last executing test programs: 17m9.242505859s ago: executing program 1 (id=3675): mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/11/smp_affinity\x00', 0xe8102, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async, rerun: 64) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) (async, rerun: 64) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x1, 0x803a, r0, 0x0) (async) madvise$auto(0x110c230000, 0x1, 0x9) (async) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/178, 0xb2) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyb1\x00', 0xc2440, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) socket(0x1d, 0x3, 0x1) (async) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) (async) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) (async, rerun: 64) socket(0x2, 0x2, 0x0) (rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 17m7.876922856s ago: executing program 1 (id=3683): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), r1) (async, rerun: 32) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)="43f7e64cccddc2cb20f39f253ccf73065353b2dbbe34569ba080facbd30db3be2f0110769cd0e0b3a083c9b0fc63bbc774e3d38afe0375a721e293e0db7b3891f028df444f8f5e70625b031f607f92cf2e0ac480062d3e690437e87763b1fe23cbe973b2") (rerun: 32) unshare$auto(0x40000080) unshare$auto(0x40000080) (async, rerun: 64) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) (rerun: 64) 17m3.844988707s ago: executing program 1 (id=3693): mmap$auto(0x0, 0x400004, 0x2, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x105442, 0x0) r1 = socket(0x23, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto_SO_CNX_ADVICE(r1, 0xfff, 0x35, &(0x7f0000001500)='\x00', 0x9) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001180), r2) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001340)=ANY=[@ANYBLOB="00ad393b", @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf25660000000400fd00"], 0x18}, 0x1, 0x0, 0x0, 0x4000005}, 0x40011) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r5 = socket(0x1e, 0x1, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) wait4$auto(0x0, &(0x7f0000001380)=0x7, 0x3, &(0x7f00000011c0)={{0xc000000, 0x4}, {0x48, 0x2}, 0x55f, 0xa4ac, 0x12, 0x1, 0x2, 0x1, 0x100, 0x9, 0x45, 0x7, 0x6, 0xfffffffffffffeff, 0x7e, 0x1b}) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r7, 0xc0045627, r5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r8, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) 16m59.792206639s ago: executing program 1 (id=3705): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0xa, 0x5) mmap$auto(0x0, 0x20005, 0x7fffffff, 0xeb1, 0xffffffffffffffff, 0x7ffe) close_range$auto(r0, 0xffffffffffffffff, 0x40) socket(0x15, 0xa, 0x3) mmap$auto(0x1, 0x2000d, 0x3, 0x8000eb1, 0xffffffffffffffff, 0x100010008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x43}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000040) mmap$auto(0x100000000000000, 0xffffffffffffffc0, 0x800000000003, 0x9b72, 0x2, 0x8004) socket(0xa, 0x1, 0x0) mmap$auto(0x40000000000000, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x0, 0x0) read$auto_proc_mem_operations_base(r2, &(0x7f0000000340)=""/89, 0x59) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r3 = prctl$auto(0x3c, 0xb, 0x0, 0x8, 0x2) mmap$auto(0x3, 0x400008, 0xe3, 0x13, 0x2, 0x8) bind$auto(r3, 0x0, 0x6e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) sendmmsg$auto(r1, 0x0, 0x9, 0x90) socketpair$auto(0x9, 0x7, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x81000000) 16m58.670845814s ago: executing program 1 (id=3709): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20002, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x58b342, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace\x00', 0xc0a02, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cpu/0/msr\x00', 0x0, 0x0) sync_file_range$auto(0x3fe0000000000, 0x7, 0x0, 0x0) read$auto_msr_fops_msr(r2, &(0x7f0000000300)=""/221, 0xdd) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2aa01, 0x0) 16m57.175598069s ago: executing program 1 (id=3716): mmap$auto(0x1, 0x2, 0xe2, 0x80000013, 0x405, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4c810) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) move_pages$auto(0x1, 0x81000000f57, 0x0, 0x0, 0x0, 0x2) r0 = gettid() rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={r0, 0x0, 0x401, 0x5, 0x3}}}) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd5/hctx0/cpu1/read_rq_list\x00', 0x2, 0x0) (async) read$auto(0x3, 0x0, 0x8080) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) (async) io_uring_setup$auto(0x401, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async) getsockopt$auto(r1, 0x84, 0x6c, 0x0, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x18, 0x1, 0x0) 16m41.785317311s ago: executing program 32 (id=3716): mmap$auto(0x1, 0x2, 0xe2, 0x80000013, 0x405, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4c810) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) move_pages$auto(0x1, 0x81000000f57, 0x0, 0x0, 0x0, 0x2) r0 = gettid() rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={r0, 0x0, 0x401, 0x5, 0x3}}}) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd5/hctx0/cpu1/read_rq_list\x00', 0x2, 0x0) (async) read$auto(0x3, 0x0, 0x8080) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) (async) io_uring_setup$auto(0x401, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async) getsockopt$auto(r1, 0x84, 0x6c, 0x0, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x18, 0x1, 0x0) 16.029038797s ago: executing program 4 (id=6659): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000140)=0x5db) ioctl$auto_BLKSECDISCARD(r3, 0x127d, 0x0) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), 0xffffffffffffffff) r5 = fcntl$auto_F_GETOWN(r0, 0x9, 0x0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000002c0)={0x87c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x4e8, 0x1, 0x0, 0x1, [@typed={0xe6, 0x10, 0x0, 0x0, @binary="1141bc6ec25b4d172d72175d0db4a0eb08c3ec3c4f856e9a87cb33ff273e5c05214445407a28d2f23b05e43e2f6b06f7f6487b4198f7440cfde73ebc351a5b1a961492a1b649c027bcdee67c4e58b9997bb0e3c4c00adde3215657bdc25c9d6118ac9008382e399da49df77b893b88f677d7fbb691be779d77d20170255fd92f9f7dd6e65ff913f18aa7d0bfeebe29d7ce0af04b9b45499e8c07c093435c698999789bda91283e7fcb72e8e1ddbef9504f83ef1b10cd5cd49b992e383d511c49fff4cd140b5d64d5d6960a11e268e0eca1e2fb090f988362512cb06359bafd7848be"}, @nested={0x70, 0x1, 0x0, 0x1, [@generic="1e525a5f3507d21394dba1ff2f768f0da04ce838e81a79d9f76fe132e5dc3f41d79afb8f0bd411bf1107254cb6f15940765840228d4a2b4ed4f64e4382f080a27e50120e90468f79216e0deafd12befa0b6bbbf8", @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x4}]}, @nested={0x136, 0x141, 0x0, 0x1, [@generic="fdfca5d1f9735f7c503dabd305fb32c556793382b1daef166a166be6b8bab5c9ee34a26b7bd778505840569a46", @generic="b24c6bb48046138f338d63a00c6e97639b746bc28fc6a4b8d95364ec376f3781ed5154fd4b4ed110e9684f5daf9c2c0336709c7b6a45ca77abfc51074d28a36123e60cc7040c2ce6098967cdb461faa6540bc844574007e4d11aba11474adb2d80d21c55136c04ea48c9d54fcfe95f7a18aaf5445adc390b737108192a58a3", @typed={0x6, 0x41, 0x0, 0x0, @str='-\x00'}, @nested={0x4, 0x69}, @generic="e3f6b924aabe0a0c1ba15a79d34a4a01aac5fc2a0e77768e644e235371c76a3e9c2a8f29187b7c2df6e13f4edb3913e7612c3a8479c4588ce02c3672f3b0406c5902c7163eb3daa52230e7d8ea3962315d712aca2c1c870eaf2368cdf677eae34a4f397f0e792f99196712792d6ebcd76ce5", @nested={0x4, 0xf1}, @nested={0x4, 0xad}]}, @typed={0xc, 0x139, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0x22e, 0x11, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @u32=0x80000000}, @generic="d475f53d03be9562bdf31a990c0f9a86832f2cb9ec79236bd9038714b8a59d71e9fd229ccb35f4f53827f04468d747dfb034698549b45e33801b7625d316db6d677e7696a59fb27aee0f24626702a488deac87898408c8ac5178c911656c50a92d8c6825eb00d93c8b37afc35fc64d699c2c68364c718206cf6bf01578bd02b6500ded413933181d94c4ef1c99af6d7762c0c8a78eafdcf347b8bd04ecb4b27677510ba76f1b5b83e8c4388743067a7be02232e5336233aa463ae122f8abf52bee7f602ffe0a2e736e6e6b7c6649b7323610912956650acff7ce9b1f1a92e6f604bcf5423af0f8faa7c45e6f793a47bd80e479", @generic="7b1c137192", @generic="5934ce1d9e9bdd8b023d21e6848c568ff334626cd891b26e81242861abf4ec71fcd1f5bbb11a0b40776fbaaa13707d07034d0d1501580d68b05f3a029e9c40bade940853968d6b567c6340ad027faf3be390cf6125cba26ee30abbf6f3f57d2113ebd3bad9075ba05edc18556212da3bbc1f928c0780d0e1453318c443223568e078c23f0e3ca8de0fa374e5a6828e94f8d0c98df88e7b6b6458617b3463d54a93d0834a6a3b8a8568009d05c3ca208e0e2b4ac19c0d51341785925f3bc7ec922acdeda78d71", @nested={0x4, 0x26}, @nested={0x4, 0x5f}, @generic="92802a26e750fe83592c210daaa940414b7abee03e1f269fab1bc226c34b6c1f9ca314b4f8cf5d45d53ffa2b8ca02b9ed0d9d3623cda7507c37267a12bba1f9dc714eb988ec698ca87f2f043f73e9207dd7a8701e17d6e90540d4cb6"]}, @nested={0x18, 0x111, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @u32=0xffffffff}, @typed={0x4, 0x21}, @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@multicast1}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb20000}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x296, 0x2, 0x0, 0x1, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x97, 0x0, 0x0, @u32=0x7fff}, @typed={0x8, 0xea, 0x0, 0x0, @u32=0xfffffbff}, @generic="d9e20464c1c9b3d62fcc1b8f3b50f469cc7ba947da77dc4f60a7ca09e3ebee8edfad5f4c74d9cbaf95f4f3c2f110ebe58e42fa2f04875f4b8f7399178337e6dd02bf798085350caf98d793fcc752c26cd8803636e0d60ca8206954fa4afb2ab71dfed556e9bfdf165924edd37f43f623b85f884eb410142f861e18414e177715ed69e3cab61a33eb96d6b46365aa518bc241dd665335dd24cbbdc50b9123de5651970b5cf902a9ca7c7002e99d52cc1a7f06f9eec7e1f210e822bac5baba1e0d363b65241180faa54a67d8114fe443b931ae6d6a523dc16abab67bfbd2c1", @nested={0x9e, 0x43, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x4, 0x95}, @typed={0xc, 0x151, 0x0, 0x0, @u64=0x6}, @generic="e437df02a855ab4024ab3a9b8c2d552a18641660ea7a9d95cf23031f0cb3acf937c35a7fc263c32637219d66052bc4586060b1d64446ec1bc872c2d703efe50afd02c5e823129d0505b3ea7f20314b283b762af66494682057a49eabb4bd621dc2637a4b74775c804f23c12df547e7d45ac3a8def542ba5f8a66af88c6a284c79386"]}, @typed={0x8, 0x73, 0x0, 0x0, @u32=0xffff}, @nested={0xed, 0x132, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @pid=r5}, @generic="3fc9f9945ae0bcc2ebb3ef3c91e5330097609d94ffddb13676d95a8173650f81a69f1c93ae9cda0ee97bf6316a1298ad7ff093e97d3fd1bb9370ac5ed54aff5feacb60838dca8267c3b1eacecfc6233a98ede7b0121d32692e3347a69e7fac189601446e6c95d0d95291c6cc405b3fd7bf9a35076334fc3d04875eb4711e64615b099e3a64c4729ff71c1ce7e401fd28f759b185a7499f600062feaccfbdcd6a0fc02ad59ac39fd02f43fd154b6690bca0a3f15fbd937ed3d4c2ebf4e83b4564dc24e993d4", @typed={0x14, 0xb7, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0xd1}, @nested={0x4, 0x116}]}]}, @IPVS_CMD_ATTR_DAEMON={0xcc, 0x3, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @fd=r1}, @nested={0xb7, 0x52, 0x0, 0x1, [@generic="9528f96343e1b5dc631016ca8b3b72c133f29f0f7fad029d7757dfeeb234a05bd6b4df4056cb845c03624ec11e228c9d64bb01f96318ec30cd53cc8c27cf4fa25052b538ba1336e79ae3a2a4fd0ef0f71cbf292d6ba04acb99e4aea3b5f4c14bbe7bc4aa8f041f0426d76ea830d4109bdfe0b5cb832cbfd0250797f3539e5bc2be643d68df612323dc6b69ed8f562d0d9d180f2d81e0acd05ac6727a3de964a9f2f40b4086a9e76a4afac039d88fec", @nested={0x4, 0xa4}]}, @typed={0x8, 0x5e, 0x0, 0x0, @ipv4=@empty}]}]}, 0x87c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) fcntl$auto_F_OFD_SETLK(r1, 0x25, 0x89) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r2, 0x4004ae8b, &(0x7f0000000040)={0x2}) r8 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) getsockopt$auto(r8, 0x84, 0x66, 0x0, &(0x7f0000000000)=0x7ffe) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_hsr/proxy_ndp\x00', 0x82002, 0x0) r10 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r9, r10, 0x0, 0x100000000) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r7) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="100025bd7000fbdbdf255d00005210cdf6f1b10e46def74915f09ec2000500a3000200000008009a7d6f6c00006c95"], 0x24}, 0x1, 0x0, 0x0, 0x1000}, 0x40200c0) 14.170142573s ago: executing program 4 (id=6664): socket(0x10, 0x2, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0xc008af12, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02250200000008000300"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201fb84", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) mmap$auto(0xfffffffffffffffc, 0x7, 0x8, 0xeb1, 0xffffffffffffffff, 0x8000000000008000) r1 = socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/smaps_rollup\x00', 0x88882, 0x0) pread64$auto(r0, 0x0, 0x7fff, 0x2) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x40103, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000340)={0x3, 0x1, 0x7, 0x2, 0x9, 0x37, r3, [0x30, 0x9, 0x3], {0x6, 0x7fffffff, 0x7fffffff, 0x80, 0x8, 0x6, 0x80, 0x24eb, 0x3}, {0x9, 0x2, 0x8000, 0x200, 0x9, 0xac, 0x9, 0x2, 0x4}}) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0) r6 = socket(0x2c, 0x3, 0x0) bind$auto(r2, &(0x7f0000000140)=@l2={0x2c, 0x66e, @any, 0x0, 0x3}, 0x6c) sendmsg$auto_NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="80010000", @ANYRES8=r0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x40d0}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000300)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 11.501427063s ago: executing program 4 (id=6674): socket(0x2c, 0x2, 0xfffffffd) (async) write$auto(0x3, 0x0, 0x81) (async) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4c881}, 0x0) (async) socket(0x10, 0x2, 0x7) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2c01, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) (async) ioctl$auto(0x3, 0x540a, r1) (async) write$auto(r0, &(0x7f0000000000)='0\x81=\xa2\xad\xff\x8d\xf9\xac\xa6\xad\xfbi\xa3^}\x91\xa3}\x85\xfaP\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb\x05\x00\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0x7fff) (async) getsockopt$auto_SO_SNDTIMEO_NEW(0xffffffffffffffff, 0x8, 0x43, 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram11\x00', 0x145002, 0x0) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) (async) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) (async, rerun: 64) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (rerun: 64) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) (async, rerun: 64) syz_clone(0x20000000, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b300") (rerun: 64) r4 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x2000000, 0x8000}) (async) read$auto_hpet_fops_hpet(0xffffffffffffffff, &(0x7f0000000500)=""/229, 0xe5) getpgid$auto(0x0) (async, rerun: 32) r5 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x28002, 0x0) (rerun: 32) ioctl$auto(r5, 0x80046f45, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 64) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (rerun: 64) 7.092897222s ago: executing program 0 (id=6682): socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) r0 = socket(0xa, 0x3, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) (async) socket(0xa, 0x1, 0x0) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) epoll_create$auto(0x8800001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) io_uring_setup$auto(0x23, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe) (async) setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x1ff) writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0) (async) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0) 6.428981645s ago: executing program 3 (id=6684): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x0, @empty}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x63102, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x84) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 6.317081061s ago: executing program 4 (id=6685): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x2003, 0x0) ioctl$auto(r2, 0x6f2d, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40891}, 0x20044000) 3.731324015s ago: executing program 3 (id=6687): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptyw3/power/runtime_active_time\x00', 0xe0666, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd6/sched/write0_fifo_list\x00', 0x400, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop15\x00', 0x6600, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040), 0x22402, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x102, 0x0, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'macvlan0\x00'}) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000002080)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x44004) pread64$auto(r0, 0x0, 0xc, 0xdd) 3.569255225s ago: executing program 0 (id=6689): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x2003, 0x0) ioctl$auto(r2, 0x6f2d, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40891}, 0x20044000) 3.259857389s ago: executing program 3 (id=6690): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/ifb0/flags\x00', 0xb02, 0x0) r1 = socket(0x23, 0x80805, 0x0) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) sendfile$auto(r0, r0, &(0x7f0000000100)=0x9, 0xffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setregid$auto(0xee01, 0x0) close_range$auto(r3, r3, 0x7fe) socket(0xa, 0x2, 0x73) socket(0x2, 0x80002, 0x73) ioctl$auto(0x1, 0x890c, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(r1, 0x6, &(0x7f0000000280)="208c6a0ae5451f2d5ccdb6d6847c7e7b15e983aa3084fdde8e27f07756ba8a760b999e3f1d12a9ad965841cc3954da34cede9862d77a0852f9e0a6e295490551d2aa1dcf6266da5dbb1e276ff58015995f4998effd1e797aff991dd46730e03ac6ad69d7b0d889099a72521435c98652", 0x3) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000340)={{0x15, 0xee00, 0x0, 0x807, 0x3, 0x4, 0x6}, 0x0, 0x401, 0x3, 0x9, @raw=0x5, @inferred, 0x3, 0x0, &(0x7f0000000300)="bb81b5", &(0x7f0000000140)="c60a174ed771735ffe0d9055411e39f73a144057f8015e782452ac7813ddcd03a15565ff6194b8dc2d345744015bbed9b47ec8f7cc9e8243b60233dfd1a61163782b839f3a6651b57c6ea9fadafa6852b793e43ec541a24e10f670ea0887873d6377e08e5e887b2b38522228403a9bf2888945a7be93f5674c3291f202440af78fe48ea016a6a40a41f928e57daacac3ecef5179d3f1fb6d2c1b33785e653e9945d57aae25b5"}) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f00000003c0)={0x8001, 0x7, 0x40, 0xffffffff00000000, 0x6}) waitid$auto(0x849, 0xffffffffffffffff, &(0x7f0000000440)={@_si_pad}, 0x76, &(0x7f00000004c0)={{0x80000001, 0x5}, {0xfffe, 0x2c2}, 0x1, 0x6, 0x6, 0x869d, 0xfffffffffffffbff, 0xa6, 0x6, 0x2, 0x20000000000003ff, 0x0, 0xac11, 0x10, 0x10, 0x1}) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000600)={{0x23a, 0xee01, 0xee00, 0xdce, 0x3, 0x7, 0xc2e}, &(0x7f0000000580)=0x3, &(0x7f00000005c0)=0xff, 0x240, 0x401, 0x101, 0x8, 0x2, 0x9, 0x1, 0x0, @raw=0x5, @raw=0x1}) 2.551481249s ago: executing program 0 (id=6699): openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) io_uring_setup$auto(0xa, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x2) rseq$auto(&(0x7f0000000140)={0x0, 0xb5, 0xd8, 0xb, 0x4, 0x6, "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"}, 0x1000, 0x7, 0x8001) write$auto(0x3, 0x0, 0xfdef) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) 2.477452281s ago: executing program 4 (id=6692): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=@bpf_attr_3={0x2b, 0xffff, 0x6, 0x5, 0x9, 0x21, 0x4, 0x8, 0xd, "9cb752c613de1e128a360e822228879b", 0x0, 0xd0, 0xffffffffffffffff, 0x200, 0x0, 0x3, 0x8, 0x9, 0x6, 0x2, @attach_prog_fd, 0x0, 0x3, 0x5b, 0x6, 0x6}, 0x40) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2042, 0x0) ioctl$auto_SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x2003, 0x0) ioctl$auto(r2, 0x6f2d, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40891}, 0x20044000) 2.179447567s ago: executing program 3 (id=6693): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$auto(r0, 0x800454cf, 0xffffffffffffffff) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000080)=0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2201, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D3\x00', 0x133102, 0x0) r3 = socket(0x2, 0x1, 0x100) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f00000001c0)=':,\x00', 0x0, 0x0) listen$auto(r3, 0x1ff) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x4) socket(0x2, 0x3, 0x4) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0) msgctl$auto_IPC_INFO(0x4, 0x3, &(0x7f0000000080)={{0x0, 0xee00, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xf8b6}, 0x0, 0x0, 0x4, 0x6dfe, 0x5, 0x8000000000000000, 0x2, 0x4000, 0x9, 0xa5ff, @inferred, @raw=0x6}) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x6]}, 0x0) 1.919267805s ago: executing program 2 (id=6694): socket(0x10, 0x2, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0xc008af12, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0225020000000800030080"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201fb84", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) mmap$auto(0xfffffffffffffffc, 0x7, 0x8, 0xeb1, 0xffffffffffffffff, 0x8000000000008000) r1 = socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/smaps_rollup\x00', 0x88882, 0x0) pread64$auto(r0, 0x0, 0x7fff, 0x2) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x40103, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000340)={0x3, 0x1, 0x7, 0x2, 0x9, 0x37, r3, [0x30, 0x9, 0x3], {0x6, 0x7fffffff, 0x7fffffff, 0x80, 0x8, 0x6, 0x80, 0x24eb, 0x3}, {0x9, 0x2, 0x8000, 0x200, 0x9, 0xac, 0x9, 0x2, 0x4}}) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0) r6 = socket(0x2c, 0x3, 0x0) bind$auto(r2, &(0x7f0000000140)=@l2={0x2c, 0x66e, @any, 0x0, 0x3}, 0x6c) sendmsg$auto_NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="80010000", @ANYRES8=r0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x40d0}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000300)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.774667862s ago: executing program 3 (id=6695): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0x1, 0x0) socket(0xa, 0x1, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000340)={&(0x7f0000000300)="52fc670584a88fae043ff918748c5e43a1cacbc7032684aea447fd0f0856c6a647bd403ab1f4086a68eba2b72683a16c26dd27157138bc8aee9637b9", 0x9}, 0x3ff, 0x1, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0x401, 0x8004) ioctl$auto(0x3, 0x4020565b, 0x38) r1 = io_uring_setup$auto(0xf, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="48fca9fce87c944c01b8294348d59fc327dd2324b3227bb0f3ab8cfc9f1a2af72398441d049fa2239e00db60e040770ddc585cf93134ee5ffd950b25b6d6313d0df88c656a49c19a4ccf7cfe7734be012fb567ec156663bfc910854064afb220850b0c319971b90d70332350730381dd5aeb760a16", 0x75) close_range$auto(0x2, 0x8, 0x0) mount$auto(&(0x7f0000000000)='ip6gre0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='\x00', 0x6030, &(0x7f00000000c0)="1d76de4f150ea838ff8651db21d9b943e36ef9b48d499c9526c35b02212489460a8659b67db61c28ecf0d620ef00348a55434e617d8fdc8eb55802b9cf5f6ff748c558496e85e74b813538db680105c03a268ca6f4834f809e538423909bf10b5fc4a2cdfeec74bb3bb87ce31367e3fb5b7b3920c7a938957958") mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x7ffffffff000, 0x0, 0x3, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x1000}, 0x3) ioctl$auto_XFS_IOC_COMMIT_RANGE(r1, 0x40585883, &(0x7f00000001c0)={r3, 0x0, 0x4, 0xfffffffffffffff8, 0x203, 0x2, [0x8, 0xa583, 0xfffffffffffffff7, 0xfffffffffffffff9, 0x8, 0x8000000000008]}) 1.473242716s ago: executing program 2 (id=6696): socket(0x10, 0x2, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0xc008af12, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02250200000008000300"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201fb84", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) mmap$auto(0xfffffffffffffffc, 0x7, 0x8, 0xeb1, 0xffffffffffffffff, 0x8000000000008000) r1 = socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/smaps_rollup\x00', 0x88882, 0x0) pread64$auto(r0, 0x0, 0x7fff, 0x2) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x40103, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000340)={0x3, 0x1, 0x7, 0x2, 0x9, 0x37, r3, [0x30, 0x9, 0x3], {0x6, 0x7fffffff, 0x7fffffff, 0x80, 0x8, 0x6, 0x80, 0x24eb, 0x3}, {0x9, 0x2, 0x8000, 0x200, 0x9, 0xac, 0x9, 0x2, 0x4}}) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0) r6 = socket(0x2c, 0x3, 0x0) bind$auto(r2, &(0x7f0000000140)=@l2={0x2c, 0x66e, @any, 0x0, 0x3}, 0x6c) sendmsg$auto_NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="80010000", @ANYRES8=r0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x40d0}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000300)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.367248747s ago: executing program 0 (id=6697): mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) 1.026823463s ago: executing program 2 (id=6698): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)="45a5d6508b09cb7751e93b3f92f77e01bb617d40f11e79bd225c2b417b664e5bd4cc2d9769554b082a703a655ccee779093c8aa3866fe4e4a3f47017f8a7201f79c62ac655bbf4f8cafdf69f792b7d241f75ad59b5829da9cd9b8b989e024465b9c292442beaf0969a5ad2897eb987a20ad26acaaaad57aa997a8d5a361df5eb5060f516c8eba357aca44ff724195b66f9c6bed0cad404e6f31856f0ef049a940f869d45d9009c461b4c78e4f036164b77d2b1db19b51dffbef0288b305640dfa1cfeba029258f85bbf3aede90d338725d8d63ae552de82659d7a8554b04ea30437c34a3e951dd2c372e8a6f90aeb6de24") setsockopt$auto_SO_RCVMARK(r0, 0xffff81a8, 0x4b, &(0x7f0000000080)='M@\xdb\xde\x00\x00\x1fq|\x02\xf4I\xf3\fe\x97\xb2E\xa1\xa2\xaal;\x11h?7\x83\vk~\x918r\xf7~\x8f\x84&\xf5\x8bU\xeeWS\xa7#\x82\xefGN\xe89\xc0*\xfa)+\x06\xc2\x16\xf3B-\xba\xa8\xa0\x14\xb3\xc0QD\'D\xae#e[Cv\x86\xf7\xbc\t\xe1r\xe0\xb4\xd6\xb8\xf7Y7@\xa1\xdb\xb0\x82\xdf\xed\xc4z\b\x05\xf1^\xd5&\x959\xa0Tr\x11\x1b\xd1\r\x94p\xfbF\x9d0\xf3\xa7dq\xe4\xf4g\xc2\xf9\"\x90\x06\'Jl\xcek\xd9\xed\x8f\xbe\xa1 \xfdt\xac\xe9 \x18\x87\xd1\xa4v\xf3V\x0f\xca\x17\x13\x80\x96\xc4w\x87SvO\x17\xca\xe4\xc0\xa5Mz\x86\x98\x7f\x99\xa5\x7f\xa6\x00'/200, 0xffffffff) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000040)={0x4, 0xffff708f}) write$auto(r0, &(0x7f0000000000)='/dev/audio1\x00', 0x5) prctl$auto_PR_SET_MM(0x23, 0x5, r0, 0x4, 0x4) fdatasync$auto(r0) socket(0x15, 0x3, 0x6) 881.310616ms ago: executing program 0 (id=6700): r0 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x240000, 0x0) r1 = prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x82}, 0x1, 0x0, 0x0, 0x623d) mmap$auto(0x6ae2, 0x20009, 0x5, 0xeb1, r0, 0x8000) r2 = socket(0x2, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) listen$auto(0x3, 0x81) connect$auto(r2, &(0x7f0000000000)=@can, 0x55) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x8, 0x0, 0x89) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x14, r4, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x20000040) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000100)={0x7, 0x8, 0x3, 0x9, 0x8}) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000140), 0xae02, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc040563e, 0x38) socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0xa, 0x0, 0x56d) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) 741.414891ms ago: executing program 2 (id=6701): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=r2, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/scsi_mod/parameters/scan\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80402, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) io_uring_setup$auto(0x8, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x180, 0x0) r4 = io_uring_setup$auto(0x86, 0x0) ioctl$auto(0xffffffffffffffff, 0xc0205647, r4) 541.142645ms ago: executing program 3 (id=6702): mmap$auto(0x0, 0x100000020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) madvise$auto(0x8, 0x9, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x207, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048000}, 0x40014) kexec_load$auto(0xffffffff, 0x9e, &(0x7f0000000080)={@kbuf=&(0x7f00000005c0)="d71f61604fe3bbb5bb7d8f68c5443c93c318f4918f5266dbdd2898ded93077277cdc68912463d7f8ce7277fc2d7bf7453add2592cf61f36080dcc74a2b4f33e6aeacdbfab2601ffb9cfa440a4e62d32ccc3d2b3b914bcd8ff883968bd37dd4e94100cd784b2d2b467413348eb5e5b5f189e0f1843c86b65ed61aaa5d5690845e0666bd4b77d17b01c35a0343385a15693252c9907c9e5a4cefebe2d046e41aca1b4baf29bc9fd3a1786e7075956cee223e0debca97838a22ed4d4b67e96f5e4846a27bba9a64ba0edd4081278c17b15624286fcbadc4a341190d", 0xffffffffffffffff, 0x8000, 0x403004}, 0x4) kexec_load$auto(0xfe, 0xd, &(0x7f0000000140)={@kbuf=&(0x7f0000000380)="74e3c27482f7aea46713e1a8b5b5ff43dd6de5f201dd87c5c192805d63576b0f5e931b0881a7200807e054ced40a1672ecfcbcaa45be001532d47bf1565625b57f19852e79b57d30c08cb14dcd3fc47de301acf1cd33dc7f2d2aea6bfcde71602cbc47b27ae87a8d397ea222848b7e70f765b28d20e249064000c21240edf5e44cf6126155f7e6dad2cd3529130d501a3aee71cd4b38e1752fe77164cbb5b89aaf2244c9aceb516836279a32f4b18ecc03ea95fa318a3fec4029c949b7f68fdb73940ae6e95300e3cc9e25c7b96979", 0xfffffffffffffff8, 0x0, 0xffffffffffffff01}, 0x2) r3 = getsockopt$auto(r2, 0x11b, 0x8, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454ca, 0x5c8d) ioctl$auto(0xc8, 0x800454df, 0x5c8d) getdents64$auto(0xffffffffffffffff, 0x0, 0x7f) read$auto(0xffffffffffffffff, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) write$auto(0xffffffffffffffff, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000030c0)=ANY=[@ANYRES32, @ANYRES32], 0x2c58}, 0x1, 0x0, 0x0, 0x20000040}, 0x8840) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000180), 0x52402, 0x0) ftruncate$auto(r3, 0x400) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 366.263853ms ago: executing program 2 (id=6703): mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb7, 0x8a, 0x4, r0, [0x100, 0x7, 0x7f], {0x2, 0x7, 0x3034, 0xc, 0x8f, 0x5, 0x5, 0xfffffff9, 0x6}, {0x4000, 0x3, 0x0, 0xbffff000, 0x8, 0x20b85, 0x5, 0x837, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x10050}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/security/tomoyo/stat\x00', 0x2c0000, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 102.039591ms ago: executing program 0 (id=6704): r0 = socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') (async) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001100), r0) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0xab2, &(0x7f0000000000)="bb3b3aeeea34c9d2ea768c04bf9688acf472efc267a0a8270961323ea46bb85321945127fa0d1f293fbbd36f803901b347f98f4b4c68204e77b7ce2ca0b9f9521d622707e0e07bd21e467fe5e48f194f1e16a76c0ada348ef10ceeefe99e3d5ef55b5becd70d8fb668b821e841", 0x20, 0x8000000}, 0x6}, 0x6, 0x0) 18.304799ms ago: executing program 4 (id=6705): socket(0x10, 0x2, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0xc008af12, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="0225020000000800030080"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="7201fb84", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) mmap$auto(0xfffffffffffffffc, 0x7, 0x8, 0xeb1, 0xffffffffffffffff, 0x8000000000008000) r1 = socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/smaps_rollup\x00', 0x88882, 0x0) pread64$auto(r0, 0x0, 0x7fff, 0x2) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x40103, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000340)={0x3, 0x1, 0x7, 0x2, 0x9, 0x37, r3, [0x30, 0x9, 0x3], {0x6, 0x7fffffff, 0x7fffffff, 0x80, 0x8, 0x6, 0x80, 0x24eb, 0x3}, {0x9, 0x2, 0x8000, 0x200, 0x9, 0xac, 0x9, 0x2, 0x4}}) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0) r6 = socket(0x2c, 0x3, 0x0) bind$auto(r2, &(0x7f0000000140)=@l2={0x2c, 0x66e, @any, 0x0, 0x3}, 0x6c) sendmsg$auto_NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="80010000", @ANYRES8=r0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x40d0}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000300)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 0s ago: executing program 2 (id=6706): socket(0x5, 0x801, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) listen$auto(0x3, 0xffffff39) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendto$auto(0xffffffffffffffff, 0x0, 0x8000000008000, 0x0, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x5, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x100000006, 0x0, 0x13, 0xfffffffffffffffe, 0x0) io_uring_setup$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) kernel console output (not intermixed with test programs): 0x6d/0x3e0 [ 1474.823989][T27859] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1474.824036][T27859] ? __lock_acquire+0x4a5/0x2630 [ 1474.824074][T27859] ? __lock_acquire+0x4a5/0x2630 [ 1474.824110][T27859] ? __lock_acquire+0x4a5/0x2630 [ 1474.824140][T27859] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1474.824185][T27859] ? policy_nodemask+0xed/0x4f0 [ 1474.824214][T27859] alloc_pages_mpol+0x1fb/0x550 [ 1474.824242][T27859] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1474.824267][T27859] ? page_table_check_set+0x49a/0xa10 [ 1474.824301][T27859] alloc_pages_noprof+0x131/0x390 [ 1474.824338][T27859] pte_alloc_one+0x1c/0x3d0 [ 1474.824367][T27859] __pte_alloc+0x6d/0x3e0 [ 1474.824393][T27859] ? __pfx___pte_alloc+0x10/0x10 [ 1474.824418][T27859] ? __pfx___might_resched+0x10/0x10 [ 1474.824457][T27859] ? copy_page_range+0x1e9d/0x6570 [ 1474.824496][T27859] copy_page_range+0x3e51/0x6570 [ 1474.824563][T27859] ? __pfx_copy_page_range+0x10/0x10 [ 1474.824608][T27859] ? __pfx___might_resched+0x10/0x10 [ 1474.824660][T27859] ? up_write+0x290/0x4f0 [ 1474.824701][T27859] dup_mmap+0xd25/0x2180 [ 1474.824743][T27859] ? __pfx_dup_mmap+0x10/0x10 [ 1474.824772][T27859] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1474.824813][T27859] ? __lock_acquire+0x4a5/0x2630 [ 1474.824846][T27859] ? find_held_lock+0x2b/0x80 [ 1474.824873][T27859] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1474.824926][T27859] copy_process+0x7523/0x7a40 [ 1474.824955][T27859] ? futex_unqueue+0x133/0x2c0 [ 1474.825007][T27859] ? __pfx_copy_process+0x10/0x10 [ 1474.825045][T27859] ? _copy_from_user+0x59/0xd0 [ 1474.825079][T27859] kernel_clone+0xfc/0x9a0 [ 1474.825112][T27859] ? __pfx_kernel_clone+0x10/0x10 [ 1474.825149][T27859] ? __pfx_futex_wait+0x10/0x10 [ 1474.825196][T27859] __do_sys_clone3+0x214/0x290 [ 1474.825227][T27859] ? __pfx___do_sys_clone3+0x10/0x10 [ 1474.825296][T27859] do_syscall_64+0x106/0xf80 [ 1474.825458][T27859] ? clear_bhb_loop+0x40/0x90 [ 1474.825492][T27859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.825519][T27859] RIP: 0033:0x7f877439c799 [ 1474.825541][T27859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.825566][T27859] RSP: 002b:00007f877527fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1474.825591][T27859] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f877439c799 [ 1474.825608][T27859] RDX: 00007f877527ff10 RSI: 0000000000000058 RDI: 00007f877527ff10 [ 1474.825624][T27859] RBP: 00007f8774432c99 R08: 0000000000000000 R09: 0000000000000058 [ 1474.825641][T27859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1474.825658][T27859] R13: 00007f8774616128 R14: 00007f8774616090 R15: 00007ffcbdbf0968 [ 1474.825691][T27859] [ 1475.641301][T27102] Bluetooth: hci4: command 0x0c1a tx timeout [ 1476.168025][T27865] active_anon:26254 inactive_anon:10868 isolated_anon:32 [ 1476.168025][T27865] active_file:12632 inactive_file:41737 isolated_file:0 [ 1476.168025][T27865] unevictable:768 dirty:17 writeback:1 [ 1476.168025][T27865] slab_reclaimable:13013 slab_unreclaimable:102567 [ 1476.168025][T27865] mapped:36268 shmem:9458 pagetables:1523 [ 1476.168025][T27865] sec_pagetables:0 bounce:0 [ 1476.168025][T27865] kernel_misc_reclaimable:0 [ 1476.168025][T27865] free:1286349 free_pcp:6452 free_cma:0 [ 1476.300076][T27865] Node 0 active_anon:104792kB inactive_anon:45036kB active_file:50528kB inactive_file:167064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145684kB dirty:16kB writeback:4kB shmem:37520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:90112kB kernel_stack:13568kB pagetables:5956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1476.454848][T27865] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1476.611308][T27865] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1476.820448][T27865] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1476.867723][T27865] Node 0 DMA32 free:1187028kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104608kB inactive_anon:55552kB active_file:50476kB inactive_file:166952kB unevictable:1536kB writepending:8kB zspages:0kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:24912kB local_pcp:24912kB free_cma:0kB [ 1477.096255][T27865] lowmem_reserve[]: 0 0 1 1 1 [ 1477.119569][T27865] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1477.272026][T27865] lowmem_reserve[]: 0 0 0 0 0 [ 1477.295526][T27865] Node 1 Normal free:3933676kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:192kB free_cma:0kB [ 1477.462036][T27865] lowmem_reserve[]: 0 0 0 0 0 [ 1477.490923][T27865] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1477.550059][T27865] Node 0 DMA32: 6068*4kB (UME) 4673*8kB (UE) 3409*16kB (UME) 1068*32kB (UME) 1230*64kB (UME) 764*128kB (UME) 676*256kB (UME) 420*512kB (UME) 284*1024kB (UME) 28*2048kB (UME) 28*4096kB (UM) = 1177832kB [ 1477.660056][T27865] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1477.730787][T27865] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 12*16kB (UM) 1*32kB (M) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 958*4096kB (UM) = 3933676kB [ 1477.813522][T27865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1477.872038][T27865] Node 0 hugepages_total=5 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1477.922223][T27865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1477.971942][T27865] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1478.024687][T27865] 72724 total pagecache pages [ 1478.057577][T27865] 4 pages in swap cache [ 1478.088726][T27865] Free swap = 86660kB [ 1478.106264][T27865] Total swap = 124996kB [ 1478.145535][T27865] 2097051 pages RAM [ 1478.172334][T27865] 0 pages HighMem/MovableOnly [ 1478.200733][T27865] 430826 pages reserved [ 1478.220653][T27865] 0 pages cma reserved [ 1478.232189][T27865] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1478.634886][T27894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6373'. [ 1479.113502][T27897] zswap: compressor not available [ 1479.446335][T27911] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1482.203535][T27929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6378'. [ 1483.460547][T27944] FAULT_INJECTION: forcing a failure. [ 1483.460547][T27944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1483.552473][T27944] CPU: 0 UID: 0 PID: 27944 Comm: syz.0.6382 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1483.552517][T27944] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1483.552528][T27944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1483.552554][T27944] Call Trace: [ 1483.552563][T27944] [ 1483.552573][T27944] dump_stack_lvl+0x100/0x190 [ 1483.552617][T27944] should_fail_ex.cold+0x5/0xa [ 1483.552642][T27944] ? prepare_alloc_pages+0x16d/0x5f0 [ 1483.552674][T27944] should_fail_alloc_page+0xeb/0x140 [ 1483.552706][T27944] prepare_alloc_pages+0x1f0/0x5f0 [ 1483.552740][T27944] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1483.552793][T27944] ? find_held_lock+0x2b/0x80 [ 1483.552817][T27944] ? is_bpf_text_address+0x8a/0x1a0 [ 1483.552856][T27944] ? is_bpf_text_address+0x8a/0x1a0 [ 1483.552896][T27944] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1483.552938][T27944] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1483.552966][T27944] ? is_bpf_text_address+0x94/0x1a0 [ 1483.553006][T27944] ? kernel_text_address+0x8d/0x100 [ 1483.553044][T27944] ? __kernel_text_address+0xd/0x30 [ 1483.553082][T27944] ? unwind_get_return_address+0x59/0xa0 [ 1483.553121][T27944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1483.553167][T27944] ? policy_nodemask+0xed/0x4f0 [ 1483.553197][T27944] alloc_pages_mpol+0x1fb/0x550 [ 1483.553226][T27944] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1483.553253][T27944] ? kasan_save_stack+0x30/0x50 [ 1483.553292][T27944] ? kasan_save_track+0x14/0x30 [ 1483.553330][T27944] ? __kasan_kmalloc+0xaa/0xb0 [ 1483.553368][T27944] ? __get_vm_area_node+0x101/0x330 [ 1483.553396][T27944] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1483.553434][T27944] alloc_pages_noprof+0x131/0x390 [ 1483.553463][T27944] get_free_pages_noprof+0x10/0xb0 [ 1483.553489][T27944] __kasan_populate_vmalloc+0xa0/0x210 [ 1483.553535][T27944] alloc_vmap_area+0x95d/0x2bd0 [ 1483.553582][T27944] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1483.553617][T27944] __get_vm_area_node+0x1ca/0x330 [ 1483.553653][T27944] __vmalloc_node_range_noprof+0x213/0x1530 [ 1483.553687][T27944] ? n_tty_open+0x1a/0x170 [ 1483.553714][T27944] ? look_up_lock_class+0x64/0x120 [ 1483.553757][T27944] ? n_tty_open+0x1a/0x170 [ 1483.553790][T27944] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1483.553825][T27944] ? __ldsem_down_write_nested+0xfd/0x830 [ 1483.553852][T27944] ? __ldsem_down_write_nested+0x10e/0x830 [ 1483.553879][T27944] ? is_console_locked+0x9/0x20 [ 1483.553916][T27944] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1483.553947][T27944] ? n_tty_open+0x1a/0x170 [ 1483.553970][T27944] __vmalloc_node_noprof+0xad/0xf0 [ 1483.554002][T27944] ? n_tty_open+0x1a/0x170 [ 1483.554028][T27944] ? __pfx_n_tty_open+0x10/0x10 [ 1483.554052][T27944] n_tty_open+0x1a/0x170 [ 1483.554077][T27944] tty_ldisc_open+0xa2/0x120 [ 1483.554111][T27944] tty_ldisc_setup+0x40/0xf0 [ 1483.554147][T27944] tty_init_dev.part.0+0x1b5/0x470 [ 1483.554191][T27944] tty_open+0xa63/0xfa0 [ 1483.554235][T27944] ? __pfx_tty_open+0x10/0x10 [ 1483.554273][T27944] ? chrdev_open+0x10b/0x6a0 [ 1483.554298][T27944] ? chrdev_open+0x10b/0x6a0 [ 1483.554329][T27944] ? __pfx_tty_open+0x10/0x10 [ 1483.554368][T27944] chrdev_open+0x234/0x6a0 [ 1483.554393][T27944] ? __pfx_apparmor_file_open+0x10/0x10 [ 1483.554420][T27944] ? __pfx_chrdev_open+0x10/0x10 [ 1483.554448][T27944] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1483.554482][T27944] do_dentry_open+0x6d8/0x1660 [ 1483.554508][T27944] ? __pfx_chrdev_open+0x10/0x10 [ 1483.554548][T27944] vfs_open+0x82/0x3f0 [ 1483.554585][T27944] path_openat+0x208c/0x31a0 [ 1483.554622][T27944] ? __pfx_path_openat+0x10/0x10 [ 1483.554661][T27944] do_file_open+0x20e/0x430 [ 1483.554689][T27944] ? __pfx_do_file_open+0x10/0x10 [ 1483.554739][T27944] ? alloc_fd+0x476/0x790 [ 1483.554767][T27944] ? do_getname+0x191/0x390 [ 1483.554803][T27944] do_sys_openat2+0x10d/0x1e0 [ 1483.554837][T27944] ? __pfx_do_sys_openat2+0x10/0x10 [ 1483.554883][T27944] __x64_sys_openat+0x12d/0x210 [ 1483.554918][T27944] ? __pfx___x64_sys_openat+0x10/0x10 [ 1483.554965][T27944] do_syscall_64+0x106/0xf80 [ 1483.555001][T27944] ? clear_bhb_loop+0x40/0x90 [ 1483.555033][T27944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.555059][T27944] RIP: 0033:0x7ff88a79c799 [ 1483.555080][T27944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.555106][T27944] RSP: 002b:00007ff88b5ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1483.555131][T27944] RAX: ffffffffffffffda RBX: 00007ff88aa15fa0 RCX: 00007ff88a79c799 [ 1483.555148][T27944] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1483.555165][T27944] RBP: 00007ff88a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1483.555182][T27944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.555198][T27944] R13: 00007ff88aa16038 R14: 00007ff88aa15fa0 R15: 00007fffe4a245f8 [ 1483.555231][T27944] [ 1483.555271][T27944] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1484.685251][T27952] netlink: 'syz.4.6385': attribute type 3 has an invalid length. [ 1484.922084][T27952] Invalid ELF header magic: != ELF [ 1485.059813][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.077588][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.467457][T27949] FAULT_INJECTION: forcing a failure. [ 1485.467457][T27949] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1485.483654][T27949] CPU: 0 UID: 0 PID: 27949 Comm: syz.3.6384 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1485.483696][T27949] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1485.483707][T27949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1485.483722][T27949] Call Trace: [ 1485.483731][T27949] [ 1485.483741][T27949] dump_stack_lvl+0x100/0x190 [ 1485.483787][T27949] should_fail_ex.cold+0x5/0xa [ 1485.483821][T27949] ? prepare_alloc_pages+0x16d/0x5f0 [ 1485.483854][T27949] should_fail_alloc_page+0xeb/0x140 [ 1485.483883][T27949] prepare_alloc_pages+0x1f0/0x5f0 [ 1485.483918][T27949] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1485.483971][T27949] ? find_held_lock+0x2b/0x80 [ 1485.483995][T27949] ? is_bpf_text_address+0x8a/0x1a0 [ 1485.484035][T27949] ? is_bpf_text_address+0x8a/0x1a0 [ 1485.484075][T27949] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1485.484116][T27949] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1485.484144][T27949] ? is_bpf_text_address+0x94/0x1a0 [ 1485.484184][T27949] ? kernel_text_address+0x8d/0x100 [ 1485.484223][T27949] ? __kernel_text_address+0xd/0x30 [ 1485.484261][T27949] ? unwind_get_return_address+0x59/0xa0 [ 1485.484300][T27949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1485.484348][T27949] ? policy_nodemask+0xed/0x4f0 [ 1485.484377][T27949] alloc_pages_mpol+0x1fb/0x550 [ 1485.484406][T27949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1485.484433][T27949] ? kasan_save_stack+0x30/0x50 [ 1485.484471][T27949] ? kasan_save_track+0x14/0x30 [ 1485.484510][T27949] ? __kasan_kmalloc+0xaa/0xb0 [ 1485.484548][T27949] ? __get_vm_area_node+0x101/0x330 [ 1485.484575][T27949] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1485.484612][T27949] alloc_pages_noprof+0x131/0x390 [ 1485.484642][T27949] get_free_pages_noprof+0x10/0xb0 [ 1485.484671][T27949] __kasan_populate_vmalloc+0xa0/0x210 [ 1485.484718][T27949] alloc_vmap_area+0x95d/0x2bd0 [ 1485.484757][T27949] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1485.484791][T27949] __get_vm_area_node+0x1ca/0x330 [ 1485.484942][T27949] __vmalloc_node_range_noprof+0x213/0x1530 [ 1485.484985][T27949] ? n_tty_open+0x1a/0x170 [ 1485.485013][T27949] ? look_up_lock_class+0x64/0x120 [ 1485.485166][T27949] ? n_tty_open+0x1a/0x170 [ 1485.485203][T27949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1485.485240][T27949] ? __ldsem_down_write_nested+0xfd/0x830 [ 1485.485266][T27949] ? __ldsem_down_write_nested+0x10e/0x830 [ 1485.485304][T27949] ? is_console_locked+0x9/0x20 [ 1485.485340][T27949] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1485.485371][T27949] ? n_tty_open+0x1a/0x170 [ 1485.485397][T27949] __vmalloc_node_noprof+0xad/0xf0 [ 1485.485431][T27949] ? n_tty_open+0x1a/0x170 [ 1485.485456][T27949] ? __pfx_n_tty_open+0x10/0x10 [ 1485.485481][T27949] n_tty_open+0x1a/0x170 [ 1485.485506][T27949] tty_ldisc_open+0xa2/0x120 [ 1485.485540][T27949] tty_ldisc_setup+0x40/0xf0 [ 1485.485576][T27949] tty_init_dev.part.0+0x1b5/0x470 [ 1485.485620][T27949] tty_open+0xa63/0xfa0 [ 1485.485664][T27949] ? __pfx_tty_open+0x10/0x10 [ 1485.485703][T27949] ? chrdev_open+0x10b/0x6a0 [ 1485.485728][T27949] ? chrdev_open+0x10b/0x6a0 [ 1485.485759][T27949] ? __pfx_tty_open+0x10/0x10 [ 1485.485798][T27949] chrdev_open+0x234/0x6a0 [ 1485.485824][T27949] ? __pfx_apparmor_file_open+0x10/0x10 [ 1485.485850][T27949] ? __pfx_chrdev_open+0x10/0x10 [ 1485.485878][T27949] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1485.485921][T27949] do_dentry_open+0x6d8/0x1660 [ 1485.485946][T27949] ? __pfx_chrdev_open+0x10/0x10 [ 1485.485980][T27949] vfs_open+0x82/0x3f0 [ 1485.486016][T27949] path_openat+0x208c/0x31a0 [ 1485.486054][T27949] ? __pfx_path_openat+0x10/0x10 [ 1485.486092][T27949] do_file_open+0x20e/0x430 [ 1485.486122][T27949] ? __pfx_do_file_open+0x10/0x10 [ 1485.486170][T27949] ? alloc_fd+0x476/0x790 [ 1485.486198][T27949] ? do_getname+0x191/0x390 [ 1485.486234][T27949] do_sys_openat2+0x10d/0x1e0 [ 1485.486269][T27949] ? __pfx_do_sys_openat2+0x10/0x10 [ 1485.486315][T27949] __x64_sys_openat+0x12d/0x210 [ 1485.486350][T27949] ? __pfx___x64_sys_openat+0x10/0x10 [ 1485.486398][T27949] do_syscall_64+0x106/0xf80 [ 1485.486435][T27949] ? clear_bhb_loop+0x40/0x90 [ 1485.486469][T27949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.486499][T27949] RIP: 0033:0x7ff81599c799 [ 1485.486523][T27949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.486550][T27949] RSP: 002b:00007ff8167b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1485.486575][T27949] RAX: ffffffffffffffda RBX: 00007ff815c15fa0 RCX: 00007ff81599c799 [ 1485.486593][T27949] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1485.486610][T27949] RBP: 00007ff815a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1485.486626][T27949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1485.486642][T27949] R13: 00007ff815c16038 R14: 00007ff815c15fa0 R15: 00007ffc0e1437c8 [ 1485.486675][T27949] [ 1485.486724][T27949] warn_alloc: 2 callbacks suppressed [ 1485.486738][T27949] syz.3.6384: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1486.390133][T27961] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1486.533272][T27961] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1486.539375][T27961] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1486.580181][T27961] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1487.653905][T27949] ,cpuset=/,mems_allowed=0-1 [ 1487.675584][T27949] CPU: 0 UID: 0 PID: 27949 Comm: syz.3.6384 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1487.675627][T27949] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1487.675636][T27949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1487.675651][T27949] Call Trace: [ 1487.675660][T27949] [ 1487.675669][T27949] dump_stack_lvl+0x100/0x190 [ 1487.675711][T27949] warn_alloc.cold+0x95/0x1c1 [ 1487.675755][T27949] ? __pfx_warn_alloc+0x10/0x10 [ 1487.675790][T27949] ? lockdep_hardirqs_on+0x78/0x100 [ 1487.675829][T27949] ? __get_vm_area_node+0x2c5/0x330 [ 1487.675863][T27949] ? __get_vm_area_node+0x208/0x330 [ 1487.675897][T27949] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1487.675931][T27949] ? look_up_lock_class+0x64/0x120 [ 1487.675969][T27949] ? n_tty_open+0x1a/0x170 [ 1487.676002][T27949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1487.676035][T27949] ? __ldsem_down_write_nested+0xfd/0x830 [ 1487.676059][T27949] ? __ldsem_down_write_nested+0x10e/0x830 [ 1487.676083][T27949] ? is_console_locked+0x9/0x20 [ 1487.676119][T27949] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1487.676148][T27949] ? n_tty_open+0x1a/0x170 [ 1487.676170][T27949] __vmalloc_node_noprof+0xad/0xf0 [ 1487.676201][T27949] ? n_tty_open+0x1a/0x170 [ 1487.676231][T27949] ? __pfx_n_tty_open+0x10/0x10 [ 1487.676255][T27949] n_tty_open+0x1a/0x170 [ 1487.676279][T27949] tty_ldisc_open+0xa2/0x120 [ 1487.676311][T27949] tty_ldisc_setup+0x40/0xf0 [ 1487.676344][T27949] tty_init_dev.part.0+0x1b5/0x470 [ 1487.676386][T27949] tty_open+0xa63/0xfa0 [ 1487.676429][T27949] ? __pfx_tty_open+0x10/0x10 [ 1487.676465][T27949] ? chrdev_open+0x10b/0x6a0 [ 1487.676489][T27949] ? chrdev_open+0x10b/0x6a0 [ 1487.676518][T27949] ? __pfx_tty_open+0x10/0x10 [ 1487.676556][T27949] chrdev_open+0x234/0x6a0 [ 1487.676581][T27949] ? __pfx_apparmor_file_open+0x10/0x10 [ 1487.676610][T27949] ? __pfx_chrdev_open+0x10/0x10 [ 1487.676637][T27949] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1487.676670][T27949] do_dentry_open+0x6d8/0x1660 [ 1487.676694][T27949] ? __pfx_chrdev_open+0x10/0x10 [ 1487.676726][T27949] vfs_open+0x82/0x3f0 [ 1487.676761][T27949] path_openat+0x208c/0x31a0 [ 1487.676797][T27949] ? __pfx_path_openat+0x10/0x10 [ 1487.676833][T27949] do_file_open+0x20e/0x430 [ 1487.676861][T27949] ? __pfx_do_file_open+0x10/0x10 [ 1487.676909][T27949] ? alloc_fd+0x476/0x790 [ 1487.676936][T27949] ? do_getname+0x191/0x390 [ 1487.676969][T27949] do_sys_openat2+0x10d/0x1e0 [ 1487.677002][T27949] ? __pfx_do_sys_openat2+0x10/0x10 [ 1487.677045][T27949] __x64_sys_openat+0x12d/0x210 [ 1487.677079][T27949] ? __pfx___x64_sys_openat+0x10/0x10 [ 1487.677124][T27949] do_syscall_64+0x106/0xf80 [ 1487.677158][T27949] ? clear_bhb_loop+0x40/0x90 [ 1487.677188][T27949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.677218][T27949] RIP: 0033:0x7ff81599c799 [ 1487.677239][T27949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.677264][T27949] RSP: 002b:00007ff8167b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1487.677288][T27949] RAX: ffffffffffffffda RBX: 00007ff815c15fa0 RCX: 00007ff81599c799 [ 1487.677304][T27949] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1487.677320][T27949] RBP: 00007ff815a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1487.677336][T27949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1487.677351][T27949] R13: 00007ff815c16038 R14: 00007ff815c15fa0 R15: 00007ffc0e1437c8 [ 1487.677383][T27949] [ 1488.392335][T27949] Mem-Info: [ 1488.398475][T27949] active_anon:26803 inactive_anon:57446 isolated_anon:0 [ 1488.398475][T27949] active_file:15527 inactive_file:44318 isolated_file:0 [ 1488.398475][T27949] unevictable:768 dirty:29 writeback:0 [ 1488.398475][T27949] slab_reclaimable:13003 slab_unreclaimable:103169 [ 1488.398475][T27949] mapped:65975 shmem:56895 pagetables:1584 [ 1488.398475][T27949] sec_pagetables:0 bounce:0 [ 1488.398475][T27949] kernel_misc_reclaimable:0 [ 1488.398475][T27949] free:1232872 free_pcp:6570 free_cma:0 [ 1488.547042][T27949] Node 0 active_anon:107212kB inactive_anon:234424kB active_file:61904kB inactive_file:177824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:266092kB dirty:116kB writeback:0kB shmem:230648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:90112kB kernel_stack:13536kB pagetables:6200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1488.682450][T27102] Bluetooth: hci3: command 0x0c1a tx timeout [ 1488.700320][T27949] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1488.792596][T27949] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1488.890059][T27102] Bluetooth: hci4: command 0x0c1a tx timeout [ 1488.896269][T27102] Bluetooth: hci1: command 0x0c1a tx timeout [ 1488.904489][T27102] Bluetooth: hci2: command 0x0c1a tx timeout [ 1488.940109][T27949] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1488.950089][T27949] Node 0 DMA32 free:971216kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:107212kB inactive_anon:241488kB active_file:61880kB inactive_file:177928kB unevictable:1536kB writepending:136kB zspages:0kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:25304kB local_pcp:25304kB free_cma:0kB [ 1489.080057][T27949] lowmem_reserve[]: 0 0 1 1 1 [ 1489.087955][T27949] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.194925][T27949] lowmem_reserve[]: 0 0 0 0 0 [ 1489.219825][T27949] Node 1 Normal free:3933868kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.330076][T27949] lowmem_reserve[]: 0 0 0 0 0 [ 1489.340783][T27949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1489.402372][T27949] Node 0 DMA32: 4736*4kB (UE) 4642*8kB (UE) 2919*16kB (UME) 102*32kB (E) 694*64kB (UME) 351*128kB (UME) 431*256kB (UE) 390*512kB (UME) 283*1024kB (UME) 26*2048kB (UME) 28*4096kB (UM) = 963136kB [ 1489.462067][T27949] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1489.543837][T27949] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 12*16kB (UM) 5*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 958*4096kB (UM) = 3933868kB [ 1489.623270][T27949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.666645][T27949] Node 0 hugepages_total=5 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1489.712115][T27949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.770972][T27949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1489.808035][T27949] 122280 total pagecache pages [ 1489.823897][T27949] 3 pages in swap cache [ 1489.886313][T27949] Free swap = 52136kB [ 1489.906341][T27949] Total swap = 124996kB [ 1489.930677][T27949] 2097051 pages RAM [ 1489.953624][T27949] 0 pages HighMem/MovableOnly [ 1489.980725][T27949] 430826 pages reserved [ 1489.999500][T27949] 0 pages cma reserved [ 1490.019617][T27949] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1490.726286][T28008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6396'. [ 1491.292617][T28008] zswap: compressor not available [ 1491.345272][T28016] NFSD: Failed to start, no listeners configured. [ 1492.976468][ T5952] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 1492.976502][ T5952] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 1492.993771][ T5952] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 1492.993822][ T5952] Bluetooth: hci1: adv larger than maximum supported [ 1493.003336][ T5952] Bluetooth: hci1: adv larger than maximum supported [ 1493.010950][ T5952] Bluetooth: hci1: adv larger than maximum supported [ 1493.017964][ T5952] Bluetooth: hci1: adv larger than maximum supported [ 1493.024864][ T5952] Bluetooth: hci1: adv larger than maximum supported [ 1493.031965][ T5952] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1493.601428][T24313] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1362 with max blocks 15 with error 117 [ 1493.717697][T24313] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1493.717697][T24313] [ 1493.733346][T28050] zswap: compressor not available [ 1501.572269][ T5952] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1501.572302][ T5952] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 1501.588281][ T5952] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1501.588325][ T5952] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 1501.597524][ T5952] Bluetooth: hci4: Unknown advertising packet type: 0x76 [ 1501.606910][ T5952] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 1501.618495][ T5952] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1505.462359][T28165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6430'. [ 1506.025704][T28166] zswap: compressor not available [ 1507.199444][T27101] syz-executor invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 1507.230288][T28192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6433'. [ 1507.413216][T27101] CPU: 0 UID: 0 PID: 27101 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1507.413258][T27101] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1507.413267][T27101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1507.413282][T27101] Call Trace: [ 1507.413291][T27101] [ 1507.413301][T27101] dump_stack_lvl+0x100/0x190 [ 1507.413342][T27101] dump_header+0xfb/0x606 [ 1507.413370][T27101] oom_kill_process.cold+0xd/0x330 [ 1507.413399][T27101] out_of_memory+0x340/0x14f0 [ 1507.413442][T27101] ? __pfx_out_of_memory+0x10/0x10 [ 1507.413485][T27101] mem_cgroup_out_of_memory+0xc6/0x130 [ 1507.413520][T27101] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1507.413560][T27101] ? find_held_lock+0x2b/0x80 [ 1507.413589][T27101] ? do_raw_spin_unlock+0x145/0x1e0 [ 1507.413625][T27101] ? _raw_spin_unlock+0x28/0x50 [ 1507.413659][T27101] try_charge_memcg+0x652/0xc90 [ 1507.413691][T27101] ? __pfx_try_charge_memcg+0x10/0x10 [ 1507.413715][T27101] ? rcu_read_unlock+0x17/0x60 [ 1507.413741][T27101] ? rcu_read_unlock+0x17/0x60 [ 1507.413773][T27101] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1507.413813][T27101] obj_cgroup_charge_account+0x33d/0x640 [ 1507.413844][T27101] __memcg_slab_post_alloc_hook+0x2dc/0x990 [ 1507.413883][T27101] __kvmalloc_node_noprof+0x78f/0xa00 [ 1507.413921][T27101] ? xt_alloc_table_info+0x44/0xa0 [ 1507.414068][T27101] xt_alloc_table_info+0x44/0xa0 [ 1507.414094][T27101] do_ip6t_set_ctl+0x488/0xb00 [ 1507.414119][T27101] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1507.414168][T27101] ? do_raw_spin_lock+0x128/0x260 [ 1507.414215][T27101] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1507.414243][T27101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1507.414295][T27101] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1507.414323][T27101] nf_setsockopt+0x8d/0xf0 [ 1507.414350][T27101] ipv6_setsockopt+0x135/0x170 [ 1507.414432][T27101] tcp_setsockopt+0xa7/0x100 [ 1507.414498][T27101] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1507.414525][T27101] do_sock_setsockopt+0xf3/0x1d0 [ 1507.414569][T27101] __sys_setsockopt+0x119/0x190 [ 1507.414608][T27101] __x64_sys_setsockopt+0xbd/0x160 [ 1507.414641][T27101] ? do_syscall_64+0x95/0xf80 [ 1507.414675][T27101] ? lockdep_hardirqs_on+0x78/0x100 [ 1507.414710][T27101] do_syscall_64+0x106/0xf80 [ 1507.414743][T27101] ? clear_bhb_loop+0x40/0x90 [ 1507.414773][T27101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.414801][T27101] RIP: 0033:0x7f66b0d9dfda [ 1507.414822][T27101] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 1507.414847][T27101] RSP: 002b:00007ffdd50bb7a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1507.414871][T27101] RAX: ffffffffffffffda RBX: 00007ffdd50bb830 RCX: 00007f66b0d9dfda [ 1507.414888][T27101] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1507.414903][T27101] RBP: 0000000000000003 R08: 00000000000002e8 R09: 0000000000000000 [ 1507.414918][T27101] R10: 00007f66b0fe92a0 R11: 0000000000000206 R12: 00007f66b0fe9240 [ 1507.414934][T27101] R13: 00007ffdd50bb7cc R14: 0000000000000000 R15: 00007f66b0fe9fc0 [ 1507.414966][T27101] [ 1507.416920][T27101] memory: usage 3072kB, limit 3072kB, failcnt 31971 [ 1508.294906][T24335] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1375 with max blocks 2 with error 117 [ 1508.410070][T24335] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1508.410070][T24335] [ 1509.887434][T28223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6441'. [ 1510.373958][T28223] zswap: compressor not available [ 1510.448518][T27736] syz.4.6344 (27736) used greatest stack depth: 19224 bytes left [ 1510.526266][T27101] memory+swap: usage 12704kB, limit 9007199254740988kB, failcnt 0 [ 1510.582679][T27101] kmem: usage 984kB, limit 9007199254740988kB, failcnt 0 [ 1510.589786][T27101] Memory cgroup stats for /syz4: [ 1510.643110][T27101] cache 1302528 [ 1510.682277][T27101] rss 49152 [ 1510.685621][T27101] rss_huge 0 [ 1510.730016][T27101] shmem 1302528 [ 1510.733733][T27101] mapped_file 524288 [ 1510.737688][T27101] dirty 0 [ 1510.790044][T27101] writeback 0 [ 1510.810042][T27101] workingset_refault_anon 7578 [ 1510.870828][T27101] workingset_refault_file 5247 [ 1510.875856][T27101] swap 10440704 [ 1510.900083][T27101] swapcached 165548032 [ 1510.919998][T27101] pgpgin 423749 [ 1510.945174][T27101] pgpgout 467878 [ 1510.948859][T27101] pgfault 245819 [ 1510.974202][T27101] pgmajfault 1325 [ 1510.977883][T27101] inactive_anon 815104 [ 1511.011351][T27101] active_anon 536576 [ 1511.015313][T27101] inactive_file 0 [ 1511.018979][T27101] active_file 0 [ 1511.077801][T27101] unevictable 0 [ 1511.095019][T27101] hierarchical_memory_limit 3145728 [ 1511.141460][T27101] hierarchical_memsw_limit 9223372036854771712 [ 1511.174557][T27101] total_cache 1302528 [ 1511.205228][T27101] total_rss 49152 [ 1511.226787][T27101] total_rss_huge 0 [ 1511.250256][T27101] total_shmem 1302528 [ 1511.270006][T27101] total_mapped_file 524288 [ 1511.302776][T27101] total_dirty 0 [ 1511.306290][T27101] total_writeback 0 [ 1511.360338][T27101] total_workingset_refault_anon 7578 [ 1511.365713][T27101] total_workingset_refault_file 5247 [ 1511.404601][T27101] total_swap 10440704 [ 1511.408653][T27101] total_swapcached 165548032 [ 1511.464790][T27101] total_pgpgin 423749 [ 1511.468849][T27101] total_pgpgout 467878 [ 1511.512773][T27101] total_pgfault 245819 [ 1511.534289][T27101] total_pgmajfault 1325 [ 1511.556830][T27101] total_inactive_anon 815104 [ 1511.574959][T27101] total_active_anon 536576 [ 1511.579422][T27101] total_inactive_file 0 [ 1511.605484][T27101] total_active_file 0 [ 1511.628716][T27101] total_unevictable 0 [ 1511.633078][T27101] anon_cost 46 [ 1511.636473][T27101] file_cost 0 [ 1511.657309][T27101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6415,pid=28103,uid=0 [ 1511.720317][T27101] Memory cgroup out of memory: Killed process 28103 (syz.4.6415) total-vm:135188kB, anon-rss:3200kB, file-rss:22248kB, shmem-rss:512kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 1511.971586][T28103] syz.4.6415 (28103) used greatest stack depth: 17752 bytes left [ 1512.354238][T28241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1512.388565][T28241] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1512.429429][T28241] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1512.451062][T28241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1513.462746][T28273] FAULT_INJECTION: forcing a failure. [ 1513.462746][T28273] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.639306][T28273] CPU: 0 UID: 8 PID: 28273 Comm: syz.0.6447 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1513.639350][T28273] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1513.639360][T28273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1513.639376][T28273] Call Trace: [ 1513.639385][T28273] [ 1513.639395][T28273] dump_stack_lvl+0x100/0x190 [ 1513.639438][T28273] should_fail_ex.cold+0x5/0xa [ 1513.639467][T28273] should_failslab+0xc2/0x120 [ 1513.639494][T28273] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1513.639534][T28273] ? cred_alloc_blank+0x1c/0xa0 [ 1513.639573][T28273] ? __x64_sys_futex+0x34f/0x4d0 [ 1513.639606][T28273] ? __x64_sys_futex+0x358/0x4d0 [ 1513.639644][T28273] cred_alloc_blank+0x1c/0xa0 [ 1513.639683][T28273] keyctl_session_to_parent+0x55/0xae0 [ 1513.639716][T28273] __do_sys_keyctl+0x2b1/0x5a0 [ 1513.639743][T28273] do_syscall_64+0x106/0xf80 [ 1513.639780][T28273] ? clear_bhb_loop+0x40/0x90 [ 1513.639811][T28273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.639838][T28273] RIP: 0033:0x7ff88a79c799 [ 1513.639858][T28273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1513.639884][T28273] RSP: 002b:00007ff88b5aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1513.639913][T28273] RAX: ffffffffffffffda RBX: 00007ff88aa16180 RCX: 00007ff88a79c799 [ 1513.639930][T28273] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 1513.639947][T28273] RBP: 00007ff88a832c99 R08: 0000000000000001 R09: 0000000000000000 [ 1513.639962][T28273] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 1513.639978][T28273] R13: 00007ff88aa16218 R14: 00007ff88aa16180 R15: 00007fffe4a245f8 [ 1513.640009][T28273] [ 1513.991949][T28276] netlink: 350 bytes leftover after parsing attributes in process `syz.2.6448'. [ 1514.003959][T28276] random: crng reseeded on system resumption [ 1514.026539][T28276] Restarting kernel threads ... [ 1514.040555][T28276] Done restarting kernel threads. [ 1514.401603][ T5952] Bluetooth: hci3: command 0x0c1a tx timeout [ 1514.463254][ T5952] Bluetooth: hci4: command 0x0c1a tx timeout [ 1514.469434][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 1514.476393][T27102] Bluetooth: hci2: command 0x0c1a tx timeout [ 1515.400841][T28294] netlink: 'syz.4.6452': attribute type 2 has an invalid length. [ 1519.586990][T28396] FAULT_INJECTION: forcing a failure. [ 1519.586990][T28396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1519.685156][T28396] CPU: 0 UID: 0 PID: 28396 Comm: syz.2.6466 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1519.685201][T28396] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1519.685211][T28396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1519.685228][T28396] Call Trace: [ 1519.685237][T28396] [ 1519.685246][T28396] dump_stack_lvl+0x100/0x190 [ 1519.685291][T28396] should_fail_ex.cold+0x5/0xa [ 1519.685316][T28396] ? prepare_alloc_pages+0x16d/0x5f0 [ 1519.685349][T28396] should_fail_alloc_page+0xeb/0x140 [ 1519.685379][T28396] prepare_alloc_pages+0x1f0/0x5f0 [ 1519.685414][T28396] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1519.685459][T28396] ? rcu_is_watching+0x12/0xc0 [ 1519.685499][T28396] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1519.685529][T28396] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1519.685574][T28396] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1519.685629][T28396] ? find_held_lock+0x2b/0x80 [ 1519.685653][T28396] ? is_bpf_text_address+0x8a/0x1a0 [ 1519.685693][T28396] ? is_bpf_text_address+0x8a/0x1a0 [ 1519.685735][T28396] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1519.685764][T28396] ? is_bpf_text_address+0x94/0x1a0 [ 1519.685804][T28396] ? kernel_text_address+0x8d/0x100 [ 1519.685843][T28396] ? __kernel_text_address+0xd/0x30 [ 1519.685881][T28396] ? unwind_get_return_address+0x59/0xa0 [ 1519.685918][T28396] alloc_pages_bulk_noprof+0x782/0x1490 [ 1519.685970][T28396] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1519.686013][T28396] ? kasan_save_stack+0x30/0x50 [ 1519.686060][T28396] ? alloc_pages_noprof+0x233/0x390 [ 1519.686090][T28396] __kasan_populate_vmalloc+0xf0/0x210 [ 1519.686137][T28396] alloc_vmap_area+0x95d/0x2bd0 [ 1519.686176][T28396] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1519.686212][T28396] __get_vm_area_node+0x1ca/0x330 [ 1519.686247][T28396] __vmalloc_node_range_noprof+0x213/0x1530 [ 1519.686281][T28396] ? n_tty_open+0x1a/0x170 [ 1519.686307][T28396] ? look_up_lock_class+0x64/0x120 [ 1519.686348][T28396] ? n_tty_open+0x1a/0x170 [ 1519.686380][T28396] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1519.686414][T28396] ? __ldsem_down_write_nested+0xfd/0x830 [ 1519.686441][T28396] ? __ldsem_down_write_nested+0x10e/0x830 [ 1519.686467][T28396] ? is_console_locked+0x9/0x20 [ 1519.686502][T28396] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1519.686533][T28396] ? n_tty_open+0x1a/0x170 [ 1519.686556][T28396] __vmalloc_node_noprof+0xad/0xf0 [ 1519.686598][T28396] ? n_tty_open+0x1a/0x170 [ 1519.686624][T28396] ? __pfx_n_tty_open+0x10/0x10 [ 1519.686649][T28396] n_tty_open+0x1a/0x170 [ 1519.686674][T28396] tty_ldisc_open+0xa2/0x120 [ 1519.686709][T28396] tty_ldisc_setup+0x40/0xf0 [ 1519.686744][T28396] tty_init_dev.part.0+0x1b5/0x470 [ 1519.686789][T28396] tty_open+0xa63/0xfa0 [ 1519.686833][T28396] ? __pfx_tty_open+0x10/0x10 [ 1519.686871][T28396] ? chrdev_open+0x10b/0x6a0 [ 1519.686896][T28396] ? chrdev_open+0x10b/0x6a0 [ 1519.686926][T28396] ? __pfx_tty_open+0x10/0x10 [ 1519.686966][T28396] chrdev_open+0x234/0x6a0 [ 1519.686991][T28396] ? __pfx_apparmor_file_open+0x10/0x10 [ 1519.687017][T28396] ? __pfx_chrdev_open+0x10/0x10 [ 1519.687046][T28396] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1519.687080][T28396] do_dentry_open+0x6d8/0x1660 [ 1519.687105][T28396] ? __pfx_chrdev_open+0x10/0x10 [ 1519.687139][T28396] vfs_open+0x82/0x3f0 [ 1519.687175][T28396] path_openat+0x208c/0x31a0 [ 1519.687211][T28396] ? __pfx_path_openat+0x10/0x10 [ 1519.687249][T28396] do_file_open+0x20e/0x430 [ 1519.687278][T28396] ? __pfx_do_file_open+0x10/0x10 [ 1519.687326][T28396] ? alloc_fd+0x476/0x790 [ 1519.687354][T28396] ? do_getname+0x191/0x390 [ 1519.687389][T28396] do_sys_openat2+0x10d/0x1e0 [ 1519.687430][T28396] ? __pfx_do_sys_openat2+0x10/0x10 [ 1519.687476][T28396] __x64_sys_openat+0x12d/0x210 [ 1519.687512][T28396] ? __pfx___x64_sys_openat+0x10/0x10 [ 1519.687560][T28396] do_syscall_64+0x106/0xf80 [ 1519.687602][T28396] ? clear_bhb_loop+0x40/0x90 [ 1519.687634][T28396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.687661][T28396] RIP: 0033:0x7f877439c799 [ 1519.687682][T28396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.687708][T28396] RSP: 002b:00007f87752a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1519.687734][T28396] RAX: ffffffffffffffda RBX: 00007f8774615fa0 RCX: 00007f877439c799 [ 1519.687751][T28396] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1519.687768][T28396] RBP: 00007f8774432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1519.687784][T28396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1519.687801][T28396] R13: 00007f8774616038 R14: 00007f8774615fa0 R15: 00007ffcbdbf0968 [ 1519.687834][T28396] [ 1519.687888][T28396] warn_alloc: 2 callbacks suppressed [ 1519.687902][T28396] syz.2.6466: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1520.618465][T28402] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1520.811781][T28404] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1522.129153][T28396] ,cpuset=/,mems_allowed=0-1 [ 1522.159659][T28396] CPU: 0 UID: 0 PID: 28396 Comm: syz.2.6466 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1522.159702][T28396] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1522.159711][T28396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1522.159727][T28396] Call Trace: [ 1522.159735][T28396] [ 1522.159745][T28396] dump_stack_lvl+0x100/0x190 [ 1522.159788][T28396] warn_alloc.cold+0x95/0x1c1 [ 1522.159832][T28396] ? __pfx_warn_alloc+0x10/0x10 [ 1522.159868][T28396] ? lockdep_hardirqs_on+0x78/0x100 [ 1522.159914][T28396] ? __get_vm_area_node+0x2c5/0x330 [ 1522.159949][T28396] ? __get_vm_area_node+0x208/0x330 [ 1522.159991][T28396] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1522.160025][T28396] ? look_up_lock_class+0x64/0x120 [ 1522.160064][T28396] ? n_tty_open+0x1a/0x170 [ 1522.160098][T28396] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1522.160131][T28396] ? __ldsem_down_write_nested+0xfd/0x830 [ 1522.160156][T28396] ? __ldsem_down_write_nested+0x10e/0x830 [ 1522.160180][T28396] ? is_console_locked+0x9/0x20 [ 1522.160215][T28396] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1522.160245][T28396] ? n_tty_open+0x1a/0x170 [ 1522.160267][T28396] __vmalloc_node_noprof+0xad/0xf0 [ 1522.160304][T28396] ? n_tty_open+0x1a/0x170 [ 1522.160328][T28396] ? __pfx_n_tty_open+0x10/0x10 [ 1522.160352][T28396] n_tty_open+0x1a/0x170 [ 1522.160375][T28396] tty_ldisc_open+0xa2/0x120 [ 1522.160407][T28396] tty_ldisc_setup+0x40/0xf0 [ 1522.160441][T28396] tty_init_dev.part.0+0x1b5/0x470 [ 1522.160491][T28396] tty_open+0xa63/0xfa0 [ 1522.160534][T28396] ? __pfx_tty_open+0x10/0x10 [ 1522.160570][T28396] ? chrdev_open+0x10b/0x6a0 [ 1522.160595][T28396] ? chrdev_open+0x10b/0x6a0 [ 1522.160625][T28396] ? __pfx_tty_open+0x10/0x10 [ 1522.160662][T28396] chrdev_open+0x234/0x6a0 [ 1522.160686][T28396] ? __pfx_apparmor_file_open+0x10/0x10 [ 1522.160713][T28396] ? __pfx_chrdev_open+0x10/0x10 [ 1522.160740][T28396] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1522.160779][T28396] do_dentry_open+0x6d8/0x1660 [ 1522.160803][T28396] ? __pfx_chrdev_open+0x10/0x10 [ 1522.160835][T28396] vfs_open+0x82/0x3f0 [ 1522.160869][T28396] path_openat+0x208c/0x31a0 [ 1522.160905][T28396] ? __pfx_path_openat+0x10/0x10 [ 1522.160941][T28396] do_file_open+0x20e/0x430 [ 1522.160969][T28396] ? __pfx_do_file_open+0x10/0x10 [ 1522.161016][T28396] ? alloc_fd+0x476/0x790 [ 1522.161043][T28396] ? do_getname+0x191/0x390 [ 1522.161077][T28396] do_sys_openat2+0x10d/0x1e0 [ 1522.161109][T28396] ? __pfx_do_sys_openat2+0x10/0x10 [ 1522.161153][T28396] __x64_sys_openat+0x12d/0x210 [ 1522.161186][T28396] ? __pfx___x64_sys_openat+0x10/0x10 [ 1522.161231][T28396] do_syscall_64+0x106/0xf80 [ 1522.161265][T28396] ? clear_bhb_loop+0x40/0x90 [ 1522.161295][T28396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.161321][T28396] RIP: 0033:0x7f877439c799 [ 1522.161341][T28396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.161366][T28396] RSP: 002b:00007f87752a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1522.161390][T28396] RAX: ffffffffffffffda RBX: 00007f8774615fa0 RCX: 00007f877439c799 [ 1522.161406][T28396] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1522.161423][T28396] RBP: 00007f8774432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1522.161438][T28396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.161453][T28396] R13: 00007f8774616038 R14: 00007f8774615fa0 R15: 00007ffcbdbf0968 [ 1522.161491][T28396] [ 1523.723686][T28396] Mem-Info: [ 1523.744651][T28396] active_anon:26112 inactive_anon:4615 isolated_anon:0 [ 1523.744651][T28396] active_file:20789 inactive_file:37838 isolated_file:0 [ 1523.744651][T28396] unevictable:768 dirty:58 writeback:0 [ 1523.744651][T28396] slab_reclaimable:13245 slab_unreclaimable:102188 [ 1523.744651][T28396] mapped:35649 shmem:1732 pagetables:1472 [ 1523.744651][T28396] sec_pagetables:0 bounce:0 [ 1523.744651][T28396] kernel_misc_reclaimable:0 [ 1523.744651][T28396] free:1282681 free_pcp:12381 free_cma:0 [ 1524.029714][T28396] Node 0 active_anon:104344kB inactive_anon:12368kB active_file:83152kB inactive_file:151228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142596kB dirty:280kB writeback:0kB shmem:5600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:90112kB kernel_stack:13312kB pagetables:5544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1524.196089][T28396] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1524.364368][T28396] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.505022][T28396] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1524.531613][T28396] Node 0 DMA32 free:1194632kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104336kB inactive_anon:14436kB active_file:83152kB inactive_file:151228kB unevictable:1536kB writepending:280kB zspages:0kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:41156kB local_pcp:41156kB free_cma:0kB [ 1524.654442][T28396] lowmem_reserve[]: 0 0 1 1 1 [ 1524.671989][T28396] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.797077][T28396] lowmem_reserve[]: 0 0 0 0 0 [ 1524.823011][T28396] Node 1 Normal free:3924700kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9168kB local_pcp:9168kB free_cma:0kB [ 1525.027929][T28396] lowmem_reserve[]: 0 0 0 0 0 [ 1525.076171][T28396] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1525.166127][T28396] Node 0 DMA32: 6704*4kB (UME) 6567*8kB (UME) 4447*16kB (UME) 1469*32kB (UME) 1364*64kB (UME) 759*128kB (UME) 645*256kB (UME) 396*512kB (UME) 277*1024kB (UME) 23*2048kB (UME) 28*4096kB (UM) = 1195272kB [ 1525.320309][T28396] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1525.392651][T28396] Node 1 Normal: 5*4kB (UM) 7*8kB (UM) 13*16kB (UM) 6*32kB (UM) 6*64kB (UM) 5*128kB (UM) 1*256kB (U) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 957*4096kB (UM) = 3924700kB [ 1525.471006][T28396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.518647][T28396] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1525.571172][T28396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.616462][T28396] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1525.671396][T28396] 60323 total pagecache pages [ 1525.693755][T28396] 9 pages in swap cache [ 1525.711162][T28396] Free swap = 77900kB [ 1525.739334][T28396] Total swap = 124996kB [ 1525.773982][T28396] 2097051 pages RAM [ 1525.811360][T28396] 0 pages HighMem/MovableOnly [ 1525.825169][T28396] 430826 pages reserved [ 1525.852729][T28396] 0 pages cma reserved [ 1525.865600][T28396] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1526.823700][T28496] nbd: must specify a device to reconfigure [ 1528.740529][T28529] FAULT_INJECTION: forcing a failure. [ 1528.740529][T28529] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1528.798869][T28519] FAULT_INJECTION: forcing a failure. [ 1528.798869][T28519] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.832541][T28529] CPU: 0 UID: 0 PID: 28529 Comm: syz.0.6486 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1528.832585][T28529] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1528.832595][T28529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1528.832610][T28529] Call Trace: [ 1528.832619][T28529] [ 1528.832628][T28529] dump_stack_lvl+0x100/0x190 [ 1528.832673][T28529] should_fail_ex.cold+0x5/0xa [ 1528.832698][T28529] ? prepare_alloc_pages+0x16d/0x5f0 [ 1528.832730][T28529] should_fail_alloc_page+0xeb/0x140 [ 1528.832760][T28529] prepare_alloc_pages+0x1f0/0x5f0 [ 1528.832802][T28529] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1528.832847][T28529] ? rcu_is_watching+0x12/0xc0 [ 1528.832887][T28529] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1528.832917][T28529] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1528.832962][T28529] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1528.833007][T28529] ? find_held_lock+0x2b/0x80 [ 1528.833032][T28529] ? is_bpf_text_address+0x8a/0x1a0 [ 1528.833071][T28529] ? is_bpf_text_address+0x8a/0x1a0 [ 1528.833114][T28529] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1528.833143][T28529] ? is_bpf_text_address+0x94/0x1a0 [ 1528.833182][T28529] ? kernel_text_address+0x8d/0x100 [ 1528.833221][T28529] ? __kernel_text_address+0xd/0x30 [ 1528.833258][T28529] ? unwind_get_return_address+0x59/0xa0 [ 1528.833299][T28529] alloc_pages_bulk_noprof+0x782/0x1490 [ 1528.833350][T28529] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1528.833393][T28529] ? kasan_save_stack+0x30/0x50 [ 1528.833441][T28529] ? alloc_pages_noprof+0x233/0x390 [ 1528.833471][T28529] __kasan_populate_vmalloc+0xf0/0x210 [ 1528.833517][T28529] alloc_vmap_area+0x95d/0x2bd0 [ 1528.833556][T28529] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1528.833591][T28529] __get_vm_area_node+0x1ca/0x330 [ 1528.833626][T28529] __vmalloc_node_range_noprof+0x213/0x1530 [ 1528.833660][T28529] ? n_tty_open+0x1a/0x170 [ 1528.833687][T28529] ? look_up_lock_class+0x64/0x120 [ 1528.833734][T28529] ? n_tty_open+0x1a/0x170 [ 1528.833767][T28529] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1528.833846][T28529] ? __ldsem_down_write_nested+0xfd/0x830 [ 1528.833873][T28529] ? __ldsem_down_write_nested+0x10e/0x830 [ 1528.833898][T28529] ? is_console_locked+0x9/0x20 [ 1528.833935][T28529] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1528.833966][T28529] ? n_tty_open+0x1a/0x170 [ 1528.833989][T28529] __vmalloc_node_noprof+0xad/0xf0 [ 1528.834021][T28529] ? n_tty_open+0x1a/0x170 [ 1528.834047][T28529] ? __pfx_n_tty_open+0x10/0x10 [ 1528.834071][T28529] n_tty_open+0x1a/0x170 [ 1528.834097][T28529] tty_ldisc_open+0xa2/0x120 [ 1528.834131][T28529] tty_ldisc_setup+0x40/0xf0 [ 1528.834167][T28529] tty_init_dev.part.0+0x1b5/0x470 [ 1528.834211][T28529] tty_open+0xa63/0xfa0 [ 1528.834255][T28529] ? __pfx_tty_open+0x10/0x10 [ 1528.834294][T28529] ? chrdev_open+0x10b/0x6a0 [ 1528.834319][T28529] ? chrdev_open+0x10b/0x6a0 [ 1528.834349][T28529] ? __pfx_tty_open+0x10/0x10 [ 1528.834389][T28529] chrdev_open+0x234/0x6a0 [ 1528.834414][T28529] ? __pfx_apparmor_file_open+0x10/0x10 [ 1528.834440][T28529] ? __pfx_chrdev_open+0x10/0x10 [ 1528.834469][T28529] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1528.834503][T28529] do_dentry_open+0x6d8/0x1660 [ 1528.834528][T28529] ? __pfx_chrdev_open+0x10/0x10 [ 1528.834561][T28529] vfs_open+0x82/0x3f0 [ 1528.834597][T28529] path_openat+0x208c/0x31a0 [ 1528.834635][T28529] ? __pfx_path_openat+0x10/0x10 [ 1528.834673][T28529] do_file_open+0x20e/0x430 [ 1528.834702][T28529] ? __pfx_do_file_open+0x10/0x10 [ 1528.834750][T28529] ? alloc_fd+0x476/0x790 [ 1528.834784][T28529] ? do_getname+0x191/0x390 [ 1528.834820][T28529] do_sys_openat2+0x10d/0x1e0 [ 1528.834855][T28529] ? __pfx_do_sys_openat2+0x10/0x10 [ 1528.834901][T28529] __x64_sys_openat+0x12d/0x210 [ 1528.834936][T28529] ? __pfx___x64_sys_openat+0x10/0x10 [ 1528.834983][T28529] do_syscall_64+0x106/0xf80 [ 1528.835019][T28529] ? clear_bhb_loop+0x40/0x90 [ 1528.835051][T28529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.835078][T28529] RIP: 0033:0x7ff88a79c799 [ 1528.835100][T28529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.835125][T28529] RSP: 002b:00007ff88b5ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1528.835150][T28529] RAX: ffffffffffffffda RBX: 00007ff88aa15fa0 RCX: 00007ff88a79c799 [ 1528.835167][T28529] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1528.835183][T28529] RBP: 00007ff88a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1528.835200][T28529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1528.835215][T28529] R13: 00007ff88aa16038 R14: 00007ff88aa15fa0 R15: 00007fffe4a245f8 [ 1528.835248][T28529] [ 1529.383099][T28529] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1529.832323][T28519] CPU: 0 UID: 0 PID: 28519 Comm: syz.4.6482 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1529.832368][T28519] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1529.832378][T28519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1529.832394][T28519] Call Trace: [ 1529.832402][T28519] [ 1529.832412][T28519] dump_stack_lvl+0x100/0x190 [ 1529.832454][T28519] should_fail_ex.cold+0x5/0xa [ 1529.832485][T28519] should_failslab+0xc2/0x120 [ 1529.832514][T28519] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1529.832549][T28519] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 1529.832588][T28519] ? get_mem_cgroup_from_mm+0x88/0x600 [ 1529.832625][T28519] ? get_mem_cgroup_from_mm+0x132/0x600 [ 1529.832676][T28519] __do_sys_fanotify_init+0x5cf/0xe50 [ 1529.832721][T28519] do_syscall_64+0x106/0xf80 [ 1529.832757][T28519] ? clear_bhb_loop+0x40/0x90 [ 1529.832788][T28519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.832815][T28519] RIP: 0033:0x7f66b0d9c799 [ 1529.832836][T28519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.832860][T28519] RSP: 002b:00007f66b1c50028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1529.832884][T28519] RAX: ffffffffffffffda RBX: 00007f66b1016090 RCX: 00007f66b0d9c799 [ 1529.832901][T28519] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 1529.832917][T28519] RBP: 00007f66b0e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1529.832932][T28519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1529.832947][T28519] R13: 00007f66b1016128 R14: 00007f66b1016090 R15: 00007ffdd50bbb38 [ 1529.832979][T28519] [ 1531.473731][T28556] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1532.785806][T28586] FAULT_INJECTION: forcing a failure. [ 1532.785806][T28586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1532.881599][T28586] CPU: 0 UID: 0 PID: 28586 Comm: syz.0.6495 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1532.881642][T28586] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1532.881653][T28586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1532.881669][T28586] Call Trace: [ 1532.881678][T28586] [ 1532.881688][T28586] dump_stack_lvl+0x100/0x190 [ 1532.881732][T28586] should_fail_ex.cold+0x5/0xa [ 1532.881758][T28586] ? prepare_alloc_pages+0x16d/0x5f0 [ 1532.881790][T28586] should_fail_alloc_page+0xeb/0x140 [ 1532.881820][T28586] prepare_alloc_pages+0x1f0/0x5f0 [ 1532.881855][T28586] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1532.881909][T28586] ? find_held_lock+0x2b/0x80 [ 1532.881933][T28586] ? is_bpf_text_address+0x8a/0x1a0 [ 1532.881982][T28586] ? is_bpf_text_address+0x8a/0x1a0 [ 1532.882022][T28586] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1532.882064][T28586] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1532.882094][T28586] ? is_bpf_text_address+0x94/0x1a0 [ 1532.882133][T28586] ? kernel_text_address+0x8d/0x100 [ 1532.882172][T28586] ? __kernel_text_address+0xd/0x30 [ 1532.882210][T28586] ? unwind_get_return_address+0x59/0xa0 [ 1532.882249][T28586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1532.882294][T28586] ? policy_nodemask+0xed/0x4f0 [ 1532.882324][T28586] alloc_pages_mpol+0x1fb/0x550 [ 1532.882352][T28586] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1532.882379][T28586] ? kasan_save_stack+0x30/0x50 [ 1532.882418][T28586] ? kasan_save_track+0x14/0x30 [ 1532.882456][T28586] ? __kasan_kmalloc+0xaa/0xb0 [ 1532.882494][T28586] ? __get_vm_area_node+0x101/0x330 [ 1532.882521][T28586] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1532.882558][T28586] alloc_pages_noprof+0x131/0x390 [ 1532.882587][T28586] get_free_pages_noprof+0x10/0xb0 [ 1532.882613][T28586] __kasan_populate_vmalloc+0xa0/0x210 [ 1532.882659][T28586] alloc_vmap_area+0x95d/0x2bd0 [ 1532.882698][T28586] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1532.882733][T28586] __get_vm_area_node+0x1ca/0x330 [ 1532.882768][T28586] __vmalloc_node_range_noprof+0x213/0x1530 [ 1532.882802][T28586] ? n_tty_open+0x1a/0x170 [ 1532.882828][T28586] ? look_up_lock_class+0x64/0x120 [ 1532.882869][T28586] ? n_tty_open+0x1a/0x170 [ 1532.882902][T28586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1532.882936][T28586] ? __ldsem_down_write_nested+0xfd/0x830 [ 1532.882968][T28586] ? __ldsem_down_write_nested+0x10e/0x830 [ 1532.882993][T28586] ? is_console_locked+0x9/0x20 [ 1532.883030][T28586] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1532.883060][T28586] ? n_tty_open+0x1a/0x170 [ 1532.883083][T28586] __vmalloc_node_noprof+0xad/0xf0 [ 1532.883115][T28586] ? n_tty_open+0x1a/0x170 [ 1532.883140][T28586] ? __pfx_n_tty_open+0x10/0x10 [ 1532.883165][T28586] n_tty_open+0x1a/0x170 [ 1532.883190][T28586] tty_ldisc_open+0xa2/0x120 [ 1532.883223][T28586] tty_ldisc_setup+0x40/0xf0 [ 1532.883259][T28586] tty_init_dev.part.0+0x1b5/0x470 [ 1532.883303][T28586] tty_open+0xa63/0xfa0 [ 1532.883347][T28586] ? __pfx_tty_open+0x10/0x10 [ 1532.883385][T28586] ? chrdev_open+0x10b/0x6a0 [ 1532.883410][T28586] ? chrdev_open+0x10b/0x6a0 [ 1532.883441][T28586] ? __pfx_tty_open+0x10/0x10 [ 1532.883480][T28586] chrdev_open+0x234/0x6a0 [ 1532.883505][T28586] ? __pfx_apparmor_file_open+0x10/0x10 [ 1532.883694][T28586] ? __pfx_chrdev_open+0x10/0x10 [ 1532.883724][T28586] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1532.883759][T28586] do_dentry_open+0x6d8/0x1660 [ 1532.883784][T28586] ? __pfx_chrdev_open+0x10/0x10 [ 1532.883818][T28586] vfs_open+0x82/0x3f0 [ 1532.883854][T28586] path_openat+0x208c/0x31a0 [ 1532.883891][T28586] ? __pfx_path_openat+0x10/0x10 [ 1532.883932][T28586] do_file_open+0x20e/0x430 [ 1532.883962][T28586] ? __pfx_do_file_open+0x10/0x10 [ 1532.884011][T28586] ? alloc_fd+0x476/0x790 [ 1532.884040][T28586] ? do_getname+0x191/0x390 [ 1532.884076][T28586] do_sys_openat2+0x10d/0x1e0 [ 1532.884111][T28586] ? __pfx_do_sys_openat2+0x10/0x10 [ 1532.884157][T28586] __x64_sys_openat+0x12d/0x210 [ 1532.884208][T28586] ? __pfx___x64_sys_openat+0x10/0x10 [ 1532.884256][T28586] do_syscall_64+0x106/0xf80 [ 1532.884294][T28586] ? clear_bhb_loop+0x40/0x90 [ 1532.884328][T28586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.884355][T28586] RIP: 0033:0x7ff88a79c799 [ 1532.884377][T28586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.884402][T28586] RSP: 002b:00007ff88b5ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1532.884472][T28586] RAX: ffffffffffffffda RBX: 00007ff88aa15fa0 RCX: 00007ff88a79c799 [ 1532.884490][T28586] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1532.884507][T28586] RBP: 00007ff88a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1532.884522][T28586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.884538][T28586] R13: 00007ff88aa16038 R14: 00007ff88aa15fa0 R15: 00007fffe4a245f8 [ 1532.884572][T28586] [ 1532.884613][T28586] warn_alloc: 1 callbacks suppressed [ 1532.884626][T28586] syz.0.6495: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1534.988529][T28586] CPU: 0 UID: 0 PID: 28586 Comm: syz.0.6495 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1534.988571][T28586] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1534.988581][T28586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1534.988596][T28586] Call Trace: [ 1534.988604][T28586] [ 1534.988613][T28586] dump_stack_lvl+0x100/0x190 [ 1534.988656][T28586] warn_alloc.cold+0x95/0x1c1 [ 1534.988699][T28586] ? __pfx_warn_alloc+0x10/0x10 [ 1534.988733][T28586] ? lockdep_hardirqs_on+0x78/0x100 [ 1534.988772][T28586] ? __get_vm_area_node+0x2c5/0x330 [ 1534.988807][T28586] ? __get_vm_area_node+0x208/0x330 [ 1534.988841][T28586] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1534.988875][T28586] ? look_up_lock_class+0x64/0x120 [ 1534.988914][T28586] ? n_tty_open+0x1a/0x170 [ 1534.988947][T28586] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1534.988980][T28586] ? __ldsem_down_write_nested+0xfd/0x830 [ 1534.989004][T28586] ? __ldsem_down_write_nested+0x10e/0x830 [ 1534.989029][T28586] ? is_console_locked+0x9/0x20 [ 1534.989063][T28586] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1534.989092][T28586] ? n_tty_open+0x1a/0x170 [ 1534.989115][T28586] __vmalloc_node_noprof+0xad/0xf0 [ 1534.989145][T28586] ? n_tty_open+0x1a/0x170 [ 1534.989169][T28586] ? __pfx_n_tty_open+0x10/0x10 [ 1534.989192][T28586] n_tty_open+0x1a/0x170 [ 1534.989217][T28586] tty_ldisc_open+0xa2/0x120 [ 1534.989249][T28586] tty_ldisc_setup+0x40/0xf0 [ 1534.989282][T28586] tty_init_dev.part.0+0x1b5/0x470 [ 1534.989330][T28586] tty_open+0xa63/0xfa0 [ 1534.989373][T28586] ? __pfx_tty_open+0x10/0x10 [ 1534.989409][T28586] ? chrdev_open+0x10b/0x6a0 [ 1534.989434][T28586] ? chrdev_open+0x10b/0x6a0 [ 1534.989463][T28586] ? __pfx_tty_open+0x10/0x10 [ 1534.989500][T28586] chrdev_open+0x234/0x6a0 [ 1534.989525][T28586] ? __pfx_apparmor_file_open+0x10/0x10 [ 1534.989555][T28586] ? __pfx_chrdev_open+0x10/0x10 [ 1534.989582][T28586] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1534.989615][T28586] do_dentry_open+0x6d8/0x1660 [ 1534.989640][T28586] ? __pfx_chrdev_open+0x10/0x10 [ 1534.989672][T28586] vfs_open+0x82/0x3f0 [ 1534.989706][T28586] path_openat+0x208c/0x31a0 [ 1534.989742][T28586] ? __pfx_path_openat+0x10/0x10 [ 1534.989778][T28586] do_file_open+0x20e/0x430 [ 1534.989806][T28586] ? __pfx_do_file_open+0x10/0x10 [ 1534.989853][T28586] ? alloc_fd+0x476/0x790 [ 1534.989880][T28586] ? do_getname+0x191/0x390 [ 1534.989914][T28586] do_sys_openat2+0x10d/0x1e0 [ 1534.989947][T28586] ? __pfx_do_sys_openat2+0x10/0x10 [ 1534.989990][T28586] __x64_sys_openat+0x12d/0x210 [ 1534.990024][T28586] ? __pfx___x64_sys_openat+0x10/0x10 [ 1534.990069][T28586] do_syscall_64+0x106/0xf80 [ 1534.990102][T28586] ? clear_bhb_loop+0x40/0x90 [ 1534.990133][T28586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.990158][T28586] RIP: 0033:0x7ff88a79c799 [ 1534.990178][T28586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.990203][T28586] RSP: 002b:00007ff88b5ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1534.990226][T28586] RAX: ffffffffffffffda RBX: 00007ff88aa15fa0 RCX: 00007ff88a79c799 [ 1534.990242][T28586] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1534.990258][T28586] RBP: 00007ff88a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1534.990274][T28586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1534.990289][T28586] R13: 00007ff88aa16038 R14: 00007ff88aa15fa0 R15: 00007fffe4a245f8 [ 1534.990327][T28586] [ 1535.891938][T28617] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 1536.005217][T28617] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1536.092795][T28617] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1536.472958][T28586] Mem-Info: [ 1536.486360][T28586] active_anon:30323 inactive_anon:44272 isolated_anon:0 [ 1536.486360][T28586] active_file:20936 inactive_file:37695 isolated_file:0 [ 1536.486360][T28586] unevictable:768 dirty:11 writeback:39 [ 1536.486360][T28586] slab_reclaimable:13205 slab_unreclaimable:102722 [ 1536.486360][T28586] mapped:58154 shmem:47676 pagetables:1462 [ 1536.486360][T28586] sec_pagetables:0 bounce:0 [ 1536.486360][T28586] kernel_misc_reclaimable:0 [ 1536.486360][T28586] free:1241271 free_pcp:9210 free_cma:0 [ 1536.699860][T28586] Node 0 active_anon:121064kB inactive_anon:180060kB active_file:83740kB inactive_file:150656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:235220kB dirty:96kB writeback:0kB shmem:191868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:86016kB kernel_stack:13440kB pagetables:5764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1536.820288][T28586] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1536.934467][T28586] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1537.040091][T28586] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1537.057835][T28586] Node 0 DMA32 free:1016020kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:121064kB inactive_anon:186004kB active_file:83740kB inactive_file:150656kB unevictable:1536kB writepending:148kB zspages:0kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:27828kB local_pcp:27828kB free_cma:0kB [ 1537.146579][T28586] lowmem_reserve[]: 0 0 1 1 1 [ 1537.160085][T28586] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1537.225894][T28586] lowmem_reserve[]: 0 0 0 0 0 [ 1537.237243][T28586] Node 1 Normal free:3924960kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8904kB local_pcp:8904kB free_cma:0kB [ 1537.310300][T28586] lowmem_reserve[]: 0 0 0 0 0 [ 1537.325559][T28586] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1537.360060][T28586] Node 0 DMA32: 4245*4kB (UME) 4472*8kB (UE) 3002*16kB (UME) 416*32kB (UE) 626*64kB (UE) 410*128kB (UE) 601*256kB (UME) 396*512kB (UME) 273*1024kB (UME) 23*2048kB (UME) 29*4096kB (UM) = 1008692kB [ 1537.400827][T28586] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1537.434797][T28586] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 3*16kB (UM) 5*32kB (UM) 8*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 957*4096kB (UM) = 3924960kB [ 1537.470068][T28586] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.490332][T28586] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1537.515656][T28586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.537162][T28586] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1537.564747][T28586] 110870 total pagecache pages [ 1537.575169][T28586] 24 pages in swap cache [ 1537.583951][T28586] Free swap = 124736kB [ 1537.593842][T28586] Total swap = 124996kB [ 1537.605080][T28586] 2097051 pages RAM [ 1537.615492][T28586] 0 pages HighMem/MovableOnly [ 1537.624733][T28586] 430826 pages reserved [ 1537.636096][T28586] 0 pages cma reserved [ 1537.645691][T28586] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1538.358536][T28647] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1539.359217][T24331] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 926 with max blocks 3 with error 117 [ 1539.488596][T24331] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1539.488596][T24331] [ 1539.654384][T28667] Console: switching to colour VGA+ 80x25 [ 1541.202533][T28702] input: jJǸ-9%vJ86 as /devices/virtual/input/input29 [ 1541.249685][T28704] vivid-007: ================= START STATUS ================= [ 1541.283607][T28704] vivid-007: Generate PTS: true [ 1541.288553][T28704] vivid-007: Generate SCR: true [ 1541.333709][T28704] tpg source WxH: 320x240 (Y'CbCr) [ 1541.397238][T28704] tpg field: 1 [ 1541.417601][T28704] tpg crop: (0,0)/320x240 [ 1541.447248][T28704] tpg compose: (0,0)/320x240 [ 1541.471750][T28704] tpg colorspace: 8 [ 1541.496076][T28704] tpg transfer function: 0/0 [ 1541.516300][T28704] tpg Y'CbCr encoding: 0/0 [ 1541.534188][T28704] tpg quantization: 0/0 [ 1541.556187][T28704] tpg RGB range: 0/2 [ 1541.571142][T28704] vivid-007: ================== END STATUS ================== [ 1542.405884][T28726] FAULT_INJECTION: forcing a failure. [ 1542.405884][T28726] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.646429][T28726] CPU: 0 UID: 0 PID: 28726 Comm: syz.3.6524 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1542.646474][T28726] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1542.646485][T28726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1542.646502][T28726] Call Trace: [ 1542.646510][T28726] [ 1542.646521][T28726] dump_stack_lvl+0x100/0x190 [ 1542.646564][T28726] should_fail_ex.cold+0x5/0xa [ 1542.646594][T28726] should_failslab+0xc2/0x120 [ 1542.646621][T28726] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1542.646661][T28726] ? __anon_vma_prepare+0x344/0x5e0 [ 1542.646711][T28726] __anon_vma_prepare+0x344/0x5e0 [ 1542.646751][T28726] __vmf_anon_prepare+0x11f/0x250 [ 1542.646783][T28726] do_huge_pmd_anonymous_page+0x15c/0x1c40 [ 1542.646823][T28726] ? __pfx_pgd_none+0x10/0x10 [ 1542.646864][T28726] __handle_mm_fault+0x1e9e/0x2b60 [ 1542.646904][T28726] ? mt_find+0x45e/0x8e0 [ 1542.646945][T28726] ? __pfx___handle_mm_fault+0x10/0x10 [ 1542.646979][T28726] ? __pfx_mt_find+0x10/0x10 [ 1542.647041][T28726] handle_mm_fault+0x36d/0xa20 [ 1542.647082][T28726] __get_user_pages+0xf9c/0x34d0 [ 1542.647122][T28726] ? __pfx___get_user_pages+0x10/0x10 [ 1542.647160][T28726] populate_vma_page_range+0x267/0x3f0 [ 1542.647193][T28726] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1542.647224][T28726] ? __pfx_find_vma_intersection+0x10/0x10 [ 1542.647254][T28726] ? do_mmap+0x93f/0x12f0 [ 1542.647284][T28726] __mm_populate+0x107/0x3a0 [ 1542.647316][T28726] ? __pfx___mm_populate+0x10/0x10 [ 1542.647349][T28726] ? up_write+0x290/0x4f0 [ 1542.647389][T28726] vm_mmap_pgoff+0x37f/0x470 [ 1542.647422][T28726] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1542.647453][T28726] ? do_futex+0x192/0x350 [ 1542.647487][T28726] ? __pfx_do_futex+0x10/0x10 [ 1542.647525][T28726] ksys_mmap_pgoff+0xe1/0x650 [ 1542.647553][T28726] ? __x64_sys_futex+0x34f/0x4d0 [ 1542.647584][T28726] ? __x64_sys_futex+0x358/0x4d0 [ 1542.647618][T28726] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1542.647646][T28726] ? xfd_validate_state+0x129/0x190 [ 1542.647695][T28726] __x64_sys_mmap+0x125/0x190 [ 1542.647738][T28726] do_syscall_64+0x106/0xf80 [ 1542.647774][T28726] ? clear_bhb_loop+0x40/0x90 [ 1542.647807][T28726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.647833][T28726] RIP: 0033:0x7ff81599c799 [ 1542.647855][T28726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.647880][T28726] RSP: 002b:00007ff816774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1542.647904][T28726] RAX: ffffffffffffffda RBX: 00007ff815c16180 RCX: 00007ff81599c799 [ 1542.647921][T28726] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 1542.647937][T28726] RBP: 00007ff815a32c99 R08: 0000000000000002 R09: 0000000000008000 [ 1542.647953][T28726] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1542.647968][T28726] R13: 00007ff815c16218 R14: 00007ff815c16180 R15: 00007ffc0e1437c8 [ 1542.648001][T28726] [ 1543.776389][T28745] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1544.904794][T28761] mkiss: ax0: crc mode is auto. [ 1546.468279][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.474745][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.068161][T28793] zswap: compressor not available [ 1547.781729][T28813] FAULT_INJECTION: forcing a failure. [ 1547.781729][T28813] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.840785][T28813] CPU: 0 UID: 0 PID: 28813 Comm: syz.4.6538 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1547.840830][T28813] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1547.840841][T28813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1547.840857][T28813] Call Trace: [ 1547.840866][T28813] [ 1547.840876][T28813] dump_stack_lvl+0x100/0x190 [ 1547.840919][T28813] should_fail_ex.cold+0x5/0xa [ 1547.840949][T28813] should_failslab+0xc2/0x120 [ 1547.840976][T28813] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1547.841010][T28813] ? kstrdup_quotable_cmdline+0x52/0x210 [ 1547.841048][T28813] ? get_cmdline+0x86/0x360 [ 1547.841082][T28813] kstrdup_quotable_cmdline+0x52/0x210 [ 1547.841123][T28813] __report_access+0x77/0x230 [ 1547.841155][T28813] ? _raw_spin_unlock_irq+0x23/0x50 [ 1547.841193][T28813] task_work_run+0x150/0x240 [ 1547.841232][T28813] ? __pfx_task_work_run+0x10/0x10 [ 1547.841280][T28813] ? xfd_validate_state+0x129/0x190 [ 1547.841324][T28813] exit_to_user_mode_loop+0x100/0x4a0 [ 1547.841362][T28813] do_syscall_64+0x668/0xf80 [ 1547.841398][T28813] ? clear_bhb_loop+0x40/0x90 [ 1547.841438][T28813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.841464][T28813] RIP: 0033:0x7f66b0d9c799 [ 1547.841486][T28813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.841512][T28813] RSP: 002b:00007f66b1c71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1547.841537][T28813] RAX: ffffffffffffffff RBX: 00007f66b1015fa0 RCX: 00007f66b0d9c799 [ 1547.841554][T28813] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000001 [ 1547.841570][T28813] RBP: 00007f66b0e32c99 R08: 0000000000000004 R09: 0000000000000000 [ 1547.841586][T28813] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 1547.841626][T28813] R13: 00007f66b1016038 R14: 00007f66b1015fa0 R15: 00007ffdd50bbb38 [ 1547.841658][T28813] [ 1547.841806][T28813] ptrace attach of "./syz-executor exec"[27101] was attempted by "(null)"[28813] [ 1548.460789][T28823] FAULT_INJECTION: forcing a failure. [ 1548.460789][T28823] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.460831][T28823] CPU: 0 UID: 0 PID: 28823 Comm: syz.0.6540 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1548.460870][T28823] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1548.460880][T28823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1548.460896][T28823] Call Trace: [ 1548.460904][T28823] [ 1548.460913][T28823] dump_stack_lvl+0x100/0x190 [ 1548.460956][T28823] should_fail_ex.cold+0x5/0xa [ 1548.460985][T28823] should_failslab+0xc2/0x120 [ 1548.461013][T28823] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1548.461053][T28823] ? __d_alloc+0x34/0xa80 [ 1548.461088][T28823] __d_alloc+0x34/0xa80 [ 1548.461119][T28823] d_alloc_pseudo+0x1c/0xc0 [ 1548.461155][T28823] alloc_file_pseudo+0xcf/0x230 [ 1548.461201][T28823] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1548.461238][T28823] ? __lock_acquire+0x4a5/0x2630 [ 1548.461274][T28823] __shmem_file_setup+0x221/0x490 [ 1548.461311][T28823] ? __pfx___shmem_file_setup+0x10/0x10 [ 1548.461347][T28823] ? do_raw_spin_lock+0x128/0x260 [ 1548.461385][T28823] ? find_held_lock+0x2b/0x80 [ 1548.461408][T28823] ? alloc_fd+0x476/0x790 [ 1548.461431][T28823] ? alloc_fd+0x476/0x790 [ 1548.461458][T28823] memfd_alloc_file+0x247/0x620 [ 1548.461493][T28823] ? _raw_spin_unlock+0x28/0x50 [ 1548.461526][T28823] ? __pfx_memfd_alloc_file+0x10/0x10 [ 1548.461570][T28823] __do_sys_memfd_create+0x236/0x3d0 [ 1548.461609][T28823] do_syscall_64+0x106/0xf80 [ 1548.461644][T28823] ? clear_bhb_loop+0x40/0x90 [ 1548.461676][T28823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.461703][T28823] RIP: 0033:0x7ff88a79c799 [ 1548.461724][T28823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.461749][T28823] RSP: 002b:00007ff88b5cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1548.461774][T28823] RAX: ffffffffffffffda RBX: 00007ff88aa16090 RCX: 00007ff88a79c799 [ 1548.461792][T28823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1548.461807][T28823] RBP: 00007ff88a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1548.461823][T28823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1548.461839][T28823] R13: 00007ff88aa16128 R14: 00007ff88aa16090 R15: 00007fffe4a245f8 [ 1548.461871][T28823] [ 1549.025665][T28832] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6544'. [ 1549.126070][T28833] FAULT_INJECTION: forcing a failure. [ 1549.126070][T28833] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.126126][T28833] CPU: 0 UID: 0 PID: 28833 Comm: syz.2.6544 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1549.126162][T28833] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1549.126172][T28833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1549.126186][T28833] Call Trace: [ 1549.126194][T28833] [ 1549.126203][T28833] dump_stack_lvl+0x100/0x190 [ 1549.126252][T28833] should_fail_ex.cold+0x5/0xa [ 1549.126280][T28833] should_failslab+0xc2/0x120 [ 1549.126306][T28833] __kvmalloc_node_noprof+0xfa/0xa00 [ 1549.126344][T28833] ? alloc_fdtable+0x110/0x2d0 [ 1549.126389][T28833] alloc_fdtable+0x110/0x2d0 [ 1549.126428][T28833] dup_fd+0x995/0xd10 [ 1549.126455][T28833] ? apparmor_task_alloc+0x2c1/0x3b0 [ 1549.126498][T28833] copy_process+0x268f/0x7a40 [ 1549.126541][T28833] ? __pfx_copy_process+0x10/0x10 [ 1549.126569][T28833] ? find_held_lock+0x2b/0x80 [ 1549.126603][T28833] kernel_clone+0xfc/0x9a0 [ 1549.126629][T28833] ? __pfx_futex_wait+0x10/0x10 [ 1549.126668][T28833] ? __pfx_kernel_clone+0x10/0x10 [ 1549.126711][T28833] __do_sys_clone+0xd9/0x120 [ 1549.126739][T28833] ? __pfx___do_sys_clone+0x10/0x10 [ 1549.126796][T28833] do_syscall_64+0x106/0xf80 [ 1549.126830][T28833] ? clear_bhb_loop+0x40/0x90 [ 1549.126860][T28833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.126885][T28833] RIP: 0033:0x7f877439c799 [ 1549.126904][T28833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.126928][T28833] RSP: 002b:00007f877527ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1549.126951][T28833] RAX: ffffffffffffffda RBX: 00007f8774616090 RCX: 00007f877439c799 [ 1549.126968][T28833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020a08200 [ 1549.126983][T28833] RBP: 00007f8774432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1549.126998][T28833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1549.127013][T28833] R13: 00007f8774616128 R14: 00007f8774616090 R15: 00007ffcbdbf0968 [ 1549.127044][T28833] [ 1549.379666][T28836] FAULT_INJECTION: forcing a failure. [ 1549.379666][T28836] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.379735][T28836] CPU: 0 UID: 0 PID: 28836 Comm: syz.4.6545 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1549.379773][T28836] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1549.379783][T28836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1549.379799][T28836] Call Trace: [ 1549.379808][T28836] [ 1549.379818][T28836] dump_stack_lvl+0x100/0x190 [ 1549.379861][T28836] should_fail_ex.cold+0x5/0xa [ 1549.379895][T28836] should_failslab+0xc2/0x120 [ 1549.379923][T28836] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1549.379962][T28836] ? security_inode_alloc+0x3b/0x2c0 [ 1549.379989][T28836] ? lockdep_init_map_type+0x5c/0x250 [ 1549.380028][T28836] security_inode_alloc+0x3b/0x2c0 [ 1549.380076][T28836] inode_init_always_gfp+0xced/0x1040 [ 1549.380108][T28836] alloc_inode+0x8e/0x250 [ 1549.380142][T28836] new_inode+0x22/0x1c0 [ 1549.380179][T28836] shmem_get_inode+0x212/0x1040 [ 1549.380217][T28836] ? __pfx_shmem_get_inode+0x10/0x10 [ 1549.380250][T28836] ? d_add+0x443/0x850 [ 1549.380284][T28836] ? do_raw_spin_unlock+0x145/0x1e0 [ 1549.380328][T28836] shmem_mknod+0x20c/0x470 [ 1549.380364][T28836] ? __pfx_shmem_mknod+0x10/0x10 [ 1549.380396][T28836] ? bpf_lsm_inode_create+0x9/0x10 [ 1549.380438][T28836] ? __pfx_shmem_create+0x10/0x10 [ 1549.380473][T28836] lookup_open.isra.0+0xc47/0x11b0 [ 1549.380518][T28836] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1549.380562][T28836] ? __pfx___might_resched+0x10/0x10 [ 1549.380601][T28836] ? mnt_get_write_access+0x52/0x2f0 [ 1549.380641][T28836] ? __pfx_down_write+0x10/0x10 [ 1549.380681][T28836] ? mnt_get_write_access+0x1e9/0x2f0 [ 1549.380721][T28836] path_openat+0x2291/0x31a0 [ 1549.380757][T28836] ? __pfx_path_openat+0x10/0x10 [ 1549.380795][T28836] do_file_open+0x20e/0x430 [ 1549.380824][T28836] ? __pfx_do_file_open+0x10/0x10 [ 1549.380871][T28836] ? alloc_fd+0x476/0x790 [ 1549.380900][T28836] ? do_getname+0x191/0x390 [ 1549.380935][T28836] do_sys_openat2+0x10d/0x1e0 [ 1549.380969][T28836] ? __pfx_do_sys_openat2+0x10/0x10 [ 1549.381006][T28836] ? __fget_files+0x21f/0x3d0 [ 1549.381042][T28836] __x64_sys_openat+0x12d/0x210 [ 1549.381084][T28836] ? __pfx___x64_sys_openat+0x10/0x10 [ 1549.381131][T28836] do_syscall_64+0x106/0xf80 [ 1549.381166][T28836] ? clear_bhb_loop+0x40/0x90 [ 1549.381198][T28836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.381225][T28836] RIP: 0033:0x7f66b0d9c799 [ 1549.381246][T28836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.381271][T28836] RSP: 002b:00007f66b1c71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1549.381295][T28836] RAX: ffffffffffffffda RBX: 00007f66b1015fa0 RCX: 00007f66b0d9c799 [ 1549.381312][T28836] RDX: 00000000000861c2 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1549.381328][T28836] RBP: 00007f66b0e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1549.381345][T28836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.381361][T28836] R13: 00007f66b1016038 R14: 00007f66b1015fa0 R15: 00007ffdd50bbb38 [ 1549.381393][T28836] [ 1549.395532][T28836] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1551.764350][T28867] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1553.097631][T28887] bridge0: port 3(netdevsim1) entered blocking state [ 1553.136663][T28887] bridge0: port 3(netdevsim1) entered disabled state [ 1553.170867][T28887] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1553.230635][T28887] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1553.231096][T28887] bridge0: port 3(netdevsim1) entered blocking state [ 1553.231213][T28887] bridge0: port 3(netdevsim1) entered forwarding state [ 1553.514790][T28881] FAULT_INJECTION: forcing a failure. [ 1553.514790][T28881] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.514834][T28881] CPU: 0 UID: 0 PID: 28881 Comm: syz.3.6559 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1553.514873][T28881] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1553.514890][T28881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1553.514907][T28881] Call Trace: [ 1553.514915][T28881] [ 1553.514925][T28881] dump_stack_lvl+0x100/0x190 [ 1553.514967][T28881] should_fail_ex.cold+0x5/0xa [ 1553.514997][T28881] should_failslab+0xc2/0x120 [ 1553.515024][T28881] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1553.515058][T28881] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 1553.515097][T28881] ? get_mem_cgroup_from_mm+0x88/0x600 [ 1553.515135][T28881] ? get_mem_cgroup_from_mm+0x132/0x600 [ 1553.515177][T28881] __do_sys_fanotify_init+0x5cf/0xe50 [ 1553.515221][T28881] do_syscall_64+0x106/0xf80 [ 1553.515257][T28881] ? clear_bhb_loop+0x40/0x90 [ 1553.515288][T28881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.515314][T28881] RIP: 0033:0x7ff81599c799 [ 1553.515334][T28881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.515360][T28881] RSP: 002b:00007ff816795028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1553.515384][T28881] RAX: ffffffffffffffda RBX: 00007ff815c16090 RCX: 00007ff81599c799 [ 1553.515402][T28881] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 1553.515418][T28881] RBP: 00007ff815a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1553.515434][T28881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.515449][T28881] R13: 00007ff815c16128 R14: 00007ff815c16090 R15: 00007ffc0e1437c8 [ 1553.515481][T28881] [ 1553.789576][T28900] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1554.313742][T28901] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1555.702778][T28910] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1556.209554][T24335] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 903 with max blocks 26 with error 117 [ 1556.283089][T24335] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1556.283089][T24335] [ 1556.362762][T24335] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 871 with max blocks 32 with error 117 [ 1556.480682][T24335] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1556.480682][T24335] [ 1557.604355][ T5951] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 871 with max blocks 1 with error 117 [ 1557.640035][T28938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6572'. [ 1557.681986][ T5951] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1557.681986][ T5951] [ 1558.128919][T28938] zswap: compressor not available [ 1558.404728][T28943] FAULT_INJECTION: forcing a failure. [ 1558.404728][T28943] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.597111][T28943] CPU: 0 UID: 0 PID: 28943 Comm: syz.0.6573 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1558.597156][T28943] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1558.597166][T28943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1558.597182][T28943] Call Trace: [ 1558.597191][T28943] [ 1558.597200][T28943] dump_stack_lvl+0x100/0x190 [ 1558.597244][T28943] should_fail_ex.cold+0x5/0xa [ 1558.597273][T28943] should_failslab+0xc2/0x120 [ 1558.597301][T28943] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1558.597342][T28943] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 1558.597381][T28943] ? get_mem_cgroup_from_mm+0x88/0x600 [ 1558.597419][T28943] ? get_mem_cgroup_from_mm+0x132/0x600 [ 1558.597461][T28943] __do_sys_fanotify_init+0x5cf/0xe50 [ 1558.597505][T28943] do_syscall_64+0x106/0xf80 [ 1558.597541][T28943] ? clear_bhb_loop+0x40/0x90 [ 1558.597573][T28943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.597599][T28943] RIP: 0033:0x7ff88a79c799 [ 1558.597619][T28943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.597644][T28943] RSP: 002b:00007ff88b5cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1558.597669][T28943] RAX: ffffffffffffffda RBX: 00007ff88aa16090 RCX: 00007ff88a79c799 [ 1558.597686][T28943] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 1558.597702][T28943] RBP: 00007ff88a832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1558.597718][T28943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1558.597734][T28943] R13: 00007ff88aa16128 R14: 00007ff88aa16090 R15: 00007fffe4a245f8 [ 1558.597766][T28943] [ 1559.136228][T28963] FAULT_INJECTION: forcing a failure. [ 1559.136228][T28963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1559.208945][T28963] CPU: 0 UID: 0 PID: 28963 Comm: syz.3.6576 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1559.208989][T28963] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1559.209000][T28963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1559.209016][T28963] Call Trace: [ 1559.209025][T28963] [ 1559.209036][T28963] dump_stack_lvl+0x100/0x190 [ 1559.209080][T28963] should_fail_ex.cold+0x5/0xa [ 1559.209105][T28963] ? prepare_alloc_pages+0x16d/0x5f0 [ 1559.209137][T28963] should_fail_alloc_page+0xeb/0x140 [ 1559.209167][T28963] prepare_alloc_pages+0x1f0/0x5f0 [ 1559.209201][T28963] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1559.209245][T28963] ? rcu_is_watching+0x12/0xc0 [ 1559.209284][T28963] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1559.209314][T28963] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1559.209359][T28963] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1559.209405][T28963] ? find_held_lock+0x2b/0x80 [ 1559.209428][T28963] ? is_bpf_text_address+0x8a/0x1a0 [ 1559.209476][T28963] ? is_bpf_text_address+0x8a/0x1a0 [ 1559.209519][T28963] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1559.209547][T28963] ? is_bpf_text_address+0x94/0x1a0 [ 1559.209588][T28963] ? kernel_text_address+0x8d/0x100 [ 1559.209626][T28963] ? __kernel_text_address+0xd/0x30 [ 1559.209664][T28963] ? unwind_get_return_address+0x59/0xa0 [ 1559.209700][T28963] alloc_pages_bulk_noprof+0x782/0x1490 [ 1559.209752][T28963] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1559.209795][T28963] ? kasan_save_stack+0x30/0x50 [ 1559.209842][T28963] ? alloc_pages_noprof+0x233/0x390 [ 1559.209872][T28963] __kasan_populate_vmalloc+0xf0/0x210 [ 1559.209921][T28963] alloc_vmap_area+0x95d/0x2bd0 [ 1559.209960][T28963] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1559.209996][T28963] __get_vm_area_node+0x1ca/0x330 [ 1559.210031][T28963] __vmalloc_node_range_noprof+0x213/0x1530 [ 1559.210064][T28963] ? n_tty_open+0x1a/0x170 [ 1559.210091][T28963] ? look_up_lock_class+0x64/0x120 [ 1559.210133][T28963] ? n_tty_open+0x1a/0x170 [ 1559.210165][T28963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1559.210199][T28963] ? __ldsem_down_write_nested+0xfd/0x830 [ 1559.210225][T28963] ? __ldsem_down_write_nested+0x10e/0x830 [ 1559.210251][T28963] ? is_console_locked+0x9/0x20 [ 1559.210286][T28963] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1559.210317][T28963] ? n_tty_open+0x1a/0x170 [ 1559.210340][T28963] __vmalloc_node_noprof+0xad/0xf0 [ 1559.210372][T28963] ? n_tty_open+0x1a/0x170 [ 1559.210397][T28963] ? __pfx_n_tty_open+0x10/0x10 [ 1559.210422][T28963] n_tty_open+0x1a/0x170 [ 1559.210447][T28963] tty_ldisc_open+0xa2/0x120 [ 1559.210487][T28963] tty_ldisc_setup+0x40/0xf0 [ 1559.210523][T28963] tty_init_dev.part.0+0x1b5/0x470 [ 1559.210568][T28963] tty_open+0xa63/0xfa0 [ 1559.210612][T28963] ? __pfx_tty_open+0x10/0x10 [ 1559.210650][T28963] ? chrdev_open+0x10b/0x6a0 [ 1559.210675][T28963] ? chrdev_open+0x10b/0x6a0 [ 1559.210705][T28963] ? __pfx_tty_open+0x10/0x10 [ 1559.210745][T28963] chrdev_open+0x234/0x6a0 [ 1559.210770][T28963] ? __pfx_apparmor_file_open+0x10/0x10 [ 1559.210796][T28963] ? __pfx_chrdev_open+0x10/0x10 [ 1559.210824][T28963] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1559.210858][T28963] do_dentry_open+0x6d8/0x1660 [ 1559.210883][T28963] ? __pfx_chrdev_open+0x10/0x10 [ 1559.210916][T28963] vfs_open+0x82/0x3f0 [ 1559.210952][T28963] path_openat+0x208c/0x31a0 [ 1559.210989][T28963] ? __pfx_path_openat+0x10/0x10 [ 1559.211027][T28963] do_file_open+0x20e/0x430 [ 1559.211056][T28963] ? __pfx_do_file_open+0x10/0x10 [ 1559.211103][T28963] ? alloc_fd+0x476/0x790 [ 1559.211132][T28963] ? do_getname+0x191/0x390 [ 1559.211167][T28963] do_sys_openat2+0x10d/0x1e0 [ 1559.211201][T28963] ? __pfx_do_sys_openat2+0x10/0x10 [ 1559.211246][T28963] __x64_sys_openat+0x12d/0x210 [ 1559.211281][T28963] ? __pfx___x64_sys_openat+0x10/0x10 [ 1559.211328][T28963] do_syscall_64+0x106/0xf80 [ 1559.211364][T28963] ? clear_bhb_loop+0x40/0x90 [ 1559.211396][T28963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.211423][T28963] RIP: 0033:0x7ff81599c799 [ 1559.211444][T28963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.211476][T28963] RSP: 002b:00007ff8167b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1559.211501][T28963] RAX: ffffffffffffffda RBX: 00007ff815c15fa0 RCX: 00007ff81599c799 [ 1559.211518][T28963] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1559.211535][T28963] RBP: 00007ff815a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1559.211551][T28963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.211567][T28963] R13: 00007ff815c16038 R14: 00007ff815c15fa0 R15: 00007ffc0e1437c8 [ 1559.211600][T28963] [ 1559.918136][T28967] netlink: 330 bytes leftover after parsing attributes in process `syz.2.6577'. [ 1560.697762][T28972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6578'. [ 1560.972165][T28972] zswap: compressor not available [ 1561.140320][T28963] syz.3.6576: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1561.226135][T28963] CPU: 0 UID: 0 PID: 28963 Comm: syz.3.6576 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1561.226179][T28963] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1561.226189][T28963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1561.226205][T28963] Call Trace: [ 1561.226214][T28963] [ 1561.226224][T28963] dump_stack_lvl+0x100/0x190 [ 1561.226267][T28963] warn_alloc.cold+0x95/0x1c1 [ 1561.226315][T28963] ? __pfx_warn_alloc+0x10/0x10 [ 1561.226353][T28963] ? lockdep_hardirqs_on+0x78/0x100 [ 1561.226394][T28963] ? __get_vm_area_node+0x2c5/0x330 [ 1561.226429][T28963] ? __get_vm_area_node+0x208/0x330 [ 1561.226465][T28963] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1561.226501][T28963] ? look_up_lock_class+0x64/0x120 [ 1561.226541][T28963] ? n_tty_open+0x1a/0x170 [ 1561.226575][T28963] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1561.226609][T28963] ? __ldsem_down_write_nested+0xfd/0x830 [ 1561.226635][T28963] ? __ldsem_down_write_nested+0x10e/0x830 [ 1561.226661][T28963] ? is_console_locked+0x9/0x20 [ 1561.226697][T28963] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1561.226727][T28963] ? n_tty_open+0x1a/0x170 [ 1561.226750][T28963] __vmalloc_node_noprof+0xad/0xf0 [ 1561.226782][T28963] ? n_tty_open+0x1a/0x170 [ 1561.226808][T28963] ? __pfx_n_tty_open+0x10/0x10 [ 1561.226832][T28963] n_tty_open+0x1a/0x170 [ 1561.226857][T28963] tty_ldisc_open+0xa2/0x120 [ 1561.226891][T28963] tty_ldisc_setup+0x40/0xf0 [ 1561.226926][T28963] tty_init_dev.part.0+0x1b5/0x470 [ 1561.226970][T28963] tty_open+0xa63/0xfa0 [ 1561.227014][T28963] ? __pfx_tty_open+0x10/0x10 [ 1561.227053][T28963] ? chrdev_open+0x10b/0x6a0 [ 1561.227078][T28963] ? chrdev_open+0x10b/0x6a0 [ 1561.227113][T28963] ? __pfx_tty_open+0x10/0x10 [ 1561.227153][T28963] chrdev_open+0x234/0x6a0 [ 1561.227179][T28963] ? __pfx_apparmor_file_open+0x10/0x10 [ 1561.227205][T28963] ? __pfx_chrdev_open+0x10/0x10 [ 1561.227233][T28963] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1561.227268][T28963] do_dentry_open+0x6d8/0x1660 [ 1561.227293][T28963] ? __pfx_chrdev_open+0x10/0x10 [ 1561.227326][T28963] vfs_open+0x82/0x3f0 [ 1561.227362][T28963] path_openat+0x208c/0x31a0 [ 1561.227399][T28963] ? __pfx_path_openat+0x10/0x10 [ 1561.227437][T28963] do_file_open+0x20e/0x430 [ 1561.227466][T28963] ? __pfx_do_file_open+0x10/0x10 [ 1561.227514][T28963] ? alloc_fd+0x476/0x790 [ 1561.227542][T28963] ? do_getname+0x191/0x390 [ 1561.227577][T28963] do_sys_openat2+0x10d/0x1e0 [ 1561.227611][T28963] ? __pfx_do_sys_openat2+0x10/0x10 [ 1561.227656][T28963] __x64_sys_openat+0x12d/0x210 [ 1561.227692][T28963] ? __pfx___x64_sys_openat+0x10/0x10 [ 1561.227738][T28963] do_syscall_64+0x106/0xf80 [ 1561.227774][T28963] ? clear_bhb_loop+0x40/0x90 [ 1561.227805][T28963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.227832][T28963] RIP: 0033:0x7ff81599c799 [ 1561.227852][T28963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.227878][T28963] RSP: 002b:00007ff8167b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1561.227903][T28963] RAX: ffffffffffffffda RBX: 00007ff815c15fa0 RCX: 00007ff81599c799 [ 1561.227920][T28963] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1561.227936][T28963] RBP: 00007ff815a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1561.227952][T28963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1561.227968][T28963] R13: 00007ff815c16038 R14: 00007ff815c15fa0 R15: 00007ffc0e1437c8 [ 1561.228000][T28963] [ 1561.592801][T28984] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6580'. [ 1561.668851][T28963] Mem-Info: [ 1561.672080][T28963] active_anon:25619 inactive_anon:1942 isolated_anon:19 [ 1561.672080][T28963] active_file:18929 inactive_file:37853 isolated_file:0 [ 1561.672080][T28963] unevictable:768 dirty:44 writeback:39 [ 1561.672080][T28963] slab_reclaimable:13428 slab_unreclaimable:101935 [ 1561.672080][T28963] mapped:26815 shmem:1779 pagetables:1336 [ 1561.672080][T28963] sec_pagetables:0 bounce:0 [ 1561.672080][T28963] kernel_misc_reclaimable:0 [ 1561.672080][T28963] free:1287677 free_pcp:13011 free_cma:0 [ 1561.718661][T28963] Node 0 active_anon:102476kB inactive_anon:7768kB active_file:75712kB inactive_file:151288kB unevictable:1536kB isolated(anon):76kB isolated(file):0kB mapped:107260kB dirty:176kB writeback:156kB shmem:5580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:83968kB kernel_stack:13184kB pagetables:5208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1561.753254][T28963] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1561.784768][T28963] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.816033][T28963] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1561.825164][T28963] Node 0 DMA32 free:1214968kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102476kB inactive_anon:7768kB active_file:75712kB inactive_file:151288kB unevictable:1536kB writepending:332kB zspages:0kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:38548kB local_pcp:38548kB free_cma:0kB [ 1561.859343][T28963] lowmem_reserve[]: 0 0 1 1 1 [ 1561.864477][T28963] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1561.895226][T28963] lowmem_reserve[]: 0 0 0 0 0 [ 1561.900915][T28963] Node 1 Normal free:3920368kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13496kB local_pcp:13496kB free_cma:0kB [ 1561.934262][T28963] lowmem_reserve[]: 0 0 0 0 0 [ 1561.940026][T28963] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1561.957575][T28963] Node 0 DMA32: 7704*4kB (UME) 6111*8kB (UME) 4344*16kB (UME) 1053*32kB (UME) 1324*64kB (UME) 821*128kB (UME) 650*256kB (UME) 420*512kB (UME) 280*1024kB (UME) 27*2048kB (UME) 29*4096kB (UM) = 1214968kB [ 1562.004040][T28963] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1562.024337][T28963] Node 1 Normal: 0*4kB 0*8kB 3*16kB (UM) 2*32kB (UM) 2*64kB (U) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 956*4096kB (UM) = 3920368kB [ 1562.040940][T28963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.051052][T28963] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1562.060879][T28963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1562.100002][T28963] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1562.109703][T28963] 58600 total pagecache pages [ 1562.117484][T28963] 44 pages in swap cache [ 1562.122203][T28963] Free swap = 123248kB [ 1562.126603][T28963] Total swap = 124996kB [ 1562.131451][T28963] 2097051 pages RAM [ 1562.135269][T28963] 0 pages HighMem/MovableOnly [ 1562.160021][T28963] 430826 pages reserved [ 1562.164666][T28963] 0 pages cma reserved [ 1562.173669][T28963] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1562.515755][T28992] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1562.656607][T28987] zswap: compressor not available [ 1564.217993][T29021] FAULT_INJECTION: forcing a failure. [ 1564.217993][T29021] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.294338][T29021] CPU: 0 UID: 0 PID: 29021 Comm: syz.2.6591 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1564.294383][T29021] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1564.294393][T29021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1564.294409][T29021] Call Trace: [ 1564.294418][T29021] [ 1564.294428][T29021] dump_stack_lvl+0x100/0x190 [ 1564.294471][T29021] should_fail_ex.cold+0x5/0xa [ 1564.294502][T29021] should_failslab+0xc2/0x120 [ 1564.294529][T29021] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1564.294563][T29021] ? copy_time_ns+0xf6/0x800 [ 1564.294600][T29021] copy_time_ns+0xf6/0x800 [ 1564.294624][T29021] ? copy_cgroup_ns+0x71/0x970 [ 1564.294656][T29021] create_new_namespaces+0x48a/0xac0 [ 1564.294691][T29021] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1564.294722][T29021] ksys_unshare+0x473/0xad0 [ 1564.294756][T29021] ? __pfx_ksys_unshare+0x10/0x10 [ 1564.294800][T29021] __x64_sys_unshare+0x31/0x40 [ 1564.294840][T29021] do_syscall_64+0x106/0xf80 [ 1564.294877][T29021] ? clear_bhb_loop+0x40/0x90 [ 1564.294909][T29021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.294935][T29021] RIP: 0033:0x7f877439c799 [ 1564.294957][T29021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.294983][T29021] RSP: 002b:00007f87752a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1564.295008][T29021] RAX: ffffffffffffffda RBX: 00007f8774615fa0 RCX: 00007f877439c799 [ 1564.295025][T29021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1564.295040][T29021] RBP: 00007f8774432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1564.295056][T29021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1564.295071][T29021] R13: 00007f8774616038 R14: 00007f8774615fa0 R15: 00007ffcbdbf0968 [ 1564.295103][T29021] [ 1565.380476][T29032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6594'. [ 1565.702750][T29032] zswap: compressor not available [ 1567.145294][T29064] netlink: 'syz.0.6600': attribute type 4 has an invalid length. [ 1567.801700][T29076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6604'. [ 1568.256622][T29076] zswap: compressor not available [ 1568.895534][T29090] zswap: compressor not available [ 1570.942968][T29132] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1571.784779][T29144] zswap: compressor not available [ 1572.954980][T29173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6621'. [ 1573.278647][T29173] bond0: (slave bond_slave_1): Releasing backup interface [ 1574.603062][T29188] zswap: compressor not available [ 1574.638233][T29198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6628'. [ 1574.885264][ T5952] Bluetooth: hci1: unexpected event 0x33 length: 124 > 10 [ 1574.900204][T29205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6629'. [ 1575.028620][T29198] zswap: compressor not available [ 1575.273876][T29205] hsr_slave_0 (unregistering): left promiscuous mode [ 1575.337216][T29210] program syz.0.6631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1575.402049][T29212] program syz.0.6631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1578.713804][T29255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6639'. [ 1579.046090][T29255] zswap: compressor not available [ 1579.256939][T29266] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1582.361396][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6650'. [ 1582.858569][T29318] zswap: compressor not available [ 1584.115830][T29342] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6655'. [ 1584.594881][T29342] bond0: (slave bond_slave_1): Releasing backup interface [ 1584.687371][T29346] zswap: compressor not available [ 1586.166241][T29374] udc dummy_udc.0: soft-connect without a gadget driver [ 1587.146548][T29390] zswap: compressor not available [ 1589.493907][T29435] FAULT_INJECTION: forcing a failure. [ 1589.493907][T29435] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.591656][T29435] CPU: 0 UID: 0 PID: 29435 Comm: syz.2.6676 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1589.591701][T29435] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1589.591711][T29435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1589.591727][T29435] Call Trace: [ 1589.591735][T29435] [ 1589.591745][T29435] dump_stack_lvl+0x100/0x190 [ 1589.591789][T29435] should_fail_ex.cold+0x5/0xa [ 1589.591819][T29435] should_failslab+0xc2/0x120 [ 1589.591846][T29435] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1589.591896][T29435] ? alloc_vmap_area+0x640/0x2bd0 [ 1589.591927][T29435] alloc_vmap_area+0x640/0x2bd0 [ 1589.591966][T29435] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1589.592001][T29435] __get_vm_area_node+0x1ca/0x330 [ 1589.592036][T29435] __vmalloc_node_range_noprof+0x213/0x1530 [ 1589.592070][T29435] ? n_tty_open+0x1a/0x170 [ 1589.592096][T29435] ? look_up_lock_class+0x64/0x120 [ 1589.592140][T29435] ? n_tty_open+0x1a/0x170 [ 1589.592173][T29435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1589.592208][T29435] ? __ldsem_down_write_nested+0xfd/0x830 [ 1589.592234][T29435] ? __ldsem_down_write_nested+0x10e/0x830 [ 1589.592260][T29435] ? is_console_locked+0x9/0x20 [ 1589.592296][T29435] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1589.592326][T29435] ? n_tty_open+0x1a/0x170 [ 1589.592349][T29435] __vmalloc_node_noprof+0xad/0xf0 [ 1589.592381][T29435] ? n_tty_open+0x1a/0x170 [ 1589.592406][T29435] ? __pfx_n_tty_open+0x10/0x10 [ 1589.592431][T29435] n_tty_open+0x1a/0x170 [ 1589.592456][T29435] tty_ldisc_open+0xa2/0x120 [ 1589.592489][T29435] tty_ldisc_setup+0x40/0xf0 [ 1589.592524][T29435] tty_init_dev.part.0+0x1b5/0x470 [ 1589.592568][T29435] tty_open+0xa63/0xfa0 [ 1589.592612][T29435] ? __pfx_tty_open+0x10/0x10 [ 1589.592650][T29435] ? chrdev_open+0x10b/0x6a0 [ 1589.592676][T29435] ? chrdev_open+0x10b/0x6a0 [ 1589.592705][T29435] ? __pfx_tty_open+0x10/0x10 [ 1589.592745][T29435] chrdev_open+0x234/0x6a0 [ 1589.592770][T29435] ? __pfx_apparmor_file_open+0x10/0x10 [ 1589.592796][T29435] ? __pfx_chrdev_open+0x10/0x10 [ 1589.592828][T29435] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1589.592867][T29435] do_dentry_open+0x6d8/0x1660 [ 1589.592893][T29435] ? __pfx_chrdev_open+0x10/0x10 [ 1589.592927][T29435] vfs_open+0x82/0x3f0 [ 1589.592964][T29435] path_openat+0x208c/0x31a0 [ 1589.593001][T29435] ? __pfx_path_openat+0x10/0x10 [ 1589.593039][T29435] do_file_open+0x20e/0x430 [ 1589.593068][T29435] ? __pfx_do_file_open+0x10/0x10 [ 1589.593117][T29435] ? alloc_fd+0x476/0x790 [ 1589.593145][T29435] ? do_getname+0x191/0x390 [ 1589.593180][T29435] do_sys_openat2+0x10d/0x1e0 [ 1589.593215][T29435] ? __pfx_do_sys_openat2+0x10/0x10 [ 1589.593260][T29435] __x64_sys_openat+0x12d/0x210 [ 1589.593295][T29435] ? __pfx___x64_sys_openat+0x10/0x10 [ 1589.593341][T29435] do_syscall_64+0x106/0xf80 [ 1589.593377][T29435] ? clear_bhb_loop+0x40/0x90 [ 1589.593408][T29435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.593435][T29435] RIP: 0033:0x7f877439c799 [ 1589.593456][T29435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.593482][T29435] RSP: 002b:00007f8775280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1589.593508][T29435] RAX: ffffffffffffffda RBX: 00007f8774616090 RCX: 00007f877439c799 [ 1589.593526][T29435] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1589.593542][T29435] RBP: 00007f8774432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1589.593559][T29435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1589.593575][T29435] R13: 00007f8774616128 R14: 00007f8774616090 R15: 00007ffcbdbf0968 [ 1589.593608][T29435] [ 1589.593660][T29435] syz.2.6676: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1590.948169][T29454] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1591.408973][T29435] ,cpuset=/,mems_allowed=0-1 [ 1591.441869][T29435] CPU: 0 UID: 0 PID: 29435 Comm: syz.2.6676 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1591.441912][T29435] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1591.441922][T29435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1591.441937][T29435] Call Trace: [ 1591.441945][T29435] [ 1591.441954][T29435] dump_stack_lvl+0x100/0x190 [ 1591.441997][T29435] warn_alloc.cold+0x95/0x1c1 [ 1591.442041][T29435] ? __pfx_warn_alloc+0x10/0x10 [ 1591.442076][T29435] ? lockdep_hardirqs_on+0x78/0x100 [ 1591.442121][T29435] ? __get_vm_area_node+0x2c5/0x330 [ 1591.442160][T29435] ? __get_vm_area_node+0x208/0x330 [ 1591.442194][T29435] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1591.442228][T29435] ? look_up_lock_class+0x64/0x120 [ 1591.442267][T29435] ? n_tty_open+0x1a/0x170 [ 1591.442299][T29435] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1591.442332][T29435] ? __ldsem_down_write_nested+0xfd/0x830 [ 1591.442357][T29435] ? __ldsem_down_write_nested+0x10e/0x830 [ 1591.442382][T29435] ? is_console_locked+0x9/0x20 [ 1591.442417][T29435] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1591.442446][T29435] ? n_tty_open+0x1a/0x170 [ 1591.442469][T29435] __vmalloc_node_noprof+0xad/0xf0 [ 1591.442499][T29435] ? n_tty_open+0x1a/0x170 [ 1591.442524][T29435] ? __pfx_n_tty_open+0x10/0x10 [ 1591.442547][T29435] n_tty_open+0x1a/0x170 [ 1591.442571][T29435] tty_ldisc_open+0xa2/0x120 [ 1591.442604][T29435] tty_ldisc_setup+0x40/0xf0 [ 1591.442645][T29435] tty_init_dev.part.0+0x1b5/0x470 [ 1591.442687][T29435] tty_open+0xa63/0xfa0 [ 1591.442730][T29435] ? __pfx_tty_open+0x10/0x10 [ 1591.442766][T29435] ? chrdev_open+0x10b/0x6a0 [ 1591.442791][T29435] ? chrdev_open+0x10b/0x6a0 [ 1591.442820][T29435] ? __pfx_tty_open+0x10/0x10 [ 1591.442858][T29435] chrdev_open+0x234/0x6a0 [ 1591.442882][T29435] ? __pfx_apparmor_file_open+0x10/0x10 [ 1591.442907][T29435] ? __pfx_chrdev_open+0x10/0x10 [ 1591.442934][T29435] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1591.442966][T29435] do_dentry_open+0x6d8/0x1660 [ 1591.442990][T29435] ? __pfx_chrdev_open+0x10/0x10 [ 1591.443022][T29435] vfs_open+0x82/0x3f0 [ 1591.443057][T29435] path_openat+0x208c/0x31a0 [ 1591.443092][T29435] ? __pfx_path_openat+0x10/0x10 [ 1591.443128][T29435] do_file_open+0x20e/0x430 [ 1591.443156][T29435] ? __pfx_do_file_open+0x10/0x10 [ 1591.443209][T29435] ? alloc_fd+0x476/0x790 [ 1591.443236][T29435] ? do_getname+0x191/0x390 [ 1591.443270][T29435] do_sys_openat2+0x10d/0x1e0 [ 1591.443303][T29435] ? __pfx_do_sys_openat2+0x10/0x10 [ 1591.443346][T29435] __x64_sys_openat+0x12d/0x210 [ 1591.443380][T29435] ? __pfx___x64_sys_openat+0x10/0x10 [ 1591.443425][T29435] do_syscall_64+0x106/0xf80 [ 1591.443458][T29435] ? clear_bhb_loop+0x40/0x90 [ 1591.443489][T29435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.443514][T29435] RIP: 0033:0x7f877439c799 [ 1591.443535][T29435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.443558][T29435] RSP: 002b:00007f8775280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1591.443582][T29435] RAX: ffffffffffffffda RBX: 00007f8774616090 RCX: 00007f877439c799 [ 1591.443598][T29435] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1591.443621][T29435] RBP: 00007f8774432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1591.443636][T29435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1591.443651][T29435] R13: 00007f8774616128 R14: 00007f8774616090 R15: 00007ffcbdbf0968 [ 1591.443682][T29435] [ 1592.098589][T29435] Mem-Info: [ 1592.101939][T29435] active_anon:25395 inactive_anon:33187 isolated_anon:32 [ 1592.101939][T29435] active_file:19428 inactive_file:40264 isolated_file:0 [ 1592.101939][T29435] unevictable:768 dirty:57 writeback:0 [ 1592.101939][T29435] slab_reclaimable:13323 slab_unreclaimable:103324 [ 1592.101939][T29435] mapped:35551 shmem:32229 pagetables:1467 [ 1592.101939][T29435] sec_pagetables:0 bounce:0 [ 1592.101939][T29435] kernel_misc_reclaimable:0 [ 1592.101939][T29435] free:1250995 free_pcp:13975 free_cma:0 [ 1592.150222][T29435] Node 0 active_anon:101580kB inactive_anon:132748kB active_file:77708kB inactive_file:160932kB unevictable:1536kB isolated(anon):128kB isolated(file):0kB mapped:142204kB dirty:224kB writeback:0kB shmem:127380kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:86016kB kernel_stack:13088kB pagetables:5732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1592.214524][T29435] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1592.342729][T29435] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.462543][T29435] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1592.468463][T29435] Node 0 DMA32 free:1066772kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101584kB inactive_anon:123744kB active_file:77980kB inactive_file:161364kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2537380kB mlocked:0kB bounce:0kB free_pcp:52060kB local_pcp:52060kB free_cma:0kB [ 1592.670035][T29435] lowmem_reserve[]: 0 0 1 1 1 [ 1592.674814][T29435] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1592.861359][T29435] lowmem_reserve[]: 0 0 0 0 0 [ 1592.866183][T29435] Node 1 Normal free:3921792kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:124kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12072kB local_pcp:12072kB free_cma:0kB [ 1593.044743][T29435] lowmem_reserve[]: 0 0 0 0 0 [ 1593.086692][T29435] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1593.116104][T29459] zswap: compressor not available [ 1593.162417][T29435] Node 0 DMA32: 4171*4kB (UE) 4913*8kB (U) 3128*16kB (UM) 83*32kB (UE) 608*64kB (UE) 753*128kB (UME) 668*256kB (UME) 433*512kB (UME) 270*1024kB (UME) 19*2048kB (UME) 28*4096kB (UM) = 1066772kB [ 1593.252715][T29435] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1593.314516][T29435] Node 1 Normal: 4*4kB (UM) 8*8kB (UM) 13*16kB (UM) 7*32kB (UM) 8*64kB (UM) 7*128kB (UM) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 956*4096kB (UM) = 3921792kB [ 1593.433233][T29435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1593.507636][T29435] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 1593.559079][T29435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1593.592249][T29435] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1593.644373][T29435] 83893 total pagecache pages [ 1593.664536][T29435] 28 pages in swap cache [ 1593.686958][T29435] Free swap = 106100kB [ 1593.713281][T29435] Total swap = 124996kB [ 1593.732285][T29435] 2097051 pages RAM [ 1593.750626][T29435] 0 pages HighMem/MovableOnly [ 1593.774855][T29435] 430826 pages reserved [ 1593.801104][T29435] 0 pages cma reserved [ 1593.880424][T29435] tty tty16: ldisc open failed (-12), clearing slot 15 [ 1594.413747][T29484] FAULT_INJECTION: forcing a failure. [ 1594.413747][T29484] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.578183][T29484] CPU: 0 UID: 0 PID: 29484 Comm: syz.3.6684 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1594.578225][T29484] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1594.578235][T29484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1594.578249][T29484] Call Trace: [ 1594.578257][T29484] [ 1594.578266][T29484] dump_stack_lvl+0x100/0x190 [ 1594.578307][T29484] should_fail_ex.cold+0x5/0xa [ 1594.578335][T29484] should_failslab+0xc2/0x120 [ 1594.578362][T29484] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1594.578401][T29484] ? __alloc_skb+0x140/0x710 [ 1594.578441][T29484] __alloc_skb+0x140/0x710 [ 1594.578471][T29484] ? __alloc_skb+0x5b7/0x710 [ 1594.578503][T29484] ? __pfx___alloc_skb+0x10/0x10 [ 1594.578535][T29484] ? __lock_acquire+0x4a5/0x2630 [ 1594.578572][T29484] __ip_append_data+0x2e31/0x4690 [ 1594.578675][T29484] ? __pfx_raw_getfrag+0x10/0x10 [ 1594.578721][T29484] ? find_held_lock+0x2b/0x80 [ 1594.578743][T29484] ? ip_dst_mtu_maybe_forward.constprop.0+0x3df/0x750 [ 1594.578777][T29484] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 1594.578805][T29484] ? __pfx___ip_append_data+0x10/0x10 [ 1594.578848][T29484] ip_append_data+0x10f/0x1a0 [ 1594.578889][T29484] ? __pfx_raw_getfrag+0x10/0x10 [ 1594.578922][T29484] raw_sendmsg+0xcb6/0x35f0 [ 1594.578960][T29484] ? __pfx_raw_sendmsg+0x10/0x10 [ 1594.578987][T29484] ? ___sys_sendmsg+0x19d/0x1e0 [ 1594.579013][T29484] ? stack_trace_save+0x8e/0xc0 [ 1594.579036][T29484] ? __pfx_stack_trace_save+0x10/0x10 [ 1594.579061][T29484] ? stack_depot_save_flags+0x27/0x9d0 [ 1594.579092][T29484] ? __lock_acquire+0x4a5/0x2630 [ 1594.579149][T29484] ? __import_iovec+0x1d2/0x640 [ 1594.579182][T29484] ? __pfx_raw_sendmsg+0x10/0x10 [ 1594.579213][T29484] inet_sendmsg+0x11c/0x140 [ 1594.579240][T29484] ____sys_sendmsg+0x98d/0xb70 [ 1594.579264][T29484] ? __pfx_inet_sendmsg+0x10/0x10 [ 1594.579291][T29484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.579315][T29484] ? kasan_quarantine_put+0x104/0x240 [ 1594.579356][T29484] ? ___sys_sendmsg+0x19d/0x1e0 [ 1594.579380][T29484] ? kfree+0x1f6/0x6b0 [ 1594.579415][T29484] ___sys_sendmsg+0x190/0x1e0 [ 1594.579444][T29484] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.579497][T29484] ? __pfx___might_resched+0x10/0x10 [ 1594.579538][T29484] __sys_sendmmsg+0x205/0x430 [ 1594.579577][T29484] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1594.579619][T29484] ? __pfx_do_futex+0x10/0x10 [ 1594.579648][T29484] ? __pfx_do_sys_openat2+0x10/0x10 [ 1594.579691][T29484] ? __x64_sys_openat+0x12d/0x210 [ 1594.579723][T29484] ? xfd_validate_state+0x129/0x190 [ 1594.579766][T29484] __x64_sys_sendmmsg+0x9c/0x100 [ 1594.579800][T29484] ? lockdep_hardirqs_on+0x78/0x100 [ 1594.579835][T29484] do_syscall_64+0x106/0xf80 [ 1594.579868][T29484] ? clear_bhb_loop+0x40/0x90 [ 1594.579897][T29484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.579927][T29484] RIP: 0033:0x7ff81599c799 [ 1594.579947][T29484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.579970][T29484] RSP: 002b:00007ff816774028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1594.579992][T29484] RAX: ffffffffffffffda RBX: 00007ff815c16180 RCX: 00007ff81599c799 [ 1594.580008][T29484] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000003 [ 1594.580023][T29484] RBP: 00007ff815a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1594.580037][T29484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1594.580051][T29484] R13: 00007ff815c16218 R14: 00007ff815c16180 R15: 00007ffc0e1437c8 [ 1594.580081][T29484] [ 1599.612441][T29540] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1599.924817][T29545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6701'. [ 1600.281478][T29549] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1600.554139][ T22] IRQ fixup: irq 34 move in progress, old vector 49 [ 1600.564541][T29552] smpboot: CPU 1 is now offline [ 1600.657001][T29552] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1600.679543][T29552] ------------[ cut here ]------------ [ 1600.686107][T29552] DEAD callback error for CPU1 [ 1600.686125][T29552] WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020, CPU#0: syz.3.6702/29552 [ 1600.701426][T29552] Modules linked in: [ 1600.706288][T29552] CPU: 0 UID: 0 PID: 29552 Comm: syz.3.6702 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1600.718621][T29552] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1600.724144][T29552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1600.735270][T29552] RIP: 0010:_cpu_down+0x75c/0x1020 [ 1600.741221][T29552] Code: 4e 7a f6 89 ee bf 91 00 00 00 e8 df 48 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 1e 4e 7a f6 48 8d 3d f7 e7 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 fd 4d 7a [ 1600.761655][T29552] RSP: 0018:ffffc90006387aa8 EFLAGS: 00010283 [ 1600.767766][T29552] RAX: 000000000000a6f1 RBX: ffff8880b85242e0 RCX: ffffc90011065000 [ 1600.776241][T29552] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dcb240 [ 1600.785184][T29552] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 1600.793970][T29552] R10: 0000000000000092 R11: 0000000000000001 R12: 00000000000000ed [ 1600.802477][T29552] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 1600.810770][T29552] FS: 00007ff8167956c0(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 [ 1600.819741][T29552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1600.826545][T29552] CR2: 00007f877444eddd CR3: 0000000065974000 CR4: 00000000003526f0 [ 1600.835082][T29552] Call Trace: [ 1600.839204][T29552] [ 1600.842688][T29552] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 1600.848378][T29552] cpu_device_down+0x82/0xc0 [ 1600.853081][T29552] device_offline+0x2a7/0x3c0 [ 1600.857797][T29552] ? __pfx_device_offline+0x10/0x10 [ 1600.863221][T29552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1600.869529][T29552] ? __pfx_online_store+0x10/0x10 [ 1600.874703][T29552] online_store+0xd1/0x180 [ 1600.879201][T29552] ? __pfx_online_store+0x10/0x10 [ 1600.885178][T29552] ? __pfx_find_held_lock+0x10/0x10 [ 1600.891098][T29552] ? sysfs_file_kobj+0xe4/0x290 [ 1600.896456][T29552] ? sysfs_file_kobj+0xe4/0x290 [ 1600.901467][T29552] dev_attr_store+0x58/0x80 [ 1600.906201][T29552] ? __pfx_dev_attr_store+0x10/0x10 [ 1600.911713][T29552] sysfs_kf_write+0xf2/0x150 [ 1600.916352][T29552] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1600.921921][T29552] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1600.927227][T29552] vfs_write+0x6ac/0x1070 [ 1600.932129][T29552] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1600.938013][T29552] ? __pfx_vfs_write+0x10/0x10 [ 1600.943944][T29552] ksys_write+0x12a/0x250 [ 1600.948341][T29552] ? __pfx_ksys_write+0x10/0x10 [ 1600.953831][T29552] ? kcov_ioctl+0x16a/0x720 [ 1600.958400][T29552] do_syscall_64+0x106/0xf80 [ 1600.963129][T29552] ? clear_bhb_loop+0x40/0x90 [ 1600.967857][T29552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.973843][T29552] RIP: 0033:0x7ff81599c799 [ 1600.978313][T29552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.998874][T29552] RSP: 002b:00007ff816795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1601.007985][T29552] RAX: ffffffffffffffda RBX: 00007ff815c16090 RCX: 00007ff81599c799 [ 1601.016304][T29552] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 1601.024668][T29552] RBP: 00007ff815a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1601.032774][T29552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.041720][T29552] R13: 00007ff815c16128 R14: 00007ff815c16090 R15: 00007ffc0e1437c8 [ 1601.050464][T29552] [ 1601.053509][T29552] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1601.060806][T29552] CPU: 0 UID: 0 PID: 29552 Comm: syz.3.6702 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1601.071963][T29552] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1601.077195][T29552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1601.087286][T29552] Call Trace: [ 1601.090600][T29552] [ 1601.093542][T29552] dump_stack_lvl+0x100/0x190 [ 1601.098390][T29552] vpanic+0x552/0x970 [ 1601.102422][T29552] ? __pfx_vpanic+0x10/0x10 [ 1601.106994][T29552] panic+0xd1/0xe0 [ 1601.110870][T29552] ? __pfx_panic+0x10/0x10 [ 1601.115334][T29552] check_panic_on_warn.cold+0x19/0x34 [ 1601.120845][T29552] ? _cpu_down+0x759/0x1020 [ 1601.125477][T29552] __warn.cold+0x191/0x348 [ 1601.129941][T29552] __report_bug+0x296/0x3d0 [ 1601.134578][T29552] ? _cpu_down+0x759/0x1020 [ 1601.139198][T29552] ? __pfx___report_bug+0x10/0x10 [ 1601.144263][T29552] ? __pfx_try_to_wake_up+0x10/0x10 [ 1601.149687][T29552] report_bug_entry+0xe1/0x290 [ 1601.154513][T29552] ? _cpu_down+0x75c/0x1020 [ 1601.159144][T29552] handle_bug+0x1cd/0x2a0 [ 1601.163601][T29552] exc_invalid_op+0x17/0x50 [ 1601.168246][T29552] asm_exc_invalid_op+0x1a/0x20 [ 1601.173415][T29552] RIP: 0010:_cpu_down+0x75c/0x1020 [ 1601.178571][T29552] Code: 4e 7a f6 89 ee bf 91 00 00 00 e8 df 48 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 1e 4e 7a f6 48 8d 3d f7 e7 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 fd 4d 7a [ 1601.198758][T29552] RSP: 0018:ffffc90006387aa8 EFLAGS: 00010283 [ 1601.204940][T29552] RAX: 000000000000a6f1 RBX: ffff8880b85242e0 RCX: ffffc90011065000 [ 1601.213048][T29552] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dcb240 [ 1601.221053][T29552] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 1601.229132][T29552] R10: 0000000000000092 R11: 0000000000000001 R12: 00000000000000ed [ 1601.237219][T29552] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 1601.245231][T29552] ? _cpu_down+0x752/0x1020 [ 1601.249769][T29552] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 1601.255352][T29552] cpu_device_down+0x82/0xc0 [ 1601.260004][T29552] device_offline+0x2a7/0x3c0 [ 1601.264711][T29552] ? __pfx_device_offline+0x10/0x10 [ 1601.270120][T29552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1601.276068][T29552] ? __pfx_online_store+0x10/0x10 [ 1601.281113][T29552] online_store+0xd1/0x180 [ 1601.285556][T29552] ? __pfx_online_store+0x10/0x10 [ 1601.290605][T29552] ? __pfx_find_held_lock+0x10/0x10 [ 1601.296014][T29552] ? sysfs_file_kobj+0xe4/0x290 [ 1601.301426][T29552] ? sysfs_file_kobj+0xe4/0x290 [ 1601.306317][T29552] dev_attr_store+0x58/0x80 [ 1601.310869][T29552] ? __pfx_dev_attr_store+0x10/0x10 [ 1601.316110][T29552] sysfs_kf_write+0xf2/0x150 [ 1601.320725][T29552] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1601.326026][T29552] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1601.331446][T29552] vfs_write+0x6ac/0x1070 [ 1601.335804][T29552] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1601.341654][T29552] ? __pfx_vfs_write+0x10/0x10 [ 1601.346455][T29552] ksys_write+0x12a/0x250 [ 1601.350801][T29552] ? __pfx_ksys_write+0x10/0x10 [ 1601.355662][T29552] ? kcov_ioctl+0x16a/0x720 [ 1601.360188][T29552] do_syscall_64+0x106/0xf80 [ 1601.364804][T29552] ? clear_bhb_loop+0x40/0x90 [ 1601.369508][T29552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.375421][T29552] RIP: 0033:0x7ff81599c799 [ 1601.380380][T29552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.400100][T29552] RSP: 002b:00007ff816795028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1601.408532][T29552] RAX: ffffffffffffffda RBX: 00007ff815c16090 RCX: 00007ff81599c799 [ 1601.416708][T29552] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 1601.424693][T29552] RBP: 00007ff815a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1601.432696][T29552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.440700][T29552] R13: 00007ff815c16128 R14: 00007ff815c16090 R15: 00007ffc0e1437c8 [ 1601.448817][T29552] [ 1601.452521][T29552] Kernel Offset: disabled [ 1601.456902][T29552] Rebooting in 86400 seconds..