last executing test programs: 7.774615596s ago: executing program 1 (id=1444): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) socket(0x18, 0x80004, 0x1) socket(0x2, 0x2, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r6, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r7, 0x80) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d05, 0x10, 0x1}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 5.796756302s ago: executing program 2 (id=1451): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) getcwd$auto(&(0x7f0000000000)='\x00', 0xc0000000000000) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0xa000000, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x108, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x17, 0x13, "13c366f9244357d432f6e44cc4bf4e5878fe5d"}, @NL80211_ATTR_WIPHY_NAME={0x8, 0x2, '/${\x00'}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x45, 0x1f, "ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e9"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5c, 0x75, 0x0, 0x1, [@generic="ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b", @typed={0x8, 0x138, 0x0, 0x0, @u32=0x400}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193) 5.773750811s ago: executing program 1 (id=1452): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x501802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)}) 5.569997881s ago: executing program 1 (id=1453): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x17) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) socket(0x18, 0x80004, 0x1) socket(0x2, 0x2, 0xa) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0[.[\x00', 0xcd04) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r6, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01b43b7bdd4a004eda5c46a00027bd7000fbdbdf25040000009e229ffb5e1117a25564d22f1dfc6f9a31b05ef74dab9e4e31ce70522aac6b4efe75"], 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r7, 0x80) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x4b564d05, 0x10, 0x1}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 4.525877205s ago: executing program 0 (id=1457): setresuid$auto(0x0, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x41) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x25, 0x800007, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x3, 0x0) (async) sysfs$auto(0x2, 0x3, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) msgrcv$auto(0x3, &(0x7f00000000c0)={0x3, 0x4}, 0x4, 0x8, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) (async) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r2) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000001c0)={0x668, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xfffffffb}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @u32=0x1}]}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7ae}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x628, 0x19, 0x0, 0x1, [@generic="abb751703bac2801cb8555cd79daa14db0a3bb36d18716ff2694264a0ce956c93802a042d26ae8cdeaa31c16fe4d4f9ee69a52ab93a5c1aba37f14cab329f0555f516e9d91cb0934388ba41cbbd15b761ea459d5302c3c9d20cbfb06596dedf899ba0155128bd78f84242f3d9bc18eb974a8cfaccf20b265351c242f81e827cc1d3ca6d156045c6e5ace6a800e57ea7030753696c28116085ac3eed9a7612171348a8e2a2b1045cb6ddb5ad355065bedcd33f4800c1c2da76603e7d483d0d7f3bfe809a046bfd6d0caa9cdd2d58aec022636a03e9d56927d5ebfd75359e33911fa21e72b48ea6b504f4d69e1", @nested={0x52c, 0x57, 0x0, 0x1, [@generic="82d1f63ace491b3e186e1b7ab039a3eede5e1d024b4e39c1d482dbce5cc8bedf0f336ee7365b65d505a70c372890abdd74ff8866263de6da492b0bdb28352c3ad79dcac6ce39025e9b93f6d3cc69c36ea02c86bbfcd8462063af3009e494103879a0672488bbc00cfedbbeb905c930884491f1a917d3cc2415701b56c6d9bc78a87ea44baddbae2eaa738fc963cd5dc4776f62e56c5250d0ed497e4a096d9c6dd163774466ccc13f2462cd55432f177122151d404b4ba3c726d5023a649f33078e835aa7dc5cc216f3c7b4618f229d7e32b75277476f529e662f21281788f443dc6163e48293348669c0bf008dfb0908d17db625e3a525967efa", @generic="e0986978fdcac479fa4f732bb8f28088f730ab5c1de2d5e246f528b8622d17a58b141b09f8119f337403404bd999f55d6f282e5525ce3dd91e68381138c4c6130fed6f73651af6cf75b6054b112f8220624461ac2ebb70c45c9140e72a56526ce704a69d1ca1ed58e984fd72d4eadc31e55f958e461a41c6d66c64c734ad45d004efc4af8f9eda00e10ccfc45843853f93c35f94be7df29a4bc248815606348a0e70dcd841228cd6c1b1a13f8adb49543ea52712ee1e499fdceb6698fa92f991e150e26d296e8b2e43e45ec97ce88d12f4235836cc1f1c", @typed={0x8, 0xf6, 0x0, 0x0, @pid}, @generic="443885258586e2c2ad5c70bacef3c4a9bc008240169555ccf6aa24184654d9af25a9258f8ca34e73c34b52d11f66c78268acc50fad305e339331a0b3add606dd3158a8edee7556bde8dbcd9b8c359a39e08976ef87dbcee805a87fb277ea1889203c80ae32645e3ad855ced41d324b939db840ee221c5cc632a2698abadf9baaae02a5078c0fd5e304bb1fed3b92aa", @typed={0xcc, 0x134, 0x0, 0x0, @binary="fc2e509c2cab710cd46cd5d57be264c437f5c417e6bb55fad0336bbb6bcd9afd5e854b2c9daa5edc782ad39e4e7d10095ffc1e641ce115506f94c0dd64761fc87912a60560e9e94257b398c3c16a95745fd2865ffa67facee4d3ae67ce6dcbd7db17ccf7e4c47add7469faa271b8cf280547a58defe57ad9c3838f9221f3b42525a1d6879032e90b8a55c5702e0778e114eb6f63ea1c008527e48a2fbfaadcf71ef32f2ee17cbb4a1c0d54314aaf90eae5a9e82300746d0d5381c075e2b8331f4cbf4f2fc0bb04f9"}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="6da6764c9038c8e652c8b9e315784cd0af07530cdc1a4a93a12bdedb165a52613ed2f532194200b7cd1d1b959739076f0464bca9d09b80e5c2ea55cadf2ec539cdec07672a5354ceffcc7ac9b8cf49a8bdde918832cb96bba3f51a2dab4c5507e91953e93b4bc5a53dfa0466e3bad97c71c4b11eef9c839cb2861924123ad2676bc92c53116a12422a2e018a54cdb218b92c46d1e4a9f408134e91104a921d673f912405b50dd7cd384905a2436f41b372f6cbe39e84e7a7c11175a1509f19b34848e57d6eb5f67e5218e0a8173a", @generic="4c625be1f12249890352f3232048fcaf8fb9a59379074658a4668f8f078e42f46978047ce1a19a405dda4b8ad414b7314ca641a82f0ffbdc3e91228a7539ae96f00e23129fe6f944865beb84c82522d68d39acb5c908bfe95f13baa9b1e687fc78b27fa908cadb85b623c31449b1f2888d85f92a7ecde443fdc3ab98b34cf7856189c0a71875712bc6ff1d3342892944688d942d3a57a69186fad64d9888e7b24299a18c82efb56bacc2009434560527e3d0858bc572ff7e174b5119d652b923c0c4fc867d257d10c52b600fa0f950c21708bffbb84743862458f00d69f63a4955e1939975eb3c4458127fb5ea74a19d5c3822973747a8115685d474d6fe", @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x8}, @typed={0x7, 0x3f, 0x0, 0x0, @str='#-\x00'}]}, @generic="ca8b31658e1e75dd75035a42"]}]}, 0x668}, 0x1, 0x0, 0x0, 0x4c880}, 0x4000050) (async) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f00000001c0)={0x668, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0xfffffffb}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @u32=0x1}]}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x7ae}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x628, 0x19, 0x0, 0x1, [@generic="abb751703bac2801cb8555cd79daa14db0a3bb36d18716ff2694264a0ce956c93802a042d26ae8cdeaa31c16fe4d4f9ee69a52ab93a5c1aba37f14cab329f0555f516e9d91cb0934388ba41cbbd15b761ea459d5302c3c9d20cbfb06596dedf899ba0155128bd78f84242f3d9bc18eb974a8cfaccf20b265351c242f81e827cc1d3ca6d156045c6e5ace6a800e57ea7030753696c28116085ac3eed9a7612171348a8e2a2b1045cb6ddb5ad355065bedcd33f4800c1c2da76603e7d483d0d7f3bfe809a046bfd6d0caa9cdd2d58aec022636a03e9d56927d5ebfd75359e33911fa21e72b48ea6b504f4d69e1", @nested={0x52c, 0x57, 0x0, 0x1, [@generic="82d1f63ace491b3e186e1b7ab039a3eede5e1d024b4e39c1d482dbce5cc8bedf0f336ee7365b65d505a70c372890abdd74ff8866263de6da492b0bdb28352c3ad79dcac6ce39025e9b93f6d3cc69c36ea02c86bbfcd8462063af3009e494103879a0672488bbc00cfedbbeb905c930884491f1a917d3cc2415701b56c6d9bc78a87ea44baddbae2eaa738fc963cd5dc4776f62e56c5250d0ed497e4a096d9c6dd163774466ccc13f2462cd55432f177122151d404b4ba3c726d5023a649f33078e835aa7dc5cc216f3c7b4618f229d7e32b75277476f529e662f21281788f443dc6163e48293348669c0bf008dfb0908d17db625e3a525967efa", @generic="e0986978fdcac479fa4f732bb8f28088f730ab5c1de2d5e246f528b8622d17a58b141b09f8119f337403404bd999f55d6f282e5525ce3dd91e68381138c4c6130fed6f73651af6cf75b6054b112f8220624461ac2ebb70c45c9140e72a56526ce704a69d1ca1ed58e984fd72d4eadc31e55f958e461a41c6d66c64c734ad45d004efc4af8f9eda00e10ccfc45843853f93c35f94be7df29a4bc248815606348a0e70dcd841228cd6c1b1a13f8adb49543ea52712ee1e499fdceb6698fa92f991e150e26d296e8b2e43e45ec97ce88d12f4235836cc1f1c", @typed={0x8, 0xf6, 0x0, 0x0, @pid}, @generic="443885258586e2c2ad5c70bacef3c4a9bc008240169555ccf6aa24184654d9af25a9258f8ca34e73c34b52d11f66c78268acc50fad305e339331a0b3add606dd3158a8edee7556bde8dbcd9b8c359a39e08976ef87dbcee805a87fb277ea1889203c80ae32645e3ad855ced41d324b939db840ee221c5cc632a2698abadf9baaae02a5078c0fd5e304bb1fed3b92aa", @typed={0xcc, 0x134, 0x0, 0x0, @binary="fc2e509c2cab710cd46cd5d57be264c437f5c417e6bb55fad0336bbb6bcd9afd5e854b2c9daa5edc782ad39e4e7d10095ffc1e641ce115506f94c0dd64761fc87912a60560e9e94257b398c3c16a95745fd2865ffa67facee4d3ae67ce6dcbd7db17ccf7e4c47add7469faa271b8cf280547a58defe57ad9c3838f9221f3b42525a1d6879032e90b8a55c5702e0778e114eb6f63ea1c008527e48a2fbfaadcf71ef32f2ee17cbb4a1c0d54314aaf90eae5a9e82300746d0d5381c075e2b8331f4cbf4f2fc0bb04f9"}, @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="6da6764c9038c8e652c8b9e315784cd0af07530cdc1a4a93a12bdedb165a52613ed2f532194200b7cd1d1b959739076f0464bca9d09b80e5c2ea55cadf2ec539cdec07672a5354ceffcc7ac9b8cf49a8bdde918832cb96bba3f51a2dab4c5507e91953e93b4bc5a53dfa0466e3bad97c71c4b11eef9c839cb2861924123ad2676bc92c53116a12422a2e018a54cdb218b92c46d1e4a9f408134e91104a921d673f912405b50dd7cd384905a2436f41b372f6cbe39e84e7a7c11175a1509f19b34848e57d6eb5f67e5218e0a8173a", @generic="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", @typed={0xc, 0xfa, 0x0, 0x0, @u64=0x8}, @typed={0x7, 0x3f, 0x0, 0x0, @str='#-\x00'}]}, @generic="ca8b31658e1e75dd75035a42"]}]}, 0x668}, 0x1, 0x0, 0x0, 0x4c880}, 0x4000050) 4.062011528s ago: executing program 0 (id=1460): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r1, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.852062888s ago: executing program 0 (id=1462): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b41", 0x7) (async) read$auto(r0, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r3 = socket(0x25, 0x1, 0x5) recvfrom$auto(r3, 0x0, 0x0, 0x40, 0x0, 0x0) (async) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) (async) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) (async) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x64c4, 0xffffffffffffffff) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) (async) sysfs$auto(0x2, 0x4d, 0x7fffffffff) futex$auto(0xfffffffffffffffe, 0xb, 0x47, 0x0, 0x0, 0x2) io_uring_setup$auto(0x1, 0x0) (async) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x1, 0x0, 0x8004) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r6, r6, 0x0, 0x7ffff000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 3.821275825s ago: executing program 1 (id=1463): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x10d801, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_setup$auto(0x1, 0x0) (async) io_setup$auto(0x1, 0x0) set_mempolicy_home_node$auto(0xb67, 0x7, 0x9, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) 2.773644654s ago: executing program 3 (id=1465): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0xe0}, 0x55) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="130026bd7000fddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="08006900ff030000"], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYRESOCT=r7, @ANYRES32=r7, @ANYRES64=r6, @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x1880) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)={0x1ac, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000000}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4a3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10001}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r8 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) newfstatat$auto(r8, 0x0, 0x0, 0xfffff29f) r9 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) write$auto(r9, 0x0, 0x2000fdef) 2.632874006s ago: executing program 2 (id=1466): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) (async, rerun: 64) landlock_restrict_self$auto(r1, 0x0) (async, rerun: 64) getcwd$auto(0x0, 0xffffffffffffffff) (async, rerun: 64) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) sendfile$auto(r0, r0, 0x0, 0xb2d) 2.44193699s ago: executing program 2 (id=1467): write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xf0Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xf8A\xdd,Z\xfe\xcf\xc5D\xcc\x00'/169, 0x6) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev$auto(r0, &(0x7f0000000380)={0x0, 0xe0d}, 0x8) 2.201571247s ago: executing program 2 (id=1468): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565b, 0x38) 1.904714386s ago: executing program 2 (id=1469): mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff7}, 0x4, 0x0, 0xa, 0xb}, 0xfff}, 0x5, 0x311) (async) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0101000000ebb59bbfa3d0a6d5299c90caed0cc4b5b2bcc96392d4f88ea398220bff49629cd851e2075ea001128d5e743cc8e2f10761126ac2b32865259c4a4b843c198e0e9c71046ddd45bd2cac2cfb0be0f6700aed5179d0314a6e2e92b35e3f3fab719232ec9b19d53be057f1971b9270a1a7bd909345ec0d72fc2043ebbca5f68869c2e987140cbc0000000091b12b0a1ffb74517f61adc94aaa2ba5467350c71a2c"], 0x14}, 0x1, 0x0, 0x0, 0x64004401}, 0x800) (async) syz_clone3(&(0x7f00000002c0)={0x44802000, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000240)=""/49, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) (async) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) (async) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x4b8, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x15c, 0x2e, 0x0, 0x1, [@nested={0x13f, 0x48, 0x0, 0x1, [@nested={0x4, 0x6e}, @nested={0x4, 0x2a}, @typed={0x8, 0xe7, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x10c}, @typed={0x46, 0x9b, 0x0, 0x0, @binary="fef3b42367bdedb31d761c8d7c5156737b44b7711a065f629929b39da14a41846084baa493d6a50536c295bad29f786296601b9789dd5b8262a7f7ced01d51364a33"}, @nested={0x4, 0x5}, @nested={0x4, 0x72}, @generic="671c7d4347ea31ff5895f48b3b4b35778cfaa21b019f953b69b5f8701d02684bf6a28c0ec9d0f897ef49247095ace58e267355a50a5e86bc969603c63e055aa08a7c649790a0cdf1630915e1f360d6307a516ce93de2a0f76f4e6b25548fb64a1c9ea1b054c8e372d9fd2d73c5cc2516519202974ed3723f67d36635f14657a0402cabacc2061f8a5384385e69808be1f9bfe7a464ca3aed924fd2b1b489c81f009d75c6414ad30760660b001311e40419b3885d392238277dbd8a10b75a925dd7fdfa88440d12fbbe6d22a31ee705cf659753", @nested={0x4, 0x31}]}, @typed={0x8, 0x1e, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x102, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r3}]}, @NL802154_ATTR_SEC_LEVEL={0x33f, 0x2d, 0x0, 0x1, [@nested={0x204, 0x51, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @generic="2e142c3200e58c8685894b270ac887d272a6924f63beb1063100ca674722a55f39175371e3a182043ba4b205a32a63812603d1853aeb9827101f61edaef032a8880c579a08feea30f1dbd7bb19966a82aeb69c3b7ee347ee2b1a5832aa983fa5f74e822d60e1902b5388adeaaa8d46f2ec788dfafd67d3a3efe086", @nested={0x4, 0x74}, @generic="414ac0bc6f7b8bd0be76f2d37a401677843d7696b8483afd0de78ad6825ce3b96fc5fe28b4b023733072fbfc2923d100a3118479d7f222086787c04c9900975817ae9c34d55d85f5f9ecd5fa59e5abf269e8aa616c190ad307a246a1790684dd79a107d38779c2ae7096f090163838201cce25c1604d45c38203546b88903c60f3eb154934dddbb5dea97e612280056dc946b969573e1a2d7a25647b0d504e434bd1a12d3753ca5d0a33c79b03321e63d886789eaa05545d36bc07b7594793d0c1f2e9543ff8ab7a23faa2830dc411076d13df7e5ae6284d3c7069282efcbd49166e3076ec00819cfd08d54accb0", @generic="496ceb0cc94af5bbc6ea7b7408835a6c028a0f9a761c26d67c8fca124bbf861fcaf12dfecbee6a4d3c59890b8a30a23da50a98e026646e08fe7d0f596e6e0ab06b28ff143453fb97920ca230644a5c4b875e4d6ebc92dc646b760f733d78002bd2d3327be6720dc9df273b7347e098e6f92b40a974c4cdb078896cb8f46451ad34a92ecc8fcff1", @nested={0x4, 0x4e}]}, @typed={0xa, 0x7, 0x0, 0x0, @str='\\\\/&$\x00'}, @typed={0xc, 0xc0, 0x0, 0x0, @u64=0x5}, @generic="b84db8b84f9d88542189944263d1a0b05e9936091c9c2c24f39f1f3de8037773da8e502ca369994b9691b83bea46e1b99af3cfc0cce7df03ee4ae1d678989160bab45179b9eb4eb5ed533a4e10166f4b71f98c4c25660c309379ceef3900cc1ea5322e1697c8", @generic="61f7860ac3684d9c21e978d86c52795bbc95d8b43120cb5bbc8a2cdef1e99ac1925d55d28d5b264074258d0a0a04073a3dd2579145ec9345235e53daddc42bb94bec8f42ae07b73083bbb2a17c8abe65d65d90e389e371d2b43a4f0bc89badd316ab5c5edef0030063ff76594636fa65af258e63b10e57398099f5857087e839e863fb796483e84ce3e3882dc992be4c470f1ea668e5dbb8e7c3a45042b2d3525a0f7612442378d74f3e48cf88d6a970f0", @typed={0x8, 0x13d, 0x0, 0x0, @ipv4=@multicast1}]}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x48081}, 0x8841) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6db, 0x0, 0x3ff, 0x0, 0x3, 0x697b}, 0xed7138c}, 0x9a6, 0xc01) 1.765707062s ago: executing program 3 (id=1470): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) (async) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r1 = socket(0x2b, 0x1, 0x1) (async) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) (async) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) (async) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) connect$auto(0x4, 0x0, 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) 897.906865ms ago: executing program 0 (id=1471): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x8000000, &(0x7f00000001c0)=@test={r1, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac5, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x1c00000000000000, 0xffff, 0x6, 0x81, 0x68198}, 0x6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 895.536755ms ago: executing program 1 (id=1472): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(r0, 0x0, 0x6f) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 727.214957ms ago: executing program 0 (id=1473): write$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffffff, &(0x7f0000000000)="706f3a82d9e5cc7c2ceda8d50bfc94be9fe6c22ffaf8493a38", 0x19) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe800000040100"}, 0x1f) 633.874292ms ago: executing program 3 (id=1474): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 513.415529ms ago: executing program 0 (id=1475): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) socket(0x23, 0xa, 0x0) seccomp$auto(0x2, 0x10, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4109, 0x100d) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty1\x00', 0xa8a00, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x2, 0x13) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) get_mempolicy$auto(0x0, 0x0, 0x2, 0x86, 0x9) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card2\x00', 0x688200, 0x0) mmap$auto(0xd, 0x2000a, 0x5, 0xeb1, 0x401, 0x10000008000) socket(0xa, 0x801, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) unshare$auto(0x40000080) 399.557125ms ago: executing program 3 (id=1476): write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xf0Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xf8A\xdd,Z\xfe\xcf\xc5D\xcc\x00'/169, 0x6) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev$auto(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xe0d}, 0x8) 270.433004ms ago: executing program 3 (id=1477): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565b, 0x38) 121.541734ms ago: executing program 3 (id=1478): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) r1 = fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) sendfile$auto(r1, r2, 0x0, 0xc01) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x2, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000840)="5142651f911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb12dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee7fa7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d55745eff6aa689e859dcaeff39bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f3829c8a4c33fe0fbc81dd579bbdb44eda4f335d2bc512ca7f38f603c29033c94df2c9533f4422432f574a021e90a0fe3a4cf54de46e25986315b30956face49e26e8dcbcc9e1363627a9f38a2ee8304307dab4013d77f4c337551e2a6ac230788513cdd15e734263e4973c75757d9809c510977adc3be6c5b110597b09c7dad1f54e4506744710b53221e4a7982ac4c59bfae6370258b5af7864a4ca680addd736e35da579cc0e975e6cdefa3d082c8b4b10b205278c5e60507f5bf17a3c822a6e70e087df68022c1315cf499750e86ea1e060e63ebf63973eebe34ba6e687eda5ef020b61896a187842d219b2b9787be7910fc5180b277f2b00d760629816aa6a7240d7b1984158107eab929d79d6264611d404f2331eda49fe426edc34793dd3252aa54eb44544774d060269913cfcb105f55836eb6702c6034a3fe98bc9678850e54903d3", 0xdd4) write$auto(0x3, 0x0, 0xfffffdef) 57.888382ms ago: executing program 2 (id=1479): r0 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={&(0x7f0000000080)=ANY=[@ANYBLOB="203b90006fd5", @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf25020000000c000480080008808592a023"], 0x20}, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r1 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x6, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x3, 0x0, 0xe, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x2e6, 0x4, 0x7f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() r5 = socket(0x11, 0xa, 0x300) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r3) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="a5d7a1d7", @ANYRES16=r6, @ANYBLOB="300625bd7000fcdbdf251d000000be002e80cd92b3208817cf8c4cbbc3ad53bdc1837736d756f4106c467eec9b9716fc0e17cc070c4f2eecbd4d3796efc333597f4eb769cf24f810eaa9e2c380e54855cfde29514b361a54e948652b1d80c2668c8318b5d2ae4f2d1a61f6174ead9f9a9072581581ef224b07b7074f8b823673f42117918d1ad90d4400a280040032801400a80000000000000000000000ffffac1414bb04004f80040083800400138014008800fe88000000000000000000000000000108002b00040000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xffffffffffffff97, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000064", @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf25050000004e24cca7"], 0x18}, 0x1, 0x0, 0x0, 0x8014}, 0x4000) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x4, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x7ffffffffffffffb, 0x7, 0x2, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x4, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) 0s ago: executing program 1 (id=1480): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) r1 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r3, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/003/001\x00', 0x40101, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000000c0)={0xa1, 0x0, 0x3, 0x0, 0xfff8, 0xfffffffe, 0x0}) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)=@bpf_attr_11={0xf, 0x3, 0x3, 0x200, 0xc6, 0x0, 0xfffffff7, r4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f0000000380)={{0xfffffff9, 0xee01, 0xffffffffffffffff, 0xfffffffe, 0x1, 0xdbf, 0x5}, &(0x7f0000000300)=0x8, 0x0, 0x8000, 0x6, 0x8, 0xfffffffffffffffb, 0x5, 0x7, 0x3, 0x100}) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4) semctl$auto_GETPID(0x101, 0x6, 0xb, 0x4) write$auto_tomoyo_operations_securityfs_if(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): lastcpupid=0x7ff) [ 351.606081][T10534] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 351.614744][T10534] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 351.736029][T10534] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 351.744783][T10534] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 351.866178][T10532] zswap: compressor not available [ 351.903143][T10534] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 351.946434][T10534] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 351.993292][T10545] FAULT_INJECTION: forcing a failure. [ 351.993292][T10545] name failslab, interval 1, probability 0, space 0, times 0 [ 352.067760][T10534] page dumped because: unmovable page [ 352.073189][T10534] page_owner tracks the page as allocated [ 352.100614][T10545] CPU: 1 UID: 0 PID: 10545 Comm: syz.1.908 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.100665][T10545] Tainted: [L]=SOFTLOCKUP [ 352.100675][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.100693][T10545] Call Trace: [ 352.100703][T10545] [ 352.100714][T10545] dump_stack_lvl+0x100/0x190 [ 352.100765][T10545] should_fail_ex.cold+0x5/0xa [ 352.100798][T10545] should_failslab+0xc2/0x120 [ 352.100840][T10545] __kvmalloc_node_noprof+0xfa/0xa00 [ 352.100878][T10545] ? alloc_netdev_mqs+0xc99/0x14f0 [ 352.100915][T10545] ? lockdep_init_map_type+0x5c/0x250 [ 352.100967][T10545] alloc_netdev_mqs+0xc99/0x14f0 [ 352.101014][T10545] internal_dev_create+0x8a/0x520 [ 352.101056][T10545] ovs_vport_add+0x147/0x4d0 [ 352.101095][T10545] new_vport+0x16/0x1d0 [ 352.101124][T10545] ovs_dp_cmd_new+0x65d/0xdf0 [ 352.101164][T10545] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 352.101203][T10545] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 352.101249][T10545] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 352.101302][T10545] genl_family_rcv_msg_doit+0x214/0x300 [ 352.101350][T10545] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 352.101393][T10545] ? genl_get_cmd+0x3ef/0x720 [ 352.101444][T10545] ? bpf_lsm_capable+0x9/0x10 [ 352.101484][T10545] ? security_capable+0x80/0x260 [ 352.101527][T10545] ? ns_capable+0xd2/0xf0 [ 352.101573][T10545] genl_rcv_msg+0x560/0x800 [ 352.101621][T10545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.101666][T10545] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 352.101711][T10545] netlink_rcv_skb+0x159/0x420 [ 352.101750][T10545] ? __pfx_genl_rcv_msg+0x10/0x10 [ 352.101796][T10545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.101852][T10545] ? netlink_deliver_tap+0x1ae/0xcc0 [ 352.101895][T10545] genl_rcv+0x28/0x40 [ 352.101940][T10545] netlink_unicast+0x5aa/0x870 [ 352.101985][T10545] ? __pfx_netlink_unicast+0x10/0x10 [ 352.102040][T10545] netlink_sendmsg+0x8b0/0xda0 [ 352.102088][T10545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.102126][T10545] ? __import_iovec+0x1d2/0x640 [ 352.102166][T10545] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 352.102218][T10545] ____sys_sendmsg+0xa54/0xc30 [ 352.102266][T10545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.102318][T10545] ? __pfx_futex_wake_mark+0x10/0x10 [ 352.102365][T10545] ___sys_sendmsg+0x190/0x1e0 [ 352.102396][T10545] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.102472][T10545] __sys_sendmsg+0x170/0x220 [ 352.102509][T10545] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.102545][T10545] ? __x64_sys_futex+0x34f/0x4d0 [ 352.102601][T10545] do_syscall_64+0x106/0xf80 [ 352.102637][T10545] ? clear_bhb_loop+0x40/0x90 [ 352.102673][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.102702][T10545] RIP: 0033:0x7f928419bf79 [ 352.102728][T10545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.102757][T10545] RSP: 002b:00007f928505d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.102783][T10545] RAX: ffffffffffffffda RBX: 00007f9284416090 RCX: 00007f928419bf79 [ 352.102802][T10545] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000008 [ 352.102819][T10545] RBP: 00007f92842327e0 R08: 0000000000000000 R09: 0000000000000000 [ 352.102837][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.102854][T10545] R13: 00007f9284416128 R14: 00007f9284416090 R15: 00007ffec59a9608 [ 352.102894][T10545] [ 352.447595][T10534] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 352.467030][T10534] post_alloc_hook+0x153/0x170 [ 352.471846][T10534] get_page_from_freelist+0x111d/0x3140 [ 352.477552][T10534] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 352.483500][T10534] alloc_pages_mpol+0x1fb/0x550 [ 352.488526][T10534] alloc_pages_noprof+0x131/0x390 [ 352.494929][T10534] skb_page_frag_refill+0x365/0x5b0 [ 352.500320][T10534] try_fill_recv+0x7f1/0x2950 [ 352.505045][T10534] virtnet_open+0x5f2/0x960 [ 352.509632][T10534] __dev_open+0x3ad/0x960 [ 352.514096][T10534] __dev_change_flags+0x558/0x6f0 [ 352.519206][T10534] netif_change_flags+0x8d/0x160 [ 352.524276][T10534] dev_change_flags+0xba/0x250 [ 352.529154][T10534] devinet_ioctl+0x110b/0x1f10 [ 352.533966][T10534] inet_ioctl+0x3aa/0x3f0 [ 352.538474][T10534] sock_do_ioctl+0x118/0x280 [ 352.543111][T10534] sock_ioctl+0x599/0x6b0 [ 352.547544][T10534] page last free pid 1 tgid 1 stack trace: [ 352.553474][T10534] __free_frozen_pages+0x7ca/0x10a0 [ 352.558766][T10534] free_contig_range+0xde/0x1d0 [ 352.563760][T10534] destroy_args+0xa8/0x7a0 [ 352.568287][T10534] debug_vm_pgtable+0x1b66/0x34c0 [ 352.573356][T10534] do_one_initcall+0x11d/0x760 [ 352.578361][T10534] kernel_init_freeable+0x6e5/0x7a0 [ 352.583600][T10534] kernel_init+0x1f/0x1e0 [ 352.588031][T10534] ret_from_fork+0x754/0xd80 [ 352.592852][T10534] ret_from_fork_asm+0x1a/0x30 [ 353.329434][ T8661] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 353.329478][ T8661] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 353.354771][ T8661] Bluetooth: hci1: Dropping invalid advertising data [ 353.361647][ T8661] Bluetooth: hci1: Dropping invalid advertising data [ 353.368437][ T8661] Bluetooth: hci1: Dropping invalid advertising data [ 353.375176][ T8661] Bluetooth: hci1: Malformed LE Event: 0x02 [ 354.076708][T10581] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 354.139037][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 354.258345][T10587] netlink: 25 bytes leftover after parsing attributes in process `syz.2.918'. [ 354.690812][T10591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.920'. [ 354.954112][T10591] hsr_slave_0 (unregistering): left promiscuous mode [ 355.837758][T10602] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 355.902535][T10602] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 355.975923][T10602] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 356.056157][T10602] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 356.074544][T10600] zswap: compressor not available [ 356.095867][T10602] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 356.163380][T10602] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 356.246086][T10602] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 356.366093][T10602] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 356.374841][T10602] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 356.475970][T10602] page dumped because: unmovable page [ 356.481398][T10602] page_owner tracks the page as allocated [ 356.752479][T10602] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 357.100945][T10602] post_alloc_hook+0x153/0x170 [ 357.113944][T10602] get_page_from_freelist+0x111d/0x3140 [ 357.134960][T10602] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 357.155080][T10602] alloc_pages_mpol+0x1fb/0x550 [ 357.176007][T10602] alloc_pages_noprof+0x131/0x390 [ 357.203128][T10602] skb_page_frag_refill+0x365/0x5b0 [ 357.217037][T10642] hub 1-0:1.0: USB hub found [ 357.226129][T10602] try_fill_recv+0x7f1/0x2950 [ 357.230897][T10602] virtnet_open+0x5f2/0x960 [ 357.237140][T10602] __dev_open+0x3ad/0x960 [ 357.241536][T10602] __dev_change_flags+0x558/0x6f0 [ 357.250422][T10642] hub 1-0:1.0: 1 port detected [ 357.295920][T10602] netif_change_flags+0x8d/0x160 [ 357.313559][T10602] dev_change_flags+0xba/0x250 [ 357.376064][T10602] devinet_ioctl+0x110b/0x1f10 [ 357.380921][T10602] inet_ioctl+0x3aa/0x3f0 [ 357.401813][T10602] sock_do_ioctl+0x118/0x280 [ 357.448741][T10641] can0: slcan on pty83. [ 357.463963][T10602] sock_ioctl+0x599/0x6b0 [ 357.482200][T10602] page last free pid 1 tgid 1 stack trace: [ 357.506044][T10602] __free_frozen_pages+0x7ca/0x10a0 [ 357.525929][T10602] free_contig_range+0xde/0x1d0 [ 357.543099][T10602] destroy_args+0xa8/0x7a0 [ 357.561343][T10602] debug_vm_pgtable+0x1b66/0x34c0 [ 357.586030][T10602] do_one_initcall+0x11d/0x760 [ 357.598805][T10602] kernel_init_freeable+0x6e5/0x7a0 [ 357.618102][T10602] kernel_init+0x1f/0x1e0 [ 357.656082][T10602] ret_from_fork+0x754/0xd80 [ 357.660798][T10602] ret_from_fork_asm+0x1a/0x30 [ 358.027281][T10639] can0 (unregistered): slcan off pty83. [ 358.396020][T10668] openvswitch: HfR: Dropping previously announced user features [ 358.496179][T10668] FAULT_INJECTION: forcing a failure. [ 358.496179][T10668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.527359][T10672] futex_wake_op: syz.1.938 tries to shift op by -1; fix this program [ 358.537502][T10672] FAULT_INJECTION: forcing a failure. [ 358.537502][T10672] name failslab, interval 1, probability 0, space 0, times 0 [ 358.576785][T10672] CPU: 0 UID: 0 PID: 10672 Comm: syz.1.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.576832][T10672] Tainted: [L]=SOFTLOCKUP [ 358.576842][T10672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.576857][T10672] Call Trace: [ 358.576866][T10672] [ 358.576878][T10672] dump_stack_lvl+0x100/0x190 [ 358.576925][T10672] should_fail_ex.cold+0x5/0xa [ 358.576957][T10672] ? mempool_init_node+0x2f7/0x6e0 [ 358.576998][T10672] should_failslab+0xc2/0x120 [ 358.577039][T10672] __kmalloc_noprof+0xe0/0x850 [ 358.577072][T10672] ? mempool_init_noprof+0x3a/0x50 [ 358.577110][T10672] ? __pfx_mempool_kmalloc+0x10/0x10 [ 358.577153][T10672] mempool_init_node+0x2f7/0x6e0 [ 358.577202][T10672] ? __pfx_mempool_kmalloc+0x10/0x10 [ 358.577238][T10672] ? __pfx_mempool_kfree+0x10/0x10 [ 358.577309][T10672] mempool_init_noprof+0x3a/0x50 [ 358.577356][T10672] do_fanotify_mark+0x2ee4/0x4010 [ 358.577410][T10672] ? __pfx_do_fanotify_mark+0x10/0x10 [ 358.577449][T10672] ? __x64_sys_futex+0x358/0x4d0 [ 358.577487][T10672] ? xfd_validate_state+0x129/0x190 [ 358.577525][T10672] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 358.577565][T10672] __x64_sys_fanotify_mark+0xbd/0x160 [ 358.577610][T10672] ? do_syscall_64+0x95/0xf80 [ 358.577648][T10672] ? lockdep_hardirqs_on+0x78/0x100 [ 358.577681][T10672] do_syscall_64+0x106/0xf80 [ 358.577712][T10672] ? clear_bhb_loop+0x40/0x90 [ 358.577743][T10672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.577768][T10672] RIP: 0033:0x7f928419bf79 [ 358.577792][T10672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.577819][T10672] RSP: 002b:00007f928507e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 358.577846][T10672] RAX: ffffffffffffffda RBX: 00007f9284415fa0 RCX: 00007f928419bf79 [ 358.577865][T10672] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 358.577881][T10672] RBP: 00007f92842327e0 R08: 0000000000000000 R09: 0000000000000000 [ 358.577896][T10672] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 358.577911][T10672] R13: 00007f9284416038 R14: 00007f9284415fa0 R15: 00007ffec59a9608 [ 358.577947][T10672] [ 358.804351][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.0.935 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.804397][T10668] Tainted: [L]=SOFTLOCKUP [ 358.804406][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.804423][T10668] Call Trace: [ 358.804432][T10668] [ 358.804442][T10668] dump_stack_lvl+0x100/0x190 [ 358.804485][T10668] should_fail_ex.cold+0x5/0xa [ 358.804509][T10668] ? prepare_alloc_pages+0x16d/0x5f0 [ 358.804553][T10668] should_fail_alloc_page+0xeb/0x140 [ 358.804593][T10668] prepare_alloc_pages+0x1f0/0x5f0 [ 358.804641][T10668] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 358.804681][T10668] ? __lock_acquire+0x4a5/0x2630 [ 358.804726][T10668] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.804760][T10668] ? lock_acquire+0x1cf/0x380 [ 358.804791][T10668] ? find_held_lock+0x2b/0x80 [ 358.804831][T10668] ? finish_task_switch.isra.0+0x200/0xb80 [ 358.804859][T10668] ? finish_task_switch.isra.0+0x200/0xb80 [ 358.804888][T10668] ? rcu_is_watching+0x12/0xc0 [ 358.804931][T10668] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 358.804959][T10668] ? rcu_is_watching+0x12/0xc0 [ 358.804998][T10668] ? trace_sched_exit_tp+0x13a/0x180 [ 358.805028][T10668] ? __schedule+0x1000/0x60e0 [ 358.805059][T10668] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.805104][T10668] ? policy_nodemask+0xed/0x4f0 [ 358.805147][T10668] alloc_pages_mpol+0x1fb/0x550 [ 358.805184][T10668] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 358.805230][T10668] folio_alloc_mpol_noprof+0x36/0x340 [ 358.805258][T10668] vma_alloc_folio_noprof+0xed/0x1d0 [ 358.805282][T10668] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 358.805308][T10668] ? rcu_read_unlock+0x2d/0xb0 [ 358.805349][T10668] ? rcu_read_unlock+0x2d/0xb0 [ 358.805380][T10668] ? __lock_acquire+0x4a5/0x2630 [ 358.805415][T10668] do_wp_page+0x1eef/0x4f00 [ 358.805464][T10668] ? __pfx_do_wp_page+0x10/0x10 [ 358.805509][T10668] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.805556][T10668] __handle_mm_fault+0x1ac8/0x2b60 [ 358.805593][T10668] ? reacquire_held_locks+0xce/0x1e0 [ 358.805626][T10668] ? __pfx___handle_mm_fault+0x10/0x10 [ 358.805658][T10668] ? lock_vma_under_rcu+0x17c/0x590 [ 358.805712][T10668] handle_mm_fault+0x36d/0xa20 [ 358.805748][T10668] do_user_addr_fault+0x5a3/0x12f0 [ 358.805794][T10668] exc_page_fault+0x6f/0xd0 [ 358.805829][T10668] asm_exc_page_fault+0x26/0x30 [ 358.805857][T10668] RIP: 0033:0x7fbacd15be05 [ 358.805884][T10668] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 358.805909][T10668] RSP: 002b:00007fbacdfc8de0 EFLAGS: 00010293 [ 358.805930][T10668] RAX: 0000000000000008 RBX: 00007fbacdf47e20 RCX: 0000000000000000 [ 358.805947][T10668] RDX: 0000000000000000 RSI: 00007fbacd230088 RDI: 00007fbacdf47e20 [ 358.805964][T10668] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 358.805980][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbacd24f2d7 [ 358.805996][T10668] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007fbacd230088 [ 358.806034][T10668] [ 359.236178][T10668] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 359.584948][ T8661] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 360.004818][T10714] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 360.045954][T10714] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 360.104021][T10714] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 360.131439][T10714] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 360.172550][T10714] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 360.229737][T10714] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 360.306070][T10714] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 360.364807][T10714] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 360.443100][T10714] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 360.491715][T10707] zswap: compressor not available [ 360.532712][T10714] page dumped because: unmovable page [ 360.555968][T10714] page_owner tracks the page as allocated [ 360.597255][T10714] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 360.636041][T10714] post_alloc_hook+0x153/0x170 [ 360.641001][T10714] get_page_from_freelist+0x111d/0x3140 [ 360.656143][T10714] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 360.672427][T10714] alloc_pages_mpol+0x1fb/0x550 [ 360.706026][T10714] alloc_pages_noprof+0x131/0x390 [ 360.721455][T10714] skb_page_frag_refill+0x365/0x5b0 [ 360.746039][T10714] try_fill_recv+0x7f1/0x2950 [ 360.765998][T10714] virtnet_open+0x5f2/0x960 [ 360.780499][T10714] __dev_open+0x3ad/0x960 [ 360.795266][T10714] __dev_change_flags+0x558/0x6f0 [ 360.805412][T10714] netif_change_flags+0x8d/0x160 [ 360.854976][T10714] dev_change_flags+0xba/0x250 [ 360.865134][T10714] devinet_ioctl+0x110b/0x1f10 [ 360.895803][T10714] inet_ioctl+0x3aa/0x3f0 [ 360.905185][T10714] sock_do_ioctl+0x118/0x280 [ 360.916075][T10714] sock_ioctl+0x599/0x6b0 [ 360.930723][T10714] page last free pid 1 tgid 1 stack trace: [ 360.961066][T10714] __free_frozen_pages+0x7ca/0x10a0 [ 360.976074][T10714] free_contig_range+0xde/0x1d0 [ 360.981114][T10714] destroy_args+0xa8/0x7a0 [ 360.985571][T10714] debug_vm_pgtable+0x1b66/0x34c0 [ 360.992473][T10714] do_one_initcall+0x11d/0x760 [ 360.997830][T10714] kernel_init_freeable+0x6e5/0x7a0 [ 361.010497][T10714] kernel_init+0x1f/0x1e0 [ 361.020674][T10714] ret_from_fork+0x754/0xd80 [ 361.032119][T10714] ret_from_fork_asm+0x1a/0x30 [ 361.497497][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 361.596276][T10747] netlink: 25 bytes leftover after parsing attributes in process `syz.3.948'. [ 361.617653][ T7923] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.957819][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 363.022715][T10772] netlink: 25 bytes leftover after parsing attributes in process `syz.1.962'. [ 363.632572][T10783] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 363.698433][ T7923] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.709276][T10783] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 363.728294][T10783] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 363.816248][T10783] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 363.824908][T10783] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 363.897766][T10783] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 363.906595][T10783] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 363.945556][T10783] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 363.976687][T10780] zswap: compressor not available [ 364.026893][T10783] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 364.156077][T10783] page dumped because: unmovable page [ 364.161516][T10783] page_owner tracks the page as allocated [ 364.262395][T10783] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 364.381287][T10795] binder: 10793:10795 ioctl c018620c 0 returned -22 [ 364.385995][T10783] post_alloc_hook+0x153/0x170 [ 364.392743][T10783] get_page_from_freelist+0x111d/0x3140 [ 364.415998][T10783] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 364.422008][T10783] alloc_pages_mpol+0x1fb/0x550 [ 364.463230][T10783] alloc_pages_noprof+0x131/0x390 [ 364.609933][T10783] skb_page_frag_refill+0x365/0x5b0 [ 364.646001][T10783] try_fill_recv+0x7f1/0x2950 [ 364.684519][T10783] virtnet_open+0x5f2/0x960 [ 364.696034][T10783] __dev_open+0x3ad/0x960 [ 364.700448][T10783] __dev_change_flags+0x558/0x6f0 [ 364.742440][T10783] netif_change_flags+0x8d/0x160 [ 364.764992][T10783] dev_change_flags+0xba/0x250 [ 364.806696][T10783] devinet_ioctl+0x110b/0x1f10 [ 364.811593][T10783] inet_ioctl+0x3aa/0x3f0 [ 364.825982][T10783] sock_do_ioctl+0x118/0x280 [ 364.847165][T10783] sock_ioctl+0x599/0x6b0 [ 364.875980][T10783] page last free pid 1 tgid 1 stack trace: [ 364.888722][T10783] __free_frozen_pages+0x7ca/0x10a0 [ 364.893991][T10783] free_contig_range+0xde/0x1d0 [ 364.938369][T10783] destroy_args+0xa8/0x7a0 [ 364.959506][T10783] debug_vm_pgtable+0x1b66/0x34c0 [ 364.964569][T10783] do_one_initcall+0x11d/0x760 [ 364.995403][T10783] kernel_init_freeable+0x6e5/0x7a0 [ 365.010233][T10783] kernel_init+0x1f/0x1e0 [ 365.065568][T10783] ret_from_fork+0x754/0xd80 [ 365.106303][T10783] ret_from_fork_asm+0x1a/0x30 [ 365.957825][T10814] netlink: 342 bytes leftover after parsing attributes in process `syz.0.965'. [ 365.993851][T10814] netlink: 294 bytes leftover after parsing attributes in process `syz.0.965'. [ 366.476611][T10820] FAULT_INJECTION: forcing a failure. [ 366.476611][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 366.556045][T10820] CPU: 1 UID: 0 PID: 10820 Comm: syz.3.967 Tainted: G L syzkaller #0 PREEMPT(full) [ 366.556090][T10820] Tainted: [L]=SOFTLOCKUP [ 366.556099][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.556114][T10820] Call Trace: [ 366.556122][T10820] [ 366.556131][T10820] dump_stack_lvl+0x100/0x190 [ 366.556173][T10820] should_fail_ex.cold+0x5/0xa [ 366.556203][T10820] should_failslab+0xc2/0x120 [ 366.556241][T10820] __kmalloc_cache_noprof+0x7a/0x6f0 [ 366.556269][T10820] ? alloc_pipe_info+0x10e/0x590 [ 366.556304][T10820] ? aa_file_perm+0x268/0x1530 [ 366.556344][T10820] alloc_pipe_info+0x10e/0x590 [ 366.556378][T10820] ? aa_file_perm+0x277/0x1530 [ 366.556415][T10820] splice_direct_to_actor+0x78f/0xa30 [ 366.556479][T10820] ? __pfx_direct_splice_actor+0x10/0x10 [ 366.556513][T10820] ? __pfx_aa_file_perm+0x10/0x10 [ 366.556552][T10820] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 366.556597][T10820] do_splice_direct+0x174/0x240 [ 366.556633][T10820] ? __pfx_do_splice_direct+0x10/0x10 [ 366.556665][T10820] ? common_file_perm+0x1ab/0x4f0 [ 366.556693][T10820] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 366.556731][T10820] ? rw_verify_area+0xce/0x6d0 [ 366.556772][T10820] do_sendfile+0xadc/0xe20 [ 366.556811][T10820] ? __pfx_do_sendfile+0x10/0x10 [ 366.556844][T10820] ? __fget_files+0x21f/0x3d0 [ 366.556888][T10820] __x64_sys_sendfile64+0x1d8/0x220 [ 366.556926][T10820] ? ksys_write+0x1ac/0x250 [ 366.556958][T10820] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 366.557008][T10820] do_syscall_64+0x106/0xf80 [ 366.557039][T10820] ? clear_bhb_loop+0x40/0x90 [ 366.557071][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.557097][T10820] RIP: 0033:0x7f5b2199bf79 [ 366.557118][T10820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.557143][T10820] RSP: 002b:00007f5b2280e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 366.557168][T10820] RAX: ffffffffffffffda RBX: 00007f5b21c15fa0 RCX: 00007f5b2199bf79 [ 366.557185][T10820] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 366.557200][T10820] RBP: 00007f5b2280e090 R08: 0000000000000000 R09: 0000000000000000 [ 366.557215][T10820] R10: 00000000000007cc R11: 0000000000000246 R12: 0000000000000001 [ 366.557231][T10820] R13: 00007f5b21c16038 R14: 00007f5b21c15fa0 R15: 00007ffd2e012888 [ 366.557266][T10820] [ 367.264356][T10837] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 367.310761][T10837] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 367.338741][T10823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 367.366183][T10823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 367.372666][T10823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 367.379994][T10823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 367.390221][T10837] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 367.470838][T10837] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 367.488117][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.972'. [ 367.513603][T10837] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 367.549646][T10837] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 367.600688][T10841] hsr_slave_0 (unregistering): left promiscuous mode [ 367.627382][T10837] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 367.632110][T10833] zswap: compressor not available [ 367.682495][T10837] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 367.796067][T10837] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 367.814865][T10837] page dumped because: unmovable page [ 367.825920][T10837] page_owner tracks the page as allocated [ 368.031285][T10837] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 368.217871][T10837] post_alloc_hook+0x153/0x170 [ 368.263752][T10837] get_page_from_freelist+0x111d/0x3140 [ 368.364878][T10837] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 368.409746][T10837] alloc_pages_mpol+0x1fb/0x550 [ 368.429697][T10837] alloc_pages_noprof+0x131/0x390 [ 368.434796][T10837] skb_page_frag_refill+0x365/0x5b0 [ 368.497923][T10837] try_fill_recv+0x7f1/0x2950 [ 368.503921][T10837] virtnet_open+0x5f2/0x960 [ 368.523978][T10837] __dev_open+0x3ad/0x960 [ 368.544661][T10837] __dev_change_flags+0x558/0x6f0 [ 368.577521][T10837] netif_change_flags+0x8d/0x160 [ 368.582530][T10837] dev_change_flags+0xba/0x250 [ 368.676077][T10837] devinet_ioctl+0x110b/0x1f10 [ 368.696180][T10837] inet_ioctl+0x3aa/0x3f0 [ 368.700587][T10837] sock_do_ioctl+0x118/0x280 [ 368.756228][T10837] sock_ioctl+0x599/0x6b0 [ 368.760631][T10837] page last free pid 1 tgid 1 stack trace: [ 368.805638][T10837] __free_frozen_pages+0x7ca/0x10a0 [ 368.827441][T10837] free_contig_range+0xde/0x1d0 [ 368.863126][T10837] destroy_args+0xa8/0x7a0 [ 368.907315][T10837] debug_vm_pgtable+0x1b66/0x34c0 [ 368.912450][T10837] do_one_initcall+0x11d/0x760 [ 368.959067][T10837] kernel_init_freeable+0x6e5/0x7a0 [ 368.997123][T10837] kernel_init+0x1f/0x1e0 [ 369.026062][T10837] ret_from_fork+0x754/0xd80 [ 369.030701][T10837] ret_from_fork_asm+0x1a/0x30 [ 369.225982][ T8661] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.377922][ T8661] Bluetooth: hci2: command 0x0c1a tx timeout [ 369.383987][ T7923] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.457963][ T8661] Bluetooth: hci3: command 0x0c1a tx timeout [ 369.616803][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 369.675575][T10862] netlink: 25 bytes leftover after parsing attributes in process `syz.3.975'. [ 370.397146][T10879] futex_wake_op: syz.2.982 tries to shift op by -1; fix this program [ 371.347107][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 371.365134][T10913] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 371.388965][T10913] netlink: 5 bytes leftover after parsing attributes in process `syz.0.989'. [ 371.750304][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.990'. [ 371.826088][T10919] netlink: 25 bytes leftover after parsing attributes in process `syz.1.990'. [ 372.021894][T10925] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 372.413204][T10923] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 372.514725][T10923] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 372.617469][T10923] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 372.786050][T10923] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 372.794729][T10923] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 372.996058][T10923] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 373.039774][T10924] zswap: compressor not available [ 373.120040][T10923] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 373.246026][T10923] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 373.525957][T10923] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 373.614122][T10923] page dumped because: unmovable page [ 373.661626][T10923] page_owner tracks the page as allocated [ 373.703056][T10923] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 373.815943][T10923] post_alloc_hook+0x153/0x170 [ 373.820818][T10923] get_page_from_freelist+0x111d/0x3140 [ 373.926042][T10923] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 373.932031][T10923] alloc_pages_mpol+0x1fb/0x550 [ 373.974674][T10940] hub 1-0:1.0: USB hub found [ 374.000997][T10923] alloc_pages_noprof+0x131/0x390 [ 374.011247][T10940] hub 1-0:1.0: 1 port detected [ 374.029015][T10923] skb_page_frag_refill+0x365/0x5b0 [ 374.034307][T10923] try_fill_recv+0x7f1/0x2950 [ 374.086003][T10923] virtnet_open+0x5f2/0x960 [ 374.136095][T10923] __dev_open+0x3ad/0x960 [ 374.140502][T10923] __dev_change_flags+0x558/0x6f0 [ 374.145602][T10923] netif_change_flags+0x8d/0x160 [ 374.306052][T10923] dev_change_flags+0xba/0x250 [ 374.310883][T10923] devinet_ioctl+0x110b/0x1f10 [ 374.315672][T10923] inet_ioctl+0x3aa/0x3f0 [ 374.376033][T10923] sock_do_ioctl+0x118/0x280 [ 374.396061][T10923] sock_ioctl+0x599/0x6b0 [ 374.400475][T10923] page last free pid 1 tgid 1 stack trace: [ 374.496007][T10923] __free_frozen_pages+0x7ca/0x10a0 [ 374.516033][T10923] free_contig_range+0xde/0x1d0 [ 374.521107][T10923] destroy_args+0xa8/0x7a0 [ 374.525576][T10923] debug_vm_pgtable+0x1b66/0x34c0 [ 374.536025][T10923] do_one_initcall+0x11d/0x760 [ 374.540857][T10923] kernel_init_freeable+0x6e5/0x7a0 [ 374.561455][T10923] kernel_init+0x1f/0x1e0 [ 374.565852][T10923] ret_from_fork+0x754/0xd80 [ 374.586070][T10923] ret_from_fork_asm+0x1a/0x30 [ 375.131958][T10966] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 375.186011][T10966] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 375.194589][T10966] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 375.242083][T10975] FAULT_INJECTION: forcing a failure. [ 375.242083][T10975] name failslab, interval 1, probability 0, space 0, times 0 [ 375.267055][T10974] FAULT_INJECTION: forcing a failure. [ 375.267055][T10974] name failslab, interval 1, probability 0, space 0, times 0 [ 375.306517][T10966] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 375.336086][T10974] CPU: 0 UID: 0 PID: 10974 Comm: syz.2.1001 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.336129][T10974] Tainted: [L]=SOFTLOCKUP [ 375.336137][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.336157][T10974] Call Trace: [ 375.336166][T10974] [ 375.336177][T10974] dump_stack_lvl+0x100/0x190 [ 375.336220][T10974] should_fail_ex.cold+0x5/0xa [ 375.336251][T10974] ? copy_splice_read+0x1a3/0xb90 [ 375.336284][T10974] should_failslab+0xc2/0x120 [ 375.336321][T10974] __kmalloc_noprof+0xe0/0x850 [ 375.336361][T10974] copy_splice_read+0x1a3/0xb90 [ 375.336403][T10974] ? __pfx_copy_splice_read+0x10/0x10 [ 375.336440][T10974] ? look_up_lock_class+0x55/0x120 [ 375.336479][T10974] ? lockdep_init_map_type+0x5c/0x250 [ 375.336513][T10974] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 375.336556][T10974] ? __pfx_copy_splice_read+0x10/0x10 [ 375.336590][T10974] do_splice_read+0x285/0x370 [ 375.336638][T10974] splice_direct_to_actor+0x2a1/0xa30 [ 375.336676][T10974] ? __pfx_direct_splice_actor+0x10/0x10 [ 375.336717][T10974] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 375.336761][T10974] do_splice_direct+0x174/0x240 [ 375.336794][T10974] ? __pfx_do_splice_direct+0x10/0x10 [ 375.336823][T10974] ? common_file_perm+0x1ab/0x4f0 [ 375.336853][T10974] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 375.336892][T10974] ? rw_verify_area+0xce/0x6d0 [ 375.336926][T10974] do_sendfile+0xadc/0xe20 [ 375.336966][T10974] ? __pfx_do_sendfile+0x10/0x10 [ 375.336999][T10974] ? __fget_files+0x21f/0x3d0 [ 375.337042][T10974] __x64_sys_sendfile64+0x1d8/0x220 [ 375.337080][T10974] ? ksys_write+0x1ac/0x250 [ 375.337113][T10974] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 375.337162][T10974] do_syscall_64+0x106/0xf80 [ 375.337195][T10974] ? clear_bhb_loop+0x40/0x90 [ 375.337226][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.337253][T10974] RIP: 0033:0x7f7069d9bf79 [ 375.337275][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.337300][T10974] RSP: 002b:00007f706ac28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 375.337325][T10974] RAX: ffffffffffffffda RBX: 00007f706a015fa0 RCX: 00007f7069d9bf79 [ 375.337342][T10974] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 375.337357][T10974] RBP: 00007f706ac28090 R08: 0000000000000000 R09: 0000000000000000 [ 375.337372][T10974] R10: 00000000000007cc R11: 0000000000000246 R12: 0000000000000001 [ 375.337387][T10974] R13: 00007f706a016038 R14: 00007f706a015fa0 R15: 00007ffc6b1ba5e8 [ 375.337422][T10974] [ 375.364045][T10975] CPU: 1 UID: 0 PID: 10975 Comm: syz.3.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.364087][T10975] Tainted: [L]=SOFTLOCKUP [ 375.364096][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.364110][T10975] Call Trace: [ 375.364119][T10975] [ 375.364129][T10975] dump_stack_lvl+0x100/0x190 [ 375.364170][T10975] should_fail_ex.cold+0x5/0xa [ 375.364200][T10975] should_failslab+0xc2/0x120 [ 375.364237][T10975] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 375.364269][T10975] ? __d_alloc+0x34/0xa80 [ 375.364305][T10975] ? __pfx_stack_trace_save+0x10/0x10 [ 375.364350][T10975] __d_alloc+0x34/0xa80 [ 375.364391][T10975] d_alloc_parallel+0x111/0x14e0 [ 375.364431][T10975] ? find_held_lock+0x2b/0x80 [ 375.364466][T10975] ? __d_lookup+0x25c/0x4a0 [ 375.364495][T10975] ? __pfx_d_alloc_parallel+0x10/0x10 [ 375.364530][T10975] ? __d_lookup+0x266/0x4a0 [ 375.364568][T10975] lookup_open.isra.0+0x57c/0x11b0 [ 375.364607][T10975] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 375.364659][T10975] ? lookup_fast+0x2da/0x600 [ 375.364693][T10975] path_openat+0xa98/0x31a0 [ 375.364735][T10975] ? entry_SYSCALL_64_after_hwframe+0x47/0x7f [ 375.364765][T10975] ? __pfx_path_openat+0x10/0x10 [ 375.364813][T10975] do_file_open+0x20e/0x430 [ 375.364852][T10975] ? __pfx_do_file_open+0x10/0x10 [ 375.364919][T10975] ? _raw_spin_unlock+0x28/0x50 [ 375.364948][T10975] ? alloc_fd+0x476/0x790 [ 375.364992][T10975] do_sys_openat2+0x10d/0x1e0 [ 375.365021][T10975] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.365062][T10975] __x64_sys_open+0xfe/0x1d0 [ 375.365089][T10975] ? __pfx___x64_sys_open+0x10/0x10 [ 375.365131][T10975] do_syscall_64+0x106/0xf80 [ 375.365161][T10975] ? clear_bhb_loop+0x40/0x90 [ 375.365192][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.365218][T10975] RIP: 0033:0x7f5b2199bf79 [ 375.365240][T10975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.365265][T10975] RSP: 002b:00007f5b2280e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 375.365289][T10975] RAX: ffffffffffffffda RBX: 00007f5b21c15fa0 RCX: 00007f5b2199bf79 [ 375.365306][T10975] RDX: 0000000000000001 RSI: 0000000000000034 RDI: 0000200000000000 [ 375.365322][T10975] RBP: 00007f5b21a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 375.365337][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.365351][T10975] R13: 00007f5b21c16038 R14: 00007f5b21c15fa0 R15: 00007ffd2e012888 [ 375.365387][T10975] [ 375.365678][T10968] zswap: compressor not available [ 375.466140][T10966] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 375.473643][T10975] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 375.536003][T10966] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 375.606654][T10975] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 375.935530][T10966] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 375.990763][T10966] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 376.030836][T10966] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 376.053539][T10975] FAULT_INJECTION: forcing a failure. [ 376.053539][T10975] name fail_futex, interval 1, probability 0, space 0, times 0 [ 376.066928][T10966] page dumped because: unmovable page [ 376.086832][T10966] page_owner tracks the page as allocated [ 376.127128][T10975] CPU: 1 UID: 0 PID: 10975 Comm: syz.3.1000 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.127170][T10975] Tainted: [L]=SOFTLOCKUP [ 376.127180][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.127195][T10975] Call Trace: [ 376.127204][T10975] [ 376.127214][T10975] dump_stack_lvl+0x100/0x190 [ 376.127255][T10975] should_fail_ex.cold+0x5/0xa [ 376.127285][T10975] get_futex_key+0x1d2/0x1620 [ 376.127317][T10975] ? __pfx_get_futex_key+0x10/0x10 [ 376.127347][T10975] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.127391][T10975] futex_wake+0xea/0x530 [ 376.127424][T10975] ? __lock_acquire+0x4a5/0x2630 [ 376.127453][T10975] ? __pfx_futex_wake+0x10/0x10 [ 376.127486][T10975] ? __lock_acquire+0x4a5/0x2630 [ 376.127519][T10975] ? do_timer_create+0x746/0x14b0 [ 376.127551][T10975] do_futex+0x32b/0x350 [ 376.127580][T10975] ? __pfx_do_futex+0x10/0x10 [ 376.127617][T10975] __x64_sys_futex+0x34f/0x4d0 [ 376.127648][T10975] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 376.127677][T10975] ? exc_page_fault+0x6f/0xd0 [ 376.127707][T10975] ? __pfx___x64_sys_futex+0x10/0x10 [ 376.127748][T10975] do_syscall_64+0x106/0xf80 [ 376.127787][T10975] ? clear_bhb_loop+0x40/0x90 [ 376.127817][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.127842][T10975] RIP: 0033:0x7f5b2199bf79 [ 376.127864][T10975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.127887][T10975] RSP: 002b:00007f5b2280e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 376.127912][T10975] RAX: ffffffffffffffda RBX: 00007f5b21c15fa8 RCX: 00007f5b2199bf79 [ 376.127930][T10975] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5b21c15fac [ 376.127947][T10975] RBP: 00007f5b21c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 376.127962][T10975] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 376.127978][T10975] R13: 00007f5b21c16038 R14: 00007ffd2e0127a0 R15: 00007ffd2e012888 [ 376.128011][T10975] [ 376.128096][T10966] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 376.466065][T10966] post_alloc_hook+0x153/0x170 [ 376.470917][T10966] get_page_from_freelist+0x111d/0x3140 [ 376.515921][T10966] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 376.545990][T10966] alloc_pages_mpol+0x1fb/0x550 [ 376.550955][T10966] alloc_pages_noprof+0x131/0x390 [ 376.576038][T10966] skb_page_frag_refill+0x365/0x5b0 [ 376.581353][T10966] try_fill_recv+0x7f1/0x2950 [ 376.615922][T10966] virtnet_open+0x5f2/0x960 [ 376.620524][T10966] __dev_open+0x3ad/0x960 [ 376.624891][T10966] __dev_change_flags+0x558/0x6f0 [ 376.655933][T10966] netif_change_flags+0x8d/0x160 [ 376.662351][T10966] dev_change_flags+0xba/0x250 [ 376.676047][T10966] devinet_ioctl+0x110b/0x1f10 [ 376.681247][T10966] inet_ioctl+0x3aa/0x3f0 [ 376.685644][T10966] sock_do_ioctl+0x118/0x280 [ 376.715939][T10966] sock_ioctl+0x599/0x6b0 [ 376.726011][T10966] page last free pid 1 tgid 1 stack trace: [ 376.742084][T10966] __free_frozen_pages+0x7ca/0x10a0 [ 376.755910][T10966] free_contig_range+0xde/0x1d0 [ 376.762135][T10966] destroy_args+0xa8/0x7a0 [ 376.786050][T10966] debug_vm_pgtable+0x1b66/0x34c0 [ 376.791157][T10966] do_one_initcall+0x11d/0x760 [ 376.816849][T10966] kernel_init_freeable+0x6e5/0x7a0 [ 376.822120][T10966] kernel_init+0x1f/0x1e0 [ 376.846087][T10966] ret_from_fork+0x754/0xd80 [ 376.850762][T10966] ret_from_fork_asm+0x1a/0x30 [ 377.740376][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'. [ 377.840894][T11019] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1008'. [ 378.107561][T11027] FAULT_INJECTION: forcing a failure. [ 378.107561][T11027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 378.236047][T11027] CPU: 1 UID: 0 PID: 11027 Comm: syz.2.1010 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.236090][T11027] Tainted: [L]=SOFTLOCKUP [ 378.236099][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.236114][T11027] Call Trace: [ 378.236123][T11027] [ 378.236133][T11027] dump_stack_lvl+0x100/0x190 [ 378.236176][T11027] should_fail_ex.cold+0x5/0xa [ 378.236201][T11027] ? prepare_alloc_pages+0x16d/0x5f0 [ 378.236243][T11027] should_fail_alloc_page+0xeb/0x140 [ 378.236283][T11027] prepare_alloc_pages+0x1f0/0x5f0 [ 378.236329][T11027] ? kernel_text_address+0x8d/0x100 [ 378.236368][T11027] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 378.236414][T11027] ? copy_splice_read+0x1a3/0xb90 [ 378.236448][T11027] ? stack_trace_save+0x8e/0xc0 [ 378.236486][T11027] ? __pfx_stack_trace_save+0x10/0x10 [ 378.236526][T11027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 378.236562][T11027] ? copy_splice_read+0x1a3/0xb90 [ 378.236592][T11027] ? kasan_save_stack+0x3f/0x50 [ 378.236621][T11027] ? kasan_save_stack+0x30/0x50 [ 378.236649][T11027] ? kasan_save_track+0x14/0x30 [ 378.236679][T11027] ? __kasan_kmalloc+0xaa/0xb0 [ 378.236709][T11027] ? __kmalloc_noprof+0x301/0x850 [ 378.236738][T11027] ? copy_splice_read+0x1a3/0xb90 [ 378.236769][T11027] ? do_splice_read+0x285/0x370 [ 378.236808][T11027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.236855][T11027] alloc_pages_bulk_noprof+0x782/0x1490 [ 378.236902][T11027] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 378.236945][T11027] ? __kmalloc_noprof+0x320/0x850 [ 378.236984][T11027] copy_splice_read+0x1e1/0xb90 [ 378.237026][T11027] ? __pfx_copy_splice_read+0x10/0x10 [ 378.237061][T11027] ? look_up_lock_class+0x55/0x120 [ 378.237097][T11027] ? lockdep_init_map_type+0x5c/0x250 [ 378.237131][T11027] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 378.237168][T11027] ? __pfx_copy_splice_read+0x10/0x10 [ 378.237202][T11027] do_splice_read+0x285/0x370 [ 378.237241][T11027] splice_direct_to_actor+0x2a1/0xa30 [ 378.237279][T11027] ? __pfx_direct_splice_actor+0x10/0x10 [ 378.237332][T11027] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 378.237379][T11027] do_splice_direct+0x174/0x240 [ 378.237415][T11027] ? __pfx_do_splice_direct+0x10/0x10 [ 378.237448][T11027] ? common_file_perm+0x1ab/0x4f0 [ 378.237480][T11027] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 378.237521][T11027] ? rw_verify_area+0xce/0x6d0 [ 378.237556][T11027] do_sendfile+0xadc/0xe20 [ 378.237596][T11027] ? __pfx_do_sendfile+0x10/0x10 [ 378.237629][T11027] ? __fget_files+0x21f/0x3d0 [ 378.237671][T11027] __x64_sys_sendfile64+0x1d8/0x220 [ 378.237708][T11027] ? ksys_write+0x1ac/0x250 [ 378.237740][T11027] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 378.237789][T11027] do_syscall_64+0x106/0xf80 [ 378.237820][T11027] ? clear_bhb_loop+0x40/0x90 [ 378.237851][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.237877][T11027] RIP: 0033:0x7f7069d9bf79 [ 378.237900][T11027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.237924][T11027] RSP: 002b:00007f706ac28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 378.237948][T11027] RAX: ffffffffffffffda RBX: 00007f706a015fa0 RCX: 00007f7069d9bf79 [ 378.237966][T11027] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 378.237980][T11027] RBP: 00007f706ac28090 R08: 0000000000000000 R09: 0000000000000000 [ 378.237996][T11027] R10: 00000000000007cc R11: 0000000000000246 R12: 0000000000000001 [ 378.238011][T11027] R13: 00007f706a016038 R14: 00007f706a015fa0 R15: 00007ffc6b1ba5e8 [ 378.238046][T11027] [ 378.769095][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.775493][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.114523][T11032] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 379.126054][T11032] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 379.166017][T11032] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 379.173643][T11032] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 379.225945][T11032] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 379.256312][T11032] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 379.265067][T11032] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 379.311808][T11032] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 379.325996][T11032] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 379.346891][T11032] page dumped because: unmovable page [ 379.352326][T11032] page_owner tracks the page as allocated [ 379.447718][T11032] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 379.473115][T11038] zswap: compressor not available [ 379.575955][T11032] post_alloc_hook+0x153/0x170 [ 379.616393][T11032] get_page_from_freelist+0x111d/0x3140 [ 379.646073][T11032] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 379.687109][T11032] alloc_pages_mpol+0x1fb/0x550 [ 379.788314][T11032] alloc_pages_noprof+0x131/0x390 [ 379.793443][T11032] skb_page_frag_refill+0x365/0x5b0 [ 379.857922][T11032] try_fill_recv+0x7f1/0x2950 [ 379.862689][T11032] virtnet_open+0x5f2/0x960 [ 379.926049][T11032] __dev_open+0x3ad/0x960 [ 379.930468][T11032] __dev_change_flags+0x558/0x6f0 [ 379.969165][T11032] netif_change_flags+0x8d/0x160 [ 379.974233][T11032] dev_change_flags+0xba/0x250 [ 379.999594][T11032] devinet_ioctl+0x110b/0x1f10 [ 380.004448][T11032] inet_ioctl+0x3aa/0x3f0 [ 380.036291][T11032] sock_do_ioctl+0x118/0x280 [ 380.045980][T11032] sock_ioctl+0x599/0x6b0 [ 380.059204][T11032] page last free pid 1 tgid 1 stack trace: [ 380.071560][T11032] __free_frozen_pages+0x7ca/0x10a0 [ 380.089315][T11032] free_contig_range+0xde/0x1d0 [ 380.100981][T11032] destroy_args+0xa8/0x7a0 [ 380.115513][T11032] debug_vm_pgtable+0x1b66/0x34c0 [ 380.122975][T11032] do_one_initcall+0x11d/0x760 [ 380.130296][T11032] kernel_init_freeable+0x6e5/0x7a0 [ 380.136796][T11032] kernel_init+0x1f/0x1e0 [ 380.154096][T11032] ret_from_fork+0x754/0xd80 [ 380.163628][T11032] ret_from_fork_asm+0x1a/0x30 [ 380.418473][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 381.513483][T11085] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1022'. [ 381.575073][T11080] zswap: compressor  not available [ 381.648388][T11088] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 382.605606][T11110] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 382.681548][T11110] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 382.896176][T11107] zswap: compressor not available [ 382.976041][T11110] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 383.014940][T11122] capability: warning: `syz.0.1030' uses 32-bit capabilities (legacy support in use) [ 383.029170][T11110] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 383.209376][T11110] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 383.300705][T11110] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 383.440471][T11110] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 383.459538][T11110] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 383.579333][T11110] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 383.662783][T11110] page dumped because: unmovable page [ 383.678746][T11110] page_owner tracks the page as allocated [ 383.735956][T11110] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 383.905514][T11110] post_alloc_hook+0x153/0x170 [ 383.910845][T11131] zswap: compressor  not available [ 383.926121][T11110] get_page_from_freelist+0x111d/0x3140 [ 383.937510][T11110] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 383.954356][T11110] alloc_pages_mpol+0x1fb/0x550 [ 383.971652][T11110] alloc_pages_noprof+0x131/0x390 [ 383.990207][T11110] skb_page_frag_refill+0x365/0x5b0 [ 384.027892][T11110] try_fill_recv+0x7f1/0x2950 [ 384.085917][T11110] virtnet_open+0x5f2/0x960 [ 384.106771][T11110] __dev_open+0x3ad/0x960 [ 384.131565][T11110] __dev_change_flags+0x558/0x6f0 [ 384.172454][T11110] netif_change_flags+0x8d/0x160 [ 384.195923][T11110] dev_change_flags+0xba/0x250 [ 384.200792][T11110] devinet_ioctl+0x110b/0x1f10 [ 384.253933][T11110] inet_ioctl+0x3aa/0x3f0 [ 384.279368][T11110] sock_do_ioctl+0x118/0x280 [ 384.286332][T11110] sock_ioctl+0x599/0x6b0 [ 384.305900][T11110] page last free pid 1 tgid 1 stack trace: [ 384.379197][T11110] __free_frozen_pages+0x7ca/0x10a0 [ 384.422862][T11143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1034'. [ 384.556040][T11110] free_contig_range+0xde/0x1d0 [ 384.560999][T11110] destroy_args+0xa8/0x7a0 [ 384.631927][T11110] debug_vm_pgtable+0x1b66/0x34c0 [ 384.706067][T11110] do_one_initcall+0x11d/0x760 [ 384.761539][T11110] kernel_init_freeable+0x6e5/0x7a0 [ 384.813603][T11110] kernel_init+0x1f/0x1e0 [ 384.926358][T11110] ret_from_fork+0x754/0xd80 [ 384.931217][T11110] ret_from_fork_asm+0x1a/0x30 [ 388.006564][ T30] audit: type=1800 audit(4294967326.678:8): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=33966 res=0 errno=0 [ 388.151794][T11163] Process accounting resumed [ 388.257684][T11187] could not allocate digest TFM handle [ 389.156351][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 389.286842][T11242] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1051'. [ 390.193340][T11245] binder: 11243:11245 ioctl c018620c 0 returned -1 [ 391.936037][ T8661] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 392.282999][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 392.326449][T11302] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1064'. [ 392.387264][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 392.415614][T11308] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1066'. [ 394.758283][T11347] FAULT_INJECTION: forcing a failure. [ 394.758283][T11347] name failslab, interval 1, probability 0, space 0, times 0 [ 394.805026][T11344] FAULT_INJECTION: forcing a failure. [ 394.805026][T11344] name failslab, interval 1, probability 0, space 0, times 0 [ 394.838333][T11344] CPU: 1 UID: 0 PID: 11344 Comm: syz.3.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.838373][T11344] Tainted: [L]=SOFTLOCKUP [ 394.838382][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.838396][T11344] Call Trace: [ 394.838404][T11344] [ 394.838414][T11344] dump_stack_lvl+0x100/0x190 [ 394.838457][T11344] should_fail_ex.cold+0x5/0xa [ 394.838486][T11344] should_failslab+0xc2/0x120 [ 394.838521][T11344] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 394.838550][T11344] ? security_file_alloc+0x34/0x2c0 [ 394.838587][T11344] ? trace_kmem_cache_alloc+0xf3/0x120 [ 394.838630][T11344] security_file_alloc+0x34/0x2c0 [ 394.838661][T11344] init_file+0x95/0x480 [ 394.838685][T11344] alloc_empty_file+0x73/0x1c0 [ 394.838709][T11344] path_openat+0xe8/0x31a0 [ 394.838741][T11344] ? kasan_save_stack+0x3f/0x50 [ 394.838769][T11344] ? kasan_save_stack+0x30/0x50 [ 394.838799][T11344] ? kasan_save_track+0x14/0x30 [ 394.838828][T11344] ? __kasan_slab_alloc+0x89/0x90 [ 394.838858][T11344] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 394.838887][T11344] ? do_getname+0x35/0x390 [ 394.838909][T11344] ? do_sys_openat2+0xc5/0x1e0 [ 394.838934][T11344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.838965][T11344] ? __pfx_path_openat+0x10/0x10 [ 394.839011][T11344] do_file_open+0x20e/0x430 [ 394.839049][T11344] ? __pfx_do_file_open+0x10/0x10 [ 394.839109][T11344] ? alloc_fd+0x476/0x790 [ 394.839147][T11344] ? do_getname+0x191/0x390 [ 394.839175][T11344] do_sys_openat2+0x10d/0x1e0 [ 394.839201][T11344] ? __pfx_do_sys_openat2+0x10/0x10 [ 394.839229][T11344] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 394.839274][T11344] __x64_sys_openat+0x12d/0x210 [ 394.839302][T11344] ? __pfx___x64_sys_openat+0x10/0x10 [ 394.839342][T11344] do_syscall_64+0x106/0xf80 [ 394.839376][T11344] ? clear_bhb_loop+0x40/0x90 [ 394.839405][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.839430][T11344] RIP: 0033:0x7f5b2199bf79 [ 394.839452][T11344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.839477][T11344] RSP: 002b:00007f5b227ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.839502][T11344] RAX: ffffffffffffffda RBX: 00007f5b21c16090 RCX: 00007f5b2199bf79 [ 394.839518][T11344] RDX: 00000000000c0a82 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 394.839535][T11344] RBP: 00007f5b21a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 394.839550][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.839565][T11344] R13: 00007f5b21c16128 R14: 00007f5b21c16090 R15: 00007ffd2e012888 [ 394.839608][T11344] [ 394.844339][T11343] FAULT_INJECTION: forcing a failure. [ 394.844339][T11343] name fail_futex, interval 1, probability 0, space 0, times 0 [ 394.859915][T11347] CPU: 0 UID: 0 PID: 11347 Comm: syz.0.1075 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.859964][T11347] Tainted: [L]=SOFTLOCKUP [ 394.859974][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.859991][T11347] Call Trace: [ 394.860000][T11347] [ 394.860011][T11347] dump_stack_lvl+0x100/0x190 [ 394.860059][T11347] should_fail_ex.cold+0x5/0xa [ 394.860089][T11347] should_failslab+0xc2/0x120 [ 394.860128][T11347] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 394.860159][T11347] ? sk_prot_alloc+0x60/0x2a0 [ 394.860195][T11347] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 394.860229][T11347] ? security_inode_alloc+0x3b/0x2c0 [ 394.860262][T11347] sk_prot_alloc+0x60/0x2a0 [ 394.860309][T11347] sk_alloc+0x36/0xe80 [ 394.860342][T11347] __vsock_create.constprop.0+0x3c/0xba0 [ 394.860371][T11347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 394.860414][T11347] vsock_create+0x126/0x510 [ 394.860449][T11347] __sock_create+0x339/0x860 [ 394.860499][T11347] __sys_socket+0x14d/0x260 [ 394.860525][T11347] ? __pfx___sys_socket+0x10/0x10 [ 394.860563][T11347] __x64_sys_socket+0x72/0xb0 [ 394.860588][T11347] ? lockdep_hardirqs_on+0x78/0x100 [ 394.860624][T11347] do_syscall_64+0x106/0xf80 [ 394.860666][T11347] ? clear_bhb_loop+0x40/0x90 [ 394.860702][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.860732][T11347] RIP: 0033:0x7fbacd19bf79 [ 394.860757][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.860784][T11347] RSP: 002b:00007fbacdfeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 394.860811][T11347] RAX: ffffffffffffffda RBX: 00007fbacd415fa0 RCX: 00007fbacd19bf79 [ 394.860830][T11347] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000028 [ 394.860848][T11347] RBP: 00007fbacd2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 394.860866][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.860887][T11347] R13: 00007fbacd416038 R14: 00007fbacd415fa0 R15: 00007ffc719c3718 [ 394.860922][T11347] [ 395.355958][T11343] CPU: 1 UID: 0 PID: 11343 Comm: syz.3.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.355998][T11343] Tainted: [L]=SOFTLOCKUP [ 395.356006][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.356018][T11343] Call Trace: [ 395.356026][T11343] [ 395.356035][T11343] dump_stack_lvl+0x100/0x190 [ 395.356070][T11343] should_fail_ex.cold+0x5/0xa [ 395.356094][T11343] get_futex_key+0x1d2/0x1620 [ 395.356122][T11343] ? __pfx_get_futex_key+0x10/0x10 [ 395.356158][T11343] futex_wait_setup+0x81/0x500 [ 395.356197][T11343] __futex_wait+0x19f/0x300 [ 395.356232][T11343] ? __pfx___futex_wait+0x10/0x10 [ 395.356268][T11343] ? __pfx_futex_wake_mark+0x10/0x10 [ 395.356303][T11343] ? futex_hash+0x2c5/0x380 [ 395.356337][T11343] futex_wait+0xed/0x380 [ 395.356369][T11343] ? __pfx_futex_wait+0x10/0x10 [ 395.356397][T11343] ? __lock_acquire+0x4a5/0x2630 [ 395.356445][T11343] do_futex+0x1ef/0x350 [ 395.356473][T11343] ? __pfx_do_futex+0x10/0x10 [ 395.356508][T11343] __x64_sys_futex+0x34f/0x4d0 [ 395.356551][T11343] ? __pfx___x64_sys_futex+0x10/0x10 [ 395.356590][T11343] do_syscall_64+0x106/0xf80 [ 395.356620][T11343] ? clear_bhb_loop+0x40/0x90 [ 395.356651][T11343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.356674][T11343] RIP: 0033:0x7f5b2199bf79 [ 395.356695][T11343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.356714][T11343] RSP: 002b:00007f5b2280e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 395.356733][T11343] RAX: ffffffffffffffda RBX: 00007f5b21c15fa8 RCX: 00007f5b2199bf79 [ 395.356748][T11343] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5b21c15fa8 [ 395.356761][T11343] RBP: 00007f5b21c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 395.356776][T11343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.356789][T11343] R13: 00007f5b21c16038 R14: 00007ffd2e0127a0 R15: 00007ffd2e012888 [ 395.356825][T11343] [ 395.988982][ T30] audit: type=1804 audit(4294967334.688:9): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1080" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 396.120214][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 396.235795][T11369] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1077'. [ 396.402242][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'. [ 396.453291][T11381] netlink: 'syz.3.1084': attribute type 1 has an invalid length. [ 396.476139][T11381] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1084'. [ 398.129973][ T30] audit: type=1806 audit(4294967336.828:10): xattr="." res=0 [ 398.195065][T11408] raw_sendmsg: syz.0.1089 forgot to set AF_INET. Fix it! [ 399.143899][T11430] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1094'. [ 399.427760][T11434] FAULT_INJECTION: forcing a failure. [ 399.427760][T11434] name failslab, interval 1, probability 0, space 0, times 0 [ 399.496018][T11434] CPU: 1 UID: 0 PID: 11434 Comm: syz.1.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.496060][T11434] Tainted: [L]=SOFTLOCKUP [ 399.496069][T11434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.496089][T11434] Call Trace: [ 399.496097][T11434] [ 399.496106][T11434] dump_stack_lvl+0x100/0x190 [ 399.496148][T11434] should_fail_ex.cold+0x5/0xa [ 399.496178][T11434] ? tomoyo_realpath_from_path+0xb6/0x690 [ 399.496212][T11434] should_failslab+0xc2/0x120 [ 399.496249][T11434] __kmalloc_noprof+0xe0/0x850 [ 399.496288][T11434] tomoyo_realpath_from_path+0xb6/0x690 [ 399.496329][T11434] tomoyo_check_open_permission+0x2af/0x3c0 [ 399.496361][T11434] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 399.496426][T11434] ? do_raw_spin_lock+0x128/0x260 [ 399.496463][T11434] ? path_get+0x61/0x80 [ 399.496505][T11434] tomoyo_file_open+0x6b/0x90 [ 399.496545][T11434] security_file_open+0xb5/0x1e0 [ 399.496578][T11434] do_dentry_open+0x5aa/0x1660 [ 399.496616][T11434] ? security_inode_permission+0xbf/0x250 [ 399.496651][T11434] vfs_open+0x82/0x3f0 [ 399.496682][T11434] path_openat+0x208c/0x31a0 [ 399.496731][T11434] ? __pfx_path_openat+0x10/0x10 [ 399.496782][T11434] do_file_open+0x20e/0x430 [ 399.496821][T11434] ? __pfx_do_file_open+0x10/0x10 [ 399.496882][T11434] ? alloc_fd+0x476/0x790 [ 399.496922][T11434] ? do_getname+0x191/0x390 [ 399.496951][T11434] do_sys_openat2+0x10d/0x1e0 [ 399.496979][T11434] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.497010][T11434] ? __do_sys_close_range+0x230/0x740 [ 399.497056][T11434] __x64_sys_openat+0x12d/0x210 [ 399.497092][T11434] ? __pfx___x64_sys_openat+0x10/0x10 [ 399.497118][T11434] ? ksys_write+0x1ac/0x250 [ 399.497170][T11434] do_syscall_64+0x106/0xf80 [ 399.497200][T11434] ? clear_bhb_loop+0x40/0x90 [ 399.497232][T11434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.497259][T11434] RIP: 0033:0x7f928419bf79 [ 399.497281][T11434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.497305][T11434] RSP: 002b:00007f928507e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 399.497329][T11434] RAX: ffffffffffffffda RBX: 00007f9284415fa0 RCX: 00007f928419bf79 [ 399.497346][T11434] RDX: 0000000000161c02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 399.497362][T11434] RBP: 00007f928507e090 R08: 0000000000000000 R09: 0000000000000000 [ 399.497377][T11434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.497391][T11434] R13: 00007f9284416038 R14: 00007f9284415fa0 R15: 00007ffec59a9608 [ 399.497427][T11434] [ 399.498256][T11434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 400.205250][T11445] FAULT_INJECTION: forcing a failure. [ 400.205250][T11445] name fail_futex, interval 1, probability 0, space 0, times 0 [ 400.218994][T11445] CPU: 1 UID: 0 PID: 11445 Comm: syz.2.1098 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.219025][T11445] Tainted: [L]=SOFTLOCKUP [ 400.219031][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.219041][T11445] Call Trace: [ 400.219046][T11445] [ 400.219052][T11445] dump_stack_lvl+0x100/0x190 [ 400.219079][T11445] should_fail_ex.cold+0x5/0xa [ 400.219097][T11445] should_fail_futex+0x4c/0x60 [ 400.219113][T11445] lock_pi_update_atomic+0x20/0x130 [ 400.219133][T11445] futex_lock_pi_atomic+0x3fb/0xaf0 [ 400.219156][T11445] futex_lock_pi+0x246/0x7b0 [ 400.219177][T11445] ? __pfx_futex_lock_pi+0x10/0x10 [ 400.219195][T11445] ? preempt_schedule_common+0x42/0xc0 [ 400.219215][T11445] ? preempt_schedule_thunk+0x16/0x30 [ 400.219241][T11445] ? __pfx_try_to_wake_up+0x10/0x10 [ 400.219285][T11445] ? futex_private_hash_put+0x107/0x1c0 [ 400.219316][T11445] ? __pfx_futex_wake_mark+0x10/0x10 [ 400.219341][T11445] ? ksys_write+0x190/0x250 [ 400.219360][T11445] ? ksys_write+0x190/0x250 [ 400.219382][T11445] do_futex+0x18a/0x350 [ 400.219399][T11445] ? __pfx_do_futex+0x10/0x10 [ 400.219421][T11445] __x64_sys_futex+0x34f/0x4d0 [ 400.219440][T11445] ? __pfx___x64_sys_futex+0x10/0x10 [ 400.219464][T11445] do_syscall_64+0x106/0xf80 [ 400.219482][T11445] ? clear_bhb_loop+0x40/0x90 [ 400.219500][T11445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.219515][T11445] RIP: 0033:0x7f7069d9bf79 [ 400.219529][T11445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.219543][T11445] RSP: 002b:00007f706abc5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 400.219558][T11445] RAX: ffffffffffffffda RBX: 00007f706a016270 RCX: 00007f7069d9bf79 [ 400.219567][T11445] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 400.219576][T11445] RBP: 00007f7069e327e0 R08: 0000000000000000 R09: 000000008000fff5 [ 400.219585][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.219593][T11445] R13: 00007f706a016308 R14: 00007f706a016270 R15: 00007ffc6b1ba5e8 [ 400.219612][T11445] [ 401.947707][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1106'. [ 401.987828][T11470] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 401.995617][T11470] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1106'. [ 402.152116][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 402.276484][T11477] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1108'. [ 402.787392][T11479] FAULT_INJECTION: forcing a failure. [ 402.787392][T11479] name failslab, interval 1, probability 0, space 0, times 0 [ 402.867160][T11479] CPU: 1 UID: 0 PID: 11479 Comm: syz.2.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.867202][T11479] Tainted: [L]=SOFTLOCKUP [ 402.867210][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.867225][T11479] Call Trace: [ 402.867234][T11479] [ 402.867243][T11479] dump_stack_lvl+0x100/0x190 [ 402.867286][T11479] should_fail_ex.cold+0x5/0xa [ 402.867315][T11479] ? tomoyo_encode2+0xfb/0x3c0 [ 402.867347][T11479] should_failslab+0xc2/0x120 [ 402.867385][T11479] __kmalloc_noprof+0xe0/0x850 [ 402.867416][T11479] ? d_absolute_path+0x136/0x1b0 [ 402.867451][T11479] tomoyo_encode2+0xfb/0x3c0 [ 402.867491][T11479] tomoyo_encode+0x29/0x50 [ 402.867522][T11479] tomoyo_realpath_from_path+0x18c/0x690 [ 402.867565][T11479] tomoyo_check_open_permission+0x2af/0x3c0 [ 402.867596][T11479] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 402.867663][T11479] ? do_raw_spin_lock+0x128/0x260 [ 402.867700][T11479] ? path_get+0x61/0x80 [ 402.867742][T11479] tomoyo_file_open+0x6b/0x90 [ 402.867790][T11479] security_file_open+0xb5/0x1e0 [ 402.867823][T11479] do_dentry_open+0x5aa/0x1660 [ 402.867861][T11479] ? security_inode_permission+0xbf/0x250 [ 402.867898][T11479] vfs_open+0x82/0x3f0 [ 402.867929][T11479] path_openat+0x208c/0x31a0 [ 402.867979][T11479] ? __pfx_path_openat+0x10/0x10 [ 402.868028][T11479] do_file_open+0x20e/0x430 [ 402.868068][T11479] ? __pfx_do_file_open+0x10/0x10 [ 402.868130][T11479] ? alloc_fd+0x476/0x790 [ 402.868168][T11479] ? do_getname+0x191/0x390 [ 402.868195][T11479] do_sys_openat2+0x10d/0x1e0 [ 402.868221][T11479] ? __pfx_do_sys_openat2+0x10/0x10 [ 402.868250][T11479] ? __do_sys_close_range+0x230/0x740 [ 402.868296][T11479] __x64_sys_openat+0x12d/0x210 [ 402.868326][T11479] ? __pfx___x64_sys_openat+0x10/0x10 [ 402.868353][T11479] ? ksys_write+0x1ac/0x250 [ 402.868399][T11479] do_syscall_64+0x106/0xf80 [ 402.868432][T11479] ? clear_bhb_loop+0x40/0x90 [ 402.868465][T11479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.868492][T11479] RIP: 0033:0x7f7069d9bf79 [ 402.868515][T11479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.868540][T11479] RSP: 002b:00007f706ac28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 402.868564][T11479] RAX: ffffffffffffffda RBX: 00007f706a015fa0 RCX: 00007f7069d9bf79 [ 402.868580][T11479] RDX: 0000000000161c02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 402.868597][T11479] RBP: 00007f706ac28090 R08: 0000000000000000 R09: 0000000000000000 [ 402.868612][T11479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.868627][T11479] R13: 00007f706a016038 R14: 00007f706a015fa0 R15: 00007ffc6b1ba5e8 [ 402.868662][T11479] [ 402.872952][T11479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 405.302644][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1119'. [ 405.360058][T11524] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1119'. [ 406.280333][T11533] FAULT_INJECTION: forcing a failure. [ 406.280333][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 406.375977][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.1.1121 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.376002][T11533] Tainted: [L]=SOFTLOCKUP [ 406.376007][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 406.376017][T11533] Call Trace: [ 406.376024][T11533] [ 406.376033][T11533] dump_stack_lvl+0x100/0x190 [ 406.376072][T11533] should_fail_ex.cold+0x5/0xa [ 406.376101][T11533] should_failslab+0xc2/0x120 [ 406.376134][T11533] __kmalloc_cache_noprof+0x7a/0x6f0 [ 406.376150][T11533] ? usbdev_open+0x9d/0x870 [ 406.376169][T11533] usbdev_open+0x9d/0x870 [ 406.376184][T11533] ? kobject_get_unless_zero+0x156/0x200 [ 406.376206][T11533] ? __pfx_usbdev_open+0x10/0x10 [ 406.376219][T11533] ? chrdev_open+0x10b/0x6a0 [ 406.376238][T11533] ? chrdev_open+0x10b/0x6a0 [ 406.376261][T11533] ? __pfx_usbdev_open+0x10/0x10 [ 406.376275][T11533] chrdev_open+0x234/0x6a0 [ 406.376294][T11533] ? __pfx_apparmor_file_open+0x10/0x10 [ 406.376309][T11533] ? __pfx_chrdev_open+0x10/0x10 [ 406.376330][T11533] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 406.376355][T11533] do_dentry_open+0x6d8/0x1660 [ 406.376374][T11533] ? __pfx_chrdev_open+0x10/0x10 [ 406.376405][T11533] vfs_open+0x82/0x3f0 [ 406.376422][T11533] path_openat+0x208c/0x31a0 [ 406.376448][T11533] ? __pfx_path_openat+0x10/0x10 [ 406.376475][T11533] do_file_open+0x20e/0x430 [ 406.376496][T11533] ? __pfx_do_file_open+0x10/0x10 [ 406.376529][T11533] ? alloc_fd+0x476/0x790 [ 406.376551][T11533] ? do_getname+0x191/0x390 [ 406.376566][T11533] do_sys_openat2+0x10d/0x1e0 [ 406.376581][T11533] ? __pfx_do_sys_openat2+0x10/0x10 [ 406.376598][T11533] ? __do_sys_close_range+0x230/0x740 [ 406.376622][T11533] __x64_sys_openat+0x12d/0x210 [ 406.376638][T11533] ? __pfx___x64_sys_openat+0x10/0x10 [ 406.376652][T11533] ? ksys_write+0x1ac/0x250 [ 406.376682][T11533] do_syscall_64+0x106/0xf80 [ 406.376700][T11533] ? clear_bhb_loop+0x40/0x90 [ 406.376717][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.376732][T11533] RIP: 0033:0x7f928419bf79 [ 406.376745][T11533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.376759][T11533] RSP: 002b:00007f928507e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 406.376773][T11533] RAX: ffffffffffffffda RBX: 00007f9284415fa0 RCX: 00007f928419bf79 [ 406.376782][T11533] RDX: 0000000000161c02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 406.376791][T11533] RBP: 00007f928507e090 R08: 0000000000000000 R09: 0000000000000000 [ 406.376800][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.376808][T11533] R13: 00007f9284416038 R14: 00007f9284415fa0 R15: 00007ffec59a9608 [ 406.376826][T11533] [ 407.591697][T11546] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 412.580336][T11624] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 412.602268][T11622] zswap: compressor not available [ 412.636058][T11624] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 412.646146][T11624] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 412.676013][T11624] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 412.684715][T11624] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 412.856153][T11624] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 412.976003][T11624] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 413.111628][T11624] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 413.260594][T11624] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 413.306317][T11624] page dumped because: unmovable page [ 413.311755][T11624] page_owner tracks the page as allocated [ 413.473209][T11624] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 413.516005][T11624] post_alloc_hook+0x153/0x170 [ 413.520860][T11624] get_page_from_freelist+0x111d/0x3140 [ 413.589937][T11624] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 413.645974][T11624] alloc_pages_mpol+0x1fb/0x550 [ 413.655732][T11624] alloc_pages_noprof+0x131/0x390 [ 413.726086][T11624] skb_page_frag_refill+0x365/0x5b0 [ 413.735293][T11624] try_fill_recv+0x7f1/0x2950 [ 413.788408][T11624] virtnet_open+0x5f2/0x960 [ 413.792993][T11624] __dev_open+0x3ad/0x960 [ 413.865983][T11624] __dev_change_flags+0x558/0x6f0 [ 413.921260][T11624] netif_change_flags+0x8d/0x160 [ 413.957692][T11624] dev_change_flags+0xba/0x250 [ 414.035473][T11624] devinet_ioctl+0x110b/0x1f10 [ 414.115948][T11624] inet_ioctl+0x3aa/0x3f0 [ 414.120381][T11624] sock_do_ioctl+0x118/0x280 [ 414.186108][T11624] sock_ioctl+0x599/0x6b0 [ 414.190496][T11624] page last free pid 1 tgid 1 stack trace: [ 414.285927][T11624] __free_frozen_pages+0x7ca/0x10a0 [ 414.291202][T11624] free_contig_range+0xde/0x1d0 [ 414.328720][T11624] destroy_args+0xa8/0x7a0 [ 414.333229][T11624] debug_vm_pgtable+0x1b66/0x34c0 [ 414.376004][T11624] do_one_initcall+0x11d/0x760 [ 414.406058][T11624] kernel_init_freeable+0x6e5/0x7a0 [ 414.423983][T11624] kernel_init+0x1f/0x1e0 [ 414.459155][T11624] ret_from_fork+0x754/0xd80 [ 414.463836][T11624] ret_from_fork_asm+0x1a/0x30 [ 414.606723][T11651] block nbd2: not configured, cannot reconfigure [ 415.175717][T11664] nvme_fcloop: unknown parameter or missing value 'ª' [ 415.339107][T11663] nvme_fcloop: unknown parameter or missing value '0' [ 417.253084][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 417.329928][T11704] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1158'. [ 418.023246][T11717] vhci_hcd: not connected 4 [ 418.043155][T11719] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1164'. [ 418.096263][T11719] random: crng reseeded on system resumption [ 418.275354][T11368] Process accounting paused [ 418.438111][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 418.553638][T11731] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1165'. [ 420.657220][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1171'. [ 420.875402][T11767] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1171'. [ 424.091468][T11815] can: request_module (can-proto-4) failed. [ 424.159738][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1182'. [ 424.355880][T11830] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1182'. [ 428.502589][T11889] netlink: 'syz.3.1202': attribute type 4 has an invalid length. [ 428.520590][T11889] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1202'. [ 429.187689][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 429.209757][T11905] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1206'. [ 430.224632][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'. [ 431.202661][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 431.245207][T11956] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1217'. [ 432.138424][T11974] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 432.340636][T11979] FAULT_INJECTION: forcing a failure. [ 432.340636][T11979] name failslab, interval 1, probability 0, space 0, times 0 [ 432.400660][T11979] CPU: 0 UID: 0 PID: 11979 Comm: syz.0.1222 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.400724][T11979] Tainted: [L]=SOFTLOCKUP [ 432.400735][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.400762][T11979] Call Trace: [ 432.400772][T11979] [ 432.400784][T11979] dump_stack_lvl+0x100/0x190 [ 432.400836][T11979] should_fail_ex.cold+0x5/0xa [ 432.400871][T11979] should_failslab+0xc2/0x120 [ 432.400916][T11979] __kmalloc_cache_noprof+0x7a/0x6f0 [ 432.400948][T11979] ? __v4l2_subdev_state_alloc+0x53/0x410 [ 432.400990][T11979] __v4l2_subdev_state_alloc+0x53/0x410 [ 432.401025][T11979] subdev_open+0xa6/0x510 [ 432.401057][T11979] v4l2_open+0x1d2/0x490 [ 432.401098][T11979] ? __pfx_v4l2_open+0x10/0x10 [ 432.401135][T11979] chrdev_open+0x234/0x6a0 [ 432.401176][T11979] ? __pfx_apparmor_file_open+0x10/0x10 [ 432.401206][T11979] ? __pfx_chrdev_open+0x10/0x10 [ 432.401252][T11979] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 432.401303][T11979] do_dentry_open+0x6d8/0x1660 [ 432.401343][T11979] ? __pfx_chrdev_open+0x10/0x10 [ 432.401394][T11979] vfs_open+0x82/0x3f0 [ 432.401429][T11979] path_openat+0x208c/0x31a0 [ 432.401477][T11979] ? futex_unqueue+0x13d/0x2c0 [ 432.401509][T11979] ? stack_depot_save_flags+0x27/0x9d0 [ 432.401548][T11979] ? __pfx_path_openat+0x10/0x10 [ 432.401595][T11979] ? kasan_save_stack+0x3f/0x50 [ 432.401632][T11979] ? kasan_save_stack+0x30/0x50 [ 432.401672][T11979] ? kasan_save_track+0x14/0x30 [ 432.401708][T11979] ? __kasan_slab_alloc+0x89/0x90 [ 432.401755][T11979] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 432.401792][T11979] ? do_getname+0x35/0x390 [ 432.401825][T11979] do_file_open+0x20e/0x430 [ 432.401872][T11979] ? __pfx_do_file_open+0x10/0x10 [ 432.401944][T11979] ? find_held_lock+0x2b/0x80 [ 432.401988][T11979] ? __might_fault+0xc5/0x140 [ 432.402020][T11979] ? __might_fault+0xc5/0x140 [ 432.402060][T11979] file_open_name+0x198/0x3b0 [ 432.402092][T11979] ? __pfx_file_open_name+0x10/0x10 [ 432.402132][T11979] ? do_getname+0x191/0x390 [ 432.402165][T11979] acct_on+0xa4/0x9e0 [ 432.402204][T11979] ? __pfx_acct_on+0x10/0x10 [ 432.402242][T11979] ? bpf_lsm_capable+0x9/0x10 [ 432.402283][T11979] ? security_capable+0x80/0x260 [ 432.402333][T11979] __x64_sys_acct+0x81/0x1e0 [ 432.402370][T11979] ? lockdep_hardirqs_on+0x78/0x100 [ 432.402409][T11979] do_syscall_64+0x106/0xf80 [ 432.402447][T11979] ? clear_bhb_loop+0x40/0x90 [ 432.402483][T11979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.402527][T11979] RIP: 0033:0x7fbacd19bf79 [ 432.402551][T11979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.402581][T11979] RSP: 002b:00007fbacdfeb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 432.402610][T11979] RAX: ffffffffffffffda RBX: 00007fbacd415fa0 RCX: 00007fbacd19bf79 [ 432.402629][T11979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 432.402646][T11979] RBP: 00007fbacd2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 432.402663][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.402679][T11979] R13: 00007fbacd416038 R14: 00007fbacd415fa0 R15: 00007ffc719c3718 [ 432.402716][T11979] [ 434.016141][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 434.062030][T12002] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 434.106093][T12002] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1229'. [ 434.115028][T12002] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 435.589185][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 437.048401][T12030] sctp: [Deprecated]: syz.2.1234 (pid 12030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.048401][T12030] Use struct sctp_sack_info instead [ 438.463471][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 438.569592][T12069] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 438.580119][T12069] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1241'. [ 438.624821][T12069] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 439.267421][T12079] sysfs_service_op_store: Client not running :-5: [ 440.194620][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.201060][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.044299][T12090] zswap: compressor not available [ 441.202488][T12098] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 441.229719][T12104] netlink: 4128 bytes leftover after parsing attributes in process `syz.0.1245'. [ 441.260708][T12098] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 441.391447][T12098] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 441.466020][T12098] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 441.495942][T12098] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 441.504740][T12098] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 441.541781][T12098] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 441.555966][T12098] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 441.564714][T12098] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 441.604380][T12098] page dumped because: unmovable page [ 441.610664][T12098] page_owner tracks the page as allocated [ 441.626514][T12098] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 441.667189][T12098] post_alloc_hook+0x153/0x170 [ 441.672039][T12098] get_page_from_freelist+0x111d/0x3140 [ 441.677801][T12098] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 441.684759][T12098] alloc_pages_mpol+0x1fb/0x550 [ 441.690343][T12098] alloc_pages_noprof+0x131/0x390 [ 441.695439][T12098] skb_page_frag_refill+0x365/0x5b0 [ 441.726089][T12098] try_fill_recv+0x7f1/0x2950 [ 441.730856][T12098] virtnet_open+0x5f2/0x960 [ 441.735407][T12098] __dev_open+0x3ad/0x960 [ 441.756059][T12098] __dev_change_flags+0x558/0x6f0 [ 441.761179][T12098] netif_change_flags+0x8d/0x160 [ 441.776042][T12098] dev_change_flags+0xba/0x250 [ 441.892774][T12098] devinet_ioctl+0x110b/0x1f10 [ 441.904241][T12098] inet_ioctl+0x3aa/0x3f0 [ 441.925938][T12098] sock_do_ioctl+0x118/0x280 [ 441.930674][T12098] sock_ioctl+0x599/0x6b0 [ 441.935120][T12098] page last free pid 1 tgid 1 stack trace: [ 441.993048][T12098] __free_frozen_pages+0x7ca/0x10a0 [ 442.005939][T12098] free_contig_range+0xde/0x1d0 [ 442.016179][T12098] destroy_args+0xa8/0x7a0 [ 442.020743][T12098] debug_vm_pgtable+0x1b66/0x34c0 [ 442.045899][T12098] do_one_initcall+0x11d/0x760 [ 442.050812][T12098] kernel_init_freeable+0x6e5/0x7a0 [ 442.056248][T12109] FAULT_INJECTION: forcing a failure. [ 442.056248][T12109] name fail_futex, interval 1, probability 0, space 0, times 0 [ 442.066554][T12098] kernel_init+0x1f/0x1e0 [ 442.073464][T12098] ret_from_fork+0x754/0xd80 [ 442.095902][T12098] ret_from_fork_asm+0x1a/0x30 [ 442.135471][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.3.1249 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.135520][T12109] Tainted: [L]=SOFTLOCKUP [ 442.135531][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.135546][T12109] Call Trace: [ 442.135555][T12109] [ 442.135564][T12109] dump_stack_lvl+0x100/0x190 [ 442.135613][T12109] should_fail_ex.cold+0x5/0xa [ 442.135647][T12109] get_futex_key+0x1d2/0x1620 [ 442.135684][T12109] ? __pfx_get_futex_key+0x10/0x10 [ 442.135730][T12109] ? find_held_lock+0x2b/0x80 [ 442.135771][T12109] ? futex_unqueue+0x133/0x2c0 [ 442.135800][T12109] ? futex_unqueue+0x133/0x2c0 [ 442.135836][T12109] futex_wait_requeue_pi+0x1f5/0x870 [ 442.135874][T12109] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 442.135909][T12109] ? __pfx___futex_wait+0x10/0x10 [ 442.135942][T12109] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 442.135993][T12109] ? lockdep_hardirqs_on+0x78/0x100 [ 442.136065][T12109] ? __pfx_futex_wake_mark+0x10/0x10 [ 442.136118][T12109] ? up_write+0x290/0x4f0 [ 442.136163][T12109] do_futex+0x24f/0x350 [ 442.136196][T12109] ? __pfx_do_futex+0x10/0x10 [ 442.136238][T12109] __x64_sys_futex+0x34f/0x4d0 [ 442.136276][T12109] ? __pfx___x64_sys_futex+0x10/0x10 [ 442.136322][T12109] do_syscall_64+0x106/0xf80 [ 442.136358][T12109] ? clear_bhb_loop+0x40/0x90 [ 442.136393][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.136423][T12109] RIP: 0033:0x7f5b2199bf79 [ 442.136448][T12109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.136477][T12109] RSP: 002b:00007f5b2280e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 442.136505][T12109] RAX: ffffffffffffffda RBX: 00007f5b21c15fa0 RCX: 00007f5b2199bf79 [ 442.136525][T12109] RDX: 0000000000000001 RSI: 000000000000000b RDI: 0000200000000080 [ 442.136543][T12109] RBP: 00007f5b21a327e0 R08: 0000000000000000 R09: 00000000fffffffa [ 442.136562][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.136580][T12109] R13: 00007f5b21c16038 R14: 00007f5b21c15fa0 R15: 00007ffd2e012888 [ 442.136619][T12109] [ 446.089957][T12146] zswap: compressor not available [ 446.644141][T12171] FAULT_INJECTION: forcing a failure. [ 446.644141][T12171] name failslab, interval 1, probability 0, space 0, times 0 [ 446.701108][T12171] CPU: 0 UID: 0 PID: 12171 Comm: syz.0.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.701159][T12171] Tainted: [L]=SOFTLOCKUP [ 446.701170][T12171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 446.701187][T12171] Call Trace: [ 446.701196][T12171] [ 446.701207][T12171] dump_stack_lvl+0x100/0x190 [ 446.701256][T12171] should_fail_ex.cold+0x5/0xa [ 446.701291][T12171] should_failslab+0xc2/0x120 [ 446.701342][T12171] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 446.701379][T12171] ? fuse_request_alloc+0x22/0x200 [ 446.701431][T12171] fuse_request_alloc+0x22/0x200 [ 446.701468][T12171] fuse_get_req+0x74a/0xfe0 [ 446.701520][T12171] ? __pfx_fuse_get_req+0x10/0x10 [ 446.701583][T12171] fuse_simple_background+0x464/0x5e0 [ 446.701626][T12171] ? kasan_save_track+0x14/0x30 [ 446.701668][T12171] cuse_channel_open+0x561/0x7f0 [ 446.701696][T12171] ? __pfx_cuse_channel_open+0x10/0x10 [ 446.701727][T12171] misc_open+0x26d/0x450 [ 446.701759][T12171] ? __pfx_misc_open+0x10/0x10 [ 446.701791][T12171] chrdev_open+0x234/0x6a0 [ 446.701833][T12171] ? __pfx_apparmor_file_open+0x10/0x10 [ 446.701863][T12171] ? __pfx_chrdev_open+0x10/0x10 [ 446.701906][T12171] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 446.701956][T12171] do_dentry_open+0x6d8/0x1660 [ 446.701996][T12171] ? __pfx_chrdev_open+0x10/0x10 [ 446.702047][T12171] vfs_open+0x82/0x3f0 [ 446.702082][T12171] path_openat+0x208c/0x31a0 [ 446.702136][T12171] ? __pfx_path_openat+0x10/0x10 [ 446.702190][T12171] do_file_open+0x20e/0x430 [ 446.702234][T12171] ? __pfx_do_file_open+0x10/0x10 [ 446.702301][T12171] ? alloc_fd+0x476/0x790 [ 446.702343][T12171] ? do_getname+0x191/0x390 [ 446.702375][T12171] do_sys_openat2+0x10d/0x1e0 [ 446.702407][T12171] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.702440][T12171] ? __fget_files+0x21f/0x3d0 [ 446.702486][T12171] __x64_sys_openat+0x12d/0x210 [ 446.702526][T12171] ? __pfx___x64_sys_openat+0x10/0x10 [ 446.702573][T12171] do_syscall_64+0x106/0xf80 [ 446.702609][T12171] ? clear_bhb_loop+0x40/0x90 [ 446.702644][T12171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.702675][T12171] RIP: 0033:0x7fbacd19bf79 [ 446.702700][T12171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.702728][T12171] RSP: 002b:00007fbacdfeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.702757][T12171] RAX: ffffffffffffffda RBX: 00007fbacd415fa0 RCX: 00007fbacd19bf79 [ 446.702777][T12171] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 446.702795][T12171] RBP: 00007fbacd2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 446.702813][T12171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.702831][T12171] R13: 00007fbacd416038 R14: 00007fbacd415fa0 R15: 00007ffc719c3718 [ 446.702869][T12171] [ 447.910761][T12194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1271'. [ 447.946462][T12194] team0: Port device team_slave_0 removed [ 448.489228][T12187] Process accounting resumed [ 452.298929][T12261] Invalid ELF header magic: != ELF [ 455.252124][T12299] blktrace: Concurrent blktraces are not allowed on loop2 [ 455.833195][T12311] [U] [ 455.836191][T12311] [U] [ 455.838868][T12311] [U] [ 455.841537][T12311] [U] [ 455.891019][T12311] [U] [ 455.893785][T12311] [U] [ 455.896507][T12311] [U] [ 455.899226][T12311] [U] [ 456.077296][T12311] [U] [ 456.080065][T12311] [U] [ 456.082795][T12311] [U] [ 456.085517][T12311] [U] [ 456.089506][T12311] [U] [ 456.092219][T12311] [U] [ 456.094892][T12311] [U] [ 456.097566][T12311] [U] [ 456.100523][T12311] [U] [ 456.103234][T12311] [U] [ 456.105925][T12311] [U] [ 456.108620][T12311] [U] [ 456.139704][T12311] [U] [ 456.142473][T12311] [U] [ 456.145204][T12311] [U] [ 456.147900][T12311] [U] [ 456.150742][T12311] [U] [ 456.153466][T12311] [U] [ 456.156181][T12311] [U] [ 456.158888][T12311] [U] [ 456.166649][T12311] [U] [ 456.169390][T12311] [U] [ 456.172067][T12311] [U] [ 456.174740][T12311] [U] [ 456.202681][T12311] [U] [ 456.205442][T12311] [U] [ 456.208133][T12311] [U] [ 456.210808][T12311] [U] [ 456.287299][T12311] [U] [ 456.290066][T12311] [U] [ 456.292792][T12311] [U] [ 456.295523][T12311] [U] [ 456.301794][T12311] [U] [ 456.304552][T12311] [U] [ 456.307307][T12311] [U] [ 456.310035][T12311] [U] [ 456.314003][T12311] [U] [ 456.316751][T12311] [U] [ 456.319465][T12311] [U] [ 456.322169][T12311] [U] [ 456.353524][T12313] program syz.1.1299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.375967][T12311] [U] [ 456.378737][T12311] [U] [ 456.381469][T12311] [U] [ 456.384201][T12311] [U] [ 456.391487][T12311] [U] [ 456.394253][T12311] [U] [ 456.396983][T12311] [U] [ 456.399708][T12311] [U] [ 456.412863][T12311] [U] [ 456.415644][T12311] [U] [ 456.418410][T12311] [U] [ 456.421148][T12311] [U] [ 456.466047][T12311] [U] [ 456.468833][T12311] [U] [ 456.471548][T12311] [U] [ 456.474262][T12311] [U] [ 456.481524][T12311] [U] [ 459.548555][T12364] FAULT_INJECTION: forcing a failure. [ 459.548555][T12364] name failslab, interval 1, probability 0, space 0, times 0 [ 459.565890][T12364] CPU: 0 UID: 0 PID: 12364 Comm: syz.0.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.565937][T12364] Tainted: [L]=SOFTLOCKUP [ 459.565949][T12364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.565966][T12364] Call Trace: [ 459.565976][T12364] [ 459.565986][T12364] dump_stack_lvl+0x100/0x190 [ 459.566040][T12364] should_fail_ex.cold+0x5/0xa [ 459.566072][T12364] should_failslab+0xc2/0x120 [ 459.566116][T12364] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 459.566153][T12364] ? __d_alloc+0x34/0xa80 [ 459.566202][T12364] __d_alloc+0x34/0xa80 [ 459.566248][T12364] d_alloc_pseudo+0x1c/0xc0 [ 459.566280][T12364] alloc_file_pseudo+0xcf/0x230 [ 459.566310][T12364] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 459.566338][T12364] ? alloc_fd+0x476/0x790 [ 459.566380][T12364] sock_alloc_file+0x50/0x210 [ 459.566421][T12364] __sys_socket+0x1c0/0x260 [ 459.566449][T12364] ? __pfx___sys_socket+0x10/0x10 [ 459.566488][T12364] __x64_sys_socket+0x72/0xb0 [ 459.566516][T12364] ? lockdep_hardirqs_on+0x78/0x100 [ 459.566555][T12364] do_syscall_64+0x106/0xf80 [ 459.566591][T12364] ? clear_bhb_loop+0x40/0x90 [ 459.566627][T12364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.566656][T12364] RIP: 0033:0x7fbacd19bf79 [ 459.566681][T12364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.566712][T12364] RSP: 002b:00007fbacdfeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 459.566740][T12364] RAX: ffffffffffffffda RBX: 00007fbacd415fa0 RCX: 00007fbacd19bf79 [ 459.566760][T12364] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 459.566777][T12364] RBP: 00007fbacd2327e0 R08: 0000000000000000 R09: 0000000000000000 [ 459.566795][T12364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.566812][T12364] R13: 00007fbacd416038 R14: 00007fbacd415fa0 R15: 00007ffc719c3718 [ 459.566850][T12364] [ 463.909784][T12422] bond0: option lp_interval: invalid value () [ 463.955801][T12422] bond0: option lp_interval: allowed values 1 - 2147483647 [ 464.027498][T12422] sd 0:0:1:0: PR command failed: 1026 [ 464.032980][T12422] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 464.115769][T12422] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 465.520522][T12448] nbd: couldn't find device at index 33904 [ 465.757506][T12457] FAULT_INJECTION: forcing a failure. [ 465.757506][T12457] name failslab, interval 1, probability 0, space 0, times 0 [ 465.788793][T12457] CPU: 0 UID: 0 PID: 12457 Comm: syz.1.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.788841][T12457] Tainted: [L]=SOFTLOCKUP [ 465.788852][T12457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.788868][T12457] Call Trace: [ 465.788878][T12457] [ 465.788889][T12457] dump_stack_lvl+0x100/0x190 [ 465.788937][T12457] should_fail_ex.cold+0x5/0xa [ 465.788973][T12457] should_failslab+0xc2/0x120 [ 465.789014][T12457] __kmalloc_cache_noprof+0x7a/0x6f0 [ 465.789047][T12457] ? get_device_parent+0x29a/0x4c0 [ 465.789086][T12457] get_device_parent+0x29a/0x4c0 [ 465.789121][T12457] device_add+0x1ad/0x1950 [ 465.789158][T12457] ? __pfx_device_add+0x10/0x10 [ 465.789190][T12457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 465.789231][T12457] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 465.789275][T12457] wiphy_register+0x1e5b/0x2d30 [ 465.789314][T12457] ? __rtnl_unlock+0xb9/0xf0 [ 465.789364][T12457] ? netdev_run_todo+0x750/0x12c0 [ 465.789410][T12457] ? __pfx_wiphy_register+0x10/0x10 [ 465.789453][T12457] ? __asan_memset+0x23/0x50 [ 465.789485][T12457] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 465.789542][T12457] ieee80211_register_hw+0x2cfd/0x4140 [ 465.789602][T12457] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 465.789644][T12457] ? __pfx___debug_object_init+0x10/0x10 [ 465.789681][T12457] ? find_held_lock+0x2b/0x80 [ 465.789726][T12457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 465.789770][T12457] ? __hrtimer_setup+0x178/0x280 [ 465.789812][T12457] mac80211_hwsim_new_radio+0x2847/0x57d0 [ 465.789883][T12457] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 465.789933][T12457] ? __asan_memcpy+0x3c/0x60 [ 465.789971][T12457] hwsim_new_radio_nl+0xc1f/0x1340 [ 465.790020][T12457] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 465.790078][T12457] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 465.790123][T12457] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 465.790176][T12457] genl_family_rcv_msg_doit+0x214/0x300 [ 465.790223][T12457] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 465.790267][T12457] ? genl_get_cmd+0x3ef/0x720 [ 465.790315][T12457] ? bpf_lsm_capable+0x9/0x10 [ 465.790361][T12457] ? security_capable+0x80/0x260 [ 465.790403][T12457] ? ns_capable+0xd2/0xf0 [ 465.790447][T12457] genl_rcv_msg+0x560/0x800 [ 465.790496][T12457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.790540][T12457] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 465.790599][T12457] netlink_rcv_skb+0x159/0x420 [ 465.790638][T12457] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.790682][T12457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.790738][T12457] ? netlink_deliver_tap+0x1ae/0xcc0 [ 465.790781][T12457] genl_rcv+0x28/0x40 [ 465.790820][T12457] netlink_unicast+0x5aa/0x870 [ 465.790865][T12457] ? __pfx_netlink_unicast+0x10/0x10 [ 465.790919][T12457] netlink_sendmsg+0x8b0/0xda0 [ 465.790966][T12457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.791003][T12457] ? __import_iovec+0x1d2/0x640 [ 465.791042][T12457] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 465.791091][T12457] ____sys_sendmsg+0xa54/0xc30 [ 465.791139][T12457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.791187][T12457] ? try_to_wake_up+0x644/0x1a80 [ 465.791240][T12457] ___sys_sendmsg+0x190/0x1e0 [ 465.791271][T12457] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.791300][T12457] ? futex_private_hash_put+0x107/0x1c0 [ 465.791385][T12457] __sys_sendmsg+0x170/0x220 [ 465.791425][T12457] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.791461][T12457] ? __x64_sys_futex+0x34f/0x4d0 [ 465.791519][T12457] do_syscall_64+0x106/0xf80 [ 465.791555][T12457] ? clear_bhb_loop+0x40/0x90 [ 465.791590][T12457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.791620][T12457] RIP: 0033:0x7f928419bf79 [ 465.791646][T12457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.791675][T12457] RSP: 002b:00007f928507e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.791702][T12457] RAX: ffffffffffffffda RBX: 00007f9284415fa0 RCX: 00007f928419bf79 [ 465.791722][T12457] RDX: 0000000004048000 RSI: 0000200000004240 RDI: 0000000000000004 [ 465.791740][T12457] RBP: 00007f92842327e0 R08: 0000000000000000 R09: 0000000000000000 [ 465.791758][T12457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.791775][T12457] R13: 00007f9284416038 R14: 00007f9284415fa0 R15: 00007ffec59a9608 [ 465.791815][T12457] [ 467.785729][ T8661] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 467.793378][ T8661] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 467.939274][T12485] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 468.391828][T12500] blktrace: Concurrent blktraces are not allowed on loop2 [ 469.186229][T12514] zswap: compressor not available [ 469.195494][T12513] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7202 pfn:0x78036 [ 469.316272][T12513] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 469.324079][T12513] raw: 00fff00000000001 ffffea00010b78c8 ffffea0001e02ec8 0000000000000000 [ 469.425965][T12513] raw: 0000000000007202 ffff8880346dc881 00000001ffffffff 0000000000000000 [ 469.435616][T12513] page dumped because: unmovable page [ 469.456128][T12513] page_owner tracks the page as allocated [ 469.461954][T12513] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 12471, tgid 12471 (syz.1.1340), ts 469403485069, free_ts 469387246424 [ 469.592814][T12513] post_alloc_hook+0x153/0x170 [ 469.626981][T12513] get_page_from_freelist+0x111d/0x3140 [ 469.705952][T12513] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 469.738205][T12513] alloc_pages_mpol+0x1fb/0x550 [ 469.795999][T12513] folio_alloc_mpol_noprof+0x36/0x340 [ 469.814614][T12513] shmem_alloc_folio+0x135/0x160 [ 469.820345][T12526] zswap: compressor not available [ 469.829423][T12513] shmem_alloc_and_add_folio+0x371/0xd40 [ 469.886361][T12513] shmem_get_folio_gfp+0x6ab/0x1900 [ 469.916022][T12513] shmem_write_begin+0x1a4/0x420 [ 469.955925][T12513] generic_perform_write+0x292/0xa40 [ 469.971866][T12513] shmem_file_write_iter+0x10e/0x140 [ 470.005984][T12513] __kernel_write_iter+0x2ac/0x920 [ 470.011199][T12513] dump_user_range+0x3f9/0xb50 [ 470.115975][T12513] elf_core_dump+0x2d16/0x3c60 [ 470.123910][T12513] vfs_coredump+0x27b4/0x5570 [ 470.132672][T12513] get_signal+0x1f2a/0x21e0 [ 470.159551][T12513] page last free pid 12500 tgid 12496 stack trace: [ 470.226315][T12513] free_unref_folios+0xac6/0x1760 [ 470.231455][T12513] folios_put_refs+0x53c/0x840 [ 470.247003][T12513] free_pages_and_swap_cache+0x242/0x480 [ 470.253758][T12513] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 470.309407][T12513] tlb_finish_mmu+0x1b0/0x810 [ 470.351089][T12513] vms_clear_ptes+0x55c/0x790 [ 470.376723][T12513] __mmap_region+0x5d0/0x2760 [ 470.396801][T12513] mmap_region+0x180/0x3e0 [ 470.425533][T12513] do_mmap+0xc63/0x12f0 [ 470.440408][T12513] vm_mmap_pgoff+0x29e/0x470 [ 470.445079][T12513] ksys_mmap_pgoff+0x7d/0x5b0 [ 470.476021][T12513] __x64_sys_mmap+0x125/0x190 [ 470.480774][T12513] do_syscall_64+0x106/0xf80 [ 470.485367][T12513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.793340][T12558] program syz.0.1354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.429432][T12656] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 477.900161][T12698] FAULT_INJECTION: forcing a failure. [ 477.900161][T12698] name failslab, interval 1, probability 0, space 0, times 0 [ 478.007938][T12698] CPU: 1 UID: 0 PID: 12698 Comm: syz.3.1386 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.007987][T12698] Tainted: [L]=SOFTLOCKUP [ 478.007998][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.008015][T12698] Call Trace: [ 478.008025][T12698] [ 478.008037][T12698] dump_stack_lvl+0x100/0x190 [ 478.008086][T12698] should_fail_ex.cold+0x5/0xa [ 478.008121][T12698] should_failslab+0xc2/0x120 [ 478.008165][T12698] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 478.008202][T12698] ? __proc_create+0x2cb/0x8c0 [ 478.008242][T12698] __proc_create+0x2cb/0x8c0 [ 478.008278][T12698] ? __pfx___proc_create+0x10/0x10 [ 478.008327][T12698] proc_create_reg+0x75/0x170 [ 478.008366][T12698] proc_create_net_data+0x8e/0x1c0 [ 478.008410][T12698] ? __pfx_proc_create_net_data+0x10/0x10 [ 478.008446][T12698] ? lockdep_init_map_type+0x5c/0x250 [ 478.008485][T12698] ? lockdep_init_map_type+0x5c/0x250 [ 478.008521][T12698] ? __pfx_igmp_net_init+0x10/0x10 [ 478.008552][T12698] igmp_net_init+0x5a/0x150 [ 478.008584][T12698] ops_init+0x1e2/0x5f0 [ 478.008626][T12698] setup_net+0x118/0x3a0 [ 478.008665][T12698] ? __pfx_setup_net+0x10/0x10 [ 478.008702][T12698] ? lockdep_init_map_type+0x5c/0x250 [ 478.008738][T12698] ? mutex_init_lockep+0x110/0x150 [ 478.008779][T12698] copy_net_ns+0x46f/0x7c0 [ 478.008824][T12698] create_new_namespaces+0x3ea/0xac0 [ 478.008879][T12698] copy_namespaces+0x468/0x5e0 [ 478.008909][T12698] copy_process+0x3226/0x7a10 [ 478.008964][T12698] ? __pfx_copy_process+0x10/0x10 [ 478.008997][T12698] ? find_held_lock+0x2b/0x80 [ 478.009046][T12698] ? futex_private_hash_put+0x107/0x1c0 [ 478.009085][T12698] kernel_clone+0xfc/0x9a0 [ 478.009120][T12698] ? __pfx_kernel_clone+0x10/0x10 [ 478.009161][T12698] ? __pfx_sock_write_iter+0x10/0x10 [ 478.009214][T12698] __do_sys_clone+0xd9/0x120 [ 478.009247][T12698] ? __pfx___do_sys_clone+0x10/0x10 [ 478.009310][T12698] do_syscall_64+0x106/0xf80 [ 478.009346][T12698] ? clear_bhb_loop+0x40/0x90 [ 478.009381][T12698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.009418][T12698] RIP: 0033:0x7f5b2199bf79 [ 478.009443][T12698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.009472][T12698] RSP: 002b:00007f5b227ecfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 478.009500][T12698] RAX: ffffffffffffffda RBX: 00007f5b21c16090 RCX: 00007f5b2199bf79 [ 478.009519][T12698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 478.009536][T12698] RBP: 00007f5b21a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 478.009554][T12698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 478.009571][T12698] R13: 00007f5b21c16128 R14: 00007f5b21c16090 R15: 00007ffd2e012888 [ 478.009608][T12698] [ 482.308024][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1402'. [ 482.325936][ T30] audit: type=1800 audit(4294967298.720:11): pid=12770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1402" name="dbroot" dev="configfs" ino=41513 res=0 errno=0 [ 482.416734][T12770] team0: Port device team_slave_1 removed [ 483.633359][T12784] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 483.739029][T12778] zswap: compressor not available [ 483.765885][T12784] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 483.831657][T12784] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 483.839665][T12784] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 484.010850][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 484.053909][T12784] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 484.131647][T12784] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 484.246011][T12784] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 484.254764][T12784] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 484.586030][T12784] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 484.615939][T12784] page dumped because: unmovable page [ 484.640532][T12784] page_owner tracks the page as allocated [ 484.675895][T12784] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 484.743383][T12784] post_alloc_hook+0x153/0x170 [ 484.768180][T12784] get_page_from_freelist+0x111d/0x3140 [ 484.793766][T12784] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 484.821901][T12784] alloc_pages_mpol+0x1fb/0x550 [ 484.845590][T12784] alloc_pages_noprof+0x131/0x390 [ 484.871744][T12784] skb_page_frag_refill+0x365/0x5b0 [ 484.899717][T12784] try_fill_recv+0x7f1/0x2950 [ 484.925928][T12784] virtnet_open+0x5f2/0x960 [ 484.946162][T12784] __dev_open+0x3ad/0x960 [ 484.950573][T12784] __dev_change_flags+0x558/0x6f0 [ 484.955686][T12784] netif_change_flags+0x8d/0x160 [ 485.016521][T12784] dev_change_flags+0xba/0x250 [ 485.021463][T12784] devinet_ioctl+0x110b/0x1f10 [ 485.026464][T12784] inet_ioctl+0x3aa/0x3f0 [ 485.030920][T12784] sock_do_ioctl+0x118/0x280 [ 485.035621][T12784] sock_ioctl+0x599/0x6b0 [ 485.040280][T12784] page last free pid 1 tgid 1 stack trace: [ 485.047995][T12784] __free_frozen_pages+0x7ca/0x10a0 [ 485.053396][T12784] free_contig_range+0xde/0x1d0 [ 485.061165][T12784] destroy_args+0xa8/0x7a0 [ 485.065765][T12784] debug_vm_pgtable+0x1b66/0x34c0 [ 485.070961][T12784] do_one_initcall+0x11d/0x760 [ 485.077515][T12784] kernel_init_freeable+0x6e5/0x7a0 [ 485.082847][T12784] kernel_init+0x1f/0x1e0 [ 485.096165][T12784] ret_from_fork+0x754/0xd80 [ 485.114905][T12784] ret_from_fork_asm+0x1a/0x30 [ 485.527107][T12815] zswap: compressor not available [ 488.518144][T12857] FAULT_INJECTION: forcing a failure. [ 488.518144][T12857] name failslab, interval 1, probability 0, space 0, times 0 [ 488.536437][T12857] CPU: 1 UID: 0 PID: 12857 Comm: syz.2.1421 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.536476][T12857] Tainted: [L]=SOFTLOCKUP [ 488.536485][T12857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.536499][T12857] Call Trace: [ 488.536508][T12857] [ 488.536518][T12857] dump_stack_lvl+0x100/0x190 [ 488.536561][T12857] should_fail_ex.cold+0x5/0xa [ 488.536591][T12857] should_failslab+0xc2/0x120 [ 488.536628][T12857] __kmalloc_cache_noprof+0x7a/0x6f0 [ 488.536655][T12857] ? snd_pcm_lib_malloc_pages+0x388/0x9b0 [ 488.536686][T12857] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.536730][T12857] snd_pcm_lib_malloc_pages+0x388/0x9b0 [ 488.536762][T12857] ? fixup_unreferenced_params+0x4b5/0xea0 [ 488.536795][T12857] snd_pcm_hw_params+0x1729/0x1cb0 [ 488.536835][T12857] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 488.536867][T12857] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 488.536914][T12857] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 488.536963][T12857] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 488.536996][T12857] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 488.537040][T12857] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 488.537073][T12857] ? __pfx___mutex_lock+0x10/0x10 [ 488.537129][T12857] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 488.537160][T12857] snd_pcm_oss_sync+0x265/0x840 [ 488.537192][T12857] snd_pcm_oss_release+0x238/0x300 [ 488.537219][T12857] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 488.537247][T12857] __fput+0x3ff/0xb40 [ 488.537288][T12857] task_work_run+0x150/0x240 [ 488.537324][T12857] ? __pfx_task_work_run+0x10/0x10 [ 488.537368][T12857] exit_to_user_mode_loop+0x100/0x4a0 [ 488.537408][T12857] do_syscall_64+0x668/0xf80 [ 488.537438][T12857] ? clear_bhb_loop+0x40/0x90 [ 488.537471][T12857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.537497][T12857] RIP: 0033:0x7f7069d9bf79 [ 488.537519][T12857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.537543][T12857] RSP: 002b:00007f706ac07028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 488.537568][T12857] RAX: 0000000000000000 RBX: 00007f706a016090 RCX: 00007f7069d9bf79 [ 488.537584][T12857] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 488.537600][T12857] RBP: 00007f7069e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 488.537615][T12857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.537630][T12857] R13: 00007f706a016128 R14: 00007f706a016090 R15: 00007ffc6b1ba5e8 [ 488.537667][T12857] [ 489.274543][ T30] audit: type=1800 audit(4294967305.700:12): pid=12866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1424" name="dbroot" dev="configfs" ino=41711 res=0 errno=0 [ 489.723066][T12875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1427'. [ 489.757830][T12875] dummy0: entered promiscuous mode [ 489.776993][T12875] dummy0: entered allmulticast mode [ 489.889962][T12880] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 489.928383][T12880] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 489.972749][T12880] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 490.011642][T12880] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 490.056313][T12880] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 490.084207][T12880] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 490.103501][T12880] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 490.127124][T12880] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 490.149929][T12880] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 490.169113][T12880] page dumped because: unmovable page [ 490.180622][T12880] page_owner tracks the page as allocated [ 490.220126][T12880] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 490.264749][T12884] zswap: compressor not available [ 490.296007][T12880] post_alloc_hook+0x153/0x170 [ 490.327528][T12880] get_page_from_freelist+0x111d/0x3140 [ 490.351034][T12880] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 490.395892][T12880] alloc_pages_mpol+0x1fb/0x550 [ 490.400838][T12880] alloc_pages_noprof+0x131/0x390 [ 490.452594][T12880] skb_page_frag_refill+0x365/0x5b0 [ 490.472237][T12880] try_fill_recv+0x7f1/0x2950 [ 490.538211][T12880] virtnet_open+0x5f2/0x960 [ 490.543247][T12880] __dev_open+0x3ad/0x960 [ 490.607019][T12880] __dev_change_flags+0x558/0x6f0 [ 490.612145][T12880] netif_change_flags+0x8d/0x160 [ 490.652192][T12880] dev_change_flags+0xba/0x250 [ 490.682468][T12880] devinet_ioctl+0x110b/0x1f10 [ 490.692047][T12880] inet_ioctl+0x3aa/0x3f0 [ 490.709266][T12880] sock_do_ioctl+0x118/0x280 [ 490.720741][T12880] sock_ioctl+0x599/0x6b0 [ 490.725155][T12880] page last free pid 1 tgid 1 stack trace: [ 490.784238][T12880] __free_frozen_pages+0x7ca/0x10a0 [ 490.812420][T12880] free_contig_range+0xde/0x1d0 [ 490.842394][T12880] destroy_args+0xa8/0x7a0 [ 490.888276][T12880] debug_vm_pgtable+0x1b66/0x34c0 [ 490.907040][T12880] do_one_initcall+0x11d/0x760 [ 490.926200][T12880] kernel_init_freeable+0x6e5/0x7a0 [ 490.931482][T12880] kernel_init+0x1f/0x1e0 [ 490.971446][T12880] ret_from_fork+0x754/0xd80 [ 491.003052][T12880] ret_from_fork_asm+0x1a/0x30 [ 491.691266][T12922] Invalid ELF header magic: != ELF [ 491.924250][T12922] Invalid ELF header magic: != ELF [ 492.009615][T12922] Invalid ELF header magic: != ELF [ 492.205706][T12922] Invalid ELF header magic: != ELF [ 492.301240][T12933] FAULT_INJECTION: forcing a failure. [ 492.301240][T12933] name failslab, interval 1, probability 0, space 0, times 0 [ 492.375950][T12933] CPU: 0 UID: 0 PID: 12933 Comm: syz.0.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.376000][T12933] Tainted: [L]=SOFTLOCKUP [ 492.376010][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.376028][T12933] Call Trace: [ 492.376039][T12933] [ 492.376051][T12933] dump_stack_lvl+0x100/0x190 [ 492.376102][T12933] should_fail_ex.cold+0x5/0xa [ 492.376138][T12933] should_failslab+0xc2/0x120 [ 492.376183][T12933] __kmalloc_cache_noprof+0x7a/0x6f0 [ 492.376215][T12933] ? allocate_file_region_entries+0x1a0/0x620 [ 492.376262][T12933] allocate_file_region_entries+0x1a0/0x620 [ 492.376310][T12933] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 492.376361][T12933] region_chg+0x85/0x140 [ 492.376399][T12933] __vma_reservation_common+0x376/0x720 [ 492.376440][T12933] ? __pfx___vma_reservation_common+0x10/0x10 [ 492.376480][T12933] ? __pfx___might_resched+0x10/0x10 [ 492.376528][T12933] hugetlb_no_page+0xb69/0x1b30 [ 492.376573][T12933] hugetlb_fault+0x5df/0x1500 [ 492.376609][T12933] ? __pfx_hugetlb_fault+0x10/0x10 [ 492.376666][T12933] ? find_vma+0xbf/0x140 [ 492.376709][T12933] ? __pfx_find_vma+0x10/0x10 [ 492.376756][T12933] handle_mm_fault+0x5f1/0xa20 [ 492.376799][T12933] do_user_addr_fault+0x74c/0x12f0 [ 492.376856][T12933] exc_page_fault+0x6f/0xd0 [ 492.376896][T12933] asm_exc_page_fault+0x26/0x30 [ 492.376924][T12933] RIP: 0010:__put_user_4+0xd/0x20 [ 492.376961][T12933] Code: 66 89 01 31 c9 0f 01 ca e9 80 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 57 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 492.376990][T12933] RSP: 0018:ffffc90004ce7e58 EFLAGS: 00050202 [ 492.377014][T12933] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000007 [ 492.377032][T12933] RDX: 0000000000000000 RSI: ffffffff8255b8f1 RDI: ffff888036ee23dc [ 492.377051][T12933] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000000001c6 [ 492.377068][T12933] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff9200099cfce [ 492.377086][T12933] R13: 0000000000000007 R14: 0000000000000000 R15: dffffc0000000000 [ 492.377116][T12933] ? __might_fault+0x111/0x140 [ 492.377157][T12933] __do_sys_prctl+0xd67/0x2330 [ 492.377199][T12933] ? __pfx___do_sys_prctl+0x10/0x10 [ 492.377250][T12933] do_syscall_64+0x106/0xf80 [ 492.377286][T12933] ? clear_bhb_loop+0x40/0x90 [ 492.377321][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.377350][T12933] RIP: 0033:0x7fbacd19bf79 [ 492.377376][T12933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.377405][T12933] RSP: 002b:00007fbacdfca028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 492.377430][T12933] RAX: ffffffffffffffda RBX: 00007fbacd416090 RCX: 00007fbacd19bf79 [ 492.377451][T12933] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 492.377469][T12933] RBP: 00007fbacd2327e0 R08: 0000000000000001 R09: 0000000000000000 [ 492.377487][T12933] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 492.377505][T12933] R13: 00007fbacd416128 R14: 00007fbacd416090 R15: 00007ffc719c3718 [ 492.377546][T12933] [ 493.394505][T12953] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 493.436032][T12953] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 493.475970][T12953] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 493.483610][T12953] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 493.506012][T12953] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 493.566662][T12953] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 493.576245][T12953] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 493.586419][T12953] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 493.595203][T12953] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 493.601302][T12948] zswap: compressor not available [ 493.642076][T12953] page dumped because: unmovable page [ 493.662271][T12953] page_owner tracks the page as allocated [ 493.690361][T12953] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 493.735788][T12953] post_alloc_hook+0x153/0x170 [ 493.765070][T12953] get_page_from_freelist+0x111d/0x3140 [ 493.816065][T12953] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 493.822085][T12953] alloc_pages_mpol+0x1fb/0x550 [ 493.875950][T12953] alloc_pages_noprof+0x131/0x390 [ 493.881064][T12953] skb_page_frag_refill+0x365/0x5b0 [ 493.943402][T12953] try_fill_recv+0x7f1/0x2950 [ 493.953517][T12953] virtnet_open+0x5f2/0x960 [ 493.972694][T12953] __dev_open+0x3ad/0x960 [ 493.997309][T12953] __dev_change_flags+0x558/0x6f0 [ 494.009632][T12953] netif_change_flags+0x8d/0x160 [ 494.031277][T12953] dev_change_flags+0xba/0x250 [ 494.051585][T12953] devinet_ioctl+0x110b/0x1f10 [ 494.066009][T12953] inet_ioctl+0x3aa/0x3f0 [ 494.076245][T12953] sock_do_ioctl+0x118/0x280 [ 494.091940][T12953] sock_ioctl+0x599/0x6b0 [ 494.105892][T12953] page last free pid 1 tgid 1 stack trace: [ 494.115933][T12953] __free_frozen_pages+0x7ca/0x10a0 [ 494.121238][T12953] free_contig_range+0xde/0x1d0 [ 494.145875][T12953] destroy_args+0xa8/0x7a0 [ 494.155902][T12953] debug_vm_pgtable+0x1b66/0x34c0 [ 494.165894][T12953] do_one_initcall+0x11d/0x760 [ 494.170762][T12953] kernel_init_freeable+0x6e5/0x7a0 [ 494.195898][T12953] kernel_init+0x1f/0x1e0 [ 494.200302][T12953] ret_from_fork+0x754/0xd80 [ 494.205169][T12953] ret_from_fork_asm+0x1a/0x30 [ 495.107355][T12968] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 495.187029][T12968] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 495.195606][T12968] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 495.308039][T12976] zswap: compressor not available [ 495.342832][T12968] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 495.376767][T12968] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 495.395756][T12968] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 495.419792][T12968] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 495.428939][T12968] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 495.456013][T12968] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 495.464743][T12968] page dumped because: unmovable page [ 495.498895][T12968] page_owner tracks the page as allocated [ 495.514975][T12968] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 495.625982][T12968] post_alloc_hook+0x153/0x170 [ 495.630844][T12968] get_page_from_freelist+0x111d/0x3140 [ 495.690249][T12968] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 495.716439][T12968] alloc_pages_mpol+0x1fb/0x550 [ 495.725919][T12968] alloc_pages_noprof+0x131/0x390 [ 495.741436][T12968] skb_page_frag_refill+0x365/0x5b0 [ 495.769848][T12968] try_fill_recv+0x7f1/0x2950 [ 495.774618][T12968] virtnet_open+0x5f2/0x960 [ 495.806826][T12968] __dev_open+0x3ad/0x960 [ 495.823527][T12968] __dev_change_flags+0x558/0x6f0 [ 495.833661][T12968] netif_change_flags+0x8d/0x160 [ 495.853178][T12968] dev_change_flags+0xba/0x250 [ 495.873501][T12968] devinet_ioctl+0x110b/0x1f10 [ 496.136023][T12968] inet_ioctl+0x3aa/0x3f0 [ 496.142740][T12968] sock_do_ioctl+0x118/0x280 [ 496.148181][T12968] sock_ioctl+0x599/0x6b0 [ 496.157428][T12968] page last free pid 1 tgid 1 stack trace: [ 496.174328][T12968] __free_frozen_pages+0x7ca/0x10a0 [ 496.195864][T12968] free_contig_range+0xde/0x1d0 [ 496.200795][T12968] destroy_args+0xa8/0x7a0 [ 496.205289][T12968] debug_vm_pgtable+0x1b66/0x34c0 [ 496.225916][T12968] do_one_initcall+0x11d/0x760 [ 496.230768][T12968] kernel_init_freeable+0x6e5/0x7a0 [ 496.255960][T12968] kernel_init+0x1f/0x1e0 [ 496.265421][T12968] ret_from_fork+0x754/0xd80 [ 496.275616][T12968] ret_from_fork_asm+0x1a/0x30 [ 497.129911][T13006] zswap: compressor not available [ 497.247138][T13013] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79400 [ 497.306000][T13013] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 497.362633][T13013] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 497.427764][T13013] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 497.451907][T13013] raw: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 497.536138][T13013] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 497.544925][T13013] head: 0000000000000000 0000000000000000 00000016ffffffff 0000000000000000 [ 497.601913][T13013] head: 00fff00000000003 ffffea0001e50001 00000000ffffffff 00000000ffffffff [ 497.667134][T13013] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 497.720010][T13013] page dumped because: unmovable page [ 497.725419][T13013] page_owner tracks the page as allocated [ 497.771558][T13013] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5488, tgid 5488 (dhcpcd), ts 51366462127, free_ts 24524943002 [ 497.805961][T13013] post_alloc_hook+0x153/0x170 [ 497.810814][T13013] get_page_from_freelist+0x111d/0x3140 [ 497.875896][T13013] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 497.885272][T13013] alloc_pages_mpol+0x1fb/0x550 [ 497.890810][T13013] alloc_pages_noprof+0x131/0x390 [ 497.896247][T13013] skb_page_frag_refill+0x365/0x5b0 [ 497.902599][T13013] try_fill_recv+0x7f1/0x2950 [ 497.916947][T13013] virtnet_open+0x5f2/0x960 [ 497.923548][T13013] __dev_open+0x3ad/0x960 [ 497.938909][T13013] __dev_change_flags+0x558/0x6f0 [ 497.943980][T13013] netif_change_flags+0x8d/0x160 [ 497.989969][T13013] dev_change_flags+0xba/0x250 [ 497.994788][T13013] devinet_ioctl+0x110b/0x1f10 [ 498.031152][T13013] inet_ioctl+0x3aa/0x3f0 [ 498.035569][T13013] sock_do_ioctl+0x118/0x280 [ 498.051373][T13013] sock_ioctl+0x599/0x6b0 [ 498.061523][T13013] page last free pid 1 tgid 1 stack trace: [ 498.075276][T13013] __free_frozen_pages+0x7ca/0x10a0 [ 498.090420][T13013] free_contig_range+0xde/0x1d0 [ 498.119070][T13013] destroy_args+0xa8/0x7a0 [ 498.134030][T13013] debug_vm_pgtable+0x1b66/0x34c0 [ 498.154298][T13013] do_one_initcall+0x11d/0x760 [ 498.166488][T13013] kernel_init_freeable+0x6e5/0x7a0 [ 498.175926][T13013] kernel_init+0x1f/0x1e0 [ 498.180327][T13013] ret_from_fork+0x754/0xd80 [ 498.184960][T13013] ret_from_fork_asm+0x1a/0x30 [ 498.648520][T13053] Setting dangerous option i915.mitigations - tainting kernel [ 501.632755][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.639171][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.379077][T13123] ================================================================== [ 502.379098][T13123] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 502.379130][T13123] Write of size 8 at addr ffffc90004a89000 by task syz.3.1478/13123 [ 502.379144][T13123] [ 502.379154][T13123] CPU: 1 UID: 0 PID: 13123 Comm: syz.3.1478 Tainted: G U L syzkaller #0 PREEMPT(full) [ 502.379177][T13123] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 502.379184][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.379194][T13123] Call Trace: [ 502.379199][T13123] [ 502.379206][T13123] dump_stack_lvl+0x100/0x190 [ 502.379227][T13123] print_report+0x156/0x4c9 [ 502.379248][T13123] ? _raw_spin_lock_irqsave+0x52/0x60 [ 502.379266][T13123] ? __virt_addr_valid+0x81/0x620 [ 502.379286][T13123] ? sys_imageblit+0x19fb/0x1d60 [ 502.379307][T13123] kasan_report+0xdf/0x1e0 [ 502.379329][T13123] ? sys_imageblit+0x19fb/0x1d60 [ 502.379351][T13123] sys_imageblit+0x19fb/0x1d60 [ 502.379373][T13123] ? __pfx_sys_imageblit+0x10/0x10 [ 502.379394][T13123] ? prb_read_valid+0x78/0xa0 [ 502.379412][T13123] ? __pfx_prb_read_valid+0x10/0x10 [ 502.379431][T13123] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 502.379456][T13123] soft_cursor+0x524/0xa10 [ 502.379476][T13123] ? fb_get_color_depth+0x120/0x250 [ 502.379494][T13123] bit_cursor+0xe58/0x16f0 [ 502.379523][T13123] ? __pfx_bit_cursor+0x10/0x10 [ 502.379550][T13123] ? __lock_acquire+0x4a5/0x2630 [ 502.379582][T13123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.379619][T13123] ? get_color+0x1da/0x450 [ 502.379633][T13123] ? __pfx_bit_cursor+0x10/0x10 [ 502.379650][T13123] fbcon_cursor+0x43c/0x5e0 [ 502.379664][T13123] ? add_softcursor+0x1c0/0x290 [ 502.379684][T13123] set_cursor+0x1db/0x250 [ 502.379701][T13123] con_write+0x89/0xb0 [ 502.379722][T13123] do_output_char+0x63b/0x850 [ 502.379736][T13123] n_tty_write+0x528/0x12d0 [ 502.379755][T13123] ? __pfx_n_tty_write+0x10/0x10 [ 502.379770][T13123] ? trace_kmalloc+0x101/0x130 [ 502.379791][T13123] ? __pfx_woken_wake_function+0x10/0x10 [ 502.379821][T13123] ? rcu_is_watching+0x12/0xc0 [ 502.379842][T13123] ? file_tty_write.isra.0+0x694/0x890 [ 502.379864][T13123] ? kfree+0x2ec/0x6b0 [ 502.379878][T13123] ? __pfx_n_tty_write+0x10/0x10 [ 502.379894][T13123] file_tty_write.isra.0+0x4d2/0x890 [ 502.379917][T13123] redirected_tty_write+0xd4/0x120 [ 502.379938][T13123] vfs_write+0x6ac/0x1070 [ 502.379957][T13123] ? __pfx_redirected_tty_write+0x10/0x10 [ 502.379979][T13123] ? __pfx_vfs_write+0x10/0x10 [ 502.379997][T13123] ? find_held_lock+0x2b/0x80 [ 502.380023][T13123] ksys_write+0x12a/0x250 [ 502.380042][T13123] ? __pfx_ksys_write+0x10/0x10 [ 502.380063][T13123] do_syscall_64+0x106/0xf80 [ 502.380081][T13123] ? clear_bhb_loop+0x40/0x90 [ 502.380098][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.380113][T13123] RIP: 0033:0x7f5b2199bf79 [ 502.380126][T13123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.380141][T13123] RSP: 002b:00007f5b2280e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.380156][T13123] RAX: ffffffffffffffda RBX: 00007f5b21c15fa0 RCX: 00007f5b2199bf79 [ 502.380167][T13123] RDX: 0000000000000dd4 RSI: 0000200000000840 RDI: 0000000000000006 [ 502.380176][T13123] RBP: 00007f5b21a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 502.380185][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.380194][T13123] R13: 00007f5b21c16038 R14: 00007f5b21c15fa0 R15: 00007ffd2e012888 [ 502.380209][T13123] [ 502.380214][T13123] [ 502.380218][T13123] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004789000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 502.380255][T13123] Memory state around the buggy address: [ 502.380263][T13123] ffffc90004a88f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.380275][T13123] ffffc90004a88f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 502.380285][T13123] >ffffc90004a89000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 502.380297][T13123] ^ [ 502.380306][T13123] ffffc90004a89080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 502.380320][T13123] ffffc90004a89100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 502.380329][T13123] ================================================================== [ 502.380356][T13123] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 502.380369][T13123] CPU: 1 UID: 0 PID: 13123 Comm: syz.3.1478 Tainted: G U L syzkaller #0 PREEMPT(full) [ 502.380393][T13123] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 502.380400][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.380413][T13123] Call Trace: [ 502.380418][T13123] [ 502.380424][T13123] dump_stack_lvl+0x100/0x190 [ 502.380463][T13123] vpanic+0x552/0x970 [ 502.380478][T13123] ? __pfx_vpanic+0x10/0x10 [ 502.380495][T13123] ? sys_imageblit+0x19fb/0x1d60 [ 502.380516][T13123] panic+0xd1/0xe0 [ 502.380529][T13123] ? __pfx_panic+0x10/0x10 [ 502.380544][T13123] ? sys_imageblit+0x19fb/0x1d60 [ 502.380568][T13123] ? preempt_schedule_common+0x42/0xc0 [ 502.380588][T13123] check_panic_on_warn.cold+0x19/0x34 [ 502.380604][T13123] end_report.part.0+0x3a/0x90 [ 502.380624][T13123] kasan_report.cold+0xe/0x18 [ 502.380646][T13123] ? sys_imageblit+0x19fb/0x1d60 [ 502.380670][T13123] sys_imageblit+0x19fb/0x1d60 [ 502.380693][T13123] ? __pfx_sys_imageblit+0x10/0x10 [ 502.380714][T13123] ? prb_read_valid+0x78/0xa0 [ 502.380732][T13123] ? __pfx_prb_read_valid+0x10/0x10 [ 502.380751][T13123] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 502.380776][T13123] soft_cursor+0x524/0xa10 [ 502.380800][T13123] ? fb_get_color_depth+0x120/0x250 [ 502.380819][T13123] bit_cursor+0xe58/0x16f0 [ 502.380839][T13123] ? __pfx_bit_cursor+0x10/0x10 [ 502.380857][T13123] ? __lock_acquire+0x4a5/0x2630 [ 502.380877][T13123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.380900][T13123] ? get_color+0x1da/0x450 [ 502.380914][T13123] ? __pfx_bit_cursor+0x10/0x10 [ 502.380931][T13123] fbcon_cursor+0x43c/0x5e0 [ 502.380950][T13123] ? add_softcursor+0x1c0/0x290 [ 502.380970][T13123] set_cursor+0x1db/0x250 [ 502.380992][T13123] con_write+0x89/0xb0 [ 502.381014][T13123] do_output_char+0x63b/0x850 [ 502.381029][T13123] n_tty_write+0x528/0x12d0 [ 502.381048][T13123] ? __pfx_n_tty_write+0x10/0x10 [ 502.381063][T13123] ? trace_kmalloc+0x101/0x130 [ 502.381084][T13123] ? __pfx_woken_wake_function+0x10/0x10 [ 502.381105][T13123] ? rcu_is_watching+0x12/0xc0 [ 502.381125][T13123] ? file_tty_write.isra.0+0x694/0x890 [ 502.381145][T13123] ? kfree+0x2ec/0x6b0 [ 502.381160][T13123] ? __pfx_n_tty_write+0x10/0x10 [ 502.381176][T13123] file_tty_write.isra.0+0x4d2/0x890 [ 502.381200][T13123] redirected_tty_write+0xd4/0x120 [ 502.381221][T13123] vfs_write+0x6ac/0x1070 [ 502.381240][T13123] ? __pfx_redirected_tty_write+0x10/0x10 [ 502.381262][T13123] ? __pfx_vfs_write+0x10/0x10 [ 502.381280][T13123] ? find_held_lock+0x2b/0x80 [ 502.381307][T13123] ksys_write+0x12a/0x250 [ 502.381326][T13123] ? __pfx_ksys_write+0x10/0x10 [ 502.381347][T13123] do_syscall_64+0x106/0xf80 [ 502.381366][T13123] ? clear_bhb_loop+0x40/0x90 [ 502.381382][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.381397][T13123] RIP: 0033:0x7f5b2199bf79 [ 502.381409][T13123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.381425][T13123] RSP: 002b:00007f5b2280e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.381440][T13123] RAX: ffffffffffffffda RBX: 00007f5b21c15fa0 RCX: 00007f5b2199bf79 [ 502.381450][T13123] RDX: 0000000000000dd4 RSI: 0000200000000840 RDI: 0000000000000006 [ 502.381459][T13123] RBP: 00007f5b21a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 502.381468][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.381477][T13123] R13: 00007f5b21c16038 R14: 00007f5b21c15fa0 R15: 00007ffd2e012888 [ 502.381493][T13123] [ 502.381952][T13123] Kernel Offset: disabled