last executing test programs: 40.660864146s ago: executing program 3 (id=267): unshare$auto(0x40000080) prctl$auto(0xa, 0x8, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0xa, 0x2, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c8c40, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x2, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/ram14/integrity/device_is_integrity_capable\x00', 0x480401, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioprio_set$auto(0x2, 0x800000000, 0x8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) ioctl$auto(0x3, 0x40605346, 0x38) write$auto(0x3, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_TIOCGDEV2(r2, 0x80045432, &(0x7f00000000c0)=0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, &(0x7f0000000280)={0x0, 0x10, 0x8}) 32.460469575s ago: executing program 3 (id=288): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) r0 = socket(0x1e, 0x4, 0x0) sendmsg$auto_NFC_CMD_LLC_SDREQ(r0, 0x0, 0x40001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gre0\x00'}) mmap$auto(0xfffffffffffffffe, 0x102, 0x2, 0x18, 0xffffffffffffffff, 0x7ffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x29, 0x2, 0x0) sendmmsg$auto(r1, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x143101, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000180)={0x6, 0x49d, 0x5, 0xf583}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x12980, 0x0) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r3, 0xc05c5340, 0x38) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x8a801, 0x0) write$auto(r5, &(0x7f0000000000)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xc00caee0, r4) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000001bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac140000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x14ac}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) close_range$auto(0x2, 0x8, 0x0) setgroups$auto(0xc00000000, 0xfffffffffffffffc) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x9) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) 26.437882557s ago: executing program 3 (id=305): mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000005ec0), r0) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@buf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x1) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000000000)={0x28, r1, 0x1, 0x9, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_NAME={0xe, 0x3, 'ovs_vport\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x6040) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/mei/uevent\x00', 0xe0281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='5', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_STOP_NAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x3}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc0000000}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x2400c040) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) splice$auto(r5, 0x0, r5, 0x0, 0x9476, 0x5) 16.210607941s ago: executing program 3 (id=331): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x13, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(r0, 0x0, 0x300000002, 0x100000001) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x402000c, 0xdd, 0xcb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xffa1) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) io_setup$auto(0x1, 0x0) r3 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) close_range$auto(r3, 0x8, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) 10.589014224s ago: executing program 3 (id=345): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x29, 0xa, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r2) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x4000) prctl$auto(0x38, 0x1, 0x4, 0xd73, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000280)={0xffffffff, 0x0, 0x3, 0xfffff66e, 0x5, 0x80, 0xcf, 0x6c38, 0xe}) mprotect$auto(0x0, 0x8000000000000001, 0x8) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', 0x0, 0xc0ed0000, 0x0) connect$auto(0x3, 0x0, 0x54) socket(0xa, 0x3, 0x3a) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) r8 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) bind$auto(r8, &(0x7f0000000000)=@can={0x1d, r9}, 0x6a) ioctl$auto_USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)=' \f', 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x408c1) madvise$auto(0x4, 0xffffffffffff0001, 0x5) setsockopt$auto_SO_OOBINLINE(r1, 0x8, 0xa, &(0x7f0000000080)='/dev/kvm\x00', 0x3) 10.585112701s ago: executing program 1 (id=346): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x48d1}, 0x8000) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x674c6c6b}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x48041) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev5\x00', 0x183281, 0x0) ioctl$auto(r8, 0xc040564a, r7) socket(0xa, 0x3, 0x2f) unshare$auto(0x40000080) socket(0x11, 0x80003, 0xab) r9 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0x4, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r9, &(0x7f0000000000)='-\x00', 0x2fb) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x5) mprotect$auto(0x8, 0x180000, 0x9be7) r11 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) open_by_handle_at$auto(r11, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) 10.536114107s ago: executing program 2 (id=347): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101240, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x3, 0x400007, 0x4, 0x9b72, 0xffffffffffffffff, 0x6) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mounts\x00', 0x101080, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x27) mmap$auto(0x8000000000000001, 0x475b, 0xfffffffffffffff8, 0x9b74, r1, 0x28000) ioctl$auto(0x3, 0xf29a, 0xffffffffffffffff) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r3, 0x0, 0x100000, 0x7fff) ioctl$auto(r2, 0x4b47, r2) write$auto(r0, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x8000, 0x0) chdir$auto(&(0x7f0000000180)='./cgroup/../file0\x00') r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x2020009, 0x400000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x5) lseek$auto(r4, 0x2, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) write$auto(0x3, 0x0, 0x100082) getdents$auto(r4, 0x0, 0x62d7) 9.679827798s ago: executing program 2 (id=349): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e0240, 0x0) (async) read$auto(r1, 0x0, 0x85) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) (async) r2 = socket(0xa, 0xa, 0x3) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, 0x0, 0x8f) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/geneve0/drop_unicast_in_l2_multicast\x00', 0xc1e13b61f74943c7, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, r3, 0x0) socket(0x2, 0x3, 0x100) (async) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffa474, &(0x7f00000002c0)={0x0, 0xc4}, 0x9, 0x0, 0x0, 0xa}, 0x9}, 0x2, 0x800) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async) read$auto(0x3, 0x0, 0x7fffffff) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000006400)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r4, 0x0, 0xfffffdef) (async) mseal$auto(0x0, 0x7dda, 0x0) 8.945814836s ago: executing program 1 (id=350): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) (async) statx$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x2, 0x0) mmap$auto(0xffffffffffffffff, 0x2020007, 0x3, 0x110, r0, 0x100) (async) read$auto(r0, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfdef) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/default_smp_affinity\x00', 0xaa102, 0x0) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) lsm_set_self_attr$auto(0x4, 0x0, 0x80, 0x0) (async) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) signalfd$auto(r1, 0x0, 0x8) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, &(0x7f00000004c0)) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/netdevsim0/arp_evict_nocarrier\x00', 0xa042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, &(0x7f00000002c0)="81", 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="371a0e8ca0f1930100ec05d034142f2dbd7000ffdbdf2504d9db0000e158fde5e360dabb4b6357d584a200"/53], 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x40000) (async) mmap$auto(0x4, 0x7, 0x3edc2ecf, 0x9b72, 0x2, 0x8000) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/pcmC0D0p\x00', 0xc0942, 0x0) (async) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) (async) unshare$auto(0x40000080) ioctl$auto_RNDADDENTROPY2(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)=[0x1003, 0xfff]) r5 = openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/format\x00', 0x40, 0x0) pread64$auto(r5, 0x0, 0x3, 0xfdd) mmap$auto(0x9, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x2000, 0x400008, 0xdf, 0x1ff, r2, 0x8000) (async) mlockall$auto(0x7) 6.696516696s ago: executing program 2 (id=360): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129302, 0x0) ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/media11\x00', 0x1, 0x0) r2 = socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x400, 0x4, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x4000000000000003, 0x1, 0x7, 0x411, r2, 0x8003) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@llc={0x1a, 0x3, 0xb9, 0x6, 0x7, 0xd, @multicast}, 0x55) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffff5, 0x7, 0xc05, 0x0) sendmsg$auto_TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x40) read$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffffff, &(0x7f0000000300)=""/248, 0xf8) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video40\x00', 0x301, 0x0) ioctl$auto(r5, 0xc0485619, r4) read$auto(r3, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x51) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) ioctl$auto(r6, 0x4008af03, 0x0) ioctl$auto_EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r7, 0x8000) madvise$auto(0x80000000000003, 0x400050, 0x4) epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x0, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendfile$auto(r0, r0, 0x0, 0x7cc) 6.660197599s ago: executing program 1 (id=361): r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/oom_adj\x00', 0x480000, 0x0) r1 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r0, 0x2, r1, &(0x7f0000000080)={0xa}) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x100, 0x0) io_uring_register$auto(r1, 0x2, &(0x7f0000000100)="48a7ded10e0ff8894b57a3c8135029e0349531e35716c2a40e10467fa5d0303a0145bb72718f444142f4cb5ea1bb70fbf76cd601d76acd36228b028d0b432396f2983f8a51c48837f3ef9485c9705e6a96e49464083520040a4ade1a063f1c4e8ce69d68b31a666fad25e09d1aba26bb33dbd71f68e2919901eeff1ee444e4748c7c2d4482563359d8ace54ee4d0dff05b3df82b39491404384885c5aeae50be527656b5ca7a3b6f20b781db9246db555cf0f11e137977500f0af69efd3b", 0xf) r2 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) read$auto_lsm_ops_inode(r2, &(0x7f0000000200)=""/37, 0x25) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000280)={@siginfo_0_0={0x4, 0x57, 0x9, @_sigchld={0xffffffffffffffff, 0xee01, 0x2, 0x4000000000000}}}, 0xa6f, &(0x7f0000000300)={{0x3a9, 0x6}, {0x0, 0x65dd1831}, 0x79, 0x1, 0x7fff, 0x5, 0xe24, 0xc7f4, 0x200, 0x7, 0x1, 0xa, 0x7, 0x9, 0x4e2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'ip6tnl0\x00', 0x0}) r13 = set_tid_address$auto(&(0x7f0000000540)=0xf1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000600)={0x5b8, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c4, 0x3, 0x0, 0x1, [@generic="500f73bd3c79370a953f0636e17c6a3fd6f08e97628e4c9da7edd3b5bf2c6f2c094bfd8bb9f981e01c09c687ff659d482bc4763757a745f45f19dcf59d4f2026be66ab00e2b4c6e18bca1a9d833b0925782d1065735412dfb8fc46cd6d3992f26cc64506612b25f8e3e93e392fedff34da5198dc870075cae1d9735691c212c3c12f198d722fb75b6abe5576ae1943a3184b658bd2e4e730a3423e131c397773877545ac8f1f22a9b6fde41df0cf48c6668af7a9875fb46f2325cdff97fdec1a9f7d7d9d6e456b580c3d", @generic="963f9ac13dc9ccf08e612ecb86452380c6a7947eafe9d922765201a3636acbe4b1c4f1398a3ff59c1eba7c379ccb41718482b69ea7ca7458bd9c33b8f54000ac130589e98c17afec30d1d47f8ccbb829c283235d106f7dd105074f745c264bf95dc5443be2abecb1bbe1e0ee4ff87ef15bd41b2c2e01dc", @typed={0x8, 0x14d, 0x0, 0x0, @pid=r4}, @typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="c9872e3ac87d5c37632aaef9eaa1ca752ce27daf29a19e25a41eb96cb8228d55cf105f289753d1f726a7bfde0e313a3225b83f72c5ec14a367e482ea84c723beec21df4163bcfcbae88c891dc10cd501f1f2a7495190b5d95d79425b743347e5d3523f6574aa57ecf22d494174f5c7", @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x1}, @nested={0xec, 0x3d, 0x0, 0x1, [@generic="ab178c4997b232d904cebada176b07019c1f19dcf274659cc75bf032fc07991122c2d2d2a1eec150ca7fe42bf4ca9f2b3f24edef72b80dd0caecd74a65ce391a316001e3d98fd279d573563f33a8b05a342fabfd09025a683a4df5faa0e63d453be7fe3436dcb564682d4a440b6e5081f4d376089d6f9c422fcc5a866dabdad331b2238393ef542ed2c66977d6e1a74c68300c228269325f26c0e138e7e1e8865d4684bc21565583a85dfb6576d691990184833bd689230a5677b106dcf2247787a381a0f588ec20b2e73fb2598f57fd757ea909b9e732a8f664953ec2e991f147a5051b645f1df7"]}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x479}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4e}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x17e, 0x3, 0x0, 0x1, [@typed={0x8b, 0x13f, 0x0, 0x0, @binary="6b7e1a541accef235c023a9e607e00486b451c89aa86784eec399deb1018f6595d317e54867c3de1616a5a37e78ef6552b5b028755a6c6fc32725897cff507da6c1ac6905847325753e98902fdccc0edcf304c6b96fa1fcf64e4c7a336fe3ac70b89cbada50cd43f7acdd71d5eb96ed90171de710904799bccab1a3c5c8c6d36dad4fee305d587"}, @generic="859b602e8468b3300879c98d6c8abffdd6d7eb08d95381dc2fb40678e7634de886d29a960ffbe8d60a77a0bdee63c1cd301863670866903df7eb779dec7dc3d9cc2a081fa63a7b52957b0787f5848553f172ab62763e1e96bd1b2bcc711b4502b39098911c2a8147301246c4a42ab4a2e32f7c8882acf391c671adc918385affd3b26a2861070674cdb42fd6b592929bd5fca951252c4e32a0eb0e8cae232edd57bdfb74c1909b4c14b36a5dab6df7fef908f36c735837960340a44e38d3e3b834a299d3e1f3", @generic, @typed={0x8, 0xee, 0x0, 0x0, @pid=r13}, @typed={0x1e, 0x74, 0x0, 0x0, @str='/proc/thread-self/oom_adj\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe7c}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x99f9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf9}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x5b8}}, 0x10048800) r16 = prctl$auto_PR_SET_MM_START_STACK(0x3, 0x5, r5, 0x4ef65144, 0x2) read$auto_proc_pid_set_comm_operations_base(r16, &(0x7f0000000c40)=""/61, 0x3d) setresuid$auto(r6, r6, r6) capset$auto(&(0x7f0000000c80)={0x8, r4}, &(0x7f0000000cc0)={0x5, 0xd, 0x1c}) kcmp$auto(r17, r4, 0x5, r16, r16) r18 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000d40), r16) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r16, &(0x7f0000000f00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x12c, r18, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NET_DM_ATTR_HW_DROPS={0x4}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_UNSPEC={0x101, 0x0, "047f041b4f0bc66239adb44b0c2afcec0339ac79b2ad64d7433e67e39ef6be9613f2aba4d80bbb6cff257adcfd76f8a0fced8f6cf0cbd860371a63c95638110d47e57867bd5af280c5a802e7642f2c2e098abed4fa23cc4962de3986e9355833d273ce37c3318b8ea3408f9523dfbff2a50be46e20f4aadab1e279fce0d2a262c0a00ac786816edcf2db0aa858bfd601405715955a0ec24602e86e8e24be9e558709adb1de06e36b308942d7b34f7fccb433ccc00d820bcd314f28fc728e7541cae12b8df4c7280766200605c358321f62ad6533a3e03fb6261cd85ac79d387ec691947b26b3d6caa6cb3ca7a128299bb077d8ad45a7f30d870e094ad1"}, @NET_DM_ATTR_ALERT_MODE={0x5}, @NET_DM_ATTR_HW_DROPS={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc8a0}, 0x4004) r19 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r19, &(0x7f0000001580)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f0000000f80)={0x5b0, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_SEC_LEVEL={0xe0, 0x2d, 0x0, 0x1, [@nested={0x10, 0x16, 0x0, 0x1, [@typed={0xc, 0x91, 0x0, 0x0, @str='erspan0\x00'}]}, @nested={0x14, 0xab, 0x0, 0x1, [@nested={0x4, 0x12e}, @nested={0x4, 0x8b}, @typed={0x8, 0x125, 0x0, 0x0, @pid=r13}]}, @nested={0x70, 0xab, 0x0, 0x1, [@typed={0x63, 0xa, 0x0, 0x0, @binary="5597fe6ddc8ec03576d7a9d52fbec708d39ffa231c4dbf041764c88da3babe45aca86d393ac3948f912af594eef6301a5452c9a14eff993e31d8827202dfe4016ba267994d44b4156acf54858dd75ecb1230cb12ba8bb258ba2daa1421ee1a"}, @typed={0x8, 0x130, 0x0, 0x0, @uid=r6}]}, @generic="2db50a7a4ef97b69250ea5300e175319476f735e0af7b66404f0edf430c79f32a85a3bb86435e643db2112be5670a44460e670beb8ad97ae91f0d7b1fecd4ae7d81b4e0b65cb09ee"]}, @NL802154_ATTR_SEC_KEY={0x47a, 0x30, 0x0, 0x1, [@typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@local}, @nested={0xc, 0x73, 0x0, 0x1, [@typed={0x4, 0x45}, @nested={0x4, 0x73}]}, @generic="757e3ba561120d0435c1e0370cc2d18f07ae57d46e1ce5d6cad0e66c1c32a73697f75e9978a3566db5f56aabf8d343001c5ff8ed05eff661509ead01621f465816c6e03fe219e0c5cb26a0aa7a6800eb062ffb99b8b0f11a490eaf943bb3f33726dacd0391801d47d3e0e180dec8ba56a2ed61821a3df0fa5624ea003118f767c214229a578ada5cabc6c30126df89e34fcbdc7d3b7fdbe764a319150a2dd8ca20f3642ee2580ac9e230dcc1b923a4d71c3e07650b98d2760bf4088c834e87d426e48e2cde4f806181a0104b6b8fd1dd15b189ca701377a3f169ce82b08419e6f24a5384cb44b5947030e9", @nested={0xfe, 0xd1, 0x0, 0x1, [@generic="b5271b6071a06f7804f78e57fa2654ee9f25565f5dadb756182f7be381d8c42c4c590a0c221d2af583da81909c9d150c8de64444c6d7164e25da6bbf2f14df7758619ba3222a80b7c7b3323b0e8db1421c46b92dc0d397e4c119c533acdd861c2494566fa0fec85682049cd72879e567f2f2e3df5203bcc6d721fdea51518435ac9c6e843b9d0d66ff10279c45afcd81254cb8d8f761334bb98cb5719af0c90c352e39c5e10ae0f586b7642ac1f09446b6b828a6ec69f9eafaeb061fba95b0c4f78d44feafd31ef01074bd94de2d41b1ba18189975e1c6c93c8db6b53aa84dab7bc8f5e5939944dc5763ab043395", @nested={0x4, 0xe4}, @typed={0x8, 0xd5, 0x0, 0x0, @fd=r0}]}, @typed={0xd5, 0x25, 0x0, 0x0, @binary="86df37bca526058b172b9f9ef2a14636c906627dfb84d143c8dc09ee70d3fdb7317a7ea7da82d2ee8ae32d67ce0106ffcc82df4a7612f3387f525a7498d07ed9ecc34f6d09f7233bfae1aecbe7b05f62bf0d63fdbf2746b9e1bbdd05cb6232718dd004dad80bf40d4fb038d85e0011f93a53bd35ba758ea7be3a2a164767577f9d29c6f7fd2d8b3c101e1fd34e1af83dba4a129acc988a7bb59532d5d9b32ee1f5e62581501ddab30ade54664c645adfa01fc4c8ef979fd7dd84a5d80e23c76929c1dd72f7d7d1ce2897d5a5194ab16c48"}, @typed={0x21, 0xa0, 0x0, 0x0, @binary="7c94a734e1e7830f7d86c0ed158c4f73c21480a82b2562f39917d36661"}, @nested={0x167, 0x4e, 0x0, 0x1, [@typed={0x8, 0x165, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}, @generic="6b9849e6ba46d7712157169d24c5d12ca5c68882fa13173020b11f512e66c09ffb2f9427347975d50a70ee52f0bbddc4031e77299906052a445d16b8d73ddee041000ae52d14e711", @typed={0x27, 0x9f, 0x0, 0x0, @str='/sys/kernel/debug/dri/vkms/clients\x00'}, @generic="28485f2e29f4ea8a6e1e169cc6ba6992d83765ddf8320cba3c7e2c64d9000fee90217c64d8cd78751197d92a884579b2f63778ebc1597896c01bfcd038459e6816a67740c2b340e8240d8920145c4ac0d4d029d2040e3d869f4f4de48e7e10ace4b8021693d0c2fd0a213927ab03aa26a513024b0c5ea3d71856333fe89302f5485ebd0086c7e5bb13b790a518641184ca8fe39b4fa50a51a01c9064c24e0dfdd4f5e23b797b232cc3316761c1957df775f46b4262ef7c01bb66babac7f90c194ba3e12107db1575fb2b0b9b0b9f2b1cbb735cf67f8737", @typed={0x8, 0x97, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0xc, 0x7f, 0x0, 0x0, @u64}]}, @generic="3c6332ed484465"]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @pid=r13}]}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4c6a}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0xb}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'team_slave_0\x00'}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x40000}, 0x48800) madvise$auto(0xffffffffffffdbe7, 0x6, 0x4) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000002700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000001640)={0x1078, 0x0, 0x700, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xb, 0xfc, "2d3e080e13ff71"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_PMK={0x25, 0xfe, "6e792257d7898e06d4069da4fcfb6a822dc78da6122542d69cb8e52acec5e52c01"}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_FILS_CACHE_ID={0x1004, 0xfd, "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"}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x2}]}, 0x1078}, 0x1, 0x0, 0x0, 0x800}, 0x80) 6.533292821s ago: executing program 1 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$auto_SNAPSHOT_POWER_OFF(r1, 0xc0045878, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0) socket(0x23, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) pread64$auto(r3, 0x0, 0x10001, 0x830) socket(0x23, 0x2, 0x0) shmctl$auto_SHM_INFO(0xfffffff8, 0xe, 0x0) r4 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) readv$auto(0x4, 0x0, 0x8) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r4, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x42000, 0x0) readv$auto(r5, &(0x7f0000000180)={0x0, 0x38}, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0x3, &(0x7f0000000600)={&(0x7f0000000540), 0xc}, 0x1da) read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000001540)=""/209, 0xd1) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34010000c377b8cf5dc898e1d80ebd87eb1f5790717b92a70318c0c2dc94974ddab162fad022f920b5c1543c6f35f69abfaa320ae4166f18dac997fecd48ba509c7317a667587811602ad33f328eb46951c99a7014394733613fc11b1710f151012b767e4c2254077c82b30398e288ae5a1942494a154168ffdef00c6223045bcbb27955cfc54e536ef494fd0f574990503ca35acb5a10741149e6c4536d213c493f590d7730e4d1c57bf37353", @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000094) 6.474934065s ago: executing program 3 (id=363): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = io_uring_setup$auto(0x6, 0x0) (async) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x8, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) (async) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4048801}, 0x2004c064) (async) io_setup$auto(0x7ffe, 0x0) (async) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) (async) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) r3 = epoll_create$auto(0x70c) epoll_ctl$auto(r3, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x2, 0x40006) (async) r4 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/take_snapshot\x00', 0x140, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r4, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r5, 0xffffffffffffffff, 0x0) (async) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r6, 0xc058560f, r6) (async) clone$auto(0x0, 0x3, &(0x7f0000000040)=0xfffffffe, &(0x7f0000000080)=0x24, 0x0) (async) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyuf\x00', 0x2108c0, 0x0) ioctl$auto_TIOCGEXCL(r7, 0x80045440, &(0x7f0000000180)=0x3) 4.802666829s ago: executing program 2 (id=365): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rxrpc/conns\x00', 0x791300, 0x0) mmap$auto(0xfffffffffffffdfd, 0x2020009, 0x3, 0xf5, r0, 0x5) shmat$auto(0xbffffffd, 0x0, 0x873) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x3, 0x40009, 0xfffffffffffffffc, 0x9b72, 0xffffffffffffffff, 0x28000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000) socket(0xa, 0x2, 0x3a) (async) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x2c, 0x43, 0x0, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) epoll_create$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) capset$auto(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r5, 0x0) (async) epoll_ctl$auto(0x5, 0x1, r5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r5, 0x0) (async) epoll_ctl$auto(0x5, 0x3, r5, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/155, 0x9b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) 4.612420288s ago: executing program 2 (id=366): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) r0 = io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r3) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x18, r4, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_PMKR0_NAME={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) sendmsg$auto_NL80211_CMD_EPCS_CFG(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40088002}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x2c0, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x2a3b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_BSS_SELECT={0x287, 0xe3, 0x0, 0x1, [@typed={0x23, 0x150, 0x0, 0x0, @binary="1694b6a1f33b6ceb31ea5d5de9c207f2e6f3168bd0465398e2bbfdaf17efde"}, @nested={0x3f, 0x8c, 0x0, 0x1, [@generic="56677f92c44f6def70414b2d7856d0a8eb6caa", @typed={0x14, 0xc4, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @generic="ecc1fd78e6464eb3f0d42e1a4233ddc976ec10b8e77f029c6777e47da01531fd357b23c4f289e984f1a6abbd2422f6c554cb72c3d6a0bf03b916a3324fd97a45ec082c0efce70b47de1c59895ac538d2421c6a83ef73036767975f2e8f48fa37594fb73ebe48069b9b53d1ab9a5d602e9a7613322cd4b61b4a71790bb9fb419219276b3f37a4d182a42672391d81f52ef5ee1bb812a03b6e590ab453d663ee68530fbaeba4df641ef1a42ee3f51c070febcfa4da7a9e61066b6da64cb7a027ea52560b8eaa895ccc8928a580d1ad45005a610c4560f86cd645636b", @nested={0x8a, 0x120, 0x0, 0x1, [@nested={0x4, 0xc5}, @typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@empty}, @generic="ef18ca644c6470d319042d486aa787448c902bdc6b11430d794820d3479ab62a2598ffc55f6b73385db3dbb4f886c19e4cc3b67be54a5877ce686e420dee97ef098b499e4f88dc8794baff568ee500ee5571f5e40708c1d2738d9147ce74330e8d0e8cff16e6", @typed={0x5, 0xab, 0x0, 0x0, @str='\x00'}]}, @nested={0xb7, 0x140, 0x0, 0x1, [@generic="ddd72801ee2dee25f162eb7bbc8e0ff845d47aadba379ac8ea7db4d31e93657500115baac4926de53f33e115a3cfcb8ff4a440c0f6945d880878d5699844cfb13934c15c6b3ed35d927d4c0d52fc08820550ade423760c6433dbdc21610cc87baedeed7dc49d99bed3b9175cdbf7bdbfeceb8ac9eb23a85e101af01269628729718ab5", @nested={0x4, 0x128}, @typed={0x4, 0x82}, @nested={0x4, 0x161}, @typed={0x14, 0x125, 0x0, 0x0, @ipv6=@loopback}, @typed={0xc, 0x13b, 0x0, 0x0, @u64}, @nested={0x4, 0x94}]}]}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x15d}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e24}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)='-7', 0x2) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="24006a91", @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = pidfd_open$auto(0x1, 0x0) setns(r8, 0x60020000) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) open(0x0, 0xa240, 0x15e) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x10e00, 0x1e6) sysfs$auto(0x2, 0x1e, 0x0) setuid$auto(0xe) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/setgroups\x00', 0x300, 0x0) getrlimit$auto(0x2, &(0x7f00000002c0)={0x4, 0x3}) 3.902750847s ago: executing program 1 (id=367): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x400, 0x0) r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000640), r1) sendmsg$auto_IPVS_CMD_ZERO(r1, &(0x7f0000007ac0)={0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000000000)={0x1c, r2, 0x1afd1dc61447ea27, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x8, 0x1, 0x0, 0x1, [@generic="bc2ef7c0"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0c00ea0000010000000000003a24625a11332ea466d250633119d54fc8c12a79c6443b6c2f7bf5df9519ec40e9589d94c930720b93bcc4c88999f901c5be7447adf4fb150567a6e0d90e98039c5ec34dfa8aa3a810539cee02dbbbc4c558349da55a99622d7f38dea60989b9b0fbfeb6101eeb2e2c227378ee2cbcf82655e942db48add5531f38090756252145ed9a17e5c8f84f298be7d3ad47d8339f6c9114d305dfbde52e934aefb5877dfe638d265855db45c7badc47bc6002ae1d5f3bac9dac2930bbe4c5cdeb62b5aed4886a883bee62c7c5a821b3c827e3a67238b58cfc5ca73b8d1e2c9bc9bf167cc32abef3f0a94dcc63b65817000000080006000300000008000600050000000800050003000000"], 0x4a8}, 0x1, 0x0, 0x0, 0x4005}, 0x4) socket(0x2, 0x1, 0x106) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb3, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "0037ff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000500)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x4e4, 0x0, 0x1, 0x4}}, 0x92) 3.712462381s ago: executing program 0 (id=368): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x20480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26fddb7b62b67bd764f9"}, 0x0, @integer64=@value=[0x5, 0x3, 0x6, 0x6, 0x90f, 0x258000000, 0x7fffffffffffffff, 0x2, 0x3, 0x3, 0x3, 0x6, 0x1, 0x6, 0x662, 0x6a9, 0x332, 0x0, 0x6, 0x10001, 0x6d4, 0x80000000, 0xffffffffb7ac5308, 0x3, 0xffffffff, 0xba39, 0x7, 0x0, 0xe91, 0x1ee, 0xdb, 0x40, 0xb, 0x2, 0x6, 0x0, 0x4a3, 0x7, 0x6, 0x2, 0x7, 0x10000000000000, 0x8, 0x7, 0x7, 0x4, 0x401, 0xfffffffffffffff9, 0xffffffff, 0x7, 0xb3, 0xfffffffffffffffb, 0x2000, 0x2, 0x80000001, 0x0, 0x4, 0x1000, 0x5, 0x3, 0x80000001, 0x2, 0x0, 0x6], "72ad000cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925a872857fd2f672f85343275f80200000000000000ab45f7259ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c200"}) ioctl$auto(r0, 0xb, 0xffffffffffffffff) 3.578970242s ago: executing program 0 (id=369): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cec24\x00', 0x400, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop3/events_async\x00', 0x88080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101000, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8881, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r1, 0x0) r3 = socket(0x10, 0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) read$auto(r4, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x24100, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r3, &(0x7f0000000000)='-\xd3', 0xfdef) 3.328903703s ago: executing program 1 (id=370): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x80000000, 0xda, 0x8) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0xc0f02, 0x0) pread64$auto(r0, 0x0, 0x3, 0x5ef6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff, 0xffffffffffffffff}, 0xd) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r2, @new_prog_fd, 0x403, @old_map_fd=r2}, 0x9) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r3, 0xffff, &(0x7f0000000040)=')\x00', &(0x7f0000000140)="c2b610db7bdd8704d1aa1212006e4268f1a03ce142b55bafba89bab9370b986d160f", 0x4) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r5, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) fsopen$auto(&(0x7f0000000300)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7fffffff) mmap$auto(0xffffffffffffffff, 0x100086, 0x4000000000df, 0x15, r4, 0x2) socket(0x2c, 0x4, 0x84) r6 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000180), 0x290041, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000280)=0x6e50be9c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x3) 3.284356677s ago: executing program 0 (id=371): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) r1 = socketcall$auto(0x8000ffa, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c00, 0x0) close_range$auto(0x2, 0xa, 0x0) fcntl$auto_F_NOTIFY(r1, 0x402, 0xd) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4020ae76, r1) 3.108395314s ago: executing program 2 (id=372): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r3, 0x0, 0x6000000000, 0x100000004) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r4, 0x80204d01, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r5 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r5, 0x0, 0x3, 0x0, 0x8000000000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r4, 0x8002) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84) 2.914768699s ago: executing program 0 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1401003f", @ANYRES16=r1, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x800) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) r2 = io_uring_setup$auto(0x6, 0x0) ustat$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x25, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x19, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000100)=@sco, 0x6a) socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone(0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xd004a00, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)="b68161a86e8da4110338a92ca863a91beaa8558206154cc5fbaf33") ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x5, 0x0, 0x1f, 0xb}, 0x48e7}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) mmap$auto(0x0, 0x1, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x8a880, 0x0) pread64$auto(r5, 0x0, 0x7fff, 0x3) 1.958216311s ago: executing program 0 (id=374): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, r0, 0x5) io_uring_setup$auto(0x3, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) mmap$auto(0x0, 0x2020006, 0xffffffffff800002, 0xeb1, 0xffffffffffffffff, 0x441008000) io_uring_setup$auto(0x7, 0x0) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x8720}, 0x1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x560a, r3) 0s ago: executing program 0 (id=375): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r1, r1, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0xffffffffffffffff, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @inferred=0x0}, 0x2, 0x5, 0x4, @raw, @enumerated={0x2, 0x4, "23f7b11944d233964b2a5f32b66b0fe18e5b2d4edd0d9d16061791173f5412f21386d28cc66faa7a2336ad4b912a17fed2d89f48eefdf686b94fbc1bd2580477", 0x7fffffff, 0x2}, "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"}) rt_sigqueueinfo$auto(r2, 0x7e, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x11}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r8 = wait4$auto(r7, &(0x7f00000001c0)=0x102, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0xc63e, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0x6, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r8, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c228bdd7a195d7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000d38100ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457f"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r8}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r8, 0xc, 0x6) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) kernel console output (not intermixed with test programs): 1][ T6019] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 99.300761][ T6019] ? drm_atomic_get_connector_state+0x270/0x8f0 [ 99.300804][ T6019] krealloc_node_align_noprof+0x321/0x3e0 [ 99.300839][ T6019] drm_atomic_get_connector_state+0x270/0x8f0 [ 99.300882][ T6019] drm_atomic_add_affected_connectors+0x2e0/0x3f0 [ 99.300921][ T6019] ? __pfx_drm_atomic_add_affected_connectors+0x10/0x10 [ 99.300959][ T6019] ? modeset_lock+0x114/0x6d0 [ 99.300995][ T6019] __drm_atomic_helper_set_config+0x5f6/0xee0 [ 99.301045][ T6019] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 99.301088][ T6019] ? drm_client_rotation+0x451/0x6a0 [ 99.301132][ T6019] drm_client_modeset_commit_atomic+0x53d/0x7e0 [ 99.301184][ T6019] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 99.301262][ T6019] drm_client_modeset_commit_locked+0x14d/0x580 [ 99.301307][ T6019] drm_client_modeset_commit+0x4f/0x80 [ 99.301346][ T6019] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 99.301389][ T6019] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 99.301427][ T6019] drm_fbdev_client_restore+0x1b/0x30 [ 99.301456][ T6019] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 99.301482][ T6019] drm_client_dev_restore+0x205/0x2a0 [ 99.301527][ T6019] drm_release+0x2c6/0x360 [ 99.301563][ T6019] ? __pfx_drm_release+0x10/0x10 [ 99.301598][ T6019] __fput+0x3ff/0xb50 [ 99.301644][ T6019] task_work_run+0x150/0x240 [ 99.301673][ T6019] ? __pfx_task_work_run+0x10/0x10 [ 99.301703][ T6019] ? rcu_is_watching+0x12/0xc0 [ 99.301737][ T6019] exit_to_user_mode_loop+0x157/0x670 [ 99.301778][ T6019] ? rcu_is_watching+0x12/0xc0 [ 99.301812][ T6019] do_syscall_64+0x652/0x840 [ 99.301848][ T6019] ? clear_bhb_loop+0x40/0x90 [ 99.301883][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.301911][ T6019] RIP: 0033:0x7f902e39ce59 [ 99.301935][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.301961][ T6019] RSP: 002b:00007f902f206028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 99.301987][ T6019] RAX: 0000000000000000 RBX: 00007f902e615fa0 RCX: 00007f902e39ce59 [ 99.302005][ T6019] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 99.302021][ T6019] RBP: 00007f902e432d6f R08: 0000000000000000 R09: 0000000000000000 [ 99.302047][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.302063][ T6019] R13: 00007f902e616038 R14: 00007f902e615fa0 R15: 00007ffd395806e8 [ 99.302103][ T6019] [ 99.691273][ T6019] mmap: syz.1.46 (6019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.205610][ T6026] [U]  [ 100.208555][ T6026] [U] [ 100.211271][ T6026] [U] [ 100.213978][ T6026] [U] [ 100.223545][ T6026] [U] [ 100.226298][ T6026] [U] [ 100.229014][ T6026] [U] [ 100.231730][ T6026] [U] [ 100.246587][ T6026] [U] [ 100.249332][ T6026] [U] [ 100.252052][ T6026] [U] [ 100.254757][ T6026] [U] [ 100.264028][ T6026] [U] [ 100.266764][ T6026] [U] [ 100.269479][ T6026] [U] [ 100.272193][ T6026] [U] [ 100.297289][ T6026] [U] [ 100.300049][ T6026] [U] [ 100.302759][ T6026] [U] [ 100.305460][ T6026] [U] [ 100.355538][ T6026] [U] [ 100.358303][ T6026] [U] [ 100.361043][ T6026] [U] [ 100.363765][ T6026] [U] [ 100.372912][ T6026] [U] [ 100.375648][ T6026] [U] [ 100.378372][ T6026] [U] [ 100.381113][ T6026] [U] [ 100.404903][ T6026] [U] [ 100.407653][ T6026] [U] [ 100.410375][ T6026] [U] [ 100.413117][ T6026] [U] [ 100.432235][ T6026] [U] [ 100.434975][ T6026] [U] [ 100.437689][ T6026] [U] [ 100.440405][ T6026] [U] [ 100.460139][ T6026] [U] [ 100.894357][ T6037] FAULT_INJECTION: forcing a failure. [ 100.894357][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 100.917626][ T6037] CPU: 0 UID: 0 PID: 6037 Comm: syz.0.50 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.917671][ T6037] Tainted: [L]=SOFTLOCKUP [ 100.917680][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.917696][ T6037] Call Trace: [ 100.917706][ T6037] [ 100.917716][ T6037] dump_stack_lvl+0x100/0x190 [ 100.917767][ T6037] should_fail_ex.cold+0x5/0xa [ 100.917805][ T6037] should_failslab+0xc2/0x120 [ 100.917838][ T6037] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 100.917868][ T6037] ? kasprintf+0xc7/0x100 [ 100.917914][ T6037] kvasprintf+0xbc/0x150 [ 100.917952][ T6037] ? __pfx_kvasprintf+0x10/0x10 [ 100.917993][ T6037] ? irqentry_exit+0x24d/0x970 [ 100.918031][ T6037] ? lockdep_hardirqs_on+0x78/0x100 [ 100.918075][ T6037] kasprintf+0xc7/0x100 [ 100.918112][ T6037] ? __pfx_kasprintf+0x10/0x10 [ 100.918169][ T6037] wq_init_lockdep+0x3f/0xe0 [ 100.918209][ T6037] alloc_workqueue_noprof+0xdc/0x130 [ 100.918247][ T6037] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 100.918300][ T6037] ? __pfx___debug_object_init+0x10/0x10 [ 100.918347][ T6037] nci_register_device+0x21e/0xb80 [ 100.918382][ T6037] ? __pfx_nci_register_device+0x10/0x10 [ 100.918418][ T6037] ? lockdep_init_map_type+0x5c/0x250 [ 100.918468][ T6037] virtual_ncidev_open+0x141/0x220 [ 100.918499][ T6037] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 100.918528][ T6037] misc_open+0x26d/0x450 [ 100.918557][ T6037] ? __pfx_misc_open+0x10/0x10 [ 100.918584][ T6037] chrdev_open+0x234/0x6a0 [ 100.918621][ T6037] ? __pfx_chrdev_open+0x10/0x10 [ 100.918657][ T6037] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 100.918701][ T6037] do_dentry_open+0x6ab/0x14d0 [ 100.918734][ T6037] ? __pfx_chrdev_open+0x10/0x10 [ 100.918776][ T6037] vfs_open+0x82/0x3f0 [ 100.918817][ T6037] path_openat+0x208c/0x31a0 [ 100.918865][ T6037] ? __pfx_path_openat+0x10/0x10 [ 100.918914][ T6037] do_file_open+0x20e/0x430 [ 100.918953][ T6037] ? __pfx_do_file_open+0x10/0x10 [ 100.919020][ T6037] ? alloc_fd+0x476/0x790 [ 100.919057][ T6037] ? do_getname+0x191/0x390 [ 100.919100][ T6037] do_sys_openat2+0x10d/0x1e0 [ 100.919141][ T6037] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.919197][ T6037] __x64_sys_openat+0x12d/0x210 [ 100.919239][ T6037] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.919288][ T6037] ? rcu_is_watching+0x12/0xc0 [ 100.919332][ T6037] do_syscall_64+0x115/0x840 [ 100.919370][ T6037] ? clear_bhb_loop+0x40/0x90 [ 100.919404][ T6037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.919434][ T6037] RIP: 0033:0x7fb860d9ce59 [ 100.919458][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.919485][ T6037] RSP: 002b:00007fb861c3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.919512][ T6037] RAX: ffffffffffffffda RBX: 00007fb861015fa0 RCX: 00007fb860d9ce59 [ 100.919531][ T6037] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 100.919548][ T6037] RBP: 00007fb860e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 100.919565][ T6037] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 100.919582][ T6037] R13: 00007fb861016038 R14: 00007fb861015fa0 R15: 00007ffdc827e708 [ 100.919621][ T6037] [ 102.151147][ T6035] Process accounting resumed [ 102.894662][ T6059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.166608][ T6067] kernel profiling enabled (shift: 7) [ 103.651238][ T6059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.003780][ T6059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.387433][ T6059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.120091][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 105.729433][ T6120] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 106.900404][ T6135] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 107.003880][ T6135] File: /dev/nullb0 PID: 6135 Comm: syz.0.63 [ 107.027664][ T6143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.65'. [ 107.116036][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 107.639051][ T6144] syz.2.65 (6144) used greatest stack depth: 19720 bytes left [ 109.067886][ T6150] Process accounting resumed [ 110.902152][ T5644] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 111.170232][ T6202] netlink: Failed to add  helper -22 [ 111.407057][ T5644] Bluetooth: hci0: unexpected event 0x05 length: 95 > 4 [ 111.506606][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 112.978439][ T4947] Bluetooth: hci0: command 0x2016 tx timeout [ 113.767728][ T6247] netlink: 342 bytes leftover after parsing attributes in process `syz.1.83'. [ 115.651783][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 118.361529][ T4947] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 119.843046][ T6350] netlink: 342 bytes leftover after parsing attributes in process `syz.3.100'. [ 120.115874][ T6352] netlink: 326 bytes leftover after parsing attributes in process `syz.0.103'. [ 121.928132][ T6381] [U]  [ 121.930936][ T6381] [U] [ 121.933630][ T6381] [U] [ 121.936320][ T6381] [U] [ 121.956909][ T6381] [U] [ 121.959609][ T6381] [U] [ 121.962284][ T6381] [U] [ 121.964956][ T6381] [U] [ 121.976172][ T6384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'. [ 121.985206][ T6381] [U] [ 121.987888][ T6381] [U] [ 121.990559][ T6381] [U] [ 121.993228][ T6381] [U] [ 122.004345][ T6381] [U] [ 122.007039][ T6381] [U] [ 122.009739][ T6381] [U] [ 122.012431][ T6381] [U] [ 122.048740][ T6381] [U] [ 122.051445][ T6381] [U] [ 122.054121][ T6381] [U] [ 122.056794][ T6381] [U] [ 122.091811][ T6381] [U] [ 122.094518][ T6381] [U] [ 122.097193][ T6381] [U] [ 122.099893][ T6381] [U] [ 122.118129][ T6381] [U] [ 122.120874][ T6381] [U] [ 122.123574][ T6381] [U] [ 122.126261][ T6381] [U] [ 122.140618][ T6381] [U] [ 122.143337][ T6381] [U] [ 122.146026][ T6381] [U] [ 122.148702][ T6381] [U] [ 122.162884][ T6381] [U] [ 122.165631][ T6381] [U] [ 122.168351][ T6381] [U] [ 122.171070][ T6381] [U] [ 122.208625][ T6381] [U] [ 122.211339][ T6381] [U] [ 122.214013][ T6381] [U] [ 122.216684][ T6381] [U] [ 122.222929][ T6381] [U] [ 122.225623][ T6381] [U] [ 122.228297][ T6381] [U] [ 122.230971][ T6381] [U] [ 122.263684][ T6381] [U] [ 122.266414][ T6381] [U] [ 122.269112][ T6381] [U] [ 122.271806][ T6381] [U] [ 122.296866][ T6384] bond0: entered promiscuous mode [ 122.301975][ T6384] bond_slave_0: entered promiscuous mode [ 122.311014][ T6384] bond_slave_1: entered promiscuous mode [ 122.324809][ T6381] [U] [ 122.327542][ T6381] [U] [ 122.330259][ T6381] [U] [ 122.332972][ T6381] [U] [ 122.385503][ T6381] [U] [ 122.999420][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'. [ 123.031058][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.040141][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.092977][ T6404] bridge0: entered promiscuous mode [ 123.398552][ T4947] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 124.136048][ T6421] [U]  [ 124.138894][ T6421] [U] [ 124.141617][ T6421] [U] [ 124.144332][ T6421] [U] [ 124.198220][ T6421] [U] [ 124.200989][ T6421] [U] [ 124.203707][ T6421] [U] [ 124.206442][ T6421] [U] [ 124.261842][ T6421] [U] [ 124.264598][ T6421] [U] [ 124.267323][ T6421] [U] [ 124.270043][ T6421] [U] [ 124.389305][ T6421] [U] [ 124.392064][ T6421] [U] [ 124.394789][ T6421] [U] [ 124.397511][ T6421] [U] [ 124.422176][ T6421] [U] [ 124.424926][ T6421] [U] [ 124.427644][ T6421] [U] [ 124.430364][ T6421] [U] [ 124.512795][ T6421] [U] [ 125.092393][ T6454] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 125.169887][ T6455] zswap: compressor 000 not available [ 126.084664][ T6473] FAULT_INJECTION: forcing a failure. [ 126.084664][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 126.131875][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.1.124 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.131917][ T6473] Tainted: [L]=SOFTLOCKUP [ 126.131926][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.131942][ T6473] Call Trace: [ 126.131950][ T6473] [ 126.131959][ T6473] dump_stack_lvl+0x100/0x190 [ 126.132012][ T6473] should_fail_ex.cold+0x5/0xa [ 126.132047][ T6473] should_failslab+0xc2/0x120 [ 126.132078][ T6473] __kvmalloc_node_noprof+0xfa/0xa00 [ 126.132106][ T6473] ? io_uring_setup.cold+0x171/0x1c6e [ 126.132147][ T6473] ? lockdep_init_map_type+0x5c/0x250 [ 126.132196][ T6473] io_uring_setup.cold+0x171/0x1c6e [ 126.132251][ T6473] ? __pfx_io_uring_setup+0x10/0x10 [ 126.132296][ T6473] ? do_futex+0x192/0x350 [ 126.132325][ T6473] ? __pfx_do_futex+0x10/0x10 [ 126.132370][ T6473] ? xfd_validate_state+0x129/0x190 [ 126.132408][ T6473] __x64_sys_io_uring_setup+0xc2/0x170 [ 126.132452][ T6473] do_syscall_64+0x115/0x840 [ 126.132487][ T6473] ? clear_bhb_loop+0x40/0x90 [ 126.132522][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.132550][ T6473] RIP: 0033:0x7f902e39ce59 [ 126.132573][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.132616][ T6473] RSP: 002b:00007f902f182028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 126.132643][ T6473] RAX: ffffffffffffffda RBX: 00007f902e616360 RCX: 00007f902e39ce59 [ 126.132662][ T6473] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 126.132679][ T6473] RBP: 00007f902e432d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.132695][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.132709][ T6473] R13: 00007f902e6163f8 R14: 00007f902e616360 R15: 00007ffd395806e8 [ 126.132743][ T6473] [ 127.276629][ T4947] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 127.278152][ T6485] futex_wake_op: syz.2.126 tries to shift op by -2048; fix this program [ 127.322906][ T6485] futex_wake_op: syz.2.126 tries to shift op by -2048; fix this program [ 127.379502][ T6485] random: crng reseeded on system resumption [ 127.731782][ T6490] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6490] [ 128.229727][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'. [ 128.289944][ T6514] vivid-007: ================= START STATUS ================= [ 128.307109][ T6514] vivid-007: Generate PTS: true [ 128.316333][ T6514] vivid-007: Generate SCR: true [ 128.321439][ T6514] tpg source WxH: 320x240 (Y'CbCr) [ 128.327319][ T6514] tpg field: 1 [ 128.331785][ T6514] tpg crop: (0,0)/320x240 [ 128.336398][ T6514] tpg compose: (0,0)/320x240 [ 128.342354][ T6514] tpg colorspace: 8 [ 128.357679][ T6514] tpg transfer function: 0/0 [ 128.366107][ T6514] tpg Y'CbCr encoding: 0/0 [ 128.373221][ T6514] tpg quantization: 0/0 [ 128.377595][ T6514] tpg RGB range: 0/2 [ 128.381579][ T6514] vivid-007: ================== END STATUS ================== [ 128.403982][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.425623][ T6506] bridge_slave_0 (unregistering): left allmulticast mode [ 128.433440][ T6506] bridge_slave_0 (unregistering): left promiscuous mode [ 128.440865][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.504784][ T6534] random: crng reseeded on system resumption [ 129.812761][ T6543] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.983385][ T6543] netlink: 330 bytes leftover after parsing attributes in process `syz.2.140'. [ 130.008278][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.016148][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.564780][ T6571] vivid-007: ================= START STATUS ================= [ 130.582644][ T6571] vivid-007: Enable Output Cropping: true grabbed [ 130.604534][ T6571] vivid-007: Enable Output Composing: true grabbed [ 130.624224][ T6571] vivid-007: Enable Output Scaler: true grabbed [ 130.661276][ T6571] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 130.688208][ T6571] vivid-007: Transmit Mode: HDMI grabbed [ 130.701025][ T6571] vivid-007: Hotplug Present: 0x00000000 [ 130.714454][ T6571] vivid-007: RxSense Present: 0x00000000 [ 130.738641][ T6571] vivid-007: EDID Present: 0x00000000 [ 130.766947][ T6571] vivid-007: ================== END STATUS ================== [ 132.739243][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.747811][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.809520][ T6610] Process accounting paused [ 134.863700][ T6684] netlink: 'syz.2.169': attribute type 11 has an invalid length. [ 136.266488][ T6710] netlink: zone id is out of range [ 136.478336][ T5644] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 136.490604][ T5644] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 136.502171][ T5644] CPU: 1 UID: 0 PID: 5644 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.502214][ T5644] Tainted: [L]=SOFTLOCKUP [ 136.502224][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.502253][ T5644] Workqueue: hci0 hci_rx_work [ 136.502291][ T5644] Call Trace: [ 136.502300][ T5644] [ 136.502311][ T5644] dump_stack_lvl+0x100/0x190 [ 136.502360][ T5644] sysfs_warn_dup.cold+0x1c/0x28 [ 136.502398][ T5644] sysfs_create_dir_ns+0x24b/0x2b0 [ 136.502429][ T5644] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 136.502460][ T5644] ? find_held_lock+0x2b/0x80 [ 136.502492][ T5644] ? kobject_add_internal+0x25f/0x930 [ 136.502519][ T5644] ? kobject_add_internal+0x25f/0x930 [ 136.502551][ T5644] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.502585][ T5644] kobject_add_internal+0x2c8/0x930 [ 136.502619][ T5644] kobject_add+0x16a/0x1e0 [ 136.502645][ T5644] ? __pfx_kobject_add+0x10/0x10 [ 136.502668][ T5644] ? class_to_subsys+0x10f/0x150 [ 136.502706][ T5644] ? kobject_put+0xb9/0x640 [ 136.502744][ T5644] ? _raw_spin_unlock+0x28/0x50 [ 136.502787][ T5644] device_add+0x294/0x1950 [ 136.502818][ T5644] ? __pfx_dev_set_name+0x10/0x10 [ 136.502852][ T5644] ? __pfx_device_add+0x10/0x10 [ 136.502879][ T5644] ? mgmt_send_event_skb+0x2fb/0x460 [ 136.502921][ T5644] hci_conn_add_sysfs+0x1a3/0x260 [ 136.502960][ T5644] le_conn_complete_evt+0x11eb/0x1f60 [ 136.503003][ T5644] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 136.503036][ T5644] ? __pfx_bt_warn+0x10/0x10 [ 136.503085][ T5644] hci_le_conn_complete_evt+0x23c/0x3a0 [ 136.503123][ T5644] ? skb_pull_data+0x15f/0x1e0 [ 136.503172][ T5644] hci_le_meta_evt+0x34a/0x5f0 [ 136.503210][ T5644] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 136.503252][ T5644] hci_event_packet+0x51c/0xcd0 [ 136.503287][ T5644] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 136.503326][ T5644] ? __pfx_hci_event_packet+0x10/0x10 [ 136.503366][ T5644] ? kcov_remote_start+0x374/0x660 [ 136.503402][ T5644] ? lockdep_hardirqs_on+0x78/0x100 [ 136.503449][ T5644] hci_rx_work+0x451/0xfc0 [ 136.503490][ T5644] process_one_work+0xa0e/0x1980 [ 136.503536][ T5644] ? __pfx_process_one_work+0x10/0x10 [ 136.503574][ T5644] ? __pfx_hci_rx_work+0x10/0x10 [ 136.503612][ T5644] worker_thread+0x5ef/0xe50 [ 136.503653][ T5644] ? kthread+0x13a/0x450 [ 136.503690][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 136.503714][ T5644] kthread+0x370/0x450 [ 136.503751][ T5644] ? __pfx_kthread+0x10/0x10 [ 136.503793][ T5644] ret_from_fork+0x72b/0xd50 [ 136.503824][ T5644] ? __pfx_ret_from_fork+0x10/0x10 [ 136.503855][ T5644] ? __switch_to+0x800/0x1100 [ 136.503891][ T5644] ? __switch_to_asm+0x39/0x70 [ 136.503924][ T5644] ? __pfx_kthread+0x10/0x10 [ 136.503964][ T5644] ret_from_fork_asm+0x1a/0x30 [ 136.504011][ T5644] [ 136.772727][ T5644] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 136.787355][ T5644] Bluetooth: hci0: failed to register connection device [ 138.569814][ T6733] [U]  [ 138.572656][ T6733] [U] [ 138.575374][ T6733] [U] [ 138.578094][ T6733] [U] [ 138.583896][ T6737] netlink: 25 bytes leftover after parsing attributes in process `syz.1.178'. [ 138.593667][ T6733] [U] [ 138.596398][ T6733] [U] [ 138.599115][ T6733] [U] [ 138.601828][ T6733] [U] [ 138.615789][ T6733] [U] [ 138.618529][ T6733] [U] [ 138.621241][ T6733] [U] [ 138.623957][ T6733] [U] [ 138.645716][ T6733] [U] [ 138.648470][ T6733] [U] [ 138.651187][ T6733] [U] [ 138.653908][ T6733] [U] [ 138.767002][ T6733] [U] [ 138.769762][ T6733] [U] [ 138.772483][ T6733] [U] [ 138.775204][ T6733] [U] [ 138.831891][ T6733] [U] [ 138.864242][ T6745] FAULT_INJECTION: forcing a failure. [ 138.864242][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 138.877955][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.3.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.877996][ T6745] Tainted: [L]=SOFTLOCKUP [ 138.878006][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.878021][ T6745] Call Trace: [ 138.878029][ T6745] [ 138.878039][ T6745] dump_stack_lvl+0x100/0x190 [ 138.878091][ T6745] should_fail_ex.cold+0x5/0xa [ 138.878122][ T6745] ? ima_alloc_init_template+0x19d/0x6d0 [ 138.878153][ T6745] should_failslab+0xc2/0x120 [ 138.878187][ T6745] __kmalloc_noprof+0xe0/0x850 [ 138.878234][ T6745] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 138.878289][ T6745] ima_alloc_init_template+0x19d/0x6d0 [ 138.878326][ T6745] ? take_dentry_name_snapshot+0x310/0x7c0 [ 138.878378][ T6745] ima_store_measurement+0x1e3/0x5b0 [ 138.878413][ T6745] ? __pfx_ima_store_measurement+0x10/0x10 [ 138.878471][ T6745] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 138.878525][ T6745] process_measurement+0x19cc/0x2350 [ 138.878569][ T6745] ? stack_trace_save+0x8e/0xc0 [ 138.878609][ T6745] ? __pfx_process_measurement+0x10/0x10 [ 138.878642][ T6745] ? __lock_acquire+0x4a5/0x2630 [ 138.878690][ T6745] ? __kasan_slab_alloc+0x89/0x90 [ 138.878724][ T6745] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 138.878766][ T6745] ? init_file+0x95/0x480 [ 138.878796][ T6745] ? alloc_empty_file+0x79/0x1c0 [ 138.878829][ T6745] ? alloc_file_pseudo+0x13a/0x230 [ 138.878863][ T6745] ? ksys_mmap_pgoff+0x242/0x610 [ 138.878890][ T6745] ? __x64_sys_mmap+0x125/0x190 [ 138.878915][ T6745] ? do_syscall_64+0x115/0x840 [ 138.878983][ T6745] ? __pfx_aa_file_perm+0x10/0x10 [ 138.879032][ T6745] ima_file_mmap+0x1c4/0x1f0 [ 138.879062][ T6745] ? __pfx_ima_file_mmap+0x10/0x10 [ 138.879096][ T6745] security_mmap_file+0x278/0x9b0 [ 138.879131][ T6745] vm_mmap_pgoff+0xec/0x470 [ 138.879166][ T6745] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 138.879197][ T6745] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 138.879242][ T6745] ? hugetlbfs_get_inode+0x3f5/0x700 [ 138.879287][ T6745] ksys_mmap_pgoff+0x285/0x610 [ 138.879322][ T6745] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 138.879352][ T6745] ? xfd_validate_state+0x129/0x190 [ 138.879374][ T6745] ? exit_to_user_mode_loop+0xf3/0x670 [ 138.879423][ T6745] __x64_sys_mmap+0x125/0x190 [ 138.879467][ T6745] do_syscall_64+0x115/0x840 [ 138.879504][ T6745] ? clear_bhb_loop+0x40/0x90 [ 138.879537][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.879566][ T6745] RIP: 0033:0x7efd5199ce59 [ 138.879590][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.879615][ T6745] RSP: 002b:00007efd528c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 138.879641][ T6745] RAX: ffffffffffffffda RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 138.879658][ T6745] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 138.879672][ T6745] RBP: 00007efd51a32d6f R08: 0000000000000401 R09: 0000300000000000 [ 138.879689][ T6745] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 138.879705][ T6745] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 138.879743][ T6745] [ 139.200123][ T30] audit: type=1804 audit(1780836842.851:2): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.182" name="anon_hugepage" dev="hugetlbfs" ino=12905 res=0 errno=0 [ 139.621017][ T6762] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 139.633753][ T6762] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 140.018098][ T6757] Process accounting paused [ 141.506274][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 145.059558][ T6874] zswap: compressor 000 not available [ 145.644000][ T6884] [U]  [ 145.646843][ T6884] [U] [ 145.649570][ T6884] [U] [ 145.652286][ T6884] [U] [ 145.686267][ T6884] [U] [ 145.689026][ T6884] [U] [ 145.691745][ T6884] [U] [ 145.694466][ T6884] [U] [ 145.730518][ T6884] [U] [ 145.733278][ T6884] [U] [ 145.736008][ T6884] [U] [ 145.738723][ T6884] [U] [ 145.846514][ T6884] [U] [ 145.849275][ T6884] [U] [ 145.851998][ T6884] [U] [ 145.854714][ T6884] [U] [ 145.878070][ T6884] [U] [ 145.880826][ T6884] [U] [ 145.883545][ T6884] [U] [ 145.886261][ T6884] [U] [ 145.942958][ T6884] [U] [ 145.945729][ T6884] [U] [ 145.948453][ T6884] [U] [ 145.951173][ T6884] [U] [ 145.989387][ T6884] [U] [ 145.992137][ T6884] [U] [ 145.994842][ T6884] [U] [ 145.997542][ T6884] [U] [ 146.043164][ T6884] [U] [ 147.464968][ T6928] zswap: compressor not available [ 147.670372][ T6938] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 147.682550][ T6938] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 149.180470][ T6956] [U]  [ 149.183267][ T6956] [U] [ 149.185970][ T6956] [U] [ 149.188690][ T6956] [U] [ 149.207471][ T6956] [U] [ 149.210206][ T6956] [U] [ 149.212924][ T6956] [U] [ 149.215624][ T6956] [U] [ 149.238274][ T6956] [U] [ 149.241021][ T6956] [U] [ 149.243718][ T6956] [U] [ 149.246405][ T6956] [U] [ 149.259907][ T6956] [U] [ 149.262652][ T6956] [U] [ 149.265372][ T6956] [U] [ 149.268089][ T6956] [U] [ 149.273679][ T6956] [U] [ 149.276415][ T6956] [U] [ 149.279138][ T6956] [U] [ 149.281857][ T6956] [U] [ 149.338624][ T6956] [U] [ 149.341360][ T6956] [U] [ 149.344077][ T6956] [U] [ 149.346797][ T6956] [U] [ 149.386853][ T6956] [U] [ 149.389610][ T6956] [U] [ 149.392331][ T6956] [U] [ 149.395048][ T6956] [U] [ 149.407804][ T6956] [U] [ 149.410540][ T6956] [U] [ 149.413243][ T6956] [U] [ 149.415946][ T6956] [U] [ 149.430414][ T6956] [U] [ 151.581044][ T7011] netlink: 342 bytes leftover after parsing attributes in process `syz.2.227'. [ 153.036212][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 153.895212][ T7033] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.914953][ T7033] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.997255][ T7033] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.029199][ T7056] zswap: compressor 000 not available [ 154.066445][ T7033] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.096553][ T7033] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.177997][ T7033] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.237505][ T7033] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.263714][ T7033] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.314308][ T7033] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.352369][ T7033] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.422673][ T7033] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.465607][ T7033] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.489707][ T7033] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.550638][ T7033] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.142010][ T4947] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.093029][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.252774][ T4947] Bluetooth: hci0: command 0x2016 tx timeout [ 156.492556][ T4947] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.660572][ T4947] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 158.174743][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.295850][ T7132] Setting dangerous option i915.mitigations - tainting kernel [ 158.335375][ T4947] Bluetooth: hci0: command 0x2016 tx timeout [ 158.572679][ T4947] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.702749][ T7146] kAFS: No cell specified [ 158.869036][ T7153] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.255' sets config #4095 [ 159.146160][ T7114] kexec: Could not allocate control_code_buffer [ 160.253407][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.412788][ T4947] Bluetooth: hci0: command 0x2016 tx timeout [ 160.652533][ T4947] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.785804][ T7190] cgroup: fork rejected by pids controller in /syz3 [ 162.492897][ T4947] Bluetooth: hci0: command 0x2016 tx timeout [ 162.846705][ T7244] Process accounting resumed [ 163.314774][ T7256] netlink: 1118 bytes leftover after parsing attributes in process `syz.2.268'. [ 163.391755][ T7258] FAULT_INJECTION: forcing a failure. [ 163.391755][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 163.521528][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.1.269 Tainted: G U L syzkaller #0 PREEMPT(full) [ 163.521573][ T7258] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 163.521582][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.521595][ T7258] Call Trace: [ 163.521603][ T7258] [ 163.521612][ T7258] dump_stack_lvl+0x100/0x190 [ 163.521658][ T7258] should_fail_ex.cold+0x5/0xa [ 163.521691][ T7258] should_failslab+0xc2/0x120 [ 163.521721][ T7258] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 163.521749][ T7258] ? fib_rules_register+0x30/0x500 [ 163.521787][ T7258] kmemdup_noprof+0x29/0x60 [ 163.521814][ T7258] fib_rules_register+0x30/0x500 [ 163.521849][ T7258] fib4_rules_init+0x1f/0x1c0 [ 163.521874][ T7258] fib_net_init+0x1dc/0x3f0 [ 163.521904][ T7258] ? is_module_address+0x69/0xf0 [ 163.521935][ T7258] ? __pfx_fib_net_init+0x10/0x10 [ 163.521965][ T7258] ? timer_init_key+0x155/0x330 [ 163.522004][ T7258] ? devinet_init_net+0x56c/0x8d0 [ 163.522040][ T7258] ? __pfx_fib_net_init+0x10/0x10 [ 163.522068][ T7258] ops_init+0x1e2/0x5f0 [ 163.522098][ T7258] setup_net+0x118/0x3a0 [ 163.522126][ T7258] ? __pfx_setup_net+0x10/0x10 [ 163.522153][ T7258] ? mutex_init_lockdep+0xf1/0x120 [ 163.522185][ T7258] copy_net_ns+0x46f/0x7c0 [ 163.522217][ T7258] create_new_namespaces+0x3ea/0xac0 [ 163.522257][ T7258] unshare_nsproxy_namespaces+0xf2/0x220 [ 163.522291][ T7258] ksys_unshare+0x438/0xab0 [ 163.522327][ T7258] ? __pfx_ksys_unshare+0x10/0x10 [ 163.522359][ T7258] ? xfd_validate_state+0x129/0x190 [ 163.522398][ T7258] __x64_sys_unshare+0x31/0x40 [ 163.522431][ T7258] do_syscall_64+0x115/0x840 [ 163.522463][ T7258] ? clear_bhb_loop+0x40/0x90 [ 163.522491][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.522515][ T7258] RIP: 0033:0x7f902e39ce59 [ 163.522536][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.522559][ T7258] RSP: 002b:00007f902f1c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 163.522583][ T7258] RAX: ffffffffffffffda RBX: 00007f902e616180 RCX: 00007f902e39ce59 [ 163.522600][ T7258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 163.522614][ T7258] RBP: 00007f902e432d6f R08: 0000000000000000 R09: 0000000000000000 [ 163.522629][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.522644][ T7258] R13: 00007f902e616218 R14: 00007f902e616180 R15: 00007ffd395806e8 [ 163.522679][ T7258] [ 164.439556][ T7283] hub 1-0:1.0: USB hub found [ 164.457720][ T7283] hub 1-0:1.0: 1 port detected [ 164.572881][ T4947] Bluetooth: hci0: command 0x2016 tx timeout [ 169.630385][ T7334] capability: warning: `syz.1.277' uses 32-bit capabilities (legacy support in use) [ 169.879398][ T7343] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 169.902394][ T7353] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 169.982364][ T7353] CIFS mount error: No usable UNC path provided in device string! [ 169.982364][ T7353] [ 170.016272][ T7353] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 170.122293][ T7353] Process accounting resumed [ 170.515907][ T7364] netlink: 'syz.1.283': attribute type 11 has an invalid length. [ 170.541348][ T7364] netlink: 'syz.1.283': attribute type 11 has an invalid length. [ 170.560858][ T7364] netlink: 'syz.1.283': attribute type 11 has an invalid length. [ 170.704973][ T7366] [U]  [ 170.707823][ T7366] [U] [ 170.710542][ T7366] [U] [ 170.713263][ T7366] [U] [ 170.732910][ T7366] [U] [ 170.735665][ T7366] [U] [ 170.738392][ T7366] [U] [ 170.741112][ T7366] [U] [ 170.757216][ T7366] [U] [ 170.759962][ T7366] [U] [ 170.762677][ T7366] [U] [ 170.765380][ T7366] [U] [ 170.873098][ T7366] [U] [ 170.875858][ T7366] [U] [ 170.878577][ T7366] [U] [ 170.881300][ T7366] [U] [ 170.904504][ T7366] [U] [ 170.907262][ T7366] [U] [ 170.909985][ T7366] [U] [ 170.912702][ T7366] [U] [ 170.927495][ T7366] [U] [ 170.930241][ T7366] [U] [ 170.932969][ T7366] [U] [ 170.935693][ T7366] [U] [ 170.943957][ T7366] [U] [ 170.946701][ T7366] [U] [ 170.949420][ T7366] [U] [ 170.952134][ T7366] [U] [ 170.960522][ T7366] [U] [ 170.963262][ T7366] [U] [ 170.965978][ T7366] [U] [ 170.968691][ T7366] [U] [ 170.993951][ T7366] [U] [ 170.996704][ T7366] [U] [ 171.000076][ T7366] [U] [ 171.002829][ T7366] [U] [ 171.054200][ T7366] [U] [ 171.059375][ T30] audit: type=1107 audit(1780836874.711:3): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 171.082912][ T7377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 171.096547][ T30] audit: type=1107 audit(1780836874.731:4): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 171.108833][ T7377] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.116000][ T7377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.123543][ T7377] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.130703][ T7377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.149444][ T7377] bridge0: entered promiscuous mode [ 171.156514][ T7377] bridge0: entered allmulticast mode [ 171.542164][ T4947] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 171.942338][ T7380] smpboot: CPU 1 is now offline [ 174.531053][ T7436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'. [ 174.569513][ T7438] FAULT_INJECTION: forcing a failure. [ 174.569513][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 174.586031][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'. [ 174.621334][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: syz.1.300 Tainted: G U L syzkaller #0 PREEMPT(full) [ 174.621359][ T7438] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 174.621364][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.621372][ T7438] Call Trace: [ 174.621377][ T7438] [ 174.621383][ T7438] dump_stack_lvl+0x100/0x190 [ 174.621420][ T7438] should_fail_ex.cold+0x5/0xa [ 174.621439][ T7438] should_failslab+0xc2/0x120 [ 174.621455][ T7438] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 174.621476][ T7438] ? vm_area_alloc+0x1f/0x160 [ 174.621495][ T7438] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.621516][ T7438] vm_area_alloc+0x1f/0x160 [ 174.621535][ T7438] __mmap_region+0x104d/0x2dd0 [ 174.621559][ T7438] ? __pfx___mmap_region+0x10/0x10 [ 174.621584][ T7438] ? update_cfs_group+0x11b/0x260 [ 174.621611][ T7438] ? __lock_acquire+0x4a5/0x2630 [ 174.621632][ T7438] ? do_raw_spin_unlock+0x145/0x1e0 [ 174.621647][ T7438] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 174.621675][ T7438] ? rcu_is_watching+0x12/0xc0 [ 174.621699][ T7438] ? rcu_is_watching+0x12/0xc0 [ 174.621721][ T7438] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 174.621738][ T7438] ? lockdep_hardirqs_on+0x78/0x100 [ 174.621785][ T7438] mmap_region+0x35d/0x620 [ 174.621799][ T7438] ? rcu_is_watching+0x12/0xc0 [ 174.621814][ T7438] ? __pfx_mmap_region+0x10/0x10 [ 174.621829][ T7438] ? cap_mmap_addr+0x4b/0x120 [ 174.621842][ T7438] ? bpf_lsm_mmap_addr+0x9/0x30 [ 174.621855][ T7438] ? security_mmap_addr+0x71/0x1e0 [ 174.621872][ T7438] ? __get_unmapped_area+0x255/0x3e0 [ 174.621891][ T7438] do_mmap+0xc63/0x12f0 [ 174.621911][ T7438] ? __pfx_do_mmap+0x10/0x10 [ 174.621927][ T7438] ? __pfx_down_write_killable+0x10/0x10 [ 174.621951][ T7438] vm_mmap_pgoff+0x29e/0x470 [ 174.621973][ T7438] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 174.621991][ T7438] ? do_futex+0x192/0x350 [ 174.622005][ T7438] ? __pfx_do_futex+0x10/0x10 [ 174.622019][ T7438] ? fdget+0x18b/0x210 [ 174.622036][ T7438] ksys_mmap_pgoff+0xe4/0x610 [ 174.622053][ T7438] ? __x64_sys_futex+0x358/0x4d0 [ 174.622067][ T7438] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 174.622083][ T7438] ? xfd_validate_state+0x129/0x190 [ 174.622101][ T7438] __x64_sys_mmap+0x125/0x190 [ 174.622118][ T7438] do_syscall_64+0x115/0x840 [ 174.622136][ T7438] ? clear_bhb_loop+0x40/0x90 [ 174.622153][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.622167][ T7438] RIP: 0033:0x7f902e39ce59 [ 174.622182][ T7438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.622195][ T7438] RSP: 002b:00007f902f206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.622211][ T7438] RAX: ffffffffffffffda RBX: 00007f902e615fa0 RCX: 00007f902e39ce59 [ 174.622221][ T7438] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 174.622229][ T7438] RBP: 00007f902e432d6f R08: 0000000000000401 R09: 0000000000008000 [ 174.622237][ T7438] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 174.622245][ T7438] R13: 00007f902e616038 R14: 00007f902e615fa0 R15: 00007ffd395806e8 [ 174.622263][ T7438] [ 175.225281][ T7454] [U]  [ 175.228084][ T7454] [U] [ 175.230795][ T7454] [U] [ 175.233468][ T7454] [U] [ 175.236274][ T7454] [U] [ 175.238949][ T7454] [U] [ 175.241615][ T7454] [U] [ 175.244286][ T7454] [U] [ 175.248038][ T7454] [U] [ 175.250720][ T7454] [U] [ 175.253388][ T7454] [U] [ 175.256056][ T7454] [U] [ 175.261482][ T7454] [U] [ 175.264171][ T7454] [U] [ 175.266856][ T7454] [U] [ 175.269524][ T7454] [U] [ 175.272407][ T7454] [U] [ 175.275085][ T7454] [U] [ 175.277756][ T7454] [U] [ 175.280428][ T7454] [U] [ 175.285585][ T7454] [U] [ 175.288274][ T7454] [U] [ 175.290943][ T7454] [U] [ 175.293609][ T7454] [U] [ 175.310926][ T7454] [U] [ 175.313616][ T7454] [U] [ 175.316291][ T7454] [U] [ 175.318959][ T7454] [U] [ 175.335333][ T7454] [U] [ 175.338024][ T7454] [U] [ 175.340702][ T7454] [U] [ 175.343382][ T7454] [U] [ 175.356869][ T7454] [U] [ 175.359572][ T7454] [U] [ 175.362243][ T7454] [U] [ 175.364913][ T7454] [U] [ 175.393579][ T7454] [U] [ 175.396289][ T7454] [U] [ 175.398960][ T7454] [U] [ 175.401631][ T7454] [U] [ 175.425306][ T7454] [U] [ 175.428024][ T7454] [U] [ 175.430697][ T7454] [U] [ 175.433367][ T7454] [U] [ 175.449228][ T7454] [U] [ 175.451929][ T7454] [U] [ 175.454599][ T7454] [U] [ 175.457275][ T7454] [U] [ 175.471707][ T7454] [U] [ 175.474413][ T7454] [U] [ 175.477115][ T7454] [U] [ 175.479786][ T7454] [U] [ 175.498363][ T7454] [U] [ 175.501107][ T7454] [U] [ 175.503777][ T7454] [U] [ 175.506445][ T7454] [U] [ 175.521603][ T7454] [U] [ 175.524301][ T7454] [U] [ 175.526969][ T7454] [U] [ 175.529636][ T7454] [U] [ 175.543935][ T7454] [U] [ 175.546641][ T7454] [U] [ 175.549311][ T7454] [U] [ 175.551979][ T7454] [U] [ 175.566304][ T7454] [U] [ 175.569034][ T7454] [U] [ 175.571702][ T7454] [U] [ 175.574373][ T7454] [U] [ 175.589880][ T7454] [U] [ 175.592581][ T7454] [U] [ 175.595261][ T7454] [U] [ 175.597940][ T7454] [U] [ 175.615242][ T7454] [U] [ 175.617950][ T7454] [U] [ 175.620630][ T7454] [U] [ 175.623301][ T7454] [U] [ 175.638236][ T7454] [U] [ 175.640936][ T7454] [U] [ 175.643606][ T7454] [U] [ 175.646290][ T7454] [U] [ 175.661303][ T7454] [U] [ 175.664002][ T7454] [U] [ 175.666672][ T7454] [U] [ 175.669342][ T7454] [U] [ 175.683575][ T7454] [U] [ 175.686271][ T7454] [U] [ 175.688942][ T7454] [U] [ 175.691610][ T7454] [U] [ 175.708693][ T7454] [U] [ 175.711386][ T7454] [U] [ 175.714053][ T7454] [U] [ 175.716721][ T7454] [U] [ 175.732666][ T7454] [U] [ 175.735355][ T7454] [U] [ 175.738023][ T7454] [U] [ 175.740689][ T7454] [U] [ 175.756047][ T7454] [U] [ 175.758738][ T7454] [U] [ 175.761404][ T7454] [U] [ 175.764070][ T7454] [U] [ 175.777619][ T7454] [U] [ 175.780309][ T7454] [U] [ 175.782978][ T7454] [U] [ 175.785644][ T7454] [U] [ 175.801722][ T7454] [U] [ 175.804415][ T7454] [U] [ 175.807082][ T7454] [U] [ 175.809753][ T7454] [U] [ 175.826651][ T7454] [U] [ 175.829422][ T7454] [U] [ 175.832133][ T7454] [U] [ 175.834807][ T7454] [U] [ 175.849788][ T7454] [U] [ 175.852490][ T7454] [U] [ 175.855160][ T7454] [U] [ 175.857826][ T7454] [U] [ 175.871260][ T7454] [U] [ 175.873956][ T7454] [U] [ 175.876623][ T7454] [U] [ 175.879290][ T7454] [U] [ 175.894923][ T7454] [U] [ 175.897620][ T7454] [U] [ 175.900288][ T7454] [U] [ 175.902956][ T7454] [U] [ 175.919443][ T7454] [U] [ 175.922142][ T7454] [U] [ 175.924810][ T7454] [U] [ 175.937153][ T7454] [U] [ 176.089471][ T7458] netlink: 164 bytes leftover after parsing attributes in process `syz.1.303'. [ 176.556643][ T7224] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 176.642773][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 176.642800][ T7224] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 176.642805][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.642813][ T7224] Call Trace: [ 176.642818][ T7224] [ 176.642823][ T7224] dump_stack_lvl+0x100/0x190 [ 176.642855][ T7224] dump_header+0xfb/0x606 [ 176.642871][ T7224] oom_kill_process.cold+0xd/0x330 [ 176.642888][ T7224] out_of_memory+0x340/0x14f0 [ 176.642914][ T7224] ? __pfx_out_of_memory+0x10/0x10 [ 176.642940][ T7224] mem_cgroup_out_of_memory+0xc6/0x130 [ 176.642960][ T7224] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 176.642979][ T7224] ? find_held_lock+0x2b/0x80 [ 176.643000][ T7224] ? do_raw_spin_unlock+0x145/0x1e0 [ 176.643015][ T7224] ? _raw_spin_unlock+0x28/0x50 [ 176.643034][ T7224] try_charge_memcg+0x6e5/0xdf0 [ 176.643055][ T7224] ? __pfx_try_charge_memcg+0x10/0x10 [ 176.643070][ T7224] ? find_held_lock+0x2b/0x80 [ 176.643086][ T7224] ? rcu_read_unlock+0x17/0x60 [ 176.643102][ T7224] ? rcu_read_unlock+0x17/0x60 [ 176.643119][ T7224] ? find_held_lock+0x2b/0x80 [ 176.643135][ T7224] ? rcu_read_unlock+0x17/0x60 [ 176.643155][ T7224] charge_memcg+0x19f/0x210 [ 176.643172][ T7224] __mem_cgroup_charge+0x2b/0x1c0 [ 176.643191][ T7224] shmem_alloc_and_add_folio+0x451/0xd40 [ 176.643218][ T7224] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 176.643241][ T7224] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 176.643259][ T7224] shmem_get_folio_gfp+0x6ab/0x1900 [ 176.643277][ T7224] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 176.643293][ T7224] ? timestamp_truncate+0x22e/0x2f0 [ 176.643313][ T7224] shmem_write_begin+0x1a4/0x420 [ 176.643329][ T7224] ? __pfx_shmem_write_begin+0x10/0x10 [ 176.643341][ T7224] ? rcu_is_watching+0x12/0xc0 [ 176.643357][ T7224] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 176.643378][ T7224] generic_perform_write+0x292/0xa40 [ 176.643403][ T7224] ? __pfx_generic_perform_write+0x10/0x10 [ 176.643422][ T7224] ? __mark_inode_dirty+0x55c/0x1720 [ 176.643437][ T7224] ? mnt_put_write_access_file+0x4e/0x100 [ 176.643454][ T7224] ? file_update_time_flags+0x373/0x500 [ 176.643475][ T7224] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 176.643490][ T7224] shmem_file_write_iter+0x10e/0x140 [ 176.643508][ T7224] __kernel_write_iter+0x2ac/0x920 [ 176.643525][ T7224] ? __pfx___kernel_write_iter+0x10/0x10 [ 176.643541][ T7224] ? __up_read+0x2c1/0x6e0 [ 176.643563][ T7224] ? dump_user_range+0x65e/0xad0 [ 176.643582][ T7224] ? __pfx___kasan_check_read+0x10/0x10 [ 176.643606][ T7224] dump_user_range+0x3f9/0xad0 [ 176.643628][ T7224] ? __pfx_dump_user_range+0x10/0x10 [ 176.643654][ T7224] ? __pfx_writenote+0x10/0x10 [ 176.643678][ T7224] elf_core_dump+0x2d5f/0x3d10 [ 176.643709][ T7224] ? __pfx_elf_core_dump+0x10/0x10 [ 176.643729][ T7224] ? kasan_save_stack+0x3f/0x50 [ 176.643741][ T7224] ? kasan_save_stack+0x30/0x50 [ 176.643754][ T7224] ? __kasan_kmalloc+0xaa/0xb0 [ 176.643766][ T7224] ? __kvmalloc_node_noprof+0x360/0xa00 [ 176.643780][ T7224] ? vfs_coredump+0x22db/0x5770 [ 176.643798][ T7224] ? asm_exc_page_fault+0x26/0x30 [ 176.643815][ T7224] ? 0xffffffffff600000 [ 176.643857][ T7224] ? vfs_coredump+0x2980/0x5770 [ 176.643874][ T7224] vfs_coredump+0x2980/0x5770 [ 176.643900][ T7224] ? __pfx_vfs_coredump+0x10/0x10 [ 176.643920][ T7224] ? __lock_acquire+0x4a5/0x2630 [ 176.643948][ T7224] ? lock_acquire+0x1b1/0x370 [ 176.643975][ T7224] ? is_bpf_text_address+0x8a/0x1a0 [ 176.643994][ T7224] ? bpf_ksym_find+0x124/0x1c0 [ 176.644012][ T7224] ? __kernel_text_address+0xd/0x30 [ 176.644026][ T7224] ? unwind_get_return_address+0x59/0xa0 [ 176.644044][ T7224] ? arch_stack_walk+0xa6/0xf0 [ 176.644067][ T7224] ? __sigqueue_free+0xbe/0x2a0 [ 176.644086][ T7224] ? stack_trace_save+0x8e/0xc0 [ 176.644104][ T7224] ? __pfx_stack_trace_save+0x10/0x10 [ 176.644121][ T7224] ? stack_depot_save_flags+0x27/0x9d0 [ 176.644143][ T7224] ? __lock_acquire+0x4a5/0x2630 [ 176.644194][ T7224] ? proc_coredump_connector+0x2d3/0x4f0 [ 176.644213][ T7224] ? __pfx_proc_coredump_connector+0x10/0x10 [ 176.644234][ T7224] ? rcu_is_watching+0x12/0xc0 [ 176.644252][ T7224] get_signal+0x2162/0x2210 [ 176.644276][ T7224] ? __pfx_get_signal+0x10/0x10 [ 176.644292][ T7224] ? __pfx_force_sig_fault+0x10/0x10 [ 176.644312][ T7224] arch_do_signal_or_restart+0x91/0x7a0 [ 176.644333][ T7224] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 176.644359][ T7224] ? rcu_is_watching+0x12/0xc0 [ 176.644376][ T7224] irqentry_exit+0x39e/0x970 [ 176.644398][ T7224] asm_exc_page_fault+0x26/0x30 [ 176.644411][ T7224] RIP: 0033:0x7efd5199ce59 [ 176.644427][ T7224] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 176.644433][ T7224] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 176.644445][ T7224] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 176.644454][ T7224] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 176.644463][ T7224] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 176.644471][ T7224] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.644479][ T7224] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 176.644491][ T7224] ? 0xffffffff81000000 [ 176.644507][ T7224] [ 176.649906][ T7224] memory: usage 307200kB, limit 307200kB, failcnt 19380 [ 177.427338][ T7466] FAULT_INJECTION: forcing a failure. [ 177.427338][ T7466] name failslab, interval 1, probability 0, space 0, times 0 [ 177.531891][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.2.306 Tainted: G U L syzkaller #0 PREEMPT(full) [ 177.531919][ T7466] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 177.531924][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.531932][ T7466] Call Trace: [ 177.531937][ T7466] [ 177.531943][ T7466] dump_stack_lvl+0x100/0x190 [ 177.531970][ T7466] should_fail_ex.cold+0x5/0xa [ 177.531988][ T7466] should_failslab+0xc2/0x120 [ 177.532005][ T7466] __kmalloc_cache_noprof+0x7a/0x6f0 [ 177.532024][ T7466] ? alloc_ucounts+0x13d/0x5c0 [ 177.532041][ T7466] ? _setid_policy_lookup+0x218/0x3e0 [ 177.532065][ T7466] alloc_ucounts+0x13d/0x5c0 [ 177.532084][ T7466] ? __pfx_alloc_ucounts+0x10/0x10 [ 177.532108][ T7466] set_cred_ucounts+0xcd/0x200 [ 177.532125][ T7466] __sys_setresuid+0x666/0x1280 [ 177.532144][ T7466] do_syscall_64+0x115/0x840 [ 177.532163][ T7466] ? clear_bhb_loop+0x40/0x90 [ 177.532179][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.532193][ T7466] RIP: 0033:0x7f274e79ce59 [ 177.532206][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.532218][ T7466] RSP: 002b:00007f274f66f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 177.532232][ T7466] RAX: ffffffffffffffda RBX: 00007f274ea15fa0 RCX: 00007f274e79ce59 [ 177.532241][ T7466] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 177.532249][ T7466] RBP: 00007f274e832d6f R08: 0000000000000000 R09: 0000000000000000 [ 177.532257][ T7466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.532265][ T7466] R13: 00007f274ea16038 R14: 00007f274ea15fa0 R15: 00007ffdc52e0558 [ 177.532283][ T7466] [ 177.785126][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 178.369309][ T7224] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 178.411249][ T7224] kmem: usage 4064kB, limit 9007199254740988kB, failcnt 0 [ 178.454070][ T7224] Memory cgroup stats for /syz3: [ 178.454253][ T7224] cache 310341632 [ 178.508149][ T7224] rss 69632 [ 178.525878][ T7224] rss_huge 0 [ 178.536748][ T7224] shmem 310341632 [ 178.552441][ T7224] mapped_file 60456960 [ 178.608406][ T7224] dirty 0 [ 178.619732][ T7224] writeback 0 [ 178.633191][ T7224] workingset_refault_anon 831 [ 178.653705][ T7224] workingset_refault_file 226 [ 178.680787][ T7224] swap 127832064 [ 178.694444][ T7224] swapcached 138477568 [ 178.718966][ T7224] pgpgin 212244 [ 178.734967][ T7224] pgpgout 145663 [ 178.753666][ T7224] pgfault 98286 [ 178.768684][ T7224] pgmajfault 139 [ 178.786115][ T7224] inactive_anon 119746560 [ 178.805753][ T7224] active_anon 190664704 [ 178.828661][ T7224] inactive_file 0 [ 178.845029][ T7224] active_file 0 [ 178.864820][ T7224] unevictable 0 [ 178.886038][ T7224] hierarchical_memory_limit 314572800 [ 178.910505][ T7224] hierarchical_memsw_limit 9223372036854771712 [ 178.940057][ T7224] total_cache 310341632 [ 178.979525][ T7224] total_rss 69632 [ 178.999163][ T7224] total_rss_huge 0 [ 179.019823][ T7224] total_shmem 310341632 [ 179.043785][ T7224] total_mapped_file 60456960 [ 179.069974][ T7224] total_dirty 0 [ 179.090182][ T7224] total_writeback 0 [ 179.110884][ T7224] total_workingset_refault_anon 831 [ 179.136019][ T7224] total_workingset_refault_file 226 [ 179.161334][ T7224] total_swap 127832064 [ 179.184505][ T7224] total_swapcached 138477568 [ 179.201461][ T7224] total_pgpgin 212244 [ 179.216844][ T7224] total_pgpgout 145663 [ 179.231231][ T7224] total_pgfault 98286 [ 179.244592][ T7224] total_pgmajfault 139 [ 179.265229][ T7224] total_inactive_anon 119746560 [ 179.287440][ T7224] total_active_anon 190664704 [ 179.312877][ T7224] total_inactive_file 0 [ 179.328292][ T7224] total_active_file 0 [ 179.342827][ T7224] total_unevictable 0 [ 179.356665][ T7224] anon_cost 0 [ 179.369315][ T7224] file_cost 0 [ 179.391757][ T7224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.100,pid=6342,uid=0 [ 179.476324][ T7224] Memory cgroup out of memory: Killed process 6342 (syz.3.100) total-vm:108440kB, anon-rss:1244kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 179.659935][ T7496] Process accounting resumed [ 179.718148][ T7220] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 179.830311][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 179.830336][ T7220] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 179.830341][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.830349][ T7220] Call Trace: [ 179.830354][ T7220] [ 179.830360][ T7220] dump_stack_lvl+0x100/0x190 [ 179.830388][ T7220] dump_header+0xfb/0x606 [ 179.830404][ T7220] oom_kill_process.cold+0xd/0x330 [ 179.830421][ T7220] out_of_memory+0x340/0x14f0 [ 179.830446][ T7220] ? __pfx_out_of_memory+0x10/0x10 [ 179.830472][ T7220] mem_cgroup_out_of_memory+0xc6/0x130 [ 179.830493][ T7220] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 179.830512][ T7220] ? find_held_lock+0x2b/0x80 [ 179.830532][ T7220] ? do_raw_spin_unlock+0x145/0x1e0 [ 179.830548][ T7220] ? _raw_spin_unlock+0x28/0x50 [ 179.830567][ T7220] try_charge_memcg+0x6e5/0xdf0 [ 179.830587][ T7220] ? __pfx_try_charge_memcg+0x10/0x10 [ 179.830602][ T7220] ? find_held_lock+0x2b/0x80 [ 179.830617][ T7220] ? rcu_read_unlock+0x17/0x60 [ 179.830634][ T7220] ? rcu_read_unlock+0x17/0x60 [ 179.830650][ T7220] ? find_held_lock+0x2b/0x80 [ 179.830666][ T7220] ? rcu_read_unlock+0x17/0x60 [ 179.830686][ T7220] charge_memcg+0x19f/0x210 [ 179.830703][ T7220] __mem_cgroup_charge+0x2b/0x1c0 [ 179.830722][ T7220] shmem_alloc_and_add_folio+0x451/0xd40 [ 179.830749][ T7220] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 179.830778][ T7220] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 179.830797][ T7220] shmem_get_folio_gfp+0x6ab/0x1900 [ 179.830815][ T7220] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 179.830834][ T7220] shmem_write_begin+0x1a4/0x420 [ 179.830850][ T7220] ? __pfx_shmem_write_begin+0x10/0x10 [ 179.830865][ T7220] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 179.830881][ T7220] ? lockdep_hardirqs_on+0x78/0x100 [ 179.830902][ T7220] generic_perform_write+0x292/0xa40 [ 179.830928][ T7220] ? __pfx_generic_perform_write+0x10/0x10 [ 179.830953][ T7220] ? file_update_time_flags+0x373/0x500 [ 179.830974][ T7220] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 179.830990][ T7220] shmem_file_write_iter+0x10e/0x140 [ 179.831007][ T7220] __kernel_write_iter+0x2ac/0x920 [ 179.831025][ T7220] ? __pfx___kernel_write_iter+0x10/0x10 [ 179.831040][ T7220] ? __up_read+0x2c1/0x6e0 [ 179.831056][ T7220] ? dump_user_range+0x65e/0xad0 [ 179.831080][ T7220] dump_user_range+0x3f9/0xad0 [ 179.831102][ T7220] ? __pfx_dump_user_range+0x10/0x10 [ 179.831128][ T7220] ? __pfx_writenote+0x10/0x10 [ 179.831152][ T7220] elf_core_dump+0x2d5f/0x3d10 [ 179.831182][ T7220] ? __pfx_elf_core_dump+0x10/0x10 [ 179.831202][ T7220] ? kasan_save_stack+0x3f/0x50 [ 179.831215][ T7220] ? kasan_save_stack+0x30/0x50 [ 179.831228][ T7220] ? __kasan_kmalloc+0xaa/0xb0 [ 179.831240][ T7220] ? __kvmalloc_node_noprof+0x360/0xa00 [ 179.831254][ T7220] ? vfs_coredump+0x22db/0x5770 [ 179.831272][ T7220] ? asm_exc_page_fault+0x26/0x30 [ 179.831288][ T7220] ? 0xffffffffff600000 [ 179.831330][ T7220] ? vfs_coredump+0x2980/0x5770 [ 179.831347][ T7220] vfs_coredump+0x2980/0x5770 [ 179.831374][ T7220] ? __pfx_vfs_coredump+0x10/0x10 [ 179.831393][ T7220] ? __lock_acquire+0x4a5/0x2630 [ 179.831421][ T7220] ? lock_acquire+0x1b1/0x370 [ 179.831449][ T7220] ? is_bpf_text_address+0x8a/0x1a0 [ 179.831467][ T7220] ? bpf_ksym_find+0x124/0x1c0 [ 179.831485][ T7220] ? __kernel_text_address+0xd/0x30 [ 179.831499][ T7220] ? unwind_get_return_address+0x59/0xa0 [ 179.831516][ T7220] ? arch_stack_walk+0xa6/0xf0 [ 179.831539][ T7220] ? __sigqueue_free+0xbe/0x2a0 [ 179.831559][ T7220] ? stack_trace_save+0x8e/0xc0 [ 179.831577][ T7220] ? __pfx_stack_trace_save+0x10/0x10 [ 179.831595][ T7220] ? stack_depot_save_flags+0x27/0x9d0 [ 179.831616][ T7220] ? __lock_acquire+0x4a5/0x2630 [ 179.831668][ T7220] ? proc_coredump_connector+0x2d3/0x4f0 [ 179.831686][ T7220] ? __pfx_proc_coredump_connector+0x10/0x10 [ 179.831708][ T7220] ? rcu_is_watching+0x12/0xc0 [ 179.831727][ T7220] get_signal+0x2162/0x2210 [ 179.831750][ T7220] ? __pfx_get_signal+0x10/0x10 [ 179.831771][ T7220] ? __pfx_force_sig_fault+0x10/0x10 [ 179.831792][ T7220] arch_do_signal_or_restart+0x91/0x7a0 [ 179.831812][ T7220] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 179.831839][ T7220] ? rcu_is_watching+0x12/0xc0 [ 179.831856][ T7220] irqentry_exit+0x39e/0x970 [ 179.831878][ T7220] asm_exc_page_fault+0x26/0x30 [ 179.831891][ T7220] RIP: 0033:0x7efd5199ce59 [ 179.831906][ T7220] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 179.831912][ T7220] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 179.831924][ T7220] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 179.831933][ T7220] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 179.831941][ T7220] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 179.831949][ T7220] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.831957][ T7220] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 179.831969][ T7220] ? 0xffffffff81000000 [ 179.831985][ T7220] [ 180.767440][ T7220] memory: usage 307200kB, limit 307200kB, failcnt 23623 [ 180.774413][ T7220] memory+swap: usage 431808kB, limit 9007199254740988kB, failcnt 0 [ 180.782282][ T7220] kmem: usage 3984kB, limit 9007199254740988kB, failcnt 0 [ 180.789404][ T7220] Memory cgroup stats for /syz3: [ 180.789497][ T7220] cache 310427648 [ 180.798029][ T7220] rss 65536 [ 180.801132][ T7220] rss_huge 0 [ 180.812777][ T7220] shmem 310427648 [ 180.821818][ T7220] mapped_file 48410624 [ 180.827417][ T7220] dirty 0 [ 180.830336][ T7220] writeback 0 [ 180.842509][ T7220] workingset_refault_anon 831 [ 180.857314][ T7220] workingset_refault_file 226 [ 180.873664][ T7220] swap 127598592 [ 180.877210][ T7220] swapcached 142626816 [ 180.881251][ T7220] pgpgin 217806 [ 180.884824][ T7480] kexec: Could not allocate control_code_buffer [ 180.892498][ T7220] pgpgout 149689 [ 180.902520][ T7220] pgfault 99928 [ 180.906020][ T7220] pgmajfault 139 [ 180.917622][ T7220] inactive_anon 219570176 [ 180.923564][ T7220] active_anon 90923008 [ 180.931333][ T7220] inactive_file 0 [ 180.934998][ T7220] active_file 0 [ 180.938435][ T7220] unevictable 0 [ 180.941868][ T7220] hierarchical_memory_limit 314572800 [ 180.947236][ T7220] hierarchical_memsw_limit 9223372036854771712 [ 180.953405][ T7220] total_cache 310427648 [ 180.957544][ T7220] total_rss 65536 [ 180.961155][ T7220] total_rss_huge 0 [ 180.964888][ T7220] total_shmem 310427648 [ 180.969040][ T7220] total_mapped_file 48410624 [ 180.978163][ T7220] total_dirty 0 [ 181.000518][ T7220] total_writeback 0 [ 181.023638][ T7220] total_workingset_refault_anon 831 [ 181.039154][ T7220] total_workingset_refault_file 226 [ 181.050661][ T7220] total_swap 127598592 [ 181.059292][ T7220] total_swapcached 142626816 [ 181.072532][ T7220] total_pgpgin 217806 [ 181.077036][ T7220] total_pgpgout 149689 [ 181.092556][ T7220] total_pgfault 99928 [ 181.096590][ T7220] total_pgmajfault 139 [ 181.100968][ T7220] total_inactive_anon 219570176 [ 181.115849][ T7220] total_active_anon 90923008 [ 181.131726][ T7220] total_inactive_file 0 [ 181.141982][ T7220] total_active_file 0 [ 181.151666][ T7220] total_unevictable 0 [ 181.167113][ T7220] anon_cost 0 [ 181.175835][ T7220] file_cost 0 [ 181.182668][ T7220] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.263,pid=7199,uid=0 [ 181.239728][ T7220] Memory cgroup out of memory: Killed process 7199 (syz.3.263) total-vm:65668kB, anon-rss:0kB, file-rss:0kB, shmem-rss:8760kB, UID:0 pgtables:60kB oom_score_adj:1000 [ 181.592178][ T7218] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 181.869576][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 181.869600][ T7218] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 181.869606][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.869614][ T7218] Call Trace: [ 181.869619][ T7218] [ 181.869624][ T7218] dump_stack_lvl+0x100/0x190 [ 181.869652][ T7218] dump_header+0xfb/0x606 [ 181.869669][ T7218] oom_kill_process.cold+0xd/0x330 [ 181.869686][ T7218] out_of_memory+0x340/0x14f0 [ 181.869711][ T7218] ? __pfx_out_of_memory+0x10/0x10 [ 181.869736][ T7218] mem_cgroup_out_of_memory+0xc6/0x130 [ 181.869757][ T7218] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 181.869776][ T7218] ? find_held_lock+0x2b/0x80 [ 181.869796][ T7218] ? do_raw_spin_unlock+0x145/0x1e0 [ 181.869812][ T7218] ? _raw_spin_unlock+0x28/0x50 [ 181.869831][ T7218] try_charge_memcg+0x6e5/0xdf0 [ 181.869851][ T7218] ? __pfx_try_charge_memcg+0x10/0x10 [ 181.869867][ T7218] ? find_held_lock+0x2b/0x80 [ 181.869882][ T7218] ? rcu_read_unlock+0x17/0x60 [ 181.869898][ T7218] ? rcu_read_unlock+0x17/0x60 [ 181.869915][ T7218] ? find_held_lock+0x2b/0x80 [ 181.869931][ T7218] ? rcu_read_unlock+0x17/0x60 [ 181.869951][ T7218] charge_memcg+0x19f/0x210 [ 181.869968][ T7218] __mem_cgroup_charge+0x2b/0x1c0 [ 181.869987][ T7218] shmem_alloc_and_add_folio+0x451/0xd40 [ 181.870014][ T7218] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 181.870042][ T7218] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 181.870061][ T7218] shmem_get_folio_gfp+0x6ab/0x1900 [ 181.870079][ T7218] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 181.870098][ T7218] shmem_write_begin+0x1a4/0x420 [ 181.870113][ T7218] ? __pfx_shmem_write_begin+0x10/0x10 [ 181.870128][ T7218] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 181.870145][ T7218] ? lockdep_hardirqs_on+0x78/0x100 [ 181.870166][ T7218] generic_perform_write+0x292/0xa40 [ 181.870192][ T7218] ? __pfx_generic_perform_write+0x10/0x10 [ 181.870214][ T7218] ? file_update_time_flags+0x373/0x500 [ 181.870236][ T7218] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 181.870252][ T7218] shmem_file_write_iter+0x10e/0x140 [ 181.870269][ T7218] __kernel_write_iter+0x2ac/0x920 [ 181.870287][ T7218] ? __pfx___kernel_write_iter+0x10/0x10 [ 181.870303][ T7218] ? __up_read+0x2c1/0x6e0 [ 181.870318][ T7218] ? dump_user_range+0x65e/0xad0 [ 181.870337][ T7218] ? copy_mc_enhanced_fast_string+0x6/0xf [ 181.870355][ T7218] dump_user_range+0x3f9/0xad0 [ 181.870378][ T7218] ? __pfx_dump_user_range+0x10/0x10 [ 181.870404][ T7218] ? __pfx_writenote+0x10/0x10 [ 181.870428][ T7218] elf_core_dump+0x2d5f/0x3d10 [ 181.870458][ T7218] ? __pfx_elf_core_dump+0x10/0x10 [ 181.870479][ T7218] ? kasan_save_stack+0x3f/0x50 [ 181.870491][ T7218] ? kasan_save_stack+0x30/0x50 [ 181.870504][ T7218] ? __kasan_kmalloc+0xaa/0xb0 [ 181.870516][ T7218] ? __kvmalloc_node_noprof+0x360/0xa00 [ 181.870530][ T7218] ? vfs_coredump+0x22db/0x5770 [ 181.870548][ T7218] ? asm_exc_page_fault+0x26/0x30 [ 181.870564][ T7218] ? 0xffffffffff600000 [ 181.870607][ T7218] ? vfs_coredump+0x2980/0x5770 [ 181.870624][ T7218] vfs_coredump+0x2980/0x5770 [ 181.870650][ T7218] ? __pfx_vfs_coredump+0x10/0x10 [ 181.870670][ T7218] ? __lock_acquire+0x4a5/0x2630 [ 181.870697][ T7218] ? lock_acquire+0x1b1/0x370 [ 181.870725][ T7218] ? is_bpf_text_address+0x8a/0x1a0 [ 181.870743][ T7218] ? bpf_ksym_find+0x124/0x1c0 [ 181.870761][ T7218] ? __kernel_text_address+0xd/0x30 [ 181.870775][ T7218] ? unwind_get_return_address+0x59/0xa0 [ 181.870793][ T7218] ? arch_stack_walk+0xa6/0xf0 [ 181.870816][ T7218] ? __sigqueue_free+0xbe/0x2a0 [ 181.870835][ T7218] ? stack_trace_save+0x8e/0xc0 [ 181.870853][ T7218] ? __pfx_stack_trace_save+0x10/0x10 [ 181.870870][ T7218] ? stack_depot_save_flags+0x27/0x9d0 [ 181.870892][ T7218] ? __lock_acquire+0x4a5/0x2630 [ 181.870942][ T7218] ? proc_coredump_connector+0x2d3/0x4f0 [ 181.870961][ T7218] ? __pfx_proc_coredump_connector+0x10/0x10 [ 181.870984][ T7218] ? rcu_is_watching+0x12/0xc0 [ 181.871003][ T7218] get_signal+0x2162/0x2210 [ 181.871031][ T7218] ? __pfx_get_signal+0x10/0x10 [ 181.871047][ T7218] ? __pfx_force_sig_fault+0x10/0x10 [ 181.871067][ T7218] arch_do_signal_or_restart+0x91/0x7a0 [ 181.871088][ T7218] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 181.871114][ T7218] ? rcu_is_watching+0x12/0xc0 [ 181.871132][ T7218] irqentry_exit+0x39e/0x970 [ 181.871153][ T7218] asm_exc_page_fault+0x26/0x30 [ 181.871166][ T7218] RIP: 0033:0x7efd5199ce59 [ 181.871183][ T7218] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 181.871189][ T7218] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 181.871200][ T7218] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 181.871209][ T7218] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 181.871217][ T7218] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 181.871225][ T7218] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.871233][ T7218] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 181.871245][ T7218] ? 0xffffffff81000000 [ 181.871261][ T7218] [ 182.718792][ T7218] memory: usage 307200kB, limit 307200kB, failcnt 28257 [ 182.725817][ T7218] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 182.733715][ T7218] kmem: usage 4272kB, limit 9007199254740988kB, failcnt 0 [ 182.740803][ T7218] Memory cgroup stats for /syz3: [ 182.740905][ T7218] cache 310079488 [ 182.749435][ T7218] rss 86016 [ 182.752558][ T7218] rss_huge 0 [ 182.755733][ T7218] shmem 310079488 [ 182.760528][ T7218] mapped_file 36913152 [ 182.764611][ T7218] dirty 0 [ 182.767541][ T7218] writeback 0 [ 182.770802][ T7218] workingset_refault_anon 831 [ 182.775472][ T7218] workingset_refault_file 226 [ 182.780120][ T7218] swap 127832064 [ 182.783656][ T7218] swapcached 157298688 [ 182.787722][ T7218] pgpgin 224550 [ 182.791154][ T7218] pgpgout 155460 [ 182.794711][ T7218] pgfault 100606 [ 182.798231][ T7218] pgmajfault 139 [ 182.801764][ T7218] inactive_anon 208769024 [ 182.806083][ T7218] active_anon 101421056 [ 182.810216][ T7218] inactive_file 0 [ 182.813905][ T7218] active_file 0 [ 182.817354][ T7218] unevictable 0 [ 182.820807][ T7218] hierarchical_memory_limit 314572800 [ 182.826176][ T7218] hierarchical_memsw_limit 9223372036854771712 [ 182.832303][ T7218] total_cache 310079488 [ 182.836469][ T7218] total_rss 86016 [ 182.840077][ T7218] total_rss_huge 0 [ 182.843793][ T7218] total_shmem 310079488 [ 182.847919][ T7218] total_mapped_file 36913152 [ 182.858729][ T7218] total_dirty 0 [ 182.863785][ T7218] total_writeback 0 [ 182.868061][ T7218] total_workingset_refault_anon 831 [ 182.889706][ T7218] total_workingset_refault_file 226 [ 182.907759][ T7218] total_swap 127832064 [ 182.919265][ T7218] total_swapcached 157298688 [ 182.932488][ T7218] total_pgpgin 224550 [ 182.945362][ T7218] total_pgpgout 155460 [ 182.966183][ T7218] total_pgfault 100606 [ 183.003059][ T7218] total_pgmajfault 139 [ 183.020042][ T7218] total_inactive_anon 208769024 [ 183.039041][ T7218] total_active_anon 101421056 [ 183.064805][ T7218] total_inactive_file 0 [ 183.080640][ T7531] FAULT_INJECTION: forcing a failure. [ 183.080640][ T7531] name failslab, interval 1, probability 0, space 0, times 0 [ 183.093553][ T7218] total_active_file 0 [ 183.102495][ T7218] total_unevictable 0 [ 183.108056][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.1.317 Tainted: G U L syzkaller #0 PREEMPT(full) [ 183.108081][ T7531] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 183.108087][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.108096][ T7531] Call Trace: [ 183.108102][ T7531] [ 183.108107][ T7531] dump_stack_lvl+0x100/0x190 [ 183.108137][ T7531] should_fail_ex.cold+0x5/0xa [ 183.108157][ T7531] should_failslab+0xc2/0x120 [ 183.108174][ T7531] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 183.108196][ T7531] ? vm_area_dup+0x27/0x8e0 [ 183.108215][ T7531] ? __vma_start_write+0x17f/0x280 [ 183.108237][ T7531] vm_area_dup+0x27/0x8e0 [ 183.108259][ T7531] dup_mmap+0x6f6/0x21b0 [ 183.108285][ T7531] ? __pfx_dup_mmap+0x10/0x10 [ 183.108302][ T7531] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 183.108324][ T7531] ? __lock_acquire+0x4a5/0x2630 [ 183.108347][ T7531] ? find_held_lock+0x2b/0x80 [ 183.108364][ T7531] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 183.108399][ T7531] copy_process+0x6c78/0x7ed0 [ 183.108418][ T7531] ? __futex_wait+0x256/0x300 [ 183.108447][ T7531] ? __pfx_copy_process+0x10/0x10 [ 183.108468][ T7531] ? futex_hash+0x141/0x370 [ 183.108494][ T7531] kernel_clone+0x176/0x9e0 [ 183.108511][ T7531] ? __pfx_futex_wait+0x10/0x10 [ 183.108530][ T7531] ? __pfx_kernel_clone+0x10/0x10 [ 183.108559][ T7531] ? 0xffffffff81000000 [ 183.108569][ T7531] __do_sys_clone+0xd9/0x120 [ 183.108589][ T7531] ? __pfx___do_sys_clone+0x10/0x10 [ 183.108609][ T7531] ? __fget_files+0x21f/0x3d0 [ 183.108625][ T7531] ? 0xffffffff81000000 [ 183.108646][ T7531] ? rcu_is_watching+0x12/0xc0 [ 183.108665][ T7531] do_syscall_64+0x115/0x840 [ 183.108684][ T7531] ? clear_bhb_loop+0x40/0x90 [ 183.108701][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.108716][ T7531] RIP: 0033:0x7f902e39ce59 [ 183.108728][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.108741][ T7531] RSP: 002b:00007f902f206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 183.108755][ T7531] RAX: ffffffffffffffda RBX: 00007f902e615fa0 RCX: 00007f902e39ce59 [ 183.108764][ T7531] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 183.108773][ T7531] RBP: 00007f902e432d6f R08: 0000000000000006 R09: 0000000000000000 [ 183.108781][ T7531] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.108804][ T7531] R13: 00007f902e616038 R14: 00007f902e615fa0 R15: 00007ffd395806e8 [ 183.108817][ T7531] ? 0xffffffff81000000 [ 183.108833][ T7531] [ 183.394204][ T7218] anon_cost 0 [ 183.397563][ T7218] file_cost 0 [ 183.400850][ T7218] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.263,pid=7200,uid=0 [ 183.415576][ T7218] Memory cgroup out of memory: Killed process 7200 (syz.3.263) total-vm:65668kB, anon-rss:0kB, file-rss:0kB, shmem-rss:22732kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 183.652614][ T7221] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 183.723506][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 183.723531][ T7221] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 183.723536][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.723544][ T7221] Call Trace: [ 183.723549][ T7221] [ 183.723555][ T7221] dump_stack_lvl+0x100/0x190 [ 183.723583][ T7221] dump_header+0xfb/0x606 [ 183.723599][ T7221] oom_kill_process.cold+0xd/0x330 [ 183.723616][ T7221] out_of_memory+0x340/0x14f0 [ 183.723642][ T7221] ? __pfx_out_of_memory+0x10/0x10 [ 183.723667][ T7221] mem_cgroup_out_of_memory+0xc6/0x130 [ 183.723688][ T7221] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 183.723707][ T7221] ? find_held_lock+0x2b/0x80 [ 183.723728][ T7221] ? do_raw_spin_unlock+0x145/0x1e0 [ 183.723748][ T7221] ? _raw_spin_unlock+0x28/0x50 [ 183.723767][ T7221] try_charge_memcg+0x6e5/0xdf0 [ 183.723787][ T7221] ? __pfx_try_charge_memcg+0x10/0x10 [ 183.723803][ T7221] ? find_held_lock+0x2b/0x80 [ 183.723818][ T7221] ? rcu_read_unlock+0x17/0x60 [ 183.723835][ T7221] ? rcu_read_unlock+0x17/0x60 [ 183.723851][ T7221] ? find_held_lock+0x2b/0x80 [ 183.723867][ T7221] ? rcu_read_unlock+0x17/0x60 [ 183.723888][ T7221] charge_memcg+0x19f/0x210 [ 183.723905][ T7221] __mem_cgroup_charge+0x2b/0x1c0 [ 183.723924][ T7221] shmem_alloc_and_add_folio+0x451/0xd40 [ 183.723951][ T7221] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 183.723974][ T7221] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 183.723992][ T7221] shmem_get_folio_gfp+0x6ab/0x1900 [ 183.724010][ T7221] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 183.724026][ T7221] ? timestamp_truncate+0x22e/0x2f0 [ 183.724046][ T7221] shmem_write_begin+0x1a4/0x420 [ 183.724062][ T7221] ? __pfx_shmem_write_begin+0x10/0x10 [ 183.724075][ T7221] ? rcu_is_watching+0x12/0xc0 [ 183.724091][ T7221] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 183.724111][ T7221] generic_perform_write+0x292/0xa40 [ 183.724137][ T7221] ? __pfx_generic_perform_write+0x10/0x10 [ 183.724155][ T7221] ? __mark_inode_dirty+0x55c/0x1720 [ 183.724171][ T7221] ? mnt_put_write_access_file+0x4e/0x100 [ 183.724187][ T7221] ? file_update_time_flags+0x373/0x500 [ 183.724208][ T7221] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 183.724224][ T7221] shmem_file_write_iter+0x10e/0x140 [ 183.724241][ T7221] __kernel_write_iter+0x2ac/0x920 [ 183.724259][ T7221] ? __pfx___kernel_write_iter+0x10/0x10 [ 183.724274][ T7221] ? __up_read+0x2c1/0x6e0 [ 183.724290][ T7221] ? dump_user_range+0x65e/0xad0 [ 183.724310][ T7221] ? copy_mc_enhanced_fast_string+0x6/0xf [ 183.724328][ T7221] dump_user_range+0x3f9/0xad0 [ 183.724351][ T7221] ? __pfx_dump_user_range+0x10/0x10 [ 183.724376][ T7221] ? __pfx_writenote+0x10/0x10 [ 183.724400][ T7221] elf_core_dump+0x2d5f/0x3d10 [ 183.724431][ T7221] ? __pfx_elf_core_dump+0x10/0x10 [ 183.724451][ T7221] ? kasan_save_stack+0x3f/0x50 [ 183.724463][ T7221] ? kasan_save_stack+0x30/0x50 [ 183.724476][ T7221] ? __kasan_kmalloc+0xaa/0xb0 [ 183.724488][ T7221] ? __kvmalloc_node_noprof+0x360/0xa00 [ 183.724501][ T7221] ? vfs_coredump+0x22db/0x5770 [ 183.724520][ T7221] ? asm_exc_page_fault+0x26/0x30 [ 183.724536][ T7221] ? 0xffffffffff600000 [ 183.724578][ T7221] ? vfs_coredump+0x2980/0x5770 [ 183.724595][ T7221] vfs_coredump+0x2980/0x5770 [ 183.724621][ T7221] ? __pfx_vfs_coredump+0x10/0x10 [ 183.724641][ T7221] ? __lock_acquire+0x4a5/0x2630 [ 183.724669][ T7221] ? lock_acquire+0x1b1/0x370 [ 183.724696][ T7221] ? is_bpf_text_address+0x8a/0x1a0 [ 183.724715][ T7221] ? bpf_ksym_find+0x124/0x1c0 [ 183.724733][ T7221] ? __kernel_text_address+0xd/0x30 [ 183.724751][ T7221] ? unwind_get_return_address+0x59/0xa0 [ 183.724770][ T7221] ? arch_stack_walk+0xa6/0xf0 [ 183.724793][ T7221] ? __sigqueue_free+0xbe/0x2a0 [ 183.724813][ T7221] ? stack_trace_save+0x8e/0xc0 [ 183.724831][ T7221] ? __pfx_stack_trace_save+0x10/0x10 [ 183.724849][ T7221] ? stack_depot_save_flags+0x27/0x9d0 [ 183.724871][ T7221] ? __lock_acquire+0x4a5/0x2630 [ 183.724921][ T7221] ? proc_coredump_connector+0x2d3/0x4f0 [ 183.724940][ T7221] ? __pfx_proc_coredump_connector+0x10/0x10 [ 183.724962][ T7221] ? rcu_is_watching+0x12/0xc0 [ 183.724980][ T7221] get_signal+0x2162/0x2210 [ 183.725004][ T7221] ? __pfx_get_signal+0x10/0x10 [ 183.725020][ T7221] ? __pfx_force_sig_fault+0x10/0x10 [ 183.725040][ T7221] arch_do_signal_or_restart+0x91/0x7a0 [ 183.725061][ T7221] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 183.725087][ T7221] ? rcu_is_watching+0x12/0xc0 [ 183.725107][ T7221] irqentry_exit+0x39e/0x970 [ 183.725128][ T7221] asm_exc_page_fault+0x26/0x30 [ 183.725142][ T7221] RIP: 0033:0x7efd5199ce59 [ 183.725158][ T7221] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 183.725164][ T7221] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 183.725175][ T7221] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 183.725184][ T7221] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 183.725193][ T7221] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 183.725201][ T7221] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.725209][ T7221] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 183.725221][ T7221] ? 0xffffffff81000000 [ 183.725237][ T7221] [ 184.548805][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 184.876607][ T7221] memory: usage 306884kB, limit 307200kB, failcnt 29363 [ 185.052032][ T7221] memory+swap: usage 421124kB, limit 9007199254740988kB, failcnt 0 [ 185.189798][ T7221] kmem: usage 3892kB, limit 9007199254740988kB, failcnt 0 [ 185.361724][ T7221] Memory cgroup stats for /syz3: [ 185.361827][ T7221] cache 310468608 [ 185.580405][ T7221] rss 94208 [ 185.665989][ T7221] rss_huge 0 [ 185.777093][ T7221] shmem 310468608 [ 185.863166][ T7221] mapped_file 40951808 [ 185.904927][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.325'. [ 185.985651][ T7221] dirty 0 [ 186.079477][ T7221] writeback 0 [ 186.183007][ T7221] workingset_refault_anon 831 [ 186.246388][ T7221] workingset_refault_file 226 [ 186.289248][ T7221] swap 120995840 [ 186.315625][ T7221] swapcached 168439808 [ 186.337783][ T7221] pgpgin 232994 [ 186.356171][ T7221] pgpgout 163926 [ 186.367695][ T7221] pgfault 101301 [ 186.382712][ T7221] pgmajfault 139 [ 186.393740][ T7221] inactive_anon 121495552 [ 186.408581][ T7221] active_anon 188915712 [ 186.426346][ T7221] inactive_file 0 [ 186.437453][ T7221] active_file 0 [ 186.464004][ T7221] unevictable 0 [ 186.477747][ T7221] hierarchical_memory_limit 314572800 [ 186.504592][ T7221] hierarchical_memsw_limit 9223372036854771712 [ 186.539497][ T7221] total_cache 310468608 [ 186.571291][ T7221] total_rss 94208 [ 186.606135][ T7221] total_rss_huge 0 [ 186.626419][ T4947] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 186.639529][ T7221] total_shmem 310468608 [ 186.694384][ T7221] total_mapped_file 40951808 [ 186.736772][ T7221] total_dirty 0 [ 186.760725][ T7221] total_writeback 0 [ 186.781434][ T7221] total_workingset_refault_anon 831 [ 186.812299][ T7221] total_workingset_refault_file 226 [ 186.840530][ T7221] total_swap 120995840 [ 186.873435][ T7221] total_swapcached 168439808 [ 186.899905][ T7221] total_pgpgin 232994 [ 186.918907][ T7221] total_pgpgout 163926 [ 186.945716][ T7221] total_pgfault 101301 [ 186.967736][ T7221] total_pgmajfault 139 [ 186.987088][ T7221] total_inactive_anon 121495552 [ 187.011803][ T7221] total_active_anon 188915712 [ 187.034890][ T7221] total_inactive_file 0 [ 187.053571][ T7221] total_active_file 0 [ 187.071284][ T7221] total_unevictable 0 [ 187.097412][ T7221] anon_cost 0 [ 187.115327][ T7221] file_cost 0 [ 187.133574][ T7221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.263,pid=7204,uid=0 [ 187.241451][ T7221] Memory cgroup out of memory: Killed process 7204 (syz.3.263) total-vm:65668kB, anon-rss:0kB, file-rss:0kB, shmem-rss:24448kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 187.556251][ T4947] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 187.873471][ T7221] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 187.966949][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 187.966975][ T7221] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 187.966980][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.966988][ T7221] Call Trace: [ 187.966993][ T7221] [ 187.966998][ T7221] dump_stack_lvl+0x100/0x190 [ 187.967027][ T7221] dump_header+0xfb/0x606 [ 187.967043][ T7221] oom_kill_process.cold+0xd/0x330 [ 187.967060][ T7221] out_of_memory+0x340/0x14f0 [ 187.967085][ T7221] ? __pfx_out_of_memory+0x10/0x10 [ 187.967111][ T7221] mem_cgroup_out_of_memory+0xc6/0x130 [ 187.967132][ T7221] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 187.967151][ T7221] ? find_held_lock+0x2b/0x80 [ 187.967171][ T7221] ? do_raw_spin_unlock+0x145/0x1e0 [ 187.967187][ T7221] ? _raw_spin_unlock+0x28/0x50 [ 187.967206][ T7221] try_charge_memcg+0x6e5/0xdf0 [ 187.967226][ T7221] ? __pfx_try_charge_memcg+0x10/0x10 [ 187.967241][ T7221] ? find_held_lock+0x2b/0x80 [ 187.967257][ T7221] ? rcu_read_unlock+0x17/0x60 [ 187.967273][ T7221] ? rcu_read_unlock+0x17/0x60 [ 187.967290][ T7221] ? find_held_lock+0x2b/0x80 [ 187.967306][ T7221] ? rcu_read_unlock+0x17/0x60 [ 187.967326][ T7221] charge_memcg+0x19f/0x210 [ 187.967343][ T7221] __mem_cgroup_charge+0x2b/0x1c0 [ 187.967363][ T7221] shmem_alloc_and_add_folio+0x451/0xd40 [ 187.967395][ T7221] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 187.967419][ T7221] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 187.967439][ T7221] shmem_get_folio_gfp+0x6ab/0x1900 [ 187.967457][ T7221] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 187.967473][ T7221] ? timestamp_truncate+0x22e/0x2f0 [ 187.967493][ T7221] shmem_write_begin+0x1a4/0x420 [ 187.967509][ T7221] ? __pfx_shmem_write_begin+0x10/0x10 [ 187.967522][ T7221] ? rcu_is_watching+0x12/0xc0 [ 187.967538][ T7221] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 187.967559][ T7221] generic_perform_write+0x292/0xa40 [ 187.967586][ T7221] ? __pfx_generic_perform_write+0x10/0x10 [ 187.967604][ T7221] ? __mark_inode_dirty+0x55c/0x1720 [ 187.967619][ T7221] ? mnt_put_write_access_file+0x4e/0x100 [ 187.967636][ T7221] ? file_update_time_flags+0x373/0x500 [ 187.967657][ T7221] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 187.967672][ T7221] shmem_file_write_iter+0x10e/0x140 [ 187.967690][ T7221] __kernel_write_iter+0x2ac/0x920 [ 187.967708][ T7221] ? __pfx___kernel_write_iter+0x10/0x10 [ 187.967723][ T7221] ? __up_read+0x2c1/0x6e0 [ 187.967740][ T7221] ? dump_user_range+0x65e/0xad0 [ 187.967759][ T7221] ? copy_mc_enhanced_fast_string+0x6/0xf [ 187.967777][ T7221] dump_user_range+0x3f9/0xad0 [ 187.967800][ T7221] ? __pfx_dump_user_range+0x10/0x10 [ 187.967825][ T7221] ? __pfx_writenote+0x10/0x10 [ 187.967850][ T7221] elf_core_dump+0x2d5f/0x3d10 [ 187.967880][ T7221] ? __pfx_elf_core_dump+0x10/0x10 [ 187.967900][ T7221] ? kasan_save_stack+0x3f/0x50 [ 187.967913][ T7221] ? kasan_save_stack+0x30/0x50 [ 187.967928][ T7221] ? __kasan_kmalloc+0xaa/0xb0 [ 187.967941][ T7221] ? __kvmalloc_node_noprof+0x360/0xa00 [ 187.967955][ T7221] ? vfs_coredump+0x22db/0x5770 [ 187.967973][ T7221] ? asm_exc_page_fault+0x26/0x30 [ 187.967989][ T7221] ? 0xffffffffff600000 [ 187.968031][ T7221] ? vfs_coredump+0x2980/0x5770 [ 187.968048][ T7221] vfs_coredump+0x2980/0x5770 [ 187.968074][ T7221] ? __pfx_vfs_coredump+0x10/0x10 [ 187.968094][ T7221] ? __lock_acquire+0x4a5/0x2630 [ 187.968121][ T7221] ? lock_acquire+0x1b1/0x370 [ 187.968149][ T7221] ? is_bpf_text_address+0x8a/0x1a0 [ 187.968167][ T7221] ? bpf_ksym_find+0x124/0x1c0 [ 187.968185][ T7221] ? __kernel_text_address+0xd/0x30 [ 187.968199][ T7221] ? unwind_get_return_address+0x59/0xa0 [ 187.968217][ T7221] ? arch_stack_walk+0xa6/0xf0 [ 187.968239][ T7221] ? __sigqueue_free+0xbe/0x2a0 [ 187.968259][ T7221] ? stack_trace_save+0x8e/0xc0 [ 187.968276][ T7221] ? __pfx_stack_trace_save+0x10/0x10 [ 187.968309][ T7221] ? stack_depot_save_flags+0x27/0x9d0 [ 187.968330][ T7221] ? __lock_acquire+0x4a5/0x2630 [ 187.968382][ T7221] ? proc_coredump_connector+0x2d3/0x4f0 [ 187.968404][ T7221] ? __pfx_proc_coredump_connector+0x10/0x10 [ 187.968426][ T7221] ? rcu_is_watching+0x12/0xc0 [ 187.968444][ T7221] get_signal+0x2162/0x2210 [ 187.968468][ T7221] ? __pfx_get_signal+0x10/0x10 [ 187.968484][ T7221] ? __pfx_force_sig_fault+0x10/0x10 [ 187.968504][ T7221] arch_do_signal_or_restart+0x91/0x7a0 [ 187.968525][ T7221] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 187.968551][ T7221] ? rcu_is_watching+0x12/0xc0 [ 187.968568][ T7221] irqentry_exit+0x39e/0x970 [ 187.968590][ T7221] asm_exc_page_fault+0x26/0x30 [ 187.968603][ T7221] RIP: 0033:0x7efd5199ce59 [ 187.968618][ T7221] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 187.968625][ T7221] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 187.968636][ T7221] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 187.968645][ T7221] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 187.968653][ T7221] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 187.968661][ T7221] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.968669][ T7221] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 187.968681][ T7221] ? 0xffffffff81000000 [ 187.968697][ T7221] [ 188.631328][ T7221] memory: usage 285364kB, limit 307200kB, failcnt 32020 [ 188.638341][ T7221] memory+swap: usage 398496kB, limit 9007199254740988kB, failcnt 0 [ 188.646226][ T7221] kmem: usage 3684kB, limit 9007199254740988kB, failcnt 0 [ 188.653371][ T7221] Memory cgroup stats for /syz3: [ 188.653473][ T7221] cache 288301056 [ 188.661984][ T7221] rss 69632 [ 188.665088][ T7221] rss_huge 0 [ 188.668275][ T7221] shmem 288301056 [ 188.671900][ T7221] mapped_file 42442752 [ 188.675970][ T7221] dirty 0 [ 188.678886][ T7221] writeback 0 [ 188.682145][ T7221] workingset_refault_anon 831 [ 188.686832][ T7221] workingset_refault_file 226 [ 188.691487][ T7221] swap 115847168 [ 188.695033][ T7221] swapcached 175276032 [ 188.700257][ T7221] pgpgin 234541 [ 188.703727][ T7221] pgpgout 171066 [ 188.707249][ T7221] pgfault 101571 [ 188.710770][ T7221] pgmajfault 139 [ 188.714310][ T7221] inactive_anon 131100672 [ 188.718636][ T7221] active_anon 157270016 [ 188.722783][ T7221] inactive_file 0 [ 188.726389][ T7221] active_file 0 [ 188.729820][ T7221] unevictable 0 [ 188.733364][ T7221] hierarchical_memory_limit 314572800 [ 188.738709][ T7221] hierarchical_memsw_limit 9223372036854771712 [ 188.744856][ T7221] total_cache 288301056 [ 188.748996][ T7221] total_rss 69632 [ 188.752645][ T7221] total_rss_huge 0 [ 188.756341][ T7221] total_shmem 288301056 [ 188.760469][ T7221] total_mapped_file 42442752 [ 188.765067][ T7221] total_dirty 0 [ 188.768518][ T7221] total_writeback 0 [ 188.772298][ T7221] total_workingset_refault_anon 831 [ 188.777489][ T7221] total_workingset_refault_file 226 [ 188.782688][ T7221] total_swap 115847168 [ 188.786743][ T7221] total_swapcached 175276032 [ 188.791310][ T7221] total_pgpgin 234541 [ 188.795296][ T7221] total_pgpgout 171066 [ 188.799341][ T7221] total_pgfault 101571 [ 188.804568][ T7221] total_pgmajfault 139 [ 188.808616][ T7221] total_inactive_anon 131100672 [ 188.813677][ T7221] total_active_anon 157270016 [ 188.818343][ T7221] total_inactive_file 0 [ 188.822490][ T7221] total_active_file 0 [ 188.826448][ T7221] total_unevictable 0 [ 188.830405][ T7221] anon_cost 0 [ 188.833692][ T7221] file_cost 0 [ 188.836951][ T7221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.263,pid=7212,uid=0 [ 188.853201][ T7221] Memory cgroup out of memory: Killed process 7212 (syz.3.263) total-vm:65668kB, anon-rss:0kB, file-rss:0kB, shmem-rss:25784kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 189.209785][ T7601] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 189.680725][ T7609] blk-mq: reduced tag depth (128 -> 64) [ 190.150246][ T7598] FAULT_INJECTION: forcing a failure. [ 190.150246][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 190.209167][ T7598] CPU: 0 UID: 0 PID: 7598 Comm: syz.1.333 Tainted: G U L syzkaller #0 PREEMPT(full) [ 190.209194][ T7598] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 190.209199][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.209208][ T7598] Call Trace: [ 190.209213][ T7598] [ 190.209219][ T7598] dump_stack_lvl+0x100/0x190 [ 190.209249][ T7598] should_fail_ex.cold+0x5/0xa [ 190.209268][ T7598] should_failslab+0xc2/0x120 [ 190.209286][ T7598] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 190.209309][ T7598] ? __proc_create+0x2cb/0x8c0 [ 190.209330][ T7598] __proc_create+0x2cb/0x8c0 [ 190.209349][ T7598] ? __pfx___proc_create+0x10/0x10 [ 190.209369][ T7598] ? _raw_write_unlock+0x28/0x50 [ 190.209387][ T7598] ? proc_register+0x559/0x8a0 [ 190.209408][ T7598] proc_create_reg+0x75/0x170 [ 190.209428][ T7598] proc_create_seq_private+0x8e/0x180 [ 190.209449][ T7598] ? __pfx_proc_create_seq_private+0x10/0x10 [ 190.209469][ T7598] ? __pfx_proc_create_net_data+0x10/0x10 [ 190.209488][ T7598] ? __pfx_uevent_net_rcv+0x10/0x10 [ 190.209505][ T7598] ? __pfx_dev_proc_net_init+0x10/0x10 [ 190.209521][ T7598] dev_proc_net_init+0xac/0x230 [ 190.209536][ T7598] ops_init+0x1e2/0x5f0 [ 190.209554][ T7598] setup_net+0x118/0x3a0 [ 190.209571][ T7598] ? __pfx_setup_net+0x10/0x10 [ 190.209586][ T7598] ? mutex_init_lockdep+0xf1/0x120 [ 190.209604][ T7598] copy_net_ns+0x46f/0x7c0 [ 190.209622][ T7598] create_new_namespaces+0x3ea/0xac0 [ 190.209644][ T7598] unshare_nsproxy_namespaces+0xf2/0x220 [ 190.209664][ T7598] ksys_unshare+0x438/0xab0 [ 190.209684][ T7598] ? __pfx_ksys_unshare+0x10/0x10 [ 190.209703][ T7598] ? xfd_validate_state+0x129/0x190 [ 190.209727][ T7598] __x64_sys_unshare+0x31/0x40 [ 190.209747][ T7598] do_syscall_64+0x115/0x840 [ 190.209766][ T7598] ? clear_bhb_loop+0x40/0x90 [ 190.209784][ T7598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.209799][ T7598] RIP: 0033:0x7f902e39ce59 [ 190.209811][ T7598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.209825][ T7598] RSP: 002b:00007f902f1e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 190.209839][ T7598] RAX: ffffffffffffffda RBX: 00007f902e616090 RCX: 00007f902e39ce59 [ 190.209849][ T7598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 190.209857][ T7598] RBP: 00007f902e432d6f R08: 0000000000000000 R09: 0000000000000000 [ 190.209865][ T7598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.209874][ T7598] R13: 00007f902e616128 R14: 00007f902e616090 R15: 00007ffd395806e8 [ 190.209893][ T7598] [ 190.499038][ T7206] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 190.509945][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 190.509968][ T7206] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 190.509973][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.509982][ T7206] Call Trace: [ 190.509987][ T7206] [ 190.509992][ T7206] dump_stack_lvl+0x100/0x190 [ 190.510019][ T7206] dump_header+0xfb/0x606 [ 190.510036][ T7206] oom_kill_process.cold+0xd/0x330 [ 190.510053][ T7206] out_of_memory+0x340/0x14f0 [ 190.510078][ T7206] ? __pfx_out_of_memory+0x10/0x10 [ 190.510104][ T7206] mem_cgroup_out_of_memory+0xc6/0x130 [ 190.510125][ T7206] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 190.510144][ T7206] ? find_held_lock+0x2b/0x80 [ 190.510171][ T7206] ? do_raw_spin_unlock+0x145/0x1e0 [ 190.510187][ T7206] ? _raw_spin_unlock+0x28/0x50 [ 190.510206][ T7206] try_charge_memcg+0x6e5/0xdf0 [ 190.510227][ T7206] ? __pfx_try_charge_memcg+0x10/0x10 [ 190.510242][ T7206] ? find_held_lock+0x2b/0x80 [ 190.510258][ T7206] ? rcu_read_unlock+0x17/0x60 [ 190.510274][ T7206] ? rcu_read_unlock+0x17/0x60 [ 190.510290][ T7206] ? find_held_lock+0x2b/0x80 [ 190.510307][ T7206] ? rcu_read_unlock+0x17/0x60 [ 190.510327][ T7206] charge_memcg+0x19f/0x210 [ 190.510344][ T7206] __mem_cgroup_charge+0x2b/0x1c0 [ 190.510364][ T7206] shmem_alloc_and_add_folio+0x451/0xd40 [ 190.510391][ T7206] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 190.510414][ T7206] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 190.510432][ T7206] shmem_get_folio_gfp+0x6ab/0x1900 [ 190.510451][ T7206] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 190.510467][ T7206] ? timestamp_truncate+0x22e/0x2f0 [ 190.510486][ T7206] shmem_write_begin+0x1a4/0x420 [ 190.510502][ T7206] ? __pfx_shmem_write_begin+0x10/0x10 [ 190.510515][ T7206] ? rcu_is_watching+0x12/0xc0 [ 190.510532][ T7206] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 190.510552][ T7206] generic_perform_write+0x292/0xa40 [ 190.510578][ T7206] ? __pfx_generic_perform_write+0x10/0x10 [ 190.510596][ T7206] ? __mark_inode_dirty+0x55c/0x1720 [ 190.510611][ T7206] ? mnt_put_write_access_file+0x4e/0x100 [ 190.510628][ T7206] ? file_update_time_flags+0x373/0x500 [ 190.510649][ T7206] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 190.510665][ T7206] shmem_file_write_iter+0x10e/0x140 [ 190.510682][ T7206] __kernel_write_iter+0x2ac/0x920 [ 190.510700][ T7206] ? __pfx___kernel_write_iter+0x10/0x10 [ 190.510716][ T7206] ? __up_read+0x2c1/0x6e0 [ 190.510732][ T7206] ? dump_user_range+0x65e/0xad0 [ 190.510756][ T7206] dump_user_range+0x3f9/0xad0 [ 190.510779][ T7206] ? __pfx_dump_user_range+0x10/0x10 [ 190.510804][ T7206] ? __pfx_writenote+0x10/0x10 [ 190.510828][ T7206] elf_core_dump+0x2d5f/0x3d10 [ 190.510859][ T7206] ? __pfx_elf_core_dump+0x10/0x10 [ 190.510879][ T7206] ? kasan_save_stack+0x3f/0x50 [ 190.510893][ T7206] ? kasan_save_stack+0x30/0x50 [ 190.510905][ T7206] ? __kasan_kmalloc+0xaa/0xb0 [ 190.510917][ T7206] ? __kvmalloc_node_noprof+0x360/0xa00 [ 190.510933][ T7206] ? vfs_coredump+0x22db/0x5770 [ 190.510952][ T7206] ? asm_exc_page_fault+0x26/0x30 [ 190.510968][ T7206] ? 0xffffffffff600000 [ 190.511010][ T7206] ? vfs_coredump+0x2980/0x5770 [ 190.511028][ T7206] vfs_coredump+0x2980/0x5770 [ 190.511054][ T7206] ? __pfx_vfs_coredump+0x10/0x10 [ 190.511074][ T7206] ? __lock_acquire+0x4a5/0x2630 [ 190.511102][ T7206] ? lock_acquire+0x1b1/0x370 [ 190.511130][ T7206] ? is_bpf_text_address+0x8a/0x1a0 [ 190.511148][ T7206] ? bpf_ksym_find+0x124/0x1c0 [ 190.511170][ T7206] ? __kernel_text_address+0xd/0x30 [ 190.511184][ T7206] ? unwind_get_return_address+0x59/0xa0 [ 190.511202][ T7206] ? arch_stack_walk+0xa6/0xf0 [ 190.511225][ T7206] ? __sigqueue_free+0xbe/0x2a0 [ 190.511245][ T7206] ? stack_trace_save+0x8e/0xc0 [ 190.511263][ T7206] ? __pfx_stack_trace_save+0x10/0x10 [ 190.511280][ T7206] ? stack_depot_save_flags+0x27/0x9d0 [ 190.511302][ T7206] ? __lock_acquire+0x4a5/0x2630 [ 190.511354][ T7206] ? proc_coredump_connector+0x2d3/0x4f0 [ 190.511373][ T7206] ? __pfx_proc_coredump_connector+0x10/0x10 [ 190.511394][ T7206] ? rcu_is_watching+0x12/0xc0 [ 190.511413][ T7206] get_signal+0x2162/0x2210 [ 190.511437][ T7206] ? __pfx_get_signal+0x10/0x10 [ 190.511453][ T7206] ? __pfx_force_sig_fault+0x10/0x10 [ 190.511474][ T7206] arch_do_signal_or_restart+0x91/0x7a0 [ 190.511495][ T7206] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 190.511521][ T7206] ? rcu_is_watching+0x12/0xc0 [ 190.511539][ T7206] irqentry_exit+0x39e/0x970 [ 190.511561][ T7206] asm_exc_page_fault+0x26/0x30 [ 190.511574][ T7206] RIP: 0033:0x7efd5199ce59 [ 190.511590][ T7206] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 190.511596][ T7206] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 190.511607][ T7206] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 190.511616][ T7206] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 190.511624][ T7206] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 190.511632][ T7206] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.511641][ T7206] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 190.511653][ T7206] ? 0xffffffff81000000 [ 190.511669][ T7206] [ 190.511713][ T7206] memory: usage 307200kB, limit 307200kB, failcnt 36252 [ 191.450440][ T7212] syz.3.263 (7212) used greatest stack depth: 18768 bytes left [ 191.674811][ T7622] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 191.707909][ T7206] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 191.739760][ T7206] kmem: usage 3896kB, limit 9007199254740988kB, failcnt 0 [ 191.780323][ T7206] Memory cgroup stats for /syz3: [ 191.780456][ T7206] cache 310439936 [ 191.826002][ T7206] rss 143360 [ 191.840382][ T7206] rss_huge 0 [ 191.859471][ T7206] shmem 310439936 [ 191.871806][ T7206] mapped_file 50692096 [ 191.890953][ T7206] dirty 0 [ 191.907144][ T7206] writeback 0 [ 191.921842][ T7206] workingset_refault_anon 831 [ 191.943288][ T7206] workingset_refault_file 226 [ 191.962199][ T7206] swap 127832064 [ 191.967364][ T4947] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 191.993501][ T7206] swapcached 196771840 [ 192.011650][ T7206] pgpgin 250613 [ 192.029640][ T7206] pgpgout 182712 [ 192.051385][ T7206] pgfault 103440 [ 192.071009][ T7206] pgmajfault 139 [ 192.095261][ T7206] inactive_anon 225873920 [ 192.120990][ T7206] active_anon 84709376 [ 192.144630][ T7206] inactive_file 0 [ 192.168847][ T7206] active_file 0 [ 192.191606][ T7206] unevictable 0 [ 192.212410][ T7206] hierarchical_memory_limit 314572800 [ 192.242917][ T7206] hierarchical_memsw_limit 9223372036854771712 [ 192.270424][ T7206] total_cache 310439936 [ 192.290239][ T7206] total_rss 143360 [ 192.306360][ T7206] total_rss_huge 0 [ 192.321585][ T7206] total_shmem 310439936 [ 192.340335][ T7206] total_mapped_file 50692096 [ 192.359451][ T7206] total_dirty 0 [ 192.375196][ T7206] total_writeback 0 [ 192.390393][ T7206] total_workingset_refault_anon 831 [ 192.411931][ T7206] total_workingset_refault_file 226 [ 192.434621][ T7206] total_swap 127832064 [ 192.454509][ T7206] total_swapcached 196771840 [ 192.475298][ T7206] total_pgpgin 250613 [ 192.493471][ T7206] total_pgpgout 182712 [ 192.511117][ T7206] total_pgfault 103440 [ 192.529106][ T7206] total_pgmajfault 139 [ 192.545703][ T7206] total_inactive_anon 225873920 [ 192.570577][ T7206] total_active_anon 84709376 [ 192.603285][ T7206] total_inactive_file 0 [ 192.626025][ T7206] total_active_file 0 [ 192.647992][ T7206] total_unevictable 0 [ 192.664440][ T7206] anon_cost 0 [ 192.686199][ T7206] file_cost 0 [ 192.707363][ T7206] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.263,pid=7221,uid=0 [ 192.800334][ T7206] Memory cgroup out of memory: Killed process 7221 (syz.3.263) total-vm:65668kB, anon-rss:0kB, file-rss:0kB, shmem-rss:32408kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 192.896544][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.904596][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.013453][ T7646] Process accounting paused [ 193.837326][ T7666] netlink: 56 bytes leftover after parsing attributes in process `syz.0.348'. [ 194.047971][ T7224] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 194.201969][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 194.201995][ T7224] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 194.202000][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.202008][ T7224] Call Trace: [ 194.202013][ T7224] [ 194.202018][ T7224] dump_stack_lvl+0x100/0x190 [ 194.202046][ T7224] dump_header+0xfb/0x606 [ 194.202062][ T7224] oom_kill_process.cold+0xd/0x330 [ 194.202080][ T7224] out_of_memory+0x340/0x14f0 [ 194.202105][ T7224] ? __pfx_out_of_memory+0x10/0x10 [ 194.202130][ T7224] mem_cgroup_out_of_memory+0xc6/0x130 [ 194.202152][ T7224] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 194.202171][ T7224] ? find_held_lock+0x2b/0x80 [ 194.202191][ T7224] ? do_raw_spin_unlock+0x145/0x1e0 [ 194.202206][ T7224] ? _raw_spin_unlock+0x28/0x50 [ 194.202225][ T7224] try_charge_memcg+0x6e5/0xdf0 [ 194.202246][ T7224] ? __pfx_try_charge_memcg+0x10/0x10 [ 194.202261][ T7224] ? find_held_lock+0x2b/0x80 [ 194.202276][ T7224] ? rcu_read_unlock+0x17/0x60 [ 194.202292][ T7224] ? rcu_read_unlock+0x17/0x60 [ 194.202311][ T7224] ? find_held_lock+0x2b/0x80 [ 194.202328][ T7224] ? rcu_read_unlock+0x17/0x60 [ 194.202348][ T7224] charge_memcg+0x19f/0x210 [ 194.202365][ T7224] __mem_cgroup_charge+0x2b/0x1c0 [ 194.202384][ T7224] shmem_alloc_and_add_folio+0x451/0xd40 [ 194.202411][ T7224] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 194.202434][ T7224] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 194.202452][ T7224] shmem_get_folio_gfp+0x6ab/0x1900 [ 194.202470][ T7224] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 194.202486][ T7224] ? timestamp_truncate+0x22e/0x2f0 [ 194.202506][ T7224] shmem_write_begin+0x1a4/0x420 [ 194.202521][ T7224] ? __pfx_shmem_write_begin+0x10/0x10 [ 194.202534][ T7224] ? rcu_is_watching+0x12/0xc0 [ 194.202550][ T7224] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 194.202571][ T7224] generic_perform_write+0x292/0xa40 [ 194.202597][ T7224] ? __pfx_generic_perform_write+0x10/0x10 [ 194.202615][ T7224] ? __mark_inode_dirty+0x55c/0x1720 [ 194.202630][ T7224] ? mnt_put_write_access_file+0x4e/0x100 [ 194.202647][ T7224] ? file_update_time_flags+0x373/0x500 [ 194.202668][ T7224] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 194.202684][ T7224] shmem_file_write_iter+0x10e/0x140 [ 194.202707][ T7224] __kernel_write_iter+0x2ac/0x920 [ 194.202725][ T7224] ? __pfx___kernel_write_iter+0x10/0x10 [ 194.202745][ T7224] ? kasan_check_range+0xb0/0x1e0 [ 194.202767][ T7224] dump_user_range+0x3f9/0xad0 [ 194.202791][ T7224] ? __pfx_dump_user_range+0x10/0x10 [ 194.202816][ T7224] ? __pfx_writenote+0x10/0x10 [ 194.202840][ T7224] elf_core_dump+0x2d5f/0x3d10 [ 194.202871][ T7224] ? __pfx_elf_core_dump+0x10/0x10 [ 194.202891][ T7224] ? kasan_save_stack+0x3f/0x50 [ 194.202904][ T7224] ? kasan_save_stack+0x30/0x50 [ 194.202917][ T7224] ? __kasan_kmalloc+0xaa/0xb0 [ 194.202929][ T7224] ? __kvmalloc_node_noprof+0x360/0xa00 [ 194.202943][ T7224] ? vfs_coredump+0x22db/0x5770 [ 194.202961][ T7224] ? asm_exc_page_fault+0x26/0x30 [ 194.202978][ T7224] ? 0xffffffffff600000 [ 194.203019][ T7224] ? vfs_coredump+0x2980/0x5770 [ 194.203036][ T7224] vfs_coredump+0x2980/0x5770 [ 194.203063][ T7224] ? __pfx_vfs_coredump+0x10/0x10 [ 194.203083][ T7224] ? __lock_acquire+0x4a5/0x2630 [ 194.203110][ T7224] ? lock_acquire+0x1b1/0x370 [ 194.203138][ T7224] ? is_bpf_text_address+0x8a/0x1a0 [ 194.203156][ T7224] ? bpf_ksym_find+0x124/0x1c0 [ 194.203174][ T7224] ? __kernel_text_address+0xd/0x30 [ 194.203188][ T7224] ? unwind_get_return_address+0x59/0xa0 [ 194.203206][ T7224] ? arch_stack_walk+0xa6/0xf0 [ 194.203229][ T7224] ? __sigqueue_free+0xbe/0x2a0 [ 194.203248][ T7224] ? stack_trace_save+0x8e/0xc0 [ 194.203266][ T7224] ? __pfx_stack_trace_save+0x10/0x10 [ 194.203283][ T7224] ? stack_depot_save_flags+0x27/0x9d0 [ 194.203305][ T7224] ? __lock_acquire+0x4a5/0x2630 [ 194.203356][ T7224] ? proc_coredump_connector+0x2d3/0x4f0 [ 194.203375][ T7224] ? __pfx_proc_coredump_connector+0x10/0x10 [ 194.203396][ T7224] ? rcu_is_watching+0x12/0xc0 [ 194.203415][ T7224] get_signal+0x2162/0x2210 [ 194.203438][ T7224] ? __pfx_get_signal+0x10/0x10 [ 194.203454][ T7224] ? __pfx_force_sig_fault+0x10/0x10 [ 194.203474][ T7224] arch_do_signal_or_restart+0x91/0x7a0 [ 194.203495][ T7224] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 194.203522][ T7224] ? rcu_is_watching+0x12/0xc0 [ 194.203540][ T7224] irqentry_exit+0x39e/0x970 [ 194.203561][ T7224] asm_exc_page_fault+0x26/0x30 [ 194.203574][ T7224] RIP: 0033:0x7efd5199ce59 [ 194.203590][ T7224] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 194.203596][ T7224] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 194.203608][ T7224] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 194.203616][ T7224] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 194.203625][ T7224] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 194.203633][ T7224] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.203641][ T7224] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 194.203654][ T7224] ? 0xffffffff81000000 [ 194.203670][ T7224] [ 195.424761][ T7697] netlink: 114 bytes leftover after parsing attributes in process `syz.0.355'. [ 195.990531][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 196.062006][ T7224] memory: usage 307200kB, limit 307200kB, failcnt 39873 [ 196.076927][ T7224] memory+swap: usage 431852kB, limit 9007199254740988kB, failcnt 0 [ 196.094576][ T7224] kmem: usage 4016kB, limit 9007199254740988kB, failcnt 0 [ 196.109309][ T7224] Memory cgroup stats for /syz3: [ 196.109406][ T7224] cache 309526528 [ 196.126914][ T7224] rss 933888 [ 196.133437][ T7224] rss_huge 0 [ 196.140026][ T7224] shmem 309526528 [ 196.148259][ T7224] mapped_file 55828480 [ 196.216253][ T7224] dirty 0 [ 196.225939][ T7224] writeback 0 [ 196.238285][ T7224] workingset_refault_anon 831 [ 196.255200][ T7224] workingset_refault_file 226 [ 196.273065][ T7224] swap 127643648 [ 196.304720][ T7224] swapcached 203382784 [ 196.341641][ T7224] pgpgin 260499 [ 196.353712][ T7224] pgpgout 193258 [ 196.386681][ T7224] pgfault 105118 [ 196.409509][ T7224] pgmajfault 139 [ 196.425463][ T7224] inactive_anon 126160896 [ 196.445559][ T7224] active_anon 184299520 [ 196.500099][ T7224] inactive_file 0 [ 196.525820][ T7224] active_file 0 [ 196.547938][ T7224] unevictable 0 [ 196.564479][ T7224] hierarchical_memory_limit 314572800 [ 196.605257][ T7224] hierarchical_memsw_limit 9223372036854771712 [ 196.624704][ T7224] total_cache 309526528 [ 196.642155][ T7224] total_rss 933888 [ 196.658824][ T7224] total_rss_huge 0 [ 196.671740][ T7224] total_shmem 309526528 [ 196.687508][ T7224] total_mapped_file 55828480 [ 196.710733][ T7224] total_dirty 0 [ 196.721046][ T7224] total_writeback 0 [ 196.733880][ T7224] total_workingset_refault_anon 831 [ 196.746530][ T7224] total_workingset_refault_file 226 [ 196.761804][ T7224] total_swap 127643648 [ 196.770148][ T7224] total_swapcached 203382784 [ 196.842036][ T7224] total_pgpgin 260499 [ 196.864371][ T7224] total_pgpgout 193258 [ 196.874785][ T7224] total_pgfault 105118 [ 196.895508][ T7224] total_pgmajfault 139 [ 196.917384][ T7224] total_inactive_anon 126160896 [ 196.944921][ T7224] total_active_anon 184299520 [ 196.971085][ T7224] total_inactive_file 0 [ 197.001116][ T7224] total_active_file 0 [ 197.033141][ T7224] total_unevictable 0 [ 197.055884][ T7224] anon_cost 0 [ 197.074816][ T7224] file_cost 0 [ 197.098708][ T7224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.345,pid=7654,uid=0 [ 197.229174][ T7224] Memory cgroup out of memory: OOM victim 7654 (syz.3.345) is already exiting. Skip killing the task [ 197.399047][ T7198] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 197.667618][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 197.667645][ T7198] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 197.667650][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.667658][ T7198] Call Trace: [ 197.667663][ T7198] [ 197.667669][ T7198] dump_stack_lvl+0x100/0x190 [ 197.667697][ T7198] dump_header+0xfb/0x606 [ 197.667714][ T7198] oom_kill_process.cold+0xd/0x330 [ 197.667731][ T7198] out_of_memory+0x340/0x14f0 [ 197.667756][ T7198] ? __pfx_out_of_memory+0x10/0x10 [ 197.667782][ T7198] mem_cgroup_out_of_memory+0xc6/0x130 [ 197.667803][ T7198] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 197.667822][ T7198] ? find_held_lock+0x2b/0x80 [ 197.667842][ T7198] ? do_raw_spin_unlock+0x145/0x1e0 [ 197.667858][ T7198] ? _raw_spin_unlock+0x28/0x50 [ 197.667877][ T7198] try_charge_memcg+0x6e5/0xdf0 [ 197.667897][ T7198] ? __pfx_try_charge_memcg+0x10/0x10 [ 197.667912][ T7198] ? find_held_lock+0x2b/0x80 [ 197.667932][ T7198] ? rcu_read_unlock+0x17/0x60 [ 197.667948][ T7198] ? rcu_read_unlock+0x17/0x60 [ 197.667965][ T7198] ? find_held_lock+0x2b/0x80 [ 197.667981][ T7198] ? rcu_read_unlock+0x17/0x60 [ 197.668001][ T7198] charge_memcg+0x19f/0x210 [ 197.668018][ T7198] __mem_cgroup_charge+0x2b/0x1c0 [ 197.668037][ T7198] shmem_alloc_and_add_folio+0x451/0xd40 [ 197.668064][ T7198] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 197.668087][ T7198] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 197.668105][ T7198] shmem_get_folio_gfp+0x6ab/0x1900 [ 197.668123][ T7198] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 197.668137][ T7198] ? filemap_map_pages+0x9c1/0x2140 [ 197.668162][ T7198] shmem_fault+0x1f9/0xa20 [ 197.668177][ T7198] ? __pfx_shmem_fault+0x10/0x10 [ 197.668193][ T7198] ? __pfx_filemap_map_pages+0x10/0x10 [ 197.668217][ T7198] ? find_held_lock+0x2b/0x80 [ 197.668235][ T7198] __do_fault+0x10b/0x440 [ 197.668251][ T7198] do_fault+0xa99/0x1750 [ 197.668270][ T7198] __handle_mm_fault+0x187d/0x2a00 [ 197.668293][ T7198] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 197.668310][ T7198] ? __pfx___handle_mm_fault+0x10/0x10 [ 197.668331][ T7198] ? pte_offset_map_lock+0x174/0x320 [ 197.668346][ T7198] ? find_held_lock+0x2b/0x80 [ 197.668368][ T7198] ? follow_page_pte+0x4d0/0x13f0 [ 197.668393][ T7198] handle_mm_fault+0x37b/0xa30 [ 197.668417][ T7198] __get_user_pages+0x1178/0x32a0 [ 197.668442][ T7198] ? __pfx___get_user_pages+0x10/0x10 [ 197.668464][ T7198] get_dump_page+0x27e/0x3d0 [ 197.668482][ T7198] ? __pfx_get_dump_page+0x10/0x10 [ 197.668499][ T7198] ? dump_user_range+0x65e/0xad0 [ 197.668518][ T7198] ? copy_mc_enhanced_fast_string+0x6/0xf [ 197.668537][ T7198] dump_user_range+0x18d/0xad0 [ 197.668560][ T7198] ? __pfx_dump_user_range+0x10/0x10 [ 197.668585][ T7198] ? __pfx_writenote+0x10/0x10 [ 197.668610][ T7198] elf_core_dump+0x2d5f/0x3d10 [ 197.668641][ T7198] ? __pfx_elf_core_dump+0x10/0x10 [ 197.668661][ T7198] ? kasan_save_stack+0x3f/0x50 [ 197.668674][ T7198] ? kasan_save_stack+0x30/0x50 [ 197.668687][ T7198] ? __kasan_kmalloc+0xaa/0xb0 [ 197.668699][ T7198] ? __kvmalloc_node_noprof+0x360/0xa00 [ 197.668713][ T7198] ? vfs_coredump+0x22db/0x5770 [ 197.668732][ T7198] ? asm_exc_page_fault+0x26/0x30 [ 197.668748][ T7198] ? 0xffffffffff600000 [ 197.668790][ T7198] ? vfs_coredump+0x2980/0x5770 [ 197.668807][ T7198] vfs_coredump+0x2980/0x5770 [ 197.668834][ T7198] ? __pfx_vfs_coredump+0x10/0x10 [ 197.668854][ T7198] ? __lock_acquire+0x4a5/0x2630 [ 197.668882][ T7198] ? lock_acquire+0x1b1/0x370 [ 197.668910][ T7198] ? is_bpf_text_address+0x8a/0x1a0 [ 197.668929][ T7198] ? bpf_ksym_find+0x124/0x1c0 [ 197.668947][ T7198] ? __kernel_text_address+0xd/0x30 [ 197.668961][ T7198] ? unwind_get_return_address+0x59/0xa0 [ 197.668980][ T7198] ? arch_stack_walk+0xa6/0xf0 [ 197.669003][ T7198] ? __sigqueue_free+0xbe/0x2a0 [ 197.669023][ T7198] ? stack_trace_save+0x8e/0xc0 [ 197.669041][ T7198] ? __pfx_stack_trace_save+0x10/0x10 [ 197.669059][ T7198] ? stack_depot_save_flags+0x27/0x9d0 [ 197.669081][ T7198] ? __lock_acquire+0x4a5/0x2630 [ 197.669132][ T7198] ? proc_coredump_connector+0x2d3/0x4f0 [ 197.669151][ T7198] ? __pfx_proc_coredump_connector+0x10/0x10 [ 197.669173][ T7198] ? rcu_is_watching+0x12/0xc0 [ 197.669192][ T7198] get_signal+0x2162/0x2210 [ 197.669216][ T7198] ? __pfx_get_signal+0x10/0x10 [ 197.669233][ T7198] ? __pfx_force_sig_fault+0x10/0x10 [ 197.669253][ T7198] arch_do_signal_or_restart+0x91/0x7a0 [ 197.669274][ T7198] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 197.669302][ T7198] ? rcu_is_watching+0x12/0xc0 [ 197.669319][ T7198] irqentry_exit+0x39e/0x970 [ 197.669341][ T7198] asm_exc_page_fault+0x26/0x30 [ 197.669354][ T7198] RIP: 0033:0x7efd5199ce59 [ 197.669371][ T7198] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 197.669377][ T7198] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 197.669393][ T7198] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 197.669402][ T7198] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 197.669411][ T7198] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 197.669419][ T7198] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.669427][ T7198] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 197.669439][ T7198] ? 0xffffffff81000000 [ 197.669456][ T7198] [ 198.235877][ T7198] memory: usage 307200kB, limit 307200kB, failcnt 40192 [ 198.242888][ T7198] memory+swap: usage 431852kB, limit 9007199254740988kB, failcnt 0 [ 198.251826][ T7198] kmem: usage 3672kB, limit 9007199254740988kB, failcnt 0 [ 198.258956][ T7198] Memory cgroup stats for /syz3: [ 198.259101][ T7198] cache 310673408 [ 198.267702][ T7198] rss 102400 [ 198.270881][ T7198] rss_huge 0 [ 198.274076][ T7198] shmem 310673408 [ 198.277693][ T7198] mapped_file 55828480 [ 198.281778][ T7198] dirty 0 [ 198.284742][ T7198] writeback 0 [ 198.288004][ T7198] workingset_refault_anon 831 [ 198.292730][ T7198] workingset_refault_file 226 [ 198.297388][ T7198] swap 127643648 [ 198.300925][ T7198] swapcached 203382784 [ 198.305031][ T7198] pgpgin 260787 [ 198.308474][ T7198] pgpgout 193469 [ 198.312000][ T7198] pgfault 105173 [ 198.315570][ T7198] pgmajfault 139 [ 198.319111][ T7198] inactive_anon 125317120 [ 198.323439][ T7198] active_anon 185458688 [ 198.328396][ T7198] inactive_file 0 [ 198.332009][ T7198] active_file 0 [ 198.335933][ T7198] unevictable 0 [ 198.339426][ T7198] hierarchical_memory_limit 314572800 [ 198.344788][ T7198] hierarchical_memsw_limit 9223372036854771712 [ 198.350965][ T7198] total_cache 310673408 [ 198.355136][ T7198] total_rss 102400 [ 198.358829][ T7198] total_rss_huge 0 [ 198.362577][ T7198] total_shmem 310673408 [ 198.366724][ T7198] total_mapped_file 55828480 [ 198.371286][ T7198] total_dirty 0 [ 198.374780][ T7198] total_writeback 0 [ 198.378604][ T7198] total_workingset_refault_anon 831 [ 198.383831][ T7198] total_workingset_refault_file 226 [ 198.389079][ T7198] total_swap 127643648 [ 198.393184][ T7198] total_swapcached 203382784 [ 198.397754][ T7198] total_pgpgin 260787 [ 198.401787][ T7198] total_pgpgout 193469 [ 198.405870][ T7198] total_pgfault 105173 [ 198.409913][ T7198] total_pgmajfault 139 [ 198.414012][ T7198] total_inactive_anon 125317120 [ 198.418856][ T7198] total_active_anon 185458688 [ 198.423530][ T7198] total_inactive_file 0 [ 198.428495][ T7198] total_active_file 0 [ 198.432959][ T7198] total_unevictable 0 [ 198.436921][ T7198] anon_cost 0 [ 198.440245][ T7198] file_cost 0 [ 198.443553][ T7198] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.263,pid=7206,uid=0 [ 198.459298][ T7198] Memory cgroup out of memory: Killed process 7206 (syz.3.263) total-vm:65668kB, anon-rss:0kB, file-rss:0kB, shmem-rss:36672kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 199.261512][ T7748] i2c i2c-0: delete_device: Can't find device in list [ 199.380744][ T7746] NFSD: Failed to start, no listeners configured. [ 199.532993][ T7721] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 199.542762][ T4947] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.637175][ T7721] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.665626][ T7721] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.694115][ T7721] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.841452][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 200.207407][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 200.236049][ T7758] netlink: 'syz.0.369': attribute type 3 has an invalid length. [ 200.970426][ T7766] futex_wake_op: syz.2.372 tries to shift op by -2048; fix this program [ 201.020814][ T7766] futex_wake_op: syz.2.372 tries to shift op by -2048; fix this program [ 201.064907][ T7766] 0x000000000001-0x000000020000 : "" [ 201.157741][ T7766] ftl_cs: FTL header corrupt! [ 201.483845][ T7219] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 201.614777][ T5644] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.620854][ T4947] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.692532][ T5644] Bluetooth: hci0: command 0x2016 tx timeout [ 201.772711][ T5644] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.803523][ T7219] CPU: 0 UID: 0 PID: 7219 Comm: syz.3.263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 201.803549][ T7219] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 201.803554][ T7219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.803563][ T7219] Call Trace: [ 201.803568][ T7219] [ 201.803573][ T7219] dump_stack_lvl+0x100/0x190 [ 201.803601][ T7219] dump_header+0xfb/0x606 [ 201.803617][ T7219] oom_kill_process.cold+0xd/0x330 [ 201.803635][ T7219] out_of_memory+0x340/0x14f0 [ 201.803661][ T7219] ? __pfx_out_of_memory+0x10/0x10 [ 201.803687][ T7219] mem_cgroup_out_of_memory+0xc6/0x130 [ 201.803708][ T7219] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 201.803727][ T7219] ? find_held_lock+0x2b/0x80 [ 201.803748][ T7219] ? do_raw_spin_unlock+0x145/0x1e0 [ 201.803763][ T7219] ? _raw_spin_unlock+0x28/0x50 [ 201.803782][ T7219] try_charge_memcg+0x6e5/0xdf0 [ 201.803803][ T7219] ? __pfx_try_charge_memcg+0x10/0x10 [ 201.803818][ T7219] ? find_held_lock+0x2b/0x80 [ 201.803834][ T7219] ? rcu_read_unlock+0x17/0x60 [ 201.803850][ T7219] ? rcu_read_unlock+0x17/0x60 [ 201.803867][ T7219] ? find_held_lock+0x2b/0x80 [ 201.803884][ T7219] ? rcu_read_unlock+0x17/0x60 [ 201.803905][ T7219] charge_memcg+0x19f/0x210 [ 201.803924][ T7219] __mem_cgroup_charge+0x2b/0x1c0 [ 201.803943][ T7219] shmem_alloc_and_add_folio+0x451/0xd40 [ 201.803971][ T7219] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 201.803994][ T7219] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 201.804018][ T7219] shmem_get_folio_gfp+0x6ab/0x1900 [ 201.804037][ T7219] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 201.804052][ T7219] ? timestamp_truncate+0x22e/0x2f0 [ 201.804073][ T7219] shmem_write_begin+0x1a4/0x420 [ 201.804089][ T7219] ? __pfx_shmem_write_begin+0x10/0x10 [ 201.804102][ T7219] ? rcu_is_watching+0x12/0xc0 [ 201.804118][ T7219] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 201.804139][ T7219] generic_perform_write+0x292/0xa40 [ 201.804167][ T7219] ? __pfx_generic_perform_write+0x10/0x10 [ 201.804184][ T7219] ? __mark_inode_dirty+0x55c/0x1720 [ 201.804200][ T7219] ? mnt_put_write_access_file+0x4e/0x100 [ 201.804217][ T7219] ? file_update_time_flags+0x373/0x500 [ 201.804238][ T7219] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 201.804255][ T7219] shmem_file_write_iter+0x10e/0x140 [ 201.804272][ T7219] __kernel_write_iter+0x2ac/0x920 [ 201.804290][ T7219] ? __pfx___kernel_write_iter+0x10/0x10 [ 201.804306][ T7219] ? __up_read+0x2c1/0x6e0 [ 201.804322][ T7219] ? dump_user_range+0x65e/0xad0 [ 201.804346][ T7219] dump_user_range+0x3f9/0xad0 [ 201.804369][ T7219] ? __pfx_dump_user_range+0x10/0x10 [ 201.804394][ T7219] ? __pfx_writenote+0x10/0x10 [ 201.804418][ T7219] elf_core_dump+0x2d5f/0x3d10 [ 201.804449][ T7219] ? __pfx_elf_core_dump+0x10/0x10 [ 201.804469][ T7219] ? kasan_save_stack+0x3f/0x50 [ 201.804482][ T7219] ? kasan_save_stack+0x30/0x50 [ 201.804495][ T7219] ? __kasan_kmalloc+0xaa/0xb0 [ 201.804507][ T7219] ? __kvmalloc_node_noprof+0x360/0xa00 [ 201.804520][ T7219] ? vfs_coredump+0x22db/0x5770 [ 201.804538][ T7219] ? asm_exc_page_fault+0x26/0x30 [ 201.804554][ T7219] ? 0xffffffffff600000 [ 201.804597][ T7219] ? vfs_coredump+0x2980/0x5770 [ 201.804614][ T7219] vfs_coredump+0x2980/0x5770 [ 201.804640][ T7219] ? __pfx_vfs_coredump+0x10/0x10 [ 201.804660][ T7219] ? __lock_acquire+0x4a5/0x2630 [ 201.804688][ T7219] ? lock_acquire+0x1b1/0x370 [ 201.804716][ T7219] ? is_bpf_text_address+0x8a/0x1a0 [ 201.804734][ T7219] ? bpf_ksym_find+0x124/0x1c0 [ 201.804752][ T7219] ? __kernel_text_address+0xd/0x30 [ 201.804766][ T7219] ? unwind_get_return_address+0x59/0xa0 [ 201.804783][ T7219] ? arch_stack_walk+0xa6/0xf0 [ 201.804806][ T7219] ? __sigqueue_free+0xbe/0x2a0 [ 201.804826][ T7219] ? stack_trace_save+0x8e/0xc0 [ 201.804843][ T7219] ? __pfx_stack_trace_save+0x10/0x10 [ 201.804861][ T7219] ? stack_depot_save_flags+0x27/0x9d0 [ 201.804882][ T7219] ? __lock_acquire+0x4a5/0x2630 [ 201.804934][ T7219] ? proc_coredump_connector+0x2d3/0x4f0 [ 201.804953][ T7219] ? __pfx_proc_coredump_connector+0x10/0x10 [ 201.804974][ T7219] ? rcu_is_watching+0x12/0xc0 [ 201.804993][ T7219] get_signal+0x2162/0x2210 [ 201.805022][ T7219] ? __pfx_get_signal+0x10/0x10 [ 201.805038][ T7219] ? __pfx_force_sig_fault+0x10/0x10 [ 201.805059][ T7219] arch_do_signal_or_restart+0x91/0x7a0 [ 201.805080][ T7219] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 201.805107][ T7219] ? rcu_is_watching+0x12/0xc0 [ 201.805125][ T7219] irqentry_exit+0x39e/0x970 [ 201.805147][ T7219] asm_exc_page_fault+0x26/0x30 [ 201.805160][ T7219] RIP: 0033:0x7efd5199ce59 [ 201.805176][ T7219] Code: Unable to access opcode bytes at 0x7efd5199ce2f. [ 201.805182][ T7219] RSP: 002b:0000000080000007 EFLAGS: 00010246 [ 201.805194][ T7219] RAX: 0000000000000000 RBX: 00007efd51c15fa0 RCX: 00007efd5199ce59 [ 201.805203][ T7219] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 201.805212][ T7219] RBP: 00007efd51a32d6f R08: 0000000000000006 R09: 0000000000000000 [ 201.805220][ T7219] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.805228][ T7219] R13: 00007efd51c16038 R14: 00007efd51c15fa0 R15: 00007ffe136c3048 [ 201.805240][ T7219] ? 0xffffffff81000000 [ 201.805257][ T7219] [ 201.842389][ T7219] memory: usage 307200kB, limit 307200kB, failcnt 42797 [ 201.842448][ T7219] memory+swap: usage 432036kB, limit 9007199254740988kB, failcnt 0 [ 201.842736][ T7219] kmem: usage 3984kB, limit 9007199254740988kB, failcnt 0 [ 201.842747][ T7219] Memory cgroup stats for /syz3: [ 201.842882][ T7219] cache 309166080 [ 201.842890][ T7219] rss 1327104 [ 201.842895][ T7219] rss_huge 0 [ 201.842901][ T7219] shmem 308477952 [ 201.842906][ T7219] mapped_file 42303488 [ 201.842912][ T7219] dirty 0 [ 201.842918][ T7219] writeback 0 [ 201.842923][ T7219] workingset_refault_anon 831 [ 201.842929][ T7219] workingset_refault_file 226 [ 201.842935][ T7219] swap 127832064 [ 201.842941][ T7219] swapcached 211849216 [ 201.842947][ T7219] pgpgin 272487 [ 201.842957][ T7219] pgpgout 205425 [ 201.842962][ T7219] pgfault 106716 [ 201.842968][ T7219] pgmajfault 139 [ 201.842977][ T7219] inactive_anon 185802752 [ 201.842984][ T7219] active_anon 124002304 [ 201.842990][ T7219] inactive_file 385024 [ 201.843002][ T7219] active_file 0 [ 201.843007][ T7219] unevictable 0 [ 201.843013][ T7219] hierarchical_memory_limit 314572800 [ 201.843020][ T7219] hierarchical_memsw_limit 9223372036854771712 [ 201.843026][ T7219] total_cache 309166080 [ 201.843032][ T7219] total_rss 1327104 [ 201.843038][ T7219] total_rss_huge 0 [ 201.843043][ T7219] total_shmem 308477952 [ 201.843049][ T7219] total_mapped_file 42303488 [ 201.843055][ T7219] total_dirty 0 [ 201.843061][ T7219] total_writeback 0 [ 201.843067][ T7219] total_workingset_refault_anon 831 [ 201.843073][ T7219] total_workingset_refault_file 226 [ 201.843753][ T7219] total_swap 127832064 [ 201.843761][ T7219] total_swapcached 211849216 [ 201.843767][ T7219] total_pgpgin 272487 [ 201.843773][ T7219] total_pgpgout 205425 [ 201.843779][ T7219] total_pgfault 106716 [ 201.843784][ T7219] total_pgmajfault 139 [ 201.843791][ T7219] total_inactive_anon 185802752 [ 201.843797][ T7219] total_active_anon 124002304 [ 201.843803][ T7219] total_inactive_file 385024 [ 201.843809][ T7219] total_active_file 0 [ 201.843815][ T7219] total_unevictable 0 [ 201.843821][ T7219] anon_cost 0 [ 201.843826][ T7219] file_cost 0 [ 201.843832][ T7219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.363,pid=7724,uid=0 [ 201.843948][ T7219] Memory cgroup out of memory: Killed process 7733 (syz.3.363) total-vm:132084kB, anon-rss:2508kB, file-rss:21528kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 203.869316][ T32] oom_reaper: reaped process 7733 (syz.3.363), now anon-rss:0kB, file-rss:20496kB, shmem-rss:0kB [ 203.893220][ T7786] FAULT_INJECTION: forcing a failure. [ 203.893220][ T7786] name failslab, interval 1, probability 0, space 0, times 0 [ 203.912997][ T7198] syz.3.263 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 203.926757][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.0.375 Tainted: G U L syzkaller #0 PREEMPT(full) [ 203.926783][ T7786] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 203.926790][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.926800][ T7786] Call Trace: [ 203.926806][ T7786] [ 203.926812][ T7786] dump_stack_lvl+0x100/0x190 [ 203.926845][ T7786] should_fail_ex.cold+0x5/0xa [ 203.926865][ T7786] ? tracepoint_add_func+0x3a8/0x1150 [ 203.926885][ T7786] should_failslab+0xc2/0x120 [ 203.926903][ T7786] __kmalloc_noprof+0xe0/0x850 [ 203.926933][ T7786] ? __pfx_blk_add_trace_bio_frontmerge+0x10/0x10 [ 203.926953][ T7786] tracepoint_add_func+0x3a8/0x1150 [ 203.926972][ T7786] ? __pfx_blk_add_trace_bio_frontmerge+0x10/0x10 [ 203.926995][ T7786] ? __pfx_blk_add_trace_bio_frontmerge+0x10/0x10 [ 203.927014][ T7786] tracepoint_probe_register+0xc4/0x110 [ 203.927036][ T7786] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 203.927057][ T7786] ? __pfx_blk_add_trace_bio_frontmerge+0x10/0x10 [ 203.927077][ T7786] ? relay_open+0x793/0xa00 [ 203.927097][ T7786] blk_register_tracepoints+0x156/0x440 [ 203.927111][ T7786] blk_trace_setup_finalize+0x320/0x3a0 [ 203.927128][ T7786] blk_trace_setup+0x254/0x440 [ 203.927148][ T7786] ? __pfx_blk_trace_setup+0x10/0x10 [ 203.927163][ T7786] ? lockdep_hardirqs_on+0x36/0x100 [ 203.927188][ T7786] ? __pfx_vsnprintf+0x10/0x10 [ 203.927218][ T7786] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.927239][ T7786] ? do_vfs_ioctl+0x226/0x13e0 [ 203.927256][ T7786] blk_trace_ioctl+0x245/0x320 [ 203.927275][ T7786] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 203.927295][ T7786] ? find_held_lock+0x2b/0x80 [ 203.927312][ T7786] ? __fget_files+0x215/0x3d0 [ 203.927328][ T7786] ? hook_file_ioctl_common+0x149/0x410 [ 203.927348][ T7786] blkdev_ioctl+0x17c/0x6f0 [ 203.927370][ T7786] ? __pfx_blkdev_ioctl+0x10/0x10 [ 203.927395][ T7786] ? __pfx_blkdev_ioctl+0x10/0x10 [ 203.927418][ T7786] __x64_sys_ioctl+0x18e/0x210 [ 203.927435][ T7786] do_syscall_64+0x115/0x840 [ 203.927454][ T7786] ? clear_bhb_loop+0x40/0x90 [ 203.927472][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.927487][ T7786] RIP: 0033:0x7fb860d9ce59 [ 203.927500][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.927519][ T7786] RSP: 002b:00007fb861c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.927534][ T7786] RAX: ffffffffffffffda RBX: 00007fb861016090 RCX: 00007fb860d9ce59 [ 203.927544][ T7786] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 203.927553][ T7786] RBP: 00007fb860e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 203.927562][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.927570][ T7786] R13: 00007fb861016128 R14: 00007fb861016090 R15: 00007ffdc827e708 [ 203.927591][ T7786] [ 203.927767][ T7786] ------------[ cut here ]------------ [ 204.218218][ T7786] ret [ 204.218228][ T7786] WARNING: kernel/trace/blktrace.c:1346 at blk_register_tracepoints+0x39e/0x440, CPU#0: syz.0.375/7786 [ 204.231845][ T7786] Modules linked in: [ 204.236843][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.0.375 Tainted: G U L syzkaller #0 PREEMPT(full) [ 204.247654][ T7786] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 204.253067][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.263149][ T7786] RIP: 0010:blk_register_tracepoints+0x39e/0x440 [ 204.270156][ T7786] Code: 0f 0b 90 e9 66 fd ff ff e8 4f 99 f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 41 99 f7 ff 90 0f 0b 90 e9 a4 fd ff ff e8 33 99 f7 ff 90 <0f> 0b 90 e9 c3 fd ff ff e8 25 99 f7 ff 90 0f 0b 90 e9 e2 fd ff ff [ 204.290299][ T7786] RSP: 0018:ffffc90005a37af8 EFLAGS: 00010287 [ 204.296526][ T7786] RAX: 000000000004a06f RBX: 00000000fffffff4 RCX: ffffc90007031000 [ 204.304524][ T7786] RDX: 0000000000080000 RSI: ffffffff821063ad RDI: ffff8880446f3e00 [ 204.312499][ T7786] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 204.320467][ T7786] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 204.328482][ T7786] R13: ffff888027982540 R14: ffffc90005a37d98 R15: 0000000000000001 [ 204.336521][ T7786] FS: 00007fb861c1c6c0(0000) GS:ffff88812438e000(0000) knlGS:0000000000000000 [ 204.345739][ T7786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.352346][ T7786] CR2: 00007fb860dea540 CR3: 0000000079e20000 CR4: 00000000003526f0 [ 204.360362][ T7786] Call Trace: [ 204.363659][ T7786] [ 204.367282][ T7786] blk_trace_setup_finalize+0x320/0x3a0 [ 204.373256][ T7786] blk_trace_setup+0x254/0x440 [ 204.378017][ T7786] ? __pfx_blk_trace_setup+0x10/0x10 [ 204.383353][ T7786] ? lockdep_hardirqs_on+0x36/0x100 [ 204.388553][ T7786] ? __pfx_vsnprintf+0x10/0x10 [ 204.393356][ T7786] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.399258][ T7786] ? do_vfs_ioctl+0x226/0x13e0 [ 204.404041][ T7786] blk_trace_ioctl+0x245/0x320 [ 204.408796][ T7786] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 204.416815][ T7786] ? find_held_lock+0x2b/0x80 [ 204.421500][ T7786] ? __fget_files+0x215/0x3d0 [ 204.427438][ T7786] ? hook_file_ioctl_common+0x149/0x410 [ 204.433041][ T7786] blkdev_ioctl+0x17c/0x6f0 [ 204.437541][ T7786] ? __pfx_blkdev_ioctl+0x10/0x10 [ 204.442598][ T7786] ? __pfx_blkdev_ioctl+0x10/0x10 [ 204.447623][ T7786] __x64_sys_ioctl+0x18e/0x210 [ 204.452390][ T7786] do_syscall_64+0x115/0x840 [ 204.456995][ T7786] ? clear_bhb_loop+0x40/0x90 [ 204.461663][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.467588][ T7786] RIP: 0033:0x7fb860d9ce59 [ 204.472770][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.492890][ T7786] RSP: 002b:00007fb861c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.501335][ T7786] RAX: ffffffffffffffda RBX: 00007fb861016090 RCX: 00007fb860d9ce59 [ 204.509336][ T7786] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 204.517334][ T7786] RBP: 00007fb860e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 204.525325][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.533318][ T7786] R13: 00007fb861016128 R14: 00007fb861016090 R15: 00007ffdc827e708 [ 204.541290][ T7786] [ 204.544319][ T7786] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.551583][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.0.375 Tainted: G U L syzkaller #0 PREEMPT(full) [ 204.562336][ T7786] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 204.567515][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.577551][ T7786] Call Trace: [ 204.580811][ T7786] [ 204.583725][ T7786] dump_stack_lvl+0x100/0x190 [ 204.588398][ T7786] vpanic+0x552/0x970 [ 204.592368][ T7786] ? __pfx_vpanic+0x10/0x10 [ 204.596858][ T7786] panic+0xd1/0xe0 [ 204.600558][ T7786] ? __pfx_panic+0x10/0x10 [ 204.604969][ T7786] check_panic_on_warn.cold+0x19/0x34 [ 204.610325][ T7786] ? blk_register_tracepoints+0x39e/0x440 [ 204.616030][ T7786] __warn.cold+0x191/0x328 [ 204.620431][ T7786] __report_bug+0x296/0x3d0 [ 204.624929][ T7786] ? blk_register_tracepoints+0x39e/0x440 [ 204.630631][ T7786] ? __pfx___report_bug+0x10/0x10 [ 204.635643][ T7786] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 204.641263][ T7786] ? __kmalloc_noprof+0x320/0x850 [ 204.646277][ T7786] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.652246][ T7786] ? blk_register_tracepoints+0x39e/0x440 [ 204.657947][ T7786] report_bug+0xb2/0x220 [ 204.662174][ T7786] ? blk_register_tracepoints+0x39e/0x440 [ 204.667875][ T7786] handle_bug+0x16a/0x2a0 [ 204.672197][ T7786] exc_invalid_op+0x17/0x50 [ 204.676681][ T7786] asm_exc_invalid_op+0x1a/0x20 [ 204.681512][ T7786] RIP: 0010:blk_register_tracepoints+0x39e/0x440 [ 204.687821][ T7786] Code: 0f 0b 90 e9 66 fd ff ff e8 4f 99 f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 41 99 f7 ff 90 0f 0b 90 e9 a4 fd ff ff e8 33 99 f7 ff 90 <0f> 0b 90 e9 c3 fd ff ff e8 25 99 f7 ff 90 0f 0b 90 e9 e2 fd ff ff [ 204.707410][ T7786] RSP: 0018:ffffc90005a37af8 EFLAGS: 00010287 [ 204.713459][ T7786] RAX: 000000000004a06f RBX: 00000000fffffff4 RCX: ffffc90007031000 [ 204.721411][ T7786] RDX: 0000000000080000 RSI: ffffffff821063ad RDI: ffff8880446f3e00 [ 204.729360][ T7786] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 204.737307][ T7786] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 204.745256][ T7786] R13: ffff888027982540 R14: ffffc90005a37d98 R15: 0000000000000001 [ 204.753214][ T7786] ? blk_register_tracepoints+0x39d/0x440 [ 204.758921][ T7786] ? blk_register_tracepoints+0x39d/0x440 [ 204.764624][ T7786] blk_trace_setup_finalize+0x320/0x3a0 [ 204.770150][ T7786] blk_trace_setup+0x254/0x440 [ 204.774899][ T7786] ? __pfx_blk_trace_setup+0x10/0x10 [ 204.780166][ T7786] ? lockdep_hardirqs_on+0x36/0x100 [ 204.785361][ T7786] ? __pfx_vsnprintf+0x10/0x10 [ 204.790129][ T7786] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.796014][ T7786] ? do_vfs_ioctl+0x226/0x13e0 [ 204.800762][ T7786] blk_trace_ioctl+0x245/0x320 [ 204.805513][ T7786] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 204.810785][ T7786] ? find_held_lock+0x2b/0x80 [ 204.815447][ T7786] ? __fget_files+0x215/0x3d0 [ 204.820106][ T7786] ? hook_file_ioctl_common+0x149/0x410 [ 204.825645][ T7786] blkdev_ioctl+0x17c/0x6f0 [ 204.830138][ T7786] ? __pfx_blkdev_ioctl+0x10/0x10 [ 204.835151][ T7786] ? __pfx_blkdev_ioctl+0x10/0x10 [ 204.840164][ T7786] __x64_sys_ioctl+0x18e/0x210 [ 204.844909][ T7786] do_syscall_64+0x115/0x840 [ 204.849487][ T7786] ? clear_bhb_loop+0x40/0x90 [ 204.854148][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.860022][ T7786] RIP: 0033:0x7fb860d9ce59 [ 204.864422][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.884010][ T7786] RSP: 002b:00007fb861c1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.892403][ T7786] RAX: ffffffffffffffda RBX: 00007fb861016090 RCX: 00007fb860d9ce59 [ 204.900371][ T7786] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 204.908337][ T7786] RBP: 00007fb860e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 204.916287][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.924237][ T7786] R13: 00007fb861016128 R14: 00007fb861016090 R15: 00007ffdc827e708 [ 204.932200][ T7786] [ 204.935284][ T7786] Kernel Offset: disabled [ 204.939593][ T7786] Rebooting in 86400 seconds..