last executing test programs: 18m47.1897551s ago: executing program 0 (id=5376): mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) r0 = socket(0x1, 0x1, 0x0) bind$auto(r0, 0x0, 0xe) connect$auto(0x3, 0x0, 0x54) 18m46.992563642s ago: executing program 0 (id=5378): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = getpid() process_vm_readv$auto(r0, 0x0, 0x1, 0x0, 0x6, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) 18m46.47186277s ago: executing program 0 (id=5382): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x1, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop1/queue/zone_append_max_bytes\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x6) write$auto(r0, 0x0, 0x1) 18m46.270313982s ago: executing program 0 (id=5383): mount$auto(0x0, 0x0, 0x0, 0x6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x7, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd15\x00', 0x0, 0x0) ioctl$auto_BLKSSZGET(r0, 0x1268, 0x0) 18m45.060789431s ago: executing program 0 (id=5388): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 18m44.827559188s ago: executing program 0 (id=5390): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x4000009f, 0x400, 0x9}]}) 18m29.634302002s ago: executing program 32 (id=5390): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x4000009f, 0x400, 0x9}]}) 1m52.559760779s ago: executing program 3 (id=8482): bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) userfaultfd$auto(0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x28, 0x1, 0x0) sendmsg$auto_SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x20008804) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000000000000, 0x7, 0x0, 0x5) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x1]}, 0x0) mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) 1m51.864400108s ago: executing program 3 (id=8485): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket(0xa, 0x1, 0x84) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8100, 0x0) socket(0x80000000000002d, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f00000001c0)=@can, 0xff) lsm_list_modules$auto(0x0, 0x0, 0x0) 1m50.793952321s ago: executing program 3 (id=8486): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) ustat$auto(0x801, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x201, 0x0) 1m49.803135645s ago: executing program 3 (id=8489): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, 0x0, 0xfffffffb) getsockopt$auto_SO_RCVMARK(r1, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000140)=0x2) 1m48.598026694s ago: executing program 3 (id=8494): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, 0x0, 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x64cf, 0x1df) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) getpid() setresuid$auto(0xffffffffffffffff, 0x0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1m47.067224701s ago: executing program 3 (id=8498): socket(0x2, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 1m31.661259698s ago: executing program 33 (id=8498): socket(0x2, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 23.503712725s ago: executing program 1 (id=8689): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x60240, 0x0) ioctl$auto_EVIOCGREP(r0, 0x80084503, 0x0) mmap$auto(0x0, 0xf569, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$auto(0x1e, 0x4, 0x8de9, 0x0) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x64, 0x0, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) unshare$auto(0x40000080) 21.077890607s ago: executing program 1 (id=8696): recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 20.276933308s ago: executing program 1 (id=8706): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='w', @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf25030000000800060002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0x400a507}, 0x800}, 0xa, 0x8) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) read$auto(0xffffffffffffffff, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r0, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 18.033936703s ago: executing program 1 (id=8701): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000140)=0x2) 16.352832139s ago: executing program 1 (id=8714): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop4\x00', 0xc040, 0x0) ioctl$auto(0x3, 0x1, 0x90000800000402) r0 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) getsockopt$auto_SO_BUF_LOCK(r0, 0x4, 0x48, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', &(0x7f0000000080)=0x2) unshare$auto(0x40000080) socket(0x11, 0x800, 0xfffff000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x25, 0x800, 0xc) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3a) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, 0x0, 0x24008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x2, 0x0, 0x1, 0x1) sendmsg$auto_NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf251300000005000f0009001d002b3ef8b0fdf9195984a638bfa774d959c9ed70dd906c8cd36d40f2e76fe6727fd929586d15a5b5a7e3b980592ecff2d4116bbe7a8e4b5138526f8ba8"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) listen$auto(0x3, 0x81) madvise$auto(0x0, 0xffffffffffff0005, 0x19) userfaultfd$auto(0x1) 15.279902805s ago: executing program 1 (id=8709): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x9, 0x7, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x5, 0x10000, 0x1ff, 0x5185}, 0x3ff) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) write$auto(0x1, 0x0, 0x100) 13.420461485s ago: executing program 4 (id=8715): socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_MM_START_BRK(0x200, 0x6, 0x0, 0x1ff, 0x3c0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_policy\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x48) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) getpriority$auto_PRIO_USER(0x2, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r3, 0x0, 0xfffffdef) 9.104892426s ago: executing program 4 (id=8721): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x5, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) pselect6$auto(0x9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffff00, 0x1}, 0x0) bpf$auto(0x2, 0x0, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x3f}, 0x8) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 7.066768383s ago: executing program 4 (id=8724): socket(0x2, 0x80002, 0x73) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x6, 0x0, 0x0, 0x0, 0x4000002) setfsuid$auto(0xee00) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) 5.806107845s ago: executing program 4 (id=8725): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 5.736697974s ago: executing program 5 (id=8726): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) fcntl$auto(0x0, 0x408, 0x100000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 5.635188384s ago: executing program 2 (id=8727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) r2 = io_uring_setup$auto(0x5, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) close_range$auto(0x2, r2, 0x0) acct$auto(&(0x7f0000000280)='/sys/devices/virtual/mtd/mtd0/size\x00') socket(0x2, 0x80000, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdc01, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x80000) 4.568189177s ago: executing program 5 (id=8728): getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(r0, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c040}, 0x10000040) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2404c800) 4.555204896s ago: executing program 2 (id=8729): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0xa, 0x2, 0x3a) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) fcntl$auto_F_SET_RW_HINT(r1, 0x40c, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) kexec_load$auto(0x5, 0x2, 0x0, 0x4) shmctl$auto_SHM_LOCK(0xff, 0xb, &(0x7f0000001200)={{0x6904dd38, 0xee00, 0xee01, 0x1, 0x84a00000, 0xff, 0x2}, 0x9, 0x48, 0x37, 0xffffffffffffffff, @inferred, @inferred, 0x7, 0x0, 0x0, &(0x7f0000000200)="f0b7a550b13fece41e08a776c9d9184e5dd0297e853ba51d3fb5ecab57c4a0c2ef0fd73d1416d864183d48b037e1ca87839d5211c3c8d49441a444ec6ae2021c54ad832233229d0cdeb4113d9b66449ad516d6d1f68f7cb87a6129ff512a3eb6aff25bba9427e0e924e47b272742f5ffcd60cf2138547387e5e5a69c089e64595f0a715693f22247bf4686a237f889290564194f13d12ce98eb5fd41da3882c034039082e36f857810e2e9753ee54d42514381fba67c21465de20e1333f3d62da12a8ddd0927550f90953df42455102801342df76b410a29fd0c4bc4ac51cd2659b6c6a142fb591211fb3e7c2d352536c8554b6bc7c0b116cffabf07ba25eb8bbe9d3db6c7658653b036cb133d3d9fb569568d5e9ff72aa579c6f1b648fc2b3ad8853f2fc8c6dfe84d2d74fc820e5b89d2053060e15829650849d0ef90ccdbee6c9e51513bcaf02d963b358844d9a4c558620611349b080e798da882cac92f7d738be2ee04a1d6304995cac5f63e484cfe225c3a8635692fbe96a9ed35d8d94d7f27661a6f45553f0a6bbc3ee137fcc618b553fac0708a2a62fc0a99b25c241b478689ea60cc9d51cc16c62613a54167cc1df0e8f7ccfe0d8717843011d3ce51918be7095f105ffb25c464ecd8fca5bc373ddd0a21533f574a2108e134e10598ea790424ba4da75920fdc273a36867774007a4fc3c11ed06239955b62f5ea5fd58712021f8ee7e39fee8cdc1fe40d2b70516c6491376e7b17b2114eb33c2f4c57817496041e2709e5a40269dc65eed418c0f8d79fdf010ca8c9d0555146cce6bb52c77d0756caa494828a95a21df637882975b9976f316a1fb959572f30041957cfeb2b751208027172003725be2178c4d9d0a6829aabe15e6364122899701385bd55f70515f9a826c0646e0cf00605cead23829e343da97e44e582720e35351739bd8861d5e7c68de7439a6fff6f6f9311d577f7adc8417b2f6161750515bf15927d8840fd8b522f2033fac7206d39bb260ad1f5dd39745e1cc606d8b3c5605c7a89471fd449bff9ed1c43fd9bd0a0afd04c917f6e736350f1d3e9dac26289b7ad089876bc28afde90d0e949b7da1f640d96cc79d1a35dc1c0dfb01b5d46e74e192f3d07068857747b915394144ebf6f9a60fb4a14b0b6daaa505d3ee938546f753b1cf74560221c6ca19338a39a296c000973e9026837943082f64800c6a2215bf4e22fefd46c7d8c7a8d3b092b6aaec0a5c51af7bc5f9ed08d74b6e871df0128dccd32e09920c435a32c330e420d33d8c3641c97ac5a2cb3df6d7adaaefccfa3b2474f4d37070d31ad69d00c4a8acb37aad0d22266df5f587f6046f2f736a85140c5b21500dcdac7dbb0d56999e5913b5625eba790874b89bf174854b5453c2187b1c65b313a2b09d0a42a488036fbb1ba355e2876efdfba86a769bfed8529086ee29e39438024cd5435242ed8df4b96bb8815469d011156e3d206769ce338227e3ccd7fd155aa081fad4fe5b91a5b2bf9d1524b0c0d0994f9a4a1b46dcd66ffdcaca0148a52b6b6d18a83b550ac54e9b4fede1615d25ba1b8148913036fb08e121902d0f60816211ca2da553c37038dc086199e6aec2e8ecb3dc96a5572ec2356a9d3320191f3a13a59daa5cc8a9ff9f06cac33fd41ea948af4730fe50d5ffb45dabad73c30dca759817b61023716455d59a670a756c05698cca9d415a25ab6532fe2da24d8416f9f952e686bbc107907c3605df66f304ed9f45a457d1fa2f7326b3be54fb757aff7bc075e5a73f26fb425e603f4bf7f009c42a25f8d9770a93a1c1b35ff04d72344f696d92f80a70e706680668abeaf963ed94a39ddfe61b91efc85a0a8cc214541aaf263b0581933047409f6f42f62700ee85105560594e46309a5abfaf5ea15e8f73072650dada3915c1b2377eb449aa0ac5ce63f18596d823baaf6b5f4732c9b01cc5332777d574a9bfab62eb7d8e5d137f0213c7a5022cac79ca1e5ef57bfe26f420819b51d4d2e90ce93f8ec4c53fe6933130a3c0fcb06f7b20c5609ae9c37b3a80d29511d697f3eed230ed0716fada182420323930b278d497aed24d34ae3c3d5c53ec462f07b7e27af39c3a8ced4568d90377cd4ed463ab4097eca94e37b1cf2ac52a0f8665b4ef2e83f7c7b370d6286b64b1a27a4a703632d1af1f11c7a6c5efcea58cf2b7a0c4e72055e6d46939be99e0fc7e1f7d4327b913355868b570432e41f7f39c7df0a941637e445d06c9a0fb7b8ec89a0f4dacf4b211f3943142930e14c41b74f29b1322c9bcaa070bd42b72e078e161c962f955ea3aca8a8dfc4db35c58abf04e5a7724807d74b570e918869466a99eb84080bcc1bd8bfe893111da93b97964a042d02a8aeff8451548413bfd570b4f9f9deb558f6bf932dee822e93cf6f15c4b9d50dc7deb1bb56a0b0d6ab7ce9df3f72820fd32b24f18e0277f6ce8906a16391311bb4670bb3ae78bd3e2b482af7c9aa5ea029313d64e318befc4a1ad766d549e26ea14b695f2fe7ee1cd7b9a2ac4e4106163f291c23c4b888d388ed515f850e5d841a73eb5889e92440749f450f224b6ce6634a46bdfcebb1f4554a2030e9bb348071f073a4607fa159aff3b2766c231affe3dd8f844d9c63e85a3bab4c3dc6dadeb40aa02fc595c688ce78ccfaf16b34f7212172fdf567541bd6aebe9c86731696101d5342d7722a0eb9243743de017b481b04292c9d02010538b15fadae6f9dfeffeb8e48ced0e42673bec08c0953a9c90d9e99156d48950678bd7324465614f23d344b4a43da3b686dbc28cca7f064dbb3cc41ee56687d140912ea3119cb7d383e9b041ad2b602993338d9397c3b3de30193cecba60dbab547d06578265a68f2a9058d91635c5bd206762aa26dccfbeec4bae9f586d38ffb4638c70c1b7d2e29250f9a7bc1764acad6bc806c871257d8613f47264c5dbef98f3902458a90730c2026f315925369423bc22f0d77147f4e0f3c85571f7d725dac50fc28d1ab26032f6048b691b0231a2374535ff3413a07f9b5fbbcaa31e4b3731747e874fda9b6fc7f8ec9818150e22b9e80a660b8feb7d97593de99ebb50e1e385dff22e8a5917fff5a09892701b8be153b0092792ee9201f14c15cf801d572c5661fa5ba85d664d84f09c2bfffb30e06d38fba75eb6395e9dce42a08a5612de86b2db24f72ace39b17a8ece7e0d66a73bcd5b521c73944074aecade3d3abd4dadf133d993dd682011820102a216a9ac8856f71f51fb1e958a8ab7fe57aff91659bef6c42dac3cd7676409647ba2b682008068e9d8cf1544a01287e396d0943ed5de40dc82e0c3f7cf2e59ef99bda31ba30cbefd9409c4d5d9be63e415fb36d1338f45769832089689bb53efd8a5a075efd3a69d7c1652c3b840d7f1a83bc0774d3e85e40c5447bd51e85a5ce825952b8266a33d1e40d01433d8ba53385b63c5bdf7a61a54960a84d19f45e4b456501d0aeca223dd8896f0f8397a5ed0f6be4696178c77d47e2e3c04eea671380c04e3fb0677aeaa1a6f7d7c6447126dbd661bc936a02d10c0b70f92cb46654075e95552c392f2d978da10cb7a4aaedfd1997ca115b354310c714c24019bd821a576aa556d866e7524b752b168568a530aa281dfcdbb586e74ce624a2ec85ab5dd8abba2233dfc12e9e901f54cca9036bc33e525121c1fbd5cb8c5854d3ee70d2a0421d26ca1f3bab3f900e3898f359bed3baa722572658cbe9a1dafeff328a13563987c596c1535847eb736e2288bee8c082de5b18b79800f674c6a75573c9d56a6887e15afaa6193683c2fb5ae354b81192550db0faa6ee0433f458cfdf1e85c1885b69568ed0e348ad3da42971c098f1c60e0970755840f7f9a7c61547c90732d047b954b9f1753198ef8ce92c4bd703d78618255514a1ae26869147c5d2190764f2630412f188d57114d7b6a02b522586f3544f11c4cf178d0b1630dbbca6bb3ed2cab3c4542c40e63993ad11cf678d1cd0b4fc92ecbdc713c434e94568683ea0fbada741a0ea8d26c318dcf52b1c8bc106e7e473527e0229b7b841b489e9c636fb280643992519c2d744f2c7c22cb77b212064635d022d30b82e58c314c459ac4006944c360ab5324a866ee4bd79b4bbc57721e99c2715ce51b3f46a42ea50f08ad4e9a64489653075ef259ee0d32947c67bef1328a258a376b89a547f3ef9cbc320ed8a3b333b61cfda87112ed1e2e4c14fb0b001f17cb138e2d3270c1a9040b338735836bd6d338db5352fcb851eb7a42017958f45f116b77522b7bea529bc0df04c073921a2e15402468b5b984553446cc4a96c6231228b1925f1e590640625bd768cfa5e2e171092bc2deb188b14905b82311c4710012523fab0928fa5bccd383fe74493b5aeda08b610113ed9fb4465a0885dac6b8653878f20fc79a1e0ed4017021ad01f1ed16c632fb1a3818058465d59646049ec12f10284d219876cc209975bc5988758574d970df3beec67a91bcc1b3382f0d9e5370c0a3296156eee0946e3082ab735132e6d07d60628a341ac96d57c0015cd9549dda6619115467e909b1abe584256ec1fabe40352e9a0ee1a47365614d50650cf1d1124850b7aaa5801141859dce01f5b7b921fcc9d6eabcbf00b693d2233ead3390f0525eda698ff2acdbeb5d9b4120258777fc0477eb9beeae2e54d55974a23e165011d20a0bc9afb959cb50f6ec6b48af69ad756620fa622cecde257d5dd25ea85251df8d2ddf51583b65defff8e1e50468796673bd4f28d4488f2ca3c3021de882918a3dc5e5888a201231d805e0a27aa83220095353c51ebc1226d1a2502382fd66cd2544b1c0ab185a546838fb002c1ec6f265811ce9c74198cac4b8d3082ff76326fe805506d6d05c0a9b3f2b22c2716ce572c46c28c99510a447efd64d2f6f19c4d13cb57f0300a95d2fd0298019fd3291c3676d2f3e82ceb990a8544d2c0a85d0f29a782668d411b572f8cbfb3da9ae930d0e1cc31ad3b2e183ea413c5ce8c60cd284385723484ce6d9813106229d22e7db412780243600769506cac56d7a6698c0aafa749162620af2571d1351036f3f1e1f06d5afd9709664851a9db87113b1809aa72fe698c3b25d58b1255b60a33c59d02e59a94d9a7649764a0d61efba152652c20f9c6662be42e4e86ad2a207e6bf8391301e5043245a899840c0d3ae7283642bbb94c39ff397dbce1201338518172afdd4d26f895a67bb77a609541921bf38041b5e117cf2b86543340a43e402db44da5d8bb0971470d4b71d328a0c8af446c6dd49779701915db5084949a731c955a28a154905481e5ee152cd3a95a85de300e3eb980b433e0481c42c67f94b4a845739daa0031e54c5698c9e660b0582eea38bf49c7f2633b5d012babc4a5040ed4da6afe34aa9c02e1e0b6d3baf774fc44ad92c0abb26e556018806a3a900a7a24e6edaf3b0b36ffe49ef26995427e9c49f181634773f985a3dd4beb53be99c3d59a7e6796be6f10b8c4215aebf7da5e9c2da3495aa36b7699cd2845df33201c240703ef03cbc32e422febae47411f189334b89e9a13a11c5d247aa6d4815927dc758a773e91c516a39776552131345f77b560f374d885349a17c0f83bb8ddf0f61d963ee3d1fb6ba822cb79bce21c8c1cc657d9de26f19507632c564aa15de470ce4995b9e69a4e2803705af17cd767a164ea26f9e6d80195e0e71932dfb2a7acdc8248463cffb120db1bc8f8ef7cc9f8a2d"}) fsconfig$auto(r0, 0x3, &(0x7f00000000c0)=']$-\x00', &(0x7f0000000100)="44128da33093a7e095fa24e51ab3fe2a06285901f99143576ec2c33c0d598e1168e5706caef3708c2dc838d9b6cc1833ab46b4911a699bf7ed1d0e47726adfcca1414fd571c4710eb19657805a054b4d0c01cc8286d797452f5d62be5549896adc97071b3cc4120f252b921e8024d110b8cb24e3881028d2ca08e40be9ed5875e98e880f06a1469b94e9034e3aa387646ae3d9df6681dec5c9b2e6099cb37d444a18023b", r2) 4.105574514s ago: executing program 4 (id=8730): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket(0x10, 0x2, 0x0) socket(0x2c, 0x3, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x8, @old_prog_fd=r0}, 0xa3) bpf$auto(0x2, &(0x7f0000000040)=@query={@target_ifindex, 0xff, 0xffffff01, 0x9, 0x6, @count=0x1, 0x0, 0x80000000, 0xc, 0x0, 0x7}, 0x9) 3.574546726s ago: executing program 2 (id=8731): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) fcntl$auto(0x0, 0x408, 0x100000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 2.961717523s ago: executing program 5 (id=8732): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0xea) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/distance\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) epoll_create$auto(0x0) r2 = socket(0x15, 0x5, 0x0) setsockopt$auto(r2, 0x114, 0x1, 0x0, 0x1b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x400, 0x0) 2.379598854s ago: executing program 2 (id=8733): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r1, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mlockall$auto(0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000000)=0x5, &(0x7f0000000140)=0x2) 2.238759668s ago: executing program 5 (id=8734): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) fcntl$auto(0x0, 0x408, 0x100000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 1.674450391s ago: executing program 4 (id=8735): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) fcntl$auto(0x0, 0x408, 0x100000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 1.389312368s ago: executing program 2 (id=8736): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101040, 0x33903f3ada88772b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty36\x00', 0x80000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x161342, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80900, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 1.292489376s ago: executing program 5 (id=8737): ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x15, 0x5, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, 0x0, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 1.217381993s ago: executing program 2 (id=8738): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) 27.245937ms ago: executing program 34 (id=8709): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x9, 0x7, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x5, 0x10000, 0x1ff, 0x5185}, 0x3ff) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) write$auto(0x1, 0x0, 0x100) 0s ago: executing program 5 (id=8740): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) kernel console output (not intermixed with test programs): 848.199694][T32347] RBP: 00007fa2954327e0 R08: 0000000000000002 R09: 0000000000008000 [ 1848.199740][T32347] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1848.199794][T32347] R13: 00007fa295616038 R14: 00007fa295615fa0 R15: 00007ffc63ab55f8 [ 1848.199908][T32347] [ 1848.205568][T32347] memory: usage 3072kB, limit 3072kB, failcnt 181677 [ 1848.205591][T32347] memory+swap: usage 3372kB, limit 9007199254740988kB, failcnt 0 [ 1848.205608][T32347] kmem: usage 2948kB, limit 9007199254740988kB, failcnt 0 [ 1848.205623][T32347] Memory cgroup stats for /syz4: [ 1848.211785][T32347] cache 0 [ 1848.211801][T32347] rss 90112 [ 1848.211813][T32347] rss_huge 0 [ 1848.211822][T32347] shmem 0 [ 1848.211832][T32347] mapped_file 0 [ 1848.211841][T32347] dirty 0 [ 1848.211850][T32347] writeback 0 [ 1848.211860][T32347] workingset_refault_anon 18246 [ 1848.211871][T32347] workingset_refault_file 1443 [ 1848.211881][T32347] swap 303104 [ 1848.211891][T32347] swapcached 928030720 [ 1848.211901][T32347] pgpgin 434426 [ 1848.211911][T32347] pgpgout 443140 [ 1848.211920][T32347] pgfault 522242 [ 1848.211930][T32347] pgmajfault 6584 [ 1848.211940][T32347] inactive_anon 94208 [ 1848.211950][T32347] active_anon 24576 [ 1848.211960][T32347] inactive_file 0 [ 1848.211969][T32347] active_file 0 [ 1848.211979][T32347] unevictable 0 [ 1848.211989][T32347] hierarchical_memory_limit 3145728 [ 1848.212000][T32347] hierarchical_memsw_limit 9223372036854771712 [ 1848.212012][T32347] total_cache 0 [ 1848.212022][T32347] total_rss 90112 [ 1848.212031][T32347] total_rss_huge 0 [ 1848.212041][T32347] total_shmem 0 [ 1848.212051][T32347] total_mapped_file 0 [ 1848.212061][T32347] total_dirty 0 [ 1848.212071][T32347] total_writeback 0 [ 1848.212081][T32347] total_workingset_refault_anon 18246 [ 1848.212092][T32347] total_workingset_refault_file 1443 [ 1848.212103][T32347] total_swap 303104 [ 1848.212113][T32347] total_swapcached 928030720 [ 1848.212124][T32347] total_pgpgin 434426 [ 1848.212134][T32347] total_pgpgout 443140 [ 1848.212144][T32347] total_pgfault 522242 [ 1848.212154][T32347] total_pgmajfault 6584 [ 1848.212164][T32347] total_inactive_anon 94208 [ 1848.212175][T32347] total_active_anon 24576 [ 1848.212185][T32347] total_inactive_file 0 [ 1848.212195][T32347] total_active_file 0 [ 1848.212205][T32347] total_unevictable 0 [ 1848.212215][T32347] anon_cost 64 [ 1848.212224][T32347] file_cost 0 [ 1848.212234][T32347] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8646,pid=32346,uid=0 [ 1848.212510][T32347] Memory cgroup out of memory: Killed process 32346 (syz.4.8646) total-vm:108368kB, anon-rss:1328kB, file-rss:20740kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1848.752538][T32352] syz.4.8649 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1848.752579][T32352] CPU: 1 UID: 0 PID: 32352 Comm: syz.4.8649 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1848.752616][T32352] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1848.752625][T32352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1848.752641][T32352] Call Trace: [ 1848.752649][T32352] [ 1848.752658][T32352] dump_stack_lvl+0x100/0x190 [ 1848.752698][T32352] dump_header+0xfb/0x606 [ 1848.752726][T32352] oom_kill_process.cold+0xd/0x330 [ 1848.752762][T32352] out_of_memory+0x340/0x14f0 [ 1848.752796][T32352] ? __pfx_out_of_memory+0x10/0x10 [ 1848.752832][T32352] mem_cgroup_out_of_memory+0xc6/0x130 [ 1848.752875][T32352] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1848.752915][T32352] ? find_held_lock+0x2b/0x80 [ 1848.752955][T32352] ? do_raw_spin_unlock+0x145/0x1e0 [ 1848.752988][T32352] ? _raw_spin_unlock+0x28/0x50 [ 1848.753025][T32352] try_charge_memcg+0x652/0xc90 [ 1848.753103][T32352] ? __pfx_try_charge_memcg+0x10/0x10 [ 1848.753147][T32352] ? find_held_lock+0x2b/0x80 [ 1848.753193][T32352] ? rcu_read_unlock+0x17/0x60 [ 1848.753232][T32352] ? rcu_read_unlock+0x17/0x60 [ 1848.753276][T32352] charge_memcg+0xa6/0x280 [ 1848.753308][T32352] __mem_cgroup_charge+0x2b/0x1e0 [ 1848.753346][T32352] do_anonymous_page+0xb62/0x1fb0 [ 1848.753381][T32352] __handle_mm_fault+0x1d42/0x2b60 [ 1848.753414][T32352] ? __pfx___handle_mm_fault+0x10/0x10 [ 1848.753440][T32352] ? pte_offset_map_lock+0x174/0x320 [ 1848.753474][T32352] ? find_held_lock+0x2b/0x80 [ 1848.753520][T32352] ? follow_page_pte+0x5b3/0x1400 [ 1848.753562][T32352] handle_mm_fault+0x36d/0xa20 [ 1848.753592][T32352] __get_user_pages+0xf9c/0x34d0 [ 1848.753666][T32352] ? __pfx___get_user_pages+0x10/0x10 [ 1848.753727][T32352] populate_vma_page_range+0x267/0x3f0 [ 1848.753790][T32352] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1848.753839][T32352] ? __pfx_find_vma_intersection+0x10/0x10 [ 1848.753876][T32352] ? do_mmap+0x93f/0x12f0 [ 1848.753914][T32352] __mm_populate+0x107/0x3a0 [ 1848.753954][T32352] ? __pfx___mm_populate+0x10/0x10 [ 1848.753994][T32352] ? up_write+0x290/0x4f0 [ 1848.754029][T32352] vm_mmap_pgoff+0x37f/0x470 [ 1848.754070][T32352] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1848.754104][T32352] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1848.754138][T32352] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1848.754177][T32352] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 1848.754210][T32352] ? find_held_lock+0x2b/0x80 [ 1848.754247][T32352] ksys_mmap_pgoff+0x7d/0x5b0 [ 1848.754285][T32352] __x64_sys_mmap+0x125/0x190 [ 1848.754321][T32352] do_syscall_64+0x106/0xf80 [ 1848.754355][T32352] ? clear_bhb_loop+0x40/0x90 [ 1848.754385][T32352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1848.754410][T32352] RIP: 0033:0x7fa29539bf79 [ 1848.754429][T32352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1848.754453][T32352] RSP: 002b:00007fa2961dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1848.754476][T32352] RAX: ffffffffffffffda RBX: 00007fa295615fa0 RCX: 00007fa29539bf79 [ 1848.754492][T32352] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1848.754507][T32352] RBP: 00007fa2954327e0 R08: 0000000000000002 R09: 0000000000008000 [ 1848.754523][T32352] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1848.754538][T32352] R13: 00007fa295616038 R14: 00007fa295615fa0 R15: 00007ffc63ab55f8 [ 1848.754569][T32352] [ 1848.764079][T32352] memory: usage 3072kB, limit 3072kB, failcnt 181862 [ 1848.764108][T32352] memory+swap: usage 3124kB, limit 9007199254740988kB, failcnt 0 [ 1848.764132][T32352] kmem: usage 2952kB, limit 9007199254740988kB, failcnt 0 [ 1848.764155][T32352] Memory cgroup stats for /syz4: [ 1848.764352][T32352] cache 0 [ 1848.764368][T32352] rss 106496 [ 1848.764382][T32352] rss_huge 0 [ 1848.764396][T32352] shmem 0 [ 1848.764410][T32352] mapped_file 0 [ 1848.764424][T32352] dirty 0 [ 1848.764438][T32352] writeback 0 [ 1848.764452][T32352] workingset_refault_anon 18271 [ 1848.764467][T32352] workingset_refault_file 1443 [ 1848.764483][T32352] swap 28672 [ 1848.764496][T32352] swapcached 928002048 [ 1848.764511][T32352] pgpgin 434476 [ 1848.764526][T32352] pgpgout 443190 [ 1848.764540][T32352] pgfault 522368 [ 1848.764553][T32352] pgmajfault 6605 [ 1848.764568][T32352] inactive_anon 49152 [ 1848.764581][T32352] active_anon 40960 [ 1848.764595][T32352] inactive_file 0 [ 1848.764609][T32352] active_file 0 [ 1848.764621][T32352] unevictable 0 [ 1848.764634][T32352] hierarchical_memory_limit 3145728 [ 1848.764650][T32352] hierarchical_memsw_limit 9223372036854771712 [ 1848.764666][T32352] total_cache 0 [ 1848.764679][T32352] total_rss 106496 [ 1848.764691][T32352] total_rss_huge 0 [ 1848.764706][T32352] total_shmem 0 [ 1848.764718][T32352] total_mapped_file 0 [ 1848.768747][T32352] total_dirty 0 [ 1848.768768][T32352] total_writeback 0 [ 1848.768784][T32352] total_workingset_refault_anon 18271 [ 1848.768796][T32352] total_workingset_refault_file 1443 [ 1848.768807][T32352] total_swap 28672 [ 1848.768816][T32352] total_swapcached 928002048 [ 1848.768827][T32352] total_pgpgin 434476 [ 1848.768838][T32352] total_pgpgout 443190 [ 1848.768848][T32352] total_pgfault 522368 [ 1848.768858][T32352] total_pgmajfault 6605 [ 1848.768868][T32352] total_inactive_anon 49152 [ 1848.768879][T32352] total_active_anon 40960 [ 1848.768889][T32352] total_inactive_file 0 [ 1848.768900][T32352] total_active_file 0 [ 1848.768910][T32352] total_unevictable 0 [ 1848.768920][T32352] anon_cost 136 [ 1848.768930][T32352] file_cost 0 [ 1848.768941][T32352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8649,pid=32350,uid=0 [ 1848.769059][T32352] Memory cgroup out of memory: Killed process 32350 (syz.4.8649) total-vm:108368kB, anon-rss:1324kB, file-rss:20740kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1851.980888][T32362] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1852.001612][T32362] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8654'. [ 1852.010771][T32362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1852.024093][T32362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1852.034335][T32362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1852.043829][T32362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1852.442979][T32370] syz.4.8651 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1852.496188][T32370] CPU: 1 UID: 0 PID: 32370 Comm: syz.4.8651 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1852.496243][T32370] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1852.496257][T32370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1852.496276][T32370] Call Trace: [ 1852.496288][T32370] [ 1852.496302][T32370] dump_stack_lvl+0x100/0x190 [ 1852.496354][T32370] dump_header+0xfb/0x606 [ 1852.496390][T32370] oom_kill_process.cold+0xd/0x330 [ 1852.496436][T32370] out_of_memory+0x340/0x14f0 [ 1852.496482][T32370] ? __pfx_out_of_memory+0x10/0x10 [ 1852.496529][T32370] mem_cgroup_out_of_memory+0xc6/0x130 [ 1852.496584][T32370] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1852.496638][T32370] ? find_held_lock+0x2b/0x80 [ 1852.496692][T32370] ? do_raw_spin_unlock+0x145/0x1e0 [ 1852.496735][T32370] ? _raw_spin_unlock+0x28/0x50 [ 1852.496782][T32370] try_charge_memcg+0x652/0xc90 [ 1852.496835][T32370] ? __pfx_try_charge_memcg+0x10/0x10 [ 1852.496888][T32370] ? find_held_lock+0x2b/0x80 [ 1852.496930][T32370] ? rcu_read_unlock+0x17/0x60 [ 1852.496976][T32370] ? rcu_read_unlock+0x17/0x60 [ 1852.497025][T32370] charge_memcg+0xa6/0x280 [ 1852.497068][T32370] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1852.497123][T32370] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1852.497175][T32370] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1852.497213][T32370] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1852.497267][T32370] swap_cache_alloc_folio+0x1cb/0x300 [ 1852.497303][T32370] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1852.497349][T32370] swap_cluster_readahead+0x411/0x770 [ 1852.497394][T32370] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1852.497465][T32370] ? get_vma_policy+0x23f/0x3b0 [ 1852.497514][T32370] swapin_readahead+0x160/0x12c0 [ 1852.497564][T32370] ? __pfx_swapin_readahead+0x10/0x10 [ 1852.497598][T32370] ? find_held_lock+0x2b/0x80 [ 1852.497642][T32370] ? swap_table_get+0x103/0x2c0 [ 1852.497672][T32370] ? swap_table_get+0x103/0x2c0 [ 1852.497710][T32370] ? swap_table_get+0x10d/0x2c0 [ 1852.497742][T32370] ? swap_cache_get_folio+0x1ae/0x600 [ 1852.497778][T32370] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1852.497810][T32370] ? __pfx_get_swap_device+0x10/0x10 [ 1852.497860][T32370] ? do_swap_page+0xb2e/0x68e0 [ 1852.497889][T32370] do_swap_page+0xb2e/0x68e0 [ 1852.497940][T32370] ? __pfx_do_swap_page+0x10/0x10 [ 1852.497977][T32370] ? do_anonymous_page+0xa13/0x1fb0 [ 1852.498011][T32370] ? rcu_is_watching+0x12/0xc0 [ 1852.498075][T32370] ? __pte_offset_map+0x179/0x310 [ 1852.498123][T32370] __handle_mm_fault+0x18c1/0x2b60 [ 1852.498166][T32370] ? reacquire_held_locks+0xce/0x1e0 [ 1852.498203][T32370] ? __pfx___handle_mm_fault+0x10/0x10 [ 1852.498245][T32370] ? lock_vma_under_rcu+0x17c/0x590 [ 1852.498303][T32370] handle_mm_fault+0x36d/0xa20 [ 1852.498346][T32370] do_user_addr_fault+0x5a3/0x12f0 [ 1852.498407][T32370] exc_page_fault+0x6f/0xd0 [ 1852.498463][T32370] asm_exc_page_fault+0x26/0x30 [ 1852.498495][T32370] RIP: 0033:0x7fa29524b180 [ 1852.498524][T32370] Code: 68 0b 00 00 00 e9 c0 fe ff ff ff 25 32 8f 39 00 68 00 00 00 00 e9 00 00 00 00 ff 25 2a 8f 39 00 68 00 00 00 00 e9 00 00 00 00 25 22 8f 39 00 68 21 00 00 00 e9 90 fe ff ff ff 25 1a 8f 39 00 [ 1852.498557][T32370] RSP: 002b:00007fa2961ba9f8 EFLAGS: 00010202 [ 1852.498584][T32370] RAX: 00007fa2961bb0e7 RBX: 00007fa2961baf30 RCX: 0000000039343531 [ 1852.498605][T32370] RDX: 0000000000000004 RSI: 0000000000000025 RDI: 00007fa29544e67a [ 1852.498626][T32370] RBP: 0000000000000000 R08: 0000000000000004 R09: 00000000fffffffc [ 1852.498647][T32370] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fa29544e67a [ 1852.498667][T32370] R13: 0000000000000075 R14: 00007fa29544e679 R15: 00007fa2961baff0 [ 1852.498713][T32370] [ 1853.052295][T32370] memory: usage 3072kB, limit 3072kB, failcnt 183464 [ 1853.086481][T32370] memory+swap: usage 3244kB, limit 9007199254740988kB, failcnt 0 [ 1853.142669][T32370] kmem: usage 3032kB, limit 9007199254740988kB, failcnt 0 [ 1853.149905][T32370] Memory cgroup stats for /syz4: [ 1853.150097][T32370] cache 0 [ 1853.289585][T32370] rss 0 [ 1853.299520][T32370] rss_huge 0 [ 1853.302958][T32370] shmem 0 [ 1853.305946][T32370] mapped_file 0 [ 1853.310072][T32370] dirty 0 [ 1853.330510][T32370] writeback 0 [ 1853.339552][T32370] workingset_refault_anon 19431 [ 1853.349557][T32370] workingset_refault_file 1443 [ 1853.354397][T32370] swap 176128 [ 1853.368435][T32370] swapcached 928223232 [ 1853.372956][T32370] pgpgin 435717 [ 1853.376745][T32370] pgpgout 444450 [ 1853.381099][T32370] pgfault 523922 [ 1853.384708][T32370] pgmajfault 7426 [ 1853.388398][T32370] inactive_anon 0 [ 1853.392884][T32370] active_anon 0 [ 1853.396426][T32370] inactive_file 0 [ 1853.400626][T32370] active_file 0 [ 1853.404353][T32370] unevictable 0 [ 1853.407867][T32370] hierarchical_memory_limit 3145728 [ 1853.413802][T32370] hierarchical_memsw_limit 9223372036854771712 [ 1853.420495][T32370] total_cache 0 [ 1853.424003][T32370] total_rss 0 [ 1853.427326][T32370] total_rss_huge 0 [ 1853.432039][T32370] total_shmem 0 [ 1853.435547][T32370] total_mapped_file 0 [ 1853.440604][T32370] total_dirty 0 [ 1853.444355][T32370] total_writeback 0 [ 1853.448229][T32370] total_workingset_refault_anon 19431 [ 1853.454504][T32370] total_workingset_refault_file 1443 [ 1853.460480][T32370] total_swap 176128 [ 1853.464344][T32370] total_swapcached 928223232 [ 1853.475877][T32370] total_pgpgin 435717 [ 1853.480337][T32370] total_pgpgout 444450 [ 1853.484639][T32370] total_pgfault 523922 [ 1853.489247][T32370] total_pgmajfault 7426 [ 1853.493561][T32370] total_inactive_anon 0 [ 1853.497944][T32370] total_active_anon 0 [ 1853.502727][T32370] total_inactive_file 0 [ 1853.507217][T32370] total_active_file 0 [ 1853.511806][T32370] total_unevictable 0 [ 1853.515839][T32370] anon_cost 40 [ 1853.519797][T32370] file_cost 0 [ 1853.523298][T32370] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8651,pid=32365,uid=0 [ 1853.539114][T32370] Memory cgroup out of memory: Killed process 32365 (syz.4.8651) total-vm:104532kB, anon-rss:1232kB, file-rss:21084kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1853.858829][T31411] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1416 with max blocks 50 with error 117 [ 1853.872119][T31411] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1853.872119][T31411] [ 1853.888947][T31411] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1433 with max blocks 23 with error 117 [ 1853.905364][T31411] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1853.905364][T31411] [ 1853.920216][T31411] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1461 with max blocks 4 with error 117 [ 1853.944271][T31411] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1853.944271][T31411] [ 1853.968307][T31411] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1021 with max blocks 2 with error 117 [ 1853.999382][T31411] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1853.999382][T31411] [ 1854.260357][T32391] netlink: 314 bytes leftover after parsing attributes in process `syz.2.8659'. [ 1854.307875][T32391] bond0: left promiscuous mode [ 1854.312742][T32391] bond_slave_0: left promiscuous mode [ 1854.366812][T32391] bond_slave_1: left promiscuous mode [ 1854.372567][T32391] bond0: left allmulticast mode [ 1854.395141][T32391] bond_slave_0: left allmulticast mode [ 1854.418965][T32391] bond_slave_1: left allmulticast mode [ 1854.587828][T22894] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1854.649985][T22894] CPU: 0 UID: 0 PID: 22894 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1854.650037][T22894] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1854.650049][T22894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1854.650067][T22894] Call Trace: [ 1854.650077][T22894] [ 1854.650089][T22894] dump_stack_lvl+0x100/0x190 [ 1854.650136][T22894] dump_header+0xfb/0x606 [ 1854.650169][T22894] oom_kill_process.cold+0xd/0x330 [ 1854.650208][T22894] out_of_memory+0x340/0x14f0 [ 1854.650254][T22894] ? __pfx_out_of_memory+0x10/0x10 [ 1854.650313][T22894] mem_cgroup_out_of_memory+0xc6/0x130 [ 1854.650374][T22894] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1854.650429][T22894] ? find_held_lock+0x2b/0x80 [ 1854.650484][T22894] ? do_raw_spin_unlock+0x145/0x1e0 [ 1854.650530][T22894] ? _raw_spin_unlock+0x28/0x50 [ 1854.650578][T22894] try_charge_memcg+0x652/0xc90 [ 1854.650633][T22894] ? __pfx_try_charge_memcg+0x10/0x10 [ 1854.650688][T22894] ? find_held_lock+0x2b/0x80 [ 1854.650733][T22894] ? rcu_read_unlock+0x17/0x60 [ 1854.650779][T22894] ? rcu_read_unlock+0x17/0x60 [ 1854.650830][T22894] charge_memcg+0xa6/0x280 [ 1854.650873][T22894] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1854.650931][T22894] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1854.650986][T22894] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1854.651022][T22894] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1854.651080][T22894] swap_cache_alloc_folio+0x1cb/0x300 [ 1854.651119][T22894] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1854.651158][T22894] ? lockdep_hardirqs_on+0x78/0x100 [ 1854.651207][T22894] ? finish_task_switch.isra.0+0x205/0xb80 [ 1854.651265][T22894] swap_cluster_readahead+0x411/0x770 [ 1854.651322][T22894] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1854.651366][T22894] ? update_cfs_rq_load_avg+0x51/0x550 [ 1854.651428][T22894] ? __lock_acquire+0x4a5/0x2630 [ 1854.651466][T22894] ? get_vma_policy+0x23f/0x3b0 [ 1854.651516][T22894] swapin_readahead+0x160/0x12c0 [ 1854.651567][T22894] ? __pfx_swapin_readahead+0x10/0x10 [ 1854.651601][T22894] ? find_held_lock+0x2b/0x80 [ 1854.651647][T22894] ? swap_table_get+0x103/0x2c0 [ 1854.651677][T22894] ? swap_table_get+0x103/0x2c0 [ 1854.651716][T22894] ? swap_table_get+0x10d/0x2c0 [ 1854.651748][T22894] ? swap_cache_get_folio+0x1ae/0x600 [ 1854.651783][T22894] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1854.651813][T22894] ? __pfx_get_swap_device+0x10/0x10 [ 1854.651865][T22894] ? do_swap_page+0xb2e/0x68e0 [ 1854.651895][T22894] do_swap_page+0xb2e/0x68e0 [ 1854.651951][T22894] ? __pfx_do_swap_page+0x10/0x10 [ 1854.651986][T22894] ? __free_object+0x2a8/0x400 [ 1854.652024][T22894] ? lockdep_hardirqs_on+0x78/0x100 [ 1854.652075][T22894] ? rcu_is_watching+0x12/0xc0 [ 1854.652118][T22894] ? __pte_offset_map+0x179/0x310 [ 1854.652167][T22894] __handle_mm_fault+0x18c1/0x2b60 [ 1854.652209][T22894] ? reacquire_held_locks+0xce/0x1e0 [ 1854.652247][T22894] ? __pfx___handle_mm_fault+0x10/0x10 [ 1854.652286][T22894] ? lock_vma_under_rcu+0x17c/0x590 [ 1854.652355][T22894] handle_mm_fault+0x36d/0xa20 [ 1854.652397][T22894] do_user_addr_fault+0x5a3/0x12f0 [ 1854.652459][T22894] exc_page_fault+0x6f/0xd0 [ 1854.652506][T22894] asm_exc_page_fault+0x26/0x30 [ 1854.652540][T22894] RIP: 0033:0x7fa29535c84e [ 1854.652568][T22894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1854.652602][T22894] RSP: 002b:00007ffc63ab58d8 EFLAGS: 00010246 [ 1854.652630][T22894] RAX: 0000000000000000 RBX: 0000555594e2e500 RCX: 00007fa29535c84e [ 1854.652650][T22894] RDX: 00007ffc63ab5930 RSI: 0000000000000000 RDI: 0000000000000000 [ 1854.652671][T22894] RBP: 00007ffc63ab599c R08: 0000000000000000 R09: 0000000000000000 [ 1854.652692][T22894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1854.652712][T22894] R13: 00000000000927c0 R14: 00000000001c5c28 R15: 00007ffc63ab59f0 [ 1854.652757][T22894] [ 1855.042887][T22894] memory: usage 3072kB, limit 3072kB, failcnt 183826 [ 1855.049645][T22894] memory+swap: usage 3204kB, limit 9007199254740988kB, failcnt 0 [ 1855.058463][T22894] kmem: usage 2992kB, limit 9007199254740988kB, failcnt 0 [ 1855.065844][T22894] Memory cgroup stats for /syz4: [ 1855.066061][T22894] cache 0 [ 1855.110075][T22894] rss 0 [ 1855.112923][T22894] rss_huge 0 [ 1855.116162][T22894] shmem 0 [ 1855.119145][T22894] mapped_file 0 [ 1855.158883][T22894] dirty 0 [ 1855.180407][T22894] writeback 0 [ 1855.190017][T22894] workingset_refault_anon 19543 [ 1855.195028][T22894] workingset_refault_file 1443 [ 1855.226525][T22894] swap 139264 [ 1855.239655][T22894] swapcached 928346112 [ 1855.243795][T22894] pgpgin 435866 [ 1855.267287][T22894] pgpgout 444590 [ 1855.271027][T22894] pgfault 524715 [ 1855.274616][T22894] pgmajfault 7492 [ 1855.278283][T22894] inactive_anon 77824 [ 1855.307332][T22894] active_anon 0 [ 1855.325670][T22894] inactive_file 0 [ 1855.348265][T22894] active_file 0 [ 1855.351949][T22894] unevictable 0 [ 1855.355457][T22894] hierarchical_memory_limit 3145728 [ 1855.361284][T22894] hierarchical_memsw_limit 9223372036854771712 [ 1855.377094][T22894] total_cache 0 [ 1855.388707][T22894] total_rss 0 [ 1855.398937][T22894] total_rss_huge 0 [ 1855.408551][T22894] total_shmem 0 [ 1855.412406][T22894] total_mapped_file 0 [ 1855.431125][T22894] total_dirty 0 [ 1855.434683][T22894] total_writeback 0 [ 1855.459416][T32403] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1855.467550][T22894] total_workingset_refault_anon 19543 [ 1855.478750][T22894] total_workingset_refault_file 1443 [ 1855.499988][T22894] total_swap 139264 [ 1855.516602][T22894] total_swapcached 928346112 [ 1855.522736][T22894] total_pgpgin 435866 [ 1855.531673][T22894] total_pgpgout 444590 [ 1855.547442][T22894] total_pgfault 524715 [ 1855.566919][T22894] total_pgmajfault 7492 [ 1855.579754][T22894] total_inactive_anon 77824 [ 1855.607765][T22894] total_active_anon 0 [ 1855.611859][T22894] total_inactive_file 0 [ 1855.635805][T22894] total_active_file 0 [ 1855.647557][T22894] total_unevictable 0 [ 1855.657506][T22894] anon_cost 35 [ 1855.661042][T22894] file_cost 0 [ 1855.666883][T22894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8658,pid=32387,uid=0 [ 1855.683367][T22894] Memory cgroup out of memory: Killed process 32387 (syz.4.8658) total-vm:104400kB, anon-rss:1232kB, file-rss:20948kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1855.961883][T32318] mkiss: ax0: crc mode is auto. [ 1856.409695][T32416] syz.4.8664 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1856.419846][T32416] CPU: 0 UID: 0 PID: 32416 Comm: syz.4.8664 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1856.419902][T32416] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1856.419916][T32416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1856.419937][T32416] Call Trace: [ 1856.419948][T32416] [ 1856.419969][T32416] dump_stack_lvl+0x100/0x190 [ 1856.420026][T32416] dump_header+0xfb/0x606 [ 1856.420066][T32416] oom_kill_process.cold+0xd/0x330 [ 1856.420109][T32416] out_of_memory+0x340/0x14f0 [ 1856.420157][T32416] ? __pfx_out_of_memory+0x10/0x10 [ 1856.420208][T32416] mem_cgroup_out_of_memory+0xc6/0x130 [ 1856.420269][T32416] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1856.420331][T32416] ? find_held_lock+0x2b/0x80 [ 1856.420388][T32416] ? do_raw_spin_unlock+0x145/0x1e0 [ 1856.420434][T32416] ? _raw_spin_unlock+0x28/0x50 [ 1856.420482][T32416] try_charge_memcg+0x652/0xc90 [ 1856.420539][T32416] ? __pfx_try_charge_memcg+0x10/0x10 [ 1856.420586][T32416] ? find_held_lock+0x2b/0x80 [ 1856.420632][T32416] ? rcu_read_unlock+0x17/0x60 [ 1856.420679][T32416] ? rcu_read_unlock+0x17/0x60 [ 1856.420739][T32416] charge_memcg+0xa6/0x280 [ 1856.420786][T32416] __mem_cgroup_charge+0x2b/0x1e0 [ 1856.420840][T32416] do_anonymous_page+0xb62/0x1fb0 [ 1856.420891][T32416] __handle_mm_fault+0x1d42/0x2b60 [ 1856.420939][T32416] ? __pfx___handle_mm_fault+0x10/0x10 [ 1856.420981][T32416] ? pte_offset_map_lock+0x174/0x320 [ 1856.421026][T32416] ? find_held_lock+0x2b/0x80 [ 1856.421088][T32416] ? follow_page_pte+0x5b3/0x1400 [ 1856.421147][T32416] handle_mm_fault+0x36d/0xa20 [ 1856.421192][T32416] __get_user_pages+0xf9c/0x34d0 [ 1856.421260][T32416] ? __pfx___get_user_pages+0x10/0x10 [ 1856.421324][T32416] populate_vma_page_range+0x267/0x3f0 [ 1856.421380][T32416] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1856.421433][T32416] ? __pfx_find_vma_intersection+0x10/0x10 [ 1856.421483][T32416] ? do_mmap+0x93f/0x12f0 [ 1856.421536][T32416] __mm_populate+0x107/0x3a0 [ 1856.421589][T32416] ? __pfx___mm_populate+0x10/0x10 [ 1856.421642][T32416] ? up_write+0x290/0x4f0 [ 1856.421687][T32416] vm_mmap_pgoff+0x37f/0x470 [ 1856.421743][T32416] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1856.421791][T32416] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1856.421838][T32416] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1856.421893][T32416] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 1856.421940][T32416] ? find_held_lock+0x2b/0x80 [ 1856.421999][T32416] ksys_mmap_pgoff+0x7d/0x5b0 [ 1856.422054][T32416] __x64_sys_mmap+0x125/0x190 [ 1856.422105][T32416] do_syscall_64+0x106/0xf80 [ 1856.422152][T32416] ? clear_bhb_loop+0x40/0x90 [ 1856.422195][T32416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.422231][T32416] RIP: 0033:0x7fa29539bf79 [ 1856.422260][T32416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.422293][T32416] RSP: 002b:00007fa2961dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1856.422325][T32416] RAX: ffffffffffffffda RBX: 00007fa295615fa0 RCX: 00007fa29539bf79 [ 1856.422347][T32416] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1856.422368][T32416] RBP: 00007fa2954327e0 R08: 0000000000000002 R09: 0000000000008000 [ 1856.422389][T32416] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1856.422410][T32416] R13: 00007fa295616038 R14: 00007fa295615fa0 R15: 00007ffc63ab55f8 [ 1856.422456][T32416] [ 1856.776732][T32416] memory: usage 3072kB, limit 3072kB, failcnt 184238 [ 1856.783534][T32416] memory+swap: usage 4356kB, limit 9007199254740988kB, failcnt 0 [ 1856.791415][T32416] kmem: usage 2928kB, limit 9007199254740988kB, failcnt 0 [ 1856.798577][T32416] Memory cgroup stats for /syz4: [ 1856.798793][T32416] cache 0 [ 1856.806847][T32416] rss 126976 [ 1856.810081][T32416] rss_huge 0 [ 1856.813340][T32416] shmem 0 [ 1856.816289][T32416] mapped_file 0 [ 1856.819753][T32416] dirty 0 [ 1856.822753][T32416] writeback 0 [ 1856.826092][T32416] workingset_refault_anon 19581 [ 1856.831432][T32416] workingset_refault_file 1443 [ 1856.836213][T32416] swap 1314816 [ 1856.839592][T32416] swapcached 929542144 [ 1856.844079][T32416] pgpgin 436247 [ 1856.847556][T32416] pgpgout 444954 [ 1856.851164][T32416] pgfault 525172 [ 1856.854739][T32416] pgmajfault 7517 [ 1856.858377][T32416] inactive_anon 114688 [ 1856.862639][T32416] active_anon 32768 [ 1856.866884][T32416] inactive_file 0 [ 1856.870535][T32416] active_file 0 [ 1856.874350][T32416] unevictable 0 [ 1856.878495][T32416] hierarchical_memory_limit 3145728 [ 1856.884332][T32416] hierarchical_memsw_limit 9223372036854771712 [ 1856.890516][T32416] total_cache 0 [ 1856.894106][T32416] total_rss 126976 [ 1856.897860][T32416] total_rss_huge 0 [ 1856.901756][T32416] total_shmem 0 [ 1856.905226][T32416] total_mapped_file 0 [ 1856.909236][T32416] total_dirty 0 [ 1856.912813][T32416] total_writeback 0 [ 1856.916646][T32416] total_workingset_refault_anon 19581 [ 1856.922462][T32416] total_workingset_refault_file 1443 [ 1856.927856][T32416] total_swap 1314816 [ 1856.932420][T32416] total_swapcached 929542144 [ 1856.937043][T32416] total_pgpgin 436247 [ 1856.941120][T32416] total_pgpgout 444954 [ 1856.945221][T32416] total_pgfault 525172 [ 1856.949322][T32416] total_pgmajfault 7517 [ 1856.953523][T32416] total_inactive_anon 114688 [ 1856.958125][T32416] total_active_anon 32768 [ 1856.962745][T32416] total_inactive_file 0 [ 1856.966994][T32416] total_active_file 0 [ 1856.971471][T32416] total_unevictable 0 [ 1856.975548][T32416] anon_cost 74 [ 1856.979455][T32416] file_cost 0 [ 1856.982822][T32416] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8664,pid=32415,uid=0 [ 1856.997819][T32416] Memory cgroup out of memory: Killed process 32415 (syz.4.8664) total-vm:106320kB, anon-rss:1352kB, file-rss:20740kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1857.282094][T32420] ERROR: Out of memory at tomoyo_memory_ok. [ 1859.114476][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1859.121169][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.269532][T32466] zswap: compressor not available [ 1861.770401][T32473] syz.4.8675 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1861.782263][T32473] CPU: 1 UID: 0 PID: 32473 Comm: syz.4.8675 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1861.782314][T32473] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1861.782327][T32473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1861.782348][T32473] Call Trace: [ 1861.782359][T32473] [ 1861.782372][T32473] dump_stack_lvl+0x100/0x190 [ 1861.782425][T32473] dump_header+0xfb/0x606 [ 1861.782463][T32473] oom_kill_process.cold+0xd/0x330 [ 1861.782504][T32473] out_of_memory+0x340/0x14f0 [ 1861.782550][T32473] ? __pfx_out_of_memory+0x10/0x10 [ 1861.782601][T32473] mem_cgroup_out_of_memory+0xc6/0x130 [ 1861.782659][T32473] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1861.782713][T32473] ? find_held_lock+0x2b/0x80 [ 1861.782768][T32473] ? do_raw_spin_unlock+0x145/0x1e0 [ 1861.782822][T32473] ? _raw_spin_unlock+0x28/0x50 [ 1861.782868][T32473] try_charge_memcg+0x652/0xc90 [ 1861.782922][T32473] ? __pfx_try_charge_memcg+0x10/0x10 [ 1861.782965][T32473] ? rcu_read_unlock+0x17/0x60 [ 1861.783012][T32473] ? rcu_read_unlock+0x17/0x60 [ 1861.783067][T32473] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1861.783111][T32473] __memcg_kmem_charge_page+0xd0/0x530 [ 1861.783165][T32473] memcg_charge_kernel_stack+0xc1/0x1f0 [ 1861.783226][T32473] copy_process+0x61f/0x79b0 [ 1861.783281][T32473] ? __pfx_copy_process+0x10/0x10 [ 1861.783327][T32473] ? _copy_from_user+0x59/0xd0 [ 1861.783384][T32473] kernel_clone+0xfc/0x930 [ 1861.783422][T32473] ? __pfx_kernel_clone+0x10/0x10 [ 1861.783471][T32473] ? __lock_acquire+0x4a5/0x2630 [ 1861.783511][T32473] __do_sys_clone3+0x214/0x290 [ 1861.783545][T32473] ? __pfx___do_sys_clone3+0x10/0x10 [ 1861.783601][T32473] ? _copy_to_user+0xaf/0xd0 [ 1861.783669][T32473] ? do_user_addr_fault+0x8d6/0x12f0 [ 1861.783745][T32473] do_syscall_64+0x106/0xf80 [ 1861.783785][T32473] ? clear_bhb_loop+0x40/0x90 [ 1861.783829][T32473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.783859][T32473] RIP: 0033:0x7fa29539cd89 [ 1861.783884][T32473] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 1861.783912][T32473] RSP: 002b:00007ffc63ab54b8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 1861.783959][T32473] RAX: ffffffffffffffda RBX: 00007fa2953583a0 RCX: 00007fa29539cd89 [ 1861.783978][T32473] RDX: 00007fa2953583a0 RSI: 0000000000000058 RDI: 00007ffc63ab5510 [ 1861.783996][T32473] RBP: 00007fa2961bb6c0 R08: 00007fa2961bb6c0 R09: 00007ffc63ab55f7 [ 1861.784015][T32473] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 1861.784033][T32473] R13: 000000000000006e R14: 00007ffc63ab5510 R15: 00007ffc63ab55f8 [ 1861.784071][T32473] [ 1861.784092][T32473] memory: usage 3072kB, limit 3072kB, failcnt 185211 [ 1862.163880][T32473] memory+swap: usage 3168kB, limit 9007199254740988kB, failcnt 0 [ 1862.184984][T32473] kmem: usage 3036kB, limit 9007199254740988kB, failcnt 0 [ 1862.202239][T32473] Memory cgroup stats for /syz4: [ 1862.202599][T32473] cache 0 [ 1862.238826][T32473] rss 0 [ 1862.259965][T32473] rss_huge 0 [ 1862.263666][T32473] shmem 0 [ 1862.267303][T32473] mapped_file 0 [ 1862.275683][T32473] dirty 0 [ 1862.279879][T32473] writeback 0 [ 1862.304125][T32473] workingset_refault_anon 20033 [ 1862.314327][T32473] workingset_refault_file 1443 [ 1862.320129][T32473] swap 98304 [ 1862.324890][T32473] swapcached 929787904 [ 1862.330101][T32473] pgpgin 436755 [ 1862.335663][T32473] pgpgout 445489 [ 1862.339277][T32473] pgfault 525913 [ 1862.343371][T32473] pgmajfault 7865 [ 1862.347191][T32473] inactive_anon 36864 [ 1862.351230][T32473] active_anon 0 [ 1862.356270][T32473] inactive_file 0 [ 1862.360068][T32473] active_file 0 [ 1862.364197][T32473] unevictable 0 [ 1862.368321][T32473] hierarchical_memory_limit 3145728 [ 1862.380193][T32473] hierarchical_memsw_limit 9223372036854771712 [ 1862.389121][T32473] total_cache 0 [ 1862.398855][T32473] total_rss 0 [ 1862.402617][T32473] total_rss_huge 0 [ 1862.406511][T32473] total_shmem 0 [ 1862.410122][T32473] total_mapped_file 0 [ 1862.414897][T32473] total_dirty 0 [ 1862.418434][T32473] total_writeback 0 [ 1862.423386][T32473] total_workingset_refault_anon 20033 [ 1862.428912][T32473] total_workingset_refault_file 1443 [ 1862.436419][T32473] total_swap 98304 [ 1862.440205][T32473] total_swapcached 929787904 [ 1862.446264][T32473] total_pgpgin 436755 [ 1862.450310][T32473] total_pgpgout 445489 [ 1862.457508][T32473] total_pgfault 525913 [ 1862.462375][T32473] total_pgmajfault 7865 [ 1862.466656][T32473] total_inactive_anon 36864 [ 1862.473806][T32473] total_active_anon 0 [ 1862.479041][T32473] total_inactive_file 0 [ 1862.512020][T32473] total_active_file 0 [ 1862.516090][T32473] total_unevictable 0 [ 1862.520122][T32473] anon_cost 41 [ 1862.552312][T32473] file_cost 0 [ 1862.561118][T32473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8675,pid=32473,uid=0 [ 1862.598172][T32473] Memory cgroup out of memory: Killed process 32473 (syz.4.8675) total-vm:104400kB, anon-rss:1232kB, file-rss:20744kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 1862.977743][T32498] netlink: 330 bytes leftover after parsing attributes in process `syz.1.8681'. [ 1864.174890][T22894] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1864.229427][T22894] CPU: 1 UID: 0 PID: 22894 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1864.229483][T22894] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1864.229497][T22894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1864.229517][T22894] Call Trace: [ 1864.229528][T22894] [ 1864.229541][T22894] dump_stack_lvl+0x100/0x190 [ 1864.229595][T22894] dump_header+0xfb/0x606 [ 1864.229633][T22894] oom_kill_process.cold+0xd/0x330 [ 1864.229675][T22894] out_of_memory+0x340/0x14f0 [ 1864.229728][T22894] ? __pfx_out_of_memory+0x10/0x10 [ 1864.229778][T22894] mem_cgroup_out_of_memory+0xc6/0x130 [ 1864.229835][T22894] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1864.229889][T22894] ? find_held_lock+0x2b/0x80 [ 1864.229944][T22894] ? do_raw_spin_unlock+0x145/0x1e0 [ 1864.229986][T22894] ? _raw_spin_unlock+0x28/0x50 [ 1864.230031][T22894] try_charge_memcg+0x652/0xc90 [ 1864.230086][T22894] ? __pfx_try_charge_memcg+0x10/0x10 [ 1864.230138][T22894] ? find_held_lock+0x2b/0x80 [ 1864.230181][T22894] ? rcu_read_unlock+0x17/0x60 [ 1864.230251][T22894] ? rcu_read_unlock+0x17/0x60 [ 1864.230302][T22894] charge_memcg+0xa6/0x280 [ 1864.230344][T22894] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1864.230392][T22894] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1864.230430][T22894] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1864.230455][T22894] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1864.230497][T22894] swap_cache_alloc_folio+0x1cb/0x300 [ 1864.230524][T22894] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1864.230559][T22894] swap_cluster_readahead+0x53b/0x770 [ 1864.230592][T22894] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1864.230633][T22894] ? __lock_acquire+0x4a5/0x2630 [ 1864.230662][T22894] ? get_vma_policy+0x23f/0x3b0 [ 1864.230699][T22894] swapin_readahead+0x160/0x12c0 [ 1864.230757][T22894] ? __pfx_swapin_readahead+0x10/0x10 [ 1864.230792][T22894] ? find_held_lock+0x2b/0x80 [ 1864.230836][T22894] ? swap_table_get+0x103/0x2c0 [ 1864.230872][T22894] ? swap_table_get+0x103/0x2c0 [ 1864.230900][T22894] ? swap_table_get+0x10d/0x2c0 [ 1864.230928][T22894] ? swap_cache_get_folio+0x1ae/0x600 [ 1864.230954][T22894] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1864.230977][T22894] ? __pfx_get_swap_device+0x10/0x10 [ 1864.231013][T22894] ? do_swap_page+0xb2e/0x68e0 [ 1864.231035][T22894] do_swap_page+0xb2e/0x68e0 [ 1864.231073][T22894] ? __pfx_do_swap_page+0x10/0x10 [ 1864.231098][T22894] ? __free_object+0x2a8/0x400 [ 1864.231126][T22894] ? lockdep_hardirqs_on+0x78/0x100 [ 1864.231164][T22894] ? rcu_is_watching+0x12/0xc0 [ 1864.231196][T22894] ? __pte_offset_map+0x179/0x310 [ 1864.231232][T22894] __handle_mm_fault+0x18c1/0x2b60 [ 1864.231262][T22894] ? reacquire_held_locks+0xce/0x1e0 [ 1864.231289][T22894] ? __pfx___handle_mm_fault+0x10/0x10 [ 1864.231318][T22894] ? lock_vma_under_rcu+0x17c/0x590 [ 1864.231359][T22894] handle_mm_fault+0x36d/0xa20 [ 1864.231394][T22894] do_user_addr_fault+0x5a3/0x12f0 [ 1864.231439][T22894] exc_page_fault+0x6f/0xd0 [ 1864.231472][T22894] asm_exc_page_fault+0x26/0x30 [ 1864.231496][T22894] RIP: 0033:0x7fa29535c84e [ 1864.231516][T22894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1864.231539][T22894] RSP: 002b:00007ffc63ab58d8 EFLAGS: 00010246 [ 1864.231558][T22894] RAX: 0000000000000000 RBX: 0000555594e2e500 RCX: 00007fa29535c84e [ 1864.231576][T22894] RDX: 00007ffc63ab5930 RSI: 0000000000000000 RDI: 0000000000000000 [ 1864.231591][T22894] RBP: 00007ffc63ab599c R08: 0000000000000000 R09: 0000000000000000 [ 1864.231606][T22894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1864.231622][T22894] R13: 00000000000927c0 R14: 00000000001c7f8d R15: 00007ffc63ab59f0 [ 1864.231668][T22894] [ 1864.597068][T22894] memory: usage 3072kB, limit 3072kB, failcnt 185641 [ 1864.604169][T22894] memory+swap: usage 3172kB, limit 9007199254740988kB, failcnt 0 [ 1864.612020][T22894] kmem: usage 2972kB, limit 9007199254740988kB, failcnt 0 [ 1864.619201][T22894] Memory cgroup stats for /syz4: [ 1864.619437][T22894] cache 0 [ 1864.627457][T22894] rss 20480 [ 1864.630704][T22894] rss_huge 0 [ 1864.634028][T22894] shmem 0 [ 1864.636980][T22894] mapped_file 0 [ 1864.640527][T22894] dirty 0 [ 1864.643502][T22894] writeback 0 [ 1864.646892][T22894] workingset_refault_anon 20252 [ 1864.651786][T22894] workingset_refault_file 1443 [ 1864.656560][T22894] swap 102400 [ 1864.659866][T22894] swapcached 929918976 [ 1864.663970][T22894] pgpgin 437008 [ 1864.667464][T22894] pgpgout 445726 [ 1864.671044][T22894] pgfault 526256 [ 1864.674604][T22894] pgmajfault 8051 [ 1864.678254][T22894] inactive_anon 0 [ 1864.681983][T22894] active_anon 0 [ 1864.685635][T22894] inactive_file 0 [ 1864.689278][T22894] active_file 0 [ 1864.692780][T22894] unevictable 0 [ 1864.696254][T22894] hierarchical_memory_limit 3145728 [ 1864.701512][T22894] hierarchical_memsw_limit 9223372036854771712 [ 1864.707676][T22894] total_cache 0 [ 1864.711189][T22894] total_rss 20480 [ 1864.714867][T22894] total_rss_huge 0 [ 1864.718602][T22894] total_shmem 0 [ 1864.722108][T22894] total_mapped_file 0 [ 1864.726125][T22894] total_dirty 0 [ 1864.729626][T22894] total_writeback 0 [ 1864.733482][T22894] total_workingset_refault_anon 20252 [ 1864.738887][T22894] total_workingset_refault_file 1443 [ 1864.744243][T22894] total_swap 102400 [ 1864.748064][T22894] total_swapcached 929918976 [ 1864.752711][T22894] total_pgpgin 437008 [ 1864.756704][T22894] total_pgpgout 445726 [ 1864.760884][T22894] total_pgfault 526256 [ 1864.764968][T22894] total_pgmajfault 8051 [ 1864.769129][T22894] total_inactive_anon 0 [ 1864.773341][T22894] total_active_anon 0 [ 1864.777430][T22894] total_inactive_file 0 [ 1864.781631][T22894] total_active_file 0 [ 1864.785712][T22894] total_unevictable 0 [ 1864.789771][T22894] anon_cost 88 [ 1864.793198][T22894] file_cost 0 [ 1864.796494][T22894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8683,pid=32501,uid=0 [ 1864.811583][T22894] Memory cgroup out of memory: Killed process 32501 (syz.4.8683) total-vm:102220kB, anon-rss:1252kB, file-rss:20760kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 1865.399804][T22894] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1865.470487][T22894] CPU: 1 UID: 0 PID: 22894 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1865.470528][T22894] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1865.470538][T22894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1865.470555][T22894] Call Trace: [ 1865.470563][T22894] [ 1865.470573][T22894] dump_stack_lvl+0x100/0x190 [ 1865.470612][T22894] dump_header+0xfb/0x606 [ 1865.470639][T22894] oom_kill_process.cold+0xd/0x330 [ 1865.470668][T22894] out_of_memory+0x340/0x14f0 [ 1865.470702][T22894] ? __pfx_out_of_memory+0x10/0x10 [ 1865.470738][T22894] mem_cgroup_out_of_memory+0xc6/0x130 [ 1865.470802][T22894] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1865.470857][T22894] ? find_held_lock+0x2b/0x80 [ 1865.470912][T22894] ? do_raw_spin_unlock+0x145/0x1e0 [ 1865.470944][T22894] ? _raw_spin_unlock+0x28/0x50 [ 1865.470977][T22894] try_charge_memcg+0x652/0xc90 [ 1865.471016][T22894] ? __pfx_try_charge_memcg+0x10/0x10 [ 1865.471055][T22894] ? find_held_lock+0x2b/0x80 [ 1865.471087][T22894] ? rcu_read_unlock+0x17/0x60 [ 1865.471120][T22894] ? rcu_read_unlock+0x17/0x60 [ 1865.471156][T22894] charge_memcg+0xa6/0x280 [ 1865.471188][T22894] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1865.471229][T22894] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1865.471267][T22894] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1865.471293][T22894] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1865.471340][T22894] swap_cache_alloc_folio+0x1cb/0x300 [ 1865.471367][T22894] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1865.471402][T22894] swap_cluster_readahead+0x53b/0x770 [ 1865.471437][T22894] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1865.471477][T22894] ? __lock_acquire+0x4a5/0x2630 [ 1865.471504][T22894] ? get_vma_policy+0x23f/0x3b0 [ 1865.471541][T22894] swapin_readahead+0x160/0x12c0 [ 1865.471578][T22894] ? __pfx_swapin_readahead+0x10/0x10 [ 1865.471603][T22894] ? find_held_lock+0x2b/0x80 [ 1865.471635][T22894] ? swap_table_get+0x103/0x2c0 [ 1865.471656][T22894] ? swap_table_get+0x103/0x2c0 [ 1865.471683][T22894] ? swap_table_get+0x10d/0x2c0 [ 1865.471707][T22894] ? swap_cache_get_folio+0x1ae/0x600 [ 1865.471732][T22894] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1865.471755][T22894] ? __pfx_get_swap_device+0x10/0x10 [ 1865.471792][T22894] ? do_swap_page+0xb2e/0x68e0 [ 1865.471813][T22894] do_swap_page+0xb2e/0x68e0 [ 1865.471852][T22894] ? __pfx_do_swap_page+0x10/0x10 [ 1865.471877][T22894] ? __free_object+0x2a8/0x400 [ 1865.471906][T22894] ? lockdep_hardirqs_on+0x78/0x100 [ 1865.471971][T22894] ? rcu_is_watching+0x12/0xc0 [ 1865.472015][T22894] ? __pte_offset_map+0x179/0x310 [ 1865.472063][T22894] __handle_mm_fault+0x18c1/0x2b60 [ 1865.472093][T22894] ? reacquire_held_locks+0xce/0x1e0 [ 1865.472120][T22894] ? __pfx___handle_mm_fault+0x10/0x10 [ 1865.472149][T22894] ? lock_vma_under_rcu+0x17c/0x590 [ 1865.472191][T22894] handle_mm_fault+0x36d/0xa20 [ 1865.472221][T22894] do_user_addr_fault+0x5a3/0x12f0 [ 1865.472265][T22894] exc_page_fault+0x6f/0xd0 [ 1865.472304][T22894] asm_exc_page_fault+0x26/0x30 [ 1865.472328][T22894] RIP: 0033:0x7fa29535c84e [ 1865.472349][T22894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1865.472372][T22894] RSP: 002b:00007ffc63ab58d8 EFLAGS: 00010246 [ 1865.472391][T22894] RAX: 0000000000000000 RBX: 0000555594e2e500 RCX: 00007fa29535c84e [ 1865.472406][T22894] RDX: 00007ffc63ab5930 RSI: 0000000000000000 RDI: 0000000000000000 [ 1865.472420][T22894] RBP: 00007ffc63ab599c R08: 0000000000000000 R09: 0000000000000000 [ 1865.472434][T22894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1865.472449][T22894] R13: 00000000000927c0 R14: 00000000001c8739 R15: 00007ffc63ab59f0 [ 1865.472480][T22894] [ 1865.473275][T22894] memory: usage 3072kB, limit 3072kB, failcnt 185911 [ 1865.852289][T22894] memory+swap: usage 3404kB, limit 9007199254740988kB, failcnt 0 [ 1865.943965][T22894] kmem: usage 2964kB, limit 9007199254740988kB, failcnt 0 [ 1865.951245][T22894] Memory cgroup stats for /syz4: [ 1865.954720][T22894] cache 0 [ 1865.983623][T22894] rss 73728 [ 1865.988546][T22894] rss_huge 0 [ 1865.991816][T22894] shmem 0 [ 1866.012536][T22894] mapped_file 0 [ 1866.021423][T22894] dirty 0 [ 1866.037059][T22894] writeback 0 [ 1866.040468][T22894] workingset_refault_anon 20282 [ 1866.049723][T22894] workingset_refault_file 1443 [ 1866.062032][T22894] swap 339968 [ 1866.065895][T22894] swapcached 930144256 [ 1866.075191][T22894] pgpgin 437130 [ 1866.078711][T22894] pgpgout 445849 [ 1866.092137][T22894] pgfault 526457 [ 1866.099786][T22894] pgmajfault 8073 [ 1866.116614][T22894] inactive_anon 0 [ 1866.120505][T22894] active_anon 98304 [ 1866.128455][T22894] inactive_file 0 [ 1866.145436][T22894] active_file 0 [ 1866.152200][T22894] unevictable 0 [ 1866.157868][T22894] hierarchical_memory_limit 3145728 [ 1866.193066][T22894] hierarchical_memsw_limit 9223372036854771712 [ 1866.202771][T22894] total_cache 0 [ 1866.206338][T22894] total_rss 73728 [ 1866.220460][T22894] total_rss_huge 0 [ 1866.229086][T22894] total_shmem 0 [ 1866.233782][T22894] total_mapped_file 0 [ 1866.237819][T22894] total_dirty 0 [ 1866.241327][T22894] total_writeback 0 [ 1866.245977][T22894] total_workingset_refault_anon 20282 [ 1866.251495][T22894] total_workingset_refault_file 1443 [ 1866.264463][T22894] total_swap 339968 [ 1866.280393][T22894] total_swapcached 930144256 [ 1866.295165][T22894] total_pgpgin 437130 [ 1866.305018][T22894] total_pgpgout 445849 [ 1866.309158][T22894] total_pgfault 526457 [ 1866.324939][T22894] total_pgmajfault 8073 [ 1866.332618][T22894] total_inactive_anon 0 [ 1866.336943][T22894] total_active_anon 98304 [ 1866.344332][T22894] total_inactive_file 0 [ 1866.348536][T22894] total_active_file 0 [ 1866.358138][T22894] total_unevictable 0 [ 1866.365454][T22894] anon_cost 48 [ 1866.368909][T22894] file_cost 0 [ 1866.396412][T22894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8690,pid=32522,uid=0 [ 1866.422858][T22894] Memory cgroup out of memory: Killed process 32522 (syz.4.8690) total-vm:108368kB, anon-rss:1304kB, file-rss:20740kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1867.355506][T32420] mkiss: ax0: crc mode is auto. [ 1867.901425][T32554] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 983 with max blocks 40 with error 117 [ 1867.955885][T32554] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1867.955885][T32554] [ 1868.458695][T32563] ERROR: Out of memory at tomoyo_memory_ok. [ 1870.370304][T32586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1870.457582][T32584] netlink: 'syz.2.8704': attribute type 1 has an invalid length. [ 1870.467702][T32584] netlink: 13 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1870.740708][T32566] syz.4.8700 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1870.768698][T32566] CPU: 1 UID: 0 PID: 32566 Comm: syz.4.8700 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1870.768758][T32566] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1870.768771][T32566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1870.768790][T32566] Call Trace: [ 1870.768801][T32566] [ 1870.768813][T32566] dump_stack_lvl+0x100/0x190 [ 1870.768865][T32566] dump_header+0xfb/0x606 [ 1870.768902][T32566] oom_kill_process.cold+0xd/0x330 [ 1870.768941][T32566] out_of_memory+0x340/0x14f0 [ 1870.768986][T32566] ? __pfx_out_of_memory+0x10/0x10 [ 1870.769033][T32566] mem_cgroup_out_of_memory+0xc6/0x130 [ 1870.769084][T32566] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1870.769129][T32566] ? find_held_lock+0x2b/0x80 [ 1870.769183][T32566] ? do_raw_spin_unlock+0x145/0x1e0 [ 1870.769219][T32566] ? _raw_spin_unlock+0x28/0x50 [ 1870.769257][T32566] try_charge_memcg+0x652/0xc90 [ 1870.769302][T32566] ? __pfx_try_charge_memcg+0x10/0x10 [ 1870.769347][T32566] ? find_held_lock+0x2b/0x80 [ 1870.769384][T32566] ? rcu_read_unlock+0x17/0x60 [ 1870.769421][T32566] ? rcu_read_unlock+0x17/0x60 [ 1870.769463][T32566] charge_memcg+0xa6/0x280 [ 1870.769500][T32566] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1870.769547][T32566] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1870.769591][T32566] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1870.769620][T32566] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1870.769666][T32566] swap_cache_alloc_folio+0x1cb/0x300 [ 1870.769697][T32566] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1870.769737][T32566] swap_cluster_readahead+0x411/0x770 [ 1870.769766][T32566] ? trace_ignore_this_task+0x56/0x100 [ 1870.769813][T32566] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1870.769850][T32566] ? __pfx_css_rstat_updated+0x10/0x10 [ 1870.769905][T32566] ? get_vma_policy+0x23f/0x3b0 [ 1870.769950][T32566] swapin_readahead+0x160/0x12c0 [ 1870.769991][T32566] ? __pfx_swapin_readahead+0x10/0x10 [ 1870.770018][T32566] ? find_held_lock+0x2b/0x80 [ 1870.770055][T32566] ? swap_table_get+0x103/0x2c0 [ 1870.770080][T32566] ? swap_table_get+0x103/0x2c0 [ 1870.770112][T32566] ? swap_table_get+0x10d/0x2c0 [ 1870.770138][T32566] ? swap_cache_get_folio+0x1ae/0x600 [ 1870.770172][T32566] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1870.770199][T32566] ? __pfx_get_swap_device+0x10/0x10 [ 1870.770241][T32566] ? do_swap_page+0xb2e/0x68e0 [ 1870.770266][T32566] do_swap_page+0xb2e/0x68e0 [ 1870.770310][T32566] ? __pfx_do_swap_page+0x10/0x10 [ 1870.770346][T32566] ? rcu_is_watching+0x12/0xc0 [ 1870.770382][T32566] ? __pte_offset_map+0x179/0x310 [ 1870.770422][T32566] __handle_mm_fault+0x18c1/0x2b60 [ 1870.770457][T32566] ? reacquire_held_locks+0xce/0x1e0 [ 1870.770487][T32566] ? __pfx___handle_mm_fault+0x10/0x10 [ 1870.770522][T32566] ? lock_vma_under_rcu+0x17c/0x590 [ 1870.770571][T32566] handle_mm_fault+0x36d/0xa20 [ 1870.770605][T32566] do_user_addr_fault+0x5a3/0x12f0 [ 1870.770656][T32566] exc_page_fault+0x6f/0xd0 [ 1870.770696][T32566] asm_exc_page_fault+0x26/0x30 [ 1870.770723][T32566] RIP: 0033:0x7fa29525077c [ 1870.770745][T32566] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 1870.770772][T32566] RSP: 002b:00007ffc63ab5638 EFLAGS: 00010246 [ 1870.770794][T32566] RAX: 0000000000000000 RBX: ffffffff82578990 RCX: 0000000000000000 [ 1870.770811][T32566] RDX: 0000000000000990 RSI: ffffffff82578990 RDI: 0000000000000000 [ 1870.770829][T32566] RBP: 0000000000000064 R08: 00007fa295600000 R09: 00007fa295602000 [ 1870.770847][T32566] R10: 0000000082578994 R11: 0000000000000000 R12: 00007fa295616038 [ 1870.770864][T32566] R13: 000000000000006b R14: ffffffff8257893b R15: 00007fa296145720 [ 1870.770883][T32566] ? handle_mm_fault+0x2b/0xa20 [ 1870.770910][T32566] ? handle_mm_fault+0x80/0xa20 [ 1870.770941][T32566] ? handle_mm_fault+0x80/0xa20 [ 1870.770972][T32566] [ 1870.771086][T32566] memory: usage 3072kB, limit 3072kB, failcnt 187713 [ 1871.176214][T32566] memory+swap: usage 3116kB, limit 9007199254740988kB, failcnt 0 [ 1871.186442][T32566] kmem: usage 2916kB, limit 9007199254740988kB, failcnt 0 [ 1871.193635][T32566] Memory cgroup stats for /syz4: [ 1871.193843][T32566] cache 0 [ 1871.238904][T32566] rss 0 [ 1871.241746][T32566] rss_huge 0 [ 1871.244988][T32566] shmem 0 [ 1871.254952][T32566] mapped_file 0 [ 1871.274978][T32566] dirty 0 [ 1871.288346][T32566] writeback 0 [ 1871.291720][T32566] workingset_refault_anon 21639 [ 1871.317699][T32566] workingset_refault_file 1443 [ 1871.322550][T32566] swap 45056 [ 1871.346009][T32566] swapcached 930328576 [ 1871.350162][T32566] pgpgin 438557 [ 1871.353662][T32566] pgpgout 447261 [ 1871.366813][T32566] pgfault 528037 [ 1871.374442][T32566] pgmajfault 9076 [ 1871.382436][T32566] inactive_anon 135168 [ 1871.387050][T32566] active_anon 20480 [ 1871.391045][T32566] inactive_file 0 [ 1871.394879][T32566] active_file 0 [ 1871.401748][T32566] unevictable 0 [ 1871.411483][T32566] hierarchical_memory_limit 3145728 [ 1871.417294][T32566] hierarchical_memsw_limit 9223372036854771712 [ 1871.431434][T32566] total_cache 0 [ 1871.438280][T32566] total_rss 0 [ 1871.441734][T32566] total_rss_huge 0 [ 1871.446987][T32566] total_shmem 0 [ 1871.463023][T32566] total_mapped_file 0 [ 1871.467672][T32566] total_dirty 0 [ 1871.471180][T32566] total_writeback 0 [ 1871.497165][T32566] total_workingset_refault_anon 21639 [ 1871.507300][T32566] total_workingset_refault_file 1443 [ 1871.512664][T32566] total_swap 45056 [ 1871.525536][T32566] total_swapcached 930328576 [ 1871.535196][T32566] total_pgpgin 438557 [ 1871.539436][T32566] total_pgpgout 447261 [ 1871.549544][T32566] total_pgfault 528037 [ 1871.559652][T32566] total_pgmajfault 9076 [ 1871.563924][T32566] total_inactive_anon 135168 [ 1871.574510][T32566] total_active_anon 20480 [ 1871.579105][T32566] total_inactive_file 0 [ 1871.599419][T32566] total_active_file 0 [ 1871.603591][T32566] total_unevictable 0 [ 1871.667631][T32566] anon_cost 48 [ 1871.675485][T32566] file_cost 0 [ 1871.687065][T32566] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8700,pid=32566,uid=0 [ 1871.733775][T32566] Memory cgroup out of memory: Killed process 32566 (syz.4.8700) total-vm:104268kB, anon-rss:1228kB, file-rss:20760kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 1872.709375][T22894] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1872.743197][T22894] CPU: 1 UID: 0 PID: 22894 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1872.743240][T22894] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1872.743250][T22894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1872.743266][T22894] Call Trace: [ 1872.743274][T22894] [ 1872.743284][T22894] dump_stack_lvl+0x100/0x190 [ 1872.743324][T22894] dump_header+0xfb/0x606 [ 1872.743351][T22894] oom_kill_process.cold+0xd/0x330 [ 1872.743379][T22894] out_of_memory+0x340/0x14f0 [ 1872.743413][T22894] ? __pfx_out_of_memory+0x10/0x10 [ 1872.743449][T22894] mem_cgroup_out_of_memory+0xc6/0x130 [ 1872.743490][T22894] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1872.743529][T22894] ? find_held_lock+0x2b/0x80 [ 1872.743569][T22894] ? do_raw_spin_unlock+0x145/0x1e0 [ 1872.743601][T22894] ? _raw_spin_unlock+0x28/0x50 [ 1872.743634][T22894] try_charge_memcg+0x652/0xc90 [ 1872.743673][T22894] ? __pfx_try_charge_memcg+0x10/0x10 [ 1872.743711][T22894] ? find_held_lock+0x2b/0x80 [ 1872.743744][T22894] ? rcu_read_unlock+0x17/0x60 [ 1872.743779][T22894] ? rcu_read_unlock+0x17/0x60 [ 1872.743823][T22894] charge_memcg+0xa6/0x280 [ 1872.743856][T22894] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1872.743897][T22894] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1872.743935][T22894] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1872.743960][T22894] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1872.744000][T22894] swap_cache_alloc_folio+0x1cb/0x300 [ 1872.744027][T22894] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1872.744056][T22894] ? do_raw_spin_lock+0x128/0x260 [ 1872.744090][T22894] swap_cluster_readahead+0x53b/0x770 [ 1872.744123][T22894] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1872.744148][T22894] ? debug_object_activate+0x331/0x490 [ 1872.744182][T22894] ? __pfx_debug_object_activate+0x10/0x10 [ 1872.744223][T22894] ? __lock_acquire+0x4a5/0x2630 [ 1872.744253][T22894] ? get_vma_policy+0x23f/0x3b0 [ 1872.744291][T22894] swapin_readahead+0x160/0x12c0 [ 1872.744329][T22894] ? __pfx_swapin_readahead+0x10/0x10 [ 1872.744354][T22894] ? find_held_lock+0x2b/0x80 [ 1872.744387][T22894] ? swap_table_get+0x103/0x2c0 [ 1872.744409][T22894] ? swap_table_get+0x103/0x2c0 [ 1872.744436][T22894] ? swap_table_get+0x10d/0x2c0 [ 1872.744460][T22894] ? swap_cache_get_folio+0x1ae/0x600 [ 1872.744485][T22894] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1872.744508][T22894] ? __pfx_get_swap_device+0x10/0x10 [ 1872.744545][T22894] ? do_swap_page+0xb2e/0x68e0 [ 1872.744567][T22894] do_swap_page+0xb2e/0x68e0 [ 1872.744605][T22894] ? __pfx_do_swap_page+0x10/0x10 [ 1872.744633][T22894] ? __free_object+0x2a8/0x400 [ 1872.744660][T22894] ? lockdep_hardirqs_on+0x78/0x100 [ 1872.744698][T22894] ? rcu_is_watching+0x12/0xc0 [ 1872.744730][T22894] ? __pte_offset_map+0x179/0x310 [ 1872.744766][T22894] __handle_mm_fault+0x18c1/0x2b60 [ 1872.744797][T22894] ? reacquire_held_locks+0xce/0x1e0 [ 1872.744828][T22894] ? __pfx___handle_mm_fault+0x10/0x10 [ 1872.744858][T22894] ? lock_vma_under_rcu+0x17c/0x590 [ 1872.744900][T22894] handle_mm_fault+0x36d/0xa20 [ 1872.744931][T22894] do_user_addr_fault+0x5a3/0x12f0 [ 1872.744975][T22894] exc_page_fault+0x6f/0xd0 [ 1872.745009][T22894] asm_exc_page_fault+0x26/0x30 [ 1872.745032][T22894] RIP: 0033:0x7fa29535c84e [ 1872.745053][T22894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1872.745076][T22894] RSP: 002b:00007ffc63ab58d8 EFLAGS: 00010246 [ 1872.745094][T22894] RAX: 0000000000000000 RBX: 0000555594e2e500 RCX: 00007fa29535c84e [ 1872.745110][T22894] RDX: 00007ffc63ab5930 RSI: 0000000000000000 RDI: 0000000000000000 [ 1872.745124][T22894] RBP: 00007ffc63ab599c R08: 0000000000000000 R09: 0000000000000000 [ 1872.745138][T22894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1872.745153][T22894] R13: 00000000000927c0 R14: 00000000001ca321 R15: 00007ffc63ab59f0 [ 1872.745184][T22894] [ 1872.745194][T22894] memory: usage 3072kB, limit 3072kB, failcnt 187890 [ 1873.289720][T22894] memory+swap: usage 3168kB, limit 9007199254740988kB, failcnt 0 [ 1873.345313][T22894] kmem: usage 2964kB, limit 9007199254740988kB, failcnt 0 [ 1873.362249][T22894] Memory cgroup stats for /syz4: [ 1873.362506][T22894] cache 0 [ 1873.403721][T22894] rss 90112 [ 1873.412407][T32610] zswap: compressor not available [ 1873.474677][T22894] rss_huge 0 [ 1873.498298][T22894] shmem 0 [ 1873.501307][T22894] mapped_file 0 [ 1873.523907][T22894] dirty 0 [ 1873.547998][T22894] writeback 0 [ 1873.556003][T22894] workingset_refault_anon 21718 [ 1873.560968][T22894] workingset_refault_file 1443 [ 1873.574064][T22894] swap 102400 [ 1873.577408][T22894] swapcached 930361344 [ 1873.581679][T22894] pgpgin 438671 [ 1873.612413][T22894] pgpgout 447388 [ 1873.623130][T22894] pgfault 528337 [ 1873.632401][T22894] pgmajfault 9151 [ 1873.645214][T22894] inactive_anon 90112 [ 1873.649266][T22894] active_anon 16384 [ 1873.653125][T22894] inactive_file 0 [ 1873.676437][T22894] active_file 0 [ 1873.692518][T22894] unevictable 0 [ 1873.703288][T22894] hierarchical_memory_limit 3145728 [ 1873.720095][T22894] hierarchical_memsw_limit 9223372036854771712 [ 1873.737864][T22894] total_cache 0 [ 1873.743420][T22894] total_rss 90112 [ 1873.750519][T22894] total_rss_huge 0 [ 1873.756806][T22894] total_shmem 0 [ 1873.763299][T22894] total_mapped_file 0 [ 1873.771902][T22894] total_dirty 0 [ 1873.788212][T22894] total_writeback 0 [ 1873.792083][T22894] total_workingset_refault_anon 21718 [ 1873.803972][T22894] total_workingset_refault_file 1443 [ 1873.819610][T22894] total_swap 102400 [ 1873.823894][T22894] total_swapcached 930361344 [ 1873.837137][T22894] total_pgpgin 438671 [ 1873.841187][T22894] total_pgpgout 447388 [ 1873.859661][T22894] total_pgfault 528337 [ 1873.876956][T22894] total_pgmajfault 9151 [ 1873.881229][T22894] total_inactive_anon 90112 [ 1873.892774][T22894] total_active_anon 16384 [ 1873.897271][T22894] total_inactive_file 0 [ 1873.901899][T22894] total_active_file 0 [ 1873.912695][T22894] total_unevictable 0 [ 1873.916766][T22894] anon_cost 44 [ 1873.944695][T22894] file_cost 0 [ 1873.949252][T22894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8708,pid=32600,uid=0 [ 1873.977301][T22894] Memory cgroup out of memory: Killed process 32600 (syz.4.8708) total-vm:104268kB, anon-rss:1316kB, file-rss:21128kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1875.213511][T32641] FAULT_INJECTION: forcing a failure. [ 1875.213511][T32641] name failslab, interval 1, probability 393216, space 0, times 0 [ 1875.263083][T32641] CPU: 0 UID: 0 PID: 32641 Comm: syz.5.8717 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1875.263149][T32641] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1875.263165][T32641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1875.263186][T32641] Call Trace: [ 1875.263198][T32641] [ 1875.263212][T32641] dump_stack_lvl+0x100/0x190 [ 1875.263271][T32641] should_fail_ex.cold+0x5/0xa [ 1875.263312][T32641] should_failslab+0xc2/0x120 [ 1875.263360][T32641] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1875.263400][T32641] ? audit_log_start+0x29d/0x930 [ 1875.263449][T32641] audit_log_start+0x29d/0x930 [ 1875.263492][T32641] ? __pfx_audit_log_start+0x10/0x10 [ 1875.263544][T32641] ? integrity_audit_msg+0x41/0x60 [ 1875.263585][T32641] integrity_audit_message+0x10c/0x4f0 [ 1875.263634][T32641] ? __pfx_integrity_audit_message+0x10/0x10 [ 1875.263675][T32641] ? __pfx_ima_add_template_entry+0x10/0x10 [ 1875.263724][T32641] integrity_audit_msg+0x41/0x60 [ 1875.263764][T32641] ima_add_violation+0x1b9/0x3c0 [ 1875.263819][T32641] ? __pfx_ima_add_violation+0x10/0x10 [ 1875.263864][T32641] ? ima_d_path+0x137/0x260 [ 1875.263912][T32641] ? __pfx_ima_d_path+0x10/0x10 [ 1875.263968][T32641] ? __pfx_down_write+0x10/0x10 [ 1875.264036][T32641] process_measurement+0x148f/0x2350 [ 1875.264086][T32641] ? lock_acquire+0x17c/0x330 [ 1875.264123][T32641] ? __pfx_process_measurement+0x10/0x10 [ 1875.264169][T32641] ? rcu_is_watching+0x12/0xc0 [ 1875.264226][T32641] ? tracing_check_open_get_tr.part.0+0x101/0x170 [ 1875.264315][T32641] ? tracing_check_open_get_tr.part.0+0x106/0x170 [ 1875.264361][T32641] ? inode_to_bdi+0x9e/0x160 [ 1875.264409][T32641] ima_file_check+0xcc/0x120 [ 1875.264452][T32641] ? __pfx_ima_file_check+0x10/0x10 [ 1875.264508][T32641] security_file_post_open+0xc4/0x210 [ 1875.264562][T32641] path_openat+0x1418/0x31a0 [ 1875.264635][T32641] ? __pfx_path_openat+0x10/0x10 [ 1875.264705][T32641] do_file_open+0x20e/0x430 [ 1875.264754][T32641] ? __pfx_do_file_open+0x10/0x10 [ 1875.264832][T32641] ? alloc_fd+0x476/0x790 [ 1875.264879][T32641] ? do_getname+0x191/0x390 [ 1875.264937][T32641] do_sys_openat2+0x10d/0x1e0 [ 1875.264992][T32641] ? __pfx_do_sys_openat2+0x10/0x10 [ 1875.265052][T32641] ? __fget_files+0x21f/0x3d0 [ 1875.265106][T32641] __x64_sys_openat+0x12d/0x210 [ 1875.265141][T32641] ? __pfx___x64_sys_openat+0x10/0x10 [ 1875.265173][T32641] ? xfd_validate_state+0x129/0x190 [ 1875.265229][T32641] do_syscall_64+0x106/0xf80 [ 1875.265278][T32641] ? clear_bhb_loop+0x40/0x90 [ 1875.265322][T32641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.265361][T32641] RIP: 0033:0x7fa520b9bf79 [ 1875.265391][T32641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.265428][T32641] RSP: 002b:00007fa521ad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1875.265463][T32641] RAX: ffffffffffffffda RBX: 00007fa520e15fa0 RCX: 00007fa520b9bf79 [ 1875.265488][T32641] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1875.265512][T32641] RBP: 00007fa520c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1875.265534][T32641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1875.265554][T32641] R13: 00007fa520e16038 R14: 00007fa520e15fa0 R15: 00007ffc18aa3cb8 [ 1875.265600][T32641] [ 1875.613629][T32641] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1875.622379][T32641] audit: out of memory in audit_log_start [ 1876.069780][T32646] netlink: 'syz.5.8718': attribute type 1 has an invalid length. [ 1876.160857][T32646] FAULT_INJECTION: forcing a failure. [ 1876.160857][T32646] name failslab, interval 1, probability 393216, space 0, times 0 [ 1876.200464][T32646] CPU: 1 UID: 0 PID: 32646 Comm: syz.5.8718 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1876.200523][T32646] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1876.200538][T32646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1876.200559][T32646] Call Trace: [ 1876.200570][T32646] [ 1876.200584][T32646] dump_stack_lvl+0x100/0x190 [ 1876.200645][T32646] should_fail_ex.cold+0x5/0xa [ 1876.200685][T32646] should_failslab+0xc2/0x120 [ 1876.200734][T32646] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1876.200776][T32646] ? key_alloc+0x3c5/0x1310 [ 1876.200829][T32646] ? rcu_is_watching+0x12/0xc0 [ 1876.200893][T32646] key_alloc+0x3c5/0x1310 [ 1876.200962][T32646] ? __pfx_key_alloc+0x10/0x10 [ 1876.201027][T32646] keyring_alloc+0x44/0xc0 [ 1876.201066][T32646] lookup_user_key+0x9b8/0x1300 [ 1876.201124][T32646] ? __pfx_lookup_user_key+0x10/0x10 [ 1876.201177][T32646] ? do_futex+0x192/0x350 [ 1876.201214][T32646] ? __pfx_do_futex+0x10/0x10 [ 1876.201253][T32646] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1876.201311][T32646] ? __x64_sys_futex+0x34f/0x4d0 [ 1876.201346][T32646] ? __x64_sys_futex+0x358/0x4d0 [ 1876.201393][T32646] keyctl_watch_key+0x52/0x500 [ 1876.201445][T32646] __do_sys_keyctl+0x29f/0x5a0 [ 1876.201496][T32646] do_syscall_64+0x106/0xf80 [ 1876.201545][T32646] ? clear_bhb_loop+0x40/0x90 [ 1876.201590][T32646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.201628][T32646] RIP: 0033:0x7fa520b9bf79 [ 1876.201658][T32646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.201695][T32646] RSP: 002b:00007fa521ab0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1876.201729][T32646] RAX: ffffffffffffffda RBX: 00007fa520e16090 RCX: 00007fa520b9bf79 [ 1876.201753][T32646] RDX: 0000000000000005 RSI: ffffffffffffffff RDI: 0200000000000020 [ 1876.201775][T32646] RBP: 00007fa520c327e0 R08: 0000000000000008 R09: 0000000000000000 [ 1876.201797][T32646] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1876.201817][T32646] R13: 00007fa520e16128 R14: 00007fa520e16090 R15: 00007ffc18aa3cb8 [ 1876.201893][T32646] [ 1876.837996][T22894] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1876.849199][T22894] CPU: 1 UID: 0 PID: 22894 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1876.849255][T22894] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1876.849269][T22894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1876.849289][T22894] Call Trace: [ 1876.849300][T22894] [ 1876.849313][T22894] dump_stack_lvl+0x100/0x190 [ 1876.849368][T22894] dump_header+0xfb/0x606 [ 1876.849406][T22894] oom_kill_process.cold+0xd/0x330 [ 1876.849448][T22894] out_of_memory+0x340/0x14f0 [ 1876.849495][T22894] ? __pfx_out_of_memory+0x10/0x10 [ 1876.849546][T22894] mem_cgroup_out_of_memory+0xc6/0x130 [ 1876.849603][T22894] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1876.849658][T22894] ? find_held_lock+0x2b/0x80 [ 1876.849713][T22894] ? do_raw_spin_unlock+0x145/0x1e0 [ 1876.849756][T22894] ? _raw_spin_unlock+0x28/0x50 [ 1876.849811][T22894] try_charge_memcg+0x652/0xc90 [ 1876.849866][T22894] ? __pfx_try_charge_memcg+0x10/0x10 [ 1876.849921][T22894] ? find_held_lock+0x2b/0x80 [ 1876.849967][T22894] ? rcu_read_unlock+0x17/0x60 [ 1876.850013][T22894] ? rcu_read_unlock+0x17/0x60 [ 1876.850063][T22894] charge_memcg+0xa6/0x280 [ 1876.850108][T22894] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1876.850166][T22894] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1876.850224][T22894] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1876.850260][T22894] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1876.850316][T22894] swap_cache_alloc_folio+0x1cb/0x300 [ 1876.850354][T22894] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1876.850404][T22894] swap_cluster_readahead+0x411/0x770 [ 1876.850451][T22894] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1876.850495][T22894] ? __lock_acquire+0x4a5/0x2630 [ 1876.850540][T22894] ? __lock_acquire+0x4a5/0x2630 [ 1876.850580][T22894] ? get_vma_policy+0x23f/0x3b0 [ 1876.850632][T22894] swapin_readahead+0x160/0x12c0 [ 1876.850682][T22894] ? __pfx_swapin_readahead+0x10/0x10 [ 1876.850715][T22894] ? find_held_lock+0x2b/0x80 [ 1876.850760][T22894] ? swap_table_get+0x103/0x2c0 [ 1876.850797][T22894] ? swap_table_get+0x103/0x2c0 [ 1876.850836][T22894] ? swap_table_get+0x10d/0x2c0 [ 1876.850870][T22894] ? swap_cache_get_folio+0x1ae/0x600 [ 1876.850905][T22894] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1876.850938][T22894] ? __pfx_get_swap_device+0x10/0x10 [ 1876.850989][T22894] ? do_swap_page+0xb2e/0x68e0 [ 1876.851020][T22894] do_swap_page+0xb2e/0x68e0 [ 1876.851073][T22894] ? __pfx_do_swap_page+0x10/0x10 [ 1876.851108][T22894] ? __free_object+0x2a8/0x400 [ 1876.851147][T22894] ? lockdep_hardirqs_on+0x78/0x100 [ 1876.851198][T22894] ? rcu_is_watching+0x12/0xc0 [ 1876.851242][T22894] ? __pte_offset_map+0x179/0x310 [ 1876.851291][T22894] __handle_mm_fault+0x18c1/0x2b60 [ 1876.851334][T22894] ? reacquire_held_locks+0xce/0x1e0 [ 1876.851371][T22894] ? __pfx___handle_mm_fault+0x10/0x10 [ 1876.851413][T22894] ? lock_vma_under_rcu+0x17c/0x590 [ 1876.851472][T22894] handle_mm_fault+0x36d/0xa20 [ 1876.851516][T22894] do_user_addr_fault+0x5a3/0x12f0 [ 1876.851578][T22894] exc_page_fault+0x6f/0xd0 [ 1876.851626][T22894] asm_exc_page_fault+0x26/0x30 [ 1876.851660][T22894] RIP: 0033:0x7fa29535c84e [ 1876.851687][T22894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1876.851719][T22894] RSP: 002b:00007ffc63ab58d8 EFLAGS: 00010246 [ 1876.851745][T22894] RAX: 0000000000000000 RBX: 0000555594e2e500 RCX: 00007fa29535c84e [ 1876.851766][T22894] RDX: 00007ffc63ab5930 RSI: 0000000000000000 RDI: 0000000000000000 [ 1876.851794][T22894] RBP: 00007ffc63ab599c R08: 0000000000000000 R09: 0000000000000000 [ 1876.851816][T22894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1876.851836][T22894] R13: 00000000000927c0 R14: 00000000001cb2e4 R15: 00007ffc63ab59f0 [ 1876.851881][T22894] [ 1876.852004][T22894] memory: usage 3072kB, limit 3072kB, failcnt 188281 [ 1877.298760][T22894] memory+swap: usage 3376kB, limit 9007199254740988kB, failcnt 0 [ 1877.319603][T22894] kmem: usage 2920kB, limit 9007199254740988kB, failcnt 0 [ 1877.327539][T22894] Memory cgroup stats for /syz4: [ 1877.327761][T22894] cache 0 [ 1877.344836][T22894] rss 114688 [ 1877.348110][T22894] rss_huge 0 [ 1877.370416][T22894] shmem 0 [ 1877.373430][T22894] mapped_file 0 [ 1877.384402][T22894] dirty 0 [ 1877.387419][T22894] writeback 0 [ 1877.390830][T22894] workingset_refault_anon 21956 [ 1877.405178][T22894] workingset_refault_file 1443 [ 1877.411287][T22894] swap 311296 [ 1877.415357][T22894] swapcached 930639872 [ 1877.419493][T22894] pgpgin 439007 [ 1877.423001][T22894] pgpgout 447712 [ 1877.439913][T22894] pgfault 528821 [ 1877.448146][T22894] pgmajfault 9318 [ 1877.451864][T22894] inactive_anon 114688 [ 1877.458322][T22894] active_anon 40960 [ 1877.462203][T22894] inactive_file 0 [ 1877.483867][T22894] active_file 0 [ 1877.487576][T22894] unevictable 0 [ 1877.491085][T22894] hierarchical_memory_limit 3145728 [ 1877.503676][T22894] hierarchical_memsw_limit 9223372036854771712 [ 1877.511398][T22894] total_cache 0 [ 1877.515455][T22894] total_rss 114688 [ 1877.519248][T22894] total_rss_huge 0 [ 1877.523113][T22894] total_shmem 0 [ 1877.533575][T22894] total_mapped_file 0 [ 1877.537677][T22894] total_dirty 0 [ 1877.541192][T22894] total_writeback 0 [ 1877.560511][T22894] total_workingset_refault_anon 21956 [ 1877.590313][T22894] total_workingset_refault_file 1443 [ 1877.596349][T22894] total_swap 311296 [ 1877.600225][T22894] total_swapcached 930639872 [ 1877.610874][T22894] total_pgpgin 439007 [ 1877.616876][T22894] total_pgpgout 447712 [ 1877.623069][T22894] total_pgfault 528821 [ 1877.627195][T22894] total_pgmajfault 9318 [ 1877.631400][T22894] total_inactive_anon 114688 [ 1877.640781][T22894] total_active_anon 40960 [ 1877.647572][T22894] total_inactive_file 0 [ 1877.651785][T22894] total_active_file 0 [ 1877.658758][T22894] total_unevictable 0 [ 1877.664822][T22894] anon_cost 59 [ 1877.668598][T22894] file_cost 0 [ 1877.671928][T22894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8715,pid=32628,uid=0 [ 1877.733403][T22894] Memory cgroup out of memory: Killed process 32628 (syz.4.8715) total-vm:108368kB, anon-rss:1340kB, file-rss:20936kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1878.555185][T32563] mkiss: ax0: crc mode is auto. [ 1879.041459][T32661] syz.4.8721 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1879.125190][T32661] CPU: 1 UID: 0 PID: 32661 Comm: syz.4.8721 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1879.125246][T32661] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1879.125259][T32661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1879.125278][T32661] Call Trace: [ 1879.125288][T32661] [ 1879.125301][T32661] dump_stack_lvl+0x100/0x190 [ 1879.125352][T32661] dump_header+0xfb/0x606 [ 1879.125390][T32661] oom_kill_process.cold+0xd/0x330 [ 1879.125431][T32661] out_of_memory+0x340/0x14f0 [ 1879.125480][T32661] ? __pfx_out_of_memory+0x10/0x10 [ 1879.125530][T32661] mem_cgroup_out_of_memory+0xc6/0x130 [ 1879.125594][T32661] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1879.125648][T32661] ? find_held_lock+0x2b/0x80 [ 1879.125702][T32661] ? do_raw_spin_unlock+0x145/0x1e0 [ 1879.125745][T32661] ? _raw_spin_unlock+0x28/0x50 [ 1879.125792][T32661] try_charge_memcg+0x652/0xc90 [ 1879.125847][T32661] ? __pfx_try_charge_memcg+0x10/0x10 [ 1879.125889][T32661] ? rcu_read_unlock+0x17/0x60 [ 1879.125935][T32661] ? rcu_read_unlock+0x17/0x60 [ 1879.125990][T32661] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1879.126032][T32661] __memcg_kmem_charge_page+0xd0/0x530 [ 1879.126083][T32661] memcg_charge_kernel_stack+0xc1/0x1f0 [ 1879.126145][T32661] copy_process+0x61f/0x79b0 [ 1879.126200][T32661] ? __pfx_copy_process+0x10/0x10 [ 1879.126245][T32661] ? _copy_from_user+0x59/0xd0 [ 1879.126301][T32661] kernel_clone+0xfc/0x930 [ 1879.126333][T32661] ? rcu_is_watching+0x12/0xc0 [ 1879.126377][T32661] ? __pfx_kernel_clone+0x10/0x10 [ 1879.126427][T32661] ? __lock_acquire+0x4a5/0x2630 [ 1879.126464][T32661] __do_sys_clone3+0x214/0x290 [ 1879.126498][T32661] ? __pfx___do_sys_clone3+0x10/0x10 [ 1879.126554][T32661] ? _copy_to_user+0xaf/0xd0 [ 1879.126627][T32661] ? do_user_addr_fault+0x8d6/0x12f0 [ 1879.126682][T32661] do_syscall_64+0x106/0xf80 [ 1879.126728][T32661] ? clear_bhb_loop+0x40/0x90 [ 1879.126769][T32661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.126803][T32661] RIP: 0033:0x7fa29539cd89 [ 1879.126830][T32661] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 1879.126863][T32661] RSP: 002b:00007ffc63ab54b8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 1879.126895][T32661] RAX: ffffffffffffffda RBX: 00007fa2953583a0 RCX: 00007fa29539cd89 [ 1879.126917][T32661] RDX: 00007fa2953583a0 RSI: 0000000000000058 RDI: 00007ffc63ab5510 [ 1879.126937][T32661] RBP: 00007fa2961bb6c0 R08: 00007fa2961bb6c0 R09: 00007ffc63ab55f7 [ 1879.126959][T32661] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 1879.126981][T32661] R13: 000000000000006e R14: 00007ffc63ab5510 R15: 00007ffc63ab55f8 [ 1879.127026][T32661] [ 1879.127038][T32661] memory: usage 3072kB, limit 3072kB, failcnt 188751 [ 1879.425450][T32661] memory+swap: usage 3180kB, limit 9007199254740988kB, failcnt 0 [ 1879.436439][T32661] kmem: usage 3048kB, limit 9007199254740988kB, failcnt 0 [ 1879.444253][T32661] Memory cgroup stats for /syz4: [ 1879.444464][T32661] cache 0 [ 1879.452545][T32661] rss 16384 [ 1879.503294][T32661] rss_huge 0 [ 1879.513530][T32661] shmem 0 [ 1879.517379][T32661] mapped_file 0 [ 1879.526888][T32661] dirty 0 [ 1879.539086][T32661] writeback 0 [ 1879.543205][T32661] workingset_refault_anon 21990 [ 1879.548733][T32661] workingset_refault_file 1443 [ 1879.569509][T32661] swap 94208 [ 1879.582497][T32661] swapcached 930799616 [ 1879.587717][T32661] pgpgin 439060 [ 1879.603171][T32661] pgpgout 447793 [ 1879.607158][T32661] pgfault 528959 [ 1879.610735][T32661] pgmajfault 9349 [ 1879.623052][T32661] inactive_anon 4096 [ 1879.637378][T32661] active_anon 0 [ 1879.640877][T32661] inactive_file 0 [ 1879.658182][T32661] active_file 0 [ 1879.661843][T32661] unevictable 0 [ 1879.678776][T32661] hierarchical_memory_limit 3145728 [ 1879.685147][T32666] ERROR: Out of memory at tomoyo_memory_ok. [ 1879.692050][T32661] hierarchical_memsw_limit 9223372036854771712 [ 1879.699826][T32661] total_cache 0 [ 1879.704302][T32661] total_rss 16384 [ 1879.708108][T32661] total_rss_huge 0 [ 1879.712398][T32661] total_shmem 0 [ 1879.783517][T32661] total_mapped_file 0 [ 1879.787613][T32661] total_dirty 0 [ 1879.791456][T32661] total_writeback 0 [ 1879.801777][T32661] total_workingset_refault_anon 21990 [ 1879.843927][T32661] total_workingset_refault_file 1443 [ 1879.849457][T32661] total_swap 94208 [ 1879.871666][T32661] total_swapcached 930799616 [ 1879.876330][T32661] total_pgpgin 439060 [ 1879.880692][T32661] total_pgpgout 447793 [ 1879.909116][T32661] total_pgfault 528959 [ 1880.065398][T32661] total_pgmajfault 9349 [ 1880.078668][T32661] total_inactive_anon 4096 [ 1880.090383][T32661] total_active_anon 0 [ 1880.099899][T32661] total_inactive_file 0 [ 1880.112278][T32661] total_active_file 0 [ 1880.129011][T32661] total_unevictable 0 [ 1880.138598][T32661] anon_cost 127 [ 1880.148835][T32661] file_cost 0 [ 1880.155477][T32661] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8721,pid=32661,uid=0 [ 1880.190116][T32661] Memory cgroup out of memory: Killed process 32661 (syz.4.8721) total-vm:104400kB, anon-rss:1232kB, file-rss:20744kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 1880.995762][T32105] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1881.105533][T32673] syz.4.8724 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1881.131644][T32673] CPU: 1 UID: 0 PID: 32673 Comm: syz.4.8724 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1881.131699][T32673] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1881.131709][T32673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1881.131724][T32673] Call Trace: [ 1881.131732][T32673] [ 1881.131741][T32673] dump_stack_lvl+0x100/0x190 [ 1881.131782][T32673] dump_header+0xfb/0x606 [ 1881.131812][T32673] oom_kill_process.cold+0xd/0x330 [ 1881.131840][T32673] out_of_memory+0x340/0x14f0 [ 1881.131875][T32673] ? __pfx_out_of_memory+0x10/0x10 [ 1881.131910][T32673] mem_cgroup_out_of_memory+0xc6/0x130 [ 1881.131951][T32673] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1881.131990][T32673] ? find_held_lock+0x2b/0x80 [ 1881.132031][T32673] ? do_raw_spin_unlock+0x145/0x1e0 [ 1881.132064][T32673] ? _raw_spin_unlock+0x28/0x50 [ 1881.132097][T32673] try_charge_memcg+0x652/0xc90 [ 1881.132137][T32673] ? __pfx_try_charge_memcg+0x10/0x10 [ 1881.132177][T32673] ? find_held_lock+0x2b/0x80 [ 1881.132213][T32673] ? rcu_read_unlock+0x17/0x60 [ 1881.132250][T32673] ? rcu_read_unlock+0x17/0x60 [ 1881.132290][T32673] charge_memcg+0xa6/0x280 [ 1881.132323][T32673] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1881.132365][T32673] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1881.132403][T32673] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1881.132428][T32673] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1881.132477][T32673] swap_cache_alloc_folio+0x1cb/0x300 [ 1881.132504][T32673] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1881.132539][T32673] swap_cluster_readahead+0x53b/0x770 [ 1881.132572][T32673] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1881.132604][T32673] ? __pfx_css_rstat_updated+0x10/0x10 [ 1881.132653][T32673] ? get_vma_policy+0x23f/0x3b0 [ 1881.132692][T32673] swapin_readahead+0x160/0x12c0 [ 1881.132727][T32673] ? __pfx_swapin_readahead+0x10/0x10 [ 1881.132751][T32673] ? find_held_lock+0x2b/0x80 [ 1881.132784][T32673] ? swap_table_get+0x103/0x2c0 [ 1881.132805][T32673] ? swap_table_get+0x103/0x2c0 [ 1881.132833][T32673] ? swap_table_get+0x10d/0x2c0 [ 1881.132856][T32673] ? swap_cache_get_folio+0x1ae/0x600 [ 1881.132882][T32673] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1881.132905][T32673] ? __pfx_get_swap_device+0x10/0x10 [ 1881.132942][T32673] ? do_swap_page+0xb2e/0x68e0 [ 1881.132964][T32673] do_swap_page+0xb2e/0x68e0 [ 1881.132995][T32673] ? mark_held_locks+0x40/0x70 [ 1881.133025][T32673] ? __pfx_do_swap_page+0x10/0x10 [ 1881.133051][T32673] ? __schedule+0x1000/0x6020 [ 1881.133085][T32673] ? rcu_is_watching+0x12/0xc0 [ 1881.133115][T32673] ? __pte_offset_map+0x179/0x310 [ 1881.133150][T32673] __handle_mm_fault+0x18c1/0x2b60 [ 1881.133179][T32673] ? reacquire_held_locks+0xce/0x1e0 [ 1881.133207][T32673] ? __pfx___handle_mm_fault+0x10/0x10 [ 1881.133237][T32673] ? lock_vma_under_rcu+0x17c/0x590 [ 1881.133279][T32673] handle_mm_fault+0x36d/0xa20 [ 1881.133309][T32673] do_user_addr_fault+0x5a3/0x12f0 [ 1881.133354][T32673] exc_page_fault+0x6f/0xd0 [ 1881.133390][T32673] asm_exc_page_fault+0x26/0x30 [ 1881.133415][T32673] RIP: 0033:0x7fa2952706a0 [ 1881.133435][T32673] Code: fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 48 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef <80> 3d 01 77 3a 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0 [ 1881.133464][T32673] RSP: 002b:00007ffc63ab5640 EFLAGS: 00010286 [ 1881.133483][T32673] RAX: ffffffff81b7b7d5 RBX: ffffffff81b7bb28 RCX: 0000001b33223f70 [ 1881.133500][T32673] RDX: ffffffff81b7b9b8 RSI: 0000000000000008 RDI: 00007fa294dff008 [ 1881.133515][T32673] RBP: 0000000000000012 R08: 00007fa295600000 R09: 00007fa295602000 [ 1881.133530][T32673] R10: 0000000081b7bb2c R11: 0000000000000000 R12: 00007fa295616038 [ 1881.133545][T32673] R13: 0000000000000012 R14: ffffffff81b7b7d5 R15: 00007fa296145720 [ 1881.133561][T32673] ? do_user_addr_fault+0x205/0x12f0 [ 1881.133597][T32673] ? do_user_addr_fault+0x558/0x12f0 [ 1881.133632][T32673] ? do_user_addr_fault+0x205/0x12f0 [ 1881.133666][T32673] ? do_user_addr_fault+0x3e8/0x12f0 [ 1881.133706][T32673] [ 1881.520503][T32673] memory: usage 3072kB, limit 3072kB, failcnt 189001 [ 1881.527301][T32673] memory+swap: usage 3164kB, limit 9007199254740988kB, failcnt 0 [ 1881.535317][T32673] kmem: usage 3000kB, limit 9007199254740988kB, failcnt 0 [ 1881.542506][T32673] Memory cgroup stats for /syz4: [ 1881.542808][T32673] cache 0 [ 1881.550929][T32673] rss 8192 [ 1881.554038][T32673] rss_huge 0 [ 1881.557278][T32673] shmem 0 [ 1881.560256][T32673] mapped_file 0 [ 1881.563891][T32673] dirty 0 [ 1881.566867][T32673] writeback 0 [ 1881.570193][T32673] workingset_refault_anon 22052 [ 1881.575228][T32673] workingset_refault_file 1443 [ 1881.580051][T32673] swap 110592 [ 1881.583494][T32673] swapcached 930873344 [ 1881.587745][T32673] pgpgin 439147 [ 1881.591240][T32673] pgpgout 447876 [ 1881.594889][T32673] pgfault 529126 [ 1881.598512][T32673] pgmajfault 9385 [ 1881.602190][T32673] inactive_anon 57344 [ 1881.606352][T32673] active_anon 0 [ 1881.609816][T32673] inactive_file 0 [ 1881.613508][T32673] active_file 0 [ 1881.617014][T32673] unevictable 0 [ 1881.620505][T32673] hierarchical_memory_limit 3145728 [ 1881.625774][T32673] hierarchical_memsw_limit 9223372036854771712 [ 1881.631974][T32673] total_cache 0 [ 1881.635594][T32673] total_rss 8192 [ 1881.640450][T32673] total_rss_huge 0 [ 1881.644237][T32673] total_shmem 0 [ 1881.647736][T32673] total_mapped_file 0 [ 1881.651789][T32673] total_dirty 0 [ 1881.655347][T32673] total_writeback 0 [ 1881.659195][T32673] total_workingset_refault_anon 22052 [ 1881.664650][T32673] total_workingset_refault_file 1443 [ 1881.669994][T32673] total_swap 110592 [ 1881.673912][T32673] total_swapcached 930873344 [ 1881.678546][T32673] total_pgpgin 439147 [ 1881.682606][T32673] total_pgpgout 447876 [ 1881.686720][T32673] total_pgfault 529126 [ 1881.690833][T32673] total_pgmajfault 9385 [ 1881.695058][T32673] total_inactive_anon 57344 [ 1881.699604][T32673] total_active_anon 0 [ 1881.703722][T32673] total_inactive_file 0 [ 1881.707892][T32673] total_active_file 0 [ 1881.711922][T32673] total_unevictable 0 [ 1881.715950][T32673] anon_cost 68 [ 1881.719358][T32673] file_cost 0 [ 1881.722702][T32673] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8724,pid=32673,uid=0 [ 1881.737880][T32673] Memory cgroup out of memory: Killed process 32673 (syz.4.8724) total-vm:104268kB, anon-rss:1240kB, file-rss:20768kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1882.348220][T32677] syz.4.8725 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1882.386240][T32677] CPU: 1 UID: 0 PID: 32677 Comm: syz.4.8725 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1882.386293][T32677] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1882.386306][T32677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1882.386324][T32677] Call Trace: [ 1882.386334][T32677] [ 1882.386346][T32677] dump_stack_lvl+0x100/0x190 [ 1882.386396][T32677] dump_header+0xfb/0x606 [ 1882.386434][T32677] oom_kill_process.cold+0xd/0x330 [ 1882.386473][T32677] out_of_memory+0x340/0x14f0 [ 1882.386521][T32677] ? __pfx_out_of_memory+0x10/0x10 [ 1882.386571][T32677] mem_cgroup_out_of_memory+0xc6/0x130 [ 1882.386628][T32677] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1882.386681][T32677] ? find_held_lock+0x2b/0x80 [ 1882.386736][T32677] ? do_raw_spin_unlock+0x145/0x1e0 [ 1882.386779][T32677] ? _raw_spin_unlock+0x28/0x50 [ 1882.386824][T32677] try_charge_memcg+0x652/0xc90 [ 1882.386876][T32677] ? __pfx_try_charge_memcg+0x10/0x10 [ 1882.386929][T32677] ? find_held_lock+0x2b/0x80 [ 1882.386974][T32677] ? rcu_read_unlock+0x17/0x60 [ 1882.387019][T32677] ? rcu_read_unlock+0x17/0x60 [ 1882.387072][T32677] charge_memcg+0xa6/0x280 [ 1882.387117][T32677] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1882.387174][T32677] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1882.387239][T32677] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1882.387274][T32677] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1882.387331][T32677] swap_cache_alloc_folio+0x1cb/0x300 [ 1882.387370][T32677] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1882.387409][T32677] ? __lock_acquire+0x4a5/0x2630 [ 1882.387450][T32677] swap_cluster_readahead+0x411/0x770 [ 1882.387485][T32677] ? __pfx___xa_erase+0x10/0x10 [ 1882.387579][T32677] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1882.387616][T32677] ? do_raw_spin_lock+0x128/0x260 [ 1882.387651][T32677] ? __print_lock_name+0x60/0x80 [ 1882.387690][T32677] ? move_cluster+0x1f7/0x570 [ 1882.387736][T32677] ? get_vma_policy+0x23f/0x3b0 [ 1882.387779][T32677] swapin_readahead+0x160/0x12c0 [ 1882.387821][T32677] ? __pfx_swapin_readahead+0x10/0x10 [ 1882.387849][T32677] ? find_held_lock+0x2b/0x80 [ 1882.387890][T32677] ? swap_table_get+0x103/0x2c0 [ 1882.387914][T32677] ? swap_table_get+0x103/0x2c0 [ 1882.387946][T32677] ? swap_table_get+0x10d/0x2c0 [ 1882.387973][T32677] ? swap_cache_get_folio+0x1ae/0x600 [ 1882.388003][T32677] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1882.388029][T32677] ? __pfx_get_swap_device+0x10/0x10 [ 1882.388072][T32677] ? do_swap_page+0xb2e/0x68e0 [ 1882.388099][T32677] do_swap_page+0xb2e/0x68e0 [ 1882.388148][T32677] ? __pfx_do_swap_page+0x10/0x10 [ 1882.388197][T32677] ? rcu_is_watching+0x12/0xc0 [ 1882.388240][T32677] ? __pte_offset_map+0x179/0x310 [ 1882.388289][T32677] __handle_mm_fault+0x18c1/0x2b60 [ 1882.388329][T32677] ? reacquire_held_locks+0xce/0x1e0 [ 1882.388363][T32677] ? __pfx___handle_mm_fault+0x10/0x10 [ 1882.388403][T32677] ? lock_vma_under_rcu+0x17c/0x590 [ 1882.388462][T32677] handle_mm_fault+0x36d/0xa20 [ 1882.388500][T32677] do_user_addr_fault+0x5a3/0x12f0 [ 1882.388553][T32677] exc_page_fault+0x6f/0xd0 [ 1882.388594][T32677] asm_exc_page_fault+0x26/0x30 [ 1882.388627][T32677] RIP: 0033:0x7fa295268cd0 [ 1882.388656][T32677] Code: 74 28 0f b6 d3 80 fb 04 0f 84 bc 05 00 00 48 83 fa 08 0f 84 aa 05 00 00 48 83 fa 02 0f 85 10 10 00 00 66 c1 c0 08 0f b7 c0 90 <49> 89 04 24 49 83 c4 08 4d 39 f4 74 4c 4c 8d ac 24 e0 00 00 00 4c [ 1882.388686][T32677] RSP: 002b:00007ffc63ab5760 EFLAGS: 00010246 [ 1882.388709][T32677] RAX: 000000000000003e RBX: 0000000000000004 RCX: 0000000000000000 [ 1882.388726][T32677] RDX: 0000000000000000 RSI: 000000000000003e RDI: 0000000000000000 [ 1882.388743][T32677] RBP: 00000000000013d3 R08: 0000001b32020000 R09: 000000000000007c [ 1882.388762][T32677] R10: 000000000000003e R11: 0000000000000000 R12: 00007ffc63ab58d0 [ 1882.388780][T32677] R13: 00007ffc63ab5840 R14: 00007ffc63ab58f8 R15: 0000000000000005 [ 1882.388819][T32677] [ 1882.837250][T32677] memory: usage 3072kB, limit 3072kB, failcnt 189274 [ 1882.844635][T32677] memory+swap: usage 3124kB, limit 9007199254740988kB, failcnt 0 [ 1882.853786][T32677] kmem: usage 2988kB, limit 9007199254740988kB, failcnt 0 [ 1882.861109][T32677] Memory cgroup stats for /syz4: [ 1882.861325][T32677] cache 0 [ 1883.005209][T32677] rss 32768 [ 1883.008382][T32677] rss_huge 0 [ 1883.019644][T32677] shmem 0 [ 1883.022677][T32677] mapped_file 0 [ 1883.027868][T32677] dirty 0 [ 1883.030989][T32677] writeback 0 [ 1883.034318][T32677] workingset_refault_anon 22150 [ 1883.039635][T32677] workingset_refault_file 1443 [ 1883.044576][T32677] swap 53248 [ 1883.048827][T32677] swapcached 930897920 [ 1883.053027][T32677] pgpgin 439263 [ 1883.060669][T32677] pgpgout 447987 [ 1883.064291][T32677] pgfault 529322 [ 1883.069324][T32677] pgmajfault 9463 [ 1883.073127][T32677] inactive_anon 16384 [ 1883.138051][T32677] active_anon 49152 [ 1883.141900][T32677] inactive_file 0 [ 1883.164483][T32677] active_file 0 [ 1883.168097][T32677] unevictable 0 [ 1883.171787][T32677] hierarchical_memory_limit 3145728 [ 1883.177237][T32677] hierarchical_memsw_limit 9223372036854771712 [ 1883.184779][T32677] total_cache 0 [ 1883.188619][T32677] total_rss 32768 [ 1883.193839][T32677] total_rss_huge 0 [ 1883.198116][T32677] total_shmem 0 [ 1883.201634][T32677] total_mapped_file 0 [ 1883.205846][T32677] total_dirty 0 [ 1883.209626][T32677] total_writeback 0 [ 1883.213527][T32677] total_workingset_refault_anon 22150 [ 1883.219111][T32677] total_workingset_refault_file 1443 [ 1883.224875][T32677] total_swap 53248 [ 1883.228645][T32677] total_swapcached 930897920 [ 1883.233456][T32677] total_pgpgin 439263 [ 1883.237591][T32677] total_pgpgout 447987 [ 1883.242023][T32677] total_pgfault 529322 [ 1883.246317][T32677] total_pgmajfault 9463 [ 1883.256504][T32677] total_inactive_anon 16384 [ 1883.263740][T32677] total_active_anon 49152 [ 1883.269227][T32677] total_inactive_file 0 [ 1883.274034][T32677] total_active_file 0 [ 1883.278279][T32677] total_unevictable 0 [ 1883.282506][T32677] anon_cost 85 [ 1883.328006][T32677] file_cost 0 [ 1883.331356][T32677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8725,pid=32677,uid=0 [ 1883.413061][T32677] Memory cgroup out of memory: Killed process 32677 (syz.4.8725) total-vm:104268kB, anon-rss:1260kB, file-rss:20744kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 1883.611820][T32695] serio: Serial port pty6 [ 1884.232993][T31570] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1416 with max blocks 50 with error 117 [ 1884.269126][T31570] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1884.269126][T31570] [ 1884.285520][T31570] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1019 with max blocks 4 with error 117 [ 1884.308568][T31570] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1884.308568][T31570] [ 1884.345913][T31570] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1461 with max blocks 4 with error 117 [ 1884.376745][T31570] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1884.376745][T31570] [ 1884.444573][T31570] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1021 with max blocks 2 with error 117 [ 1884.530297][T31570] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1884.530297][T31570] [ 1884.804730][T32697] syz.4.8730 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1884.846056][T32697] CPU: 1 UID: 0 PID: 32697 Comm: syz.4.8730 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1884.846098][T32697] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1884.846108][T32697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1884.846123][T32697] Call Trace: [ 1884.846131][T32697] [ 1884.846140][T32697] dump_stack_lvl+0x100/0x190 [ 1884.846212][T32697] dump_header+0xfb/0x606 [ 1884.846247][T32697] oom_kill_process.cold+0xd/0x330 [ 1884.846297][T32697] out_of_memory+0x340/0x14f0 [ 1884.846344][T32697] ? __pfx_out_of_memory+0x10/0x10 [ 1884.846401][T32697] mem_cgroup_out_of_memory+0xc6/0x130 [ 1884.846445][T32697] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1884.846485][T32697] ? find_held_lock+0x2b/0x80 [ 1884.846526][T32697] ? do_raw_spin_unlock+0x145/0x1e0 [ 1884.846557][T32697] ? _raw_spin_unlock+0x28/0x50 [ 1884.846591][T32697] try_charge_memcg+0x652/0xc90 [ 1884.846630][T32697] ? __pfx_try_charge_memcg+0x10/0x10 [ 1884.846668][T32697] ? find_held_lock+0x2b/0x80 [ 1884.846701][T32697] ? rcu_read_unlock+0x17/0x60 [ 1884.846733][T32697] ? rcu_read_unlock+0x17/0x60 [ 1884.846770][T32697] charge_memcg+0xa6/0x280 [ 1884.846802][T32697] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1884.846843][T32697] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1884.846881][T32697] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1884.846906][T32697] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1884.846946][T32697] swap_cache_alloc_folio+0x1cb/0x300 [ 1884.846973][T32697] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1884.847002][T32697] ? rcu_is_watching+0x12/0xc0 [ 1884.847040][T32697] swap_cluster_readahead+0x53b/0x770 [ 1884.847074][T32697] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1884.847106][T32697] ? __pfx_css_rstat_updated+0x10/0x10 [ 1884.847154][T32697] ? get_vma_policy+0x23f/0x3b0 [ 1884.847196][T32697] swapin_readahead+0x160/0x12c0 [ 1884.847231][T32697] ? __pfx_swapin_readahead+0x10/0x10 [ 1884.847255][T32697] ? find_held_lock+0x2b/0x80 [ 1884.847293][T32697] ? swap_table_get+0x103/0x2c0 [ 1884.847315][T32697] ? swap_table_get+0x103/0x2c0 [ 1884.847341][T32697] ? swap_table_get+0x10d/0x2c0 [ 1884.847364][T32697] ? swap_cache_get_folio+0x1ae/0x600 [ 1884.847390][T32697] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1884.847412][T32697] ? __pfx_get_swap_device+0x10/0x10 [ 1884.847449][T32697] ? do_swap_page+0xb2e/0x68e0 [ 1884.847470][T32697] do_swap_page+0xb2e/0x68e0 [ 1884.847508][T32697] ? __pfx_do_swap_page+0x10/0x10 [ 1884.847539][T32697] ? rcu_is_watching+0x12/0xc0 [ 1884.847569][T32697] ? __pte_offset_map+0x179/0x310 [ 1884.847607][T32697] __handle_mm_fault+0x18c1/0x2b60 [ 1884.847637][T32697] ? reacquire_held_locks+0xce/0x1e0 [ 1884.847663][T32697] ? __pfx___handle_mm_fault+0x10/0x10 [ 1884.847692][T32697] ? lock_vma_under_rcu+0x17c/0x590 [ 1884.847734][T32697] handle_mm_fault+0x36d/0xa20 [ 1884.847763][T32697] do_user_addr_fault+0x5a3/0x12f0 [ 1884.847807][T32697] exc_page_fault+0x6f/0xd0 [ 1884.847842][T32697] asm_exc_page_fault+0x26/0x30 [ 1884.847866][T32697] RIP: 0033:0x7fa2952706a0 [ 1884.847886][T32697] Code: fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 48 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef <80> 3d 01 77 3a 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0 [ 1884.847910][T32697] RSP: 002b:00007ffc63ab5640 EFLAGS: 00010282 [ 1884.847929][T32697] RAX: ffffffff8b74a393 RBX: ffffffff8b74a6f4 RCX: 0000001b33023e88 [ 1884.847946][T32697] RDX: ffffffff8b74a3a1 RSI: 0000000000000008 RDI: 00007fa294dff008 [ 1884.847961][T32697] RBP: 000000000000002f R08: 00007fa295600000 R09: 00007fa295602000 [ 1884.847977][T32697] R10: 000000008b74a6f8 R11: 0000000000000000 R12: 00007fa295616038 [ 1884.847991][T32697] R13: 000000000000002f R14: ffffffff8b74a393 R15: 00007fa296145720 [ 1884.848007][T32697] ? mtree_range_walk+0x653/0xcd0 [ 1884.848040][T32697] ? mtree_range_walk+0x9b4/0xcd0 [ 1884.848071][T32697] ? mtree_range_walk+0x653/0xcd0 [ 1884.848099][T32697] ? mtree_range_walk+0x661/0xcd0 [ 1884.848134][T32697] [ 1884.850524][T32697] memory: usage 3072kB, limit 3072kB, failcnt 189694 [ 1885.295649][T32697] memory+swap: usage 3196kB, limit 9007199254740988kB, failcnt 0 [ 1885.316561][T32697] kmem: usage 2996kB, limit 9007199254740988kB, failcnt 0 [ 1885.335335][T32697] Memory cgroup stats for /syz4: [ 1885.335541][T32697] cache 0 [ 1885.343938][T32697] rss 12288 [ 1885.347211][T32697] rss_huge 0 [ 1885.351291][T32697] shmem 0 [ 1885.374034][T32697] mapped_file 0 [ 1885.377556][T32697] dirty 0 [ 1885.390908][T32697] writeback 0 [ 1885.394754][T32697] workingset_refault_anon 22415 [ 1885.399652][T32697] workingset_refault_file 1443 [ 1885.432346][T32697] swap 126976 [ 1885.440390][T32697] swapcached 930992128 [ 1885.462646][T32697] pgpgin 439562 [ 1885.466197][T32697] pgpgout 448286 [ 1885.469786][T32697] pgfault 529706 [ 1885.484369][T32697] pgmajfault 9689 [ 1885.488565][T32697] inactive_anon 0 [ 1885.492660][T32697] active_anon 65536 [ 1885.496519][T32697] inactive_file 0 [ 1885.514790][T32697] active_file 0 [ 1885.518788][T32697] unevictable 0 [ 1885.522583][T32697] hierarchical_memory_limit 3145728 [ 1885.528085][T32697] hierarchical_memsw_limit 9223372036854771712 [ 1885.534959][T32697] total_cache 0 [ 1885.541370][T32697] total_rss 12288 [ 1885.545720][T32697] total_rss_huge 0 [ 1885.549586][T32697] total_shmem 0 [ 1885.553950][T32697] total_mapped_file 0 [ 1885.558172][T32697] total_dirty 0 [ 1885.563977][T32697] total_writeback 0 [ 1885.568068][T32697] total_workingset_refault_anon 22415 [ 1885.574041][T32697] total_workingset_refault_file 1443 [ 1885.579597][T32697] total_swap 126976 [ 1885.583879][T32697] total_swapcached 930992128 [ 1885.591381][T32697] total_pgpgin 439562 [ 1885.603065][T32697] total_pgpgout 448286 [ 1885.609347][T32697] total_pgfault 529706 [ 1885.625223][T32697] total_pgmajfault 9689 [ 1885.765204][T32697] total_inactive_anon 0 [ 1885.778540][T32697] total_active_anon 65536 [ 1885.784999][T32697] total_inactive_file 0 [ 1885.789362][T32697] total_active_file 0 [ 1885.796378][T32697] total_unevictable 0 [ 1885.806442][T32697] anon_cost 86 [ 1885.834725][T32697] file_cost 0 [ 1885.840922][T32697] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8730,pid=32697,uid=0 [ 1885.857897][T32697] Memory cgroup out of memory: Killed process 32697 (syz.4.8730) total-vm:102224kB, anon-rss:1236kB, file-rss:20776kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1886.695890][T32719] syz.4.8735 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1886.715739][T32719] CPU: 0 UID: 0 PID: 32719 Comm: syz.4.8735 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1886.715798][T32719] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1886.715811][T32719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1886.715831][T32719] Call Trace: [ 1886.715841][T32719] [ 1886.715853][T32719] dump_stack_lvl+0x100/0x190 [ 1886.715908][T32719] dump_header+0xfb/0x606 [ 1886.715954][T32719] oom_kill_process.cold+0xd/0x330 [ 1886.715994][T32719] out_of_memory+0x340/0x14f0 [ 1886.716042][T32719] ? __pfx_out_of_memory+0x10/0x10 [ 1886.716092][T32719] mem_cgroup_out_of_memory+0xc6/0x130 [ 1886.716150][T32719] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1886.716205][T32719] ? find_held_lock+0x2b/0x80 [ 1886.716261][T32719] ? do_raw_spin_unlock+0x145/0x1e0 [ 1886.716303][T32719] ? _raw_spin_unlock+0x28/0x50 [ 1886.716350][T32719] try_charge_memcg+0x652/0xc90 [ 1886.716406][T32719] ? __pfx_try_charge_memcg+0x10/0x10 [ 1886.716460][T32719] ? find_held_lock+0x2b/0x80 [ 1886.716504][T32719] ? rcu_read_unlock+0x17/0x60 [ 1886.716550][T32719] ? rcu_read_unlock+0x17/0x60 [ 1886.716602][T32719] charge_memcg+0xa6/0x280 [ 1886.716645][T32719] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1886.716702][T32719] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1886.716757][T32719] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1886.716791][T32719] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1886.716847][T32719] swap_cache_alloc_folio+0x1cb/0x300 [ 1886.716886][T32719] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1886.716943][T32719] swap_cluster_readahead+0x53b/0x770 [ 1886.716979][T32719] ? trace_ignore_this_task+0x56/0x100 [ 1886.717036][T32719] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1886.717080][T32719] ? __pfx_css_rstat_updated+0x10/0x10 [ 1886.717145][T32719] ? get_vma_policy+0x23f/0x3b0 [ 1886.717207][T32719] swapin_readahead+0x160/0x12c0 [ 1886.717258][T32719] ? __pfx_swapin_readahead+0x10/0x10 [ 1886.717291][T32719] ? find_held_lock+0x2b/0x80 [ 1886.717337][T32719] ? swap_table_get+0x103/0x2c0 [ 1886.717367][T32719] ? swap_table_get+0x103/0x2c0 [ 1886.717407][T32719] ? swap_table_get+0x10d/0x2c0 [ 1886.717439][T32719] ? swap_cache_get_folio+0x1ae/0x600 [ 1886.717476][T32719] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1886.717508][T32719] ? __pfx_get_swap_device+0x10/0x10 [ 1886.717561][T32719] ? do_swap_page+0xb2e/0x68e0 [ 1886.717590][T32719] do_swap_page+0xb2e/0x68e0 [ 1886.717648][T32719] ? __pfx_do_swap_page+0x10/0x10 [ 1886.717696][T32719] ? rcu_is_watching+0x12/0xc0 [ 1886.717739][T32719] ? __pte_offset_map+0x179/0x310 [ 1886.717787][T32719] __handle_mm_fault+0x18c1/0x2b60 [ 1886.717827][T32719] ? reacquire_held_locks+0xce/0x1e0 [ 1886.717864][T32719] ? __pfx___handle_mm_fault+0x10/0x10 [ 1886.717904][T32719] ? lock_vma_under_rcu+0x17c/0x590 [ 1886.717971][T32719] handle_mm_fault+0x36d/0xa20 [ 1886.718013][T32719] do_user_addr_fault+0x5a3/0x12f0 [ 1886.718076][T32719] exc_page_fault+0x6f/0xd0 [ 1886.718123][T32719] asm_exc_page_fault+0x26/0x30 [ 1886.718157][T32719] RIP: 0033:0x7fa29525074d [ 1886.718185][T32719] Code: 44 8d 56 04 4c 8d 0d d2 18 3b 00 89 f0 4c 8d 05 c9 f8 3a 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 <45> 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 [ 1886.718215][T32719] RSP: 002b:00007ffc63ab5638 EFLAGS: 00010282 [ 1886.718241][T32719] RAX: 00000000824033fb RBX: ffffffff824033fb RCX: ffffffff81b793fb [ 1886.718262][T32719] RDX: 00000000000013fb RSI: ffffffff824033fb RDI: 0000000000000000 [ 1886.718282][T32719] RBP: 000000000000010a R08: 00007fa295600000 R09: 00007fa295602000 [ 1886.718304][T32719] R10: 00000000824033ff R11: 0000000000000000 R12: 00007fa295616038 [ 1886.718324][T32719] R13: 000000000000011e R14: ffffffff82403dbb R15: 00007fa296145720 [ 1886.718347][T32719] ? filemap_fault+0x91b/0x2e50 [ 1886.718390][T32719] ? read_cache_page_gfp+0xdb/0x170 [ 1886.718433][T32719] ? trace_event_raw_event_exceptions+0x3b/0x260 [ 1886.718479][T32719] ? read_cache_page_gfp+0xdb/0x170 [ 1886.718527][T32719] [ 1886.775848][T32719] memory: usage 3072kB, limit 3072kB, failcnt 190192 [ 1887.125517][T32729] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.8738: iget: checksum invalid [ 1887.147932][T32729] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1887.210848][T32729] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.8738: iget: checksum invalid [ 1887.227550][T32729] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1887.243065][T32719] memory+swap: usage 3196kB, limit 9007199254740988kB, failcnt 0 [ 1887.250858][T32719] kmem: usage 2996kB, limit 9007199254740988kB, failcnt 0 [ 1887.268505][T32729] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.8738: iget: checksum invalid [ 1887.307173][T32729] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1887.324030][T32729] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.8738: iget: checksum invalid [ 1887.399829][T32719] Memory cgroup stats for /syz4: [ 1887.399994][T32719] cache 0 [ 1887.419228][T32719] rss 24576 [ 1887.427163][T32719] rss_huge 0 [ 1887.430416][T32719] shmem 0 [ 1887.452247][T32729] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1887.465198][T32719] mapped_file 0 [ 1887.468717][T32719] dirty 0 [ 1887.471668][T32719] writeback 0 [ 1887.501989][T32719] workingset_refault_anon 22741 [ 1887.517418][T32719] workingset_refault_file 1443 [ 1887.548704][T32729] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1887.558565][T32729] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1887.587016][T32719] swap 126976 [ 1887.590389][T32719] swapcached 931078144 [ 1887.631031][T32719] pgpgin 439922 [ 1887.634611][T32719] pgpgout 448646 [ 1887.638198][T32719] pgfault 530168 [ 1887.713353][T32719] pgmajfault 9989 [ 1887.727373][T32719] inactive_anon 0 [ 1887.750812][T32719] active_anon 53248 [ 1887.789955][T32719] inactive_file 0 [ 1887.854683][T32719] active_file 0 [ 1887.858392][T32719] unevictable 0 [ 1887.899167][T32719] hierarchical_memory_limit 3145728 [ 1887.911380][T32719] hierarchical_memsw_limit 9223372036854771712 [ 1887.949554][T32719] total_cache 0 [ 1887.953093][T32719] total_rss 24576 [ 1887.956856][T32719] total_rss_huge 0 [ 1887.970056][T32719] total_shmem 0 [ 1887.987732][T32719] total_mapped_file 0 [ 1888.017782][T31420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1888.031634][T31420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1888.043146][T32719] total_dirty 0 [ 1888.043189][T31420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1888.053772][T32719] total_writeback 0 [ 1888.053793][T32719] total_workingset_refault_anon 22741 [ 1888.053808][T32719] total_workingset_refault_file 1443 [ 1888.053823][T32719] total_swap 126976 [ 1888.053836][T32719] total_swapcached 931078144 [ 1888.053850][T32719] total_pgpgin 439922 [ 1888.053863][T32719] total_pgpgout 448646 [ 1888.053877][T32719] total_pgfault 530168 [ 1888.053890][T32719] total_pgmajfault 9989 [ 1888.053904][T32719] total_inactive_anon 0 [ 1888.053918][T32719] total_active_anon 53248 [ 1888.053932][T32719] total_inactive_file 0 [ 1888.053946][T32719] total_active_file 0 [ 1888.053960][T32719] total_unevictable 0 [ 1888.053982][T32719] anon_cost 82 [ 1888.053996][T32719] file_cost 0 [ 1888.054011][T32719] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8735,pid=32719,uid=0 [ 1888.057086][T32719] Memory cgroup out of memory: Killed process 32719 (syz.4.8735) total-vm:102220kB, anon-rss:1248kB, file-rss:20796kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1888.179470][T31420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1888.200469][T31420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1888.827658][T32743] chnl_net:caif_netlink_parms(): no params data found [ 1889.051745][T32754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8742'. [ 1889.300724][T22894] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1889.312964][T22894] CPU: 0 UID: 0 PID: 22894 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1889.313021][T22894] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1889.313035][T22894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1889.313056][T22894] Call Trace: [ 1889.313067][T22894] [ 1889.313080][T22894] dump_stack_lvl+0x100/0x190 [ 1889.313135][T22894] dump_header+0xfb/0x606 [ 1889.313174][T22894] oom_kill_process.cold+0xd/0x330 [ 1889.313216][T22894] out_of_memory+0x340/0x14f0 [ 1889.313264][T22894] ? __pfx_out_of_memory+0x10/0x10 [ 1889.313316][T22894] mem_cgroup_out_of_memory+0xc6/0x130 [ 1889.313375][T22894] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1889.313431][T22894] ? find_held_lock+0x2b/0x80 [ 1889.313487][T22894] ? do_raw_spin_unlock+0x145/0x1e0 [ 1889.313532][T22894] ? _raw_spin_unlock+0x28/0x50 [ 1889.313579][T22894] try_charge_memcg+0x652/0xc90 [ 1889.313633][T22894] ? __pfx_try_charge_memcg+0x10/0x10 [ 1889.313688][T22894] ? find_held_lock+0x2b/0x80 [ 1889.313734][T22894] ? rcu_read_unlock+0x17/0x60 [ 1889.313780][T22894] ? rcu_read_unlock+0x17/0x60 [ 1889.313830][T22894] charge_memcg+0xa6/0x280 [ 1889.313874][T22894] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1889.313932][T22894] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1889.313993][T22894] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1889.314030][T22894] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1889.314087][T22894] swap_cache_alloc_folio+0x1cb/0x300 [ 1889.314126][T22894] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1889.314176][T22894] swap_cluster_readahead+0x53b/0x770 [ 1889.314224][T22894] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1889.314282][T22894] ? __lock_acquire+0x4a5/0x2630 [ 1889.314322][T22894] ? get_vma_policy+0x23f/0x3b0 [ 1889.314375][T22894] swapin_readahead+0x160/0x12c0 [ 1889.314425][T22894] ? __pfx_swapin_readahead+0x10/0x10 [ 1889.314460][T22894] ? find_held_lock+0x2b/0x80 [ 1889.314506][T22894] ? swap_table_get+0x103/0x2c0 [ 1889.314536][T22894] ? swap_table_get+0x103/0x2c0 [ 1889.314576][T22894] ? swap_table_get+0x10d/0x2c0 [ 1889.314609][T22894] ? swap_cache_get_folio+0x1ae/0x600 [ 1889.314646][T22894] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1889.314678][T22894] ? __pfx_get_swap_device+0x10/0x10 [ 1889.314726][T22894] ? do_swap_page+0xb2e/0x68e0 [ 1889.314752][T22894] do_swap_page+0xb2e/0x68e0 [ 1889.314807][T22894] ? __pfx_do_swap_page+0x10/0x10 [ 1889.314843][T22894] ? __free_object+0x2a8/0x400 [ 1889.314881][T22894] ? lockdep_hardirqs_on+0x78/0x100 [ 1889.314933][T22894] ? rcu_is_watching+0x12/0xc0 [ 1889.314985][T22894] ? __pte_offset_map+0x179/0x310 [ 1889.315036][T22894] __handle_mm_fault+0x18c1/0x2b60 [ 1889.315079][T22894] ? reacquire_held_locks+0xce/0x1e0 [ 1889.315116][T22894] ? __pfx___handle_mm_fault+0x10/0x10 [ 1889.315158][T22894] ? lock_vma_under_rcu+0x17c/0x590 [ 1889.315218][T22894] handle_mm_fault+0x36d/0xa20 [ 1889.315261][T22894] do_user_addr_fault+0x5a3/0x12f0 [ 1889.315323][T22894] exc_page_fault+0x6f/0xd0 [ 1889.315371][T22894] asm_exc_page_fault+0x26/0x30 [ 1889.315404][T22894] RIP: 0033:0x7fa29535c84e [ 1889.315432][T22894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1889.315465][T22894] RSP: 002b:00007ffc63ab58d8 EFLAGS: 00010246 [ 1889.315491][T22894] RAX: 0000000000000000 RBX: 0000555594e2e500 RCX: 00007fa29535c84e [ 1889.315535][T22894] RDX: 00007ffc63ab5930 RSI: 0000000000000000 RDI: 0000000000000000 [ 1889.315556][T22894] RBP: 00007ffc63ab599c R08: 0000000000000000 R09: 0000000000000000 [ 1889.315577][T22894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 1889.315597][T22894] R13: 00000000000927c0 R14: 00000000001ce36d R15: 00007ffc63ab59f0 [ 1889.315643][T22894] [ 1889.315656][T22894] memory: usage 3072kB, limit 3072kB, failcnt 190567 [ 1889.717862][T22894] memory+swap: usage 3188kB, limit 9007199254740988kB, failcnt 0 [ 1889.726391][T32743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.740204][T22894] kmem: usage 2996kB, limit 9007199254740988kB, failcnt 0 [ 1889.747435][T22894] Memory cgroup stats for /syz4: [ 1889.747624][T22894] cache 0 [ 1889.756100][T32743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.770331][T32743] bridge_slave_0: entered allmulticast mode [ 1889.778121][T32743] bridge_slave_0: entered promiscuous mode [ 1889.790054][T22894] rss 0 [ 1889.792883][T22894] rss_huge 0 [ 1889.796119][T22894] shmem 0 [ 1889.799335][T22894] mapped_file 0 [ 1889.803235][T22894] dirty 0 [ 1889.806760][T22894] writeback 0 [ 1889.811662][T22894] workingset_refault_anon 22913 [ 1889.816645][T22894] workingset_refault_file 1443 [ 1889.827585][T22894] swap 126976 [ 1889.832070][T22894] swapcached 931147776 [ 1889.837379][T22894] pgpgin 440129 [ 1889.841076][T22894] pgpgout 448855 [ 1889.844698][T22894] pgfault 530460 [ 1889.848646][T22894] pgmajfault 10130 [ 1889.858827][T22894] inactive_anon 65536 [ 1889.869025][T22894] active_anon 0 [ 1889.873414][T22894] inactive_file 0 [ 1889.878748][T22894] active_file 0 [ 1889.887380][T22894] unevictable 0 [ 1889.891535][T22894] hierarchical_memory_limit 3145728 [ 1889.897132][T22894] hierarchical_memsw_limit 9223372036854771712 [ 1889.903787][T22894] total_cache 0 [ 1889.907398][T22894] total_rss 0 [ 1889.913924][T22894] total_rss_huge 0 [ 1889.917892][T22894] total_shmem 0 [ 1889.928047][T22894] total_mapped_file 0 [ 1889.938775][T22894] total_dirty 0 [ 1889.949451][T22894] total_writeback 0 [ 1889.953320][T22894] total_workingset_refault_anon 22913 [ 1889.966177][T22894] total_workingset_refault_file 1443 [ 1889.972850][T22894] total_swap 126976 [ 1889.977114][T22894] total_swapcached 931147776 [ 1889.987525][T32743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.991410][T22894] total_pgpgin 440129 [ 1889.998844][T22894] total_pgpgout 448855 [ 1890.002950][T22894] total_pgfault 530460 [ 1890.007054][T22894] total_pgmajfault 10130 [ 1890.011051][T32743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1890.011831][T22894] total_inactive_anon 65536 [ 1890.021149][T32743] bridge_slave_1: entered allmulticast mode [ 1890.023765][T22894] total_active_anon 0 [ 1890.037685][T32743] bridge_slave_1: entered promiscuous mode [ 1890.047074][T22894] total_inactive_file 0 [ 1890.056702][T22894] total_active_file 0 [ 1890.061445][T22894] total_unevictable 0 [ 1890.065480][T22894] anon_cost 55 [ 1890.070336][T22894] file_cost 0 [ 1890.073889][T22894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8741,pid=32748,uid=0 [ 1890.077516][T32666] mkiss: ax0: crc mode is auto. [ 1890.115367][T22894] Memory cgroup out of memory: Killed process 32748 (syz.4.8741) total-vm:104400kB, anon-rss:1236kB, file-rss:20776kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1890.233262][T32743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1890.237745][T31420] Bluetooth: hci5: command tx timeout [ 1890.298419][T32743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1890.363146][T32743] team0: Port device team_slave_0 added [ 1890.383261][T32743] team0: Port device team_slave_1 added [ 1890.460005][T32743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1890.486346][T32743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1890.518086][T32743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1890.538779][T32743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1890.555911][T32743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1890.583907][T32743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1890.744608][T32743] hsr_slave_0: entered promiscuous mode [ 1890.755596][T32743] hsr_slave_1: entered promiscuous mode [ 1890.762654][T32743] debugfs: 'hsr0' already exists in 'hsr' [ 1890.769312][T32743] Cannot create hsr debugfs directory [ 1891.161274][ T302] ERROR: Out of memory at tomoyo_memory_ok. [ 1891.376997][T32743] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1891.395179][T32743] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1891.408331][T32743] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1891.427586][T32743] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1891.621688][T32743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1891.658062][T32743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1891.679412][T31417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.686826][T31417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1891.717846][T31417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.725166][T31417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.978034][T32764] syz.4.8743 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1891.991054][T32764] CPU: 1 UID: 0 PID: 32764 Comm: syz.4.8743 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1891.991109][T32764] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1891.991122][T32764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1891.991141][T32764] Call Trace: [ 1891.991152][T32764] [ 1891.991164][T32764] dump_stack_lvl+0x100/0x190 [ 1891.991217][T32764] dump_header+0xfb/0x606 [ 1891.991252][T32764] oom_kill_process.cold+0xd/0x330 [ 1891.991290][T32764] out_of_memory+0x340/0x14f0 [ 1891.991335][T32764] ? __pfx_out_of_memory+0x10/0x10 [ 1891.991383][T32764] mem_cgroup_out_of_memory+0xc6/0x130 [ 1891.991438][T32764] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1891.991506][T32764] ? find_held_lock+0x2b/0x80 [ 1891.991561][T32764] ? do_raw_spin_unlock+0x145/0x1e0 [ 1891.991604][T32764] ? _raw_spin_unlock+0x28/0x50 [ 1891.991648][T32764] try_charge_memcg+0x652/0xc90 [ 1891.991702][T32764] ? __pfx_try_charge_memcg+0x10/0x10 [ 1891.991758][T32764] ? find_held_lock+0x2b/0x80 [ 1891.991803][T32764] ? rcu_read_unlock+0x17/0x60 [ 1891.991847][T32764] ? rcu_read_unlock+0x17/0x60 [ 1891.991895][T32764] charge_memcg+0xa6/0x280 [ 1891.991940][T32764] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1891.991996][T32764] __swap_cache_prepare_and_add+0x528/0x9e0 [ 1891.992055][T32764] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 1891.992090][T32764] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1891.992146][T32764] swap_cache_alloc_folio+0x1cb/0x300 [ 1891.992185][T32764] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1891.992223][T32764] ? lockdep_hardirqs_on+0x78/0x100 [ 1891.992271][T32764] ? finish_task_switch.isra.0+0x205/0xb80 [ 1891.992329][T32764] swap_cluster_readahead+0x411/0x770 [ 1891.992375][T32764] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1891.992439][T32764] ? get_vma_policy+0x23f/0x3b0 [ 1891.992499][T32764] swapin_readahead+0x160/0x12c0 [ 1891.992549][T32764] ? __pfx_swapin_readahead+0x10/0x10 [ 1891.992583][T32764] ? find_held_lock+0x2b/0x80 [ 1891.992629][T32764] ? swap_table_get+0x103/0x2c0 [ 1891.992657][T32764] ? swap_table_get+0x103/0x2c0 [ 1891.992696][T32764] ? swap_table_get+0x10d/0x2c0 [ 1891.992730][T32764] ? swap_cache_get_folio+0x1ae/0x600 [ 1891.992765][T32764] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1891.992798][T32764] ? __pfx_get_swap_device+0x10/0x10 [ 1891.992850][T32764] ? do_swap_page+0xb2e/0x68e0 [ 1891.992881][T32764] do_swap_page+0xb2e/0x68e0 [ 1891.992934][T32764] ? __pfx_do_swap_page+0x10/0x10 [ 1891.992978][T32764] ? rcu_is_watching+0x12/0xc0 [ 1891.993021][T32764] ? __pte_offset_map+0x179/0x310 [ 1891.993070][T32764] __handle_mm_fault+0x18c1/0x2b60 [ 1891.993112][T32764] ? reacquire_held_locks+0xce/0x1e0 [ 1891.993149][T32764] ? __pfx___handle_mm_fault+0x10/0x10 [ 1891.993190][T32764] ? lock_vma_under_rcu+0x17c/0x590 [ 1891.993250][T32764] handle_mm_fault+0x36d/0xa20 [ 1891.993293][T32764] do_user_addr_fault+0x5a3/0x12f0 [ 1891.993354][T32764] exc_page_fault+0x6f/0xd0 [ 1891.993402][T32764] asm_exc_page_fault+0x26/0x30 [ 1891.993436][T32764] RIP: 0033:0x7fa29525073f [ 1891.993470][T32764] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d d2 18 3b 00 89 f0 4c 8d 05 c9 f8 3a 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 1891.993504][T32764] RSP: 002b:00007ffc63ab5638 EFLAGS: 00010206 [ 1891.993529][T32764] RAX: 000000008b7bdedb RBX: ffffffff8b7bdedb RCX: ffffffff8b7bd3b1 [ 1891.993551][T32764] RDX: 0000000000001edb RSI: ffffffff8b7bdedb RDI: 0000000000000000 [ 1891.993573][T32764] RBP: 00000000000000cd R08: 00007fa295600000 R09: 00007fa295602000 [ 1891.993595][T32764] R10: 000000008b7bdedf R11: 0000000000000000 R12: 00007fa295616038 [ 1891.993616][T32764] R13: 00000000000000d5 R14: ffffffff8b7bdab6 R15: 00007fa296145720 [ 1891.993640][T32764] ? xas_load+0x76/0x5c0 [ 1891.993688][T32764] ? xas_load+0x49b/0x5c0 [ 1891.993738][T32764] ? xas_start+0x111/0x790 [ 1891.993784][T32764] ? xas_load+0x49b/0x5c0 [ 1891.993834][T32764] [ 1891.994001][T32764] memory: usage 3072kB, limit 3072kB, failcnt 191085 [ 1892.298396][T31420] Bluetooth: hci5: command tx timeout [ 1892.332397][T32764] memory+swap: usage 3160kB, limit 9007199254740988kB, failcnt 0 [ 1892.414678][T32764] kmem: usage 2960kB, limit 9007199254740988kB, failcnt 0 [ 1892.422562][T32764] Memory cgroup stats for /syz4: [ 1892.422783][T32764] cache 0 [ 1892.432309][T32764] rss 24576 [ 1892.435594][T32764] rss_huge 0 [ 1892.439353][T32764] shmem 0 [ 1892.442507][T32764] mapped_file 0 [ 1892.447539][T32764] dirty 0 [ 1892.450622][T32764] writeback 0 [ 1892.454117][T32764] workingset_refault_anon 23291 [ 1892.461586][T32764] workingset_refault_file 1443 [ 1892.466957][T32764] swap 90112 [ 1892.470350][T32764] swapcached 931237888 [ 1892.474606][T32764] pgpgin 440544 [ 1892.479843][T32764] pgpgout 449259 [ 1892.483633][T32764] pgfault 530975 [ 1892.487834][T32764] pgmajfault 10459 [ 1892.491782][T32764] inactive_anon 0 [ 1892.496114][T32764] active_anon 0 [ 1892.499735][T32764] inactive_file 0 [ 1892.503600][T32764] active_file 0 [ 1892.507725][T32764] unevictable 0 [ 1892.511442][T32764] hierarchical_memory_limit 3145728 [ 1892.517502][T32764] hierarchical_memsw_limit 9223372036854771712 [ 1892.524090][T32764] total_cache 0 [ 1892.528420][T32764] total_rss 24576 [ 1892.532251][T32764] total_rss_huge 0 [ 1892.536674][T32764] total_shmem 0 [ 1892.540386][T32764] total_mapped_file 0 [ 1892.544584][T32764] total_dirty 0 [ 1892.549668][T32764] total_writeback 0 [ 1892.553831][T32764] total_workingset_refault_anon 23291 [ 1892.559834][T32764] total_workingset_refault_file 1443 [ 1892.565777][T32764] total_swap 90112 [ 1892.569684][T32764] total_swapcached 931237888 [ 1892.574444][T32764] total_pgpgin 440544 [ 1892.579132][T32764] total_pgpgout 449259 [ 1892.583450][T32764] total_pgfault 530975 [ 1892.588140][T32764] total_pgmajfault 10459 [ 1892.592609][T32764] total_inactive_anon 0 [ 1892.597374][T32764] total_active_anon 0 [ 1892.601539][T32764] total_inactive_file 0 [ 1892.606346][T32764] total_active_file 0 [ 1892.610501][T32764] total_unevictable 0 [ 1892.630119][T32764] anon_cost 71 [ 1892.633553][T32764] file_cost 0 [ 1892.641607][T32743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1892.648527][T32764] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8743,pid=32764,uid=0 [ 1892.664482][T32764] Memory cgroup out of memory: Killed process 32764 (syz.4.8743) total-vm:104268kB, anon-rss:1252kB, file-rss:20792kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 1892.991410][T32743] veth0_vlan: entered promiscuous mode [ 1893.004345][T32743] veth1_vlan: entered promiscuous mode [ 1893.043877][T32743] veth0_macvtap: entered promiscuous mode [ 1893.055078][T32743] veth1_macvtap: entered promiscuous mode [ 1893.077734][T32743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1893.095271][T32743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1893.112032][T31570] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.123591][T31570] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.143728][T31570] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.153558][T31570] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.274940][T31570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1893.288723][T31570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1893.335698][T31570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1893.345467][T31570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.366155][T31420] Bluetooth: hci5: command tx timeout [ 1896.436199][T31420] Bluetooth: hci5: command tx timeout [ 1901.211242][ T302] mkiss: ax0: crc mode is auto. [ 1902.248967][ T323] ERROR: Out of memory at tomoyo_memory_ok. [ 1912.293538][ T323] mkiss: ax0: crc mode is auto. [ 1913.330208][ T326] ERROR: Out of memory at tomoyo_memory_ok. [ 1914.902677][T31570] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1416 with max blocks 50 with error 117 [ 1914.917958][T31570] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1914.917958][T31570] [ 1914.932683][T31570] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 980 with max blocks 43 with error 117 [ 1914.947747][T31570] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1914.947747][T31570] [ 1914.961982][T31570] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1021 with max blocks 2 with error 117 [ 1914.975531][T31570] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1914.975531][T31570] [ 1917.058267][ T31] INFO: task kworker/u11:3:31421 blocked for more than 143 seconds. [ 1917.066418][ T31] Tainted: G U L syzkaller #0 [ 1917.074172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1917.084193][ T31] task:kworker/u11:3 state:D stack:26904 pid:31421 tgid:31421 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1917.096430][ T31] Workqueue: netns cleanup_net [ 1917.103827][ T31] Call Trace: [ 1917.107178][ T31] [ 1917.111514][ T31] __schedule+0xfee/0x6020 [ 1917.115987][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1917.121629][ T31] ? __pfx___schedule+0x10/0x10 [ 1917.126616][ T31] ? find_held_lock+0x2b/0x80 [ 1917.132395][ T31] ? schedule+0x2bf/0x390 [ 1917.137782][ T31] schedule+0xdd/0x390 [ 1917.142017][ T31] schedule_timeout+0x1b2/0x280 [ 1917.146905][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1917.154625][ T31] ? mark_held_locks+0x40/0x70 [ 1917.159515][ T31] __wait_for_common+0x2e7/0x4c0 [ 1917.164553][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1917.170177][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1917.176141][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1917.181485][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1917.188397][ T31] __flush_workqueue+0x3f7/0x1200 [ 1917.193523][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1917.198698][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1917.204325][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 1917.215627][ T31] ? release_sock+0x21/0x220 [ 1917.220473][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1917.226020][ T31] ? __local_bh_enable_ip+0x9e/0x120 [ 1917.232253][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1917.239454][ T31] rds_tcp_listen_stop+0x104/0x160 [ 1917.244631][ T31] rds_tcp_exit_net+0xe0/0x870 [ 1917.249540][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1917.254981][ T31] ? __pfx___might_resched+0x10/0x10 [ 1917.262821][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1917.268370][ T31] ops_undo_list+0x2ee/0xab0 [ 1917.273058][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1917.278710][ T31] ? cleanup_net+0x332/0x920 [ 1917.283363][ T31] ? idr_destroy+0x62/0x2e0 [ 1917.289644][ T31] cleanup_net+0x499/0x920 [ 1917.294134][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1917.299222][ T31] ? rcu_is_watching+0x12/0xc0 [ 1917.304057][ T31] process_one_work+0x9c2/0x1840 [ 1917.309618][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1917.316029][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1917.323594][ T31] worker_thread+0x5da/0xe40 [ 1917.328351][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1917.333532][ T31] ? kthread+0x13a/0x450 [ 1917.338663][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1917.344614][ T31] kthread+0x370/0x450 [ 1917.350391][ T31] ? __pfx_kthread+0x10/0x10 [ 1917.355081][ T31] ret_from_fork+0x754/0xd80 [ 1917.359787][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1917.365050][ T31] ? rcu_is_watching+0x12/0xc0 [ 1917.372443][ T31] ? __switch_to+0x7b4/0x10c0 [ 1917.377736][ T31] ? __pfx_kthread+0x10/0x10 [ 1917.382402][ T31] ret_from_fork_asm+0x1a/0x30 [ 1917.388240][ T31] [ 1917.391386][ T31] [ 1917.391386][ T31] Showing all locks held in the system: [ 1917.399432][ T31] 1 lock held by khungtaskd/31: [ 1917.404322][ T31] #0: ffffffff8e7e7460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1917.414393][ T31] 3 locks held by kworker/u11:3/31421: [ 1917.420694][ T31] #0: ffff88801c6a6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1917.433845][ T31] #1: ffffc900033d7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1917.444958][ T31] #2: ffffffff905f10f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1917.458137][ T31] 1 lock held by syz.3.8498/31593: [ 1917.463326][ T31] #0: ffffffff905f10f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1917.473059][ T31] 1 lock held by syz.1.8709/32617: [ 1917.480910][ T31] #0: ffffffff905f10f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1917.491425][ T31] [ 1917.493802][ T31] ============================================= [ 1917.493802][ T31] [ 1917.502484][ T31] NMI backtrace for cpu 0 [ 1917.502511][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1917.502561][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1917.502573][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1917.502594][ T31] Call Trace: [ 1917.502604][ T31] [ 1917.502617][ T31] dump_stack_lvl+0x100/0x190 [ 1917.502671][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1917.502738][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1917.502784][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1917.502827][ T31] sys_info+0x141/0x190 [ 1917.502858][ T31] watchdog+0xcc3/0xfe0 [ 1917.502916][ T31] ? __pfx_watchdog+0x10/0x10 [ 1917.502962][ T31] ? __kthread_parkme+0x18c/0x230 [ 1917.503021][ T31] ? kthread+0x13a/0x450 [ 1917.503055][ T31] ? __pfx_watchdog+0x10/0x10 [ 1917.503098][ T31] kthread+0x370/0x450 [ 1917.503135][ T31] ? __pfx_kthread+0x10/0x10 [ 1917.503174][ T31] ret_from_fork+0x754/0xd80 [ 1917.503220][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1917.503267][ T31] ? __switch_to+0x7b4/0x10c0 [ 1917.503296][ T31] ? __pfx_kthread+0x10/0x10 [ 1917.503334][ T31] ret_from_fork_asm+0x1a/0x30 [ 1917.503385][ T31] [ 1917.503397][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1917.634700][ C1] NMI backtrace for cpu 1 [ 1917.634726][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1917.634768][ C1] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1917.634779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1917.634795][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1917.634839][ C1] Code: 1e 94 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 ac 2d 00 fb f4 3c 34 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1917.634868][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 1917.634892][ C1] RAX: 0000000000269f4b RBX: ffff88801e6d8000 RCX: ffffffff8b7dec75 [ 1917.634911][ C1] RDX: 0000000000000000 RSI: ffffffff8de73cdb RDI: ffffffff8c1ad620 [ 1917.634929][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6755 [ 1917.634947][ C1] R10: ffff8880b8533aab R11: 0000000000000000 R12: ffffed1003cdb000 [ 1917.634965][ C1] R13: 0000000000000001 R14: ffffffff90d8f5d0 R15: 0000000000000000 [ 1917.634982][ C1] FS: 0000000000000000(0000) GS:ffff888124492000(0000) knlGS:0000000000000000 [ 1917.635013][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1917.635031][ C1] CR2: 00007f7d670f7910 CR3: 0000000076d7e000 CR4: 00000000003526f0 [ 1917.635050][ C1] Call Trace: [ 1917.635059][ C1] [ 1917.635069][ C1] default_idle+0x9/0x10 [ 1917.635093][ C1] default_idle_call+0x6c/0xb0 [ 1917.635117][ C1] do_idle+0x35b/0x4b0 [ 1917.635156][ C1] ? __pfx_do_idle+0x10/0x10 [ 1917.635194][ C1] ? do_idle+0x2b9/0x4b0 [ 1917.635231][ C1] cpu_startup_entry+0x4f/0x60 [ 1917.635269][ C1] start_secondary+0x21d/0x2d0 [ 1917.635301][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1917.635336][ C1] common_startup_64+0x13e/0x148 [ 1917.635389][ C1] [ 1917.827709][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1917.834643][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1917.845371][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1917.850608][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1917.860688][ T31] Call Trace: [ 1917.863993][ T31] [ 1917.866951][ T31] dump_stack_lvl+0x100/0x190 [ 1917.871688][ T31] vpanic+0x552/0x970 [ 1917.875728][ T31] ? __pfx_vpanic+0x10/0x10 [ 1917.880302][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 1917.885703][ T31] ? rcu_is_watching+0x12/0xc0 [ 1917.890529][ T31] panic+0xd1/0xe0 [ 1917.894378][ T31] ? __pfx_panic+0x10/0x10 [ 1917.899037][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1917.905232][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1917.911417][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1917.917597][ T31] ? watchdog.cold+0x198/0x1ca [ 1917.922396][ T31] ? watchdog+0xcd3/0xfe0 [ 1917.926904][ T31] watchdog.cold+0x1a9/0x1ca [ 1917.931545][ T31] ? __pfx_watchdog+0x10/0x10 [ 1917.936261][ T31] ? __kthread_parkme+0x18c/0x230 [ 1917.941330][ T31] ? kthread+0x13a/0x450 [ 1917.945597][ T31] ? __pfx_watchdog+0x10/0x10 [ 1917.950341][ T31] kthread+0x370/0x450 [ 1917.954447][ T31] ? __pfx_kthread+0x10/0x10 [ 1917.959105][ T31] ret_from_fork+0x754/0xd80 [ 1917.963755][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1917.968935][ T31] ? __switch_to+0x7b4/0x10c0 [ 1917.973691][ T31] ? __pfx_kthread+0x10/0x10 [ 1917.978333][ T31] ret_from_fork_asm+0x1a/0x30 [ 1917.983159][ T31] [ 1917.986817][ T31] Kernel Offset: disabled [ 1917.991217][ T31] Rebooting in 86400 seconds..