last executing test programs: 1m4.238700857s ago: executing program 0 (id=2387): mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x82b1, 0xe983, 0xa, 0x7a, r0, 0x2) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0) socket(0xa, 0x5, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4dff, 0x1, 0x9) migrate_pages$auto(0x0, 0x8000000000000001, &(0x7f0000000040)=0x5, &(0x7f0000000140)=0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) epoll_create$auto(0x2) epoll_pwait2$auto(r1, 0x0, 0x8, 0x0, 0x0, 0x8) sysfs$auto(0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) write$auto(r3, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x15, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m3.116757675s ago: executing program 0 (id=2392): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x480000, 0x0) ioctl$auto_SCSI_IOCTL_SYNC(r0, 0x4, &(0x7f00000002c0)="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") r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r1, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x9, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4788, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908288a8"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 1m2.800082987s ago: executing program 0 (id=2393): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) socket(0x2a, 0x4, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xe1, 0x0, [{0x40000071, 0x400, 0xfffffffffffffffd}]}) 1m2.349857567s ago: executing program 0 (id=2395): openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x121001, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000001, 0x9, 0x5, 0x0, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x1ad, 0x0, 0x3, [0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x20000001, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 1m1.311785918s ago: executing program 0 (id=2398): socket(0x2, 0x3, 0xa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x759, 0x5, 0x81, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x4, 0x0, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r1, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x7) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0)) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948f, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) read$auto_stats_fops_(r2, 0x0, 0x0) 1m0.335234085s ago: executing program 0 (id=2403): openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x3, 0x0, 0x4) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x80002, 0x73) ioctl$auto(r0, 0x8914, 0x24) 45.279288854s ago: executing program 32 (id=2403): openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40283, 0x0) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x3, 0x0, 0x4) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) socket(0x2, 0x80002, 0x73) ioctl$auto(r0, 0x8914, 0x24) 6.275850858s ago: executing program 2 (id=2558): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) socket(0x1a, 0x6, 0x968c) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x51) mmap$auto(0x7c, 0x20009, 0xffffffffffffffc0, 0xeb1, 0x401, 0x10001) statmount$auto(0x0, &(0x7f0000000180)={0x80000a, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x8, 0xfff, 0xd, 0xb0, 0x200000001, 0x5, 0x4, 0x9, 0x6, 0x0, 0x0, 0x0, 0x200, 0xfffffffa, 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x800000000003, 0x6, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3046, 0x1000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0xffffffffffff0000, 0x11, 0x8040000000000001, 0x4, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x10081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r0, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c040000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf259c000000f0020e8044000200321c48c2f34c5a27541a1131b7c87584b7e9bcb015e846cc36554fe8aa2574b25ec0449427593e295b1959bcf4a98728c285b63488321ce70c3d34df593f32b10e00020069a35aac462fb622a7e300004900020012d7b0b5d3a680f7f57e336c380d7c3069b4808c9530126fe540f34ab19636fa33a4a7651554ee76216aceb2ff323d12f0ed40d2c35d3304958bad95f06c66ffce0acd5a900000000400010004000100040001000b0003003b6a433d3b14a40080000200336145e154f301380f6fe160fda2df29317dd336a376d26e26a9f46e1fc87eb9aa9baf2a5c588cdddef58a39d1a90e0dfd2dab275291d04da24df3973c0ec78422f975cb21715850d6dcc11daefabc566db6098600cdd3ff06c018116891a1c7043b8c024e60bcaa6cdeedb7f367b5ec8e2fda74e6f9e5eb6d8222b7cd0003008e1287042e7ef4f6614fe380520a72501d51c1afa4d7b75a41a8553e907f6683bd53babc0fbc3ccc784822768cd117a69912402f6d3a79aa3c3b000adc08b939727ec4879a1f7e7c9611615ff9f438378e4fcc080db8e30931fdcb1c8a3c55f5770f0b87bf0478dd9107bd60ed7ef397d51cfde91792258db63167be1da32fa4d3ed8f1a0aa4a3a41c15d97fd481e5f7b48d2de6bd4779a554943fd847a915995f5f161a801d16d7cec1518bf6cfe125826c0c1c56e66f434d3a40ffab8c49d140743acd35645a6c1d000000e3000200f77c404ebe5cb1f372f2cdb81061b7f804d49091f76267d377019b3ff11fcaf9373a050f91ac21f553a5c2e253745d86608696d39e2f5514e274bd7fbfcae54698cf638d45609b3cb9549c3ea8a6248482d41a37345cc0740b56919b0ac6d5b56c67792f6e6d7d8061a0a160a0e7eb71638ebcc7572fbf30dfc46d1df2e846ee18ccbdf638d10fc1b130bd6bc89c4fe47ebd06eeaff0a5a13557ff04619d1406ab4ab68c7eb482ac4aca153991563274236a4c0f59fdd219d767c89eb95047d70ae8427e902c0f72571b481692c56f26ca77eb61eb52d2273a4500a6d815b30084011d8080010080d0000d80050006000300000005000700040000000500040009000000760003009be9c0369bfe2c63e6fa1e34ea7e785e2d3e12f015d1f7ea8e35ed9c7aa6ffb8a056d5f2408054e98cce5ac6fcb3d0df801f85d8f156e476ec22ed51f13c41a1b840b1680927b3632122b9ebb311f2ab5eb0ab844fa7193df475d2dd9df858a04652d804cc23239c4c5b000022000100c260575d73a735da517794c7af7011c0b2d401a0d0eb752cc8711094b10f000017000100aac5664be64a8a959084c821d15a6607c548ba008c000d80050004000800000005000700800000000500070009000000050007000b00000060000500042405628be22e0b2bf3fe77fc2c2a184734f9bd7edcb9b11aa61293e042092d17a1b6e04e9fcf579ba2a498baf3164005d60f1ad3ae49deaeac62d13bbfd7d393a630ee19a0ff27944db295261cce77249644cb7624cbb2516162ad05000600000000000600050010000000050007003500000005000a002100000005000b00060000000400f400"], 0x48c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x404c000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x0, 0xa503}, 0x800}, 0x7, 0x4008) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xce*+#\x00', 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) r3 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r3, 0x8000) setsockopt$auto(r3, 0x10000000084, 0x78, 0x0, 0x8) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) capset$auto(0x0, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcbaL\x8d\x12\x18I', 0x81) unshare$auto(0x20000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$auto(0xf, 0x0, 0xf) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) 6.272388084s ago: executing program 1 (id=2567): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0xdb, 0x1470, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x400, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) ioctl$auto_BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000000)=0x100) getgroups$auto(0x7fd, 0x0) 5.308137415s ago: executing program 1 (id=2561): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x8000000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/platform/vivid.0/cec2/uevent\x00', 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) clone$auto(0x21, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x10000000000006) (async) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) (async) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) setrlimit$auto(0x1000000007, 0x0) (async) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, 0x0, 0x800) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x10000000018, 0x5, 0x4, 0x20000000009, 0x0) sysfs$auto(0x2, 0x100000000000036, 0x0) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) (async) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000a40)=""/4096, 0x1000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c0302, 0x0) (async) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x800, 0x0) ioctl$auto(r3, 0x4611, r3) (async) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) (async) timer_settime$auto(0x4, 0x6, &(0x7f00000000c0)={{0x1, 0x81}, {0x131, 0x87}}, 0x0) (async) write$auto(r0, 0x0, 0x1000) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mq_open$auto(&(0x7f0000000140)='\'{#:\x00', 0x6, 0xc2e8, &(0x7f0000000180)={0x9, 0x7, 0x3, 0x8}) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r1) 4.897176957s ago: executing program 1 (id=2563): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x143203, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r1, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d0b, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x8, 0x0, 0xfffffffffffffffe, 0x6, 0x8000, 0xffffffffffffff81, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x1c00}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc005) io_uring_register$auto(0x2, 0x1a, &(0x7f0000000000), 0x80000001) 4.850467802s ago: executing program 2 (id=2564): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(r0, 0x8, 0x0) socket(0xa, 0x5, 0x84) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x4e602, 0x0) mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, r1, 0x28020) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0xb, 0x1ff, 0xffd, 0x5, 0x0, 0x0, 0x7, 0x200000000000003, 0xd, 0x4, 0x29, 0x2, 0x1ffffffffffd, 0x4, 0x4, 0x7, 0x863, 0x7f, 0x5, 0x4, 0xa, 0x22000, 0x203, 0x4, 0x84, 0x0, 0x3, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x2000, 0x0, 0x800000000000000, 0x0, 0x1fb, 0x0, 0x6, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfff, 0x800000000000400, 0x1, 0x8, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa8, 0x1, 0xa68, 0x0, 0x0, 0x8000000, 0x0, 0xfffefffffffffffb, 0x100000000000, 0x100], "3fb1656ea062a20914ec6b40875213eaec8b21da534eaad3fb725776d886191f91a1a66ba545329d70d71a9ab87bfd5f8afd00ea336b486fc4ac584c5610ce5c93d1f02377a1c86b875155184bc8a9f6f30a26"}, 0x97, 0x7fffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) unshare$auto(0x40000080) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x400642, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setsockopt$auto(r4, 0x110, 0x1, 0x0, 0x275d) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20000044) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptywd\x00', 0x80, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd03, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0x10000000, 0x0, 0x9}, 0x1, 0x0, 0x0, 0x100623d) madvise$auto(0x10000, 0x40400054, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.733854124s ago: executing program 3 (id=2565): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0xfffffffffffffffc, 0x0, 0x1, 0x2) mount$auto(0x0, 0x0, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) read$auto_vhost_vsock_fops_vsock(r0, &(0x7f0000000000)=""/64, 0x40) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) shmget$auto(0x8, 0x431, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x0) open(&(0x7f0000000800)='./file0\x00', 0xf4002, 0x135) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ed03667ddcd6d026df250a00000a00000200252f00e2a85c41e75a02715b2d"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) landlock_add_rule$auto(r1, 0x1, &(0x7f0000000840)="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", 0x10001) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) fcntl$auto(0x3, 0x401, 0x9ec0000000000000) sendto$auto(0x3, 0x0, 0x813, 0xfffffff8, &(0x7f0000000100)=@rc={0x1f, @any, 0x5}, 0x80000001) 3.773247442s ago: executing program 3 (id=2568): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pipe$auto(&(0x7f0000000000)=0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop11\x00', 0x602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r1 = socket(0x2, 0x3, 0xa) connect$auto(r1, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback, 0x1}, 0x54) mmap$auto(0x0, 0x7, 0x3, 0x16, 0xffffffffffffffff, 0x8000) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rt6_stats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4) socket(0xd, 0x0, 0x10000088) bpf$auto(0x7, &(0x7f0000000000)=@enable_stats={0x400000}, 0xa3) r2 = io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x80000, 0x1a) waitid$auto(0x4, r2, &(0x7f0000000000)={@siginfo_0_0={0x37, 0x7ba0, 0x5, @_sigpoll={0x5, r3}}}, 0x3, &(0x7f0000000080)={{0x9, 0xffffffff}, {0x3, 0x927}, 0x2000000000000, 0x7, 0x13, 0x9, 0x2, 0x8, 0x10001, 0x0, 0xfffffffeffffffff, 0x6, 0x166af00d, 0x100000000006, 0x8, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) 3.714041596s ago: executing program 4 (id=2569): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x80000001}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0xa9}, @NL80211_ATTR_KEY_DATA={0x1d, 0x7, "d6cec1299f3569acd0c66fbf59aaaab7d52e2a9ecf8fad8002"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) 3.520577167s ago: executing program 1 (id=2570): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x81085519, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/wakeup/wakeup1/prevent_suspend_time_ms\x00', 0x0, 0x0) r1 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/95, 0x5f) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb90, 0x2, @stream_id=0x102, 0x7, 0x476, 0x0}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) statmount$auto(&(0x7f0000000000)={0x18, @raw=0x7bb7, 0x4, 0x100000001, 0x8}, 0x0, 0x207, 0x0) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000040)={@sival_int=0x6, @inferred=r2, 0x4}, &(0x7f0000000080)=0x2) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x800000404, 0x8000) socketpair$auto(0x1001, 0x3, 0x7fff, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r5, 0x400454ca, 0x38) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, r7, 0x8000) link$auto(&(0x7f0000001200)='./file0\x00', 0x0) 3.397190556s ago: executing program 4 (id=2571): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd8\x00', 0x4000, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x41, 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/034/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x1, 0x8, 0x5, 0x7ff, 0x7fb, &(0x7f0000000100)}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="9ddf72c6b3ccf6e596c065e990ce4331174efad4aba90238c76c8e8ace07517933448ddfcdb03b280e903d6b2e9e41b8e66b664881cbfaa982fcf7b370ec62bcdd42a4bea27a5238d1", 0x4000000000123f}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) ioctl$auto_TUNDETACHFILTER(r2, 0x401054d6, 0x0) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x4a, 0xfffffffffffffffe, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x101840, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, 0x8, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) 3.114170268s ago: executing program 3 (id=2572): socket(0x2, 0x3, 0xa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x75d, 0x5, 0x81, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x8, 0xb14, 0x10004, 0x400007d, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x0, 0x7, 0x4, 0x25c3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x99, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0xef6, 0x0, 0x40000000000, 0x4, 0x0, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) r1 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) pread64$auto(r1, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/allop_area/format\x00\x00\x00\x00\x00\x00\x0f:\xe23j\xb2\x93\x99\r\x02\xd0f\x87Wz\x1b\xc7\x9f\x0f7\xe8\x94\xac(,\x03\x03\xff\xc4*o\xcbf\xe4\x8a\x10\xf3\x7fA\x02:Y\xcf\x1b\x8e\x91%\x00\xf9\xff6\xa6\\\x80\x0f\xfa\xd4\xec\xa6\x0e\x1c,\'\\Aq\xae\x8e\x9c_ \x0f\v\xd3\xcb\xe4\"\xf2\x95\x8e\xc0q\x03;\x16\x84apq\xb4\x88o\xe2\x8c\xb2\xbf\x18z\xee\x8f\x05\x84\xdb\xcbP\xfa\xcec\xa4\xec\xd3\xa9[\x91xV\xd5g\xdf)\xfbJ\xaeNI\x13o\xb8\x98\xc9\x06yP>N\xe7\xf4e\xc2\x97\x02_\xeaV\xc9Vk\xaff\v\xc7\x7f\xdc\xd4\xca\xcf\x94\xb6\x1dK\xc0\xdd\x83w\xe0\x8dx\f\x17>\xa1\riQ\xb7\x03=1\xb7\xed\x1e&t\xffHx>\xc9\xac\x17/\x16\x92y\x87\xc6\x90\x8c\xcb\x86H5\n\xa2\xe8\x03\x92\xc3\xa9\xfb\x9eh\xec\xa9\x8d\xb80\x86\xa6\xa5\xd4I\xfe\xc6]F\xbe\xa0\xda\xa2\x13\xc6\xfb\xe6\xee\xf4Z,\x10\x10C0\x8b\xfd\xfb\xee\x93\x125\xfe\xc4z\"\xc6=Z\xacM\x14\x8f?w\x88S;eNL\xcd.(\xccT\xfaI\a\x1c\xb5\x8d\xf8\xccd\x1f\x1b\xb48\xb1\xbc\xfb\x13f\xa5\xd2\xfb\x17\xff\xe8\xd9\b3\x95\xa7\x85\xb1\x98\xd0\xcf\xbf=\xf7\xd0q1\b\xd2|\xc1B\xcc#5', 0x100000001, 0x7) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd05, &(0x7f00000001c0)) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x802, 0x9, 0x63, 0x0, 0x0, 0x0, 0x7, 0x7ff, 0x800000000100002, 0x0, 0x2, 0xc, 0x40, 0x1c, 0x20000000009, 0xb}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a0001"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c2, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x100) r2 = open(&(0x7f0000000100)='./file0\x00', 0x161342, 0x160) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x5, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) shutdown$auto(0x200000003, 0x1) mmap$auto(0x803, 0x3, 0x45c0, 0x9b71, r2, 0x7ffd) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) 2.951586691s ago: executing program 2 (id=2573): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x565e, 0x400a, 0x4, 0x20000000000004fc, 0x602, 0x400000000000368) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x102, 0xa8, 0x8, 0x6, 0x0}) socket(0x3, 0x2, 0x73) socket(0xa, 0x1, 0x84) semctl$auto(0x201, 0x2, 0x3, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x6, 0xffffffffffffffff, @relative_id=0x2, 0x9}, 0xa3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyv8\x00', 0x8040, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x3) r3 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/environ\x00', 0x2800, 0x0) preadv$auto(r3, &(0x7f00000001c0)={0x0, 0x6b}, 0x8, 0xd2d, 0x8) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f00000001c0)) 2.804773393s ago: executing program 4 (id=2574): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030426bd7000f9dbdf2502000f00040003000a00010019c1ff759f3303e8a81f4835fd6f88149b0c000008000500"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto(r0, 0x8925, r0) 2.443345092s ago: executing program 3 (id=2575): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/io\x00', 0x0, 0x0) 1.9355723s ago: executing program 3 (id=2576): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:10/max_ratio\x00', 0x0, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) r1 = socket(0x26, 0x80002, 0x75) r2 = socket(0xa, 0x1, 0x17f3) bind$auto(0xffffffffffffffff, &(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0xffffffff}}, 0x400007) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) uname$auto(0x0) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r1) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES16=r3, @ANYBLOB="040027bd7000fedbdf25030200000000050000000000080005000100000008000200", @ANYRESDEC, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0x4005810}, 0x20040893) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x408000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@query={@target_ifindex, 0x1, 0x4, 0xe6, 0x6, @count=0x7f, 0x0, 0x7, 0xa, 0x5, 0x80000000}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.842763093s ago: executing program 2 (id=2577): unshare$auto(0x40000080) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async) prctl$auto(0x4000002a, 0x3, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xe43) (async) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) (async) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) socketpair$auto(0xfff, 0xe, 0x7, 0x0) (async) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r2, 0x3b84, r1) (async) r3 = getpgid(0x0) r4 = pidfd_open$auto(r3, 0x0) setns(r4, 0x48000080) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) (async) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0) (async) bpf$auto_BPF_PROG_LOAD(0x5, 0x0, 0x9) (async) getpid() (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) (async) setresuid$auto(0x0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.432533403s ago: executing program 3 (id=2578): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x8000}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) ioctl$auto_SG_SET_RESERVED_SIZE2(r0, 0x2275, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x9, 0x2}, "654c6dbc7a4d30983899a7e1441074052a3fa6c3ccf1bfff07002000"}) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x2}, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) socket(0x11, 0x80003, 0x300) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x18, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) pidfd_open$auto(0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x4000000000005, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto_full_fops_mem(0xffffffffffffffff, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8003, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x44a03baf]}, 0x0) clock_gettime$auto(0x80000020, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r4 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pread64$auto(r4, &(0x7f0000000280)=']{::\x00', 0x1, 0x9) 1.431622479s ago: executing program 4 (id=2586): socket(0x28, 0x3, 0xa) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x4a0842, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) writev$auto(r0, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0x4) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) fanotify_init$auto(0x65, 0x2) socketpair$auto(0x1, 0xfffffe00, 0x8000000000000000, 0x0) bpf$auto(0x9, &(0x7f0000000380)=@raw_tracepoint={0x2, r0, 0x0, 0x28000}, 0x1ff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) r2 = socket(0x11, 0x80003, 0x300) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyac\x00', 0x0, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b67, r4) name_to_handle_at$auto(r4, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9gj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x0, 0x6}, 0x0, 0x1001) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x41) r5 = socket(0x2, 0x1, 0x0) setsockopt$auto(r5, 0x6, 0x5, 0x0, 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 1.174441539s ago: executing program 2 (id=2579): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x143203, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r1, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40103d0b, 0x0) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x8, 0x0, 0xfffffffffffffffe, 0x6, 0x8000, 0xffffffffffffff81, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x1c00}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x3}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc005) io_uring_register$auto(0x2, 0x1a, &(0x7f0000000000), 0x80000001) 1.173504117s ago: executing program 4 (id=2588): socket(0x2, 0x80003, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/amidi2\x00', 0x632043, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0xb267, 0x759, 0x5, 0x81, 0x1ffde, 0x7, 0xfffffffffffffffd, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb14, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x21ff9, 0x200, 0x0, 0x84, 0x0, 0x0, 0x3, 0x0, 0xac79, [0x5, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x40000000000004ac, 0x100000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x196fc46e, 0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x40000000000, 0x4, 0x0, 0x101, 0x0, 0x0, 0xffffffffffdffffd]}, 0x1fa, 0x11) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xf000, 0x8, 0x2, 0x9b72, 0x2, 0x8000) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) bind$auto(0x3, 0x0, 0x68) write$auto(0x3, 0x0, 0xfe1) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/format\x00', 0x40, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd05, &(0x7f00000001c0)) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) select$auto(0x20e, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x80009, 0x3, 0xfffffffffefffffe]}, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1d5a40, 0x0) 1.130399207s ago: executing program 1 (id=2580): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3378, 0x0) 540.547071ms ago: executing program 1 (id=2581): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x6, 0x40, &(0x7f00000000c0)='/dev/dvb/adapter0/demux0\x00', &(0x7f0000000100)=0x401) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0xffffffff00000000, 0x2020007, 0x0, 0x100000eb1, r0, 0x529) fsopen$auto(0x0, 0x1) r5 = socket(0xa, 0x3, 0x88) setsockopt$auto(r5, 0x11, 0xa, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/serial8250/driver_override\x00', 0x22b42, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 445.565155ms ago: executing program 4 (id=2582): openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) bpf$auto(0x0, 0x0, 0x6f3) (async) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x8) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x8ae00, 0x0) (async) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1, 0x3, 0x500, 0x1, 0x9, 0x800, 0x10000, 0xc, 0x8000000000000000, 0x4000005, 0x400000000000008, 0x7, 0x6d3f, 0x1, 0x5, 0x6]}, 0x0) (async) clone$auto(0x7, 0x1, 0x0, 0x0, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000840)="13") (async) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 0s ago: executing program 2 (id=2583): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0xffffffffffff9f88, 0x20009, 0x4000000000df, 0xebe, r0, 0x8000) unshare$auto(0x40000080) uname$auto(0x0) kernel console output (not intermixed with test programs): 176/0x910 [ 771.194366][T16408] out_of_memory+0x350/0x1700 [ 771.194398][T16408] ? __lock_acquire+0x436/0x2890 [ 771.194430][T16408] ? __pfx_out_of_memory+0x10/0x10 [ 771.194470][T16408] mem_cgroup_out_of_memory+0x118/0x130 [ 771.194505][T16408] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 771.194546][T16408] ? do_raw_spin_unlock+0x172/0x230 [ 771.194592][T16408] try_charge_memcg+0x695/0xd30 [ 771.194643][T16408] ? __pfx_try_charge_memcg+0x10/0x10 [ 771.194702][T16408] ? find_held_lock+0x2b/0x80 [ 771.194744][T16408] charge_memcg+0x8a/0x230 [ 771.194789][T16408] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 771.194826][T16408] __read_swap_cache_async+0x397/0x500 [ 771.194868][T16408] ? __pfx___read_swap_cache_async+0x10/0x10 [ 771.194903][T16408] ? finish_task_switch.isra.0+0x202/0xbd0 [ 771.194945][T16408] ? rcu_is_watching+0x12/0xc0 [ 771.194985][T16408] ? finish_task_switch.isra.0+0x207/0xbd0 [ 771.195024][T16408] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.195070][T16408] swap_cluster_readahead+0x528/0x770 [ 771.195108][T16408] ? __schedule+0x114c/0x6150 [ 771.195149][T16408] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 771.195188][T16408] ? __lock_acquire+0x436/0x2890 [ 771.195229][T16408] ? get_vma_policy+0x242/0x3c0 [ 771.195272][T16408] swapin_readahead+0x160/0x1220 [ 771.195320][T16408] ? __pfx_swapin_readahead+0x10/0x10 [ 771.195357][T16408] ? find_held_lock+0x2b/0x80 [ 771.195396][T16408] ? swap_cache_get_folio+0x267/0x8e0 [ 771.195430][T16408] ? swap_cache_get_folio+0x267/0x8e0 [ 771.195460][T16408] ? swap_cache_get_folio+0x267/0x8e0 [ 771.195496][T16408] ? swap_cache_get_folio+0x267/0x8e0 [ 771.195528][T16408] ? swap_cache_get_folio+0x293/0x8e0 [ 771.195564][T16408] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 771.195595][T16408] ? __pfx_get_swap_device+0x10/0x10 [ 771.195635][T16408] ? rcu_read_unlock+0x2d/0xb0 [ 771.195679][T16408] ? do_swap_page+0x962/0x64a0 [ 771.195705][T16408] do_swap_page+0x962/0x64a0 [ 771.195739][T16408] ? __lock_acquire+0x436/0x2890 [ 771.195773][T16408] ? __pfx_do_swap_page+0x10/0x10 [ 771.195805][T16408] ? __pfx_default_wake_function+0x10/0x10 [ 771.195854][T16408] ? rcu_is_watching+0x12/0xc0 [ 771.195893][T16408] ? ___pte_offset_map+0x175/0x380 [ 771.195940][T16408] __handle_mm_fault+0x19cb/0x2bb0 [ 771.195979][T16408] ? reacquire_held_locks+0xcd/0x1f0 [ 771.196007][T16408] ? __pfx___handle_mm_fault+0x10/0x10 [ 771.196041][T16408] ? lock_vma_under_rcu+0x176/0x580 [ 771.196082][T16408] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 771.196131][T16408] handle_mm_fault+0x3fe/0xad0 [ 771.196167][T16408] do_user_addr_fault+0x60c/0x1370 [ 771.196205][T16408] ? rcu_is_watching+0x12/0xc0 [ 771.196247][T16408] exc_page_fault+0x64/0xc0 [ 771.196289][T16408] asm_exc_page_fault+0x26/0x30 [ 771.196317][T16408] RIP: 0033:0x7f0ab074678d [ 771.196340][T16408] Code: 56 41 55 41 54 55 53 48 81 ec 08 01 00 00 48 89 7c 24 10 48 89 34 24 48 89 54 24 18 48 89 4c 24 20 64 48 8b 04 25 28 00 00 00 <48> 89 84 24 f8 00 00 00 31 c0 80 3d ba 4d 27 00 00 0f 85 3c 05 00 [ 771.196368][T16408] RSP: 002b:00007ffc717ea200 EFLAGS: 00010206 [ 771.196390][T16408] RAX: dcb8f35a64f13d00 RBX: 0000000000000064 RCX: 00007f0ab09e6090 [ 771.196408][T16408] RDX: 00007f0ab065f100 RSI: 00007ffc717ea350 RDI: 00007ffc717ea348 [ 771.196428][T16408] RBP: 00007f0ab09e6090 R08: 000000000000000a R09: 00007f0ab09e5fb0 [ 771.196445][T16408] R10: 00007f0ab09e5fa0 R11: 0000000000000246 R12: 00007ffc717ea350 [ 771.196463][T16408] R13: 00007f0ab065f100 R14: 00007ffc717ea348 R15: 0000000000000003 [ 771.196499][T16408] [ 771.196519][T16408] memory: usage 3072kB, limit 3072kB, failcnt 90303 [ 771.616338][T16408] memory+swap: usage 9932kB, limit 9007199254740988kB, failcnt 0 [ 771.629309][T16408] kmem: usage 2880kB, limit 9007199254740988kB, failcnt 0 [ 771.646606][T16408] Memory cgroup stats for /syz0: [ 771.647018][T16408] cache 0 [ 771.660973][T16408] rss 0 [ 771.668808][T16408] rss_huge 0 [ 771.679962][T16408] shmem 0 [ 771.686752][T16408] mapped_file 0 [ 771.695004][T16408] dirty 0 [ 771.701628][T16408] writeback 0 [ 771.714079][T16408] workingset_refault_anon 11762 [ 771.724800][T16408] workingset_refault_file 20395 [ 771.735523][T16408] swap 7024640 [ 771.743582][T16408] swapcached 110592 [ 771.753902][T16408] pgpgin 708797 [ 771.761114][T16408] pgpgout 709281 [ 771.772530][T16408] pgfault 533799 [ 771.797836][T16408] pgmajfault 6489 [ 771.801555][T16408] inactive_anon 0 [ 771.817628][T16408] active_anon 110592 [ 771.821611][T16408] inactive_file 0 [ 771.844965][T16408] active_file 0 [ 771.874615][T16408] unevictable 0 [ 771.878615][T16408] hierarchical_memory_limit 3145728 [ 771.883875][T16408] hierarchical_memsw_limit 9223372036854771712 [ 771.920599][T16408] total_cache 0 [ 771.964890][T16408] total_rss 0 [ 771.968300][T16408] total_rss_huge 0 [ 771.972151][T16408] total_shmem 0 [ 771.984071][T16408] total_mapped_file 0 [ 771.988266][T16408] total_dirty 0 [ 771.991813][T16408] total_writeback 0 [ 772.013908][T16408] total_workingset_refault_anon 11762 [ 772.019367][T16408] total_workingset_refault_file 20395 [ 772.078259][T16408] total_swap 7024640 [ 772.087554][T16408] total_swapcached 110592 [ 772.091935][T16408] total_pgpgin 708797 [ 772.122788][T16408] total_pgpgout 709281 [ 772.127059][T16408] total_pgfault 533799 [ 772.131186][T16408] total_pgmajfault 6489 [ 772.136277][T16408] total_inactive_anon 0 [ 772.140496][T16408] total_active_anon 110592 [ 772.145894][T16408] total_inactive_file 0 [ 772.150240][T16408] total_active_file 0 [ 772.155039][T16408] total_unevictable 0 [ 772.159080][T16408] anon_cost 70 [ 772.162669][T16408] file_cost 0 [ 772.166203][T16408] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2266,pid=16408,uid=0 [ 772.181444][T16408] Memory cgroup out of memory: Killed process 16408 (syz.0.2266) total-vm:104140kB, anon-rss:1244kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 772.214275][T16420] zswap: compressor not available [ 773.327097][T16445] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2277'. [ 773.587935][T16432] zswap: compressor not available [ 773.620292][T16454] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2276'. [ 773.882270][T16465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2279'. [ 773.908716][T16459] zswap: compressor not available [ 774.510487][T16475] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2281'. [ 775.084844][T16486] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 775.224561][T16491] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2288'. [ 775.895056][T16507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2291'. [ 776.616390][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 776.944658][T16524] Invalid ELF header magic: != ELF [ 777.281038][T16530] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2293'. [ 777.983413][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2298'. [ 778.388084][T16542] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2299'. [ 779.521897][T16527] syz.0.2294 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 779.559642][T16527] CPU: 0 UID: 0 PID: 16527 Comm: syz.0.2294 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.559698][T16527] Tainted: [L]=SOFTLOCKUP [ 779.559711][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.559732][T16527] Call Trace: [ 779.559743][T16527] [ 779.559756][T16527] dump_stack_lvl+0x16c/0x1f0 [ 779.559816][T16527] dump_header+0x101/0x960 [ 779.559855][T16527] oom_kill_process+0x176/0x910 [ 779.559899][T16527] out_of_memory+0x350/0x1700 [ 779.559938][T16527] ? __lock_acquire+0x436/0x2890 [ 779.559976][T16527] ? __pfx_out_of_memory+0x10/0x10 [ 779.560027][T16527] mem_cgroup_out_of_memory+0x118/0x130 [ 779.560077][T16527] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 779.560127][T16527] ? do_raw_spin_unlock+0x172/0x230 [ 779.560173][T16527] try_charge_memcg+0x695/0xd30 [ 779.560233][T16527] ? __pfx_try_charge_memcg+0x10/0x10 [ 779.560285][T16527] ? peak_open+0x31/0x50 [ 779.560323][T16527] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 779.560372][T16527] obj_cgroup_charge_account+0x336/0x670 [ 779.560435][T16527] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 779.560510][T16527] __kmalloc_cache_noprof+0x5cc/0x800 [ 779.560553][T16527] ? ipv6_add_dev+0x1c9/0x15f0 [ 779.560603][T16527] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 779.560660][T16527] ? ipv6_add_dev+0x1c9/0x15f0 [ 779.560708][T16527] ipv6_add_dev+0x1c9/0x15f0 [ 779.560761][T16527] addrconf_notify+0x53e/0x19f0 [ 779.560797][T16527] ? ip6mr_device_event+0x1bc/0x230 [ 779.560850][T16527] notifier_call_chain+0xbc/0x3e0 [ 779.560900][T16527] ? __pfx_addrconf_notify+0x10/0x10 [ 779.560943][T16527] call_netdevice_notifiers_info+0xbe/0x110 [ 779.561004][T16527] register_netdevice+0x1792/0x21d0 [ 779.561064][T16527] ? __pfx_register_netdevice+0x10/0x10 [ 779.561133][T16527] ? __pfx_loopback_net_init+0x10/0x10 [ 779.561176][T16527] register_netdev+0x34/0x50 [ 779.561225][T16527] loopback_net_init+0x7a/0x170 [ 779.561266][T16527] ? __pfx_loopback_net_init+0x10/0x10 [ 779.561303][T16527] ops_init+0x1e2/0x5f0 [ 779.561354][T16527] setup_net+0x11d/0x3a0 [ 779.561402][T16527] ? __pfx_setup_net+0x10/0x10 [ 779.561446][T16527] ? lockdep_init_map_type+0x5c/0x270 [ 779.561482][T16527] ? mutex_init_lockep+0x110/0x150 [ 779.561525][T16527] copy_net_ns+0x351/0x7c0 [ 779.561581][T16527] create_new_namespaces+0x3ea/0xab0 [ 779.561639][T16527] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 779.561692][T16527] ksys_unshare+0x45b/0xa40 [ 779.561748][T16527] ? __pfx_ksys_unshare+0x10/0x10 [ 779.561802][T16527] ? xfd_validate_state+0x61/0x180 [ 779.561848][T16527] __x64_sys_unshare+0x31/0x40 [ 779.561880][T16527] do_syscall_64+0xcd/0xf80 [ 779.561936][T16527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.561973][T16527] RIP: 0033:0x7f0ab078f7c9 [ 779.562001][T16527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.562037][T16527] RSP: 002b:00007f0ab15fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 779.562080][T16527] RAX: ffffffffffffffda RBX: 00007f0ab09e6090 RCX: 00007f0ab078f7c9 [ 779.562103][T16527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 779.562125][T16527] RBP: 00007f0ab0813f91 R08: 0000000000000000 R09: 0000000000000000 [ 779.562147][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.562168][T16527] R13: 00007f0ab09e6128 R14: 00007f0ab09e6090 R15: 00007ffc717ea258 [ 779.562215][T16527] [ 779.927781][T16527] memory: usage 3072kB, limit 3072kB, failcnt 95100 [ 779.934966][T16527] memory+swap: usage 9924kB, limit 9007199254740988kB, failcnt 0 [ 779.942839][T16527] kmem: usage 2936kB, limit 9007199254740988kB, failcnt 0 [ 779.949993][T16527] Memory cgroup stats for /syz0: [ 779.950223][T16527] cache 4096 [ 779.958577][T16527] rss 0 [ 779.961385][T16527] rss_huge 0 [ 779.964697][T16527] shmem 0 [ 779.967684][T16527] mapped_file 0 [ 779.971188][T16527] dirty 0 [ 779.974209][T16527] writeback 4096 [ 779.977820][T16527] workingset_refault_anon 13221 [ 779.982724][T16527] workingset_refault_file 20395 [ 779.987605][T16527] swap 7016448 [ 779.990988][T16527] swapcached 135168 [ 779.994869][T16527] pgpgin 713697 [ 779.998770][T16527] pgpgout 714174 [ 780.002391][T16527] pgfault 539675 [ 780.005976][T16527] pgmajfault 7008 [ 780.009615][T16527] inactive_anon 0 [ 780.013379][T16527] active_anon 8192 [ 780.017111][T16527] inactive_file 4096 [ 780.021171][T16527] active_file 0 [ 780.024711][T16527] unevictable 0 [ 780.028207][T16527] hierarchical_memory_limit 3145728 [ 780.033465][T16527] hierarchical_memsw_limit 9223372036854771712 [ 780.040771][T16527] total_cache 4096 [ 780.044896][T16527] total_rss 0 [ 780.048214][T16527] total_rss_huge 0 [ 780.051973][T16527] total_shmem 0 [ 780.055521][T16527] total_mapped_file 0 [ 780.059529][T16527] total_dirty 0 [ 780.063227][T16527] total_writeback 4096 [ 780.067322][T16527] total_workingset_refault_anon 13221 [ 780.072849][T16527] total_workingset_refault_file 20395 [ 780.078290][T16527] total_swap 7016448 [ 780.082247][T16527] total_swapcached 135168 [ 780.086585][T16527] total_pgpgin 713697 [ 780.090574][T16527] total_pgpgout 714174 [ 780.094704][T16527] total_pgfault 539675 [ 780.099235][T16527] total_pgmajfault 7008 [ 780.103537][T16527] total_inactive_anon 0 [ 780.107706][T16527] total_active_anon 8192 [ 780.120738][T16527] total_inactive_file 4096 [ 780.130687][T16527] total_active_file 0 [ 780.134884][T16527] total_unevictable 0 [ 780.138905][T16527] anon_cost 54 [ 780.142348][T16527] file_cost 0 [ 780.145725][T16527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2294,pid=16517,uid=0 [ 780.161010][T16527] Memory cgroup out of memory: Killed process 16517 (syz.0.2294) total-vm:106396kB, anon-rss:1176kB, file-rss:22972kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 780.459183][T16560] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 780.478977][T16560] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 780.530259][T16560] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 780.582032][ T30] audit: type=1800 audit(4294967393.298:17): pid=16560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2304" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 781.460559][T16572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2306'. [ 782.087453][T16578] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 782.117796][T16578] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 782.127468][T16578] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 782.137183][T16578] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 782.158370][T16578] page dumped because: unmovable page [ 782.186983][T16578] page_owner info is not present (never set?) [ 782.675533][T16587] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2308'. [ 783.071092][T16577] syz.0.2315 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 783.124053][T16577] CPU: 1 UID: 0 PID: 16577 Comm: syz.0.2315 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.124105][T16577] Tainted: [L]=SOFTLOCKUP [ 783.124117][T16577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.124136][T16577] Call Trace: [ 783.124148][T16577] [ 783.124161][T16577] dump_stack_lvl+0x16c/0x1f0 [ 783.124216][T16577] dump_header+0x101/0x960 [ 783.124256][T16577] oom_kill_process+0x176/0x910 [ 783.124298][T16577] out_of_memory+0x350/0x1700 [ 783.124335][T16577] ? __lock_acquire+0x436/0x2890 [ 783.124372][T16577] ? __pfx_out_of_memory+0x10/0x10 [ 783.124421][T16577] mem_cgroup_out_of_memory+0x118/0x130 [ 783.124463][T16577] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 783.124512][T16577] ? do_raw_spin_unlock+0x172/0x230 [ 783.124560][T16577] try_charge_memcg+0x695/0xd30 [ 783.124623][T16577] ? __pfx_try_charge_memcg+0x10/0x10 [ 783.124684][T16577] ? find_held_lock+0x2b/0x80 [ 783.124735][T16577] charge_memcg+0x8a/0x230 [ 783.124788][T16577] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 783.124830][T16577] __read_swap_cache_async+0x397/0x500 [ 783.124879][T16577] ? __pfx___read_swap_cache_async+0x10/0x10 [ 783.124931][T16577] ? mlock_drain_local+0x22d/0x4e0 [ 783.124985][T16577] swap_cluster_readahead+0x528/0x770 [ 783.125038][T16577] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 783.125084][T16577] ? __lock_acquire+0x436/0x2890 [ 783.125135][T16577] ? get_vma_policy+0x242/0x3c0 [ 783.125171][T16577] swapin_readahead+0x160/0x1220 [ 783.125229][T16577] ? __pfx_swapin_readahead+0x10/0x10 [ 783.125272][T16577] ? find_held_lock+0x2b/0x80 [ 783.125313][T16577] ? swap_cache_get_folio+0x267/0x8e0 [ 783.125350][T16577] ? swap_cache_get_folio+0x267/0x8e0 [ 783.125387][T16577] ? swap_cache_get_folio+0x267/0x8e0 [ 783.125430][T16577] ? swap_cache_get_folio+0x267/0x8e0 [ 783.125469][T16577] ? swap_cache_get_folio+0x293/0x8e0 [ 783.125511][T16577] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 783.125549][T16577] ? __pfx_get_swap_device+0x10/0x10 [ 783.125599][T16577] ? rcu_read_unlock+0x2d/0xb0 [ 783.125644][T16577] ? do_swap_page+0x962/0x64a0 [ 783.125675][T16577] do_swap_page+0x962/0x64a0 [ 783.125716][T16577] ? __lock_acquire+0x436/0x2890 [ 783.125759][T16577] ? __pfx_do_swap_page+0x10/0x10 [ 783.125799][T16577] ? __pfx_default_wake_function+0x10/0x10 [ 783.125859][T16577] ? rcu_is_watching+0x12/0xc0 [ 783.125914][T16577] ? ___pte_offset_map+0x175/0x380 [ 783.125969][T16577] __handle_mm_fault+0x19cb/0x2bb0 [ 783.126015][T16577] ? reacquire_held_locks+0xcd/0x1f0 [ 783.126046][T16577] ? __pfx___handle_mm_fault+0x10/0x10 [ 783.126086][T16577] ? lock_vma_under_rcu+0x176/0x580 [ 783.126136][T16577] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 783.126194][T16577] handle_mm_fault+0x3fe/0xad0 [ 783.126237][T16577] do_user_addr_fault+0x60c/0x1370 [ 783.126284][T16577] ? rcu_is_watching+0x12/0xc0 [ 783.126334][T16577] exc_page_fault+0x64/0xc0 [ 783.126385][T16577] asm_exc_page_fault+0x26/0x30 [ 783.126417][T16577] RIP: 0033:0x7f0ab06526ba [ 783.126443][T16577] Code: 2b 21 1c 00 48 8d 3d 2c 21 1c 00 31 c0 e8 2e c7 ff ff 66 0f 1f 44 00 00 41 83 fb 09 75 06 41 80 f9 01 77 d6 4c 89 d2 48 89 07 <5b> 48 d1 ea 41 83 e2 01 48 89 d1 48 f7 d1 48 0f 45 d1 48 89 d0 c3 [ 783.126475][T16577] RSP: 002b:00007ffc717ea360 EFLAGS: 00010293 [ 783.126500][T16577] RAX: 0000001b3032033c RBX: 0000001b30320000 RCX: 0000000000000007 [ 783.126522][T16577] RDX: 00000000000020dc RSI: 0000000000002080 RDI: 00007f0ab09e60a0 [ 783.126542][T16577] RBP: 00007f0ab09e60a0 R08: 0000001b30720000 R09: 0000000000000041 [ 783.126563][T16577] R10: 00000000000020dc R11: 0000000000000001 R12: 00007f0ab09e6090 [ 783.126582][T16577] R13: 0000200000000000 R14: 00007ffc717ea378 R15: 00007ffc717ea4d0 [ 783.126626][T16577] [ 783.580665][T16577] memory: usage 3072kB, limit 3072kB, failcnt 95683 [ 783.587901][T16577] memory+swap: usage 9920kB, limit 9007199254740988kB, failcnt 0 [ 783.653564][T16577] kmem: usage 2936kB, limit 9007199254740988kB, failcnt 0 [ 783.660752][T16577] Memory cgroup stats for /syz0: [ 783.660964][T16577] cache 4096 [ 783.729076][T16577] rss 0 [ 783.752863][T16577] rss_huge 0 [ 783.756141][T16577] shmem 0 [ 783.759116][T16577] mapped_file 0 [ 783.762604][T16577] dirty 0 [ 783.812666][T16577] writeback 0 [ 783.816021][T16577] workingset_refault_anon 13518 [ 783.821016][T16577] workingset_refault_file 20395 [ 783.842394][T16577] swap 7012352 [ 783.845834][T16577] swapcached 135168 [ 783.849683][T16577] pgpgin 714041 [ 783.872225][T16577] pgpgout 714518 [ 783.875842][T16577] pgfault 540258 [ 783.879421][T16577] pgmajfault 7188 [ 783.892162][T16577] inactive_anon 135168 [ 783.896311][T16577] active_anon 0 [ 783.899809][T16577] inactive_file 4096 [ 783.903865][T16577] active_file 0 [ 783.907370][T16577] unevictable 0 [ 783.910868][T16577] hierarchical_memory_limit 3145728 [ 783.935037][T16577] hierarchical_memsw_limit 9223372036854771712 [ 783.941271][T16577] total_cache 4096 [ 783.963398][T16577] total_rss 0 [ 783.966791][T16577] total_rss_huge 0 [ 783.981690][T16577] total_shmem 0 [ 783.985216][T16577] total_mapped_file 0 [ 783.989231][T16577] total_dirty 0 [ 784.006406][T16577] total_writeback 0 [ 784.010290][T16577] total_workingset_refault_anon 13518 [ 784.026619][T16577] total_workingset_refault_file 20395 [ 784.036723][T16577] total_swap 7012352 [ 784.040696][T16577] total_swapcached 135168 [ 784.057029][T16577] total_pgpgin 714041 [ 784.061079][T16577] total_pgpgout 714518 [ 784.068186][T16594] netlink: 'syz.1.2311': attribute type 1 has an invalid length. [ 784.076853][T16577] total_pgfault 540258 [ 784.091092][T16577] total_pgmajfault 7188 [ 784.095502][T16577] total_inactive_anon 135168 [ 784.100449][T16577] total_active_anon 0 [ 784.120940][T16577] total_inactive_file 4096 [ 784.125481][T16577] total_active_file 0 [ 784.139745][T16577] total_unevictable 0 [ 784.143919][T16577] anon_cost 59 [ 784.147332][T16577] file_cost 0 [ 784.170664][T16577] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2315,pid=16577,uid=0 [ 784.200604][T16577] Memory cgroup out of memory: Killed process 16577 (syz.0.2315) total-vm:167832kB, anon-rss:1140kB, file-rss:22640kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 784.569228][T16593] netlink: 'syz.1.2311': attribute type 1 has an invalid length. [ 784.843950][T16603] zswap: compressor not available [ 785.177165][T16610] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2314'. [ 785.205477][T16612] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2314'. [ 786.148465][T16633] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2321'. [ 786.293113][T16620] syz.0.2317 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 786.357007][T16620] CPU: 0 UID: 0 PID: 16620 Comm: syz.0.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.357059][T16620] Tainted: [L]=SOFTLOCKUP [ 786.357071][T16620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.357090][T16620] Call Trace: [ 786.357111][T16620] [ 786.357124][T16620] dump_stack_lvl+0x16c/0x1f0 [ 786.357181][T16620] dump_header+0x101/0x960 [ 786.357223][T16620] oom_kill_process+0x176/0x910 [ 786.357263][T16620] out_of_memory+0x350/0x1700 [ 786.357302][T16620] ? __lock_acquire+0x436/0x2890 [ 786.357345][T16620] ? __pfx_out_of_memory+0x10/0x10 [ 786.357395][T16620] mem_cgroup_out_of_memory+0x118/0x130 [ 786.357437][T16620] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 786.357487][T16620] ? do_raw_spin_unlock+0x172/0x230 [ 786.357533][T16620] try_charge_memcg+0x695/0xd30 [ 786.357593][T16620] ? __pfx_try_charge_memcg+0x10/0x10 [ 786.357655][T16620] ? find_held_lock+0x2b/0x80 [ 786.357714][T16620] charge_memcg+0x8a/0x230 [ 786.357767][T16620] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 786.357808][T16620] __read_swap_cache_async+0x397/0x500 [ 786.357856][T16620] ? __pfx___read_swap_cache_async+0x10/0x10 [ 786.357898][T16620] ? finish_task_switch.isra.0+0x202/0xbd0 [ 786.357949][T16620] ? rcu_is_watching+0x12/0xc0 [ 786.357995][T16620] ? finish_task_switch.isra.0+0x207/0xbd0 [ 786.358046][T16620] ? lockdep_hardirqs_on+0x7c/0x110 [ 786.358101][T16620] swap_cluster_readahead+0x432/0x770 [ 786.358153][T16620] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 786.358201][T16620] ? __lock_acquire+0x436/0x2890 [ 786.358252][T16620] ? get_vma_policy+0x242/0x3c0 [ 786.358288][T16620] swapin_readahead+0x160/0x1220 [ 786.358346][T16620] ? __pfx_swapin_readahead+0x10/0x10 [ 786.358389][T16620] ? find_held_lock+0x2b/0x80 [ 786.358431][T16620] ? swap_cache_get_folio+0x267/0x8e0 [ 786.358469][T16620] ? swap_cache_get_folio+0x267/0x8e0 [ 786.358505][T16620] ? swap_cache_get_folio+0x267/0x8e0 [ 786.358549][T16620] ? swap_cache_get_folio+0x267/0x8e0 [ 786.358589][T16620] ? swap_cache_get_folio+0x293/0x8e0 [ 786.358631][T16620] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 786.358678][T16620] ? __pfx_get_swap_device+0x10/0x10 [ 786.358727][T16620] ? rcu_read_unlock+0x2d/0xb0 [ 786.358772][T16620] ? do_swap_page+0x962/0x64a0 [ 786.358804][T16620] do_swap_page+0x962/0x64a0 [ 786.358845][T16620] ? __lock_acquire+0x436/0x2890 [ 786.358888][T16620] ? __pfx_do_swap_page+0x10/0x10 [ 786.358928][T16620] ? __pfx_default_wake_function+0x10/0x10 [ 786.358988][T16620] ? rcu_is_watching+0x12/0xc0 [ 786.359033][T16620] ? ___pte_offset_map+0x175/0x380 [ 786.359087][T16620] __handle_mm_fault+0x19cb/0x2bb0 [ 786.359130][T16620] ? reacquire_held_locks+0xcd/0x1f0 [ 786.359164][T16620] ? __pfx___handle_mm_fault+0x10/0x10 [ 786.359205][T16620] ? lock_vma_under_rcu+0x176/0x580 [ 786.359255][T16620] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 786.359315][T16620] handle_mm_fault+0x3fe/0xad0 [ 786.359365][T16620] do_user_addr_fault+0x60c/0x1370 [ 786.359411][T16620] ? rcu_is_watching+0x12/0xc0 [ 786.359463][T16620] exc_page_fault+0x64/0xc0 [ 786.359512][T16620] asm_exc_page_fault+0x26/0x30 [ 786.359543][T16620] RIP: 0033:0x7f0ab065ecb2 [ 786.359569][T16620] Code: f2 fe ff 41 8b 76 2c 85 f6 7e 41 31 db 4c 8d 25 e9 66 1b 00 48 8d 2d ee 52 1b 00 0f 1f 44 00 00 48 85 db 74 0a 4c 89 e7 31 c0 b9 f2 fe ff 4c 8b 34 24 48 89 ef 31 c0 49 8b 74 de 30 48 83 c3 [ 786.359602][T16620] RSP: 002b:00007f0ab15da060 EFLAGS: 00010246 [ 786.359628][T16620] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 00007f0ab0804c78 [ 786.359648][T16620] RDX: 00000000000a8032 RSI: 0000000000000000 RDI: 00007f0ab0815385 [ 786.359675][T16620] RBP: 00007f0ab0813f91 R08: 00007ffc717ea257 R09: 00007f0ab161d000 [ 786.359697][T16620] R10: 0000000000000001 R11: 0000000000024d40 R12: 00007f0ab0815385 [ 786.359718][T16620] R13: 00007f0ab09e6218 R14: 00007f0ab09e6180 R15: 00007ffc717ea258 [ 786.359763][T16620] [ 786.863475][T16620] memory: usage 3072kB, limit 3072kB, failcnt 96185 [ 786.887080][T16620] memory+swap: usage 9832kB, limit 9007199254740988kB, failcnt 0 [ 786.928020][T16620] kmem: usage 2924kB, limit 9007199254740988kB, failcnt 0 [ 786.971997][T16620] Memory cgroup stats for /syz0: [ 786.972209][T16620] cache 0 [ 787.011507][T16620] rss 4096 [ 787.014989][T16620] rss_huge 0 [ 787.025878][T16620] shmem 0 [ 787.031306][T16620] mapped_file 0 [ 787.034834][T16620] dirty 0 [ 787.055829][T16620] writeback 8192 [ 787.059449][T16620] workingset_refault_anon 13702 [ 787.095098][T16620] workingset_refault_file 20395 [ 787.110984][T16620] swap 6922240 [ 787.114426][T16620] swapcached 143360 [ 787.154090][T16620] pgpgin 714248 [ 787.185071][T16620] pgpgout 714724 [ 787.188684][T16620] pgfault 540511 [ 787.192267][T16620] pgmajfault 7336 [ 787.226881][T16620] inactive_anon 122880 [ 787.231602][T16620] active_anon 0 [ 787.254701][T16620] inactive_file 0 [ 787.269577][T16620] active_file 0 [ 787.273103][T16620] unevictable 0 [ 787.287993][T16620] hierarchical_memory_limit 3145728 [ 787.303486][T16620] hierarchical_memsw_limit 9223372036854771712 [ 787.325679][T16620] total_cache 0 [ 787.329213][T16620] total_rss 4096 [ 787.353720][T16620] total_rss_huge 0 [ 787.364069][T16620] total_shmem 0 [ 787.367648][T16620] total_mapped_file 0 [ 787.374434][T16620] total_dirty 0 [ 787.378209][T16620] total_writeback 8192 [ 787.394140][T16620] total_workingset_refault_anon 13702 [ 787.423886][T16620] total_workingset_refault_file 20395 [ 787.429512][T16620] total_swap 6922240 [ 787.465323][T16620] total_swapcached 143360 [ 787.470960][T16620] total_pgpgin 714248 [ 787.475049][T16620] total_pgpgout 714724 [ 787.479155][T16620] total_pgfault 540511 [ 787.483988][T16620] total_pgmajfault 7336 [ 787.488195][T16620] total_inactive_anon 122880 [ 787.492816][T16620] total_active_anon 0 [ 787.533772][T16620] total_inactive_file 0 [ 787.538647][T16620] total_active_file 0 [ 787.542720][T16620] total_unevictable 0 [ 787.574566][T16620] anon_cost 75 [ 787.582989][T16620] file_cost 0 [ 787.586374][T16620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2317,pid=16615,uid=0 [ 787.622840][T16620] Memory cgroup out of memory: Killed process 16615 (syz.0.2317) total-vm:98456kB, anon-rss:1268kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 789.041798][T16653] syz.0.2325 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 789.054427][T16653] CPU: 1 UID: 0 PID: 16653 Comm: syz.0.2325 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.054490][T16653] Tainted: [L]=SOFTLOCKUP [ 789.054503][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 789.054525][T16653] Call Trace: [ 789.054538][T16653] [ 789.054552][T16653] dump_stack_lvl+0x16c/0x1f0 [ 789.054611][T16653] dump_header+0x101/0x960 [ 789.054654][T16653] oom_kill_process+0x176/0x910 [ 789.054697][T16653] out_of_memory+0x350/0x1700 [ 789.054735][T16653] ? __lock_acquire+0x436/0x2890 [ 789.054774][T16653] ? __pfx_out_of_memory+0x10/0x10 [ 789.054825][T16653] mem_cgroup_out_of_memory+0x118/0x130 [ 789.054868][T16653] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 789.054921][T16653] ? do_raw_spin_unlock+0x172/0x230 [ 789.054970][T16653] try_charge_memcg+0x695/0xd30 [ 789.055032][T16653] ? __pfx_try_charge_memcg+0x10/0x10 [ 789.055087][T16653] ? peak_open+0x31/0x50 [ 789.055125][T16653] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 789.055180][T16653] obj_cgroup_charge_account+0x336/0x670 [ 789.055240][T16653] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 789.055308][T16653] __kmalloc_noprof+0x6c9/0x910 [ 789.055344][T16653] ? __register_sysctl_table+0xb3/0x1900 [ 789.055399][T16653] ? __register_sysctl_table+0xb3/0x1900 [ 789.055455][T16653] __register_sysctl_table+0xb3/0x1900 [ 789.055505][T16653] ? is_module_address+0x5f/0xf0 [ 789.055552][T16653] ? __pfx___register_sysctl_table+0x10/0x10 [ 789.055598][T16653] ? is_module_address+0x69/0xf0 [ 789.055638][T16653] ? register_net_sysctl_sz+0x222/0x450 [ 789.055677][T16653] ? __asan_memcpy+0x3c/0x60 [ 789.055721][T16653] sctp_sysctl_net_register+0x15d/0x200 [ 789.055778][T16653] ? __pfx_sctp_defaults_init+0x10/0x10 [ 789.055830][T16653] sctp_defaults_init+0x6d2/0xd90 [ 789.055881][T16653] ? __pfx_sctp_defaults_init+0x10/0x10 [ 789.055932][T16653] ops_init+0x1e2/0x5f0 [ 789.055984][T16653] setup_net+0x11d/0x3a0 [ 789.056032][T16653] ? __pfx_setup_net+0x10/0x10 [ 789.056076][T16653] ? lockdep_init_map_type+0x5c/0x270 [ 789.056112][T16653] ? mutex_init_lockep+0x110/0x150 [ 789.056154][T16653] copy_net_ns+0x351/0x7c0 [ 789.056210][T16653] create_new_namespaces+0x3ea/0xab0 [ 789.056267][T16653] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 789.056319][T16653] ksys_unshare+0x45b/0xa40 [ 789.056374][T16653] ? __pfx_ksys_unshare+0x10/0x10 [ 789.056431][T16653] ? xfd_validate_state+0x61/0x180 [ 789.056482][T16653] __x64_sys_unshare+0x31/0x40 [ 789.056513][T16653] do_syscall_64+0xcd/0xf80 [ 789.056569][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.056606][T16653] RIP: 0033:0x7f0ab078f7c9 [ 789.056633][T16653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.056667][T16653] RSP: 002b:00007f0ab15fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 789.056700][T16653] RAX: ffffffffffffffda RBX: 00007f0ab09e6090 RCX: 00007f0ab078f7c9 [ 789.056721][T16653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 789.056741][T16653] RBP: 00007f0ab0813f91 R08: 0000000000000000 R09: 0000000000000000 [ 789.056762][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.056781][T16653] R13: 00007f0ab09e6128 R14: 00007f0ab09e6090 R15: 00007ffc717ea258 [ 789.056827][T16653] [ 789.419644][T16653] memory: usage 3072kB, limit 3072kB, failcnt 96556 [ 789.426397][T16653] memory+swap: usage 9892kB, limit 9007199254740988kB, failcnt 0 [ 789.434293][T16653] kmem: usage 2924kB, limit 9007199254740988kB, failcnt 0 [ 789.441638][T16653] Memory cgroup stats for /syz0: [ 789.441966][T16653] cache 0 [ 789.450170][T16653] rss 20480 [ 789.453400][T16653] rss_huge 0 [ 789.456646][T16653] shmem 0 [ 789.459618][T16653] mapped_file 0 [ 789.463207][T16653] dirty 0 [ 789.466220][T16653] writeback 0 [ 789.469547][T16653] workingset_refault_anon 13941 [ 789.475539][T16653] workingset_refault_file 20395 [ 789.480676][T16653] swap 6979584 [ 789.484429][T16653] swapcached 155648 [ 789.488302][T16653] pgpgin 714530 [ 789.491798][T16653] pgpgout 715003 [ 789.500202][T16653] pgfault 541573 [ 789.584945][T16653] pgmajfault 7489 [ 789.593794][T16653] inactive_anon 24576 [ 789.598086][T16653] active_anon 0 [ 789.628008][T16653] inactive_file 0 [ 789.636974][T16653] active_file 0 [ 789.640514][T16653] unevictable 0 [ 789.695627][T16653] hierarchical_memory_limit 3145728 [ 789.742536][T16653] hierarchical_memsw_limit 9223372036854771712 [ 789.778350][T16653] total_cache 0 [ 789.820429][T16653] total_rss 20480 [ 789.831947][T16653] total_rss_huge 0 [ 789.836724][T16653] total_shmem 0 [ 789.847591][T16653] total_mapped_file 0 [ 789.861921][T16653] total_dirty 0 [ 789.883142][T16653] total_writeback 0 [ 789.887093][T16653] total_workingset_refault_anon 13941 [ 789.924370][T16653] total_workingset_refault_file 20395 [ 789.970980][T16653] total_swap 6979584 [ 789.981237][T16653] total_swapcached 155648 [ 789.991516][T16653] total_pgpgin 714530 [ 789.995598][T16653] total_pgpgout 715003 [ 789.999705][T16653] total_pgfault 541573 [ 790.050885][T16653] total_pgmajfault 7489 [ 790.055607][T16653] total_inactive_anon 24576 [ 790.060401][T16653] total_active_anon 0 [ 790.064814][T16653] total_inactive_file 0 [ 790.069494][T16653] total_active_file 0 [ 790.074005][T16653] total_unevictable 0 [ 790.080553][T16653] anon_cost 92 [ 790.085033][T16653] file_cost 0 [ 790.089031][T16653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2325,pid=16639,uid=0 [ 790.107012][T16653] Memory cgroup out of memory: Killed process 16639 (syz.0.2325) total-vm:141480kB, anon-rss:1140kB, file-rss:26984kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 791.162642][T16668] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 791.348167][T16679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2330'. [ 791.442523][T16672] zswap: compressor û not available [ 792.206404][T16702] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 792.615474][T16703] aoe: invalid device specification [ 794.803463][T16768] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 797.218036][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2352'. [ 797.316064][T16814] openvswitch: HfR: Dropping previously announced user features [ 797.365005][T16815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2352'. [ 797.982920][ T5835] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 798.010150][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 798.010217][ T5835] Tainted: [L]=SOFTLOCKUP [ 798.010230][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.010249][ T5835] Call Trace: [ 798.010260][ T5835] [ 798.010273][ T5835] dump_stack_lvl+0x16c/0x1f0 [ 798.010337][ T5835] dump_header+0x101/0x960 [ 798.010378][ T5835] oom_kill_process+0x176/0x910 [ 798.010419][ T5835] out_of_memory+0x350/0x1700 [ 798.010456][ T5835] ? __lock_acquire+0x436/0x2890 [ 798.010494][ T5835] ? __pfx_out_of_memory+0x10/0x10 [ 798.010544][ T5835] mem_cgroup_out_of_memory+0x118/0x130 [ 798.010586][ T5835] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 798.010637][ T5835] ? do_raw_spin_unlock+0x172/0x230 [ 798.010683][ T5835] try_charge_memcg+0x695/0xd30 [ 798.010743][ T5835] ? __pfx_try_charge_memcg+0x10/0x10 [ 798.010810][ T5835] ? find_held_lock+0x2b/0x80 [ 798.010858][ T5835] charge_memcg+0x8a/0x230 [ 798.010903][ T5835] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 798.010937][ T5835] __read_swap_cache_async+0x397/0x500 [ 798.010979][ T5835] ? __pfx___read_swap_cache_async+0x10/0x10 [ 798.011017][ T5835] ? __lock_acquire+0x436/0x2890 [ 798.011052][ T5835] swap_cluster_readahead+0x432/0x770 [ 798.011110][ T5835] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 798.011150][ T5835] ? __lock_acquire+0x436/0x2890 [ 798.011178][ T5835] ? _raw_spin_unlock+0x28/0x50 [ 798.011233][ T5835] ? get_vma_policy+0x242/0x3c0 [ 798.011262][ T5835] swapin_readahead+0x160/0x1220 [ 798.011309][ T5835] ? __pfx_swapin_readahead+0x10/0x10 [ 798.011347][ T5835] ? find_held_lock+0x2b/0x80 [ 798.011387][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 798.011419][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 798.011451][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 798.011488][ T5835] ? swap_cache_get_folio+0x267/0x8e0 [ 798.011522][ T5835] ? swap_cache_get_folio+0x293/0x8e0 [ 798.011558][ T5835] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 798.011590][ T5835] ? __pfx_get_swap_device+0x10/0x10 [ 798.011633][ T5835] ? rcu_read_unlock+0x2d/0xb0 [ 798.011672][ T5835] ? do_swap_page+0x962/0x64a0 [ 798.011698][ T5835] do_swap_page+0x962/0x64a0 [ 798.011733][ T5835] ? __lock_acquire+0x436/0x2890 [ 798.011774][ T5835] ? __pfx_do_swap_page+0x10/0x10 [ 798.011806][ T5835] ? __pfx_default_wake_function+0x10/0x10 [ 798.011856][ T5835] ? rcu_is_watching+0x12/0xc0 [ 798.011898][ T5835] ? ___pte_offset_map+0x175/0x380 [ 798.011944][ T5835] __handle_mm_fault+0x19cb/0x2bb0 [ 798.011981][ T5835] ? reacquire_held_locks+0xcd/0x1f0 [ 798.012010][ T5835] ? __pfx___handle_mm_fault+0x10/0x10 [ 798.012045][ T5835] ? lock_vma_under_rcu+0x176/0x580 [ 798.012086][ T5835] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 798.012138][ T5835] handle_mm_fault+0x3fe/0xad0 [ 798.012176][ T5835] do_user_addr_fault+0x60c/0x1370 [ 798.012214][ T5835] ? rcu_is_watching+0x12/0xc0 [ 798.012258][ T5835] exc_page_fault+0x64/0xc0 [ 798.012302][ T5835] asm_exc_page_fault+0x26/0x30 [ 798.012330][ T5835] RIP: 0033:0x7f0ab07b75f0 [ 798.012352][ T5835] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 798.012398][ T5835] RSP: 002b:00007ffc717ea568 EFLAGS: 00010246 [ 798.012421][ T5835] RAX: 0000000000000000 RBX: 000000000000087d RCX: 00007f0ab07c2085 [ 798.012439][ T5835] RDX: 00007ffc717ea5b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.012457][ T5835] RBP: 00007ffc717ea61c R08: 0000000000000000 R09: 0000000000000000 [ 798.012475][ T5835] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 798.012491][ T5835] R13: 00000000000927c0 R14: 00000000000c32d7 R15: 00007ffc717ea670 [ 798.012528][ T5835] [ 798.012547][ T5835] memory: usage 3072kB, limit 3072kB, failcnt 100448 [ 798.588362][T16828] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 798.629556][ T5835] memory+swap: usage 13960kB, limit 9007199254740988kB, failcnt 0 [ 798.639094][ T5835] kmem: usage 2900kB, limit 9007199254740988kB, failcnt 0 [ 798.660150][ T5835] Memory cgroup stats for /syz0: [ 798.660352][ T5835] cache 0 [ 798.672041][ T5835] rss 20480 [ 798.676227][ T5835] rss_huge 0 [ 798.679535][ T5835] shmem 0 [ 798.682681][ T5835] mapped_file 4096 [ 798.687665][ T5835] dirty 0 [ 798.690660][ T5835] writeback 8192 [ 798.694427][ T5835] workingset_refault_anon 15196 [ 798.699441][ T5835] workingset_refault_file 20395 [ 798.704341][ T5835] swap 11149312 [ 798.708068][ T5835] swapcached 172032 [ 798.715085][ T5835] pgpgin 718098 [ 798.718760][ T5835] pgpgout 718566 [ 798.722353][ T5835] pgfault 546057 [ 798.734918][ T5835] pgmajfault 8474 [ 798.742269][ T5835] inactive_anon 131072 [ 798.747389][ T5835] active_anon 0 [ 798.750993][ T5835] inactive_file 0 [ 798.754831][ T5835] active_file 0 [ 798.763865][ T5835] unevictable 0 [ 798.767766][ T5835] hierarchical_memory_limit 3145728 [ 798.788287][ T5835] hierarchical_memsw_limit 9223372036854771712 [ 798.794517][ T5835] total_cache 0 [ 798.801633][ T5835] total_rss 20480 [ 798.811780][ T5835] total_rss_huge 0 [ 798.815636][ T5835] total_shmem 0 [ 798.819316][ T5835] total_mapped_file 4096 [ 798.823684][ T5835] total_dirty 0 [ 798.829462][ T5835] total_writeback 8192 [ 798.833579][ T5835] total_workingset_refault_anon 15196 [ 798.842827][ T5835] total_workingset_refault_file 20395 [ 798.852973][ T5835] total_swap 11149312 [ 798.857116][ T5835] total_swapcached 172032 [ 798.861501][ T5835] total_pgpgin 718098 [ 798.865755][ T5835] total_pgpgout 718566 [ 798.870066][ T5835] total_pgfault 546057 [ 798.875910][ T5835] total_pgmajfault 8474 [ 798.880135][ T5835] total_inactive_anon 131072 [ 798.885172][ T5835] total_active_anon 0 [ 798.889375][ T5835] total_inactive_file 0 [ 798.920236][ T5835] total_active_file 0 [ 798.924721][ T5835] total_unevictable 0 [ 798.928773][ T5835] anon_cost 59 [ 798.932354][ T5835] file_cost 0 [ 798.947963][ T5835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2346,pid=16779,uid=0 [ 798.965002][ T5835] Memory cgroup out of memory: Killed process 16779 (syz.0.2346) total-vm:106264kB, anon-rss:1140kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 799.039979][T16848] Bluetooth: hci24: unexpected cc 0x0c03 length: 249 > 1 [ 799.051582][T16848] Bluetooth: hci24: unexpected cc 0x1003 length: 249 > 9 [ 799.063597][T16848] Bluetooth: hci24: unexpected cc 0x1001 length: 249 > 9 [ 799.072150][T16848] Bluetooth: hci24: unexpected cc 0x0c23 length: 249 > 4 [ 799.080498][T16848] Bluetooth: hci24: unexpected cc 0x0c38 length: 249 > 2 [ 799.541886][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 799.697128][T16716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.826933][T16716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.876915][T16838] chnl_net:caif_netlink_parms(): no params data found [ 799.955700][T16716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.069873][T15601] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 800.076800][T16105] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 800.085586][T15586] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 800.093788][T16716] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.147883][T16063] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 800.187672][T16865] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2360'. [ 800.251763][T16838] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.262564][T16838] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.271137][T16838] bridge_slave_0: entered allmulticast mode [ 800.279649][T16838] bridge_slave_0: entered promiscuous mode [ 800.323056][T16838] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.334805][T16838] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.342934][T16838] bridge_slave_1: entered allmulticast mode [ 800.353343][T16838] bridge_slave_1: entered promiscuous mode [ 800.449976][T16838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.466230][T16820] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 800.473859][T16824] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 800.483543][T16823] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 800.533395][T16838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.561145][T16716] batadv0: left allmulticast mode [ 800.567888][T16716] batadv0: left promiscuous mode [ 800.573128][T16716] bridge0: port 2(batadv0) entered disabled state [ 800.611564][T16716] bridge_slave_0: left allmulticast mode [ 800.617552][T16716] bridge_slave_0: left promiscuous mode [ 800.623410][T16716] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.631110][T16825] Bluetooth: hci12: Opcode 0x0c03 failed: -110 [ 800.704838][T16829] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 800.801079][T16831] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 800.809516][T16833] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 800.816993][T16832] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 800.868287][T16834] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 800.943755][T16836] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 800.950992][T16841] Bluetooth: hci20: Opcode 0x0c03 failed: -110 [ 800.959754][T16840] Bluetooth: hci19: Opcode 0x0c03 failed: -110 [ 800.967020][T16837] Bluetooth: hci18: Opcode 0x0c03 failed: -110 [ 801.023109][T16842] Bluetooth: hci21: Opcode 0x0c03 failed: -110 [ 801.029997][T16844] Bluetooth: hci22: Opcode 0x0c03 failed: -110 [ 801.041383][T16845] Bluetooth: hci23: Opcode 0x0c03 failed: -110 [ 801.106237][T16845] Bluetooth: hci24: command tx timeout [ 801.654595][T16716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.682519][T16716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.715431][T16716] bond0 (unregistering): Released all slaves [ 801.823192][T16838] team0: Port device team_slave_0 added [ 801.863168][T16838] team0: Port device team_slave_1 added [ 801.935956][T16716] HfR: left promiscuous mode [ 802.024475][T16838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.043220][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.088899][T16838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.100737][T16716] Â: left promiscuous mode [ 802.157546][T16838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.166697][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.252522][T16881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2363'. [ 802.263785][T16838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.291493][T16716] IWR: left promiscuous mode [ 802.442284][T16838] hsr_slave_0: entered promiscuous mode [ 802.448843][T16838] hsr_slave_1: entered promiscuous mode [ 802.780340][T16886] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 802.864503][T16890] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 803.172944][T16845] Bluetooth: hci24: command tx timeout [ 803.920862][T16919] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 804.005706][T16716] hsr_slave_0: left promiscuous mode [ 804.019166][T16926] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2369'. [ 804.043046][T16716] hsr_slave_1: left promiscuous mode [ 804.071120][T16716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.079718][T16716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.103870][T16716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.117116][T16716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.176125][T16716] veth1_macvtap: left promiscuous mode [ 804.182769][T16716] veth0_macvtap: left promiscuous mode [ 805.073934][T16716] team0 (unregistering): Port device team_slave_1 removed [ 805.137492][T16716] team0 (unregistering): Port device team_slave_0 removed [ 805.242592][T16845] Bluetooth: hci24: command tx timeout [ 805.389627][T16939] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2374'. [ 805.773806][T16931] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2372'. [ 805.865428][T16838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.912451][T16838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.980241][T16838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.999935][T16838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 806.040801][T16945] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 806.527057][T16838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.842336][T16940] syz.0.2375 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 806.971019][T16940] CPU: 1 UID: 0 PID: 16940 Comm: syz.0.2375 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.971069][T16940] Tainted: [L]=SOFTLOCKUP [ 806.971081][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.971100][T16940] Call Trace: [ 806.971110][T16940] [ 806.971123][T16940] dump_stack_lvl+0x16c/0x1f0 [ 806.971187][T16940] dump_header+0x101/0x960 [ 806.971225][T16940] oom_kill_process+0x176/0x910 [ 806.971263][T16940] out_of_memory+0x350/0x1700 [ 806.971297][T16940] ? __lock_acquire+0x436/0x2890 [ 806.971331][T16940] ? __pfx_out_of_memory+0x10/0x10 [ 806.971376][T16940] mem_cgroup_out_of_memory+0x118/0x130 [ 806.971413][T16940] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 806.971460][T16940] ? do_raw_spin_unlock+0x172/0x230 [ 806.971501][T16940] try_charge_memcg+0x695/0xd30 [ 806.971557][T16940] ? __pfx_try_charge_memcg+0x10/0x10 [ 806.971613][T16940] ? find_held_lock+0x2b/0x80 [ 806.971661][T16940] charge_memcg+0x8a/0x230 [ 806.971710][T16940] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 806.971769][T16940] __read_swap_cache_async+0x397/0x500 [ 806.971814][T16940] ? __pfx___read_swap_cache_async+0x10/0x10 [ 806.971856][T16940] ? finish_task_switch.isra.0+0x202/0xbd0 [ 806.971902][T16940] ? rcu_is_watching+0x12/0xc0 [ 806.971945][T16940] ? finish_task_switch.isra.0+0x207/0xbd0 [ 806.971994][T16940] swap_cluster_readahead+0x432/0x770 [ 806.972048][T16940] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 806.972095][T16940] ? __lock_acquire+0x436/0x2890 [ 806.972151][T16940] ? get_vma_policy+0x242/0x3c0 [ 806.972185][T16940] swapin_readahead+0x160/0x1220 [ 806.972242][T16940] ? __pfx_swapin_readahead+0x10/0x10 [ 806.972285][T16940] ? find_held_lock+0x2b/0x80 [ 806.972324][T16940] ? swap_cache_get_folio+0x267/0x8e0 [ 806.972360][T16940] ? swap_cache_get_folio+0x267/0x8e0 [ 806.972396][T16940] ? swap_cache_get_folio+0x267/0x8e0 [ 806.972439][T16940] ? swap_cache_get_folio+0x267/0x8e0 [ 806.972477][T16940] ? swap_cache_get_folio+0x293/0x8e0 [ 806.972518][T16940] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 806.972556][T16940] ? __pfx_get_swap_device+0x10/0x10 [ 806.972605][T16940] ? rcu_read_unlock+0x2d/0xb0 [ 806.972650][T16940] ? do_swap_page+0x962/0x64a0 [ 806.972683][T16940] do_swap_page+0x962/0x64a0 [ 806.972724][T16940] ? __lock_acquire+0x436/0x2890 [ 806.972766][T16940] ? __pfx_do_swap_page+0x10/0x10 [ 806.972805][T16940] ? __pfx_default_wake_function+0x10/0x10 [ 806.972865][T16940] ? rcu_is_watching+0x12/0xc0 [ 806.972913][T16940] ? ___pte_offset_map+0x175/0x380 [ 806.972968][T16940] __handle_mm_fault+0x19cb/0x2bb0 [ 806.973011][T16940] ? reacquire_held_locks+0xcd/0x1f0 [ 806.973045][T16940] ? __pfx___handle_mm_fault+0x10/0x10 [ 806.973086][T16940] ? lock_vma_under_rcu+0x176/0x580 [ 806.973142][T16940] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 806.973201][T16940] handle_mm_fault+0x3fe/0xad0 [ 806.973245][T16940] do_user_addr_fault+0x60c/0x1370 [ 806.973290][T16940] ? rcu_is_watching+0x12/0xc0 [ 806.973341][T16940] exc_page_fault+0x64/0xc0 [ 806.973391][T16940] asm_exc_page_fault+0x26/0x30 [ 806.973423][T16940] RIP: 0033:0x7f0ab066eff4 [ 806.973450][T16940] Code: 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca <80> 3d ad 8d 37 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 [ 806.973483][T16940] RSP: 002b:00007ffc717ea290 EFLAGS: 00010282 [ 806.973508][T16940] RAX: ffffffff81ceec0e RBX: 00007f0ab1515720 RCX: 0000000000000025 [ 806.973529][T16940] RDX: ffffffff81ceeca2 RSI: 0000000000000008 RDI: 00007f0ab1515720 [ 806.973550][T16940] RBP: ffffffff81cee34e R08: 00007f0ab09e6308 R09: 00007f0ab09d2000 [ 806.973571][T16940] R10: 00007f0aae5f6008 R11: 000000000000001b R12: 000000000000001b [ 806.973590][T16940] R13: 0000000000000025 R14: ffffffff81ceec0e R15: 0000000000000025 [ 806.973613][T16940] ? is_bpf_text_address+0xe/0x1a0 [ 806.973656][T16940] ? bpf_prog_kallsyms_add+0x23e/0x6a0 [ 806.973704][T16940] ? is_bpf_text_address+0xe/0x1a0 [ 806.973746][T16940] ? is_bpf_text_address+0xa2/0x1a0 [ 806.973797][T16940] [ 807.375993][T16845] Bluetooth: hci24: command tx timeout [ 807.390794][T16940] memory: usage 3072kB, limit 3072kB, failcnt 103337 [ 807.397743][T16940] memory+swap: usage 9936kB, limit 9007199254740988kB, failcnt 0 [ 807.405797][T16940] kmem: usage 2928kB, limit 9007199254740988kB, failcnt 0 [ 807.413186][T16940] Memory cgroup stats for /syz0: [ 807.413392][T16940] cache 0 [ 807.421395][T16940] rss 12288 [ 807.424830][T16940] rss_huge 0 [ 807.428073][T16940] shmem 0 [ 807.431148][T16940] mapped_file 0 [ 807.434641][T16940] dirty 0 [ 807.437733][T16940] writeback 12288 [ 807.441462][T16940] workingset_refault_anon 15497 [ 807.446352][T16940] workingset_refault_file 20406 [ 807.451425][T16940] swap 7028736 [ 807.454851][T16940] swapcached 147456 [ 807.458690][T16940] pgpgin 720707 [ 807.462319][T16940] pgpgout 721182 [ 807.465900][T16940] pgfault 550106 [ 807.469683][T16940] pgmajfault 8657 [ 807.473668][T16940] inactive_anon 0 [ 807.477355][T16940] active_anon 16384 [ 807.510462][T16940] inactive_file 0 [ 807.514177][T16940] active_file 0 [ 807.517672][T16940] unevictable 0 [ 807.526738][T16940] hierarchical_memory_limit 3145728 [ 807.532650][T16940] hierarchical_memsw_limit 9223372036854771712 [ 807.538853][T16940] total_cache 0 [ 807.542850][T16940] total_rss 12288 [ 807.546543][T16940] total_rss_huge 0 [ 807.550849][T16940] total_shmem 0 [ 807.554365][T16940] total_mapped_file 0 [ 807.558384][T16940] total_dirty 0 [ 807.562524][T16940] total_writeback 12288 [ 807.566825][T16940] total_workingset_refault_anon 15497 [ 807.579000][T16940] total_workingset_refault_file 20406 [ 807.584445][T16940] total_swap 7028736 [ 807.588390][T16940] total_swapcached 147456 [ 807.598909][T16940] total_pgpgin 720707 [ 807.603230][T16940] total_pgpgout 721182 [ 807.607315][T16940] total_pgfault 550106 [ 807.633536][T16940] total_pgmajfault 8657 [ 807.660193][T16940] total_inactive_anon 0 [ 807.696858][T16940] total_active_anon 16384 [ 807.701938][T16940] total_inactive_file 0 [ 807.706312][T16940] total_active_file 0 [ 807.717511][T16940] total_unevictable 0 [ 807.726543][T16940] anon_cost 68 [ 807.730599][T16940] file_cost 0 [ 807.733931][T16940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2375,pid=16940,uid=0 [ 807.750803][T16940] Memory cgroup out of memory: Killed process 16940 (syz.0.2375) total-vm:139432kB, anon-rss:1268kB, file-rss:26500kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 808.011031][T16838] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.112273][T15596] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.119597][T15596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.146936][T15596] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.154317][T15596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.600624][T16999] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2383'. [ 808.665903][T16838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.687243][T17003] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2384'. [ 808.786839][T16838] veth0_vlan: entered promiscuous mode [ 808.806917][T16838] veth1_vlan: entered promiscuous mode [ 808.857438][T16838] veth0_macvtap: entered promiscuous mode [ 808.878734][T16838] veth1_macvtap: entered promiscuous mode [ 808.926527][T16838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.961121][T16838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.976781][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 808.989002][T17007] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 808.999381][T16716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.010811][T16716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.015232][T16996] openvswitch: HfR: Dropping previously announced user features [ 809.027709][T16716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.048811][T16716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.150562][T16716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.168774][T16716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.215791][T16708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.238095][T16708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.334811][T16996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2382'. [ 811.803445][T17054] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2395'. [ 812.685238][T17065] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 812.731028][T17074] FAULT_INJECTION: forcing a failure. [ 812.731028][T17074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.744631][T17074] CPU: 1 UID: 0 PID: 17074 Comm: syz.2.2399 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.744685][T17074] Tainted: [L]=SOFTLOCKUP [ 812.744698][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.744718][T17074] Call Trace: [ 812.744731][T17074] [ 812.744747][T17074] dump_stack_lvl+0x16c/0x1f0 [ 812.744806][T17074] should_fail_ex+0x512/0x640 [ 812.744851][T17074] _copy_from_user+0x2e/0xd0 [ 812.744891][T17074] copy_mount_options+0x76/0x190 [ 812.744935][T17074] __x64_sys_mount+0x1ab/0x310 [ 812.744971][T17074] ? __pfx___x64_sys_mount+0x10/0x10 [ 812.745019][T17074] do_syscall_64+0xcd/0xf80 [ 812.745072][T17074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.745107][T17074] RIP: 0033:0x7fcd9898f7c9 [ 812.745136][T17074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.745171][T17074] RSP: 002b:00007fcd96bee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 812.745205][T17074] RAX: ffffffffffffffda RBX: 00007fcd98be5fa0 RCX: 00007fcd9898f7c9 [ 812.745228][T17074] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000080 [ 812.745248][T17074] RBP: 00007fcd98a13f91 R08: 0000200000000240 R09: 0000000000000000 [ 812.745269][T17074] R10: fffffffffffffff9 R11: 0000000000000246 R12: 0000000000000000 [ 812.745290][T17074] R13: 00007fcd98be6038 R14: 00007fcd98be5fa0 R15: 00007ffc5058ac48 [ 812.745333][T17074] [ 813.051865][T16844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 813.063061][T16844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 813.072561][T16844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.081016][T16844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 813.090737][T16844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.455025][T17076] chnl_net:caif_netlink_parms(): no params data found [ 814.396318][T16718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.512651][T16718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.756524][T17089] syz.0.2403 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 814.811486][T17089] CPU: 1 UID: 0 PID: 17089 Comm: syz.0.2403 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.811538][T17089] Tainted: [L]=SOFTLOCKUP [ 814.811559][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.811580][T17089] Call Trace: [ 814.811592][T17089] [ 814.811605][T17089] dump_stack_lvl+0x16c/0x1f0 [ 814.811660][T17089] dump_header+0x101/0x960 [ 814.811702][T17089] oom_kill_process+0x176/0x910 [ 814.811745][T17089] out_of_memory+0x350/0x1700 [ 814.811782][T17089] ? __lock_acquire+0x436/0x2890 [ 814.811818][T17089] ? __pfx_out_of_memory+0x10/0x10 [ 814.811867][T17089] mem_cgroup_out_of_memory+0x118/0x130 [ 814.811907][T17089] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 814.811957][T17089] ? do_raw_spin_unlock+0x172/0x230 [ 814.812002][T17089] try_charge_memcg+0x695/0xd30 [ 814.812067][T17089] ? __pfx_try_charge_memcg+0x10/0x10 [ 814.812135][T17089] ? find_held_lock+0x2b/0x80 [ 814.812187][T17089] charge_memcg+0x8a/0x230 [ 814.812239][T17089] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 814.812280][T17089] __read_swap_cache_async+0x397/0x500 [ 814.812331][T17089] ? __pfx___read_swap_cache_async+0x10/0x10 [ 814.812372][T17089] ? finish_task_switch.isra.0+0x202/0xbd0 [ 814.812421][T17089] ? rcu_is_watching+0x12/0xc0 [ 814.812466][T17089] ? finish_task_switch.isra.0+0x207/0xbd0 [ 814.812513][T17089] ? lockdep_hardirqs_on+0x7c/0x110 [ 814.812582][T17089] swap_cluster_readahead+0x432/0x770 [ 814.812635][T17089] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 814.812682][T17089] ? __lock_acquire+0x436/0x2890 [ 814.812734][T17089] ? get_vma_policy+0x242/0x3c0 [ 814.812792][T17089] swapin_readahead+0x160/0x1220 [ 814.812851][T17089] ? __pfx_swapin_readahead+0x10/0x10 [ 814.812895][T17089] ? find_held_lock+0x2b/0x80 [ 814.812934][T17089] ? swap_cache_get_folio+0x267/0x8e0 [ 814.812973][T17089] ? swap_cache_get_folio+0x267/0x8e0 [ 814.813010][T17089] ? swap_cache_get_folio+0x267/0x8e0 [ 814.813053][T17089] ? swap_cache_get_folio+0x267/0x8e0 [ 814.813093][T17089] ? swap_cache_get_folio+0x293/0x8e0 [ 814.813134][T17089] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 814.813172][T17089] ? __pfx_get_swap_device+0x10/0x10 [ 814.813222][T17089] ? rcu_read_unlock+0x2d/0xb0 [ 814.813267][T17089] ? do_swap_page+0x962/0x64a0 [ 814.813298][T17089] do_swap_page+0x962/0x64a0 [ 814.813340][T17089] ? __lock_acquire+0x436/0x2890 [ 814.813382][T17089] ? __pfx_do_swap_page+0x10/0x10 [ 814.813421][T17089] ? __pfx_default_wake_function+0x10/0x10 [ 814.813479][T17089] ? rcu_is_watching+0x12/0xc0 [ 814.813525][T17089] ? ___pte_offset_map+0x175/0x380 [ 814.813586][T17089] __handle_mm_fault+0x19cb/0x2bb0 [ 814.813630][T17089] ? reacquire_held_locks+0xcd/0x1f0 [ 814.813664][T17089] ? __pfx___handle_mm_fault+0x10/0x10 [ 814.813704][T17089] ? lock_vma_under_rcu+0x176/0x580 [ 814.813753][T17089] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 814.813811][T17089] handle_mm_fault+0x3fe/0xad0 [ 814.813854][T17089] do_user_addr_fault+0x60c/0x1370 [ 814.813900][T17089] ? rcu_is_watching+0x12/0xc0 [ 814.813957][T17089] exc_page_fault+0x64/0xc0 [ 814.814007][T17089] asm_exc_page_fault+0x26/0x30 [ 814.814040][T17089] RIP: 0033:0x7f0ab0664f09 [ 814.814066][T17089] Code: d2 0f 84 d4 0d 00 00 48 63 fd 48 89 fa 48 c1 e2 04 48 29 fa 48 c1 e2 04 48 01 f2 80 7a 20 00 0f 85 b6 0d 00 00 48 8b 74 24 10 <80> 3d d5 07 eb 00 00 4c 89 2d 79 10 38 00 c7 42 0c 00 00 00 00 48 [ 814.814098][T17089] RSP: 002b:00007ffc717ea3c0 EFLAGS: 00010246 [ 814.814123][T17089] RAX: 00000000000001e0 RBX: 00007f0ab09e6188 RCX: 00007f0ab0746ca7 [ 814.814144][T17089] RDX: 00007f0ab09e6180 RSI: 0000001b30320192 RDI: 0000000000000002 [ 814.814164][T17089] RBP: 0000000000000002 R08: 00007f0ab09e5fa0 R09: 00007ffc717ea257 [ 814.814185][T17089] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f0ab09e618c [ 814.814205][T17089] R13: 00007f0ab09e6180 R14: 0000000000001c26 R15: 0000000000000003 [ 814.814249][T17089] [ 815.219496][T16844] Bluetooth: hci0: command tx timeout [ 815.325243][T16718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.369784][T17089] memory: usage 3072kB, limit 3072kB, failcnt 104371 [ 815.377536][T17089] memory+swap: usage 10004kB, limit 9007199254740988kB, failcnt 0 [ 815.391112][T17089] kmem: usage 2928kB, limit 9007199254740988kB, failcnt 0 [ 815.405360][T17089] Memory cgroup stats for /syz0: [ 815.405562][T17089] cache 0 [ 815.416586][T17076] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.433692][T17089] rss 8192 [ 815.436796][T17089] rss_huge 0 [ 815.452826][T17076] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.473588][T17089] shmem 0 [ 815.484318][T17089] mapped_file 0 [ 815.491909][T17076] bridge_slave_0: entered allmulticast mode [ 815.509814][T17076] bridge_slave_0: entered promiscuous mode [ 815.519730][T17089] dirty 0 [ 815.520027][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.522731][T17089] writeback 4096 [ 815.529075][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.558104][T17112] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2407'. [ 815.567553][T17089] workingset_refault_anon 16007 [ 815.572464][T17089] workingset_refault_file 20409 [ 815.577846][T17089] swap 7098368 [ 815.581277][T17089] swapcached 147456 [ 815.585209][T17089] pgpgin 721574 [ 815.589370][T17089] pgpgout 722049 [ 815.592965][T17089] pgfault 552126 [ 815.596622][T17089] pgmajfault 9056 [ 815.600785][T17089] inactive_anon 0 [ 815.604480][T17089] active_anon 16384 [ 815.608491][T17089] inactive_file 0 [ 815.612256][T17089] active_file 0 [ 815.615850][T17089] unevictable 0 [ 815.620953][T17089] hierarchical_memory_limit 3145728 [ 815.626337][T17089] hierarchical_memsw_limit 9223372036854771712 [ 815.633172][T17089] total_cache 0 [ 815.636786][T17089] total_rss 8192 [ 815.640573][T17089] total_rss_huge 0 [ 815.644417][T17089] total_shmem 0 [ 815.648143][T17089] total_mapped_file 0 [ 815.652361][T17089] total_dirty 0 [ 815.655944][T17089] total_writeback 4096 [ 815.660209][T17089] total_workingset_refault_anon 16007 [ 815.665620][T17089] total_workingset_refault_file 20409 [ 815.676852][T17089] total_swap 7098368 [ 815.680811][T17089] total_swapcached 147456 [ 815.687153][T16718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.691407][T17089] total_pgpgin 721574 [ 815.710040][T17089] total_pgpgout 722049 [ 815.716363][T17089] total_pgfault 552126 [ 815.724548][T17089] total_pgmajfault 9056 [ 815.725332][T17076] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.728914][T17089] total_inactive_anon 0 [ 815.728931][T17089] total_active_anon 16384 [ 815.728946][T17089] total_inactive_file 0 [ 815.728961][T17089] total_active_file 0 [ 815.728974][T17089] total_unevictable 0 [ 815.728989][T17089] anon_cost 60 [ 815.729003][T17089] file_cost 0 [ 815.729017][T17089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 815.768263][T17076] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.783856][T17076] bridge_slave_1: entered allmulticast mode [ 815.792940][T17076] bridge_slave_1: entered promiscuous mode [ 815.800647][T17089] /,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2403,pid=17089,uid=0 [ 815.827414][T17089] Memory cgroup out of memory: Killed process 17089 (syz.0.2403) total-vm:167964kB, anon-rss:1140kB, file-rss:22624kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 815.901550][T17076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.944832][T17076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.035767][T17076] team0: Port device team_slave_0 added [ 816.064655][T17076] team0: Port device team_slave_1 added [ 816.170843][T17076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.187743][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.216539][T17076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.238213][T16718] batadv0: left allmulticast mode [ 816.243446][T16718] batadv0: left promiscuous mode [ 816.252877][T16718] bridge0: port 3(batadv0) entered disabled state [ 816.288284][T16718] bridge_slave_1: left allmulticast mode [ 816.297224][T16718] bridge_slave_1: left promiscuous mode [ 816.309085][T16718] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.340193][T16718] bridge_slave_0: left allmulticast mode [ 816.357963][T16718] bridge_slave_0: left promiscuous mode [ 816.368285][T16718] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.441562][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 817.253522][T16718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.263429][T16844] Bluetooth: hci0: command tx timeout [ 817.279701][T16718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.292171][T16718] bond0 (unregistering): Released all slaves [ 817.310674][T17076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.319061][T17076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.360298][T17076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.446369][T16718] HfR: left promiscuous mode [ 817.510627][T16718] Â: left promiscuous mode [ 817.660659][T16718] tipc: Left network mode [ 817.671880][T17076] hsr_slave_0: entered promiscuous mode [ 817.678943][T17076] hsr_slave_1: entered promiscuous mode [ 817.686024][T17076] debugfs: 'hsr0' already exists in 'hsr' [ 817.692092][T17076] Cannot create hsr debugfs directory [ 817.899766][ T32] oom_reaper: reaped process 17089 (syz.0.2403), now anon-rss:0kB, file-rss:21504kB, shmem-rss:0kB [ 818.190076][T17130] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 819.332208][T16844] Bluetooth: hci0: command tx timeout [ 819.460086][T16718] hsr_slave_0: left promiscuous mode [ 819.466471][T16718] hsr_slave_1: left promiscuous mode [ 819.481306][T16718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.489948][T16718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.507113][T16718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.514688][T16718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.579411][T16718] veth1_macvtap: left promiscuous mode [ 819.585099][T16718] veth0_macvtap: left promiscuous mode [ 820.365971][T16718] team0 (unregistering): Port device team_slave_1 removed [ 820.440374][T16718] team0 (unregistering): Port device team_slave_0 removed [ 821.398330][T16844] Bluetooth: hci0: command tx timeout [ 821.595604][T17162] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2416'. [ 821.973120][T17076] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 821.999376][T17076] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 822.049317][T17076] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 822.086517][T17076] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 822.367801][T17076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.398699][T17076] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.421542][T16718] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.428924][T16718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.458392][T16718] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.465741][T16718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.385155][T17076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.474614][T17076] veth0_vlan: entered promiscuous mode [ 823.491666][T17076] veth1_vlan: entered promiscuous mode [ 823.638704][T17076] veth0_macvtap: entered promiscuous mode [ 823.697637][T17076] veth1_macvtap: entered promiscuous mode [ 823.834093][T17076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.855635][T17076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.883356][T16714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.936873][T16714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.951963][T16714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.999627][T17217] binder: BINDER_SET_CONTEXT_MGR already set [ 824.017861][T16714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.039528][T17217] binder: 17216:17217 ioctl 4018620d 9 returned -16 [ 824.410661][T16709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.436151][T16709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.541373][T16709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.568175][T16709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.949534][T17224] zswap: compressor not available [ 826.523970][T17254] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(255.0.5), cmd(5) [ 828.518790][T17288] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 829.013288][T16845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 829.029540][T16845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 829.040920][T16845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 829.051325][T16845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 829.061794][T16845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 829.820958][T17301] chnl_net:caif_netlink_parms(): no params data found [ 830.001235][T17322] binder: BINDER_SET_CONTEXT_MGR already set [ 830.020023][T17331] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 830.057276][T17322] binder: 17321:17322 ioctl 4018620d 9 returned -16 [ 830.279727][T17301] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.320949][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.349644][T17301] bridge_slave_0: entered allmulticast mode [ 830.379458][T17301] bridge_slave_0: entered promiscuous mode [ 830.402889][T17301] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.420303][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.435404][T17301] bridge_slave_1: entered allmulticast mode [ 830.452586][T17301] bridge_slave_1: entered promiscuous mode [ 830.535552][T17301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.565588][T17301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.667552][T17301] team0: Port device team_slave_0 added [ 830.677709][T17301] team0: Port device team_slave_1 added [ 830.796759][T17301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.814124][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.887769][T17301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.962137][T17301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.980245][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.099257][T17301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.110261][T16845] Bluetooth: hci2: command tx timeout [ 831.552426][T17301] hsr_slave_0: entered promiscuous mode [ 831.597385][T17301] hsr_slave_1: entered promiscuous mode [ 831.652664][T17301] debugfs: 'hsr0' already exists in 'hsr' [ 831.658750][T17301] Cannot create hsr debugfs directory [ 832.204747][T17359] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 832.741345][T17301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 832.912919][T17371] FAULT_INJECTION: forcing a failure. [ 832.912919][T17371] name failslab, interval 1, probability 0, space 0, times 0 [ 832.926077][T17371] CPU: 0 UID: 0 PID: 17371 Comm: syz.1.2448 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.926127][T17371] Tainted: [L]=SOFTLOCKUP [ 832.926139][T17371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.926158][T17371] Call Trace: [ 832.926170][T17371] [ 832.926183][T17371] dump_stack_lvl+0x16c/0x1f0 [ 832.926236][T17371] should_fail_ex+0x512/0x640 [ 832.926273][T17371] ? fs_reclaim_acquire+0xae/0x150 [ 832.926327][T17371] should_failslab+0xc2/0x120 [ 832.926377][T17371] __kmalloc_noprof+0xeb/0x910 [ 832.926413][T17371] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.926469][T17371] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.926514][T17371] tomoyo_realpath_from_path+0xc2/0x6e0 [ 832.926564][T17371] ? tomoyo_profile+0x47/0x60 [ 832.926618][T17371] tomoyo_path_number_perm+0x245/0x580 [ 832.926656][T17371] ? tomoyo_path_number_perm+0x237/0x580 [ 832.926699][T17371] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 832.926741][T17371] ? find_held_lock+0x2b/0x80 [ 832.926825][T17371] ? find_held_lock+0x2b/0x80 [ 832.926867][T17371] ? hook_file_ioctl_common+0x144/0x410 [ 832.926915][T17371] ? __fget_files+0x20e/0x3c0 [ 832.926969][T17371] security_file_ioctl+0x9b/0x240 [ 832.927012][T17371] __x64_sys_ioctl+0xb7/0x210 [ 832.927055][T17371] do_syscall_64+0xcd/0xf80 [ 832.927113][T17371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.927146][T17371] RIP: 0033:0x7fbc6578f7c9 [ 832.927172][T17371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.927205][T17371] RSP: 002b:00007fbc665bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.927235][T17371] RAX: ffffffffffffffda RBX: 00007fbc659e5fa0 RCX: 00007fbc6578f7c9 [ 832.927256][T17371] RDX: 0000000000000000 RSI: 000000000000227d RDI: 0000000000000007 [ 832.927275][T17371] RBP: 00007fbc665bb090 R08: 0000000000000000 R09: 0000000000000000 [ 832.927294][T17371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.927313][T17371] R13: 00007fbc659e6038 R14: 00007fbc659e5fa0 R15: 00007ffcd46bbaa8 [ 832.927357][T17371] [ 832.930740][T17372] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 833.132367][T17374] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2448'. [ 833.136477][T17371] ERROR: Out of memory at tomoyo_realpath_from_path. [ 833.176039][T16845] Bluetooth: hci2: command tx timeout [ 833.256680][T17301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 833.283163][T17301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 833.392713][T17301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 833.771787][T17301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.855670][T17301] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.906453][T16709] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.913821][T16709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.958753][T16709] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.966022][T16709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.428796][T17405] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2455'. [ 834.686610][T17301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.115455][T17301] veth0_vlan: entered promiscuous mode [ 835.139775][T17301] veth1_vlan: entered promiscuous mode [ 835.201928][T17301] veth0_macvtap: entered promiscuous mode [ 835.250120][T17301] veth1_macvtap: entered promiscuous mode [ 835.255765][T16845] Bluetooth: hci2: command tx timeout [ 835.350603][T17301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.390106][T17301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.450128][T16714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.468825][T16714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.503990][T16714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.538484][T16714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.821614][T17435] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 835.833308][T17436] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2459'. [ 836.028399][T16709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.053013][T16709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.096267][T16709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.132935][T16709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.491708][T17445] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 836.676648][T17450] FAULT_INJECTION: forcing a failure. [ 836.676648][T17450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.727500][T17450] CPU: 1 UID: 0 PID: 17450 Comm: syz.4.2433 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.727551][T17450] Tainted: [L]=SOFTLOCKUP [ 836.727564][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 836.727583][T17450] Call Trace: [ 836.727595][T17450] [ 836.727608][T17450] dump_stack_lvl+0x16c/0x1f0 [ 836.727662][T17450] should_fail_ex+0x512/0x640 [ 836.727706][T17450] _copy_from_user+0x2e/0xd0 [ 836.727752][T17450] core_sys_select+0x35b/0xc20 [ 836.727809][T17450] ? __pfx_core_sys_select+0x10/0x10 [ 836.727864][T17450] ? proc_fail_nth_write+0x9f/0x220 [ 836.727928][T17450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 836.727989][T17450] kern_select+0x15d/0x1e0 [ 836.728036][T17450] ? __pfx_kern_select+0x10/0x10 [ 836.728086][T17450] ? __pfx_ksys_write+0x10/0x10 [ 836.728141][T17450] __x64_sys_select+0xbd/0x160 [ 836.728183][T17450] ? do_syscall_64+0x91/0xf80 [ 836.728231][T17450] ? lockdep_hardirqs_on+0x7c/0x110 [ 836.728287][T17450] do_syscall_64+0xcd/0xf80 [ 836.728338][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.728371][T17450] RIP: 0033:0x7fac8ad8f7c9 [ 836.728397][T17450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.728429][T17450] RSP: 002b:00007fac8bc6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 836.728460][T17450] RAX: ffffffffffffffda RBX: 00007fac8afe6180 RCX: 00007fac8ad8f7c9 [ 836.728480][T17450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 836.728498][T17450] RBP: 00007fac8bc6f090 R08: 0000000000000000 R09: 0000000000000000 [ 836.728517][T17450] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 836.728535][T17450] R13: 00007fac8afe6218 R14: 00007fac8afe6180 R15: 00007ffc557582e8 [ 836.728576][T17450] [ 837.293486][T17458] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(255.0.5), cmd(5) [ 837.315298][T16845] Bluetooth: hci2: command tx timeout [ 837.946951][T17472] FAULT_INJECTION: forcing a failure. [ 837.946951][T17472] name failslab, interval 1, probability 0, space 0, times 0 [ 837.980925][T17472] CPU: 0 UID: 0 PID: 17472 Comm: syz.1.2467 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.980977][T17472] Tainted: [L]=SOFTLOCKUP [ 837.980989][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.981009][T17472] Call Trace: [ 837.981022][T17472] [ 837.981035][T17472] dump_stack_lvl+0x16c/0x1f0 [ 837.981091][T17472] should_fail_ex+0x512/0x640 [ 837.981128][T17472] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 837.981184][T17472] should_failslab+0xc2/0x120 [ 837.981237][T17472] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 837.981285][T17472] ? argv_split+0x35/0x440 [ 837.981333][T17472] ? kstrndup+0x6d/0x160 [ 837.981369][T17472] kstrndup+0x6d/0x160 [ 837.981407][T17472] ? __pfx___trace_uprobe_create+0x10/0x10 [ 837.981457][T17472] argv_split+0x35/0x440 [ 837.981501][T17472] ? __pfx___trace_uprobe_create+0x10/0x10 [ 837.981551][T17472] trace_probe_create+0x7d/0x100 [ 837.981605][T17472] ? __pfx_trace_probe_create+0x10/0x10 [ 837.981662][T17472] create_dyn_event+0xee/0x1d0 [ 837.981699][T17472] trace_parse_run_command+0x1a9/0x400 [ 837.981748][T17472] ? __pfx_create_dyn_event+0x10/0x10 [ 837.981792][T17472] ? __pfx_dyn_event_write+0x10/0x10 [ 837.981826][T17472] vfs_write+0x2a0/0x11d0 [ 837.981877][T17472] ? __pfx___mutex_lock+0x10/0x10 [ 837.981939][T17472] ? __pfx_vfs_write+0x10/0x10 [ 837.981999][T17472] ? __fget_files+0x20e/0x3c0 [ 837.982057][T17472] ksys_write+0x12a/0x250 [ 837.982103][T17472] ? __pfx_ksys_write+0x10/0x10 [ 837.982163][T17472] do_syscall_64+0xcd/0xf80 [ 837.982216][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.982249][T17472] RIP: 0033:0x7fbc6578f7c9 [ 837.982275][T17472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.982309][T17472] RSP: 002b:00007fbc665bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 837.982340][T17472] RAX: ffffffffffffffda RBX: 00007fbc659e5fa0 RCX: 00007fbc6578f7c9 [ 837.982362][T17472] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000025 [ 837.982382][T17472] RBP: 00007fbc65813f91 R08: 0000000000000000 R09: 0000000000000000 [ 837.982400][T17472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.982419][T17472] R13: 00007fbc659e6038 R14: 00007fbc659e5fa0 R15: 00007ffcd46bbaa8 [ 837.982464][T17472] [ 839.296493][T17482] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2470'. [ 840.055063][T17502] FAULT_INJECTION: forcing a failure. [ 840.055063][T17502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 840.093460][T17502] CPU: 1 UID: 0 PID: 17502 Comm: syz.2.2474 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.093516][T17502] Tainted: [L]=SOFTLOCKUP [ 840.093536][T17502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 840.093558][T17502] Call Trace: [ 840.093570][T17502] [ 840.093583][T17502] dump_stack_lvl+0x16c/0x1f0 [ 840.093642][T17502] should_fail_ex+0x512/0x640 [ 840.093689][T17502] should_fail_alloc_page+0xe7/0x130 [ 840.093748][T17502] prepare_alloc_pages+0x401/0x670 [ 840.093803][T17502] ? rcu_is_watching+0x12/0xc0 [ 840.093857][T17502] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 840.093906][T17502] ? stack_trace_save+0x8e/0xc0 [ 840.093962][T17502] ? __pfx_stack_trace_save+0x10/0x10 [ 840.094017][T17502] ? stack_depot_save_flags+0x29/0x9b0 [ 840.094057][T17502] ? find_held_lock+0x2b/0x80 [ 840.094106][T17502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 840.094166][T17502] ? soundcore_open+0x40c/0x580 [ 840.094215][T17502] ? chrdev_open+0x234/0x6a0 [ 840.094267][T17502] ? do_dentry_open+0x748/0x1590 [ 840.094316][T17502] ? vfs_open+0x82/0x3f0 [ 840.094354][T17502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.094401][T17502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 840.094460][T17502] ? policy_nodemask+0xea/0x4e0 [ 840.094519][T17502] alloc_pages_mpol+0x1fb/0x550 [ 840.094578][T17502] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 840.094641][T17502] alloc_pages_noprof+0x131/0x390 [ 840.094694][T17502] alloc_pages_exact_noprof+0x37/0xe0 [ 840.094727][T17502] ? __asan_memset+0x23/0x50 [ 840.094769][T17502] snd_pcm_attach_substream+0x4bb/0xd60 [ 840.094826][T17502] snd_pcm_open_substream+0x8d/0x1820 [ 840.094871][T17502] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 840.094927][T17502] snd_pcm_oss_open+0x735/0x1400 [ 840.094999][T17502] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 840.095056][T17502] ? __lock_acquire+0x436/0x2890 [ 840.095089][T17502] ? __pfx_default_wake_function+0x10/0x10 [ 840.095140][T17502] ? __lock_acquire+0x436/0x2890 [ 840.095179][T17502] ? do_raw_spin_lock+0x12c/0x2b0 [ 840.095221][T17502] ? soundcore_open+0x35a/0x580 [ 840.095271][T17502] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 840.095327][T17502] soundcore_open+0x40c/0x580 [ 840.095376][T17502] ? __pfx_soundcore_open+0x10/0x10 [ 840.095425][T17502] chrdev_open+0x234/0x6a0 [ 840.095474][T17502] ? __pfx_apparmor_file_open+0x10/0x10 [ 840.095510][T17502] ? __pfx_chrdev_open+0x10/0x10 [ 840.095574][T17502] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 840.095636][T17502] do_dentry_open+0x748/0x1590 [ 840.095683][T17502] ? __pfx_chrdev_open+0x10/0x10 [ 840.095746][T17502] vfs_open+0x82/0x3f0 [ 840.095787][T17502] path_openat+0x2078/0x3140 [ 840.095853][T17502] ? __pfx_path_openat+0x10/0x10 [ 840.095918][T17502] do_filp_open+0x20b/0x470 [ 840.095970][T17502] ? __pfx_do_filp_open+0x10/0x10 [ 840.096054][T17502] ? alloc_fd+0x471/0x7d0 [ 840.096118][T17502] do_sys_openat2+0x121/0x290 [ 840.096157][T17502] ? __pfx_do_sys_openat2+0x10/0x10 [ 840.096213][T17502] __x64_sys_openat+0x174/0x210 [ 840.096254][T17502] ? __pfx___x64_sys_openat+0x10/0x10 [ 840.096311][T17502] do_syscall_64+0xcd/0xf80 [ 840.096366][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.096402][T17502] RIP: 0033:0x7fcd9898f7c9 [ 840.096429][T17502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.096464][T17502] RSP: 002b:00007fcd96bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 840.096497][T17502] RAX: ffffffffffffffda RBX: 00007fcd98be6090 RCX: 00007fcd9898f7c9 [ 840.096520][T17502] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 840.096550][T17502] RBP: 00007fcd98a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 840.096571][T17502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.096591][T17502] R13: 00007fcd98be6128 R14: 00007fcd98be6090 R15: 00007ffc5058ac48 [ 840.096637][T17502] [ 840.569745][T17502] FAULT_INJECTION: forcing a failure. [ 840.569745][T17502] name failslab, interval 1, probability 0, space 0, times 0 [ 840.582596][T17502] CPU: 1 UID: 0 PID: 17502 Comm: syz.2.2474 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.582648][T17502] Tainted: [L]=SOFTLOCKUP [ 840.582661][T17502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 840.582682][T17502] Call Trace: [ 840.582693][T17502] [ 840.582707][T17502] dump_stack_lvl+0x16c/0x1f0 [ 840.582770][T17502] should_fail_ex+0x512/0x640 [ 840.582808][T17502] ? __kmalloc_cache_noprof+0x5f/0x800 [ 840.582852][T17502] should_failslab+0xc2/0x120 [ 840.582907][T17502] __kmalloc_cache_noprof+0x80/0x800 [ 840.582944][T17502] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 840.582999][T17502] ? dummy_hrtimer_create+0x45/0x170 [ 840.583043][T17502] ? dummy_hrtimer_create+0x45/0x170 [ 840.583080][T17502] dummy_hrtimer_create+0x45/0x170 [ 840.583116][T17502] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 840.583152][T17502] dummy_pcm_open+0xd4/0x5b0 [ 840.583211][T17502] snd_pcm_open_substream+0xa60/0x1820 [ 840.583258][T17502] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 840.583314][T17502] snd_pcm_open+0x29e/0x730 [ 840.583360][T17502] ? __pfx_snd_pcm_open+0x10/0x10 [ 840.583407][T17502] ? __pfx_default_wake_function+0x10/0x10 [ 840.583466][T17502] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 840.583511][T17502] snd_pcm_capture_open+0x89/0xe0 [ 840.583555][T17502] snd_open+0x22d/0x4c0 [ 840.583607][T17502] ? __pfx_snd_open+0x10/0x10 [ 840.583660][T17502] chrdev_open+0x234/0x6a0 [ 840.583712][T17502] ? __pfx_apparmor_file_open+0x10/0x10 [ 840.583754][T17502] ? __pfx_chrdev_open+0x10/0x10 [ 840.583811][T17502] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 840.583877][T17502] do_dentry_open+0x748/0x1590 [ 840.583928][T17502] ? __pfx_chrdev_open+0x10/0x10 [ 840.583992][T17502] vfs_open+0x82/0x3f0 [ 840.584034][T17502] path_openat+0x2078/0x3140 [ 840.584099][T17502] ? __pfx_path_openat+0x10/0x10 [ 840.584167][T17502] do_filp_open+0x20b/0x470 [ 840.584221][T17502] ? __pfx_do_filp_open+0x10/0x10 [ 840.584303][T17502] ? alloc_fd+0x471/0x7d0 [ 840.584364][T17502] do_sys_openat2+0x121/0x290 [ 840.584403][T17502] ? __pfx_do_sys_openat2+0x10/0x10 [ 840.584458][T17502] __x64_sys_openat+0x174/0x210 [ 840.584499][T17502] ? __pfx___x64_sys_openat+0x10/0x10 [ 840.584557][T17502] do_syscall_64+0xcd/0xf80 [ 840.584612][T17502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.584648][T17502] RIP: 0033:0x7fcd9898f7c9 [ 840.584675][T17502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.584709][T17502] RSP: 002b:00007fcd96bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 840.584747][T17502] RAX: ffffffffffffffda RBX: 00007fcd98be6090 RCX: 00007fcd9898f7c9 [ 840.584769][T17502] RDX: 0000000000040002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 840.584790][T17502] RBP: 00007fcd98a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 840.584811][T17502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.584830][T17502] R13: 00007fcd98be6128 R14: 00007fcd98be6090 R15: 00007ffc5058ac48 [ 840.584874][T17502] [ 841.057774][T17501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 841.063964][T17501] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 841.082050][T17509] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2477'. [ 841.113308][T17501] Bluetooth: hci24: Opcode 0x0c1a failed: -4 [ 841.122743][T17501] Bluetooth: hci24: Opcode 0x0406 failed: -4 [ 841.158907][T17501] Bluetooth: hci24: Opcode 0x0406 failed: -4 [ 841.243448][T17501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 841.259272][T17501] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 841.305444][T17501] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 841.334911][T17501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 841.348480][T17501] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 841.374429][T17501] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 843.124358][T16842] Bluetooth: hci4: command 0x041b tx timeout [ 843.131889][T16845] Bluetooth: hci1: command 0x0406 tx timeout [ 843.142398][T16844] Bluetooth: hci24: command 0x0c1a tx timeout [ 843.284620][T16844] Bluetooth: hci0: command 0x0c1a tx timeout [ 843.372982][T16844] Bluetooth: hci2: command 0x0c1a tx timeout [ 844.074883][T17551] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2484'. [ 845.193387][T16844] Bluetooth: hci24: command 0x0c1a tx timeout [ 845.353005][T16844] Bluetooth: hci0: command 0x0c1a tx timeout [ 845.437502][T16844] Bluetooth: hci2: command 0x0c1a tx timeout [ 845.831290][T17581] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2491'. [ 847.262739][T16844] Bluetooth: hci24: command 0x0c1a tx timeout [ 847.421764][T16844] Bluetooth: hci0: command 0x0c1a tx timeout [ 847.501347][T16844] Bluetooth: hci2: command 0x0c1a tx timeout [ 848.727065][T17621] netlink: 'syz.1.2501': attribute type 29 has an invalid length. [ 848.765822][T17621] netlink: 'syz.1.2501': attribute type 30 has an invalid length. [ 848.773994][T17621] netlink: 'syz.1.2501': attribute type 31 has an invalid length. [ 848.804882][T17621] netlink: 'syz.1.2501': attribute type 32 has an invalid length. [ 848.833465][T17621] netlink: 'syz.1.2501': attribute type 33 has an invalid length. [ 848.875588][T17621] netlink: 'syz.1.2501': attribute type 35 has an invalid length. [ 848.903852][T17621] netlink: 'syz.1.2501': attribute type 37 has an invalid length. [ 848.922164][T17621] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2501'. [ 848.984897][T17624] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2503'. [ 849.187211][T17626] FAULT_INJECTION: forcing a failure. [ 849.187211][T17626] name failslab, interval 1, probability 0, space 0, times 0 [ 849.200089][T17626] CPU: 1 UID: 0 PID: 17626 Comm: syz.1.2504 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.200146][T17626] Tainted: [L]=SOFTLOCKUP [ 849.200158][T17626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.200184][T17626] Call Trace: [ 849.200196][T17626] [ 849.200208][T17626] dump_stack_lvl+0x16c/0x1f0 [ 849.200262][T17626] should_fail_ex+0x512/0x640 [ 849.200299][T17626] ? kmem_cache_alloc_noprof+0x62/0x770 [ 849.200345][T17626] should_failslab+0xc2/0x120 [ 849.200396][T17626] kmem_cache_alloc_noprof+0x83/0x770 [ 849.200437][T17626] ? ptlock_alloc+0x1f/0x70 [ 849.200479][T17626] ? ptlock_alloc+0x1f/0x70 [ 849.200511][T17626] ptlock_alloc+0x1f/0x70 [ 849.200545][T17626] pte_alloc_one+0x84/0x3d0 [ 849.200592][T17626] __do_fault+0x320/0x490 [ 849.200637][T17626] do_fault+0x302/0x1ad0 [ 849.200685][T17626] ? __pfx_filemap_map_pages+0x10/0x10 [ 849.200731][T17626] ? __pmd_alloc+0x6aa/0x9c0 [ 849.200788][T17626] __handle_mm_fault+0x1919/0x2bb0 [ 849.200837][T17626] ? __pfx___handle_mm_fault+0x10/0x10 [ 849.200903][T17626] ? find_vma+0xbf/0x140 [ 849.200950][T17626] ? __pfx_find_vma+0x10/0x10 [ 849.201002][T17626] handle_mm_fault+0x3fe/0xad0 [ 849.201045][T17626] do_user_addr_fault+0x7a6/0x1370 [ 849.201091][T17626] ? rcu_is_watching+0x12/0xc0 [ 849.201144][T17626] exc_page_fault+0x64/0xc0 [ 849.201201][T17626] asm_exc_page_fault+0x26/0x30 [ 849.201234][T17626] RIP: 0010:__put_user_4+0xd/0x20 [ 849.201279][T17626] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 c0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 849.201312][T17626] RSP: 0018:ffffc900043ffd40 EFLAGS: 00050246 [ 849.201340][T17626] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 849.201359][T17626] RDX: ffff888035648000 RSI: ffffffff8621235d RDI: ffffffff8bf2b580 [ 849.201380][T17626] RBP: ffff888035b72a80 R08: 00000000ffffffff R09: 00000000ffffffff [ 849.201400][T17626] R10: 0000000000000001 R11: ffff888035648b30 R12: ffff88807ae44160 [ 849.201420][T17626] R13: ffff88807ae44160 R14: 000000000000227d R15: ffff888142762c00 [ 849.201454][T17626] ? sg_ioctl+0x5ed/0x2800 [ 849.201493][T17626] sg_ioctl+0x5f9/0x2800 [ 849.201538][T17626] ? __pfx_sg_ioctl+0x10/0x10 [ 849.201573][T17626] ? find_held_lock+0x2b/0x80 [ 849.201614][T17626] ? hook_file_ioctl_common+0x144/0x410 [ 849.201664][T17626] ? __fget_files+0x20e/0x3c0 [ 849.201717][T17626] ? __pfx_sg_ioctl+0x10/0x10 [ 849.201754][T17626] __x64_sys_ioctl+0x18e/0x210 [ 849.201798][T17626] do_syscall_64+0xcd/0xf80 [ 849.201851][T17626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.201886][T17626] RIP: 0033:0x7fbc6578f7c9 [ 849.201911][T17626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.201945][T17626] RSP: 002b:00007fbc665bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.201980][T17626] RAX: ffffffffffffffda RBX: 00007fbc659e5fa0 RCX: 00007fbc6578f7c9 [ 849.202001][T17626] RDX: 0000000000000000 RSI: 000000000000227d RDI: 0000000000000007 [ 849.202020][T17626] RBP: 00007fbc665bb090 R08: 0000000000000000 R09: 0000000000000000 [ 849.202040][T17626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.202059][T17626] R13: 00007fbc659e6038 R14: 00007fbc659e5fa0 R15: 00007ffcd46bbaa8 [ 849.202107][T17626] [ 849.743872][T17628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2505'. [ 849.793184][T17626] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2504'. [ 849.960843][T17629] hub 8-0:1.0: USB hub found [ 849.969258][T17629] hub 8-0:1.0: 1 port detected [ 850.448183][T17635] netlink: 86 bytes leftover after parsing attributes in process `syz.1.2507'. [ 850.541435][T17637] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xeffefd85 [ 850.980591][T17645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 851.151303][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2509'. [ 851.168946][T17639] bond0: entered allmulticast mode [ 851.175339][T17639] bond_slave_0: entered allmulticast mode [ 851.181338][T17639] bond_slave_1: entered allmulticast mode [ 852.642205][T17683] FAULT_INJECTION: forcing a failure. [ 852.642205][T17683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 852.665821][T17683] CPU: 1 UID: 0 PID: 17683 Comm: syz.1.2518 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.665868][T17683] Tainted: [L]=SOFTLOCKUP [ 852.665878][T17683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.665896][T17683] Call Trace: [ 852.665906][T17683] [ 852.665925][T17683] dump_stack_lvl+0x16c/0x1f0 [ 852.665973][T17683] should_fail_ex+0x512/0x640 [ 852.666011][T17683] should_fail_alloc_page+0xe7/0x130 [ 852.666058][T17683] prepare_alloc_pages+0x401/0x670 [ 852.666110][T17683] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 852.666152][T17683] ? __lock_acquire+0x436/0x2890 [ 852.666184][T17683] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 852.666232][T17683] ? is_bpf_text_address+0x8a/0x1a0 [ 852.666271][T17683] ? bpf_ksym_find+0x124/0x1c0 [ 852.666302][T17683] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 852.666347][T17683] ? is_bpf_text_address+0x94/0x1a0 [ 852.666382][T17683] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 852.666431][T17683] ? policy_nodemask+0xea/0x4e0 [ 852.666480][T17683] alloc_pages_mpol+0x1fb/0x550 [ 852.666526][T17683] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 852.666581][T17683] folio_alloc_mpol_noprof+0x36/0x2f0 [ 852.666614][T17683] shmem_alloc_folio+0x135/0x160 [ 852.666669][T17683] shmem_alloc_and_add_folio+0x494/0xc20 [ 852.666716][T17683] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 852.666756][T17683] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 852.666804][T17683] shmem_get_folio_gfp+0x67f/0x1610 [ 852.666851][T17683] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 852.666900][T17683] shmem_fault+0x1fe/0xa00 [ 852.666950][T17683] ? __pfx_shmem_fault+0x10/0x10 [ 852.666984][T17683] ? trace_kmem_cache_alloc+0x28/0xb0 [ 852.667036][T17683] ? ptlock_alloc+0x1f/0x70 [ 852.667072][T17683] ? lockdep_init_map_type+0x5c/0x270 [ 852.667106][T17683] ? __raw_spin_lock_init+0x3a/0x110 [ 852.667153][T17683] __do_fault+0x10d/0x490 [ 852.667195][T17683] do_fault+0x302/0x1ad0 [ 852.667241][T17683] ? __pfx_filemap_map_pages+0x10/0x10 [ 852.667276][T17683] ? __pmd_alloc+0x6aa/0x9c0 [ 852.667325][T17683] __handle_mm_fault+0x1919/0x2bb0 [ 852.667369][T17683] ? __pfx___handle_mm_fault+0x10/0x10 [ 852.667430][T17683] ? find_vma+0xbf/0x140 [ 852.667475][T17683] ? __pfx_find_vma+0x10/0x10 [ 852.667528][T17683] handle_mm_fault+0x3fe/0xad0 [ 852.667571][T17683] do_user_addr_fault+0x7a6/0x1370 [ 852.667618][T17683] ? rcu_is_watching+0x12/0xc0 [ 852.667668][T17683] exc_page_fault+0x64/0xc0 [ 852.667719][T17683] asm_exc_page_fault+0x26/0x30 [ 852.667751][T17683] RIP: 0010:__put_user_4+0xd/0x20 [ 852.667796][T17683] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 c0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 852.667831][T17683] RSP: 0018:ffffc90005767d40 EFLAGS: 00050246 [ 852.667857][T17683] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 852.667876][T17683] RDX: ffff88802edc0000 RSI: ffffffff8621235d RDI: ffffffff8bf2b580 [ 852.667897][T17683] RBP: ffff888027d11340 R08: 00000000ffffffff R09: 00000000ffffffff [ 852.667928][T17683] R10: 0000000000000001 R11: ffff88802edc0b30 R12: ffff888072d14160 [ 852.667950][T17683] R13: ffff888072d14160 R14: 000000000000227d R15: ffff888142762c00 [ 852.667981][T17683] ? sg_ioctl+0x5ed/0x2800 [ 852.668015][T17683] sg_ioctl+0x5f9/0x2800 [ 852.668052][T17683] ? __pfx_sg_ioctl+0x10/0x10 [ 852.668081][T17683] ? find_held_lock+0x2b/0x80 [ 852.668117][T17683] ? hook_file_ioctl_common+0x144/0x410 [ 852.668159][T17683] ? __fget_files+0x20e/0x3c0 [ 852.668205][T17683] ? __pfx_sg_ioctl+0x10/0x10 [ 852.668235][T17683] __x64_sys_ioctl+0x18e/0x210 [ 852.668274][T17683] do_syscall_64+0xcd/0xf80 [ 852.668319][T17683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.668348][T17683] RIP: 0033:0x7fbc6578f7c9 [ 852.668371][T17683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.668398][T17683] RSP: 002b:00007fbc665bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.668424][T17683] RAX: ffffffffffffffda RBX: 00007fbc659e5fa0 RCX: 00007fbc6578f7c9 [ 852.668443][T17683] RDX: 0000000000000000 RSI: 000000000000227d RDI: 0000000000000007 [ 852.668478][T17683] RBP: 00007fbc665bb090 R08: 0000000000000000 R09: 0000000000000000 [ 852.668495][T17683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.668513][T17683] R13: 00007fbc659e6038 R14: 00007fbc659e5fa0 R15: 00007ffcd46bbaa8 [ 852.668550][T17683] [ 853.611820][T17683] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2518'. [ 854.150730][T17692] FAULT_INJECTION: forcing a failure. [ 854.150730][T17692] name failslab, interval 1, probability 0, space 0, times 0 [ 854.238953][T17692] CPU: 0 UID: 0 PID: 17692 Comm: syz.1.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.238993][T17692] Tainted: [L]=SOFTLOCKUP [ 854.239003][T17692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 854.239018][T17692] Call Trace: [ 854.239026][T17692] [ 854.239036][T17692] dump_stack_lvl+0x16c/0x1f0 [ 854.239080][T17692] should_fail_ex+0x512/0x640 [ 854.239108][T17692] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 854.239150][T17692] should_failslab+0xc2/0x120 [ 854.239189][T17692] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 854.239226][T17692] ? string+0x2c4/0x4f0 [ 854.239254][T17692] ? kstrdup_const+0x63/0x80 [ 854.239289][T17692] ? kstrdup+0x53/0x100 [ 854.239316][T17692] kstrdup+0x53/0x100 [ 854.239346][T17692] kstrdup_const+0x63/0x80 [ 854.239375][T17692] __kernfs_new_node+0x9b/0x9b0 [ 854.239409][T17692] ? __pfx___kernfs_new_node+0x10/0x10 [ 854.239445][T17692] ? find_held_lock+0x2b/0x80 [ 854.239479][T17692] ? kernfs_root+0xee/0x2a0 [ 854.239514][T17692] kernfs_new_node+0x13c/0x1e0 [ 854.239553][T17692] __kernfs_create_file+0x53/0x350 [ 854.239597][T17692] cgroup_addrm_files+0x546/0xc20 [ 854.239646][T17692] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 854.239694][T17692] ? idr_replace+0xfa/0x170 [ 854.239729][T17692] ? __pfx_idr_replace+0x10/0x10 [ 854.239800][T17692] css_populate_dir+0x169/0x570 [ 854.239837][T17692] cgroup_apply_control_enable+0x3f3/0xbb0 [ 854.239884][T17692] cgroup_mkdir+0x5e0/0x12e0 [ 854.239924][T17692] ? __pfx_cgroup_mkdir+0x10/0x10 [ 854.239962][T17692] kernfs_iop_mkdir+0x111/0x190 [ 854.239994][T17692] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 854.240022][T17692] vfs_mkdir+0x731/0xb60 [ 854.240056][T17692] do_mkdirat+0x442/0x5e0 [ 854.240098][T17692] ? __pfx_do_mkdirat+0x10/0x10 [ 854.240136][T17692] ? strncpy_from_user+0x203/0x2e0 [ 854.240165][T17692] ? getname_flags.part.0+0x1c5/0x550 [ 854.240195][T17692] __x64_sys_mkdir+0xef/0x140 [ 854.240235][T17692] do_syscall_64+0xcd/0xf80 [ 854.240275][T17692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.240300][T17692] RIP: 0033:0x7fbc6578f7c9 [ 854.240321][T17692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.240345][T17692] RSP: 002b:00007fbc665bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 854.240369][T17692] RAX: ffffffffffffffda RBX: 00007fbc659e5fa0 RCX: 00007fbc6578f7c9 [ 854.240385][T17692] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 854.240401][T17692] RBP: 00007fbc65813f91 R08: 0000000000000000 R09: 0000000000000000 [ 854.240416][T17692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.240431][T17692] R13: 00007fbc659e6038 R14: 00007fbc659e5fa0 R15: 00007ffcd46bbaa8 [ 854.240464][T17692] [ 854.590016][T17692] cgroup: cgroup_addrm_files: failed to add usage_percpu, err=-12 [ 855.948761][T17697] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 855.955136][T17697] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 855.961903][T17697] Bluetooth: hci24: Opcode 0x0c1a failed: -4 [ 855.987843][T17697] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 856.006069][T17697] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 856.251362][T17719] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2526'. [ 857.290668][T16844] Bluetooth: hci1: command 0x0406 tx timeout [ 857.676379][T17731] zswap: compressor 000 not available [ 857.875178][T17737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2530'. [ 857.997269][T17738] hub 8-0:1.0: USB hub found [ 858.016842][T17738] hub 8-0:1.0: 1 port detected [ 858.023239][T16837] Bluetooth: hci4: command 0x041b tx timeout [ 858.029543][T16844] Bluetooth: hci2: command 0x0c1a tx timeout [ 858.035746][T16842] Bluetooth: hci24: command 0x0c1a tx timeout [ 858.042002][T16845] Bluetooth: hci0: command 0x0c1a tx timeout [ 860.545916][T17771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2537'. [ 860.604444][T17771] bond0: entered allmulticast mode [ 860.609649][T17771] bond_slave_0: entered allmulticast mode [ 860.659709][T17771] bond_slave_1: entered allmulticast mode [ 860.688900][T17781] FAULT_INJECTION: forcing a failure. [ 860.688900][T17781] name failslab, interval 1, probability 0, space 0, times 0 [ 860.763973][T17781] CPU: 1 UID: 0 PID: 17781 Comm: syz.3.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.764036][T17781] Tainted: [L]=SOFTLOCKUP [ 860.764049][T17781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.764069][T17781] Call Trace: [ 860.764081][T17781] [ 860.764094][T17781] dump_stack_lvl+0x16c/0x1f0 [ 860.764151][T17781] should_fail_ex+0x512/0x640 [ 860.764188][T17781] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 860.764246][T17781] should_failslab+0xc2/0x120 [ 860.764300][T17781] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 860.764351][T17781] ? string+0x2c4/0x4f0 [ 860.764390][T17781] ? kstrdup_const+0x63/0x80 [ 860.764445][T17781] ? kstrdup+0x53/0x100 [ 860.764481][T17781] kstrdup+0x53/0x100 [ 860.764524][T17781] kstrdup_const+0x63/0x80 [ 860.764564][T17781] __kernfs_new_node+0x9b/0x9b0 [ 860.764629][T17781] ? __pfx___kernfs_new_node+0x10/0x10 [ 860.764685][T17781] ? find_held_lock+0x2b/0x80 [ 860.764735][T17781] ? kernfs_root+0xee/0x2a0 [ 860.764784][T17781] kernfs_new_node+0x13c/0x1e0 [ 860.764839][T17781] __kernfs_create_file+0x53/0x350 [ 860.764901][T17781] cgroup_addrm_files+0x546/0xc20 [ 860.764970][T17781] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 860.765048][T17781] ? idr_replace+0xfa/0x170 [ 860.765097][T17781] ? __pfx_idr_replace+0x10/0x10 [ 860.765154][T17781] css_populate_dir+0x169/0x570 [ 860.765205][T17781] cgroup_apply_control_enable+0x3f3/0xbb0 [ 860.765272][T17781] cgroup_mkdir+0x5e0/0x12e0 [ 860.765331][T17781] ? __pfx_cgroup_mkdir+0x10/0x10 [ 860.765386][T17781] kernfs_iop_mkdir+0x111/0x190 [ 860.765431][T17781] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 860.765471][T17781] vfs_mkdir+0x731/0xb60 [ 860.765518][T17781] do_mkdirat+0x442/0x5e0 [ 860.765577][T17781] ? __pfx_do_mkdirat+0x10/0x10 [ 860.765630][T17781] ? strncpy_from_user+0x203/0x2e0 [ 860.765671][T17781] ? getname_flags.part.0+0x1c5/0x550 [ 860.765716][T17781] __x64_sys_mkdir+0xef/0x140 [ 860.765772][T17781] do_syscall_64+0xcd/0xf80 [ 860.765826][T17781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.765861][T17781] RIP: 0033:0x7f7c25f8f7c9 [ 860.765889][T17781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.765923][T17781] RSP: 002b:00007f7c26e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 860.765956][T17781] RAX: ffffffffffffffda RBX: 00007f7c261e5fa0 RCX: 00007f7c25f8f7c9 [ 860.765977][T17781] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 860.765998][T17781] RBP: 00007f7c26013f91 R08: 0000000000000000 R09: 0000000000000000 [ 860.766028][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.766050][T17781] R13: 00007f7c261e6038 R14: 00007f7c261e5fa0 R15: 00007fff272f5028 [ 860.766101][T17781] [ 860.766141][T17781] cgroup: cgroup_addrm_files: failed to add usage_all, err=-12 [ 861.334549][T17779] zswap: compressor 000 not available [ 861.500090][T17794] erspan0: entered allmulticast mode [ 861.610629][T17787] FAULT_INJECTION: forcing a failure. [ 861.610629][T17787] name failslab, interval 1, probability 0, space 0, times 0 [ 861.623931][T17787] CPU: 1 UID: 0 PID: 17787 Comm: syz.4.2542 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.623980][T17787] Tainted: [L]=SOFTLOCKUP [ 861.623992][T17787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.624011][T17787] Call Trace: [ 861.624022][T17787] [ 861.624044][T17787] dump_stack_lvl+0x16c/0x1f0 [ 861.624099][T17787] should_fail_ex+0x512/0x640 [ 861.624142][T17787] should_failslab+0xc2/0x120 [ 861.624194][T17787] __kmalloc_cache_noprof+0x80/0x800 [ 861.624230][T17787] ? __tcp_get_metrics+0x1fc/0x6a0 [ 861.624277][T17787] ? tcp_get_metrics+0x7e0/0x1270 [ 861.624331][T17787] ? tcp_get_metrics+0x7e0/0x1270 [ 861.624377][T17787] tcp_get_metrics+0x7e0/0x1270 [ 861.624429][T17787] ? __pfx_tcp_get_metrics+0x10/0x10 [ 861.624476][T17787] ? __pfx___mod_timer+0x10/0x10 [ 861.624546][T17787] tcp_update_metrics+0x3e7/0xe00 [ 861.624610][T17787] tcp_time_wait+0x868/0xf30 [ 861.624658][T17787] tcp_rcv_state_process+0x20dc/0x6540 [ 861.624699][T17787] ? sk_reset_timer+0x2c/0xc0 [ 861.624735][T17787] ? tcp_schedule_loss_probe+0x54/0xbb0 [ 861.624787][T17787] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 861.624826][T17787] ? tcp_write_xmit+0x1cc1/0x8710 [ 861.624887][T17787] ? do_raw_spin_lock+0x12c/0x2b0 [ 861.624932][T17787] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 861.624972][T17787] ? tcp_v4_do_rcv+0x68e/0x10a0 [ 861.625006][T17787] tcp_v4_do_rcv+0x68e/0x10a0 [ 861.625053][T17787] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 861.625090][T17787] __release_sock+0x361/0x450 [ 861.625144][T17787] __tcp_close+0x5d8/0x1120 [ 861.625192][T17787] tcp_close+0x28/0x120 [ 861.625231][T17787] inet_release+0xed/0x200 [ 861.625269][T17787] __sock_release+0xb3/0x270 [ 861.625317][T17787] ? __pfx_sock_close+0x10/0x10 [ 861.625358][T17787] sock_close+0x1c/0x30 [ 861.625401][T17787] __fput+0x402/0xb70 [ 861.625447][T17787] task_work_run+0x150/0x240 [ 861.625486][T17787] ? __pfx_task_work_run+0x10/0x10 [ 861.625520][T17787] ? __pfx_task_work_add+0x10/0x10 [ 861.625559][T17787] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 861.625620][T17787] get_signal+0x1d0/0x26d0 [ 861.625669][T17787] ? __pfx___fput_deferred+0x10/0x10 [ 861.625703][T17787] ? __pfx___file_ref_put+0x10/0x10 [ 861.625758][T17787] ? __pfx_get_signal+0x10/0x10 [ 861.625803][T17787] ? fput+0xcf/0xf0 [ 861.625835][T17787] ? do_sendfile+0x4ea/0xe50 [ 861.625886][T17787] arch_do_signal_or_restart+0x8f/0x7a0 [ 861.625934][T17787] ? __pfx_do_sendfile+0x10/0x10 [ 861.625976][T17787] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 861.626045][T17787] ? __x64_sys_sendfile64+0x189/0x220 [ 861.626087][T17787] exit_to_user_mode_loop+0x8c/0x540 [ 861.626134][T17787] do_syscall_64+0x4ee/0xf80 [ 861.626189][T17787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.626224][T17787] RIP: 0033:0x7fac8ad8f7c9 [ 861.626250][T17787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.626292][T17787] RSP: 002b:00007fac8bc6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 861.626323][T17787] RAX: fffffffffffffe00 RBX: 00007fac8afe6180 RCX: 00007fac8ad8f7c9 [ 861.626343][T17787] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 861.626362][T17787] RBP: 00007fac8ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 861.626381][T17787] R10: 00000000000000a1 R11: 0000000000000246 R12: 0000000000000000 [ 861.626400][T17787] R13: 00007fac8afe6218 R14: 00007fac8afe6180 R15: 00007ffc557582e8 [ 861.626442][T17787] [ 862.402779][T17806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2545'. [ 862.545215][T17809] hub 8-0:1.0: USB hub found [ 862.555656][T17809] hub 8-0:1.0: 1 port detected [ 863.882525][T17838] ptp ptp0: only physical clock in use now [ 865.218628][T17855] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2554'. [ 865.282299][T17856] FAULT_INJECTION: forcing a failure. [ 865.282299][T17856] name failslab, interval 1, probability 0, space 0, times 0 [ 865.298492][T17856] CPU: 1 UID: 0 PID: 17856 Comm: syz.3.2555 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.298550][T17856] Tainted: [L]=SOFTLOCKUP [ 865.298564][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 865.298585][T17856] Call Trace: [ 865.298597][T17856] [ 865.298610][T17856] dump_stack_lvl+0x16c/0x1f0 [ 865.298672][T17856] should_fail_ex+0x512/0x640 [ 865.298708][T17856] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 865.298764][T17856] should_failslab+0xc2/0x120 [ 865.298816][T17856] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 865.298859][T17856] ? stack_trace_save+0x8e/0xc0 [ 865.298909][T17856] ? __d_alloc+0x35/0xa80 [ 865.298947][T17856] ? __d_alloc+0x35/0xa80 [ 865.298972][T17856] __d_alloc+0x35/0xa80 [ 865.299006][T17856] d_alloc_parallel+0x111/0x1510 [ 865.299059][T17856] ? find_held_lock+0x2b/0x80 [ 865.299107][T17856] ? __pfx_d_alloc_parallel+0x10/0x10 [ 865.299155][T17856] ? __d_lookup+0x266/0x4a0 [ 865.299209][T17856] lookup_open.isra.0+0x66c/0x1780 [ 865.299263][T17856] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 865.299332][T17856] ? mnt_get_write_access+0x1e9/0x2f0 [ 865.299380][T17856] path_openat+0x12bb/0x3140 [ 865.299447][T17856] ? __pfx_path_openat+0x10/0x10 [ 865.299517][T17856] do_filp_open+0x20b/0x470 [ 865.299571][T17856] ? __pfx_do_filp_open+0x10/0x10 [ 865.299654][T17856] ? alloc_fd+0x471/0x7d0 [ 865.299718][T17856] do_sys_openat2+0x121/0x290 [ 865.299842][T17856] ? __pfx_do_sys_openat2+0x10/0x10 [ 865.299898][T17856] __x64_sys_openat+0x174/0x210 [ 865.299941][T17856] ? __pfx___x64_sys_openat+0x10/0x10 [ 865.299999][T17856] do_syscall_64+0xcd/0xf80 [ 865.300056][T17856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.300091][T17856] RIP: 0033:0x7f7c25f8f7c9 [ 865.300119][T17856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.300153][T17856] RSP: 002b:00007f7c26e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 865.300186][T17856] RAX: ffffffffffffffda RBX: 00007f7c261e5fa0 RCX: 00007f7c25f8f7c9 [ 865.300209][T17856] RDX: 000000000000a001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 865.300233][T17856] RBP: 00007f7c26013f91 R08: 0000000000000000 R09: 0000000000000000 [ 865.300255][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.300276][T17856] R13: 00007f7c261e6038 R14: 00007f7c261e5fa0 R15: 00007fff272f5028 [ 865.300322][T17856] [ 867.729732][T17879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2558'. [ 867.908245][T17882] hub 8-0:1.0: USB hub found [ 867.972382][T17882] hub 8-0:1.0: 1 port detected [ 869.235867][T17905] ptp ptp0: only physical clock in use now [ 869.345139][T17909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2565'. [ 870.656150][T17926] usb usb36: usbfs: process 17926 (syz.1.2570) did not claim interface 0 before use [ 870.962455][T17929] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 870.993007][T17926] FAULT_INJECTION: forcing a failure. [ 870.993007][T17926] name failslab, interval 1, probability 0, space 0, times 0 [ 871.088633][T17926] CPU: 1 UID: 0 PID: 17926 Comm: syz.1.2570 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.088688][T17926] Tainted: [L]=SOFTLOCKUP [ 871.088703][T17926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.088724][T17926] Call Trace: [ 871.088736][T17926] [ 871.088750][T17926] dump_stack_lvl+0x16c/0x1f0 [ 871.088809][T17926] should_fail_ex+0x512/0x640 [ 871.088846][T17926] ? kmem_cache_alloc_noprof+0x62/0x770 [ 871.088892][T17926] should_failslab+0xc2/0x120 [ 871.088944][T17926] kmem_cache_alloc_noprof+0x83/0x770 [ 871.088988][T17926] ? __kernfs_new_node+0xd2/0x9b0 [ 871.089035][T17926] ? __kernfs_new_node+0xd2/0x9b0 [ 871.089073][T17926] __kernfs_new_node+0xd2/0x9b0 [ 871.089118][T17926] ? __pfx___kernfs_new_node+0x10/0x10 [ 871.089170][T17926] ? find_held_lock+0x2b/0x80 [ 871.089216][T17926] ? kernfs_root+0xee/0x2a0 [ 871.089263][T17926] kernfs_new_node+0x13c/0x1e0 [ 871.089318][T17926] __kernfs_create_file+0x53/0x350 [ 871.089385][T17926] sysfs_add_file_mode_ns+0x207/0x3c0 [ 871.089434][T17926] internal_create_group+0x597/0xf70 [ 871.089486][T17926] ? __pfx_internal_create_group+0x10/0x10 [ 871.089536][T17926] ? kernfs_create_link+0x1bd/0x240 [ 871.089599][T17926] internal_create_groups+0x9d/0x150 [ 871.089645][T17926] device_add+0xf56/0x1980 [ 871.089696][T17926] ? __pfx_device_add+0x10/0x10 [ 871.089745][T17926] ? lockdep_init_map_type+0x5c/0x270 [ 871.089780][T17926] ? __init_waitqueue_head+0xca/0x150 [ 871.089832][T17926] netdev_register_kobject+0x1a9/0x3d0 [ 871.089891][T17926] register_netdevice+0x13ac/0x21d0 [ 871.089950][T17926] ? __pfx_register_netdevice+0x10/0x10 [ 871.090014][T17926] __tun_chr_ioctl+0x1eb6/0x4880 [ 871.090049][T17926] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 871.090098][T17926] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 871.090139][T17926] ? hook_file_ioctl_common+0x144/0x410 [ 871.090189][T17926] ? __fget_files+0x20e/0x3c0 [ 871.090252][T17926] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 871.090289][T17926] __x64_sys_ioctl+0x18e/0x210 [ 871.090340][T17926] do_syscall_64+0xcd/0xf80 [ 871.090396][T17926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.090432][T17926] RIP: 0033:0x7fbc6578f7c9 [ 871.090460][T17926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.090496][T17926] RSP: 002b:00007fbc665bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.090538][T17926] RAX: ffffffffffffffda RBX: 00007fbc659e5fa0 RCX: 00007fbc6578f7c9 [ 871.090562][T17926] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000008 [ 871.090583][T17926] RBP: 00007fbc65813f91 R08: 0000000000000000 R09: 0000000000000000 [ 871.090605][T17926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.090626][T17926] R13: 00007fbc659e6038 R14: 00007fbc659e5fa0 R15: 00007ffcd46bbaa8 [ 871.090671][T17926] [ 871.749053][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2574'. [ 873.047317][T17971] ptp ptp0: only physical clock in use now [ 873.829809][T17992] FAULT_INJECTION: forcing a failure. [ 873.829809][T17992] name failslab, interval 1, probability 0, space 0, times 0 [ 874.026117][T17992] CPU: 1 UID: 0 PID: 17992 Comm: syz.1.2581 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.026174][T17992] Tainted: [L]=SOFTLOCKUP [ 874.026187][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.026209][T17992] Call Trace: [ 874.026222][T17992] [ 874.026236][T17992] dump_stack_lvl+0x16c/0x1f0 [ 874.026295][T17992] should_fail_ex+0x512/0x640 [ 874.026335][T17992] ? __kmalloc_cache_noprof+0x5f/0x800 [ 874.026382][T17992] should_failslab+0xc2/0x120 [ 874.026445][T17992] __kmalloc_cache_noprof+0x80/0x800 [ 874.026489][T17992] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 874.026546][T17992] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 874.026607][T17992] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 874.026661][T17992] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 874.026722][T17992] vidtv_channel_si_init+0x13d2/0x1a50 [ 874.026773][T17992] vidtv_mux_init+0x526/0xbe0 [ 874.026817][T17992] vidtv_start_feed+0x33e/0x4d0 [ 874.026864][T17992] ? __pfx_vidtv_start_feed+0x10/0x10 [ 874.026913][T17992] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 874.026991][T17992] ? mark_held_locks+0x49/0x80 [ 874.027031][T17992] ? __pfx_vidtv_start_feed+0x10/0x10 [ 874.027082][T17992] dmx_ts_feed_start_filtering+0xf6/0x220 [ 874.027131][T17992] dvb_dmxdev_start_feed+0x273/0x3f0 [ 874.027197][T17992] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 874.027239][T17992] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 874.027281][T17992] dvb_demux_do_ioctl+0x9de/0x12f0 [ 874.027332][T17992] dvb_usercopy+0x167/0x340 [ 874.027387][T17992] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 874.027436][T17992] ? __pfx_dvb_usercopy+0x10/0x10 [ 874.027509][T17992] ? __fget_files+0x20e/0x3c0 [ 874.027570][T17992] dvb_demux_ioctl+0x29/0x40 [ 874.027602][T17992] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 874.027636][T17992] __x64_sys_ioctl+0x18e/0x210 [ 874.027683][T17992] do_syscall_64+0xcd/0xf80 [ 874.027741][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.027775][T17992] RIP: 0033:0x7fbc6578f7c9 [ 874.027804][T17992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.027838][T17992] RSP: 002b:00007fbc665bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.027872][T17992] RAX: ffffffffffffffda RBX: 00007fbc659e5fa0 RCX: 00007fbc6578f7c9 [ 874.027894][T17992] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 874.027914][T17992] RBP: 00007fbc65813f91 R08: 0000000000000000 R09: 0000000000000000 [ 874.027934][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.027955][T17992] R13: 00007fbc659e6038 R14: 00007fbc659e5fa0 R15: 00007ffcd46bbaa8 [ 874.028002][T17992] [ 874.553452][T17992] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 874.565432][T17992] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 874.573914][T17992] CPU: 0 UID: 0 PID: 17992 Comm: syz.1.2581 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.584921][T17992] Tainted: [L]=SOFTLOCKUP [ 874.589281][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.599383][T17992] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 874.605374][T17992] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 dd 65 b9 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 47 4c 8b 23 49 39 ec 74 36 e8 b9 65 b9 f9 4d 85 e4 [ 874.625052][T17992] RSP: 0018:ffffc9000c61fa20 EFLAGS: 00010247 [ 874.631602][T17992] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000daab000 [ 874.639610][T17992] RDX: 0000000000000000 RSI: ffffffff8804f313 RDI: 0000000000000005 [ 874.647644][T17992] RBP: ffff88807da44660 R08: 0000000000000000 R09: 4453534204050000 [ 874.656086][T17992] R10: 0000000000000005 R11: ffff88802cc229b0 R12: 0000000000000000 [ 874.664101][T17992] R13: ffff88807b485640 R14: ffff88801feace80 R15: ffff8880338e7800 [ 874.672168][T17992] FS: 00007fbc665bb6c0(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 874.681146][T17992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.687765][T17992] CR2: 0000200001000000 CR3: 00000000767b2000 CR4: 00000000003526f0 [ 874.695766][T17992] Call Trace: [ 874.699078][T17992] [ 874.702041][T17992] vidtv_channel_si_init+0x1445/0x1a50 [ 874.707551][T17992] vidtv_mux_init+0x526/0xbe0 [ 874.712272][T17992] vidtv_start_feed+0x33e/0x4d0 [ 874.717169][T17992] ? __pfx_vidtv_start_feed+0x10/0x10 [ 874.722588][T17992] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 874.729227][T17992] ? mark_held_locks+0x49/0x80 [ 874.734026][T17992] ? __pfx_vidtv_start_feed+0x10/0x10 [ 874.739443][T17992] dmx_ts_feed_start_filtering+0xf6/0x220 [ 874.745209][T17992] dvb_dmxdev_start_feed+0x273/0x3f0 [ 874.750550][T17992] dvb_dmxdev_filter_start+0x1b6/0xe10 [ 874.756097][T17992] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 874.761382][T17992] dvb_demux_do_ioctl+0x9de/0x12f0 [ 874.766540][T17992] dvb_usercopy+0x167/0x340 [ 874.771106][T17992] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 874.776713][T17992] ? __pfx_dvb_usercopy+0x10/0x10 [ 874.781798][T17992] ? __fget_files+0x20e/0x3c0 [ 874.786532][T17992] dvb_demux_ioctl+0x29/0x40 [ 874.791158][T17992] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 874.796482][T17992] __x64_sys_ioctl+0x18e/0x210 [ 874.801377][T17992] do_syscall_64+0xcd/0xf80 [ 874.805940][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.811871][T17992] RIP: 0033:0x7fbc6578f7c9 [ 874.816327][T17992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.835985][T17992] RSP: 002b:00007fbc665bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.844470][T17992] RAX: ffffffffffffffda RBX: 00007fbc659e5fa0 RCX: 00007fbc6578f7c9 [ 874.852485][T17992] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 874.860518][T17992] RBP: 00007fbc65813f91 R08: 0000000000000000 R09: 0000000000000000 [ 874.868551][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.876581][T17992] R13: 00007fbc659e6038 R14: 00007fbc659e5fa0 R15: 00007ffcd46bbaa8 [ 874.884636][T17992] [ 874.887693][T17992] Modules linked in: [ 874.893889][T17992] ---[ end trace 0000000000000000 ]--- [ 874.946821][T17992] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 874.956835][T17992] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 dd 65 b9 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 47 4c 8b 23 49 39 ec 74 36 e8 b9 65 b9 f9 4d 85 e4 [ 875.060579][T17992] RSP: 0018:ffffc9000c61fa20 EFLAGS: 00010247 [ 875.110689][T17992] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000daab000 [ 875.169836][T17992] RDX: 0000000000000000 RSI: ffffffff8804f313 RDI: 0000000000000005 [ 875.188801][T17992] RBP: ffff88807da44660 R08: 0000000000000000 R09: 4453534204050000 [ 875.197023][T17992] R10: 0000000000000005 R11: ffff88802cc229b0 R12: 0000000000000000 [ 875.209563][T17992] R13: ffff88807b485640 R14: ffff88801feace80 R15: ffff8880338e7800 [ 875.254406][T17992] FS: 00007fbc665bb6c0(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 875.289632][T17992] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.304272][T17992] CR2: 0000557f4c7cc950 CR3: 00000000767b2000 CR4: 00000000003526f0 [ 875.312850][T17992] Kernel panic - not syncing: Fatal exception [ 875.319570][T17992] Kernel Offset: disabled [ 875.323927][T17992] Rebooting in 86400 seconds..