f801998f6c9 [ 153.318437][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.318469][ T6945] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 153.318499][ T6945] RAX: ffffffffffffffda RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 153.318521][ T6945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 153.318541][ T6945] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.318560][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.318579][ T6945] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 153.318625][ T6945] [ 153.980303][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.333'. [ 154.112888][ T6951] bond0: (slave bond_slave_1): Releasing backup interface [ 156.119163][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 156.132391][ T7012] netlink: 354 bytes leftover after parsing attributes in process `syz.2.353'. [ 158.068713][ T7064] netlink: 326 bytes leftover after parsing attributes in process `syz.1.366'. [ 160.159564][ T7103] FAULT_INJECTION: forcing a failure. [ 160.159564][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 160.194382][ T7103] CPU: 1 UID: 0 PID: 7103 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT(full) [ 160.194421][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.194439][ T7103] Call Trace: [ 160.194449][ T7103] [ 160.194461][ T7103] dump_stack_lvl+0x16c/0x1f0 [ 160.194504][ T7103] should_fail_ex+0x512/0x640 [ 160.194550][ T7103] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 160.194589][ T7103] should_failslab+0xc2/0x120 [ 160.194631][ T7103] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 160.194666][ T7103] ? __d_alloc+0x32/0xae0 [ 160.194709][ T7103] ? __d_alloc+0x32/0xae0 [ 160.194742][ T7103] ? is_bpf_text_address+0x8a/0x1a0 [ 160.194785][ T7103] __d_alloc+0x32/0xae0 [ 160.194817][ T7103] ? bpf_ksym_find+0x124/0x1c0 [ 160.194855][ T7103] d_alloc_parallel+0x111/0x1510 [ 160.194904][ T7103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.194937][ T7103] ? unwind_get_return_address+0x59/0xa0 [ 160.194971][ T7103] ? arch_stack_walk+0xa6/0x100 [ 160.195007][ T7103] ? __pfx_d_alloc_parallel+0x10/0x10 [ 160.195060][ T7103] ? lockdep_init_map_type+0x5c/0x280 [ 160.195107][ T7103] ? lockdep_init_map_type+0x5c/0x280 [ 160.195168][ T7103] __lookup_slow+0x193/0x460 [ 160.195216][ T7103] ? __pfx___lookup_slow+0x10/0x10 [ 160.195268][ T7103] ? next_zone+0x80/0x80 [ 160.195320][ T7103] ? next_zone+0x80/0x80 [ 160.195368][ T7103] ? d_lookup+0xe7/0x190 [ 160.195426][ T7103] lookup_noperm+0xe1/0x110 [ 160.195476][ T7103] simple_start_creating+0xd1/0x1b0 [ 160.195533][ T7103] debugfs_start_creating.part.0+0x82/0x190 [ 160.195589][ T7103] __debugfs_create_file+0xa7/0x6b0 [ 160.195623][ T7103] debugfs_create_file_full+0x41/0x60 [ 160.195656][ T7103] kvm_dev_ioctl+0x14ca/0x1a80 [ 160.195704][ T7103] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 160.195755][ T7103] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 160.195794][ T7103] __x64_sys_ioctl+0x18e/0x210 [ 160.195845][ T7103] do_syscall_64+0xcd/0xfa0 [ 160.195887][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.195920][ T7103] RIP: 0033:0x7f801998f6c9 [ 160.195946][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.195976][ T7103] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.196008][ T7103] RAX: ffffffffffffffda RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 160.196030][ T7103] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 160.196049][ T7103] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 160.196068][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.196088][ T7103] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 160.196139][ T7103] [ 161.341656][ T7113] netlink: 'syz.1.381': attribute type 33 has an invalid length. [ 163.936317][ T7163] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 165.731470][ T7201] tc_dump_action: action bad kind [ 167.729820][ T7246] FAULT_INJECTION: forcing a failure. [ 167.729820][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.753021][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.2.423 Not tainted syzkaller #0 PREEMPT(full) [ 167.753065][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.753085][ T7246] Call Trace: [ 167.753095][ T7246] [ 167.753108][ T7246] dump_stack_lvl+0x16c/0x1f0 [ 167.753153][ T7246] should_fail_ex+0x512/0x640 [ 167.753208][ T7246] _copy_from_iter+0x29f/0x1720 [ 167.753264][ T7246] ? __alloc_skb+0x200/0x380 [ 167.753315][ T7246] ? __pfx__copy_from_iter+0x10/0x10 [ 167.753364][ T7246] ? netlink_autobind.isra.0+0x158/0x370 [ 167.753415][ T7246] netlink_sendmsg+0x820/0xdd0 [ 167.753457][ T7246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.753496][ T7246] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 167.753551][ T7246] sock_write_iter+0x566/0x610 [ 167.753594][ T7246] ? __pfx_sock_write_iter+0x10/0x10 [ 167.753649][ T7246] ? bpf_lsm_file_permission+0x9/0x10 [ 167.753687][ T7246] ? security_file_permission+0x71/0x210 [ 167.753721][ T7246] ? rw_verify_area+0xcf/0x6c0 [ 167.753762][ T7246] vfs_write+0x7d3/0x11d0 [ 167.753798][ T7246] ? __pfx_sock_write_iter+0x10/0x10 [ 167.753841][ T7246] ? __pfx_vfs_write+0x10/0x10 [ 167.753872][ T7246] ? find_held_lock+0x2b/0x80 [ 167.753931][ T7246] ksys_write+0x1f8/0x250 [ 167.753967][ T7246] ? __pfx_ksys_write+0x10/0x10 [ 167.754015][ T7246] do_syscall_64+0xcd/0xfa0 [ 167.754057][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.754088][ T7246] RIP: 0033:0x7f801998f6c9 [ 167.754113][ T7246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.754143][ T7246] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.754175][ T7246] RAX: ffffffffffffffda RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 167.754196][ T7246] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 167.754214][ T7246] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.754233][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.754252][ T7246] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 167.754296][ T7246] [ 168.758715][ T7267] FAULT_INJECTION: forcing a failure. [ 168.758715][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 168.794843][ T7267] CPU: 0 UID: 0 PID: 7267 Comm: syz.0.430 Not tainted syzkaller #0 PREEMPT(full) [ 168.794886][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.794905][ T7267] Call Trace: [ 168.794915][ T7267] [ 168.794929][ T7267] dump_stack_lvl+0x16c/0x1f0 [ 168.794973][ T7267] should_fail_ex+0x512/0x640 [ 168.795022][ T7267] ? fs_reclaim_acquire+0xae/0x150 [ 168.795068][ T7267] should_failslab+0xc2/0x120 [ 168.795111][ T7267] kmem_cache_alloc_noprof+0x75/0x6e0 [ 168.795142][ T7267] ? jbd2__journal_start+0x193/0x6a0 [ 168.795180][ T7267] ? jbd2__journal_start+0x193/0x6a0 [ 168.795206][ T7267] jbd2__journal_start+0x193/0x6a0 [ 168.795242][ T7267] __ext4_journal_start_sb+0x195/0x690 [ 168.795283][ T7267] ? ext4_punch_hole+0x77e/0x1080 [ 168.795329][ T7267] ext4_punch_hole+0x77e/0x1080 [ 168.795394][ T7267] ext4_fallocate+0x22d7/0x37a0 [ 168.795458][ T7267] ? __pfx_ext4_fallocate+0x10/0x10 [ 168.795506][ T7267] vfs_fallocate+0x5b4/0x10e0 [ 168.795548][ T7267] ? __pfx_vfs_fallocate+0x10/0x10 [ 168.795587][ T7267] ? madvise_vma_behavior+0x2b12/0x2d50 [ 168.795641][ T7267] madvise_vma_behavior+0x2ac9/0x2d50 [ 168.795693][ T7267] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 168.795736][ T7267] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 168.795786][ T7267] ? mas_prev+0x9b/0xf0 [ 168.795825][ T7267] ? __pfx_mas_prev+0x10/0x10 [ 168.795876][ T7267] ? find_vma_prev+0xd3/0x150 [ 168.795916][ T7267] ? find_held_lock+0x2b/0x80 [ 168.795946][ T7267] ? __pfx_find_vma_prev+0x10/0x10 [ 168.796003][ T7267] ? __futex_wait+0x24b/0x2f0 [ 168.796058][ T7267] madvise_walk_vmas+0x31f/0x9c0 [ 168.796113][ T7267] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 168.796172][ T7267] madvise_do_behavior+0x1e2/0x530 [ 168.796219][ T7267] ? futex_private_hash_put+0x18a/0x300 [ 168.796263][ T7267] ? __pfx_madvise_do_behavior+0x10/0x10 [ 168.796311][ T7267] ? down_read+0x13d/0x480 [ 168.796384][ T7267] do_madvise+0x176/0x240 [ 168.796430][ T7267] ? __pfx_do_madvise+0x10/0x10 [ 168.796473][ T7267] ? do_futex+0x122/0x350 [ 168.796549][ T7267] ? __pfx_ksys_write+0x10/0x10 [ 168.796594][ T7267] __x64_sys_madvise+0xa9/0x110 [ 168.796639][ T7267] ? lockdep_hardirqs_on+0x7c/0x110 [ 168.796676][ T7267] do_syscall_64+0xcd/0xfa0 [ 168.796717][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.796749][ T7267] RIP: 0033:0x7f9af4d8f6c9 [ 168.796775][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.796804][ T7267] RSP: 002b:00007f9af5bac038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 168.796834][ T7267] RAX: ffffffffffffffda RBX: 00007f9af4fe5fa0 RCX: 00007f9af4d8f6c9 [ 168.796854][ T7267] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 000000110c230000 [ 168.796872][ T7267] RBP: 00007f9af4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.796891][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.796909][ T7267] R13: 00007f9af4fe6038 R14: 00007f9af4fe5fa0 R15: 00007ffea283a298 [ 168.796953][ T7267] [ 168.798112][ T7267] EXT4-fs error (device sda1) in ext4_punch_hole:4438: Out of memory [ 170.332838][ T31] audit: type=1800 audit(1762554490.305:2): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.440" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 170.708112][ T7309] FAULT_INJECTION: forcing a failure. [ 170.708112][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 170.734150][ T7309] CPU: 0 UID: 0 PID: 7309 Comm: syz.3.442 Not tainted syzkaller #0 PREEMPT(full) [ 170.734191][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.734209][ T7309] Call Trace: [ 170.734218][ T7309] [ 170.734239][ T7309] dump_stack_lvl+0x16c/0x1f0 [ 170.734281][ T7309] should_fail_ex+0x512/0x640 [ 170.734335][ T7309] should_failslab+0xc2/0x120 [ 170.734395][ T7309] kmem_cache_alloc_noprof+0x75/0x6e0 [ 170.734428][ T7309] ? skb_clone+0x190/0x3f0 [ 170.734467][ T7309] ? skb_clone+0x190/0x3f0 [ 170.734494][ T7309] skb_clone+0x190/0x3f0 [ 170.734526][ T7309] netlink_deliver_tap+0xabd/0xd30 [ 170.734568][ T7309] netlink_unicast+0x64c/0x870 [ 170.734607][ T7309] ? __pfx_netlink_unicast+0x10/0x10 [ 170.734659][ T7309] netlink_sendmsg+0x8c8/0xdd0 [ 170.734700][ T7309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.734741][ T7309] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 170.734797][ T7309] __sys_sendto+0x4a3/0x520 [ 170.734848][ T7309] ? __pfx___sys_sendto+0x10/0x10 [ 170.734911][ T7309] ? find_held_lock+0x2b/0x80 [ 170.734977][ T7309] __x64_sys_sendto+0xe0/0x1c0 [ 170.735024][ T7309] ? do_syscall_64+0x91/0xfa0 [ 170.735061][ T7309] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.735099][ T7309] do_syscall_64+0xcd/0xfa0 [ 170.735145][ T7309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.735178][ T7309] RIP: 0033:0x7f5af7b9155c [ 170.735202][ T7309] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 170.735240][ T7309] RSP: 002b:00007f5af8a67ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 170.735271][ T7309] RAX: ffffffffffffffda RBX: 00007f5af8a67fc0 RCX: 00007f5af7b9155c [ 170.735293][ T7309] RDX: 000000000000001c RSI: 00007f5af8a68010 RDI: 0000000000000006 [ 170.735313][ T7309] RBP: 0000000000000000 R08: 00007f5af8a67f14 R09: 000000000000000c [ 170.735333][ T7309] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 170.735352][ T7309] R13: 00007f5af8a67f68 R14: 00007f5af8a68010 R15: 0000000000000000 [ 170.735396][ T7309] [ 171.967749][ T5833] Bluetooth: hci1: unexpected event 0x0f length: 5 > 4 [ 172.706117][ T7345] serio: Serial port pty6 [ 176.775239][ T7421] FAULT_INJECTION: forcing a failure. [ 176.775239][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 176.791918][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.2.475 Not tainted syzkaller #0 PREEMPT(full) [ 176.791975][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.791993][ T7421] Call Trace: [ 176.792004][ T7421] [ 176.792015][ T7421] dump_stack_lvl+0x16c/0x1f0 [ 176.792057][ T7421] should_fail_ex+0x512/0x640 [ 176.792100][ T7421] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 176.792141][ T7421] should_failslab+0xc2/0x120 [ 176.792178][ T7421] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 176.792214][ T7421] ? create_filter_start.constprop.0+0x16a/0x300 [ 176.792262][ T7421] ? kstrdup+0x53/0x100 [ 176.792288][ T7421] kstrdup+0x53/0x100 [ 176.792318][ T7421] create_filter_start.constprop.0+0x16a/0x300 [ 176.792363][ T7421] create_filter+0xb5/0x210 [ 176.792402][ T7421] ? __pfx_create_filter+0x10/0x10 [ 176.792444][ T7421] ? __pfx___mutex_lock+0x10/0x10 [ 176.792478][ T7421] ? find_held_lock+0x2b/0x80 [ 176.792509][ T7421] apply_event_filter+0x220/0x500 [ 176.792550][ T7421] ? __pfx_apply_event_filter+0x10/0x10 [ 176.792601][ T7421] event_filter_write+0x16d/0x290 [ 176.792632][ T7421] ? __pfx_event_filter_write+0x10/0x10 [ 176.792658][ T7421] vfs_write+0x2a0/0x11d0 [ 176.792694][ T7421] ? __pfx___mutex_lock+0x10/0x10 [ 176.792730][ T7421] ? __pfx_vfs_write+0x10/0x10 [ 176.792770][ T7421] ? __fget_files+0x20e/0x3c0 [ 176.792808][ T7421] ksys_write+0x12a/0x250 [ 176.792837][ T7421] ? __pfx_ksys_write+0x10/0x10 [ 176.792878][ T7421] do_syscall_64+0xcd/0xfa0 [ 176.792913][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.792941][ T7421] RIP: 0033:0x7f801998f6c9 [ 176.792972][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.793002][ T7421] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.793029][ T7421] RAX: ffffffffffffffda RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 176.793048][ T7421] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 176.793065][ T7421] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.793082][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.793098][ T7421] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 176.793138][ T7421] [ 177.211005][ T7433] FAULT_INJECTION: forcing a failure. [ 177.211005][ T7433] name failslab, interval 1, probability 0, space 0, times 0 [ 177.224118][ T7433] CPU: 1 UID: 0 PID: 7433 Comm: syz.3.477 Not tainted syzkaller #0 PREEMPT(full) [ 177.224159][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.224177][ T7433] Call Trace: [ 177.224188][ T7433] [ 177.224200][ T7433] dump_stack_lvl+0x16c/0x1f0 [ 177.224246][ T7433] should_fail_ex+0x512/0x640 [ 177.224294][ T7433] ? fs_reclaim_acquire+0xae/0x150 [ 177.224341][ T7433] should_failslab+0xc2/0x120 [ 177.224387][ T7433] __kmalloc_noprof+0xdd/0x880 [ 177.224437][ T7433] ? kfree+0x252/0x6d0 [ 177.224484][ T7433] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 177.224528][ T7433] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 177.224564][ T7433] tomoyo_realpath_from_path+0xc2/0x6e0 [ 177.224606][ T7433] ? tomoyo_profile+0x47/0x60 [ 177.224652][ T7433] tomoyo_path_number_perm+0x245/0x580 [ 177.224701][ T7433] ? tomoyo_path_number_perm+0x237/0x580 [ 177.224755][ T7433] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 177.224857][ T7433] ? d_alloc_parallel+0xb4e/0x1510 [ 177.224910][ T7433] ? current_check_access_path+0x33c/0x460 [ 177.224952][ T7433] ? __pfx_current_check_access_path+0x10/0x10 [ 177.225003][ T7433] tomoyo_path_mknod+0x10c/0x190 [ 177.225046][ T7433] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 177.225091][ T7433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.225150][ T7433] security_path_mknod+0x161/0x310 [ 177.225207][ T7433] lookup_open.isra.0+0xc17/0x1580 [ 177.225268][ T7433] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 177.225326][ T7433] ? find_held_lock+0x2b/0x80 [ 177.225368][ T7433] ? __pfx_down_write+0x10/0x10 [ 177.225422][ T7433] path_openat+0x893/0x2cb0 [ 177.225471][ T7433] ? __pfx_path_openat+0x10/0x10 [ 177.225516][ T7433] do_filp_open+0x20b/0x470 [ 177.225553][ T7433] ? __pfx_do_filp_open+0x10/0x10 [ 177.225619][ T7433] ? _raw_spin_unlock+0x28/0x50 [ 177.225651][ T7433] ? alloc_fd+0x471/0x7d0 [ 177.225695][ T7433] do_sys_openat2+0x11b/0x1d0 [ 177.225740][ T7433] ? __pfx_do_sys_openat2+0x10/0x10 [ 177.225791][ T7433] ? find_held_lock+0x2b/0x80 [ 177.225835][ T7433] __x64_sys_open+0x153/0x1e0 [ 177.225894][ T7433] ? __pfx___x64_sys_open+0x10/0x10 [ 177.225951][ T7433] ? rcu_is_watching+0x12/0xc0 [ 177.225990][ T7433] do_syscall_64+0xcd/0xfa0 [ 177.226031][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.226064][ T7433] RIP: 0033:0x7f5af7b8f6c9 [ 177.226089][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.226121][ T7433] RSP: 002b:00007f5af8a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 177.226151][ T7433] RAX: ffffffffffffffda RBX: 00007f5af7de5fa0 RCX: 00007f5af7b8f6c9 [ 177.226172][ T7433] RDX: 0000000000000154 RSI: 0000000000062240 RDI: 0000200000000800 [ 177.226191][ T7433] RBP: 00007f5af7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.226210][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.226229][ T7433] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 177.226274][ T7433] [ 177.226286][ T7433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 179.785491][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.497'. [ 180.045498][ T7492] team0 (unregistering): Port device team_slave_0 removed [ 180.091462][ T7492] team0 (unregistering): Port device team_slave_1 removed [ 181.989484][ T7531] bridge0: port 3(veth0_to_bridge) entered blocking state [ 182.029275][ T7531] bridge0: port 3(veth0_to_bridge) entered disabled state [ 182.062540][ T7531] veth0_to_bridge: entered allmulticast mode [ 182.124471][ T7531] veth0_to_bridge: entered promiscuous mode [ 182.147562][ T7531] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 182.197481][ T7536] FAULT_INJECTION: forcing a failure. [ 182.197481][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 182.207541][ T7531] bridge0: port 3(veth0_to_bridge) entered blocking state [ 182.217882][ T7531] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 182.232081][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.0.510 Not tainted syzkaller #0 PREEMPT(full) [ 182.232123][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.232153][ T7536] Call Trace: [ 182.232164][ T7536] [ 182.232176][ T7536] dump_stack_lvl+0x16c/0x1f0 [ 182.232226][ T7536] should_fail_ex+0x512/0x640 [ 182.232273][ T7536] ? __kmalloc_cache_noprof+0x5f/0x780 [ 182.232331][ T7536] should_failslab+0xc2/0x120 [ 182.232375][ T7536] __kmalloc_cache_noprof+0x72/0x780 [ 182.232429][ T7536] ? loopback_open+0xa4e/0x13f0 [ 182.232489][ T7536] ? loopback_open+0xa4e/0x13f0 [ 182.232541][ T7536] loopback_open+0xa4e/0x13f0 [ 182.232602][ T7536] snd_pcm_open_substream+0xa60/0x17f0 [ 182.232657][ T7536] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 182.232714][ T7536] ? rcu_is_watching+0x12/0xc0 [ 182.232756][ T7536] snd_pcm_open+0x29e/0x730 [ 182.232814][ T7536] ? __pfx_snd_pcm_open+0x10/0x10 [ 182.232873][ T7536] ? __pfx_default_wake_function+0x10/0x10 [ 182.232921][ T7536] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 182.232976][ T7536] snd_pcm_playback_open+0x86/0xe0 [ 182.233030][ T7536] snd_open+0x22d/0x4c0 [ 182.233072][ T7536] ? __pfx_snd_open+0x10/0x10 [ 182.233111][ T7536] chrdev_open+0x234/0x6a0 [ 182.233148][ T7536] ? __pfx_apparmor_file_open+0x10/0x10 [ 182.233209][ T7536] ? __pfx_chrdev_open+0x10/0x10 [ 182.233253][ T7536] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 182.233297][ T7536] do_dentry_open+0x982/0x1530 [ 182.233337][ T7536] ? __pfx_chrdev_open+0x10/0x10 [ 182.233387][ T7536] vfs_open+0x82/0x3f0 [ 182.233438][ T7536] path_openat+0x1de4/0x2cb0 [ 182.233490][ T7536] ? __pfx_path_openat+0x10/0x10 [ 182.233530][ T7536] ? __lock_acquire+0xb8a/0x1c90 [ 182.233580][ T7536] do_filp_open+0x20b/0x470 [ 182.233617][ T7536] ? __pfx_do_filp_open+0x10/0x10 [ 182.233685][ T7536] ? alloc_fd+0x471/0x7d0 [ 182.233731][ T7536] do_sys_openat2+0x11b/0x1d0 [ 182.233779][ T7536] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.233847][ T7536] __x64_sys_openat+0x174/0x210 [ 182.233899][ T7536] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.233967][ T7536] do_syscall_64+0xcd/0xfa0 [ 182.234011][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.234044][ T7536] RIP: 0033:0x7f9af4d8f6c9 [ 182.234072][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.234105][ T7536] RSP: 002b:00007f9af5bac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.234137][ T7536] RAX: ffffffffffffffda RBX: 00007f9af4fe5fa0 RCX: 00007f9af4d8f6c9 [ 182.234160][ T7536] RDX: 0000000000080000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 182.234189][ T7536] RBP: 00007f9af4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 182.234210][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.234230][ T7536] R13: 00007f9af4fe6038 R14: 00007f9af4fe5fa0 R15: 00007ffea283a298 [ 182.234276][ T7536] [ 183.190059][ T7542] FAULT_INJECTION: forcing a failure. [ 183.190059][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 183.213919][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.2.511 Not tainted syzkaller #0 PREEMPT(full) [ 183.213960][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.213980][ T7542] Call Trace: [ 183.213990][ T7542] [ 183.214002][ T7542] dump_stack_lvl+0x16c/0x1f0 [ 183.214043][ T7542] should_fail_ex+0x512/0x640 [ 183.214091][ T7542] ? __kmalloc_cache_noprof+0x5f/0x780 [ 183.214164][ T7542] should_failslab+0xc2/0x120 [ 183.214211][ T7542] __kmalloc_cache_noprof+0x72/0x780 [ 183.214267][ T7542] ? vhost_net_open+0xb9/0x8a0 [ 183.214325][ T7542] ? vhost_net_open+0xb9/0x8a0 [ 183.214371][ T7542] vhost_net_open+0xb9/0x8a0 [ 183.214419][ T7542] ? __pfx_vhost_net_open+0x10/0x10 [ 183.214470][ T7542] misc_open+0x26d/0x450 [ 183.214523][ T7542] ? __pfx_misc_open+0x10/0x10 [ 183.214571][ T7542] chrdev_open+0x234/0x6a0 [ 183.214609][ T7542] ? __pfx_apparmor_file_open+0x10/0x10 [ 183.214660][ T7542] ? __pfx_chrdev_open+0x10/0x10 [ 183.214702][ T7542] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 183.214747][ T7542] do_dentry_open+0x982/0x1530 [ 183.214787][ T7542] ? __pfx_chrdev_open+0x10/0x10 [ 183.214844][ T7542] vfs_open+0x82/0x3f0 [ 183.214894][ T7542] path_openat+0x1de4/0x2cb0 [ 183.214963][ T7542] ? __pfx_path_openat+0x10/0x10 [ 183.215001][ T7542] ? __lock_acquire+0xb8a/0x1c90 [ 183.215052][ T7542] do_filp_open+0x20b/0x470 [ 183.215088][ T7542] ? __pfx_do_filp_open+0x10/0x10 [ 183.215165][ T7542] ? alloc_fd+0x471/0x7d0 [ 183.215226][ T7542] do_sys_openat2+0x11b/0x1d0 [ 183.215274][ T7542] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.215339][ T7542] __x64_sys_openat+0x174/0x210 [ 183.215388][ T7542] ? __pfx___x64_sys_openat+0x10/0x10 [ 183.215453][ T7542] do_syscall_64+0xcd/0xfa0 [ 183.215495][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.215528][ T7542] RIP: 0033:0x7f801998f6c9 [ 183.215554][ T7542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.215585][ T7542] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.215616][ T7542] RAX: ffffffffffffffda RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 183.215636][ T7542] RDX: 0000000000101600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 183.215656][ T7542] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 183.215675][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.215693][ T7542] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 183.215737][ T7542] [ 184.352281][ T7559] input: f as /devices/virtual/input/input7 [ 184.880544][ T7564] FAULT_INJECTION: forcing a failure. [ 184.880544][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 184.942040][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.2.517 Not tainted syzkaller #0 PREEMPT(full) [ 184.942083][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.942101][ T7564] Call Trace: [ 184.942111][ T7564] [ 184.942123][ T7564] dump_stack_lvl+0x16c/0x1f0 [ 184.942165][ T7564] should_fail_ex+0x512/0x640 [ 184.942221][ T7564] ? __kmalloc_noprof+0xca/0x880 [ 184.942278][ T7564] should_failslab+0xc2/0x120 [ 184.942322][ T7564] __kmalloc_noprof+0xdd/0x880 [ 184.942370][ T7564] ? __pfx_sprintf+0x10/0x10 [ 184.942399][ T7564] ? __x64_sys_openat+0x174/0x210 [ 184.942447][ T7564] ? ima_write_template_field_data+0x5d/0x1f0 [ 184.942494][ T7564] ? ima_write_template_field_data+0x5d/0x1f0 [ 184.942533][ T7564] ima_write_template_field_data+0x5d/0x1f0 [ 184.942582][ T7564] ima_eventdigest_init_common+0x154/0x430 [ 184.942627][ T7564] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 184.942695][ T7564] ? trace_kmalloc+0x2b/0xd0 [ 184.942733][ T7564] ? __kmalloc_noprof+0x34f/0x880 [ 184.942783][ T7564] ? __pfx_prepend_path+0x10/0x10 [ 184.942826][ T7564] ? ima_alloc_init_template+0x19d/0x720 [ 184.942887][ T7564] ima_alloc_init_template+0x3a0/0x720 [ 184.942952][ T7564] ima_store_measurement+0x1eb/0x5c0 [ 184.943007][ T7564] ? __pfx_ima_store_measurement+0x10/0x10 [ 184.943063][ T7564] ? vfs_getxattr_alloc+0xec/0x350 [ 184.943108][ T7564] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 184.943161][ T7564] process_measurement+0x1ddb/0x23e0 [ 184.943234][ T7564] ? __pfx_process_measurement+0x10/0x10 [ 184.943290][ T7564] ? __pfx___might_resched+0x10/0x10 [ 184.943330][ T7564] ? trace_contention_end+0xdd/0x130 [ 184.943378][ T7564] ? find_held_lock+0x2b/0x80 [ 184.943412][ T7564] ? tracing_buffers_open+0x280/0x360 [ 184.943500][ T7564] ? inode_to_bdi+0x9e/0x160 [ 184.943544][ T7564] ima_file_check+0xc5/0x110 [ 184.943589][ T7564] ? __pfx_ima_file_check+0x10/0x10 [ 184.943649][ T7564] security_file_post_open+0x8e/0x210 [ 184.943684][ T7564] path_openat+0x1404/0x2cb0 [ 184.943729][ T7564] ? __pfx_path_openat+0x10/0x10 [ 184.943768][ T7564] ? __lock_acquire+0xb8a/0x1c90 [ 184.943819][ T7564] do_filp_open+0x20b/0x470 [ 184.943856][ T7564] ? __pfx_do_filp_open+0x10/0x10 [ 184.943923][ T7564] ? alloc_fd+0x471/0x7d0 [ 184.943966][ T7564] do_sys_openat2+0x11b/0x1d0 [ 184.944014][ T7564] ? __pfx_do_sys_openat2+0x10/0x10 [ 184.944078][ T7564] __x64_sys_openat+0x174/0x210 [ 184.944127][ T7564] ? __pfx___x64_sys_openat+0x10/0x10 [ 184.944194][ T7564] do_syscall_64+0xcd/0xfa0 [ 184.944242][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.944276][ T7564] RIP: 0033:0x7f801998f6c9 [ 184.944303][ T7564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.944335][ T7564] RSP: 002b:00007f801a807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.944366][ T7564] RAX: ffffffffffffffda RBX: 00007f8019be6090 RCX: 00007f801998f6c9 [ 184.944388][ T7564] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 184.944409][ T7564] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.944429][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.944449][ T7564] R13: 00007f8019be6128 R14: 00007f8019be6090 R15: 00007fff85acce58 [ 184.944494][ T7564] [ 184.949623][ T31] audit: type=1804 audit(1762554504.925:3): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.517" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw" dev="tracefs" ino=151 res=0 errno=0 [ 186.068350][ T7583] netlink: 'syz.2.523': attribute type 12 has an invalid length. [ 186.095467][ T7583] netlink: 306 bytes leftover after parsing attributes in process `syz.2.523'. [ 187.373402][ T7595] mmap: syz.3.528 (7595) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.566132][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 187.861796][ T7610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.423572][ T7626] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[7626] [ 189.078557][ T7638] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 189.103061][ T7638] FAULT_INJECTION: forcing a failure. [ 189.103061][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 189.132070][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.3.540 Not tainted syzkaller #0 PREEMPT(full) [ 189.132112][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.132130][ T7638] Call Trace: [ 189.132141][ T7638] [ 189.132152][ T7638] dump_stack_lvl+0x16c/0x1f0 [ 189.132195][ T7638] should_fail_ex+0x512/0x640 [ 189.132249][ T7638] ? __kmalloc_cache_noprof+0x5f/0x780 [ 189.132309][ T7638] should_failslab+0xc2/0x120 [ 189.132347][ T7638] __kmalloc_cache_noprof+0x72/0x780 [ 189.132394][ T7638] ? create_filter_start.constprop.0+0xa5/0x300 [ 189.132441][ T7638] ? create_filter_start.constprop.0+0xa5/0x300 [ 189.132479][ T7638] create_filter_start.constprop.0+0xa5/0x300 [ 189.132524][ T7638] create_filter+0xb5/0x210 [ 189.132564][ T7638] ? __pfx_create_filter+0x10/0x10 [ 189.132605][ T7638] ? __pfx___mutex_lock+0x10/0x10 [ 189.132638][ T7638] ? find_held_lock+0x2b/0x80 [ 189.132670][ T7638] apply_event_filter+0x220/0x500 [ 189.132710][ T7638] ? __pfx_apply_event_filter+0x10/0x10 [ 189.132760][ T7638] event_filter_write+0x16d/0x290 [ 189.132811][ T7638] ? __pfx_event_filter_write+0x10/0x10 [ 189.132837][ T7638] vfs_write+0x2a0/0x11d0 [ 189.132873][ T7638] ? __pfx___mutex_lock+0x10/0x10 [ 189.132908][ T7638] ? __pfx_vfs_write+0x10/0x10 [ 189.132946][ T7638] ? __fget_files+0x20e/0x3c0 [ 189.132983][ T7638] ksys_write+0x12a/0x250 [ 189.133012][ T7638] ? __pfx_ksys_write+0x10/0x10 [ 189.133050][ T7638] do_syscall_64+0xcd/0xfa0 [ 189.133084][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.133110][ T7638] RIP: 0033:0x7f5af7b8f6c9 [ 189.133131][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.133156][ T7638] RSP: 002b:00007f5af8a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.133180][ T7638] RAX: ffffffffffffffda RBX: 00007f5af7de5fa0 RCX: 00007f5af7b8f6c9 [ 189.133198][ T7638] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 189.133213][ T7638] RBP: 00007f5af7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 189.133229][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.133244][ T7638] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 189.133280][ T7638] [ 189.439975][ T7640] zswap: compressor not available [ 189.639290][ T7647] __vm_enough_memory: pid: 7647, comm: syz.1.542, bytes: 4398046511104 not enough memory for the allocation [ 192.876449][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b7bf400: rx timeout, send abort [ 193.385751][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b7bf400: abort rx timeout. Force session deactivation [ 193.789586][ T7723] ptrace attach of "./syz-executor exec"[5828] was attempted by ""[7723] [ 194.097200][ T7729] FAULT_INJECTION: forcing a failure. [ 194.097200][ T7729] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.122263][ T7729] CPU: 1 UID: 0 PID: 7729 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(full) [ 194.122305][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.122322][ T7729] Call Trace: [ 194.122332][ T7729] [ 194.122343][ T7729] dump_stack_lvl+0x16c/0x1f0 [ 194.122386][ T7729] should_fail_ex+0x512/0x640 [ 194.122449][ T7729] should_fail_alloc_page+0xe7/0x130 [ 194.122495][ T7729] prepare_alloc_pages+0x3c2/0x610 [ 194.122544][ T7729] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 194.122589][ T7729] ? find_held_lock+0x2b/0x80 [ 194.122630][ T7729] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 194.122667][ T7729] ? kernel_text_address+0x8d/0x100 [ 194.122719][ T7729] ? __kernel_text_address+0xd/0x40 [ 194.122777][ T7729] ? do_raw_spin_lock+0x12c/0x2b0 [ 194.122828][ T7729] ? find_held_lock+0x2b/0x80 [ 194.122863][ T7729] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.122915][ T7729] ? policy_nodemask+0xea/0x4e0 [ 194.122959][ T7729] alloc_pages_mpol+0x1fb/0x550 [ 194.123002][ T7729] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 194.123061][ T7729] ? kasan_save_stack+0x33/0x60 [ 194.123095][ T7729] ? kasan_save_track+0x14/0x30 [ 194.123142][ T7729] ? __kasan_kmalloc+0xaa/0xb0 [ 194.123175][ T7729] ? __get_vm_area_node+0x101/0x330 [ 194.123222][ T7729] alloc_pages_noprof+0x131/0x390 [ 194.123265][ T7729] get_free_pages_noprof+0x10/0xb0 [ 194.123301][ T7729] kasan_populate_vmalloc+0x9f/0x2d0 [ 194.123336][ T7729] ? alloc_vmap_area+0x8b5/0x29e0 [ 194.123384][ T7729] alloc_vmap_area+0x960/0x29e0 [ 194.123453][ T7729] ? __pfx_alloc_vmap_area+0x10/0x10 [ 194.123507][ T7729] __get_vm_area_node+0x1ca/0x330 [ 194.123559][ T7729] __vmalloc_node_range_noprof+0x271/0x1480 [ 194.123607][ T7729] ? __snd_dma_alloc_pages+0x53/0x90 [ 194.123644][ T7729] ? __pfx___mutex_trylock_common+0x10/0x10 [ 194.123696][ T7729] ? __snd_dma_alloc_pages+0x53/0x90 [ 194.123726][ T7729] ? rcu_is_watching+0x12/0xc0 [ 194.123760][ T7729] ? trace_contention_end+0xdd/0x130 [ 194.123808][ T7729] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.123863][ T7729] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 194.123909][ T7729] ? __snd_dma_alloc_pages+0x53/0x90 [ 194.123938][ T7729] __vmalloc_node_noprof+0xad/0xf0 [ 194.123983][ T7729] ? __snd_dma_alloc_pages+0x53/0x90 [ 194.124010][ T7729] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 194.124044][ T7729] __snd_dma_alloc_pages+0x53/0x90 [ 194.124075][ T7729] snd_dma_alloc_dir_pages+0x151/0x240 [ 194.124110][ T7729] do_alloc_pages+0x136/0x2d0 [ 194.124165][ T7729] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 194.124244][ T7729] snd_pcm_hw_params+0x1656/0x1ba0 [ 194.124304][ T7729] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 194.124368][ T7729] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 194.124423][ T7729] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 194.124476][ T7729] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 194.124522][ T7729] ? __asan_memset+0x23/0x50 [ 194.124559][ T7729] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 194.124614][ T7729] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 194.124677][ T7729] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 194.124726][ T7729] ? __pfx___mutex_lock+0x10/0x10 [ 194.124793][ T7729] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 194.124839][ T7729] snd_pcm_oss_sync+0x1de/0x840 [ 194.124888][ T7729] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 194.124932][ T7729] snd_pcm_oss_release+0x28b/0x310 [ 194.124976][ T7729] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 194.125018][ T7729] __fput+0x402/0xb70 [ 194.125070][ T7729] task_work_run+0x150/0x240 [ 194.125158][ T7729] ? __pfx_task_work_run+0x10/0x10 [ 194.125216][ T7729] ? __pfx___do_sys_close_range+0x10/0x10 [ 194.125261][ T7729] exit_to_user_mode_loop+0xec/0x130 [ 194.125312][ T7729] do_syscall_64+0x426/0xfa0 [ 194.125354][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.125386][ T7729] RIP: 0033:0x7f801998f6c9 [ 194.125419][ T7729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.125451][ T7729] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 194.125483][ T7729] RAX: 0000000000000000 RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 194.125504][ T7729] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 194.125523][ T7729] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 194.125543][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.125561][ T7729] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 194.125606][ T7729] [ 194.125853][ T7729] syz.2.563: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 194.642281][ T7729] CPU: 1 UID: 0 PID: 7729 Comm: syz.2.563 Not tainted syzkaller #0 PREEMPT(full) [ 194.642331][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.642349][ T7729] Call Trace: [ 194.642358][ T7729] [ 194.642368][ T7729] dump_stack_lvl+0x16c/0x1f0 [ 194.642406][ T7729] warn_alloc+0x248/0x3a0 [ 194.642436][ T7729] ? __pfx_warn_alloc+0x10/0x10 [ 194.642465][ T7729] ? __get_vm_area_node+0x2cd/0x330 [ 194.642509][ T7729] ? __get_vm_area_node+0x2cd/0x330 [ 194.642544][ T7729] ? __get_vm_area_node+0x1dc/0x330 [ 194.642580][ T7729] ? __get_vm_area_node+0x208/0x330 [ 194.642624][ T7729] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 194.642670][ T7729] ? __pfx___mutex_trylock_common+0x10/0x10 [ 194.642714][ T7729] ? __snd_dma_alloc_pages+0x53/0x90 [ 194.642740][ T7729] ? rcu_is_watching+0x12/0xc0 [ 194.642770][ T7729] ? trace_contention_end+0xdd/0x130 [ 194.642813][ T7729] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 194.642865][ T7729] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 194.642905][ T7729] ? __snd_dma_alloc_pages+0x53/0x90 [ 194.642929][ T7729] __vmalloc_node_noprof+0xad/0xf0 [ 194.642968][ T7729] ? __snd_dma_alloc_pages+0x53/0x90 [ 194.642992][ T7729] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 194.643022][ T7729] __snd_dma_alloc_pages+0x53/0x90 [ 194.643049][ T7729] snd_dma_alloc_dir_pages+0x151/0x240 [ 194.643080][ T7729] do_alloc_pages+0x136/0x2d0 [ 194.643128][ T7729] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 194.643178][ T7729] snd_pcm_hw_params+0x1656/0x1ba0 [ 194.643228][ T7729] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 194.643275][ T7729] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 194.643319][ T7729] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 194.643362][ T7729] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 194.643401][ T7729] ? __asan_memset+0x23/0x50 [ 194.643432][ T7729] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 194.643478][ T7729] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 194.643532][ T7729] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 194.643573][ T7729] ? __pfx___mutex_lock+0x10/0x10 [ 194.643630][ T7729] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 194.643670][ T7729] snd_pcm_oss_sync+0x1de/0x840 [ 194.643711][ T7729] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 194.643749][ T7729] snd_pcm_oss_release+0x28b/0x310 [ 194.643788][ T7729] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 194.643824][ T7729] __fput+0x402/0xb70 [ 194.643870][ T7729] task_work_run+0x150/0x240 [ 194.643915][ T7729] ? __pfx_task_work_run+0x10/0x10 [ 194.643959][ T7729] ? __pfx___do_sys_close_range+0x10/0x10 [ 194.643996][ T7729] exit_to_user_mode_loop+0xec/0x130 [ 194.644040][ T7729] do_syscall_64+0x426/0xfa0 [ 194.644077][ T7729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.644105][ T7729] RIP: 0033:0x7f801998f6c9 [ 194.644126][ T7729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.644151][ T7729] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 194.644176][ T7729] RAX: 0000000000000000 RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 194.644192][ T7729] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 194.644208][ T7729] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 194.644224][ T7729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.644240][ T7729] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 194.644276][ T7729] [ 194.644350][ T7729] Mem-Info: [ 195.012190][ T7729] active_anon:44298 inactive_anon:1 isolated_anon:0 [ 195.012190][ T7729] active_file:16159 inactive_file:40094 isolated_file:0 [ 195.012190][ T7729] unevictable:768 dirty:577 writeback:0 [ 195.012190][ T7729] slab_reclaimable:10498 slab_unreclaimable:91495 [ 195.012190][ T7729] mapped:37203 shmem:39216 pagetables:1601 [ 195.012190][ T7729] sec_pagetables:0 bounce:0 [ 195.012190][ T7729] kernel_misc_reclaimable:0 [ 195.012190][ T7729] free:1292323 free_pcp:16131 free_cma:0 [ 195.123216][ T7729] Node 0 active_anon:180368kB inactive_anon:4kB active_file:64636kB inactive_file:160240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139108kB dirty:2308kB writeback:0kB shmem:158368kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11804kB pagetables:6252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.186294][ T7729] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 195.275914][ T7729] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.352120][ T7729] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 195.362120][ T7729] Node 0 DMA32 free:1260328kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:187780kB inactive_anon:4kB active_file:64636kB inactive_file:160240kB unevictable:1536kB writepending:2384kB zspages:20kB present:3129332kB managed:2545088kB mlocked:0kB bounce:0kB free_pcp:37768kB local_pcp:29440kB free_cma:0kB [ 195.420749][ T7741] netlink: 302 bytes leftover after parsing attributes in process `syz.0.567'. [ 195.434292][ T7729] lowmem_reserve[]: 0 0 1 1 1 [ 195.439304][ T7729] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.471950][ T7729] lowmem_reserve[]: 0 0 0 0 0 [ 195.476808][ T7729] Node 1 Normal free:3888640kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21644kB local_pcp:11700kB free_cma:0kB [ 195.519547][ T7729] lowmem_reserve[]: 0 0 0 0 0 [ 195.530216][ T7729] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 195.567046][ T7729] Node 0 DMA32: 740*4kB (U) 97*8kB (UM) 40*16kB (U) 2*32kB (UE) 83*64kB (UE) 34*128kB (UE) 21*256kB (U) 12*512kB (UM) 6*1024kB (UE) 1*2048kB (U) 299*4096kB (UM) = 1258520kB [ 195.622096][ T7729] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 195.642098][ T7729] Node 1 Normal: 183*4kB (UME) 45*8kB (UME) 13*16kB (UME) 67*32kB (UME) 21*64kB (UME) 3*128kB (ME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3888692kB [ 195.685195][ T7729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.695206][ T7729] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.706265][ T7729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 195.722043][ T7729] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 195.738381][ T7729] 99983 total pagecache pages [ 195.743536][ T7729] 4 pages in swap cache [ 195.752282][ T7729] Free swap = 124996kB [ 195.762943][ T7729] Total swap = 124996kB [ 195.779344][ T7729] 2097051 pages RAM [ 195.784535][ T7729] 0 pages HighMem/MovableOnly [ 195.789254][ T7729] 428689 pages reserved [ 195.817015][ T7729] 0 pages cma reserved [ 196.169153][ T7750] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[7750] [ 200.106754][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 200.342189][ T5833] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 200.842344][ T7811] zswap: compressor not available [ 203.446898][ T7854] serio: Serial port pty6 [ 204.706545][ T7868] sp0: Synchronizing with TNC [ 204.747728][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.747817][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.873296][ T7872] sp0: Synchronizing with TNC [ 205.073864][ T7878] FAULT_INJECTION: forcing a failure. [ 205.073864][ T7878] name failslab, interval 1, probability 0, space 0, times 0 [ 205.092045][ T7878] CPU: 1 UID: 0 PID: 7878 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(full) [ 205.092087][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.092105][ T7878] Call Trace: [ 205.092144][ T7878] [ 205.092157][ T7878] dump_stack_lvl+0x16c/0x1f0 [ 205.092201][ T7878] should_fail_ex+0x512/0x640 [ 205.092252][ T7878] ? __kmalloc_cache_noprof+0x5f/0x780 [ 205.092311][ T7878] should_failslab+0xc2/0x120 [ 205.092357][ T7878] __kmalloc_cache_noprof+0x72/0x780 [ 205.092410][ T7878] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.092455][ T7878] ? vim2m_open+0xad/0x890 [ 205.092503][ T7878] ? vim2m_open+0xad/0x890 [ 205.092541][ T7878] vim2m_open+0xad/0x890 [ 205.092586][ T7878] v4l2_open+0x1d2/0x5e0 [ 205.092621][ T7878] ? __pfx_v4l2_open+0x10/0x10 [ 205.092654][ T7878] chrdev_open+0x234/0x6a0 [ 205.092690][ T7878] ? __pfx_apparmor_file_open+0x10/0x10 [ 205.092738][ T7878] ? __pfx_chrdev_open+0x10/0x10 [ 205.092780][ T7878] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 205.092826][ T7878] do_dentry_open+0x982/0x1530 [ 205.092865][ T7878] ? __pfx_chrdev_open+0x10/0x10 [ 205.092912][ T7878] vfs_open+0x82/0x3f0 [ 205.092965][ T7878] path_openat+0x1de4/0x2cb0 [ 205.093015][ T7878] ? __pfx_path_openat+0x10/0x10 [ 205.093054][ T7878] ? __lock_acquire+0xb8a/0x1c90 [ 205.093105][ T7878] do_filp_open+0x20b/0x470 [ 205.093153][ T7878] ? __pfx_do_filp_open+0x10/0x10 [ 205.093222][ T7878] ? alloc_fd+0x471/0x7d0 [ 205.093266][ T7878] do_sys_openat2+0x11b/0x1d0 [ 205.093311][ T7878] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.093374][ T7878] __x64_sys_openat+0x174/0x210 [ 205.093422][ T7878] ? __pfx___x64_sys_openat+0x10/0x10 [ 205.093487][ T7878] do_syscall_64+0xcd/0xfa0 [ 205.093530][ T7878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.093562][ T7878] RIP: 0033:0x7f801998f6c9 [ 205.093587][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.093617][ T7878] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 205.093648][ T7878] RAX: ffffffffffffffda RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 205.093669][ T7878] RDX: 000000000002aa81 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 205.093689][ T7878] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.093708][ T7878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.093727][ T7878] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 205.093772][ T7878] [ 205.095458][ T7881] FAULT_INJECTION: forcing a failure. [ 205.095458][ T7881] name failslab, interval 1, probability 0, space 0, times 0 [ 205.363129][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz.3.606 Not tainted syzkaller #0 PREEMPT(full) [ 205.363181][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.363200][ T7881] Call Trace: [ 205.363211][ T7881] [ 205.363223][ T7881] dump_stack_lvl+0x16c/0x1f0 [ 205.363267][ T7881] should_fail_ex+0x512/0x640 [ 205.363315][ T7881] ? __kmalloc_cache_noprof+0x5f/0x780 [ 205.363374][ T7881] should_failslab+0xc2/0x120 [ 205.363417][ T7881] __kmalloc_cache_noprof+0x72/0x780 [ 205.363480][ T7881] ? find_held_lock+0x2b/0x80 [ 205.363510][ T7881] ? uevent_net_init+0xd3/0x350 [ 205.363560][ T7881] ? uevent_net_init+0xd3/0x350 [ 205.363604][ T7881] uevent_net_init+0xd3/0x350 [ 205.363649][ T7881] ? __pfx_uevent_net_init+0x10/0x10 [ 205.363693][ T7881] ? rcu_is_watching+0x12/0xc0 [ 205.363725][ T7881] ? __pfx_uevent_net_rcv+0x10/0x10 [ 205.363771][ T7881] ? ops_init+0x77/0x5f0 [ 205.363807][ T7881] ? __pfx_uevent_net_init+0x10/0x10 [ 205.363849][ T7881] ops_init+0x1e2/0x5f0 [ 205.363886][ T7881] setup_net+0x100/0x390 [ 205.363917][ T7881] ? __pfx_setup_net+0x10/0x10 [ 205.363950][ T7881] ? debug_mutex_init+0x37/0x70 [ 205.363986][ T7881] copy_net_ns+0x2f8/0x690 [ 205.364026][ T7881] create_new_namespaces+0x3ea/0xa90 [ 205.364072][ T7881] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 205.364151][ T7881] ksys_unshare+0x45b/0xa40 [ 205.364215][ T7881] ? __pfx_ksys_unshare+0x10/0x10 [ 205.364261][ T7881] ? xfd_validate_state+0x61/0x180 [ 205.364320][ T7881] __x64_sys_unshare+0x31/0x40 [ 205.364363][ T7881] do_syscall_64+0xcd/0xfa0 [ 205.364403][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.364435][ T7881] RIP: 0033:0x7f5af7b8f6c9 [ 205.364462][ T7881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.364493][ T7881] RSP: 002b:00007f5af8a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 205.364523][ T7881] RAX: ffffffffffffffda RBX: 00007f5af7de5fa0 RCX: 00007f5af7b8f6c9 [ 205.364545][ T7881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 205.364565][ T7881] RBP: 00007f5af7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.364585][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.364604][ T7881] R13: 00007f5af7de6038 R14: 00007f5af7de5fa0 R15: 00007ffca7244e38 [ 205.364650][ T7881] [ 206.346358][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 208.301916][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 208.552839][ T7945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.744511][ T7977] netlink: 5 bytes leftover after parsing attributes in process `syz.0.632'. [ 209.753642][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 211.106626][ T7990] Process accounting resumed [ 213.793388][ T8048] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 217.103580][ T8109] netlink: 25 bytes leftover after parsing attributes in process `syz.0.665'. [ 217.299857][ T8120] tipc: Started in network mode [ 217.308761][ T8120] tipc: Node identity ee00, cluster identity 4711 [ 217.318877][ T8120] tipc: Node number set to 60928 [ 218.990364][ T8154] syz.1.678 uses obsolete (PF_INET,SOCK_PACKET) [ 219.954376][ T8170] binder: 8167:8170 unknown command 0 [ 220.004423][ T8170] binder: 8167:8170 ioctl c0306201 2000000000c0 returned -22 [ 220.026474][ T8165] zswap: compressor not available [ 220.806730][ T8183] FAULT_INJECTION: forcing a failure. [ 220.806730][ T8183] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.840529][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.2.684 Not tainted syzkaller #0 PREEMPT(full) [ 220.840571][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.840589][ T8183] Call Trace: [ 220.840600][ T8183] [ 220.840625][ T8183] dump_stack_lvl+0x16c/0x1f0 [ 220.840680][ T8183] should_fail_ex+0x512/0x640 [ 220.840739][ T8183] should_fail_alloc_page+0xe7/0x130 [ 220.840782][ T8183] prepare_alloc_pages+0x3c2/0x610 [ 220.840822][ T8183] ? rcu_is_watching+0x12/0xc0 [ 220.840859][ T8183] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 220.840896][ T8183] ? rcu_is_watching+0x12/0xc0 [ 220.840933][ T8183] ? trace_mm_page_alloc+0x11f/0x1a0 [ 220.840975][ T8183] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 220.841004][ T8183] ? mark_held_locks+0x49/0x80 [ 220.841044][ T8183] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 220.841076][ T8183] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.841110][ T8183] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 220.841147][ T8183] ? stack_depot_save_flags+0x3de/0x9c0 [ 220.841211][ T8183] ? __kasan_save_free_info+0x3b/0x60 [ 220.841259][ T8183] ? kmem_cache_free+0x2d4/0x6c0 [ 220.841292][ T8183] ? __get_vm_area_node+0x1ca/0x330 [ 220.841329][ T8183] ? __vmalloc_node_range_noprof+0x271/0x1480 [ 220.841370][ T8183] ? __vmalloc_node_noprof+0xad/0xf0 [ 220.841411][ T8183] ? __snd_dma_alloc_pages+0x53/0x90 [ 220.841438][ T8183] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 220.841463][ T8183] ? do_alloc_pages+0x136/0x2d0 [ 220.841505][ T8183] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 220.841555][ T8183] ? snd_pcm_oss_release+0x28b/0x310 [ 220.841613][ T8183] ? __fput+0x402/0xb70 [ 220.841650][ T8183] ? task_work_run+0x150/0x240 [ 220.841698][ T8183] ? exit_to_user_mode_loop+0xec/0x130 [ 220.841764][ T8183] alloc_pages_bulk_noprof+0x71c/0x1410 [ 220.841802][ T8183] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.841858][ T8183] ? policy_nodemask+0xea/0x4e0 [ 220.841907][ T8183] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 220.841947][ T8183] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 220.842008][ T8183] kasan_populate_vmalloc+0x112/0x2d0 [ 220.842042][ T8183] ? alloc_vmap_area+0x8b5/0x29e0 [ 220.842089][ T8183] alloc_vmap_area+0x960/0x29e0 [ 220.842145][ T8183] ? __pfx_alloc_vmap_area+0x10/0x10 [ 220.842197][ T8183] __get_vm_area_node+0x1ca/0x330 [ 220.842249][ T8183] __vmalloc_node_range_noprof+0x271/0x1480 [ 220.842298][ T8183] ? __snd_dma_alloc_pages+0x53/0x90 [ 220.842333][ T8183] ? __pfx___mutex_trylock_common+0x10/0x10 [ 220.842381][ T8183] ? __snd_dma_alloc_pages+0x53/0x90 [ 220.842410][ T8183] ? rcu_is_watching+0x12/0xc0 [ 220.842443][ T8183] ? trace_contention_end+0xdd/0x130 [ 220.842493][ T8183] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.842548][ T8183] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 220.842595][ T8183] ? __snd_dma_alloc_pages+0x53/0x90 [ 220.842623][ T8183] __vmalloc_node_noprof+0xad/0xf0 [ 220.842669][ T8183] ? __snd_dma_alloc_pages+0x53/0x90 [ 220.842698][ T8183] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 220.842758][ T8183] __snd_dma_alloc_pages+0x53/0x90 [ 220.842789][ T8183] snd_dma_alloc_dir_pages+0x151/0x240 [ 220.842825][ T8183] do_alloc_pages+0x136/0x2d0 [ 220.842898][ T8183] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 220.842962][ T8183] snd_pcm_hw_params+0x1656/0x1ba0 [ 220.843030][ T8183] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 220.843078][ T8183] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 220.843125][ T8183] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 220.843176][ T8183] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 220.843221][ T8183] ? __asan_memset+0x23/0x50 [ 220.843262][ T8183] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 220.843319][ T8183] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 220.843385][ T8183] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 220.843466][ T8183] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 220.843516][ T8183] snd_pcm_oss_sync+0x32e/0x840 [ 220.843564][ T8183] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 220.843609][ T8183] snd_pcm_oss_release+0x28b/0x310 [ 220.843656][ T8183] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 220.843699][ T8183] __fput+0x402/0xb70 [ 220.843768][ T8183] task_work_run+0x150/0x240 [ 220.843824][ T8183] ? __pfx_task_work_run+0x10/0x10 [ 220.843878][ T8183] ? __pfx___do_sys_close_range+0x10/0x10 [ 220.843924][ T8183] exit_to_user_mode_loop+0xec/0x130 [ 220.843976][ T8183] do_syscall_64+0x426/0xfa0 [ 220.844016][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.844049][ T8183] RIP: 0033:0x7f801998f6c9 [ 220.844075][ T8183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.844107][ T8183] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 220.844138][ T8183] RAX: 0000000000000000 RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 220.844158][ T8183] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 220.844189][ T8183] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.844208][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.844226][ T8183] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 220.844268][ T8183] [ 221.465058][ T8183] syz.2.684: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 221.550014][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.2.684 Not tainted syzkaller #0 PREEMPT(full) [ 221.550058][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.550078][ T8183] Call Trace: [ 221.550089][ T8183] [ 221.550101][ T8183] dump_stack_lvl+0x16c/0x1f0 [ 221.550147][ T8183] warn_alloc+0x248/0x3a0 [ 221.550183][ T8183] ? __pfx_warn_alloc+0x10/0x10 [ 221.550218][ T8183] ? __get_vm_area_node+0x2cd/0x330 [ 221.550268][ T8183] ? __get_vm_area_node+0x2cd/0x330 [ 221.550310][ T8183] ? __get_vm_area_node+0x1dc/0x330 [ 221.550351][ T8183] ? __get_vm_area_node+0x208/0x330 [ 221.550401][ T8183] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 221.550458][ T8183] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.550508][ T8183] ? __snd_dma_alloc_pages+0x53/0x90 [ 221.550539][ T8183] ? rcu_is_watching+0x12/0xc0 [ 221.550570][ T8183] ? trace_contention_end+0xdd/0x130 [ 221.550618][ T8183] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.550672][ T8183] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 221.550731][ T8183] ? __snd_dma_alloc_pages+0x53/0x90 [ 221.550759][ T8183] __vmalloc_node_noprof+0xad/0xf0 [ 221.550805][ T8183] ? __snd_dma_alloc_pages+0x53/0x90 [ 221.550834][ T8183] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 221.550870][ T8183] __snd_dma_alloc_pages+0x53/0x90 [ 221.550900][ T8183] snd_dma_alloc_dir_pages+0x151/0x240 [ 221.550935][ T8183] do_alloc_pages+0x136/0x2d0 [ 221.550993][ T8183] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 221.551051][ T8183] snd_pcm_hw_params+0x1656/0x1ba0 [ 221.551110][ T8183] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 221.551160][ T8183] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 221.551206][ T8183] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 221.551257][ T8183] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 221.551303][ T8183] ? __asan_memset+0x23/0x50 [ 221.551340][ T8183] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 221.551395][ T8183] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 221.551461][ T8183] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 221.551542][ T8183] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 221.551589][ T8183] snd_pcm_oss_sync+0x32e/0x840 [ 221.551642][ T8183] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 221.551695][ T8183] snd_pcm_oss_release+0x28b/0x310 [ 221.551744][ T8183] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 221.551785][ T8183] __fput+0x402/0xb70 [ 221.551840][ T8183] task_work_run+0x150/0x240 [ 221.551893][ T8183] ? __pfx_task_work_run+0x10/0x10 [ 221.551948][ T8183] ? __pfx___do_sys_close_range+0x10/0x10 [ 221.551991][ T8183] exit_to_user_mode_loop+0xec/0x130 [ 221.552041][ T8183] do_syscall_64+0x426/0xfa0 [ 221.552082][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.552113][ T8183] RIP: 0033:0x7f801998f6c9 [ 221.552139][ T8183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.552170][ T8183] RSP: 002b:00007f801a828038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 221.552202][ T8183] RAX: 0000000000000000 RBX: 00007f8019be5fa0 RCX: 00007f801998f6c9 [ 221.552222][ T8183] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 221.552242][ T8183] RBP: 00007f8019a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 221.552262][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.552281][ T8183] R13: 00007f8019be6038 R14: 00007f8019be5fa0 R15: 00007fff85acce58 [ 221.552325][ T8183] [ 222.062054][ T8183] Mem-Info: [ 222.065260][ T8183] active_anon:22320 inactive_anon:0 isolated_anon:19 [ 222.065260][ T8183] active_file:15874 inactive_file:73307 isolated_file:0 [ 222.065260][ T8183] unevictable:784 dirty:498 writeback:0 [ 222.065260][ T8183] slab_reclaimable:10929 slab_unreclaimable:91509 [ 222.065260][ T8183] mapped:28143 shmem:13363 pagetables:1520 [ 222.065260][ T8183] sec_pagetables:0 bounce:0 [ 222.065260][ T8183] kernel_misc_reclaimable:0 [ 222.065260][ T8183] free:1274316 free_pcp:22800 free_cma:0 [ 222.198250][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 222.205391][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 222.211835][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 222.219164][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 222.412083][ T8183] Node 0 active_anon:79720kB inactive_anon:0kB active_file:63484kB inactive_file:293116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107156kB dirty:1960kB writeback:0kB shmem:46088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11904kB pagetables:5836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.572695][ T8183] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.621365][ T8183] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.702213][ T8183] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 222.726176][ T8183] Node 0 DMA32 free:1202732kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80820kB inactive_anon:0kB active_file:63484kB inactive_file:293116kB unevictable:1536kB writepending:1960kB zspages:216kB present:3129332kB managed:2545088kB mlocked:0kB bounce:0kB free_pcp:67968kB local_pcp:34448kB free_cma:0kB [ 222.810123][ T8183] lowmem_reserve[]: 0 0 1 1 1 [ 222.815063][ T8183] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.858576][ T8183] lowmem_reserve[]: 0 0 0 0 0 [ 222.863568][ T8183] Node 1 Normal free:3890768kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19560kB local_pcp:7924kB free_cma:0kB [ 222.897758][ T8183] lowmem_reserve[]: 0 0 0 0 0 [ 222.957244][ T8183] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 222.985119][ T8183] Node 0 DMA32: 382*4kB (UME) 136*8kB (UME) 74*16kB (ME) 321*32kB (UME) 39*64kB (UME) 75*128kB (UME) 120*256kB (UME) 50*512kB (UME) 34*1024kB (M) 10*2048kB (UME) 260*4096kB (M) = 1202744kB [ 223.007786][ T8183] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 223.088162][ T8183] Node 1 Normal: 114*4kB (UME) 45*8kB (UME) 26*16kB (UME) 78*32kB (UME) 23*64kB (UME) 4*128kB (ME) 6*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3890768kB [ 223.232028][ T8183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.241647][ T8183] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.362264][ T8183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.371882][ T8183] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.453846][ T8183] 96413 total pagecache pages [ 223.458590][ T8183] 27 pages in swap cache [ 223.470171][ T8183] Free swap = 121888kB [ 223.475104][ T8183] Total swap = 124996kB [ 223.479305][ T8183] 2097051 pages RAM [ 223.483914][ T8183] 0 pages HighMem/MovableOnly [ 223.488765][ T8183] 428689 pages reserved [ 223.493503][ T8183] 0 pages cma reserved [ 223.514042][ T8208] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[8208] [ 223.986853][ T8225] netlink: 330 bytes leftover after parsing attributes in process `syz.3.695'. [ 223.996131][ T8225] : renamed from vlan0 (while UP) [ 224.015773][ T8225] : entered allmulticast mode [ 224.020602][ T8225] veth0_vlan: entered allmulticast mode [ 225.310256][ T8248] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[8248] [ 225.491215][ T8257] netlink: 25 bytes leftover after parsing attributes in process `syz.3.705'. [ 225.668839][ T8259] program syz.3.706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.445591][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 230.353438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.366627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.379138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.392455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.406107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.418658][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.431153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.444812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.457367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.469866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.967372][ T8330] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 235.362637][ C1] net_ratelimit: 6327 callbacks suppressed [ 235.362668][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.381110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.393523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.407068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.419616][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.432120][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.445788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.458355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.470861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 235.476916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 240.372021][ C0] net_ratelimit: 15457 callbacks suppressed [ 240.372045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 240.372432][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.378619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 240.390469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.402721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 240.415929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.426601][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 240.438613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.450655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 240.462392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.534521][ C1] sched: DL replenish lagged too much [ 245.382196][ C0] net_ratelimit: 15706 callbacks suppressed [ 245.382222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 245.383482][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.388753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 245.400929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.412956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 245.424842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.436968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 245.450217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.460872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 245.472945][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.392245][ C0] net_ratelimit: 15799 callbacks suppressed [ 250.392289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 250.392777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.398759][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 250.410863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.422717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 250.434624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.446690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 250.460449][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.470691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 250.482744][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.401996][ C0] net_ratelimit: 15789 callbacks suppressed [ 255.402020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 255.403187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.408509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 255.420793][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.433141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 255.444569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.456613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 255.470018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.480544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 255.492594][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.412110][ C0] net_ratelimit: 14243 callbacks suppressed [ 260.412140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 260.413117][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.418645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 260.431444][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.442833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 260.454677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.466842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 260.480030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.490791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 260.502764][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.422029][ C0] net_ratelimit: 14181 callbacks suppressed [ 265.422056][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 265.422128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.428568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 265.441714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.452484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 265.464547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.476449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 265.488320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.500461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 265.513708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.432241][ C0] net_ratelimit: 14082 callbacks suppressed [ 270.432268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 270.432389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.438916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 270.450699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.462857][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 270.476034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.486862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 270.498920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.510822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 270.522814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.442106][ C0] net_ratelimit: 14153 callbacks suppressed [ 275.442113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.442131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 275.442728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 275.448652][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.460618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 275.472394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.484557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 275.497744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.508524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 275.520562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.452116][ C0] net_ratelimit: 14072 callbacks suppressed [ 280.452142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 280.453477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.458676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 280.470737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.482720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 280.494545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.506629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 280.519872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.530591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 280.542631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.462110][ C0] net_ratelimit: 13933 callbacks suppressed [ 285.462138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 285.463216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.468681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 285.480707][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.492598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 285.504479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.516614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 285.529885][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.540570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 285.552632][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.472097][ C0] net_ratelimit: 13972 callbacks suppressed [ 290.472122][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 290.472338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.478716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 290.490818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.502705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 290.514583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.526720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 290.539896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.550668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 290.562753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.482380][ C0] net_ratelimit: 14126 callbacks suppressed [ 295.482406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 295.482416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.483007][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.488895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 295.500819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.512890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 295.526111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.536951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 295.548921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.560915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 300.492169][ C0] net_ratelimit: 14055 callbacks suppressed [ 300.492196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 300.493325][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.498745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 300.510759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.522803][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 300.534730][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.546836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 300.560005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.570967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 300.583030][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.502102][ C0] net_ratelimit: 14048 callbacks suppressed [ 305.502131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 305.502173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.508644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 305.520517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.532664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 305.545863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.556680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 305.568720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.580625][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 305.592554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.511984][ C0] net_ratelimit: 14048 callbacks suppressed [ 310.512011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 310.512224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.518589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 310.532501][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.542630][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 310.554674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.566646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 310.578508][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.590784][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 310.603861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.522066][ C0] net_ratelimit: 14051 callbacks suppressed [ 315.522092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 315.523346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.528581][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 315.540685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.552588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 315.564401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.576537][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 315.589717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.600467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 315.612513][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.531922][ C0] net_ratelimit: 14013 callbacks suppressed [ 320.531946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 320.531959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.533641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.538467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 320.550530][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.562466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 320.574256][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.586512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 320.600121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.610548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 325.541940][ C0] net_ratelimit: 14073 callbacks suppressed [ 325.541967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 325.542074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.548484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 325.561685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.572535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 325.584471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.596371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 325.608261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.620387][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 325.633691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.552078][ C0] net_ratelimit: 14089 callbacks suppressed [ 330.552103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 330.552168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.558586][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 330.570780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.582663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 330.594562][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.606682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 330.619765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.630627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 330.642694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.562065][ C0] net_ratelimit: 14112 callbacks suppressed [ 335.562091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 335.562188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.568579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 335.580477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.592702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 335.605806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.616548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 335.628624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.640465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 335.652326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.572438][ C0] net_ratelimit: 14070 callbacks suppressed [ 340.572465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 340.572469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.573057][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.578994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 340.590919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.602927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 340.616130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.626956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 340.638918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.650951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 341.781903][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 341.788934][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5830/1:b..l [ 341.797166][ C1] rcu: (detected by 1, t=10502 jiffies, g=28021, q=535 ncpus=2) [ 341.804924][ C1] task:syz-executor state:R running task stack:23256 pid:5830 tgid:5830 ppid:5826 task_flags:0x400140 flags:0x00080001 [ 341.819322][ C1] Call Trace: [ 341.822630][ C1] [ 341.825593][ C1] __schedule+0x1190/0x5de0 [ 341.830172][ C1] ? look_up_lock_class+0x59/0x150 [ 341.835338][ C1] ? register_lock_class+0x41/0x4c0 [ 341.840616][ C1] ? __pfx___schedule+0x10/0x10 [ 341.845504][ C1] ? page_table_check_set+0x627/0x750 [ 341.850904][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 341.855959][ C1] ? find_held_lock+0x2b/0x80 [ 341.860711][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 341.866166][ C1] preempt_schedule_common+0x44/0xc0 [ 341.871511][ C1] preempt_schedule_thunk+0x16/0x30 [ 341.876766][ C1] _raw_spin_unlock+0x3e/0x50 [ 341.881479][ C1] copy_page_range+0x1c3e/0x6930 [ 341.886524][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 341.891874][ C1] ? __pfx___might_resched+0x10/0x10 [ 341.897193][ C1] ? __pfx_mas_store+0x10/0x10 [ 341.902014][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 341.907274][ C1] ? dup_mmap+0xe30/0x2280 [ 341.911741][ C1] ? down_write+0x14d/0x200 [ 341.916321][ C1] ? up_write+0x1b2/0x520 [ 341.920708][ C1] dup_mmap+0xe80/0x2280 [ 341.925047][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 341.929798][ C1] copy_process+0x3f0c/0x76a0 [ 341.934521][ C1] ? do_wp_page+0x1c59/0x52b0 [ 341.939296][ C1] ? __pfx_copy_process+0x10/0x10 [ 341.944360][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 341.949437][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.954854][ C1] kernel_clone+0xfc/0x930 [ 341.959321][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 341.964401][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 341.969907][ C1] __do_sys_clone+0xce/0x120 [ 341.974547][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 341.979788][ C1] ? handle_mm_fault+0x2ab/0xd10 [ 341.984802][ C1] ? do_user_addr_fault+0x843/0x1370 [ 341.990130][ C1] do_syscall_64+0xcd/0xfa0 [ 341.994660][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.000675][ C1] RIP: 0033:0x7f8019985e13 [ 342.005133][ C1] RSP: 002b:00007fff85acd0d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 342.013581][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8019985e13 [ 342.021578][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 342.029585][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 342.037590][ C1] R10: 000055557d1de7d0 R11: 0000000000000246 R12: 0000000000000000 [ 342.045590][ C1] R13: 000000000000005f R14: 0000000000038a89 R15: 00007fff85acd270 [ 342.053596][ C1] [ 342.056647][ C1] rcu: rcu_preempt kthread starved for 8650 jiffies! g28021 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 342.067778][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 342.077766][ C1] rcu: RCU grace-period kthread stack dump: [ 342.083669][ C1] task:rcu_preempt state:R running task stack:28552 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 342.097231][ C1] Call Trace: [ 342.100538][ C1] [ 342.103507][ C1] __schedule+0x1190/0x5de0 [ 342.108051][ C1] ? __lock_acquire+0x622/0x1c90 [ 342.113039][ C1] ? __pfx___schedule+0x10/0x10 [ 342.117955][ C1] ? find_held_lock+0x2b/0x80 [ 342.122670][ C1] ? schedule+0x2d7/0x3a0 [ 342.127033][ C1] schedule+0xe7/0x3a0 [ 342.131134][ C1] schedule_timeout+0x123/0x290 [ 342.136041][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 342.141460][ C1] ? __pfx_process_timeout+0x10/0x10 [ 342.146785][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 342.152650][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 342.158168][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 342.162991][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 342.168322][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.173569][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 342.178555][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 342.183484][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.189333][ C1] rcu_gp_kthread+0x26d/0x380 [ 342.194042][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 342.199329][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.204132][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 342.209380][ C1] ? __kthread_parkme+0x19e/0x250 [ 342.214460][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 342.219711][ C1] kthread+0x3c5/0x780 [ 342.223830][ C1] ? __pfx_kthread+0x10/0x10 [ 342.228478][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.233292][ C1] ? __pfx_kthread+0x10/0x10 [ 342.237994][ C1] ret_from_fork+0x675/0x7d0 [ 342.242636][ C1] ? __pfx_kthread+0x10/0x10 [ 342.247284][ C1] ret_from_fork_asm+0x1a/0x30 [ 342.252102][ C1] [ 342.255149][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 342.261512][ C1] Sending NMI from CPU 1 to CPUs 0: [ 342.266774][ C0] NMI backtrace for cpu 0 [ 342.266798][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 342.266827][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.266843][ C0] RIP: 0010:lock_acquire+0x1a1/0x350 [ 342.266888][ C0] Code: ff ff 48 c7 c7 45 2a a0 8d 48 83 c4 28 e8 d7 14 c5 09 b8 ff ff ff ff 65 0f c1 05 42 0b 09 12 83 f8 01 0f 85 6a 01 00 00 9c 58 c4 02 0f 85 7f 01 00 00 48 83 3c 24 00 0f 84 ad fe ff ff fb e9 [ 342.266913][ C0] RSP: 0018:ffffc90000006bf0 EFLAGS: 00000046 [ 342.266934][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c45e0 RCX: 000000007938eb5a [ 342.266951][ C0] RDX: 0000000000000000 RSI: ffffffff8da02a45 RDI: ffffffff8bf075c0 [ 342.266968][ C0] RBP: 0000000000000002 R08: 39529a686290c103 R09: 0000000000000000 [ 342.266984][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 342.266999][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.267015][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 342.267039][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.267056][ C0] CR2: 00007ffe072d265c CR3: 00000000781c8000 CR4: 00000000003526f0 [ 342.267073][ C0] Call Trace: [ 342.267080][ C0] [ 342.267090][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 342.267119][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 342.267152][ C0] unwind_next_frame+0xd1/0x20a0 [ 342.267177][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 342.267203][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 342.267252][ C0] ? kasan_save_stack+0x42/0x60 [ 342.267282][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 342.267314][ C0] arch_stack_walk+0x94/0x100 [ 342.267343][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 342.267385][ C0] stack_trace_save+0x8e/0xc0 [ 342.267414][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 342.267446][ C0] ? lock_acquire+0x179/0x350 [ 342.267481][ C0] kasan_save_stack+0x33/0x60 [ 342.267510][ C0] ? kasan_save_stack+0x33/0x60 [ 342.267537][ C0] ? kasan_save_track+0x14/0x30 [ 342.267566][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 342.267597][ C0] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 342.267622][ C0] ? skb_ext_add+0xf8/0x7b0 [ 342.267653][ C0] ? br_nf_forward_ip.part.0+0x28/0x810 [ 342.267685][ C0] ? br_nf_forward+0xf0f/0x1be0 [ 342.267714][ C0] ? nf_hook_slow+0xbe/0x200 [ 342.267753][ C0] ? nf_hook+0x45e/0x780 [ 342.267775][ C0] ? __br_forward+0x1be/0x5b0 [ 342.267797][ C0] ? maybe_deliver+0xf1/0x180 [ 342.267819][ C0] ? br_flood+0x17c/0x650 [ 342.267841][ C0] ? br_handle_frame_finish+0x1117/0x1f00 [ 342.267871][ C0] ? br_nf_hook_thresh+0x307/0x410 [ 342.267901][ C0] ? br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 342.267933][ C0] ? br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 342.267964][ C0] ? br_nf_pre_routing+0x860/0x15b0 [ 342.267994][ C0] ? br_handle_frame+0xb28/0x14e0 [ 342.268023][ C0] ? __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 342.268063][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 342.268123][ C0] kasan_save_track+0x14/0x30 [ 342.268152][ C0] __kasan_slab_alloc+0x89/0x90 [ 342.268185][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 342.268211][ C0] ? skb_ext_add+0xf8/0x7b0 [ 342.268250][ C0] ? skb_ext_add+0xf8/0x7b0 [ 342.268281][ C0] skb_ext_add+0xf8/0x7b0 [ 342.268313][ C0] ? find_held_lock+0x2b/0x80 [ 342.268341][ C0] br_nf_forward_ip.part.0+0x28/0x810 [ 342.268376][ C0] br_nf_forward+0xf0f/0x1be0 [ 342.268407][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 342.268437][ C0] nf_hook_slow+0xbe/0x200 [ 342.268479][ C0] nf_hook+0x45e/0x780 [ 342.268501][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 342.268527][ C0] ? __pfx_nf_hook+0x10/0x10 [ 342.268552][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 342.268582][ C0] __br_forward+0x1be/0x5b0 [ 342.268606][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 342.268632][ C0] maybe_deliver+0xf1/0x180 [ 342.268658][ C0] br_flood+0x17c/0x650 [ 342.268687][ C0] br_handle_frame_finish+0x1117/0x1f00 [ 342.268720][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 342.268758][ C0] ? ip6t_do_table+0xc25/0x1c30 [ 342.268797][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 342.268835][ C0] ? nf_hook_slow+0x132/0x200 [ 342.268877][ C0] br_nf_hook_thresh+0x307/0x410 [ 342.268906][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 342.268940][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 342.268973][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 342.269005][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 342.269040][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.269082][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.269127][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfc0 [ 342.269160][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 342.269195][ C0] br_nf_pre_routing_ipv6+0x3cd/0x8c0 [ 342.269228][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 342.269264][ C0] ? lock_acquire+0x179/0x350 [ 342.269300][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 342.269334][ C0] ? net_generic+0xea/0x2a0 [ 342.269364][ C0] br_nf_pre_routing+0x860/0x15b0 [ 342.269398][ C0] br_handle_frame+0xb28/0x14e0 [ 342.269430][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 342.269463][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 342.269498][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 342.269527][ C0] __netif_receive_skb_core.constprop.0+0xa25/0x4bd0 [ 342.269568][ C0] ? kasan_quarantine_put+0xf0/0x240 [ 342.269601][ C0] ? kmem_cache_free+0x2d4/0x6c0 [ 342.269627][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 342.269661][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 342.269704][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 342.269734][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 342.269765][ C0] ? sk_skb_reason_drop+0x136/0x1a0 [ 342.269793][ C0] ? ip6_mc_input+0x515/0xf60 [ 342.269836][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 342.269881][ C0] ? __lock_acquire+0x622/0x1c90 [ 342.269917][ C0] ? process_backlog+0x3e7/0x15e0 [ 342.269954][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 342.269995][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 342.270036][ C0] ? lock_acquire+0x179/0x350 [ 342.270075][ C0] ? process_backlog+0x3e7/0x15e0 [ 342.270111][ C0] __netif_receive_skb+0x1d/0x160 [ 342.270149][ C0] process_backlog+0x439/0x15e0 [ 342.270192][ C0] __napi_poll.constprop.0+0xba/0x550 [ 342.270238][ C0] ? skb_defer_free_flush+0x149/0x280 [ 342.270268][ C0] net_rx_action+0x97f/0xef0 [ 342.270311][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 342.270353][ C0] ? tmigr_handle_remote+0x132/0x380 [ 342.270385][ C0] ? run_timer_base+0x121/0x190 [ 342.270420][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 342.270459][ C0] handle_softirqs+0x219/0x8e0 [ 342.270491][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 342.270524][ C0] __irq_exit_rcu+0x109/0x170 [ 342.270551][ C0] irq_exit_rcu+0x9/0x30 [ 342.270579][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 342.270608][ C0] [ 342.270616][ C0] [ 342.270625][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.270654][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 342.270684][ C0] Code: 97 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 b4 2c 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 342.270709][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 342.270727][ C0] RAX: 0000000000ad98c3 RBX: 0000000000000000 RCX: ffffffff8b5d72a9 [ 342.270744][ C0] RDX: 0000000000000000 RSI: ffffffff8da2838c RDI: ffffffff8bf075c0 [ 342.270761][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 342.270777][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 342.270793][ C0] R13: ffffffff8e097a00 R14: ffffffff908241d0 R15: 0000000000000000 [ 342.270815][ C0] ? ct_kernel_exit+0x139/0x190 [ 342.270851][ C0] default_idle+0x13/0x20 [ 342.270885][ C0] default_idle_call+0x6c/0xb0 [ 342.270920][ C0] do_idle+0x38d/0x500 [ 342.270946][ C0] ? __pfx_do_idle+0x10/0x10 [ 342.270969][ C0] ? find_held_lock+0x2b/0x80 [ 342.271001][ C0] cpu_startup_entry+0x4f/0x60 [ 342.271027][ C0] rest_init+0x16b/0x2b0 [ 342.271063][ C0] ? acpi_subsystem_init+0x133/0x180 [ 342.271100][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 342.271143][ C0] start_kernel+0x3f6/0x4e0 [ 342.271180][ C0] x86_64_start_reservations+0x18/0x30 [ 342.271219][ C0] x86_64_start_kernel+0x130/0x190 [ 342.271264][ C0] common_startup_64+0x13e/0x148 [ 342.271299][ C0] [ 345.581903][ C0] net_ratelimit: 11884 callbacks suppressed [ 345.582359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.587910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 345.600320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.612407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 345.625497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.636304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 345.648280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.660274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 345.672164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.684199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 350.405718][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.428174][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 350.591990][ C0] net_ratelimit: 15340 callbacks suppressed [ 350.592016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 350.592807][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.598543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 350.610708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.622515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 350.634494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.646517][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 350.659712][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.670410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:76:b2:9d:7d:ee:a7, vlan:0) [ 350.682510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)