last executing test programs: 12.953938443s ago: executing program 2 (id=4590): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0080, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D2\x00', 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r3 = clone$auto(0x5, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x100000000) r4 = syz_clone(0x700, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r5) sendmsg$auto_TASKSTATS_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010a27bd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="00100000d6aec0aa4c28246e5360", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20000840) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/ib_srp/parameters/indirect_sg_entries\x00', 0x80800, 0x0) name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', &(0x7f0000001100)={0x8, 0xd, "2e5710c910109d7e"}, &(0x7f0000001180), 0x2) sendfile$auto(0x1, r7, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x24, 0x0, 0x8) socket(0x2, 0x1, 0x106) 12.210915204s ago: executing program 2 (id=4592): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) socket(0x2, 0x801, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/revision\x00', 0x8a080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x800, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc8745d18a5956210d2de44402", 0x49}, 0x5, &(0x7f0000000400), 0x5, 0x1000}}, 0x1, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:256/strict_limit\x00', 0xa022, 0x0) pwrite64$auto(r0, &(0x7f00000000c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7fff, 0xc) io_uring_setup$auto(0x7, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) ioctl$auto(r1, 0x4004550c, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c3c0360e1136cc55f29d65f47d8ffeb2f000002dcc7890e63aadff8c23bbe9351295fd5fb02321c89d03331026520ce0b", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf250100000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) mbind$auto(0x0, 0xfa9c, 0x8001, &(0x7f0000000100)=0x80000000, 0x400, 0x1) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x48401, 0x0) ioctl$auto(r6, 0x901064af, 0xffffffffffffffff) ioctl$auto_USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000040)=0x1) socket(0x18, 0x2, 0x200) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x18482, 0x0) 12.047366744s ago: executing program 1 (id=4593): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x200a41, 0x0) r0 = bpf$auto(0x8000000, 0x0, 0x0) mmap$auto(0x9, 0x401, 0x7fffffffffffffff, 0x5b59, r0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0x9) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0), 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202003, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20004000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) r2 = socketpair$auto(0x0, 0x1000, 0x7fffffff, &(0x7f0000000040)=0x4) close_range$auto(r2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x3, 0x0, 0x8b) ioctl$auto(0x3, 0x6f50, 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 11.47314878s ago: executing program 3 (id=4595): r0 = eventfd$auto(0x7f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x54, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000200)=""/36, 0x24) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x40, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) clock_nanosleep$auto(0x1, 0x200, &(0x7f0000000140)={0x0, 0x2800000a}, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/223, 0xdf) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket(0x22, 0xa, 0x8c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r4, 0x1, 0x3e, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20a42, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x200080, 0x0) 11.061901658s ago: executing program 2 (id=4597): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f828712", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x5, 0x3, 0x14, r1, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000016c0)={0x9c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@remote}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffdfff1b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x68, 0x3, 0x0, 0x1, [@typed={0xa, 0x6d, 0x0, 0x0, @str='$&\\(!\x00'}, @nested={0x56, 0xe9, 0x0, 0x1, [@generic="29cea414b8cd695eb0bb37f38e091e3ecd207f4121fdd23a1370cf26626d2368672fbebaa387655106b450b5faf384294cfd1562d26db0474e0156a870a04820b0af", @typed={0x8, 0x96, 0x0, 0x0, @uid}, @typed={0x8, 0x6d, 0x0, 0x0, @pid}, @generic]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x1084) 10.353799961s ago: executing program 3 (id=4598): close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x6, 0x1) r0 = socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) ustat$auto(0x801, 0x0) close_range$auto(r0, 0x8, 0x0) open(0x0, 0x58901, 0x155) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/def_reserved_size\x00', 0x402, 0x0) write$auto(r3, &(0x7f0000000500)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x9f\xe2\xc7cOM\xb6\xa3,!oc.\xe7\x1d$\x9a`\xd8/g\xd3\x1a\xcd\x8e\x1d\xbb\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xa9O\x00\x00\x00\x00\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xb6\xb0N\x99\x04z\xd0I>\x8f\x00\xe5\x1c*\xedE\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xa3\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\xac\x92\x7f]|\x04\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xa6\x89\xdd\xce\xab\xd5\xe4+\xeaF\x06Y\xe9\xa1`\xb1\x8d\x85\xe0w+\x1e\x8b+\xd67IH\xff\x80N\xd1E8\xb7\xff\xa7\xff\x80\xd0y\x0f\x1d(!\x99\xab\xdf\x01\x00\x00\x00\x00\x00\x00\x00\xcdd\x87\x06\xfbK\xb9/\x19\xe5\x8b\x10P\xe7i8\xbe', 0x7) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) mmap$auto(0xfffffffffffffffd, 0x20009, 0x10000000000df, 0xeb2, r1, 0x8000) mount_setattr$auto(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0xe9f) socket(0x2, 0x1, 0x106) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xc}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 9.689183409s ago: executing program 0 (id=4599): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f828712", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x5, 0x3, 0x14, r1, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000016c0)={0x9c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@remote}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffdfff1b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x68, 0x3, 0x0, 0x1, [@typed={0xa, 0x6d, 0x0, 0x0, @str='$&\\(!\x00'}, @nested={0x56, 0xe9, 0x0, 0x1, [@generic="29cea414b8cd695eb0bb37f38e091e3ecd207f4121fdd23a1370cf26626d2368672fbebaa387655106b450b5faf384294cfd1562d26db0474e0156a870a04820b0af", @typed={0x8, 0x96, 0x0, 0x0, @uid}, @typed={0x8, 0x6d, 0x0, 0x0, @pid}, @generic]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x1084) 9.461436521s ago: executing program 1 (id=4600): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r1, 0x0, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) fcntl$auto(0x8000000000000001, 0x7, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/sub0/sw_params\x00', 0x50002, 0x0) pread64$auto(r3, 0x0, 0x594c, 0x9fffffffd) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x0, 0x9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) getpriority$auto_PRIO_USER(0x2, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r5, 0xc0305616, r4) madvise$auto(0x0, 0x2003f2, 0x15) flock$auto(r2, 0x2) 8.82618009s ago: executing program 3 (id=4601): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdeb) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) sync_file_range$auto(r1, 0xfffffffffffffe95, 0x9, 0x9) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0) mbind$auto(0xb, 0x1ff, 0x6, &(0x7f0000000080)=0xffffffffffffffff, 0xb, 0x9) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0xc0106f32, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x6, 0x3, 0x4, 0x0) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) getpgrp(0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x40054) 7.992805568s ago: executing program 0 (id=4602): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x3, 0xa) 6.688858116s ago: executing program 0 (id=4603): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) prctl$auto_PR_SET_MM(0x23, 0x7, 0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x47, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad199752151699faea53575d94e9e2f930abeb4f1cd2fa58eef0e25b15baeca5f900c19f32e51de1ba99fb4f828712", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0xd11c, 0xb871, 0x6, 0x9ffd, 0x81, 0x4, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x5, 0x3, 0x14, r1, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000016c0)={0x9c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @ipv4=@remote}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffdfff1b}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x68, 0x3, 0x0, 0x1, [@typed={0xa, 0x6d, 0x0, 0x0, @str='$&\\(!\x00'}, @nested={0x56, 0xe9, 0x0, 0x1, [@generic="29cea414b8cd695eb0bb37f38e091e3ecd207f4121fdd23a1370cf26626d2368672fbebaa387655106b450b5faf384294cfd1562d26db0474e0156a870a04820b0af", @typed={0x8, 0x96, 0x0, 0x0, @uid}, @typed={0x8, 0x6d, 0x0, 0x0, @pid}, @generic]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x1084) 6.407291378s ago: executing program 2 (id=4604): r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000040)={0x20, r0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x8, 0x0, 0x1, [@generic="8592a023"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r1 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r4, 0x0, 0x200000000006, 0x8) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0xa, 0x5, 0x0) getsockopt$auto(r5, 0x84, 0x12, 0x0, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) 5.69812679s ago: executing program 1 (id=4605): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) mmap$auto(0x6df, 0x200000001, 0xdf, 0xeb1, 0x401, 0x8001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)="3318cb") write$auto(0x3, 0x0, 0x7fffffff) readv$auto(r1, &(0x7f0000000a80)={0x0, 0xffff}, 0x2) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) socket(0x21, 0x80002, 0x73) socket(0x2, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x54) 5.392393608s ago: executing program 2 (id=4606): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x3, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x10201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x7, 0xa, 0x800000000000004, 0x10000001, 0x948c, 0x3, 0x95f4da0a, 0x10001, 0x900, 0xd64, 0x80000001, 0x47, 0x6d40, 0x5, 0x7ff, 0x9]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x2, 0x7, 0x9b72, 0x7, 0x0) select$auto(0x7, 0x0, &(0x7f0000000100)={[0x18, 0x3ff, 0xb1e, 0x7, 0x7f1, 0x7, 0x80, 0xffffffffffff75ae, 0x6d, 0x0, 0x1, 0x80000001, 0xfffffffffffffffc, 0xffffffffffffff83, 0x7, 0x5]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) 5.211930977s ago: executing program 3 (id=4607): mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0xd47) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) write$auto(r2, &(0x7f0000000140)='\x80\xa3\xf3.\x80UX0\x15\x00\x00\x00\x00\x00\x00\xaa\x10\x9c\xaa\xcaT\xdf\xa1@\xa7J:\x8ao\x8c\x90VBt\x93\x8f\xe19\x9cg\xaa\xb5w\x10\xba9\"T\xb8\xbe\xb4\xc6\x1d\xca\xa1\"\xea@\xa8\xe9\xfa\'\x1aJz\xf9\x97\x1e\xba\x90\xa1\xc2K\x8f\x1aok\x88\x87\x1d\xdc\x149\b\x15\xb4\xeai\xd2\\\"^\xea]\x06a\xfb\xff\xff\xff\xff\xff\xff\xff[\x83[\x00\xea\xcdc\xae:\"\x1f\x95\xaa\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\x00\x00\x00\xe5\x0f\xe8&\xc4M\x94\xd6Y9\xebA1\x8b.', 0x5) mmap$auto(0x0, 0x4, 0xdb, 0x9b71, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) close_range$auto(0x2, 0x8, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000024, 0x0, 0x4}, 0x0, 0xf4240, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r6, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r7, 0xfffffffffffff000, 0x2) landlock_restrict_self$auto(r5, 0x0) creat$auto(0x0, 0x3ff) 3.234496606s ago: executing program 1 (id=4608): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x80000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000000000000001, 0x1ffde, 0xa, 0x3, 0x2, 0xc, 0x3, 0x2c873627, 0x4, 0x3000, 0x200, 0x6, 0x7ff, 0x83, 0x4, 0x0, 0x7, 0x1ffc, 0x202, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x4008) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4090ae82, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, 0x0, 0x4008040) socket(0xa, 0x1, 0x84) socketpair$auto(0x3, 0x80001, 0x7d, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) close_range$auto(0x2, 0xa, 0x0) socket(0x11, 0xa, 0x300) socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r0) gettid() 2.848808246s ago: executing program 1 (id=4609): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop11\x00', 0x20000, 0x0) ioctl$auto_BLKBSZGET(r0, 0x80081270, &(0x7f00000001c0)=0xbbc) listen$auto(0x3, 0x81) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x1a1c42, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) eventfd2$auto(0x5, 0xe) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x401, 0x0) write$auto(0x3, 0x0, 0x5c8) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0x8, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0x6, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x0, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x8, 0xfffffffffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x4000000000009, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) 2.830941427s ago: executing program 0 (id=4610): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2a, 0x2, 0x1) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x24044880) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) socketpair$auto(0x1, 0x4, 0x10010000, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(r0, 0x0, 0x55) write$auto(0x3, 0x0, 0x5b4) 2.472955582s ago: executing program 0 (id=4611): mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0xd47) r2 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) write$auto(r2, &(0x7f0000000140)='\x80\xa3\xf3.\x80UX0\x15\x00\x00\x00\x00\x00\x00\xaa\x10\x9c\xaa\xcaT\xdf\xa1@\xa7J:\x8ao\x8c\x90VBt\x93\x8f\xe19\x9cg\xaa\xb5w\x10\xba9\"T\xb8\xbe\xb4\xc6\x1d\xca\xa1\"\xea@\xa8\xe9\xfa\'\x1aJz\xf9\x97\x1e\xba\x90\xa1\xc2K\x8f\x1aok\x88\x87\x1d\xdc\x149\b\x15\xb4\xeai\xd2\\\"^\xea]\x06a\xfb\xff\xff\xff\xff\xff\xff\xff[\x83[\x00\xea\xcdc\xae:\"\x1f\x95\xaa\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\x00\x00\x00\xe5\x0f\xe8&\xc4M\x94\xd6Y9\xebA1\x8b.', 0x5) mmap$auto(0x0, 0x4, 0xdb, 0x9b71, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) close_range$auto(0x2, 0x8, 0x0) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000024, 0x0, 0x4}, 0x0, 0xf4240, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r6, 0x0, 0x400) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(0x0, 0x9, 0x0) landlock_restrict_self$auto(r5, 0x0) creat$auto(0x0, 0x3ff) 2.222554899s ago: executing program 2 (id=4612): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x100000001, 0x4000003, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r0, 0x127f, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) 1.643065698s ago: executing program 3 (id=4613): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) socket(0x28, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x82202, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x3, 0xa) 1.386832318s ago: executing program 0 (id=4614): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0) ioctl$auto(0x3, 0x540f, 0xffffffffffffffff) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) r0 = socket(0x2b, 0x800, 0x76) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6) write$auto(r3, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) 390.043642ms ago: executing program 1 (id=4615): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_marker\x00', 0x341, 0x0) mmap$auto(0x401000000000, 0x40000004020009, 0xc, 0x15, 0xffffffffffffffff, 0x7ffe) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) r5 = getuid() sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="901d0000", @ANYRES16, @ANYBLOB="080a26bd7000ffdbdf2516000000090309800c00e78008009200640101020602bf60393b8e8c11f6cd9517d218fb1332b73000bf0615509cbcfe065420c5a8267e38c3168162b01da5b94d7ecf0e134186aff62b953239185b0eaa5deac2d64935195b895c1a9410cd67f6b3e723b4eda49c1f83d8ad650ffaecdc3f8d2085c1f4a44f5c7f3110806bc714133668fc964068183d21c40bfd007b8014000900fe8000000000000000000000000000aa0800b700", @ANYRES32=r2, @ANYBLOB="5707be7cd8848e7744de2fb3b8bd1dfbcab32ed5616e3e0b305ea367d9c1a760158c9e347046ff09af0a5f8bdb4724075cf1d6f3b30fceabe162bf7d38c2346cdc953da7703957c1acfd0b58c9848d992fd8d3d4ec080400098008003c00", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="1800698014006600fe8000000000000000000000000000262000358004007d8008002f", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="0c001c0006000000000000000800a6000a01010204007580000007020280fd00f980bd303502d572a153126393fcf955a7f3fc4b6effc2938fe89d05c24c13d274de030f62905fda4401fb967408b20b56ddfe2af28a54701b98c669538caf8ea9a9eaf01ab6307a64d7a290268db39ea238256f7e41647035a93ed2b9015bf9febc51c74c9999d055496f461b108e1aab72c2d16af33fb964f55013a250db66c4facb472b056ae66fcadf553973fccc6f067d6b154f45854261a02b42e7371279410e98ba9d5a6fc4b1cde86d2dd4d69fe37565011087d55a49d5f7a44ea78a4e53d4145f77770e4c9aad0775257175e58480ba8552a8", @ANYRES32=r3, @ANYBLOB="08001200", @ANYRES32=r1, @ANYBLOB="efaac42583e74436c25ab0b0f91b7d23ad8a318bd1d3aaf26f9dda28d46812e2264fc14f2b4eb8f61f2fb8b603da278bf19b9089193630b756d3e3c6182e240fd5fe1ce4c95d4f7ee6cafa631be1044301c4bb050f1bab91d2f4dc59253c370294736844c3daffee06dbfe9c5c0243f250b1c7a152", @ANYRES32, @ANYBLOB="0000000b00a6002d242940402800003d8dd36080fa7aa05b59b135f2b57c9eda9e52eab69a4c50d5abb614cc556824f73f6691cbca4326fd9b905235abff3f077b5f11cff5ab049e5e24b30acf407b963665f8323be4eecd9e9d9ca15b7561c456b6a8d7b1b6583d8db1671a7cbf986c606cd23097e42e53606aad329982da6d0a14de4362e141689da6e56898d4eecc97defd881a7d2ce5b8a87074f131688557b7a1d8638c0c67e386abf5d922cb90fb9a9ec5715ff287c2ca99a601a00f0146d433caf1aff5bf13395c86eee32620637a3ab607522b6ae1221bb9eac7b3712479e2f8c4a0f821386c3e17ba37e6b1c5df07d6129a6d2353e4d399e55c9fcefe2f2c7ad83c00040004803a000000b0030dea85a2ec43a7936b290b90f49ac78d7bce4ff8f9834e3e1bc51e40efe34a1ce6e0042d61d6c303f58a859d26ccb207e4dd2dd70000"], 0x1d90}, 0x1, 0x0, 0x0, 0x80}, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NFC_CMD_GET_TARGET(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x6c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_SE_APDU={0x58, 0x19, "9ff882d45e23aa1282d04cf6f39f91ef58737855c22ba4e828c5effa48c0bbae3ae2f8be187c2bcd4d4af8939e3b33a3fda26ecdfb6cf658dd8575cf557946c440058348f497794ea082a387f37ea716eed5fa53"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) r6 = prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000300)=@bpf_attr_0={0x9a, 0x2, 0x5, 0x8, 0x7eb, r2, 0x5, "e03f43200a26d5ea743998fb7500", 0x0, r6, 0x9, 0x1, 0x4, 0x7, r3, r3}, 0x7ff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) io_uring_setup$auto(0x4e8c, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) r9 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(r9, 0x3b71, 0x0) 0s ago: executing program 3 (id=4616): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(r0, 0x0, 0x4000000001f3a) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x101, 0x8000, 0x3fa, 0x200000401, 0x1000008000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x6, 0x1000005, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x141500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/144, 0x90) setresuid$auto(0x0, 0x8, 0x0) faccessat2$auto(0x1, &(0x7f00000000c0)='\x00', 0x2, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r4, @ANYRES16=r5], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) kernel console output (not intermixed with test programs): ured. [ 1546.819327][T28531] sp0: Synchronizing with TNC [ 1547.934623][T28549] futex_wake_op: syz.2.4203 tries to shift op by -2048; fix this program [ 1547.952749][T28549] futex_wake_op: syz.2.4203 tries to shift op by -2048; fix this program [ 1548.033690][T28549] 0x000000000001-0x000000020000 : "" [ 1548.102550][T28549] ftl_cs: FTL header corrupt! [ 1548.135067][T28554] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1548.975985][T28561] FAULT_INJECTION: forcing a failure. [ 1548.975985][T28561] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.071224][T28561] CPU: 0 UID: 0 PID: 28561 Comm: syz.2.4205 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1549.071284][T28561] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1549.071299][T28561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1549.071319][T28561] Call Trace: [ 1549.071330][T28561] [ 1549.071343][T28561] dump_stack_lvl+0x100/0x190 [ 1549.071395][T28561] should_fail_ex.cold+0x5/0xa [ 1549.071443][T28561] should_failslab+0xc2/0x120 [ 1549.071478][T28561] kmem_cache_alloc_noprof+0x83/0x780 [ 1549.071510][T28561] ? __proc_create+0xc2/0x8c0 [ 1549.071547][T28561] ? __proc_create+0x2cb/0x8c0 [ 1549.071590][T28561] ? __proc_create+0x2cb/0x8c0 [ 1549.071626][T28561] __proc_create+0x2cb/0x8c0 [ 1549.071666][T28561] ? __pfx___proc_create+0x10/0x10 [ 1549.071711][T28561] ? _raw_write_unlock+0x28/0x50 [ 1549.071738][T28561] ? proc_register+0x559/0x8a0 [ 1549.071779][T28561] proc_create_reg+0x75/0x170 [ 1549.071804][T28561] proc_create_net_data+0x8e/0x1c0 [ 1549.071849][T28561] ? __pfx_proc_create_net_data+0x10/0x10 [ 1549.071896][T28561] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 1549.071929][T28561] kcm_proc_init_net+0xa3/0x120 [ 1549.071970][T28561] ops_init+0x1e2/0x5f0 [ 1549.072016][T28561] setup_net+0x118/0x3a0 [ 1549.072088][T28561] ? __pfx_setup_net+0x10/0x10 [ 1549.072137][T28561] ? lockdep_init_map_type+0x5c/0x250 [ 1549.072185][T28561] ? mutex_init_lockep+0x110/0x150 [ 1549.072240][T28561] copy_net_ns+0x46f/0x7c0 [ 1549.072295][T28561] create_new_namespaces+0x3ea/0xab0 [ 1549.072361][T28561] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1549.072418][T28561] ksys_unshare+0x455/0xab0 [ 1549.072466][T28561] ? __pfx_ksys_unshare+0x10/0x10 [ 1549.072512][T28561] ? xfd_validate_state+0x129/0x190 [ 1549.072587][T28561] __x64_sys_unshare+0x31/0x40 [ 1549.072635][T28561] do_syscall_64+0xc9/0xf80 [ 1549.072680][T28561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.072713][T28561] RIP: 0033:0x7ff9f859aeb9 [ 1549.072739][T28561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.072772][T28561] RSP: 002b:00007ff9f93d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1549.072804][T28561] RAX: ffffffffffffffda RBX: 00007ff9f8815fa0 RCX: 00007ff9f859aeb9 [ 1549.072827][T28561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1549.072848][T28561] RBP: 00007ff9f8608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1549.072869][T28561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.072889][T28561] R13: 00007ff9f8816038 R14: 00007ff9f8815fa0 R15: 00007ffff049fa68 [ 1549.072933][T28561] [ 1550.513509][T28576] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1550.859409][T28546] kexec: Could not allocate control_code_buffer [ 1551.171890][T28588] NFSD: Failed to start, no listeners configured. [ 1552.717040][T28600] hub 1-0:1.0: USB hub found [ 1552.722003][T28600] hub 1-0:1.0: 1 port detected [ 1554.329348][ T30] audit: type=1800 audit(4294967716.910:36): pid=28621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=129991 res=0 errno=0 [ 1554.497743][T28621] could not allocate digest TFM handle [ 1556.217793][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.232207][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.466783][T28656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4218'. [ 1556.523911][T28656] FAULT_INJECTION: forcing a failure. [ 1556.523911][T28656] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.552255][T28656] CPU: 1 UID: 0 PID: 28656 Comm: syz.0.4218 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1556.552319][T28656] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1556.552332][T28656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1556.552352][T28656] Call Trace: [ 1556.552365][T28656] [ 1556.552379][T28656] dump_stack_lvl+0x100/0x190 [ 1556.552427][T28656] should_fail_ex.cold+0x5/0xa [ 1556.552482][T28656] should_failslab+0xc2/0x120 [ 1556.552531][T28656] __kmalloc_cache_noprof+0x80/0x810 [ 1556.552568][T28656] ? call_usermodehelper_setup+0xaf/0x360 [ 1556.552602][T28656] ? __kmalloc_node_track_caller_noprof+0x373/0x9d0 [ 1556.552649][T28656] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1556.552704][T28656] ? call_usermodehelper_setup+0xaf/0x360 [ 1556.552738][T28656] call_usermodehelper_setup+0xaf/0x360 [ 1556.552780][T28656] __request_module+0x3c7/0x650 [ 1556.552834][T28656] ? __pfx___request_module+0x10/0x10 [ 1556.552905][T28656] ? find_held_lock+0x2b/0x80 [ 1556.552937][T28656] ? inet_create+0xa72/0x1060 [ 1556.553006][T28656] inet_create+0xd45/0x1060 [ 1556.553045][T28656] ? inet_create+0x94/0x1060 [ 1556.553088][T28656] __sock_create+0x339/0x860 [ 1556.553131][T28656] __sys_socket+0x14d/0x260 [ 1556.553169][T28656] ? fput+0x79/0x100 [ 1556.553212][T28656] ? __pfx___sys_socket+0x10/0x10 [ 1556.553250][T28656] ? xfd_validate_state+0x129/0x190 [ 1556.553312][T28656] __x64_sys_socket+0x72/0xb0 [ 1556.553351][T28656] ? lockdep_hardirqs_on+0x78/0x100 [ 1556.553390][T28656] do_syscall_64+0xc9/0xf80 [ 1556.553433][T28656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.553468][T28656] RIP: 0033:0x7effa839aeb9 [ 1556.553495][T28656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.553529][T28656] RSP: 002b:00007effa91dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1556.553562][T28656] RAX: ffffffffffffffda RBX: 00007effa8615fa0 RCX: 00007effa839aeb9 [ 1556.553585][T28656] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1556.553606][T28656] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1556.553626][T28656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1556.553648][T28656] R13: 00007effa8616038 R14: 00007effa8615fa0 R15: 00007ffe3d174578 [ 1556.553691][T28656] [ 1557.309127][T28656] i2c i2c-0: new_device: Invalid device name [ 1557.934830][T28684] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1559.607916][T28693] zswap: compressor not available [ 1560.180737][T28720] FAULT_INJECTION: forcing a failure. [ 1560.180737][T28720] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.196067][T28720] CPU: 0 UID: 0 PID: 28720 Comm: syz.1.4227 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1560.196124][T28720] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1560.196138][T28720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1560.196158][T28720] Call Trace: [ 1560.196171][T28720] [ 1560.196183][T28720] dump_stack_lvl+0x100/0x190 [ 1560.196231][T28720] should_fail_ex.cold+0x5/0xa [ 1560.196285][T28720] should_failslab+0xc2/0x120 [ 1560.196333][T28720] ? __register_sysctl_table+0xbe4/0x1650 [ 1560.196386][T28720] __kmalloc_noprof+0xf6/0x9c0 [ 1560.196420][T28720] ? __register_sysctl_table+0xbc8/0x1650 [ 1560.196472][T28720] ? __register_sysctl_table+0xbc8/0x1650 [ 1560.196535][T28720] ? __register_sysctl_table+0xbe4/0x1650 [ 1560.196586][T28720] __register_sysctl_table+0xbe4/0x1650 [ 1560.196649][T28720] ? __pfx___register_sysctl_table+0x10/0x10 [ 1560.196701][T28720] ? is_module_address+0x69/0xf0 [ 1560.196750][T28720] ? register_net_sysctl_sz+0x222/0x430 [ 1560.196807][T28720] ? __asan_memcpy+0x3c/0x60 [ 1560.196859][T28720] sctp_sysctl_net_register+0x15e/0x200 [ 1560.196917][T28720] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1560.196965][T28720] sctp_defaults_init+0x6d2/0xd90 [ 1560.197014][T28720] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1560.197061][T28720] ops_init+0x1e2/0x5f0 [ 1560.197117][T28720] setup_net+0x118/0x3a0 [ 1560.197168][T28720] ? __pfx_setup_net+0x10/0x10 [ 1560.197215][T28720] ? lockdep_init_map_type+0x5c/0x250 [ 1560.197261][T28720] ? mutex_init_lockep+0x110/0x150 [ 1560.197314][T28720] copy_net_ns+0x46f/0x7c0 [ 1560.197351][T28720] create_new_namespaces+0x3ea/0xab0 [ 1560.197399][T28720] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1560.197442][T28720] ksys_unshare+0x455/0xab0 [ 1560.197490][T28720] ? __pfx_ksys_unshare+0x10/0x10 [ 1560.197534][T28720] ? xfd_validate_state+0x129/0x190 [ 1560.197599][T28720] __x64_sys_unshare+0x31/0x40 [ 1560.197647][T28720] do_syscall_64+0xc9/0xf80 [ 1560.197690][T28720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.197725][T28720] RIP: 0033:0x7f412759aeb9 [ 1560.197772][T28720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.197806][T28720] RSP: 002b:00007f412837c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1560.197841][T28720] RAX: ffffffffffffffda RBX: 00007f4127815fa0 RCX: 00007f412759aeb9 [ 1560.197872][T28720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1560.197894][T28720] RBP: 00007f4127608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1560.197915][T28720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1560.197937][T28720] R13: 00007f4127816038 R14: 00007f4127815fa0 R15: 00007ffc9f224e08 [ 1560.197982][T28720] [ 1560.197997][T28720] sysctl could not get directory: /net/sctp -12 [ 1560.543829][T28718] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1560.553220][T28718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1560.612994][T28718] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1560.642994][T28718] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1560.767204][T28718] futex_wake_op: syz.0.4234 tries to shift op by -2048; fix this program [ 1560.815270][T28718] futex_wake_op: syz.0.4234 tries to shift op by -2048; fix this program [ 1560.953644][T28718] 0x000000000001-0x000000020000 : "" [ 1561.161460][T28718] ftl_cs: FTL header corrupt! [ 1562.412381][T28752] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1562.543164][T28757] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4238'. [ 1562.565441][T28757] IPv6: NLM_F_CREATE should be specified when creating new route [ 1562.577362][T28757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1562.584713][T28757] IPv6: NLM_F_CREATE should be set when creating new route [ 1562.592007][T28757] IPv6: NLM_F_CREATE should be set when creating new route [ 1562.693641][T28752] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4238'. [ 1562.706404][T27459] Bluetooth: hci2: command 0x0c1a tx timeout [ 1562.712595][T27459] Bluetooth: hci1: command 0x0c1a tx timeout [ 1562.718736][T27459] Bluetooth: hci0: command 0x0c1a tx timeout [ 1562.725315][T27459] Bluetooth: hci3: command 0x0c1a tx timeout [ 1563.808061][T28772] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 1564.727085][T28782] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1566.915523][T28816] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1568.866741][T28860] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1569.762281][T28870] binder: 28868:28870 ioctl 4018620d ffffffffffffffff returned -22 [ 1570.180296][T28889] binder: 28886:28889 ioctl 4018620d ffffffffffffffff returned -22 [ 1570.221269][T28887] NFSD: Failed to start, no listeners configured. [ 1570.439266][ T30] audit: type=1804 audit(4294967733.020:37): pid=28894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4256" name=2F6E6577726F6F742F313035362F07 dev="tmpfs" ino=5478 res=1 errno=0 [ 1571.168681][T28903] Console: switching to colour frame buffer device 128x48 [ 1572.525207][T28919] binder: 28917:28919 ioctl 4018620d ffffffffffffffff returned -22 [ 1573.619196][ T30] audit: type=1804 audit(4294967736.200:38): pid=28931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4258" name=2F6E6577726F6F742F313035372F07 dev="tmpfs" ino=5484 res=1 errno=0 [ 1575.977630][T28982] binder: 28978:28982 ioctl 4018620d ffffffffffffffff returned -22 [ 1576.687277][T28996] binder: 28995:28996 ioctl 4018620d ffffffffffffffff returned -22 [ 1577.016382][ T30] audit: type=1804 audit(4294967739.600:39): pid=28996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4260" name=2F6E6577726F6F742F313035392F07 dev="tmpfs" ino=5495 res=1 errno=0 [ 1579.184937][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1579.449596][T29055] FAULT_INJECTION: forcing a failure. [ 1579.449596][T29055] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.513316][T29055] CPU: 1 UID: 0 PID: 29055 Comm: syz.3.4265 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1579.513374][T29055] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1579.513390][T29055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1579.513411][T29055] Call Trace: [ 1579.513422][T29055] [ 1579.513435][T29055] dump_stack_lvl+0x100/0x190 [ 1579.513483][T29055] should_fail_ex.cold+0x5/0xa [ 1579.513538][T29055] should_failslab+0xc2/0x120 [ 1579.513628][T29055] ? eeprom_prepare_data+0x1ce/0x920 [ 1579.513679][T29055] __kmalloc_noprof+0xf6/0x9c0 [ 1579.513715][T29055] ? rcu_is_watching+0x12/0xc0 [ 1579.513757][T29055] ? eeprom_prepare_data+0x1ce/0x920 [ 1579.513807][T29055] eeprom_prepare_data+0x1ce/0x920 [ 1579.513866][T29055] ? __pfx_eeprom_prepare_data+0x10/0x10 [ 1579.513938][T29055] ? __pfx___mutex_lock+0x10/0x10 [ 1579.513983][T29055] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1579.514022][T29055] ? skb_put+0x138/0x180 [ 1579.514076][T29055] ethnl_default_dump_one+0x296/0xa30 [ 1579.514134][T29055] ethnl_default_dumpit+0x288/0x6c0 [ 1579.514193][T29055] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1579.514246][T29055] ? ethnl_parse_header_dev_get+0x35c/0x930 [ 1579.514301][T29055] genl_dumpit+0x125/0x230 [ 1579.514339][T29055] netlink_dump+0x539/0xd30 [ 1579.514395][T29055] ? __pfx_netlink_dump+0x10/0x10 [ 1579.514444][T29055] ? __pfx_eeprom_parse_request+0x10/0x10 [ 1579.514517][T29055] ? __pfx_ethnl_default_start+0x10/0x10 [ 1579.514566][T29055] ? genl_start+0x67a/0x970 [ 1579.514616][T29055] __netlink_dump_start+0x6d6/0x990 [ 1579.514676][T29055] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1579.514720][T29055] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1579.514771][T29055] ? __pfx_genl_start+0x10/0x10 [ 1579.514803][T29055] ? __pfx_genl_dumpit+0x10/0x10 [ 1579.514836][T29055] ? __pfx_genl_done+0x10/0x10 [ 1579.514873][T29055] ? bpf_lsm_capable+0x9/0x10 [ 1579.514903][T29055] ? security_capable+0x80/0x260 [ 1579.514952][T29055] ? ns_capable+0xd2/0xf0 [ 1579.514995][T29055] genl_rcv_msg+0x471/0x800 [ 1579.515037][T29055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1579.515074][T29055] ? __pfx_ethnl_default_start+0x10/0x10 [ 1579.515119][T29055] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1579.515167][T29055] ? __pfx_ethnl_default_done+0x10/0x10 [ 1579.515240][T29055] netlink_rcv_skb+0x159/0x420 [ 1579.515293][T29055] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1579.515330][T29055] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1579.515400][T29055] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1579.515456][T29055] genl_rcv+0x28/0x40 [ 1579.515505][T29055] netlink_unicast+0x5aa/0x870 [ 1579.515564][T29055] ? __pfx_netlink_unicast+0x10/0x10 [ 1579.515645][T29055] netlink_sendmsg+0x8b0/0xda0 [ 1579.515708][T29055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.515759][T29055] ? __import_iovec+0x1d2/0x640 [ 1579.515816][T29055] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1579.515866][T29055] ____sys_sendmsg+0xa54/0xc30 [ 1579.515909][T29055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1579.515953][T29055] ? try_to_wake_up+0x644/0x1a60 [ 1579.516014][T29055] ___sys_sendmsg+0x190/0x1e0 [ 1579.516057][T29055] ? __pfx____sys_sendmsg+0x10/0x10 [ 1579.516097][T29055] ? futex_private_hash_put+0x107/0x1c0 [ 1579.516159][T29055] ? find_held_lock+0x2b/0x80 [ 1579.516223][T29055] __sys_sendmsg+0x170/0x220 [ 1579.516275][T29055] ? __pfx___sys_sendmsg+0x10/0x10 [ 1579.516327][T29055] ? __x64_sys_futex+0x34f/0x4d0 [ 1579.516408][T29055] do_syscall_64+0xc9/0xf80 [ 1579.516455][T29055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.516492][T29055] RIP: 0033:0x7fd33399aeb9 [ 1579.516521][T29055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1579.516555][T29055] RSP: 002b:00007fd331bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1579.516597][T29055] RAX: ffffffffffffffda RBX: 00007fd333c16090 RCX: 00007fd33399aeb9 [ 1579.516621][T29055] RDX: 0000000004004840 RSI: 0000200000001780 RDI: 000000000000000a [ 1579.516644][T29055] RBP: 00007fd333a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1579.516667][T29055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.516688][T29055] R13: 00007fd333c16128 R14: 00007fd333c16090 R15: 00007ffd80eea698 [ 1579.516735][T29055] [ 1580.002509][T29055] i2c i2c-0: new_device: Invalid device name [ 1580.032922][T29049] FAULT_INJECTION: forcing a failure. [ 1580.032922][T29049] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.062637][T29049] CPU: 0 UID: 0 PID: 29049 Comm: syz.3.4265 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1580.062678][T29049] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1580.062688][T29049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1580.062703][T29049] Call Trace: [ 1580.062711][T29049] [ 1580.062720][T29049] dump_stack_lvl+0x100/0x190 [ 1580.062751][T29049] should_fail_ex.cold+0x5/0xa [ 1580.062791][T29049] should_failslab+0xc2/0x120 [ 1580.062826][T29049] __kmalloc_cache_noprof+0x80/0x810 [ 1580.062852][T29049] ? __request_module+0x2b7/0x650 [ 1580.062889][T29049] ? lockdep_hardirqs_on+0x78/0x100 [ 1580.062920][T29049] ? __request_module+0x2b7/0x650 [ 1580.062956][T29049] __request_module+0x2b7/0x650 [ 1580.062992][T29049] ? __pfx___request_module+0x10/0x10 [ 1580.063041][T29049] ? find_held_lock+0x2b/0x80 [ 1580.063064][T29049] ? inet_create+0xa72/0x1060 [ 1580.063098][T29049] inet_create+0xab1/0x1060 [ 1580.063125][T29049] ? inet_create+0x94/0x1060 [ 1580.063157][T29049] __sock_create+0x339/0x860 [ 1580.063190][T29049] __sys_socket+0x14d/0x260 [ 1580.063216][T29049] ? fput+0x79/0x100 [ 1580.063248][T29049] ? __pfx___sys_socket+0x10/0x10 [ 1580.063275][T29049] ? xfd_validate_state+0x129/0x190 [ 1580.063319][T29049] __x64_sys_socket+0x72/0xb0 [ 1580.063347][T29049] ? lockdep_hardirqs_on+0x78/0x100 [ 1580.063374][T29049] do_syscall_64+0xc9/0xf80 [ 1580.063405][T29049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.063429][T29049] RIP: 0033:0x7fd33399aeb9 [ 1580.063448][T29049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.063472][T29049] RSP: 002b:00007fd331bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1580.063495][T29049] RAX: ffffffffffffffda RBX: 00007fd333c15fa0 RCX: 00007fd33399aeb9 [ 1580.063512][T29049] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1580.063526][T29049] RBP: 00007fd333a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1580.063553][T29049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.063567][T29049] R13: 00007fd333c16038 R14: 00007fd333c15fa0 R15: 00007ffd80eea698 [ 1580.063617][T29049] [ 1580.699920][T29069] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1582.142898][T29098] NFSD: Failed to start, no listeners configured. [ 1582.633749][T29109] binder: 29106:29109 ioctl 4018620d ffffffffffffffff returned -22 [ 1582.911311][ T30] audit: type=1804 audit(4294967745.490:40): pid=29121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4273" name=2F6E6577726F6F742F313036312F07 dev="tmpfs" ino=5474 res=1 errno=0 [ 1585.619524][T29172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1585.742750][T29172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1585.824027][T29172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1585.830341][T29172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1586.635991][T29192] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1587.655380][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 1587.812263][ T5144] Bluetooth: hci2: command 0x0c1a tx timeout [ 1587.843963][T29212] vhci_hcd vhci_hcd.1: invalid port number 37 [ 1587.851110][T29212] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 1587.894117][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 1587.894134][T27459] Bluetooth: hci3: command 0x0c1a tx timeout [ 1588.204853][T29220] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1589.703419][T29256] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1590.447192][T29254] vivid-007: ================= START STATUS ================= [ 1590.497040][T29254] vivid-007: Generate PTS: true [ 1590.511338][T29254] vivid-007: Generate SCR: true [ 1590.530160][T29254] tpg source WxH: 320x240 (Y'CbCr) [ 1590.583912][T29254] tpg field: 1 [ 1590.680711][T29254] tpg crop: (0,0)/320x240 [ 1590.695755][T29254] tpg compose: (0,0)/320x240 [ 1590.705961][T29254] tpg colorspace: 8 [ 1590.716447][T29254] tpg transfer function: 0/0 [ 1590.727622][T29254] tpg Y'CbCr encoding: 0/0 [ 1590.733860][T29254] tpg quantization: 0/0 [ 1590.738064][T29254] tpg RGB range: 0/2 [ 1590.801330][T29254] vivid-007: ================== END STATUS ================== [ 1593.002977][ T30] audit: type=1800 audit(4294967755.590:41): pid=29304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4304" name="dbroot" dev="configfs" ino=133581 res=0 errno=0 [ 1596.051092][T29353] zswap: compressor not available [ 1597.869193][T29401] binder: 29400:29401 ioctl 4018620d ffffffffffffffff returned -22 [ 1599.663094][T29424] zswap: compressor û not available [ 1600.442194][T29450] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1601.665261][T29471] FAULT_INJECTION: forcing a failure. [ 1601.665261][T29471] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.795512][T29471] CPU: 1 UID: 0 PID: 29471 Comm: syz.2.4317 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1601.795557][T29471] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1601.795567][T29471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1601.795582][T29471] Call Trace: [ 1601.795591][T29471] [ 1601.795601][T29471] dump_stack_lvl+0x100/0x190 [ 1601.795635][T29471] should_fail_ex.cold+0x5/0xa [ 1601.795676][T29471] should_failslab+0xc2/0x120 [ 1601.795712][T29471] kmem_cache_alloc_noprof+0x83/0x780 [ 1601.795743][T29471] ? __pfx_map_id_range_down+0x10/0x10 [ 1601.795768][T29471] ? security_inode_alloc+0x3b/0x2c0 [ 1601.795806][T29471] ? security_inode_alloc+0x3b/0x2c0 [ 1601.795838][T29471] security_inode_alloc+0x3b/0x2c0 [ 1601.795873][T29471] inode_init_always_gfp+0xced/0x1040 [ 1601.795907][T29471] alloc_inode+0x8e/0x250 [ 1601.795943][T29471] path_from_stashed+0x25b/0x750 [ 1601.795972][T29471] ? do_raw_spin_unlock+0x145/0x1e0 [ 1601.796016][T29471] ns_get_path+0x60/0x80 [ 1601.796044][T29471] proc_ns_get_link+0x121/0x230 [ 1601.796077][T29471] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1601.796114][T29471] ? atime_needs_update+0x8b/0x6b0 [ 1601.796155][T29471] pick_link+0xd17/0x13c0 [ 1601.796177][T29471] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1601.796215][T29471] step_into_slowpath+0x6c2/0xf50 [ 1601.796244][T29471] ? __pfx_step_into_slowpath+0x10/0x10 [ 1601.796269][T29471] ? find_held_lock+0x2b/0x80 [ 1601.796302][T29471] path_openat+0xf95/0x3120 [ 1601.796340][T29471] ? __pfx_path_openat+0x10/0x10 [ 1601.796387][T29471] do_filp_open+0x1f7/0x420 [ 1601.796419][T29471] ? __pfx_do_filp_open+0x10/0x10 [ 1601.796468][T29471] ? _raw_spin_unlock+0x28/0x50 [ 1601.796492][T29471] ? alloc_fd+0x476/0x790 [ 1601.796527][T29471] do_sys_openat2+0x12e/0x220 [ 1601.796565][T29471] ? __pfx_do_sys_openat2+0x10/0x10 [ 1601.796605][T29471] ? __fget_files+0x21f/0x3d0 [ 1601.796638][T29471] __x64_sys_openat+0x12d/0x210 [ 1601.796676][T29471] ? __pfx___x64_sys_openat+0x10/0x10 [ 1601.796714][T29471] ? xfd_validate_state+0x129/0x190 [ 1601.796762][T29471] do_syscall_64+0xc9/0xf80 [ 1601.796794][T29471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.796819][T29471] RIP: 0033:0x7ff9f855b78e [ 1601.796839][T29471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1601.796864][T29471] RSP: 002b:00007ff9f93d2ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1601.796888][T29471] RAX: ffffffffffffffda RBX: 00007ff9f93d36c0 RCX: 00007ff9f855b78e [ 1601.796905][T29471] RDX: 0000000000000002 RSI: 00007ff9f93d2f90 RDI: ffffffffffffff9c [ 1601.796920][T29471] RBP: 00007ff9f8608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1601.796935][T29471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.796950][T29471] R13: 00007ff9f8816038 R14: 00007ff9f8815fa0 R15: 00007ffff049fa68 [ 1601.796981][T29471] [ 1602.290513][T29449] zswap: compressor not available [ 1605.422675][T29541] vhci_hcd vhci_hcd.1: invalid port number 37 [ 1605.428792][T29541] vhci_hcd vhci_hcd.1: default hub control req: 600d v002b i0025 l1 [ 1607.078016][T29559] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1607.222945][T29560] blktrace: Concurrent blktraces are not allowed on loop2 [ 1609.574554][T29575] zswap: compressor not available [ 1611.642946][T29618] syz.3.4339(29618): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1614.666124][T29672] vivid-007: ================= START STATUS ================= [ 1614.737025][T29672] vivid-007: Generate PTS: true [ 1614.822878][T29672] vivid-007: Generate SCR: true [ 1614.855179][T29672] tpg source WxH: 320x240 (Y'CbCr) [ 1614.868609][T29672] tpg field: 1 [ 1614.886386][T29672] tpg crop: (0,0)/320x240 [ 1614.891792][T29672] tpg compose: (0,0)/320x240 [ 1614.975491][T29672] tpg colorspace: 8 [ 1614.979328][T29672] tpg transfer function: 0/0 [ 1614.984150][ T5144] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1614.984177][ T5144] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 1615.000444][ T5144] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 1615.000479][ T5144] Bluetooth: hci3: Unknown advertising packet type: 0x72 [ 1615.008388][ T5144] Bluetooth: hci3: adv larger than maximum supported [ 1615.015638][ T5144] Bluetooth: hci3: Unknown advertising packet type: 0x38 [ 1615.022449][ T5144] Bluetooth: hci3: Unknown advertising packet type: 0x7c [ 1615.029592][ T5144] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1615.127040][T29672] tpg Y'CbCr encoding: 0/0 [ 1615.138192][T29672] tpg quantization: 0/0 [ 1615.167803][T29672] tpg RGB range: 0/2 [ 1615.262094][T29672] vivid-007: ================== END STATUS ================== [ 1616.249242][T29706] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 1616.692747][T29723] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1617.666366][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.672846][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.911312][ T5144] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 1617.911345][ T5144] Bluetooth: hci3: unexpected subevent 0x0c length: 727 > 5 [ 1618.361788][T29749] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1619.118834][T29756] FAULT_INJECTION: forcing a failure. [ 1619.118834][T29756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1619.205489][T29756] CPU: 0 UID: 0 PID: 29756 Comm: syz.1.4353 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1619.205566][T29756] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1619.205576][T29756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1619.205591][T29756] Call Trace: [ 1619.205601][T29756] [ 1619.205610][T29756] dump_stack_lvl+0x100/0x190 [ 1619.205644][T29756] should_fail_ex.cold+0x5/0xa [ 1619.205681][T29756] ? prepare_alloc_pages+0x16d/0x5f0 [ 1619.205722][T29756] should_fail_alloc_page+0xeb/0x140 [ 1619.205759][T29756] prepare_alloc_pages+0x1f0/0x5f0 [ 1619.205797][T29756] ? rcu_is_watching+0x12/0xc0 [ 1619.205824][T29756] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1619.205859][T29756] ? rcu_is_watching+0x12/0xc0 [ 1619.205883][T29756] ? trace_mm_page_alloc+0x10e/0x160 [ 1619.205921][T29756] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1619.205952][T29756] ? __pfx_stack_trace_save+0x10/0x10 [ 1619.205980][T29756] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1619.206009][T29756] ? stack_depot_save_flags+0x27/0x9c0 [ 1619.206058][T29756] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1619.206087][T29756] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1619.206112][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.206136][T29756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.206173][T29756] alloc_pages_bulk_noprof+0x777/0x1500 [ 1619.206205][T29756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1619.206240][T29756] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1619.206281][T29756] ? alloc_pages_noprof+0x233/0x390 [ 1619.206319][T29756] __kasan_populate_vmalloc+0xf0/0x210 [ 1619.206356][T29756] alloc_vmap_area+0x935/0x2a00 [ 1619.206402][T29756] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1619.206445][T29756] __get_vm_area_node+0x1ca/0x330 [ 1619.206489][T29756] __vmalloc_node_range_noprof+0x213/0x1530 [ 1619.206521][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.206554][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.206587][T29756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1619.206626][T29756] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1619.206657][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.206684][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.206707][T29756] ? _copy_from_user+0x59/0xd0 [ 1619.206761][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.206783][T29756] __do_sys_listmount+0x287/0xee0 [ 1619.206808][T29756] ? __pfx_do_futex+0x10/0x10 [ 1619.206841][T29756] ? __pfx___might_resched+0x10/0x10 [ 1619.206878][T29756] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1619.206909][T29756] ? __pfx___do_sys_listmount+0x10/0x10 [ 1619.206938][T29756] ? __pfx_task_work_run+0x10/0x10 [ 1619.206987][T29756] do_syscall_64+0xc9/0xf80 [ 1619.207018][T29756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.207042][T29756] RIP: 0033:0x7f412759aeb9 [ 1619.207061][T29756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.207084][T29756] RSP: 002b:00007f412837c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1619.207107][T29756] RAX: ffffffffffffffda RBX: 00007f4127815fa0 RCX: 00007f412759aeb9 [ 1619.207123][T29756] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1619.207138][T29756] RBP: 00007f4127608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1619.207153][T29756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1619.207168][T29756] R13: 00007f4127816038 R14: 00007f4127815fa0 R15: 00007ffc9f224e08 [ 1619.207197][T29756] [ 1619.207863][T29756] syz.1.4353: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1619.712300][T29756] CPU: 0 UID: 0 PID: 29756 Comm: syz.1.4353 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1619.712356][T29756] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1619.712370][T29756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1619.712390][T29756] Call Trace: [ 1619.712401][T29756] [ 1619.712415][T29756] dump_stack_lvl+0x100/0x190 [ 1619.712461][T29756] warn_alloc.cold+0x95/0x1c1 [ 1619.712524][T29756] ? __pfx_warn_alloc+0x10/0x10 [ 1619.712578][T29756] ? __get_vm_area_node+0x2c5/0x330 [ 1619.712627][T29756] ? __get_vm_area_node+0x208/0x330 [ 1619.712688][T29756] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1619.712733][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.712779][T29756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1619.712845][T29756] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1619.712885][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.712940][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.712970][T29756] ? _copy_from_user+0x59/0xd0 [ 1619.713031][T29756] ? __do_sys_listmount+0x287/0xee0 [ 1619.713056][T29756] __do_sys_listmount+0x287/0xee0 [ 1619.713080][T29756] ? __pfx_do_futex+0x10/0x10 [ 1619.713114][T29756] ? __pfx___might_resched+0x10/0x10 [ 1619.713150][T29756] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1619.713183][T29756] ? __pfx___do_sys_listmount+0x10/0x10 [ 1619.713223][T29756] ? __pfx_task_work_run+0x10/0x10 [ 1619.713272][T29756] do_syscall_64+0xc9/0xf80 [ 1619.713301][T29756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.713325][T29756] RIP: 0033:0x7f412759aeb9 [ 1619.713343][T29756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.713366][T29756] RSP: 002b:00007f412837c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1619.713387][T29756] RAX: ffffffffffffffda RBX: 00007f4127815fa0 RCX: 00007f412759aeb9 [ 1619.713404][T29756] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1619.713418][T29756] RBP: 00007f4127608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1619.713433][T29756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1619.713447][T29756] R13: 00007f4127816038 R14: 00007f4127815fa0 R15: 00007ffc9f224e08 [ 1619.713481][T29756] [ 1619.713490][T29756] Mem-Info: [ 1619.966612][T29756] active_anon:9956 inactive_anon:15933 isolated_anon:0 [ 1619.966612][T29756] active_file:44507 inactive_file:42034 isolated_file:0 [ 1619.966612][T29756] unevictable:768 dirty:697 writeback:0 [ 1619.966612][T29756] slab_reclaimable:12999 slab_unreclaimable:98303 [ 1619.966612][T29756] mapped:26936 shmem:7876 pagetables:1177 [ 1619.966612][T29756] sec_pagetables:0 bounce:0 [ 1619.966612][T29756] kernel_misc_reclaimable:0 [ 1619.966612][T29756] free:1001622 free_pcp:6846 free_cma:0 [ 1620.133747][T29761] random: crng reseeded on system resumption [ 1620.180555][T29756] Node 0 active_anon:39824kB inactive_anon:67984kB active_file:176264kB inactive_file:159944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108880kB dirty:2788kB writeback:0kB shmem:31568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:57344kB kernel_stack:10912kB pagetables:4748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1620.252754][T29756] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:64kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1620.424524][T29756] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.574674][T29756] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1620.630839][T29756] Node 0 DMA32 free:1132140kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39824kB inactive_anon:79608kB active_file:176264kB inactive_file:159944kB unevictable:1536kB writepending:3044kB zspages:800kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:24384kB local_pcp:10724kB free_cma:0kB [ 1620.751833][T29756] lowmem_reserve[]: 0 0 1 1 1 [ 1620.778006][T29756] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.814125][T29756] lowmem_reserve[]: 0 0 0 0 0 [ 1620.915528][T29756] Node 1 Normal free:2846300kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9428kB local_pcp:1096kB free_cma:0kB [ 1621.163851][T29756] lowmem_reserve[]: 0 0 0 0 0 [ 1621.202301][T29756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1621.233327][T29756] Node 0 DMA32: 5072*4kB (UM) 4807*8kB (UME) 3866*16kB (UME) 1379*32kB (UME) 963*64kB (UME) 782*128kB (UME) 725*256kB (UME) 379*512kB (UME) 244*1024kB (UME) 16*2048kB (UME) 34*4096kB (M) = 1127992kB [ 1621.534178][T29756] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1621.622114][T29756] Node 1 Normal: 4*4kB (U) 7*8kB (UE) 7*16kB (UE) 79*32kB (UE) 95*64kB (UME) 32*128kB (UME) 15*256kB (UME) 11*512kB (UE) 0*1024kB 3*2048kB (UME) 688*4096kB (UM) = 2846552kB [ 1621.737854][T29756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1621.788070][T29756] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1621.832325][T29756] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 1621.942242][T29756] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1621.975626][T29756] 95905 total pagecache pages [ 1621.980576][T29756] 70 pages in swap cache [ 1622.046455][T29756] Free swap = 114444kB [ 1622.076893][T29756] Total swap = 124996kB [ 1622.126272][T29756] 2097051 pages RAM [ 1622.151520][T29756] 0 pages HighMem/MovableOnly [ 1622.168054][T29756] 430195 pages reserved [ 1622.191507][T29756] 0 pages cma reserved [ 1623.299144][T29819] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1624.980843][T29869] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1625.260011][T29862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.126837][T29862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.402380][T29862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.402091][ T30] audit: type=1800 audit(4294967789.960:42): pid=29896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4376" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1628.402815][T29921] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1631.125182][T29965] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1631.131352][T29965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1631.182307][T29965] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1631.203221][T29965] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1631.293556][T29965] futex_wake_op: syz.3.4386 tries to shift op by -2048; fix this program [ 1631.312748][T29965] futex_wake_op: syz.3.4386 tries to shift op by -2048; fix this program [ 1632.279057][T29983] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 1632.994301][T30001] can0: slcan on ttyS2. [ 1633.172142][T27459] Bluetooth: hci2: command 0x0c1a tx timeout [ 1633.172158][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 1633.258892][T27459] Bluetooth: hci0: command 0x0c1a tx timeout [ 1633.265404][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 1633.316694][T30005] can0 (unregistered): slcan off ttyS2. [ 1634.111378][T30027] FAULT_INJECTION: forcing a failure. [ 1634.111378][T30027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1634.124815][T30027] CPU: 0 UID: 0 PID: 30027 Comm: syz.0.4394 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1634.124872][T30027] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1634.124887][T30027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1634.124908][T30027] Call Trace: [ 1634.124920][T30027] [ 1634.124933][T30027] dump_stack_lvl+0x100/0x190 [ 1634.124980][T30027] should_fail_ex.cold+0x5/0xa [ 1634.125041][T30027] ? prepare_alloc_pages+0x16d/0x5f0 [ 1634.125095][T30027] should_fail_alloc_page+0xeb/0x140 [ 1634.125145][T30027] prepare_alloc_pages+0x1f0/0x5f0 [ 1634.125193][T30027] ? rcu_is_watching+0x12/0xc0 [ 1634.125230][T30027] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1634.125278][T30027] ? rcu_is_watching+0x12/0xc0 [ 1634.125316][T30027] ? trace_mm_page_alloc+0x10e/0x160 [ 1634.125368][T30027] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1634.125410][T30027] ? __pfx_stack_trace_save+0x10/0x10 [ 1634.125447][T30027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1634.125487][T30027] ? stack_depot_save_flags+0x27/0x9c0 [ 1634.125552][T30027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1634.125591][T30027] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1634.125623][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.125655][T30027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.125706][T30027] alloc_pages_bulk_noprof+0x777/0x1500 [ 1634.125747][T30027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1634.125793][T30027] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1634.125849][T30027] ? alloc_pages_noprof+0x233/0x390 [ 1634.125900][T30027] __kasan_populate_vmalloc+0xf0/0x210 [ 1634.125948][T30027] alloc_vmap_area+0x935/0x2a00 [ 1634.126008][T30027] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1634.126067][T30027] __get_vm_area_node+0x1ca/0x330 [ 1634.126146][T30027] __vmalloc_node_range_noprof+0x213/0x1530 [ 1634.126182][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.126226][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.126272][T30027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1634.126333][T30027] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1634.126375][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.126412][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.126445][T30027] ? _copy_from_user+0x59/0xd0 [ 1634.126502][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.126534][T30027] __do_sys_listmount+0x287/0xee0 [ 1634.126567][T30027] ? __pfx_do_futex+0x10/0x10 [ 1634.126614][T30027] ? __pfx___might_resched+0x10/0x10 [ 1634.126667][T30027] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1634.126712][T30027] ? __pfx___do_sys_listmount+0x10/0x10 [ 1634.126764][T30027] ? __pfx_task_work_run+0x10/0x10 [ 1634.126854][T30027] do_syscall_64+0xc9/0xf80 [ 1634.126897][T30027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.126930][T30027] RIP: 0033:0x7effa839aeb9 [ 1634.126956][T30027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.126989][T30027] RSP: 002b:00007effa91dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1634.127022][T30027] RAX: ffffffffffffffda RBX: 00007effa8615fa0 RCX: 00007effa839aeb9 [ 1634.127045][T30027] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1634.127065][T30027] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1634.127085][T30027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.127105][T30027] R13: 00007effa8616038 R14: 00007effa8615fa0 R15: 00007ffe3d174578 [ 1634.127148][T30027] [ 1634.128094][T30027] syz.0.4394: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1634.803233][T30027] CPU: 0 UID: 0 PID: 30027 Comm: syz.0.4394 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1634.803287][T30027] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1634.803301][T30027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1634.803320][T30027] Call Trace: [ 1634.803332][T30027] [ 1634.803345][T30027] dump_stack_lvl+0x100/0x190 [ 1634.803388][T30027] warn_alloc.cold+0x95/0x1c1 [ 1634.803443][T30027] ? __pfx_warn_alloc+0x10/0x10 [ 1634.803495][T30027] ? __get_vm_area_node+0x2c5/0x330 [ 1634.803545][T30027] ? __get_vm_area_node+0x208/0x330 [ 1634.803602][T30027] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1634.803646][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.803691][T30027] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1634.803743][T30027] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1634.803801][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.803835][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.803865][T30027] ? _copy_from_user+0x59/0xd0 [ 1634.803920][T30027] ? __do_sys_listmount+0x287/0xee0 [ 1634.803958][T30027] __do_sys_listmount+0x287/0xee0 [ 1634.803992][T30027] ? __pfx_do_futex+0x10/0x10 [ 1634.804038][T30027] ? __pfx___might_resched+0x10/0x10 [ 1634.804087][T30027] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1634.804131][T30027] ? __pfx___do_sys_listmount+0x10/0x10 [ 1634.804170][T30027] ? __pfx_task_work_run+0x10/0x10 [ 1634.804237][T30027] do_syscall_64+0xc9/0xf80 [ 1634.804283][T30027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.804315][T30027] RIP: 0033:0x7effa839aeb9 [ 1634.804341][T30027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.804372][T30027] RSP: 002b:00007effa91dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1634.804404][T30027] RAX: ffffffffffffffda RBX: 00007effa8615fa0 RCX: 00007effa839aeb9 [ 1634.804426][T30027] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1634.804446][T30027] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1634.804467][T30027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.804487][T30027] R13: 00007effa8616038 R14: 00007effa8615fa0 R15: 00007ffe3d174578 [ 1634.804529][T30027] [ 1635.260546][T30027] Mem-Info: [ 1635.263790][T30027] active_anon:10176 inactive_anon:55472 isolated_anon:0 [ 1635.263790][T30027] active_file:44177 inactive_file:42524 isolated_file:0 [ 1635.263790][T30027] unevictable:768 dirty:1746 writeback:0 [ 1635.263790][T30027] slab_reclaimable:12794 slab_unreclaimable:97890 [ 1635.263790][T30027] mapped:51027 shmem:45446 pagetables:1393 [ 1635.263790][T30027] sec_pagetables:0 bounce:0 [ 1635.263790][T30027] kernel_misc_reclaimable:0 [ 1635.263790][T30027] free:957281 free_pcp:12690 free_cma:0 [ 1635.642265][T30027] Node 0 active_anon:40604kB inactive_anon:204700kB active_file:176804kB inactive_file:169668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:183912kB dirty:3636kB writeback:0kB shmem:164932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:61440kB kernel_stack:11168kB pagetables:5112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1635.770588][T30027] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1635.936227][T30027] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1636.080893][T30027] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1636.125086][T30049] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1636.257211][T30027] Node 0 DMA32 free:966304kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39872kB inactive_anon:209868kB active_file:169108kB inactive_file:169812kB unevictable:1536kB writepending:3756kB zspages:800kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:57808kB local_pcp:22336kB free_cma:0kB [ 1636.333223][T30027] lowmem_reserve[]: 0 0 1 1 1 [ 1636.338076][T30027] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1636.752181][T30027] lowmem_reserve[]: 0 0 0 0 0 [ 1636.916272][T30027] Node 1 Normal free:2850200kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9628kB local_pcp:7576kB free_cma:0kB [ 1637.242373][T30027] lowmem_reserve[]: 0 0 0 0 0 [ 1637.247178][T30027] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1637.353773][T30027] Node 0 DMA32: 1452*4kB (UE) 3100*8kB (UE) 2339*16kB (UME) 4*32kB (UME) 177*64kB (UME) 755*128kB (UME) 726*256kB (UME) 379*512kB (UME) 244*1024kB (UME) 14*2048kB (UME) 31*4096kB (M) = 961536kB [ 1637.404711][T30027] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1637.530945][T30063] zswap: compressor not available [ 1637.545431][T30027] Node 1 Normal: 6*4kB (UM) 8*8kB (UME) 8*16kB (UME) 98*32kB (UME) 96*64kB (UME) 33*128kB (UME) 14*256kB (UE) 11*512kB (UE) 1*1024kB (M) 4*2048kB (UME) 688*4096kB (UM) = 2850200kB [ 1637.762458][T30027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1637.832176][T30027] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1637.966872][T30027] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=1048576kB [ 1638.040963][T30027] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1638.111361][T30027] 124611 total pagecache pages [ 1638.159888][T30027] 70 pages in swap cache [ 1638.201627][T30027] Free swap = 114444kB [ 1638.218956][T30027] Total swap = 124996kB [ 1638.273383][T30027] 2097051 pages RAM [ 1638.277250][T30027] 0 pages HighMem/MovableOnly [ 1638.281939][T30027] 430195 pages reserved [ 1638.372263][T30027] 0 pages cma reserved [ 1639.026543][T30088] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1642.836776][T30176] FAULT_INJECTION: forcing a failure. [ 1642.836776][T30176] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1642.922101][T30176] CPU: 0 UID: 0 PID: 30176 Comm: syz.3.4415 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1642.922165][T30176] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1642.922180][T30176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1642.922201][T30176] Call Trace: [ 1642.922213][T30176] [ 1642.922226][T30176] dump_stack_lvl+0x100/0x190 [ 1642.922271][T30176] should_fail_ex.cold+0x5/0xa [ 1642.922317][T30176] ? prepare_alloc_pages+0x16d/0x5f0 [ 1642.922373][T30176] should_fail_alloc_page+0xeb/0x140 [ 1642.922417][T30176] prepare_alloc_pages+0x1f0/0x5f0 [ 1642.922460][T30176] ? rcu_is_watching+0x12/0xc0 [ 1642.922492][T30176] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1642.922537][T30176] ? rcu_is_watching+0x12/0xc0 [ 1642.922568][T30176] ? trace_mm_page_alloc+0x10e/0x160 [ 1642.922622][T30176] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1642.922663][T30176] ? __pfx_stack_trace_save+0x10/0x10 [ 1642.922701][T30176] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1642.922738][T30176] ? stack_depot_save_flags+0x27/0x9c0 [ 1642.922801][T30176] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1642.922839][T30176] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1642.922871][T30176] ? __do_sys_listmount+0x287/0xee0 [ 1642.922903][T30176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.922968][T30176] alloc_pages_bulk_noprof+0x777/0x1500 [ 1642.923031][T30176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1642.923079][T30176] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1642.923145][T30176] ? alloc_pages_noprof+0x233/0x390 [ 1642.923197][T30176] __kasan_populate_vmalloc+0xf0/0x210 [ 1642.923247][T30176] alloc_vmap_area+0x935/0x2a00 [ 1642.923311][T30176] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1642.923369][T30176] __get_vm_area_node+0x1ca/0x330 [ 1642.923431][T30176] __vmalloc_node_range_noprof+0x213/0x1530 [ 1642.923467][T30176] ? __do_sys_listmount+0x287/0xee0 [ 1642.923499][T30176] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1642.923532][T30176] ? lockdep_hardirqs_on+0x78/0x100 [ 1642.923573][T30176] ? __do_sys_listmount+0x287/0xee0 [ 1642.923612][T30176] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1642.923664][T30176] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1642.923707][T30176] ? __do_sys_listmount+0x287/0xee0 [ 1642.923747][T30176] ? __do_sys_listmount+0x287/0xee0 [ 1642.923780][T30176] ? _copy_from_user+0x59/0xd0 [ 1642.923839][T30176] ? __do_sys_listmount+0x287/0xee0 [ 1642.923872][T30176] __do_sys_listmount+0x287/0xee0 [ 1642.923905][T30176] ? __pfx_do_futex+0x10/0x10 [ 1642.923955][T30176] ? __pfx___might_resched+0x10/0x10 [ 1642.924007][T30176] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1642.924052][T30176] ? __pfx___do_sys_listmount+0x10/0x10 [ 1642.924094][T30176] ? __pfx_task_work_run+0x10/0x10 [ 1642.924188][T30176] do_syscall_64+0xc9/0xf80 [ 1642.924232][T30176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.924264][T30176] RIP: 0033:0x7fd33399aeb9 [ 1642.924291][T30176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.924323][T30176] RSP: 002b:00007fd331bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1642.924355][T30176] RAX: ffffffffffffffda RBX: 00007fd333c15fa0 RCX: 00007fd33399aeb9 [ 1642.924377][T30176] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1642.924399][T30176] RBP: 00007fd333a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1642.924419][T30176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1642.924440][T30176] R13: 00007fd333c16038 R14: 00007fd333c15fa0 R15: 00007ffd80eea698 [ 1642.924481][T30176] [ 1643.699954][T30186] can: request_module (can-proto-0) failed. [ 1644.860238][T30218] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1647.845613][T30286] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1647.896963][T30286] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 1650.787799][T30329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4433'. [ 1651.261492][T30344] netlink: 'syz.0.4436': attribute type 1 has an invalid length. [ 1651.416461][T30343] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1652.245628][ T30] audit: type=1800 audit(4294967814.830:43): pid=30352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4437" name="dbroot" dev="configfs" ino=137669 res=0 errno=0 [ 1652.476316][T30359] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1652.667512][T30362] FAULT_INJECTION: forcing a failure. [ 1652.667512][T30362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1652.774253][T30362] CPU: 1 UID: 0 PID: 30362 Comm: syz.3.4439 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1652.774294][T30362] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1652.774304][T30362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1652.774319][T30362] Call Trace: [ 1652.774328][T30362] [ 1652.774338][T30362] dump_stack_lvl+0x100/0x190 [ 1652.774374][T30362] should_fail_ex.cold+0x5/0xa [ 1652.774410][T30362] ? prepare_alloc_pages+0x16d/0x5f0 [ 1652.774450][T30362] should_fail_alloc_page+0xeb/0x140 [ 1652.774486][T30362] prepare_alloc_pages+0x1f0/0x5f0 [ 1652.774524][T30362] ? rcu_is_watching+0x12/0xc0 [ 1652.774551][T30362] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1652.774586][T30362] ? rcu_is_watching+0x12/0xc0 [ 1652.774609][T30362] ? trace_mm_page_alloc+0x10e/0x160 [ 1652.774647][T30362] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1652.774678][T30362] ? __pfx_stack_trace_save+0x10/0x10 [ 1652.774705][T30362] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1652.774735][T30362] ? stack_depot_save_flags+0x27/0x9c0 [ 1652.774786][T30362] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1652.774815][T30362] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1652.774839][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1652.774864][T30362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.774901][T30362] alloc_pages_bulk_noprof+0x777/0x1500 [ 1652.774932][T30362] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1652.774966][T30362] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1652.775007][T30362] ? alloc_pages_noprof+0x233/0x390 [ 1652.775045][T30362] __kasan_populate_vmalloc+0xf0/0x210 [ 1652.775081][T30362] alloc_vmap_area+0x935/0x2a00 [ 1652.775133][T30362] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1652.775177][T30362] __get_vm_area_node+0x1ca/0x330 [ 1652.775220][T30362] __vmalloc_node_range_noprof+0x213/0x1530 [ 1652.775246][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1652.775296][T30362] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1652.775336][T30362] ? lockdep_hardirqs_on+0x78/0x100 [ 1652.775389][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1652.775423][T30362] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1652.775462][T30362] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1652.775492][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1652.775519][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1652.775542][T30362] ? _copy_from_user+0x59/0xd0 [ 1652.775583][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1652.775606][T30362] __do_sys_listmount+0x287/0xee0 [ 1652.775630][T30362] ? __pfx_do_futex+0x10/0x10 [ 1652.775665][T30362] ? __pfx___might_resched+0x10/0x10 [ 1652.775702][T30362] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1652.775735][T30362] ? __pfx___do_sys_listmount+0x10/0x10 [ 1652.775764][T30362] ? __pfx_task_work_run+0x10/0x10 [ 1652.775815][T30362] do_syscall_64+0xc9/0xf80 [ 1652.775846][T30362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.775871][T30362] RIP: 0033:0x7fd33399aeb9 [ 1652.775890][T30362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1652.775914][T30362] RSP: 002b:00007fd331bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1652.775937][T30362] RAX: ffffffffffffffda RBX: 00007fd333c15fa0 RCX: 00007fd33399aeb9 [ 1652.775954][T30362] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1652.775969][T30362] RBP: 00007fd333a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1652.775984][T30362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1652.775999][T30362] R13: 00007fd333c16038 R14: 00007fd333c15fa0 R15: 00007ffd80eea698 [ 1652.776030][T30362] [ 1653.388212][T30362] warn_alloc: 1 callbacks suppressed [ 1653.388236][T30362] syz.3.4439: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1653.498277][T30362] CPU: 1 UID: 0 PID: 30362 Comm: syz.3.4439 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1653.498330][T30362] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1653.498341][T30362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1653.498365][T30362] Call Trace: [ 1653.498374][T30362] [ 1653.498383][T30362] dump_stack_lvl+0x100/0x190 [ 1653.498417][T30362] warn_alloc.cold+0x95/0x1c1 [ 1653.498459][T30362] ? __pfx_warn_alloc+0x10/0x10 [ 1653.498498][T30362] ? __get_vm_area_node+0x2c5/0x330 [ 1653.498534][T30362] ? __get_vm_area_node+0x208/0x330 [ 1653.498578][T30362] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1653.498602][T30362] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1653.498629][T30362] ? lockdep_hardirqs_on+0x78/0x100 [ 1653.498663][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1653.498696][T30362] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1653.498734][T30362] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1653.498765][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1653.498791][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1653.498815][T30362] ? _copy_from_user+0x59/0xd0 [ 1653.498856][T30362] ? __do_sys_listmount+0x287/0xee0 [ 1653.498879][T30362] __do_sys_listmount+0x287/0xee0 [ 1653.498903][T30362] ? __pfx_do_futex+0x10/0x10 [ 1653.498939][T30362] ? __pfx___might_resched+0x10/0x10 [ 1653.498976][T30362] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1653.499009][T30362] ? __pfx___do_sys_listmount+0x10/0x10 [ 1653.499038][T30362] ? __pfx_task_work_run+0x10/0x10 [ 1653.499095][T30362] do_syscall_64+0xc9/0xf80 [ 1653.499127][T30362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.499152][T30362] RIP: 0033:0x7fd33399aeb9 [ 1653.499171][T30362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.499195][T30362] RSP: 002b:00007fd331bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1653.499222][T30362] RAX: ffffffffffffffda RBX: 00007fd333c15fa0 RCX: 00007fd33399aeb9 [ 1653.499239][T30362] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1653.499255][T30362] RBP: 00007fd333a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1653.499270][T30362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1653.499285][T30362] R13: 00007fd333c16038 R14: 00007fd333c15fa0 R15: 00007ffd80eea698 [ 1653.499318][T30362] [ 1653.499331][T30362] Mem-Info: [ 1653.769110][T30362] active_anon:9927 inactive_anon:80669 isolated_anon:0 [ 1653.769110][T30362] active_file:41438 inactive_file:44625 isolated_file:0 [ 1653.769110][T30362] unevictable:768 dirty:710 writeback:0 [ 1653.769110][T30362] slab_reclaimable:12730 slab_unreclaimable:98117 [ 1653.769110][T30362] mapped:52198 shmem:70377 pagetables:1449 [ 1653.769110][T30362] sec_pagetables:0 bounce:0 [ 1653.769110][T30362] kernel_misc_reclaimable:0 [ 1653.769110][T30362] free:922042 free_pcp:23876 free_cma:0 [ 1653.993196][T30362] Node 0 active_anon:39704kB inactive_anon:331848kB active_file:165612kB inactive_file:178372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:213612kB dirty:2900kB writeback:0kB shmem:289268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:61440kB kernel_stack:11084kB pagetables:5680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1654.078626][T30362] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1654.185423][T30362] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.334036][T30362] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1654.339899][T30362] Node 0 DMA32 free:815700kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39764kB inactive_anon:343564kB active_file:166512kB inactive_file:177472kB unevictable:1536kB writepending:2904kB zspages:988kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:69472kB local_pcp:52708kB free_cma:0kB [ 1654.482631][T30362] lowmem_reserve[]: 0 0 1 1 1 [ 1654.487451][T30362] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.592855][T30362] lowmem_reserve[]: 0 0 0 0 0 [ 1654.618170][T30362] Node 1 Normal free:2844508kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:48kB active_file:100kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7884kB local_pcp:7884kB free_cma:0kB [ 1654.755879][T30362] lowmem_reserve[]: 0 0 0 0 0 [ 1654.871427][T30362] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1655.128828][T30362] Node 0 DMA32: 1853*4kB (UE) 3113*8kB (UE) 2486*16kB (UME) 5*32kB (ME) 25*64kB (UE) 51*128kB (UE) 561*256kB (UME) 385*512kB (UME) 245*1024kB (UME) 13*2048kB (UME) 26*4096kB (M) = 805116kB [ 1655.322268][T30362] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1655.421889][T30362] Node 1 Normal: 4*4kB (M) 7*8kB (ME) 9*16kB (ME) 12*32kB (UME) 12*64kB (ME) 7*128kB (ME) 3*256kB (ME) 2*512kB (UE) 2*1024kB (UM) 4*2048kB (ME) 688*4096kB (UM) = 2832344kB [ 1655.572340][T30362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.699587][T30362] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1655.812150][T27459] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1655.849133][T30362] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=1048576kB [ 1655.911161][T30362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.021367][T30362] 165245 total pagecache pages [ 1656.042082][T30362] 70 pages in swap cache [ 1656.052778][T30362] Free swap = 114284kB [ 1656.158178][T30362] Total swap = 124996kB [ 1656.194494][T30362] 2097051 pages RAM [ 1656.198360][T30362] 0 pages HighMem/MovableOnly [ 1656.252108][T30362] 430195 pages reserved [ 1656.268015][T30362] 0 pages cma reserved [ 1656.370386][T30392] random: crng reseeded on system resumption [ 1656.593243][T30408] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1656.733819][T30398] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1657.758629][T30420] FAULT_INJECTION: forcing a failure. [ 1657.758629][T30420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.794894][T30424] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 1657.934360][T30420] CPU: 0 UID: 0 PID: 30420 Comm: syz.0.4450 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1657.934401][T30420] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1657.934411][T30420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1657.934425][T30420] Call Trace: [ 1657.934433][T30420] [ 1657.934442][T30420] dump_stack_lvl+0x100/0x190 [ 1657.934485][T30420] should_fail_ex.cold+0x5/0xa [ 1657.934523][T30420] _copy_from_user+0x2e/0xd0 [ 1657.934557][T30420] ____sys_sendmsg+0x1d1/0xc30 [ 1657.934610][T30420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1657.934643][T30420] ? __pfx___schedule+0x10/0x10 [ 1657.934672][T30420] ___sys_sendmsg+0x190/0x1e0 [ 1657.934702][T30420] ? __pfx____sys_sendmsg+0x10/0x10 [ 1657.934762][T30420] __sys_sendmmsg+0x205/0x430 [ 1657.934801][T30420] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1657.934844][T30420] ? __pfx_do_futex+0x10/0x10 [ 1657.934889][T30420] ? fput+0x79/0x100 [ 1657.934921][T30420] ? xfd_validate_state+0x129/0x190 [ 1657.934970][T30420] __x64_sys_sendmmsg+0x9c/0x100 [ 1657.935005][T30420] ? lockdep_hardirqs_on+0x78/0x100 [ 1657.935033][T30420] do_syscall_64+0xc9/0xf80 [ 1657.935063][T30420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.935088][T30420] RIP: 0033:0x7effa839aeb9 [ 1657.935107][T30420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.935131][T30420] RSP: 002b:00007effa91dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1657.935154][T30420] RAX: ffffffffffffffda RBX: 00007effa8615fa0 RCX: 00007effa839aeb9 [ 1657.935170][T30420] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000006 [ 1657.935185][T30420] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1657.935200][T30420] R10: 0000000020020000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.935215][T30420] R13: 00007effa8616038 R14: 00007effa8615fa0 R15: 00007ffe3d174578 [ 1657.935245][T30420] [ 1660.595923][T30461] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 1663.007921][T27459] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1663.007965][T27459] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 1663.028759][T27459] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1663.028799][T27459] Bluetooth: hci0: adv larger than maximum supported [ 1663.037204][T27459] Bluetooth: hci0: adv larger than maximum supported [ 1663.044164][T27459] Bluetooth: hci0: Unknown advertising packet type: 0x50 [ 1663.050894][T27459] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1664.884935][T30504] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1665.924495][T30524] Invalid ELF header magic: != ELF [ 1666.213330][T30518] zswap: compressor not available [ 1668.825648][T30593] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1668.948462][T30584] nvme_fabrics: missing parameter 'transport=%s' [ 1668.978234][T30584] nvme_fabrics: missing parameter 'nqn=%s' [ 1669.016141][T30591] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0014 i0006 l2042 [ 1669.112920][ T30] audit: type=1800 audit(4294967831.690:44): pid=30604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4478" name="features" dev="configfs" ino=137160 res=0 errno=0 [ 1669.171583][T30604] sd 0:0:1:0: PR command failed: 1026 [ 1669.178726][T30604] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1669.304713][T30604] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1670.020286][T30616] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 1670.602387][T27459] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1670.602429][T27459] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 1670.620046][T27459] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1670.621965][T27459] Bluetooth: hci2: adv larger than maximum supported [ 1670.629374][T27459] Bluetooth: hci2: Unknown advertising packet type: 0x11 [ 1670.636161][T27459] Bluetooth: hci2: adv larger than maximum supported [ 1670.643330][T27459] Bluetooth: hci2: Unknown advertising packet type: 0x5c [ 1670.650328][T27459] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1671.977576][T30656] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1672.022504][T30647] can: request_module (can-proto-4) failed. [ 1673.190018][T30679] blktrace: Concurrent blktraces are not allowed on loop2 [ 1673.764071][T30694] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 1674.283745][T30695] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 1676.171404][T30753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1678.663250][T30816] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1678.998588][T30819] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1679.108495][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1679.114997][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1681.707612][ T30] audit: type=1800 audit(4294967844.290:45): pid=30885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4506" name="features" dev="configfs" ino=138677 res=0 errno=0 [ 1681.741558][T30885] sd 0:0:1:0: PR command failed: 1026 [ 1681.749698][T30885] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1681.761239][T30885] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1683.550571][T30903] zswap: compressor not available [ 1684.817265][T30926] FAULT_INJECTION: forcing a failure. [ 1684.817265][T30926] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1684.892373][T30926] CPU: 1 UID: 0 PID: 30926 Comm: syz.3.4515 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1684.892415][T30926] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1684.892425][T30926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1684.892441][T30926] Call Trace: [ 1684.892449][T30926] [ 1684.892458][T30926] dump_stack_lvl+0x100/0x190 [ 1684.892493][T30926] should_fail_ex.cold+0x5/0xa [ 1684.892534][T30926] get_futex_key+0x1d2/0x1620 [ 1684.892569][T30926] ? __pfx_get_futex_key+0x10/0x10 [ 1684.892611][T30926] futex_wake+0xea/0x530 [ 1684.892648][T30926] ? rcu_is_watching+0x12/0xc0 [ 1684.892673][T30926] ? lockdep_hardirqs_on+0x78/0x100 [ 1684.892702][T30926] ? __pfx_futex_wake+0x10/0x10 [ 1684.892744][T30926] ? fd_install+0x223/0x580 [ 1684.892769][T30926] ? putname+0xf5/0x1a0 [ 1684.892807][T30926] do_futex+0x32b/0x350 [ 1684.892849][T30926] ? __pfx_do_futex+0x10/0x10 [ 1684.892881][T30926] ? __pfx_do_sys_openat2+0x10/0x10 [ 1684.892922][T30926] ? __fget_files+0x21f/0x3d0 [ 1684.892952][T30926] __x64_sys_futex+0x34f/0x4d0 [ 1684.892989][T30926] ? __x64_sys_openat+0x12d/0x210 [ 1684.893027][T30926] ? __pfx___x64_sys_futex+0x10/0x10 [ 1684.893061][T30926] ? xfd_validate_state+0x129/0x190 [ 1684.893113][T30926] do_syscall_64+0xc9/0xf80 [ 1684.893145][T30926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.893170][T30926] RIP: 0033:0x7fd33399aeb9 [ 1684.893189][T30926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.893215][T30926] RSP: 002b:00007fd331bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1684.893239][T30926] RAX: ffffffffffffffda RBX: 00007fd333c15fa8 RCX: 00007fd33399aeb9 [ 1684.893255][T30926] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd333c15fac [ 1684.893271][T30926] RBP: 00007fd333c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.893285][T30926] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1684.893300][T30926] R13: 00007fd333c16038 R14: 00007ffd80eea5b0 R15: 00007ffd80eea698 [ 1684.893332][T30926] [ 1685.805719][T30940] FAULT_INJECTION: forcing a failure. [ 1685.805719][T30940] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1685.842194][T30940] CPU: 1 UID: 0 PID: 30940 Comm: syz.1.4517 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1685.842255][T30940] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1685.842268][T30940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1685.842288][T30940] Call Trace: [ 1685.842300][T30940] [ 1685.842314][T30940] dump_stack_lvl+0x100/0x190 [ 1685.842360][T30940] should_fail_ex.cold+0x5/0xa [ 1685.842407][T30940] ? prepare_alloc_pages+0x16d/0x5f0 [ 1685.842460][T30940] should_fail_alloc_page+0xeb/0x140 [ 1685.842523][T30940] prepare_alloc_pages+0x1f0/0x5f0 [ 1685.842571][T30940] ? rcu_is_watching+0x12/0xc0 [ 1685.842609][T30940] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1685.842656][T30940] ? rcu_is_watching+0x12/0xc0 [ 1685.842690][T30940] ? trace_mm_page_alloc+0x10e/0x160 [ 1685.842739][T30940] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1685.842780][T30940] ? __pfx_stack_trace_save+0x10/0x10 [ 1685.842817][T30940] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1685.842856][T30940] ? stack_depot_save_flags+0x27/0x9c0 [ 1685.842920][T30940] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1685.842987][T30940] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1685.843022][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1685.843057][T30940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.843109][T30940] alloc_pages_bulk_noprof+0x777/0x1500 [ 1685.843153][T30940] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1685.843202][T30940] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1685.843260][T30940] ? alloc_pages_noprof+0x233/0x390 [ 1685.843311][T30940] __kasan_populate_vmalloc+0xf0/0x210 [ 1685.843363][T30940] alloc_vmap_area+0x935/0x2a00 [ 1685.843428][T30940] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1685.843488][T30940] __get_vm_area_node+0x1ca/0x330 [ 1685.843546][T30940] __vmalloc_node_range_noprof+0x213/0x1530 [ 1685.843580][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1685.843612][T30940] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1685.843668][T30940] ? lockdep_hardirqs_on+0x78/0x100 [ 1685.843717][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1685.843761][T30940] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1685.843824][T30940] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1685.843867][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1685.843903][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1685.843942][T30940] ? _copy_from_user+0x59/0xd0 [ 1685.843999][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1685.844031][T30940] __do_sys_listmount+0x287/0xee0 [ 1685.844065][T30940] ? __pfx_do_futex+0x10/0x10 [ 1685.844114][T30940] ? __pfx___might_resched+0x10/0x10 [ 1685.844164][T30940] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1685.844209][T30940] ? __pfx___do_sys_listmount+0x10/0x10 [ 1685.844250][T30940] ? __pfx_task_work_run+0x10/0x10 [ 1685.844319][T30940] do_syscall_64+0xc9/0xf80 [ 1685.844364][T30940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.844399][T30940] RIP: 0033:0x7f412759aeb9 [ 1685.844426][T30940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1685.844459][T30940] RSP: 002b:00007f412837c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1685.844505][T30940] RAX: ffffffffffffffda RBX: 00007f4127815fa0 RCX: 00007f412759aeb9 [ 1685.844527][T30940] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1685.844568][T30940] RBP: 00007f4127608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1685.844589][T30940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.844610][T30940] R13: 00007f4127816038 R14: 00007f4127815fa0 R15: 00007ffc9f224e08 [ 1685.844653][T30940] [ 1686.283374][T30940] syz.1.4517: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1686.614227][T30940] CPU: 1 UID: 0 PID: 30940 Comm: syz.1.4517 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1686.614268][T30940] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1686.614277][T30940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1686.614291][T30940] Call Trace: [ 1686.614299][T30940] [ 1686.614309][T30940] dump_stack_lvl+0x100/0x190 [ 1686.614341][T30940] warn_alloc.cold+0x95/0x1c1 [ 1686.614380][T30940] ? __pfx_warn_alloc+0x10/0x10 [ 1686.614418][T30940] ? __get_vm_area_node+0x2c5/0x330 [ 1686.614454][T30940] ? __get_vm_area_node+0x208/0x330 [ 1686.614496][T30940] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1686.614520][T30940] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1686.614546][T30940] ? lockdep_hardirqs_on+0x78/0x100 [ 1686.614578][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1686.614618][T30940] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1686.614656][T30940] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1686.614686][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1686.614711][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1686.614753][T30940] ? _copy_from_user+0x59/0xd0 [ 1686.614793][T30940] ? __do_sys_listmount+0x287/0xee0 [ 1686.614815][T30940] __do_sys_listmount+0x287/0xee0 [ 1686.614839][T30940] ? __pfx_do_futex+0x10/0x10 [ 1686.614873][T30940] ? __pfx___might_resched+0x10/0x10 [ 1686.614909][T30940] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1686.614941][T30940] ? __pfx___do_sys_listmount+0x10/0x10 [ 1686.614971][T30940] ? __pfx_task_work_run+0x10/0x10 [ 1686.615020][T30940] do_syscall_64+0xc9/0xf80 [ 1686.615051][T30940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.615075][T30940] RIP: 0033:0x7f412759aeb9 [ 1686.615094][T30940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1686.615117][T30940] RSP: 002b:00007f412837c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1686.615140][T30940] RAX: ffffffffffffffda RBX: 00007f4127815fa0 RCX: 00007f412759aeb9 [ 1686.615156][T30940] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1686.615172][T30940] RBP: 00007f4127608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1686.615186][T30940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.615202][T30940] R13: 00007f4127816038 R14: 00007f4127815fa0 R15: 00007ffc9f224e08 [ 1686.615232][T30940] [ 1687.102212][T30940] Mem-Info: [ 1687.105352][T30940] active_anon:11966 inactive_anon:24719 isolated_anon:0 [ 1687.105352][T30940] active_file:43014 inactive_file:43715 isolated_file:0 [ 1687.105352][T30940] unevictable:768 dirty:1696 writeback:0 [ 1687.105352][T30940] slab_reclaimable:12690 slab_unreclaimable:98043 [ 1687.105352][T30940] mapped:35393 shmem:17461 pagetables:1285 [ 1687.105352][T30940] sec_pagetables:0 bounce:0 [ 1687.105352][T30940] kernel_misc_reclaimable:0 [ 1687.105352][T30940] free:974626 free_pcp:27329 free_cma:0 [ 1687.274209][T30940] Node 0 active_anon:49364kB inactive_anon:105056kB active_file:171956kB inactive_file:184972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144300kB dirty:17040kB writeback:2048kB shmem:74108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:61440kB kernel_stack:11264kB pagetables:4980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1687.427615][T30940] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1687.562149][T30940] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.752101][T30940] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1687.819858][T30940] Node 0 DMA32 free:1022908kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53764kB inactive_anon:120856kB active_file:171956kB inactive_file:184972kB unevictable:1536kB writepending:15416kB zspages:976kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:66164kB local_pcp:43892kB free_cma:0kB [ 1688.027569][T30940] lowmem_reserve[]: 0 0 1 1 1 [ 1688.276912][T30940] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.382386][T30940] lowmem_reserve[]: 0 0 0 0 0 [ 1688.387488][T30940] Node 1 Normal free:2837384kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26596kB local_pcp:3664kB free_cma:0kB [ 1688.662330][T30940] lowmem_reserve[]: 0 0 0 0 0 [ 1688.682158][T30940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1688.783214][T30940] Node 0 DMA32: 3554*4kB (UE) 3368*8kB (UME) 2992*16kB (UME) 270*32kB (UE) 910*64kB (UME) 658*128kB (UME) 726*256kB (UME) 399*512kB (UME) 256*1024kB (UME) 4*2048kB (ME) 27*4096kB (UM) = 1011208kB [ 1688.843457][T30940] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1688.863086][T30940] Node 1 Normal: 6*4kB (UM) 12*8kB (UME) 13*16kB (UME) 16*32kB (UME) 17*64kB (UME) 24*128kB (UME) 4*256kB (UME) 4*512kB (UE) 1*1024kB (M) 5*2048kB (UME) 688*4096kB (UM) = 2837384kB [ 1688.894203][T30940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1688.926452][T30940] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1688.948490][T30940] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=1048576kB [ 1688.979863][T30940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1689.008673][T30940] 116249 total pagecache pages [ 1689.080278][T30940] 70 pages in swap cache [ 1689.098294][T30940] Free swap = 114288kB [ 1689.119607][T30940] Total swap = 124996kB [ 1689.136941][T30940] 2097051 pages RAM [ 1689.198643][T30940] 0 pages HighMem/MovableOnly [ 1689.230504][T30940] 430195 pages reserved [ 1689.242093][T30940] 0 pages cma reserved [ 1690.547132][T30992] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 1690.624161][T30992] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1690.666915][T30992] ptp ptp0: new virtual clock ptp1 [ 1690.680730][T30992] ptp ptp0: new virtual clock ptp2 [ 1690.779376][T30992] ptp ptp0: new virtual clock ptp3 [ 1690.805185][T30992] ptp ptp0: guarantee physical clock free running [ 1697.852294][T31130] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 1698.083218][T31133] FAULT_INJECTION: forcing a failure. [ 1698.083218][T31133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1698.282367][T31133] CPU: 1 UID: 0 PID: 31133 Comm: syz.0.4546 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1698.282426][T31133] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1698.282441][T31133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1698.282462][T31133] Call Trace: [ 1698.282473][T31133] [ 1698.282495][T31133] dump_stack_lvl+0x100/0x190 [ 1698.282542][T31133] should_fail_ex.cold+0x5/0xa [ 1698.282590][T31133] ? prepare_alloc_pages+0x16d/0x5f0 [ 1698.282697][T31133] should_fail_alloc_page+0xeb/0x140 [ 1698.282752][T31133] prepare_alloc_pages+0x1f0/0x5f0 [ 1698.282805][T31133] ? rcu_is_watching+0x12/0xc0 [ 1698.282845][T31133] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1698.282895][T31133] ? rcu_is_watching+0x12/0xc0 [ 1698.282929][T31133] ? trace_mm_page_alloc+0x10e/0x160 [ 1698.282985][T31133] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1698.283029][T31133] ? __pfx_stack_trace_save+0x10/0x10 [ 1698.283070][T31133] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1698.283110][T31133] ? stack_depot_save_flags+0x27/0x9c0 [ 1698.283180][T31133] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1698.283220][T31133] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1698.283255][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1698.283290][T31133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.283344][T31133] alloc_pages_bulk_noprof+0x777/0x1500 [ 1698.283387][T31133] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1698.283442][T31133] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1698.283502][T31133] ? alloc_pages_noprof+0x233/0x390 [ 1698.283556][T31133] __kasan_populate_vmalloc+0xf0/0x210 [ 1698.283607][T31133] alloc_vmap_area+0x935/0x2a00 [ 1698.283679][T31133] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1698.283742][T31133] __get_vm_area_node+0x1ca/0x330 [ 1698.283803][T31133] __vmalloc_node_range_noprof+0x213/0x1530 [ 1698.283840][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1698.283886][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1698.283934][T31133] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1698.283991][T31133] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1698.284035][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1698.284074][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1698.284107][T31133] ? _copy_from_user+0x59/0xd0 [ 1698.284163][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1698.284196][T31133] __do_sys_listmount+0x287/0xee0 [ 1698.284231][T31133] ? __pfx_do_futex+0x10/0x10 [ 1698.284280][T31133] ? __pfx___might_resched+0x10/0x10 [ 1698.284333][T31133] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1698.284379][T31133] ? __pfx___do_sys_listmount+0x10/0x10 [ 1698.284421][T31133] ? __pfx_task_work_run+0x10/0x10 [ 1698.284493][T31133] do_syscall_64+0xc9/0xf80 [ 1698.284539][T31133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.284575][T31133] RIP: 0033:0x7effa839aeb9 [ 1698.284604][T31133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.284640][T31133] RSP: 002b:00007effa91dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1698.284680][T31133] RAX: ffffffffffffffda RBX: 00007effa8615fa0 RCX: 00007effa839aeb9 [ 1698.284704][T31133] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1698.284727][T31133] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1698.284750][T31133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.284772][T31133] R13: 00007effa8616038 R14: 00007effa8615fa0 R15: 00007ffe3d174578 [ 1698.284818][T31133] [ 1699.093628][T31133] syz.0.4546: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1699.363727][T31133] CPU: 0 UID: 0 PID: 31133 Comm: syz.0.4546 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1699.363784][T31133] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1699.363794][T31133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1699.363810][T31133] Call Trace: [ 1699.363818][T31133] [ 1699.363828][T31133] dump_stack_lvl+0x100/0x190 [ 1699.363861][T31133] warn_alloc.cold+0x95/0x1c1 [ 1699.363902][T31133] ? __pfx_warn_alloc+0x10/0x10 [ 1699.363941][T31133] ? __get_vm_area_node+0x2c5/0x330 [ 1699.363978][T31133] ? __get_vm_area_node+0x208/0x330 [ 1699.364071][T31133] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1699.364102][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1699.364135][T31133] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1699.364171][T31133] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1699.364201][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1699.364227][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1699.364249][T31133] ? _copy_from_user+0x59/0xd0 [ 1699.364288][T31133] ? __do_sys_listmount+0x287/0xee0 [ 1699.364313][T31133] __do_sys_listmount+0x287/0xee0 [ 1699.364336][T31133] ? __pfx_do_futex+0x10/0x10 [ 1699.364370][T31133] ? __pfx___might_resched+0x10/0x10 [ 1699.364406][T31133] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1699.364438][T31133] ? __pfx___do_sys_listmount+0x10/0x10 [ 1699.364466][T31133] ? __pfx_task_work_run+0x10/0x10 [ 1699.364515][T31133] do_syscall_64+0xc9/0xf80 [ 1699.364546][T31133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.364576][T31133] RIP: 0033:0x7effa839aeb9 [ 1699.364596][T31133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.364620][T31133] RSP: 002b:00007effa91dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1699.364642][T31133] RAX: ffffffffffffffda RBX: 00007effa8615fa0 RCX: 00007effa839aeb9 [ 1699.364659][T31133] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1699.364675][T31133] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1699.364690][T31133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.364705][T31133] R13: 00007effa8616038 R14: 00007effa8615fa0 R15: 00007ffe3d174578 [ 1699.364735][T31133] [ 1699.813480][T31135] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 1699.918144][T31133] Mem-Info: [ 1699.921368][T31133] active_anon:13433 inactive_anon:63392 isolated_anon:68 [ 1699.921368][T31133] active_file:43160 inactive_file:41637 isolated_file:412 [ 1699.921368][T31133] unevictable:768 dirty:998 writeback:0 [ 1699.921368][T31133] slab_reclaimable:13318 slab_unreclaimable:98127 [ 1699.921368][T31133] mapped:57367 shmem:56426 pagetables:1447 [ 1699.921368][T31133] sec_pagetables:0 bounce:0 [ 1699.921368][T31133] kernel_misc_reclaimable:0 [ 1699.921368][T31133] free:945002 free_pcp:16356 free_cma:0 [ 1700.377367][T31133] Node 0 active_anon:53532kB inactive_anon:257660kB active_file:173340kB inactive_file:166520kB unevictable:1536kB isolated(anon):872kB isolated(file):848kB mapped:235096kB dirty:3984kB writeback:0kB shmem:231068kB shmem_thp:6144kB shmem_pmdmapped:6144kB anon_thp:61440kB kernel_stack:11128kB pagetables:5528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1700.537307][T31133] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1700.650400][T31133] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1700.853378][T27459] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1700.878536][T31133] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1700.987108][T31133] Node 0 DMA32 free:911180kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54012kB inactive_anon:263320kB active_file:173480kB inactive_file:166800kB unevictable:1536kB writepending:3984kB zspages:976kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:46716kB local_pcp:14884kB free_cma:0kB [ 1701.141145][T31133] lowmem_reserve[]: 0 0 1 1 1 [ 1701.151756][T31133] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.305146][T31133] lowmem_reserve[]: 0 0 0 0 0 [ 1701.309915][T31133] Node 1 Normal free:2839400kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:128kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24580kB local_pcp:21924kB free_cma:0kB [ 1701.402189][T31133] lowmem_reserve[]: 0 0 0 0 0 [ 1701.407018][T31133] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1701.597307][T31133] Node 0 DMA32: 1984*4kB (UM) 3376*8kB (UME) 3054*16kB (UME) 321*32kB (UME) 34*64kB (UME) 387*128kB (UME) 701*256kB (UME) 380*512kB (UME) 239*1024kB (UME) 19*2048kB (UME) 23*4096kB (M) = 897664kB [ 1701.753431][T31156] random: crng reseeded on system resumption [ 1701.870530][T31133] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1701.922093][T31133] Node 1 Normal: 6*4kB (UM) 12*8kB (UME) 13*16kB (UME) 15*32kB (UME) 17*64kB (UME) 30*128kB (UME) 5*256kB (UME) 6*512kB (UE) 1*1024kB (M) 5*2048kB (UME) 688*4096kB (UM) = 2839400kB [ 1701.995357][T31133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1702.050332][T31133] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1702.082191][T31133] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=1048576kB [ 1702.162135][T31133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1702.213868][T31133] 149403 total pagecache pages [ 1702.297340][T31168] ubi0: attaching mtd1 [ 1702.301521][T31168] ubi0 error: ubi_attach_mtd_dev: bad VID header (16777279) or data offsets (16777343) [ 1702.311401][T31133] 70 pages in swap cache [ 1702.331680][T31133] Free swap = 114288kB [ 1702.372191][T31133] Total swap = 124996kB [ 1702.376419][T31133] 2097051 pages RAM [ 1702.380263][T31133] 0 pages HighMem/MovableOnly [ 1702.524362][T31133] 430195 pages reserved [ 1702.528588][T31133] 0 pages cma reserved [ 1704.768630][T31203] FAULT_INJECTION: forcing a failure. [ 1704.768630][T31203] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.852583][T31203] CPU: 0 UID: 0 PID: 31203 Comm: syz.0.4552 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1704.852640][T31203] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1704.852653][T31203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1704.852674][T31203] Call Trace: [ 1704.852686][T31203] [ 1704.852699][T31203] dump_stack_lvl+0x100/0x190 [ 1704.852744][T31203] should_fail_ex.cold+0x5/0xa [ 1704.852820][T31203] should_failslab+0xc2/0x120 [ 1704.852865][T31203] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1704.852909][T31203] ? lockdep_init_map_type+0x5c/0x250 [ 1704.852955][T31203] ? __d_alloc+0x34/0xa80 [ 1704.853000][T31203] ? __d_alloc+0x34/0xa80 [ 1704.853037][T31203] __d_alloc+0x34/0xa80 [ 1704.853101][T31203] d_alloc_pseudo+0x1c/0xc0 [ 1704.853153][T31203] alloc_file_pseudo+0xcf/0x230 [ 1704.853204][T31203] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1704.853266][T31203] ? alloc_fd+0x476/0x790 [ 1704.853312][T31203] sock_alloc_file+0x50/0x210 [ 1704.853363][T31203] __sys_socket+0x1c0/0x260 [ 1704.853400][T31203] ? fput+0x79/0x100 [ 1704.853461][T31203] ? __pfx___sys_socket+0x10/0x10 [ 1704.853499][T31203] ? xfd_validate_state+0x129/0x190 [ 1704.853563][T31203] __x64_sys_socket+0x72/0xb0 [ 1704.853604][T31203] ? lockdep_hardirqs_on+0x78/0x100 [ 1704.853645][T31203] do_syscall_64+0xc9/0xf80 [ 1704.853690][T31203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.853725][T31203] RIP: 0033:0x7effa839aeb9 [ 1704.853755][T31203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.853791][T31203] RSP: 002b:00007effa91dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1704.853833][T31203] RAX: ffffffffffffffda RBX: 00007effa8615fa0 RCX: 00007effa839aeb9 [ 1704.853856][T31203] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1704.853878][T31203] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1704.853899][T31203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1704.853921][T31203] R13: 00007effa8616038 R14: 00007effa8615fa0 R15: 00007ffe3d174578 [ 1704.853967][T31203] [ 1705.940127][ T30] audit: type=1800 audit(4294967868.520:46): pid=31220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4555" name="features" dev="configfs" ino=140490 res=0 errno=0 [ 1706.055159][T31222] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1707.349335][T31231] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0014 i0006 l2042 [ 1707.575710][T31223] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 1708.824061][T31246] Invalid ELF header magic: != ELF [ 1709.326450][T31252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4563'. [ 1709.351112][T31252] netlink: 354 bytes leftover after parsing attributes in process `syz.0.4563'. [ 1711.131504][T31290] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1711.752305][T31293] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 1713.212381][T31318] pim6reg: entered allmulticast mode [ 1714.003816][T31321] zswap: compressor not available [ 1715.033053][T31348] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0014 i0006 l2042 [ 1715.853056][T31362] FAULT_INJECTION: forcing a failure. [ 1715.853056][T31362] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1715.872293][T31362] CPU: 0 UID: 0 PID: 31362 Comm: syz.1.4579 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1715.872351][T31362] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1715.872365][T31362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1715.872385][T31362] Call Trace: [ 1715.872396][T31362] [ 1715.872409][T31362] dump_stack_lvl+0x100/0x190 [ 1715.872454][T31362] should_fail_ex.cold+0x5/0xa [ 1715.872503][T31362] ? prepare_alloc_pages+0x16d/0x5f0 [ 1715.872557][T31362] should_fail_alloc_page+0xeb/0x140 [ 1715.872606][T31362] prepare_alloc_pages+0x1f0/0x5f0 [ 1715.872665][T31362] ? rcu_is_watching+0x12/0xc0 [ 1715.872702][T31362] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1715.872747][T31362] ? rcu_is_watching+0x12/0xc0 [ 1715.872777][T31362] ? trace_mm_page_alloc+0x10e/0x160 [ 1715.872820][T31362] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1715.872854][T31362] ? __pfx_stack_trace_save+0x10/0x10 [ 1715.872888][T31362] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1715.872921][T31362] ? stack_depot_save_flags+0x27/0x9c0 [ 1715.872975][T31362] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1715.873008][T31362] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1715.873036][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1715.873063][T31362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.873105][T31362] alloc_pages_bulk_noprof+0x777/0x1500 [ 1715.873140][T31362] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1715.873179][T31362] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1715.873224][T31362] ? alloc_pages_noprof+0x233/0x390 [ 1715.873267][T31362] __kasan_populate_vmalloc+0xf0/0x210 [ 1715.873308][T31362] alloc_vmap_area+0x935/0x2a00 [ 1715.873359][T31362] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1715.873407][T31362] __get_vm_area_node+0x1ca/0x330 [ 1715.873455][T31362] __vmalloc_node_range_noprof+0x213/0x1530 [ 1715.873501][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1715.873529][T31362] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1715.873579][T31362] ? lockdep_hardirqs_on+0x78/0x100 [ 1715.873626][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1715.873665][T31362] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1715.873709][T31362] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1715.873746][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1715.873777][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1715.873805][T31362] ? _copy_from_user+0x59/0xd0 [ 1715.873867][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1715.873893][T31362] __do_sys_listmount+0x287/0xee0 [ 1715.873921][T31362] ? __pfx_do_futex+0x10/0x10 [ 1715.873960][T31362] ? __pfx___might_resched+0x10/0x10 [ 1715.874002][T31362] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1715.874039][T31362] ? __pfx___do_sys_listmount+0x10/0x10 [ 1715.874072][T31362] ? __pfx_task_work_run+0x10/0x10 [ 1715.874128][T31362] do_syscall_64+0xc9/0xf80 [ 1715.874169][T31362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.874198][T31362] RIP: 0033:0x7f412759aeb9 [ 1715.874221][T31362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.874249][T31362] RSP: 002b:00007f412837c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1715.874276][T31362] RAX: ffffffffffffffda RBX: 00007f4127815fa0 RCX: 00007f412759aeb9 [ 1715.874296][T31362] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1715.874313][T31362] RBP: 00007f4127608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1715.874331][T31362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1715.874349][T31362] R13: 00007f4127816038 R14: 00007f4127815fa0 R15: 00007ffc9f224e08 [ 1715.874385][T31362] [ 1715.877207][T31362] syz.1.4579: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 1716.212476][T27459] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1716.362791][T31362] ,cpuset=/,mems_allowed=0-1 [ 1716.383570][T31362] CPU: 0 UID: 0 PID: 31362 Comm: syz.1.4579 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1716.383627][T31362] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1716.383641][T31362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1716.383662][T31362] Call Trace: [ 1716.383674][T31362] [ 1716.383687][T31362] dump_stack_lvl+0x100/0x190 [ 1716.383733][T31362] warn_alloc.cold+0x95/0x1c1 [ 1716.383786][T31362] ? __pfx_warn_alloc+0x10/0x10 [ 1716.383837][T31362] ? __get_vm_area_node+0x2c5/0x330 [ 1716.383883][T31362] ? __get_vm_area_node+0x208/0x330 [ 1716.383942][T31362] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1716.383973][T31362] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1716.384010][T31362] ? lockdep_hardirqs_on+0x78/0x100 [ 1716.384048][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1716.384086][T31362] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1716.384128][T31362] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1716.384162][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1716.384210][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1716.384236][T31362] ? _copy_from_user+0x59/0xd0 [ 1716.384284][T31362] ? __do_sys_listmount+0x287/0xee0 [ 1716.384310][T31362] __do_sys_listmount+0x287/0xee0 [ 1716.384338][T31362] ? __pfx_do_futex+0x10/0x10 [ 1716.384379][T31362] ? __pfx___might_resched+0x10/0x10 [ 1716.384423][T31362] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1716.384461][T31362] ? __pfx___do_sys_listmount+0x10/0x10 [ 1716.384494][T31362] ? __pfx_task_work_run+0x10/0x10 [ 1716.384553][T31362] do_syscall_64+0xc9/0xf80 [ 1716.384600][T31362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.384630][T31362] RIP: 0033:0x7f412759aeb9 [ 1716.384653][T31362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.384681][T31362] RSP: 002b:00007f412837c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1716.384709][T31362] RAX: ffffffffffffffda RBX: 00007f4127815fa0 RCX: 00007f412759aeb9 [ 1716.384728][T31362] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1716.384746][T31362] RBP: 00007f4127608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1716.384764][T31362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1716.384782][T31362] R13: 00007f4127816038 R14: 00007f4127815fa0 R15: 00007ffc9f224e08 [ 1716.384818][T31362] [ 1716.391408][T31362] Mem-Info: [ 1716.762155][T31362] active_anon:11306 inactive_anon:16104 isolated_anon:0 [ 1716.762155][T31362] active_file:54741 inactive_file:37715 isolated_file:0 [ 1716.762155][T31362] unevictable:788 dirty:709 writeback:0 [ 1716.762155][T31362] slab_reclaimable:13237 slab_unreclaimable:97331 [ 1716.762155][T31362] mapped:27447 shmem:8687 pagetables:1250 [ 1716.762155][T31362] sec_pagetables:0 bounce:0 [ 1716.762155][T31362] kernel_misc_reclaimable:0 [ 1716.762155][T31362] free:990132 free_pcp:14528 free_cma:0 [ 1716.877515][T31362] Node 0 active_anon:44424kB inactive_anon:64264kB active_file:218736kB inactive_file:150920kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:111424kB dirty:2848kB writeback:0kB shmem:32412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:57344kB kernel_stack:11280kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1716.979326][T31362] Node 1 active_anon:0kB inactive_anon:0kB active_file:228kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1717.052412][T31362] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1717.132033][T31362] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1717.165748][T31362] Node 0 DMA32 free:1105380kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40324kB inactive_anon:67792kB active_file:218736kB inactive_file:150920kB unevictable:1556kB writepending:2848kB zspages:976kB present:3129332kB managed:2539576kB mlocked:20kB bounce:0kB free_pcp:35484kB local_pcp:21292kB free_cma:0kB [ 1717.480811][T31362] lowmem_reserve[]: 0 0 1 1 1 [ 1717.537769][T31362] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1717.861573][T31394] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 1717.919574][T31362] lowmem_reserve[]: 0 0 0 0 0 [ 1718.072472][T31362] Node 1 Normal free:2841148kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1472kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22112kB local_pcp:20716kB free_cma:0kB [ 1718.252447][T31362] lowmem_reserve[]: 0 0 0 0 0 [ 1718.271235][T31362] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1718.326546][T31407] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1718.335292][T31362] Node 0 DMA32: 7026*4kB (UME) 5675*8kB (UM) 4179*16kB (UME) 1363*32kB (UME) 907*64kB (UME) 688*128kB (UME) 639*256kB (UME) 328*512kB (UME) 205*1024kB (UME) 29*2048kB (UME) 40*4096kB (UM) = 1094768kB [ 1718.592113][T31362] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1718.712329][T31362] Node 1 Normal: 10*4kB (UM) 11*8kB (UME) 13*16kB (UME) 15*32kB (UME) 19*64kB (UME) 29*128kB (UME) 6*256kB (UE) 9*512kB (UE) 1*1024kB (M) 5*2048kB (UME) 688*4096kB (UM) = 2841200kB [ 1718.792750][T31362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.863215][T31362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1718.922477][T31362] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=1048576kB [ 1718.977578][T31362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1719.003239][T31362] 102423 total pagecache pages [ 1719.072225][T31362] 71 pages in swap cache [ 1719.093874][T31362] Free swap = 114288kB [ 1719.170252][T31362] Total swap = 124996kB [ 1719.181003][T31362] 2097051 pages RAM [ 1719.237018][T31362] 0 pages HighMem/MovableOnly [ 1719.250988][T31362] 430195 pages reserved [ 1719.275068][T31362] 0 pages cma reserved [ 1721.623425][T31458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1723.181734][T31482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1723.263295][T31484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4596'. [ 1723.508030][T31482] team0: Port device team_slave_1 removed [ 1729.223766][T31539] FAULT_INJECTION: forcing a failure. [ 1729.223766][T31539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1729.325097][T31539] CPU: 0 UID: 0 PID: 31539 Comm: syz.3.4607 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1729.325152][T31539] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1729.325165][T31539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1729.325185][T31539] Call Trace: [ 1729.325197][T31539] [ 1729.325210][T31539] dump_stack_lvl+0x100/0x190 [ 1729.325266][T31539] should_fail_ex.cold+0x5/0xa [ 1729.325314][T31539] ? prepare_alloc_pages+0x16d/0x5f0 [ 1729.325365][T31539] should_fail_alloc_page+0xeb/0x140 [ 1729.325411][T31539] prepare_alloc_pages+0x1f0/0x5f0 [ 1729.325459][T31539] ? rcu_is_watching+0x12/0xc0 [ 1729.325496][T31539] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1729.325543][T31539] ? rcu_is_watching+0x12/0xc0 [ 1729.325574][T31539] ? trace_mm_page_alloc+0x10e/0x160 [ 1729.325626][T31539] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1729.325665][T31539] ? __pfx_stack_trace_save+0x10/0x10 [ 1729.325710][T31539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1729.325746][T31539] ? stack_depot_save_flags+0x27/0x9c0 [ 1729.325804][T31539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1729.325842][T31539] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1729.325876][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1729.325908][T31539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.325958][T31539] alloc_pages_bulk_noprof+0x777/0x1500 [ 1729.326000][T31539] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1729.326047][T31539] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1729.326101][T31539] ? alloc_pages_noprof+0x233/0x390 [ 1729.326161][T31539] __kasan_populate_vmalloc+0xf0/0x210 [ 1729.326206][T31539] alloc_vmap_area+0x935/0x2a00 [ 1729.326272][T31539] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1729.326325][T31539] __get_vm_area_node+0x1ca/0x330 [ 1729.326378][T31539] __vmalloc_node_range_noprof+0x213/0x1530 [ 1729.326409][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1729.326450][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1729.326491][T31539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1729.326542][T31539] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1729.326580][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1729.326613][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1729.326642][T31539] ? _copy_from_user+0x59/0xd0 [ 1729.326693][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1729.326722][T31539] __do_sys_listmount+0x287/0xee0 [ 1729.326753][T31539] ? __pfx_do_futex+0x10/0x10 [ 1729.326798][T31539] ? __pfx___might_resched+0x10/0x10 [ 1729.326846][T31539] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1729.326888][T31539] ? __pfx___do_sys_listmount+0x10/0x10 [ 1729.326924][T31539] ? __pfx_task_work_run+0x10/0x10 [ 1729.326988][T31539] do_syscall_64+0xc9/0xf80 [ 1729.327028][T31539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.327060][T31539] RIP: 0033:0x7fd33399aeb9 [ 1729.327084][T31539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.327116][T31539] RSP: 002b:00007fd331bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1729.327146][T31539] RAX: ffffffffffffffda RBX: 00007fd333c15fa0 RCX: 00007fd33399aeb9 [ 1729.327166][T31539] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1729.327186][T31539] RBP: 00007fd333a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1729.327206][T31539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1729.327234][T31539] R13: 00007fd333c16038 R14: 00007fd333c15fa0 R15: 00007ffd80eea698 [ 1729.327275][T31539] [ 1729.328006][T31539] syz.3.4607: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1730.091672][T31539] CPU: 1 UID: 0 PID: 31539 Comm: syz.3.4607 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1730.091730][T31539] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1730.091743][T31539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1730.091763][T31539] Call Trace: [ 1730.091775][T31539] [ 1730.091788][T31539] dump_stack_lvl+0x100/0x190 [ 1730.091833][T31539] warn_alloc.cold+0x95/0x1c1 [ 1730.091899][T31539] ? __pfx_warn_alloc+0x10/0x10 [ 1730.091962][T31539] ? __get_vm_area_node+0x2c5/0x330 [ 1730.092011][T31539] ? __get_vm_area_node+0x208/0x330 [ 1730.092064][T31539] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1730.092105][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1730.092154][T31539] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1730.092203][T31539] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1730.092243][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1730.092275][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1730.092305][T31539] ? _copy_from_user+0x59/0xd0 [ 1730.092358][T31539] ? __do_sys_listmount+0x287/0xee0 [ 1730.092386][T31539] __do_sys_listmount+0x287/0xee0 [ 1730.092417][T31539] ? __pfx_do_futex+0x10/0x10 [ 1730.092460][T31539] ? __pfx___might_resched+0x10/0x10 [ 1730.092505][T31539] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1730.092546][T31539] ? __pfx___do_sys_listmount+0x10/0x10 [ 1730.092581][T31539] ? __pfx_task_work_run+0x10/0x10 [ 1730.092645][T31539] do_syscall_64+0xc9/0xf80 [ 1730.092685][T31539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.092715][T31539] RIP: 0033:0x7fd33399aeb9 [ 1730.092740][T31539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.092770][T31539] RSP: 002b:00007fd331bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1730.092800][T31539] RAX: ffffffffffffffda RBX: 00007fd333c15fa0 RCX: 00007fd33399aeb9 [ 1730.092820][T31539] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1730.092840][T31539] RBP: 00007fd333a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1730.092859][T31539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1730.092877][T31539] R13: 00007fd333c16038 R14: 00007fd333c15fa0 R15: 00007ffd80eea698 [ 1730.092916][T31539] [ 1730.507962][T31539] Mem-Info: [ 1730.511301][T31539] active_anon:9894 inactive_anon:36892 isolated_anon:0 [ 1730.511301][T31539] active_file:85460 inactive_file:44048 isolated_file:0 [ 1730.511301][T31539] unevictable:768 dirty:1473 writeback:1024 [ 1730.511301][T31539] slab_reclaimable:13495 slab_unreclaimable:101458 [ 1730.511301][T31539] mapped:30446 shmem:26461 pagetables:1341 [ 1730.511301][T31539] sec_pagetables:0 bounce:0 [ 1730.511301][T31539] kernel_misc_reclaimable:0 [ 1730.511301][T31539] free:924647 free_pcp:18879 free_cma:0 [ 1730.557938][T31539] Node 0 active_anon:39576kB inactive_anon:147568kB active_file:341612kB inactive_file:176192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121712kB dirty:5892kB writeback:4096kB shmem:104308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:63488kB kernel_stack:11444kB pagetables:5204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1730.598158][T31539] Node 1 active_anon:0kB inactive_anon:0kB active_file:228kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1730.913832][T31539] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1731.146598][T31539] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1731.166877][T31539] Node 0 DMA32 free:822480kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39568kB inactive_anon:143860kB active_file:360556kB inactive_file:175680kB unevictable:1536kB writepending:3940kB zspages:976kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:58680kB local_pcp:28392kB free_cma:0kB [ 1731.222676][T31551] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1731.403211][T31539] lowmem_reserve[]: 0 0 1 1 1 [ 1731.407970][T31539] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1731.518107][T31539] lowmem_reserve[]: 0 0 0 0 0 [ 1731.569547][T31539] Node 1 Normal free:2843344kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:228kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20640kB local_pcp:932kB free_cma:0kB [ 1731.783153][T31557] block nbd2: not configured, cannot reconfigure [ 1731.808588][T31539] lowmem_reserve[]: 0 0 0 0 0 [ 1731.883509][T31539] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1731.965620][T31539] Node 0 DMA32: 5010*4kB (UM) 4809*8kB (UME) 2626*16kB (UME) 707*32kB (UME) 683*64kB (UME) 686*128kB (UM) 634*256kB (UME) 317*512kB (UM) 192*1024kB (UME) 16*2048kB (UME) 11*4096kB (M) = 853712kB [ 1731.989334][T31539] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1732.001581][T31539] Node 1 Normal: 12*4kB (UM) 12*8kB (UME) 12*16kB (UME) 16*32kB (UME) 18*64kB (UME) 32*128kB (UME) 9*256kB (UE) 11*512kB (UE) 1*1024kB (M) 5*2048kB (UME) 688*4096kB (UM) = 2843344kB [ 1732.165520][T31563] FAULT_INJECTION: forcing a failure. [ 1732.165520][T31563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1732.175892][T31539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1732.192164][T31563] CPU: 0 UID: 0 PID: 31563 Comm: syz.0.4611 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1732.192227][T31563] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1732.192241][T31563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1732.192262][T31563] Call Trace: [ 1732.192273][T31563] [ 1732.192286][T31563] dump_stack_lvl+0x100/0x190 [ 1732.192331][T31563] should_fail_ex.cold+0x5/0xa [ 1732.192381][T31563] ? prepare_alloc_pages+0x16d/0x5f0 [ 1732.192436][T31563] should_fail_alloc_page+0xeb/0x140 [ 1732.192485][T31563] prepare_alloc_pages+0x1f0/0x5f0 [ 1732.192534][T31563] ? rcu_is_watching+0x12/0xc0 [ 1732.192572][T31563] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1732.192620][T31563] ? rcu_is_watching+0x12/0xc0 [ 1732.192653][T31563] ? trace_mm_page_alloc+0x10e/0x160 [ 1732.192704][T31563] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1732.192746][T31563] ? __pfx_stack_trace_save+0x10/0x10 [ 1732.192784][T31563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1732.192823][T31563] ? stack_depot_save_flags+0x27/0x9c0 [ 1732.192888][T31563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1732.192928][T31563] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1732.192960][T31563] ? __do_sys_listmount+0x287/0xee0 [ 1732.192994][T31563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.193044][T31563] alloc_pages_bulk_noprof+0x777/0x1500 [ 1732.193085][T31563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1732.193132][T31563] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1732.193187][T31563] ? alloc_pages_noprof+0x233/0x390 [ 1732.193245][T31563] __kasan_populate_vmalloc+0xf0/0x210 [ 1732.193294][T31563] alloc_vmap_area+0x935/0x2a00 [ 1732.193355][T31563] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1732.193413][T31563] __get_vm_area_node+0x1ca/0x330 [ 1732.193469][T31563] __vmalloc_node_range_noprof+0x213/0x1530 [ 1732.193504][T31563] ? __do_sys_listmount+0x287/0xee0 [ 1732.193546][T31563] ? __do_sys_listmount+0x287/0xee0 [ 1732.193590][T31563] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1732.193644][T31563] __kvmalloc_node_noprof+0x3cd/0xac0 [ 1732.193684][T31563] ? __do_sys_listmount+0x287/0xee0 [ 1732.193720][T31563] ? __do_sys_listmount+0x287/0xee0 [ 1732.193751][T31563] ? _copy_from_user+0x59/0xd0 [ 1732.193824][T31563] ? __do_sys_listmount+0x287/0xee0 [ 1732.193874][T31563] __do_sys_listmount+0x287/0xee0 [ 1732.193908][T31563] ? __pfx_do_futex+0x10/0x10 [ 1732.193958][T31563] ? __pfx___might_resched+0x10/0x10 [ 1732.194011][T31563] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 1732.194058][T31563] ? __pfx___do_sys_listmount+0x10/0x10 [ 1732.194099][T31563] ? __pfx_task_work_run+0x10/0x10 [ 1732.194171][T31563] do_syscall_64+0xc9/0xf80 [ 1732.194223][T31563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.194259][T31563] RIP: 0033:0x7effa839aeb9 [ 1732.194287][T31563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1732.194320][T31563] RSP: 002b:00007effa91dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 1732.194354][T31563] RAX: ffffffffffffffda RBX: 00007effa8615fa0 RCX: 00007effa839aeb9 [ 1732.194378][T31563] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 1732.194399][T31563] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1732.194421][T31563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1732.194443][T31563] R13: 00007effa8616038 R14: 00007effa8615fa0 R15: 00007ffe3d174578 [ 1732.194488][T31563] [ 1732.537969][T31539] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.547830][T31539] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=1 hugepages_size=1048576kB [ 1732.557431][T31539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1732.566753][T31539] 153771 total pagecache pages [ 1732.571541][T31539] 71 pages in swap cache [ 1732.575806][T31539] Free swap = 114288kB [ 1732.579979][T31539] Total swap = 124996kB [ 1732.584177][T31539] 2097051 pages RAM [ 1732.588016][T31539] 0 pages HighMem/MovableOnly [ 1732.592759][T31539] 430195 pages reserved [ 1732.596936][T31539] 0 pages cma reserved [ 1733.037254][T31573] Console: switching to colour VGA+ 80x25 [ 1733.689581][T31577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1733.750111][T31577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1733.774109][T31584] futex_wake_op: syz.0.4614 tries to shift op by -2048; fix this program [ 1733.837462][T31577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1733.877179][T31584] futex_wake_op: syz.0.4614 tries to shift op by -2048; fix this program [ 1733.877397][T31577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1733.999267][T31578] 0x000000000001-0x000000020000 : "" [ 1734.085064][T31578] ftl_cs: FTL header corrupt! [ 1734.444873][T31578] ------------[ cut here ]------------ [ 1734.450676][T31578] wbt_init(disk) [ 1734.450695][T31578] WARNING: block/blk-wbt.c:741 at wbt_init_enable_default+0x53/0x60, CPU#1: syz.0.4614/31578 [ 1734.465800][T31578] Modules linked in: [ 1734.470003][T31578] CPU: 1 UID: 0 PID: 31578 Comm: syz.0.4614 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1734.481335][T31578] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1734.486583][T31578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1734.497149][T31578] RIP: 0010:wbt_init_enable_default+0x53/0x60 [ 1734.503757][T31578] Code: fd 5b 5d c3 cc cc cc cc e8 fa dd 2e fd 48 89 ef e8 a2 fa ff ff 31 ff 89 c3 89 c6 e8 97 d8 2e fd 85 db 74 d8 e8 de dd 2e fd 90 <0f> 0b 90 eb cd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 1734.523559][T31578] RSP: 0018:ffffc9000bca75a0 EFLAGS: 00010283 [ 1734.529654][T31578] RAX: 000000000001b6cb RBX: 00000000fffffff4 RCX: ffffc9000cb3c000 [ 1734.537750][T31578] RDX: 0000000000080000 RSI: ffffffff84d76ca2 RDI: ffff888028091e80 [ 1734.545787][T31578] RBP: ffff888068ba7000 R08: 0000000000000005 R09: 0000000000000000 [ 1734.554096][T31578] R10: 00000000fffffff4 R11: ffffffff8b737149 R12: ffff888029ccb930 [ 1734.562253][T31578] R13: ffff888068ba7390 R14: ffff888029ccb940 R15: ffff888068ba7090 [ 1734.570246][T31578] FS: 00007effa91bc6c0(0000) GS:ffff8881246e3000(0000) knlGS:0000000000000000 [ 1734.579258][T31578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1734.585975][T31578] CR2: 00005641a124ce78 CR3: 000000006656e000 CR4: 00000000003526f0 [ 1734.594076][T31578] Call Trace: [ 1734.597830][T31578] [ 1734.600791][T31578] blk_register_queue+0x39e/0x4e0 [ 1734.606289][T31578] __add_disk+0x73f/0xe40 [ 1734.610702][T31578] add_disk_fwnode+0x118/0x5c0 [ 1734.615538][T31578] add_mtd_blktrans_dev+0xd0b/0x1520 [ 1734.620866][T31578] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1734.626709][T31578] mtdblock_add_mtd+0x1cc/0x270 [ 1734.631592][T31578] blktrans_notify_add+0xa2/0xf0 [ 1734.636580][T31578] add_mtd_device+0xbe3/0x1750 [ 1734.641387][T31578] ? __pfx_add_mtd_device+0x10/0x10 [ 1734.646664][T31578] mtd_add_partition+0x30a/0x660 [ 1734.651736][T31578] ? __pfx_mtd_add_partition+0x10/0x10 [ 1734.657295][T31578] ? __might_fault+0xc5/0x140 [ 1734.662062][T31578] ? __might_fault+0xc5/0x140 [ 1734.666803][T31578] mtdchar_blkpg_ioctl+0x207/0x250 [ 1734.672050][T31578] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1734.677771][T31578] mtdchar_ioctl+0x1670/0x1fd0 [ 1734.682595][T31578] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1734.687728][T31578] ? lock_acquire+0x17c/0x330 [ 1734.692478][T31578] ? __pfx___might_resched+0x10/0x10 [ 1734.698114][T31578] ? trace_contention_end+0xd6/0x110 [ 1734.704031][T31578] ? do_vfs_ioctl+0x226/0x13e0 [ 1734.708830][T31578] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1734.714588][T31578] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1734.719752][T31578] ? __pfx___mutex_lock+0x10/0x10 [ 1734.724893][T31578] ? hook_file_ioctl_common+0x146/0x410 [ 1734.730538][T31578] ? __fget_files+0x21f/0x3d0 [ 1734.735319][T31578] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1734.740575][T31578] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1734.746613][T31578] __x64_sys_ioctl+0x18e/0x210 [ 1734.751484][T31578] do_syscall_64+0xc9/0xf80 [ 1734.756120][T31578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.762125][T31578] RIP: 0033:0x7effa839aeb9 [ 1734.766595][T31578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.786439][T31578] RSP: 002b:00007effa91bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.794975][T31578] RAX: ffffffffffffffda RBX: 00007effa8616090 RCX: 00007effa839aeb9 [ 1734.803746][T31578] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000004 [ 1734.811805][T31578] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1734.820481][T31578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.828562][T31578] R13: 00007effa8616128 R14: 00007effa8616090 R15: 00007ffe3d174578 [ 1734.836696][T31578] [ 1734.839760][T31578] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1734.847089][T31578] CPU: 1 UID: 0 PID: 31578 Comm: syz.0.4614 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1734.858111][T31578] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1734.863341][T31578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1734.873543][T31578] Call Trace: [ 1734.876866][T31578] [ 1734.879864][T31578] dump_stack_lvl+0x100/0x190 [ 1734.884615][T31578] vpanic+0x20d/0x630 [ 1734.888664][T31578] panic+0xd1/0xd1 [ 1734.892457][T31578] ? __pfx_panic+0x10/0x10 [ 1734.896951][T31578] check_panic_on_warn.cold+0x19/0x34 [ 1734.902380][T31578] ? wbt_init_enable_default+0x53/0x60 [ 1734.907940][T31578] __warn.cold+0x191/0x2f8 [ 1734.912405][T31578] __report_bug+0x296/0x3d0 [ 1734.916978][T31578] ? wbt_init_enable_default+0x53/0x60 [ 1734.922483][T31578] ? __pfx___report_bug+0x10/0x10 [ 1734.927577][T31578] ? wbt_init_enable_default+0x53/0x60 [ 1734.933075][T31578] report_bug+0xb2/0x220 [ 1734.937360][T31578] ? wbt_init_enable_default+0x53/0x60 [ 1734.942857][T31578] handle_bug+0x166/0x2a0 [ 1734.947250][T31578] exc_invalid_op+0x17/0x50 [ 1734.951803][T31578] asm_exc_invalid_op+0x1a/0x20 [ 1734.956696][T31578] RIP: 0010:wbt_init_enable_default+0x53/0x60 [ 1734.962808][T31578] Code: fd 5b 5d c3 cc cc cc cc e8 fa dd 2e fd 48 89 ef e8 a2 fa ff ff 31 ff 89 c3 89 c6 e8 97 d8 2e fd 85 db 74 d8 e8 de dd 2e fd 90 <0f> 0b 90 eb cd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 1734.982491][T31578] RSP: 0018:ffffc9000bca75a0 EFLAGS: 00010283 [ 1734.988677][T31578] RAX: 000000000001b6cb RBX: 00000000fffffff4 RCX: ffffc9000cb3c000 [ 1734.996694][T31578] RDX: 0000000000080000 RSI: ffffffff84d76ca2 RDI: ffff888028091e80 [ 1735.004697][T31578] RBP: ffff888068ba7000 R08: 0000000000000005 R09: 0000000000000000 [ 1735.012710][T31578] R10: 00000000fffffff4 R11: ffffffff8b737149 R12: ffff888029ccb930 [ 1735.020720][T31578] R13: ffff888068ba7390 R14: ffff888029ccb940 R15: ffff888068ba7090 [ 1735.028728][T31578] ? do_syscall_64+0xc9/0xf80 [ 1735.033456][T31578] ? wbt_init_enable_default+0x52/0x60 [ 1735.038962][T31578] blk_register_queue+0x39e/0x4e0 [ 1735.044032][T31578] __add_disk+0x73f/0xe40 [ 1735.048432][T31578] add_disk_fwnode+0x118/0x5c0 [ 1735.053250][T31578] add_mtd_blktrans_dev+0xd0b/0x1520 [ 1735.058577][T31578] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 1735.064361][T31578] mtdblock_add_mtd+0x1cc/0x270 [ 1735.069246][T31578] blktrans_notify_add+0xa2/0xf0 [ 1735.074229][T31578] add_mtd_device+0xbe3/0x1750 [ 1735.079046][T31578] ? __pfx_add_mtd_device+0x10/0x10 [ 1735.084299][T31578] mtd_add_partition+0x30a/0x660 [ 1735.089315][T31578] ? __pfx_mtd_add_partition+0x10/0x10 [ 1735.094842][T31578] ? __might_fault+0xc5/0x140 [ 1735.099559][T31578] ? __might_fault+0xc5/0x140 [ 1735.104289][T31578] mtdchar_blkpg_ioctl+0x207/0x250 [ 1735.109436][T31578] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1735.115127][T31578] mtdchar_ioctl+0x1670/0x1fd0 [ 1735.119929][T31578] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1735.125071][T31578] ? lock_acquire+0x17c/0x330 [ 1735.129802][T31578] ? __pfx___might_resched+0x10/0x10 [ 1735.135140][T31578] ? trace_contention_end+0xd6/0x110 [ 1735.140473][T31578] ? do_vfs_ioctl+0x226/0x13e0 [ 1735.145299][T31578] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1735.150703][T31578] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1735.155791][T31578] ? __pfx___mutex_lock+0x10/0x10 [ 1735.160863][T31578] ? hook_file_ioctl_common+0x146/0x410 [ 1735.166474][T31578] ? __fget_files+0x21f/0x3d0 [ 1735.171203][T31578] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1735.176446][T31578] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1735.182374][T31578] __x64_sys_ioctl+0x18e/0x210 [ 1735.187191][T31578] do_syscall_64+0xc9/0xf80 [ 1735.191733][T31578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.197673][T31578] RIP: 0033:0x7effa839aeb9 [ 1735.202141][T31578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.221786][T31578] RSP: 002b:00007effa91bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1735.230324][T31578] RAX: ffffffffffffffda RBX: 00007effa8616090 RCX: 00007effa839aeb9 [ 1735.238334][T31578] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000004 [ 1735.246329][T31578] RBP: 00007effa8408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1735.254415][T31578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1735.262500][T31578] R13: 00007effa8616128 R14: 00007effa8616090 R15: 00007ffe3d174578 [ 1735.270516][T31578] [ 1735.274271][T31578] Kernel Offset: disabled [ 1735.278637][T31578] Rebooting in 86400 seconds..