last executing test programs: 18m41.662628772s ago: executing program 2 (id=1661): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dynamic_debug/control\x00', 0x8101, 0x0) write$auto(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0xfffffffffffffc01, 0xc000000000, 0x6fedf9c9, 0x0, 0x92, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x9a28) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) read$auto_proc_fail_nth_operations_base(r2, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20100, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) open_tree$auto(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup\x00', 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$auto(0x3, 0x0, 0x6a) sendto$auto(0xffffffffffffffff, 0x0, 0x6fffff9, 0xfffffff8, 0x0, 0x36) clone$auto(0x7, 0x2000400000d, 0xfffffffffffffffc, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0x5, 0x9b7f, 0x2, 0x8000) 18m40.042500068s ago: executing program 2 (id=1664): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec2\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000002c40)=0xd0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x24}}, 0x20040894) 18m39.821796846s ago: executing program 2 (id=1665): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x1d, 0x1, 0x100000) close_range$auto(0x2, r0, 0x0) open(0x0, 0x26241, 0x20) socket(0xa, 0x80000, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6c) socket(0xa, 0x1, 0x108) listen$auto(0x3, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0x15, 0x5, 0x0) arch_prctl$auto(0x3, 0x2e142f8f) setsockopt$auto(r3, 0x1, 0x1d, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 18m38.567759708s ago: executing program 2 (id=1669): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, 0x0) mmap$auto(0x0, 0x2040009, 0x20000000df, 0x400000015, 0x7, 0x28000) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x0, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r1, 0xfffffffc) mmap$auto(0x80000000, 0xfffffffffffffffc, 0x1c, 0x40eb1, 0xffffffffffffffff, 0x300000000000) socket(0xb, 0x80000, 0x8000037) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x0, 0x2000000005, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) setfsuid$auto(0x0) write$auto(0xca, &(0x7f0000000040)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d8) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00058008000600", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790481008286dd000004000280"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x205, 0xa, 0x4, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 18m37.04867854s ago: executing program 2 (id=1671): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0xa8441, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x103000, 0x0) setreuid$auto(0x8, 0x9d7) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) read$auto_fops_ulong_ro_(0xffffffffffffffff, &(0x7f0000000340)=""/234, 0xea) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) setsockopt$auto_SO_RCVTIMEO_NEW(0xffffffffffffffff, 0xffff, 0x42, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) 18m35.899040201s ago: executing program 2 (id=1673): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012abd7000fddbdf251400000088f8008008000100", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44845}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x4, 0x3000, 0x0, 0x7, 0x400a, 0xffffffffffffffff, [0xfffffffe], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x1, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3658, 0x6, 0x2, 0x9, 0x5, 0x3, 0x2, 0xb0, 0x7, 0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x667, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x8000000000000, 0x8000000000, 0x6]}, 0x1ff, 0xb559) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/oom_adj\x00', 0x40, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x5e1000, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c06, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare$auto(0xa9) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x80, 0x0) read$auto_tracing_pipe_fops_trace(r1, 0x0, 0xf0) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0xa, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) open(0x0, 0xa240, 0x1de) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) 18m20.189935984s ago: executing program 32 (id=1673): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01012abd7000fddbdf251400000088f8008008000100", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44845}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x4, 0x3000, 0x0, 0x7, 0x400a, 0xffffffffffffffff, [0xfffffffe], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x1, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3658, 0x6, 0x2, 0x9, 0x5, 0x3, 0x2, 0xb0, 0x7, 0x6, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x667, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x8000000000000, 0x8000000000, 0x6]}, 0x1ff, 0xb559) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/oom_adj\x00', 0x40, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x5e1000, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c06, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare$auto(0xa9) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x80, 0x0) read$auto_tracing_pipe_fops_trace(r1, 0x0, 0xf0) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0xa, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) open(0x0, 0xa240, 0x1de) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) 14m15.102924574s ago: executing program 0 (id=2316): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x85, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(r0, 0x541a, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x23, 0x3, 0x3e) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x5, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x20, 0x0) fsopen$auto(0x0, 0x1) shmget$auto(0x8, 0x7, 0x568d1af1) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) bpf$auto(0x14, &(0x7f00000000c0)=@enable_stats={0x1}, 0x7) mmap$auto(0x0, 0x2000a, 0x10000000000e1, 0xeb2, 0x401, 0x8000) arch_prctl$auto(0x5005, 0x9) 14m12.419134923s ago: executing program 0 (id=2323): socket(0x11, 0x3, 0x8) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b4a, 0xffffffffffffffff) io_submit$auto(0x2, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x2, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0x1001, 0x0, 0x6}) socket(0x2, 0x2, 0x73) r1 = socket(0x2, 0x80002, 0x73) bind$auto(r1, &(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x6b) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) 14m12.237642068s ago: executing program 0 (id=2324): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x2, 0x1) r1 = socket(0x2, 0x2, 0x88) setsockopt$auto(r1, 0x0, 0x20, 0x0, 0x6) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r0, 0x10000}, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x80302, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) bpf$auto(0xc, 0xffffffffffffffff, 0x0) clone$auto(0x20003b43, 0xe86, 0x0, 0x0, 0x2) 14m12.032217081s ago: executing program 0 (id=2326): mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x8200, 0x0) read$auto_bridges_fops_(r1, &(0x7f0000000040)=""/5, 0x5) readv$auto(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000000c0)="40339b751108005b"}, 0x5) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x20000001, 0x2, 0x3, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr2/statistics/tx_heartbeat_errors\x00', 0xe0082, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) getpid() r6 = setfsuid$auto(0xee00) getegid() sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002dc0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRES32=r6], 0x2550}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b50", 0xfdef) sendfile$auto(r4, r4, 0x0, 0x800400000000ef0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) 14m11.047245362s ago: executing program 0 (id=2330): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) r0 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) prctl$auto(0x9, 0xffffffff, 0x0, 0x81, 0x80000003) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/anycast6\x00', 0x214280, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x147602, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0xf, 0x1, 0xfff) r2 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0x18, 0xfffffffffffffffa, 0x401) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@isdn={0x22, 0x7, 0x0, 0x3, 0x6}, 0x54) getrandom$auto(0x0, 0x6000000, 0x3) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x8, &(0x7f0000002a40)={0x0, 0x7fffffff}, 0x6, 0x0) listxattrat$auto(r2, 0x0, 0x5, 0x0, 0x15de) kill$auto(0x0, 0x21) read$auto_tracing_fops_trace(r0, &(0x7f0000000580)=""/4096, 0x1000) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x86) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) 14m9.813766057s ago: executing program 0 (id=2337): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x3, 0x13}, 0x5}, 0xfffffff9, 0x2, 0x0) ioctl$auto(r0, 0x891d, 0x24) 13m54.566978557s ago: executing program 33 (id=2337): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x3, 0x13}, 0x5}, 0xfffffff9, 0x2, 0x0) ioctl$auto(r0, 0x891d, 0x24) 10m11.586777908s ago: executing program 4 (id=3052): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000001180), 0xe40, 0x0) readv$auto(0x3, &(0x7f0000000180)={0x0, 0xffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) unshare$auto(0x40000080) mmap$auto(0xc5f1, 0x8, 0x2, 0x9b72, 0x5, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendfile$auto(r1, r1, 0x0, 0x7fffe000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r4 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000002c0), 0x44100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x80, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x15, 0x5, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) mmap$auto(0x0, 0x40009, 0x4, 0x109b72, r4, 0x27fff) 10m9.358604594s ago: executing program 4 (id=3058): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec20\x00', 0x1, 0x0) ioctl$auto_CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, 0x0) mmap$auto(0x4000000000000004, 0x7, 0x81, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r1, 0x3, 0x7f, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1f, 0x4}}, 0x81) 10m9.21048758s ago: executing program 4 (id=3059): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r0, 0xc0844123, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x401, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x40104d07, 0x7) madvise$auto(0x4, 0x7, 0x2) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setxattr$auto(0x0, 0x0, 0x0, 0x183, 0x2) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x4, 0x4, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x4e, "c09ff5ed41bbddf5ec670665ae11c28a06ce7c8c0aa5a8dc5489c3b9232a5a02", @raw=0x9652}) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "e471293847f3fcb6bbc90d34558b"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2404c080) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 10m8.22519674s ago: executing program 4 (id=3063): mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1, 0x2, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x27, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x54fa, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x200088c5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x3, 0x6) recvfrom$auto(r0, &(0x7f0000000340)="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", 0xb6, 0x400, &(0x7f0000000080)=@phonet={0x23, 0x80, 0x0, 0x9}, &(0x7f0000000100)=0x4) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) r5 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r5) r7 = fcntl$auto_F_GETOWN(r5, 0x9, 0x8) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="3c040000", @ANYRES16=r6, @ANYBLOB="00042dbd7000fbdbdf25260000005a032f8004007400e7ad18c1201e597c2494a4ff8bd485f83093755d8dee95751a2589541ff462881c26f806ce55d4af018e166702edfff506e34040b45ec2d368c7e4497d5bee4f8eb3f84921377a652ccbf9657b83831a9574b2c94c14891b7ededbb683862a1533b1f603979d8133bafad1be24385ee1915517c1d6f7c9981a487b9c77350155cf65e2a52f6e7c5fd73e339deb1f7ea5278b17ae5bf77ff63ad95b79f50dcff891e6d72ad80844ed0853a102cdfe91933b0baba695082c95acda6a303032465a899e97da2bd5dbdb4a3412bb94050a0b5667c7501b9f9b0e45d149da4e18f98af3083791d707dd2d20c363118d0339761668c9343b8d11b8d51bbcb50b0b2185a14aca0a5f7b5ecedce94b38530f0111df631cdbad8bc6e13245273a0f2166730b428d77016e3a20efae65b91a01b68004004f802383ab6aa78ec4aca320de394d8e1b0690fc7417a407cd2e60b5048a329c76fb355d7bda38fa71941137dc30e80bc370d8bba9f4b02438466b6338859ff7d58de7dda00818cd7368afdba7ff896d824184ed9dc1e3fbd1f895e10d2b712309f791b553fab9491041d4301e7149de5baede93b08ac8c20d233db8003f675b7da7e06dc88351259225f2447f4117580be886c0d69149cc1313199659bed075413b8be2bcbc89a2e42ef05a45d804fb31239a905f243a5dc77b778b40c1b88b5586c981fd385bb53d28532ca8e84f213d7d063d24b73992b18bb44d363d76f5bbfc6bc671b23d636b394f0e32971ad08700fb103e50012c5060338a82a25d6e39ff0f0000b955e88ef004b32df1b45f46565e579b194a5f2cd241dd2704009e80000032ca91224e54188da758957dca8b312adbc611d897ff36d237cb4c0424367d7c87231634182f29e4b16a10fe1450a4855195f9af9a84be4823940574925a845cbd814c5f35687252bca4d03b96f3e4c95d728c414c4838397169f743fff8feda9a679a42755ef00784999702ed50d580a109512ec0011165e9fc3c63ffe3bd9b6220ef5a75c163d417e65c875ff3b01ad569ba9d306b9673097217ec9093770250a827cc4efcc9eef049d3fac2b114e5ce941b4f238f780b19523ff00e275a77bc48b9d3009f2ad23228155849d65e574a8b1f5997c5618a808b8ffd9a63851af3cce60a007c007663616e30", @ANYRES32=r7, @ANYBLOB="000008000e00000000000500260004000000a9002d8008002600", @ANYRES32, @ANYBLOB="d078b90cd73f9b9670077229648bb0ac153af3a4ef33a0069811cd1cc4ce069d782879204534d9cffea8edaeffd24b42a5aee490fe59267edf8e59ed1e63ed4dffb997f272146e5f6df77472ee5cdad449ade994f3882f3be20ed144cb60327cab54a94e7448d973693773e4cbd4fa4d5e74ef0d6e31602c06aa38d5bb5f61b5467d6f94edd92098d0b497fb0efc7ab10b8967178d91d7fcd04e6dc387000000080005000900000008001d00", @ANYRES32, @ANYBLOB], 0x43c}, 0x1, 0x0, 0x0, 0x10}, 0x60000000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x84) 10m7.716224752s ago: executing program 4 (id=3065): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0) (async) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) socket(0x1d, 0x3, 0x1) (async) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x1, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3d, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffffb, 0x400005, 0xdd79, 0x5, 0x61, 0x104}) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x3d, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x1000000006, 0x10001, 0x7, 0x400, 0x7ffffffb, 0x400005, 0xdd79, 0x5, 0x61, 0x104}) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) (async) io_setup$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) getpid() (async) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) uname$auto(0x0) r4 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r4, 0x29, 0x21, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "3d64dc8bff7fff7f610000000024"}, 0x55) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000540), 0x40102, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) getpeername$auto(0x3, 0x0, 0x0) 10m7.302322815s ago: executing program 4 (id=3066): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto(0x3, 0x40a0ae49, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 10m6.827759239s ago: executing program 34 (id=3066): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto(0x3, 0x40a0ae49, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.815418288s ago: executing program 3 (id=5135): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) (async) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x9) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r1, @ANYRES16], 0xb4}}, 0x20000054) (async) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fff) (async) write$auto(r1, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x4, 0x15) (async) unshare$auto(0x40000080) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) r3 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) ppoll$auto(&(0x7f0000000440)={r3, 0x4, 0x1}, 0x6, 0x0, 0x0, 0x8) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001bc0)="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", 0x930) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) io_uring_setup$auto(0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) 7.499702904s ago: executing program 3 (id=5144): socket(0x27, 0x6, 0xb) (async) ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffd45, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) (async) socket(0x1d, 0x2, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_register$auto_IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000380)="ffe0a38aa5023c0e54078a91bbaabaa9dd0058d550768db1684f66b7b02a7b0e91556e5c0b2a8f353dfc6e625223bfaf6635b3c14c644ec443c846e05530241dd93dee867a9746fdc0ef32aac31c7940c23f526a1cfa2aa3e0afe60af9ea4aae0dd3efecc76f5e62ef06af21fcde35ec7047dec3e6b8f9a9c0a19fbef25dfdbd569c462a1478c4f4c715ad8e950619d5496602b8be7822d6d10f2d96326a113a279d3a6896b0ecd45e3ffe8d1edc1d8170410dfa0fd5cf1927fd5e064b718f4cdb6f2e6235", 0x1) writev$auto(0x1, 0x0, 0x1) r3 = socket(0xa, 0x1, 0x84) (async) unshare$auto(0x40000080) (async) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r3, 0x84, 0x7c, 0x0, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x384, 0x1) poll$auto(0x0, 0x5, 0x400) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0xfd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) (async) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x76d}, @ETHTOOL_A_RSS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x1}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x1}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {0x5, 0x0, 0xf0ff}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40044) socket(0x1d, 0x2, 0x2) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x400000, 0x0, 0x1]}, 0x1fe, 0x81) 7.472286219s ago: executing program 6 (id=5145): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) madvise$auto(0x4000000, 0x800, 0x1001) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB='K0O\"', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf251a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x80) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = setfsuid$auto(0xee01) setresuid$auto(0x0, r5, 0x0) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000080)=0xcb17) read$auto(0x3, 0x0, 0xfdef) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) futex_wake$auto(&(0x7f0000000100)="e86b721e515747670103a5578bad01da756ffcfbc29434fc43ad6c08fb6370bc6ed312743b8ab5a9ddbeaeaa4f9a8924370b95b203dcb58f550444318bf289fab72bfd5894b8eae8a518105c57dd847cd62175da70f32c89ccfb8509b9086dc6f58f3af9aab8b71f6b69e3d6f2bd657a75d264e2dfc6bc38a03a157ba2645236", 0x101, 0x56, 0x2) readv$auto(0x3, &(0x7f0000000180)={0x0, 0xffff}, 0x8) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 7.369041656s ago: executing program 1 (id=5146): rseq$auto(&(0x7f0000000540)={0x7fff, 0x4000405, 0xeb82, 0x3, 0xffffffff, 0x9, "2b6709e58ef006000000c6d28d04239bcd756ee7a147751c7cd413c3d49d92e8f92beea05909dcd3171a6387"}, 0x8000, 0x0, 0x6) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x8, 0x3) msgsnd$auto(0x7d, 0x0, 0x8, 0x9) syz_genetlink_get_family_id$auto_macsec(0x0, r0) mmap$auto(0x2000000000000, 0x2, 0xe2, 0x9b72, 0x2, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0xc}, 0x7, 0x20020000) r1 = socket(0x2b, 0x1, 0x0) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) recvmmsg$auto(r1, 0x0, 0x10000, 0x9, 0x0) msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x0, 0xffffffffffffffff, 0xffffff98, 0xf, 0x8, 0x2}, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x7, 0x0, 0xff, 0x9, @raw}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) memfd_create$auto(0x0, 0x4) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r2, 0xc0305602, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0400, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling\x00', 0xa001, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/intel_ishtp_loader/parameters/dma_buf_size_limit\x00', 0x8000, 0x0) sendfile$auto(r3, r4, 0x0, 0x405) 6.936195186s ago: executing program 1 (id=5149): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) (async, rerun: 64) r3 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r1}, 0xa3) (async, rerun: 64) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec2\x00', 0x20081, 0x0) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000080)={0x40000000001, 0x1, 0x7, 0xc, 0x2, 0xcf, "8a9750a07c00", 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x81}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async, rerun: 64) r5 = socket(0xa, 0x1, 0x84) (async, rerun: 64) io_uring_setup$auto(0x401, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/platform/dummy_hcd.7/usb8/speed\x00', 0x301581, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000640)=""/177, 0xb1) (async) mmap$auto(0xfffffffffffff091, 0x2020009, 0x3, 0xeb1, r6, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SCSI_IOCTL_GET_BUS_NUMBER2(r3, 0x5386, &(0x7f00000003c0)="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") (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x59616d61, 0x1, 0x0, 0x1, 0x0) (async) r7 = pidfd_open$auto(r2, 0x0) setns(r7, 0x60020000) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x4, 0x0) (rerun: 64) pivot_root$auto(&(0x7f0000000300)='..\x00h\xa8n\x9a\xc6\xe7l\xb9\xdf\xd3\x06\xfb\xd67\xba\x01\xd4\x14', 0x7, 0x0) (async) getsockopt$auto(r5, 0x84, 0x82, 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x123041, 0x154) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 6.300770378s ago: executing program 3 (id=5151): r0 = socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, r0, 0x300000000040) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) socket(0x1a, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r3, 0x40086602, 0x8) writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000200)="1295ab36dd79edaa535c870f55d476e46c87bdca5549e4299f713cf1e90768b4e6b9f2eaa55d77e49509b0584cd7a4ca4108572762ad", 0x1000}, 0x2) socket(0x18, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyqd\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x5403, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x10005, 0x1, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0x7, 0x80000000, 0x4, 0x6, 0x1, 0xff}) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) 5.682450637s ago: executing program 1 (id=5155): r0 = socket(0xa, 0x3, 0x3b) (async) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@generic={0x18, "cac544062e5736e94ba1180053a9"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (rerun: 64) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) (async) mmap$auto(0x3, 0x20009, 0xe2, 0xeb1, 0x401, 0x8000) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x541000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_ALWAYS(r5, 0x7f, &(0x7f0000000180)=']\x00', &(0x7f00000001c0)="375dcb1378652de07317a621cf0f946ca73ccbcca7dbaf06c4229c64a968395fea83676e3e4db20193308eb2b88ef1fb65251d8895496129726825abfa28772b3254b8560479f984fd7ac2e461a71e27b909740468f3403619f8f7b0b1fe", 0x1) (async) ioctl$auto(0x3, 0xae41, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYRES8=r2, @ANYBLOB="010027bd7000fddbdf2541000000080003", @ANYRES32=r6, @ANYRES64=r6], 0x1c}, 0x1, 0x0, 0x0, 0x24001010}, 0x20000000) (async) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000001200)=ANY=[@ANYBLOB="88090000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000008eb21003e2142ea44a95a3575999cc0e788a22bec900393286a6fea139c10cb2d9e3171031a4ab4b7b8d53a9c0af3fbe3805b0be243f54ce7953762890293b2d9bc3edf5de932dce8e2dfeb3d7184033899ef6f317dd69e22a83095b6669630e3009e3788ea52b2e3ecfbd50f4760048f1d40c3e36c576bf030adf42f8bae277a47526cc4214adecdd6a7528db2b608667067203000e54c1262238daabfb6888a569f1065c069a086482787f827467cc4062bba1cbffd0c1c1cfcaa8a628bc88047b9132ad6a34c5faaa3d0fee597632938b6f35c4521ae3a322cbb9b39a9dfbb0d", @ANYRES32=r3, @ANYRES8=r1], 0x988}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x8c09, 0xfffffeff, 0xfffffffe, 0x6, 0x7, 0xc, r4, [0x1], {0x6, 0xa, 0xf, 0x2a3, 0x6, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0xd0, 0x1, 0x40, 0x4, 0x8, 0x5}}) ioctl$auto_EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000380)={0x70, 0x7f, "4cea2a611a902059b4842a5cd8379d37956f0d5a3464a63cd94bd4a4a35ac20de3ee7a2202131a557cbad6bd2f129ee88a49802d6f219fc1b1a4c4f11d917bac9103cb9c5655a69ad17454d12ca2fc5f84eee7e0e994880ad53b73eb98496e65d53777216b6d1b6f0343fcfb9db5a7e883788b55a5ac4bceb80d5cf2d3adafca644d940312d66dec6e1655a2a961bfbf2aa351cf037b2bc43eebcbd68d0104c37253ddfb80b62e08fe33aa97edb4c46bcd3aa97bceaf64db36f41f8a4d01db5dfda5bc5a9bc9b127eda9c87504fe96defc6489dcf0e98ba93e60fc1ac635e223bec26f06157a5b19ad3549d132"}) (async, rerun: 32) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 4.550670338s ago: executing program 1 (id=5160): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) ioctl$auto_I2C_TIMEOUT(r0, 0x702, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) close_range$auto(0x2, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20004ddc", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf251100000008000300", @ANYRES32=r4, @ANYBLOB="06002800d5190000"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x400, 0x0) unshare$auto(0x40000080) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r6, 0x40104d01, r6) madvise$auto(0x0, 0x200007, 0x8) 4.424762995s ago: executing program 6 (id=5163): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub1/hw_params\x00', 0x60a00, 0x0) pread64$auto(r1, 0x0, 0x200000000006, 0x8) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fd038004001298"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000140), r0) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) r5 = openat$auto(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0xd67, 0x8001) ioctl$auto_FBIOPAN_DISPLAY(r5, 0x4606, &(0x7f0000001300)="3529361911a7339845f53db60547b76df718fe256d284546f0e4c4e6c5170af106643227b754582fed04b994422089f080bbbeb7c63a89eadd8089a413920e065a4950228ff778c07d5bf89711ae303706834636ed8a9c0704db8916e887e63deec6ee89a875f5c26ae9407308f3cff592ca181d8ddeddbd8a9c2e8c95c2e3aba22b9c834d5d72984d") setresuid$auto(r3, r4, r3) r6 = waitid$auto(0x5, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) prctl$auto(0x5, 0x80000000, r6, 0x78, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x100082) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x24004141) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) write$auto(0x3, 0x0, 0x5c8) shmctl$auto_IPC_STAT(0x3, 0x2, &(0x7f0000000440)={{0x2, 0xee01, 0xffffffffffffffff, 0x80000000, 0x17, 0x67d, 0x5}, 0xe6, 0x1, 0x4, 0x2, @inferred=r6, @raw, 0x6, 0x0, &(0x7f0000000240)="603e04dfb27ca425b28faad73f3164bd7b75e0fd5d47a0b77fd205729bbc40e4a99ea843f8a97aa4259aa427570be761a75f5c0b696b77729c8470f54b9abc1874f34b320e2faacc44953033ddb8fe2720dfff78a6357f250b946f349857888b69d6787e8b14a992abc14fb315f6bd324498e1079b96366c5e4329eb47357e1f4cb21fdf1140ddfc1400ef922cde871acf1b91deb932047a9ca581b0787e27c00ff3880c4390eb922a524d83ace80778cb1ed9a038bc7e8429c1614f58f7bec053a1e1dbaac93142b1ff3c345d62183c76fd6ab2ac30be75143d0d0722db596d999e3413f1febc75b74ccf02d96689f1286e69fcd70a07b291", &(0x7f0000000340)}) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000180)={0x1, 0xce1, 0x7, 0x76f5, 0x8, 0x0}) r8 = getpgrp(0xffffffffffffffff) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000480)={{0xffffe356, 0xee01, 0xee01, 0x8000, 0xe3, 0x3, 0x90}, 0x4, 0x6, 0x9, 0x1, @inferred=0xffffffffffffffff, @raw=0x9, 0x4, 0x0, &(0x7f0000000300)="e3dc235fc937cd05043d74485ca9280399b414fb13a5a804952d6189d9e82ac36f6a4a0425670148c6e7d3eda97018547cd6ccb317d23c26263f5ec583020e68eb43230fa61781c3be901552a177d7cab8f592bcb1dfc47a1e91b05bbcb8f74fa23c3ff69ad8f1fb625ae317e863e0c7f120cb43dcdd451c9371dcb893dea64f9180ebfb92294371db00214fca07c6dfe34ea9c4939b3e4fae6a", &(0x7f00000003c0)="4409c88aae18226ca6232f02694cb0bdc90754255ab478aca5bad0b6c8ae5500676bc4587e74c02ce4928bdb43424ca412bf667b646c067d5dc0c6aa70877bbd6bed8582d16f457f449eaf20eb6bf90399866af05e857f237d731c569aa7f758e6b3f032db05afb3b99d5f49537ae3b6d8d7e6233c6a8f2fd11bb7ba93afbb1d2051972a08f31837ab2c1836596f19204499f37cb39b4a8d68ada8304b9ce3a1b8f310c7d2b91d860c69f91b5e4c4090e95d2af3ab17fb"}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xdac, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2d3, 0x1, 0x0, 0x1, [@generic="fe470c4d844a871c3d559113a75cdc77d3192cc892b58a1a4485addc4be8abe50846e72e1f4fbd30ce0002932469f6bca69c097cf235209bbdf131d7eba424089e44c837f06d2c5d9c57ed54945585121a3eec45de994f6fd523e081574c7750be8dc221ff3a922293b3dae448ecffda1f952eece83ccc4132284fee1a63b684d21e75e9fd8c5bb785da92c6dacac38f2e3f8ee540e6b0fe1ca77f3777de8d76627ca659927d3c2cd3e4ff81d8ca", @nested={0x10, 0x31, 0x0, 0x1, [@typed={0x8, 0xb1, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xcb}]}, @typed={0x8, 0x2f, 0x0, 0x0, @uid=r4}, @generic="ce452ef8b0468014f8511030851425452422770892e9fd73aea0f74c6de2dfdc2dd1e8312341b3ede4d4d54fb576a0bd4ebf7755d65f15e58b13ea661386893b08ab757b7c978feb4c87611056944e38b5c291d18130fd09fe2266700da7691570655da464db3394cd16975c49f5a7be4e7bc50747d66eba1dbce23a64fe73ea654c2e338424278e07eff7517fbd86258e69bebb366b338136f347c04355bb9e2b2f9012e405a9850410a70cf96804ac1756f7a10628dbb10c54b4d0d5106a1bc6a271c6e8d946ae2e063d50d1", @nested={0x139, 0x134, 0x0, 0x1, [@generic="6c6bd50a7234932adf40c96d4d844a0aaf4b523f23447d58a064cd9889f7237fa607f01068a971e027d2c38dd8739f714e536c173b1378af552d63838ad27cb4081995c00b1045851e3c9dfba9ba24d6ffbdea056876250458601789f5a8e4e3e95bfc980233ba90f5e5c332d6d54fb12b6ec496bac5747f9bf3e5bf7cfa03ef65f6e1a8e6f8b4bb96d42c322f8ba86b1116", @generic="8e011e0ee8444fdaf455b7ab69f884903305dc90dddbb76a12889787d666950957522b217b75a00a6ace3c04fe2248768b876fb869eeda66b63f18543c3cd3764776", @nested={0x4, 0x12e}, @nested={0x4, 0x148}, @generic="5cb3bb97ba984a71bbce87f6cf1e57ea397cfc7152ca3ac43a4f7a61875d7db0bd39948d0612ee6ded0880987876e7e4c4f3f66ca20784714c64549d8a9785c9579ca80f3883c208baccfac1fc1716a9913b3d7fe157e53ff8"]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1ce, 0x1, 0x0, 0x1, [@nested={0x10, 0x4e, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x8}]}, @generic="f5e9db363c92dce9bd25c61b07dd118c2b89038b3b05ca5e0146a59447dad227d8164df1f20ac22abf245fc1d62924b0440b2e4c2747440788dc3ba5c366ca55799b1d10116f407ed2cec2b166c1286c7a24d15337d70a085d089fb672edfccc274cbfbd51ad39d4ecdbef7cba47", @nested={0x98, 0x118, 0x0, 0x1, [@nested={0x4, 0x19}, @generic="07a110a58be640bce1265261b21f07b45543e653f83732dd854c71b78110bdb743fba8df4e4c7993b097f27e95157a007c23ff3bbb95fc957db891c501342aaef5b24b6bc96290e87f32f00ef81dcc02639202389447ed55c43278c6", @typed={0xc, 0x35, 0x0, 0x0, @u64=0x7fffffff}, @nested={0x4, 0xa1}, @nested={0x4, 0x81}, @typed={0x8, 0xb1, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x6a}, @typed={0x11, 0x74, 0x0, 0x0, @str='[{\\@-.\\&-!@}\x00'}]}, @nested={0xb3, 0x9, 0x0, 0x1, [@nested={0x4, 0x126}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x12b, 0x0, 0x0, @pid=r7}, @generic="6fd7dca82db2234b571d238aabdccff142b45221794d9845b5a35cefd4a8a77fad525a91899b122eb1b9ca52a4fc1301f6ab885dd872b9551a7f8a00c20674134e0aa453a25af4a96837dd079c8ec705ed8d2386502202c27f929ac81a01d6a1534d0b563fbef283663d385de4e4a122561679b6de3ddd5602d8dac2b75d2b26c074d768ea324aa77ef880916ccedc"]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x17d, 0x1, 0x0, 0x1, [@generic="9b71", @generic="6bcf91add0638939972ce24b70d4d1c830df28bee409c7c71f945a9e3280122375f4ab5a1e09d95e06d4a85aa2181f91eba9e95f1f31d093806053db89fe060b77d59f5bd2212d1512e7544165040b45d06073489154036944100f068092306fcc32dd63a5583242ca0543aef6e4cc2335c854028c464312c132bdbf34ae94dcfb893c35825ed88a453b8d971f7619559311e44e0188255aaf9753fad757db80b450e2f05321ca5f9fbc408ae602965f61c1a70679ce1e487c814105cdf3e88aa776acd51121151db6895b3d7f117f9fb5b95ed329867ea6fee047bb29fcbe", @nested={0x95, 0xfb, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="3db9ea89c207b4f80563f1763956eba4b2c9aaf32d247a129a5ba6463d31a41a40423a300ef655e9a70b9036121b06d04774214ed5ca7ca58b5ee2c7fd4ea10a9186935db4005732113032cd055e2c4290a227a433b09c0739917fe4786ddea0f31d33874315f5728b45a8f6434d23f55f03a7e4b53eb292b2630b8f7f50e01340df22957067c9530b"]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x29c, 0x1, 0x0, 0x1, [@typed={0x4, 0x134}, @generic="8bb4cf3ec230e6c63f6c9a184d42889d4c83b20178f6157c1e25cf389d50342bf2699f9aa4ccb0aac3dacc5cc9cd4e5fba5bd25ae54b1228b9ff4c0714f05cc498ac57b7aa995f2510bf67aa68a02928d33616633fb60d2d4deb15c047fc34bc0a1ae24f8f7c1818983376cbdc70d9e50a767898fdb9903a2d8cf7ffd50033eb17fe78d794042a22d2c77056bcf00f4cd4acec7fe653ed70472d91bc4c89380814242484df7434cc2ba8e4f4306bab549bcba814cba4829e3d9811224ff707bde933", @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@loopback}, @nested={0x160, 0xc, 0x0, 0x1, [@nested={0x4, 0x40}, @typed={0x4, 0x133}, @nested={0x4, 0x4c}, @typed={0x3a, 0x109, 0x0, 0x0, @binary="189d8a1c2f84326e2bd0c5df4443c316350c9f787bf39abbdf1689f6b06fdae2a054ee233b2a96773eb39c5d5ad97a4586bf6308914b"}, @generic="f105c12c7e4c1031561579811f4744abb282f13ba6c4104a9bbcc2f48872f256ee26b9a38caeacbdc7c0ca5205879b23555d6f00a240a922a0ee92ef02c100d3d67dca10d9e24556d2ff86b19116dec092be01e993d2a7b4a7720aef48b860a2", @typed={0x8, 0x6a, 0x0, 0x0, @pid=r8}, @generic="2e998a04fb6e43ef62bc167d1c82d0838fd9621a205d637551b94de90fe6f58421981cf6f67d27b70c0a5933906a3428164a22bbfb4aa973525087f2411e730d7ae52d054f7499accd2142d9f4e21b49f15579f63435d60bbabda4739a28e0b7166ed58890e60b950f475c31324d4e917a94862fbfbaf6e13310b8ab9160ca49d804a6abe92e698509d42d794579162a3cf8b31cd88e552634030fc1d80536ef", @nested={0x4, 0x3f}, @typed={0x4, 0x16}, @nested={0x4, 0x2c}]}, @nested={0x20, 0xe7, 0x0, 0x1, [@nested={0x4, 0xda}, @nested={0x4, 0x5c}, @generic="55d19bdd255e1ca059d73a79b04cbe17", @nested={0x4, 0x5}]}, @generic="3f58d87ed6c5392c531b3e28fa3aef38bc4a683380495b24de8d3cf325d4cc0eaa5c36e392e10408eb0a673eaab9735893923ba58e58acf5be578727f38d"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4b3, 0x1, 0x0, 0x1, [@generic="22468aafa48d0caace1d194997de154f64ce4532406944562796d5", @typed={0xc, 0x129, 0x0, 0x0, @u64=0x7}, @typed={0xf, 0x107, 0x0, 0x0, @binary="71527fec8daa7ea9d8f5ee"}, @typed={0xc3, 0x4c, 0x0, 0x0, @binary="0a52f02ce0436388412f03d6fccecb499fae7e3d47b9595127df3825013124da28e5422cb87f2273a4732a7058027c1a6a4b8ef23e772ebe1c17364de0350deae01423d021584070c0b0e366a294800b4b2d8bd6b94518cc17c6235018b50ac6137ac7285c0986d801d470306087d2c2851a231f3eefd42cd147db3fd7990fa91e2c180b4091c23743fcfa495e09eee2df77d0c6cc887481b54b7e9cf384ce1518cf9f3c7bf3c106323cbdd264f1ad5e04b9dd90555ce6772f93937d18b5ad"}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r0}, @nested={0x3ab, 0x104, 0x0, 0x1, [@typed={0x8, 0x1e, 0x0, 0x0, @uid=r9}, @typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="ae0e52c7da115ca9f50c3fe38991c359f12016baddf5816a2a18e20b61a9218c8ce103038d9898c06c852bed41f1c6ee27f5a2ba59b32fde662bfdb2abbaababe7cbf520810120266f1c3464a1dacf7c8394f8baefb3edebc5c79915a73d5271c41f58f5c16264d4f0593eee9f316ab673a36a4fdeac64ded47b884d1022ca81ecfa943e1b8f98fd5838ca96067712d8f3b9399391aeac593b133d4b96e3c5cc155f9c524494c235ae54192ed41ff3ff96fac5b81b9d9d34396ee0f73a5b59f48d33a5af83e8743fd0114006884e450bcd9681e506ad9b96ed6e4828ecd6483ef80ed0cf77c4d9001ebf32627645c0f7bf7cd7", @nested={0x4, 0x5b}, @generic="bd7782ff38525f8ab2b6a7e8af482be41f7bf1e399cf1c4b9ea80d94d1c2dd6439ca830d022ee8a8f75d0321f95744d695bf3e785c3a8b16dc49fda9be3dca31e2b0f48c20d9c986e0ca931e8c72d8ecc0645ddf6642028d111d35b875cb1514e3b581dc315da0c8ba6571451950a76d02b955fda2249e", @generic="e43b334021bc8dbc85cf93e13ec8390bda291ea746ae0ceac04969b321e620976de3d631712df9bf764137357e5689f0a9a22b487acca3d0a15489e01fdb95ec3f0d7982686a0a38603b4d5424d9d9fad3e1c4e4ecb825d3005c91956bb8385e6f01353ea99b3099c04afbe040e92cdfc4ae2f6234785fff49e091bab26eee7f97975821c770f0a55173c7cacd0022333ae4c2101ea3c24bdf30a7699efb6d546e9af8771a", @generic="885bddb42e688b2f926bbfc56ef560dbfc9cc8f71c16910f2cbf041cb1ee0a9fabaf7438ecf788c2b3a542cbb03d8e7ae7ff25c3b89284586287cc9ac5a0c6d1c007d57282e617a3e08faa96e2d0f1d936ec07493fac296486fed1fa53aafb9a51166a284f8c05886cd36328e3db1541eb6336bfdef073f3b68511ea9c672f0e0be6b986e78588fa66ea676a292b1cacad6206fece94fec7421a664ba16f8e06347644e31f", @generic="57f6801dedb748b79c3f10c9dc72eafbc455cebf792ad4b46cfeb4c96001bfb07047f4ef773c2cdf451a850f1d8c800fa491c48fff86bcf3c27f8ee5d4e0430e72962d53e6808b8d4285ac36abc53a7d8d2e71f6b6cd26aac01f01b9aaa583bc997a688ef800ecaf401f484cfd57546278d163cd953e6d25b5fdbb88297f8dd6d0247f80f41e94514f3f230541feedd392471049426eb511791f51844d6a482b4112cff77ee41cb8b459d7f1bd218f2437b25288fa1c9a74e6391af0f1370a2d857f5615d1e96a", @nested={0x4}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x24, 0x1, 0x0, 0x1, [@nested={0x1e, 0x91, 0x0, 0x1, [@typed={0x4, 0xcb}, @nested={0x4, 0x7f}, @nested={0x4, 0x24}, @generic="8a37", @typed={0x8, 0xf4, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xf1}]}]}]}, 0xdac}, 0x1, 0x0, 0x0, 0xc000}, 0x4040845) 3.978588611s ago: executing program 3 (id=5166): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0xffffff7f) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x42000a, 0xdf, 0xeb1, r1, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/tty46/uevent\x00', 0x180, 0x0) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x44eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0x14, r0, 0xea47) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000200)="10552c68fbfec2bb6dde28360100e37cba994cbeef2f59e9454b5eb46b11385997ab81469039e46000d27ef64721e2ab0000005590eaf6c36525ab32ca88129080fdd43f295c76cab36a10f9208381caa3d88240", 0x54) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) 3.784498262s ago: executing program 6 (id=5167): r0 = socket(0x18, 0x5, 0x1) getpeername$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r2, 0x4010ae68, r3) 3.443460894s ago: executing program 1 (id=5170): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x46) mmap$auto(0x0, 0x2020009, 0x4, 0x17, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) getsockopt$auto_SO_SNDTIMEO_OLD(r2, 0xa, 0x15, &(0x7f0000000100)='\x00', &(0x7f0000000140)=0x62) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x34622, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x106) (async) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x46) (async) mmap$auto(0x0, 0x2020009, 0x4, 0x17, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) (async) read$auto(r1, 0x0, 0x1f40) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) (async) getsockopt$auto_SO_SNDTIMEO_OLD(r2, 0xa, 0x15, &(0x7f0000000100)='\x00', &(0x7f0000000140)=0x62) (async) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x3) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x34622, 0x0) (async) 3.302595594s ago: executing program 6 (id=5172): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = open(&(0x7f0000000040)='./file0/file0\x00', 0x591083, 0x528) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)="000004") io_uring_register$auto_IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x10, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x9, 0x0, &(0x7f0000000140)={[0x9, 0x40000000001, 0xc, 0x1a, 0x7fff, 0x47, 0xc, 0x0, 0x0, 0x0, 0xe, 0x200000d59, 0x4, 0x40000000000000ff, 0x2, 0x3]}, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x5) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x6, 0x2, 0x40eb4, r2, 0x308000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x7, 0x0) socket(0x1d, 0x3, 0x1) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1c1540, 0x0) mmap$auto(0x0, 0x5, 0x4000000000db, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x7) mmap$auto(0x1, 0x2020009, 0x3, 0x200000eb1, 0xfffffffffffffffa, 0x10000000008000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) io_uring_setup$auto(0x1, 0x0) 3.302107021s ago: executing program 5 (id=5173): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00002, 0x400002, 0x40eb1, 0x602, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x6, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x6, 0x9, 0x34, 0x1ff, 0x6, 0x4, 0x5, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8e, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x8) socket(0xa, 0x5, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1c/sub4/hw_params\x00', 0x20000, 0x0) socket(0xa, 0x3, 0x3b) read$auto(0xffffffffffffffff, 0x0, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) 2.258880783s ago: executing program 5 (id=5174): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) (async) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) dup3$auto(r2, r2, 0x2ba) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010025bdf000fedbdf257500000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) 2.258537514s ago: executing program 1 (id=5175): sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f0000007b00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007a80)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r1, @ANYRESOCT=r1], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) ioctl$auto(r2, 0x6f2d, r2) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRESHEX=r0, @ANYRESOCT=r1], 0x14}}, 0x4008891) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x0, 0x155) mseal$auto(0x0, 0x7dd8, 0xffff) setresuid$auto(0x0, 0x7, 0x0) setfsuid$auto(0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x4c800, 0x0) socket(0x2, 0x2, 0x0) r3 = socket(0x29, 0x6, 0x1000400) close_range$auto(0x2, 0x8, 0xffffffff) open(0x0, 0x22240, 0x144) socket(0x11, 0x3, 0x2000106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000080)={0x0, 0x3}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) bind$auto(r3, &(0x7f0000000200)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x4) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.540370075s ago: executing program 3 (id=5176): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) pread64$auto(r0, 0x0, 0x8001, 0x7) r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x22) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) inotify_init1$auto(0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) ioctl$auto_BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0x4, 0x5}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000006}, 0x0) prctl$auto(0x20003e, 0x1, 0x0, 0x8, 0x400) select$auto(0xa, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x990, 0xffffffffffffffff, 0x1, 0x948b, 0x4002a1, 0x95f4da0a, 0xfffffffffffffffe, 0x3, 0x62, 0x80000001, 0x5, 0x0, 0xc, 0x3, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x2aa82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0x4018aee3, 0x88) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x11, 0x5, 0x802, 0x3, 0x1df4da0a, 0x3, 0x9, 0x62, 0x9, 0x7, 0x6d3e, 0xc, 0x4, 0x6]}, 0x0) r4 = prctl$auto(0x3b, 0x2, 0x0, 0x4, 0x0) splice$auto(r4, 0x0, r4, 0x0, 0x7, 0x1) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.142696096s ago: executing program 5 (id=5177): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futimesat$auto(r0, 0x0, 0x0) 973.150147ms ago: executing program 5 (id=5178): rseq$auto(&(0x7f00000004c0)={0x12, 0x401, 0x3, 0x6, 0xfffffeff, 0x2}, 0x8002, 0x0, 0x8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) statmount$auto(0x0, &(0x7f0000000700)={0xa, 0x1, 0x100000000043b, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x7, 0xffffffffffffffff, 0x2, 0x100, 0x3eb, 0x0, 0x2, 0x3000, 0x2, 0x6, 0x10003, 0x82, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x40003ff, 0x8, 0x0, 0x8001, 0x0, 0x9, 0x0, [0x0, 0x0, 0x80000000, 0x7, 0xfffffffffffffffc, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0xfffffffffffffffb, 0x0, 0x2a, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0xfffffffffffbfffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0xfd, 0x0, 0x9, 0x0, 0x200000000, 0x0, 0x3, 0x0, 0x1000000, 0x0, 0x7fff], "73f3dba14952dfdc75f873d757222400caf547df40a27ab782d3007b49b999fa15fad5eb79928026198e44f01ad22fd1660c67367bd77a2d4fe2638c0ba276ef4122e037e7af31f07b91aa641f935907a01c9a18e6d2c1c5627972c0764e49c9baef1f26684a783b3633659f45986a85306c3778014805014e6d629259211793a2866c40b5577388b07ff79f53f1ea71e4c48953f19d7077be1e1c4f85becd03d2bacd4115d7d6cf11d514"}, 0x7, 0xd) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400c011}, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x1, 0x0, 0xffffffffffffff39, 0x1) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x1) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.11/usb32/ep_00/power/runtime_suspended_time\x00', 0x480443, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad6201553927b4d2dcf671", @ANYRES16=r0], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x1, 0x7ff, 0x8}, {0x10002, 0x30, 0x5}, {0x0, 0x0, 0x7}]}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='G \x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf2511000000100009800900010024212e7d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x64842, 0x0) 893.646919ms ago: executing program 6 (id=5179): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x8, 0x6, 0x9, 0x8011, 0xffffffffffffffff, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) listmount$auto(0x0, 0x0, 0x1, 0x1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x1084) socket(0x2, 0x4, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa200, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mount$auto(&(0x7f0000000080)='ip6erspan0\x00', 0x0, &(0x7f0000000140)='*)\x00', 0x8, &(0x7f0000000240)) ioctl$auto(r0, 0x64ce, r0) 778.616567ms ago: executing program 5 (id=5180): socket(0x1d, 0x4, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x40000) r1 = io_uring_setup$auto(0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x20000000006, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket(0x10, 0x2, 0x6) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x48004) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x4, 0x81, 0x0, 0x1, 0x9) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x484001, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) close_range$auto(r1, r3, 0x3) brk$auto(0xffffffffffffff66) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 395.400118ms ago: executing program 6 (id=5181): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf251c"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYRES8], 0x64}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 233.612976ms ago: executing program 3 (id=5182): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_ALWAYS(r3, 0x7f, &(0x7f0000000180)=']\x00', &(0x7f00000001c0)="375dcb1378652de07317a621cf0f946ca73ccbcca7dbaf06c4229c64a968395fea83676e3e4db20193308eb2b88ef1fb65251d8895496129726825abfa28772b3254b8560479f984fd7ac2e461a71e27b909740468f3403619f8f7b0b1fe", 0x1) ioctl$auto(0x3, 0xae41, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000001200)=ANY=[@ANYBLOB="88090000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\b\x00!\x00', @ANYRES32=r2, @ANYBLOB="6e3dbb3383d267e4e1daccb15d2bd5e2ff000026caac5eeddd897da7f69755a04e"], 0x988}, 0x1, 0x0, 0x0, 0x84}, 0x10) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0xc, 0xffffffffffffffff, [0x1], {0x6, 0x6, 0xf, 0x29f, 0x6, 0x83, 0x101, 0x182, 0x2}, {0xff, 0x1, 0x52, 0xd0, 0x1, 0x40, 0x4, 0x8, 0x5}}) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) close_range$auto(r2, r4, 0x5) 0s ago: executing program 5 (id=5183): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x260000c4}, 0x40844) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdc00, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/hugetlb.1GB.failcnt\x00', 0x14bb00, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r5 = socket(0xa, 0x5, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getsockopt$auto(r5, 0x0, 0x50, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x7ec4, 0x1eb1, 0xfffffffffffffffa, 0x100008001) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x88) kernel console output (not intermixed with test programs): 0 [ 1590.075476][T28503] oom_kill_process+0x176/0x910 [ 1590.075495][T28503] out_of_memory+0x350/0x1700 [ 1590.075511][T28503] ? __lock_acquire+0x436/0x2890 [ 1590.075529][T28503] ? __pfx_out_of_memory+0x10/0x10 [ 1590.075550][T28503] mem_cgroup_out_of_memory+0x118/0x130 [ 1590.075568][T28503] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1590.075590][T28503] ? do_raw_spin_unlock+0x172/0x230 [ 1590.075611][T28503] try_charge_memcg+0x695/0xd30 [ 1590.075638][T28503] ? __pfx_try_charge_memcg+0x10/0x10 [ 1590.075660][T28503] ? __pfx_peak_open+0x1/0x10 [ 1590.075687][T28503] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1590.075708][T28503] obj_cgroup_charge_account+0x336/0x670 [ 1590.075734][T28503] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1590.075765][T28503] __kmalloc_cache_noprof+0x5cc/0x800 [ 1590.075783][T28503] ? ipv6_add_dev+0x6af/0x15f0 [ 1590.075802][T28503] ? ipv6_add_dev+0x6af/0x15f0 [ 1590.075816][T28503] ipv6_add_dev+0x6af/0x15f0 [ 1590.075835][T28503] addrconf_notify+0x53e/0x19f0 [ 1590.075855][T28503] ? ip6mr_device_event+0x1bc/0x230 [ 1590.075880][T28503] notifier_call_chain+0xbc/0x3e0 [ 1590.075904][T28503] ? __pfx_addrconf_notify+0x10/0x10 [ 1590.075928][T28503] call_netdevice_notifiers_info+0xbe/0x110 [ 1590.075948][T28503] register_netdevice+0x1792/0x21d0 [ 1590.075967][T28503] ? __pfx_register_netdevice+0x10/0x10 [ 1590.075988][T28503] __ip_tunnel_create+0x540/0x6b0 [ 1590.076008][T28503] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1590.076031][T28503] ip_tunnel_init_net+0x22f/0x7d0 [ 1590.076052][T28503] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1590.076075][T28503] ? ops_init+0x77/0x5f0 [ 1590.076090][T28503] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 1590.076114][T28503] ops_init+0x1e2/0x5f0 [ 1590.076129][T28503] setup_net+0x11d/0x3a0 [ 1590.076143][T28503] ? __pfx_setup_net+0x10/0x10 [ 1590.076156][T28503] ? lockdep_init_map_type+0x5c/0x270 [ 1590.076171][T28503] ? mutex_init_lockep+0x110/0x150 [ 1590.076189][T28503] copy_net_ns+0x351/0x7c0 [ 1590.076207][T28503] create_new_namespaces+0x3ea/0xab0 [ 1590.076232][T28503] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1590.076259][T28503] ksys_unshare+0x45b/0xa40 [ 1590.076283][T28503] ? __pfx_ksys_unshare+0x10/0x10 [ 1590.076307][T28503] ? xfd_validate_state+0x61/0x180 [ 1590.076327][T28503] __x64_sys_unshare+0x31/0x40 [ 1590.076349][T28503] do_syscall_64+0xcd/0xf80 [ 1590.076367][T28503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.076382][T28503] RIP: 0033:0x7f432358f7c9 [ 1590.076395][T28503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.076413][T28503] RSP: 002b:00007f4324399038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1590.076428][T28503] RAX: ffffffffffffffda RBX: 00007f43237e6090 RCX: 00007f432358f7c9 [ 1590.076438][T28503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1590.076447][T28503] RBP: 00007f4323613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1590.076457][T28503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.076465][T28503] R13: 00007f43237e6128 R14: 00007f43237e6090 R15: 00007ffe9e350ec8 [ 1590.076486][T28503] [ 1590.948560][T28503] memory: usage 3072kB, limit 3072kB, failcnt 313248 [ 1590.962182][T28503] memory+swap: usage 3392kB, limit 9007199254740988kB, failcnt 0 [ 1590.979164][T28503] kmem: usage 2848kB, limit 9007199254740988kB, failcnt 0 [ 1590.986301][T28503] Memory cgroup stats for /syz5: [ 1590.986402][T28503] cache 0 [ 1590.999055][T28503] rss 4096 [ 1591.002099][T28503] rss_huge 0 [ 1591.011169][T28503] shmem 0 [ 1591.014124][T28503] mapped_file 0 [ 1591.030253][T28503] dirty 0 [ 1591.033210][T28503] writeback 0 [ 1591.036481][T28503] workingset_refault_anon 29715 [ 1591.043869][T28503] workingset_refault_file 44853 [ 1591.061789][T28503] swap 327680 [ 1591.065520][T28503] swapcached 225280 [ 1591.069576][T28503] pgpgin 684769 [ 1591.073563][T28503] pgpgout 698000 [ 1591.077097][T28503] pgfault 454063 [ 1591.083499][T28503] pgmajfault 15020 [ 1591.087225][T28503] inactive_anon 135168 [ 1591.093211][T28503] active_anon 94208 [ 1591.111671][T28503] inactive_file 0 [ 1591.115356][T28503] active_file 0 [ 1591.118798][T28503] unevictable 0 [ 1591.132523][T28503] hierarchical_memory_limit 3145728 [ 1591.137738][T28503] hierarchical_memsw_limit 9223372036854771712 [ 1591.152578][T28503] total_cache 0 [ 1591.157274][T28503] total_rss 4096 [ 1591.163033][T28503] total_rss_huge 0 [ 1591.173943][T28503] total_shmem 0 [ 1591.179830][T28503] total_mapped_file 0 [ 1591.184366][T28503] total_dirty 0 [ 1591.198017][T28503] total_writeback 0 [ 1591.202577][T28503] total_workingset_refault_anon 29715 [ 1591.207955][T28503] total_workingset_refault_file 44853 [ 1591.221642][T28503] total_swap 327680 [ 1591.225496][T28503] total_swapcached 225280 [ 1591.236903][T28503] total_pgpgin 684769 [ 1591.246272][T28503] total_pgpgout 698000 [ 1591.252221][T28503] total_pgfault 454063 [ 1591.261258][T28503] total_pgmajfault 15020 [ 1591.265512][T28503] total_inactive_anon 135168 [ 1591.283692][T28503] total_active_anon 94208 [ 1591.290475][T28503] total_inactive_file 0 [ 1591.294643][T28503] total_active_file 0 [ 1591.298603][T28503] total_unevictable 0 [ 1591.317119][T28503] anon_cost 11 [ 1591.320595][T28503] file_cost 0 [ 1591.323878][T28503] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4783,pid=28499,uid=0 [ 1591.355299][T28503] Memory cgroup out of memory: Killed process 28499 (syz.5.4783) total-vm:135196kB, anon-rss:1268kB, file-rss:21940kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1593.122443][T28539] syz.5.4790 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 1593.140940][T28539] CPU: 1 UID: 0 PID: 28539 Comm: syz.5.4790 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1593.140969][T28539] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1593.140975][T28539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1593.140984][T28539] Call Trace: [ 1593.140989][T28539] [ 1593.140996][T28539] dump_stack_lvl+0x16c/0x1f0 [ 1593.141020][T28539] dump_header+0x101/0x960 [ 1593.141041][T28539] oom_kill_process+0x176/0x910 [ 1593.141059][T28539] out_of_memory+0x350/0x1700 [ 1593.141075][T28539] ? __lock_acquire+0x436/0x2890 [ 1593.141092][T28539] ? __pfx_out_of_memory+0x10/0x10 [ 1593.141114][T28539] mem_cgroup_out_of_memory+0x118/0x130 [ 1593.141133][T28539] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1593.141154][T28539] ? do_raw_spin_unlock+0x172/0x230 [ 1593.141175][T28539] try_charge_memcg+0x695/0xd30 [ 1593.141208][T28539] ? __pfx_try_charge_memcg+0x10/0x10 [ 1593.141230][T28539] ? __pfx_peak_open+0x1/0x10 [ 1593.141257][T28539] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1593.141278][T28539] obj_cgroup_charge_account+0x336/0x670 [ 1593.141305][T28539] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1593.141335][T28539] __kmalloc_cache_noprof+0x5cc/0x800 [ 1593.141353][T28539] ? ipv6_add_dev+0x6af/0x15f0 [ 1593.141373][T28539] ? ipv6_add_dev+0x6af/0x15f0 [ 1593.141387][T28539] ipv6_add_dev+0x6af/0x15f0 [ 1593.141405][T28539] addrconf_notify+0x53e/0x19f0 [ 1593.141426][T28539] ? ip6mr_device_event+0x1bc/0x230 [ 1593.141451][T28539] notifier_call_chain+0xbc/0x3e0 [ 1593.141475][T28539] ? __pfx_addrconf_notify+0x10/0x10 [ 1593.141499][T28539] call_netdevice_notifiers_info+0xbe/0x110 [ 1593.141519][T28539] register_netdevice+0x1792/0x21d0 [ 1593.141539][T28539] ? __pfx_register_netdevice+0x10/0x10 [ 1593.141555][T28539] ? net_generic+0xea/0x2a0 [ 1593.141576][T28539] register_netdev+0x34/0x50 [ 1593.141591][T28539] vti6_init_net+0x28f/0x490 [ 1593.141609][T28539] ? __pfx_vti6_init_net+0x10/0x10 [ 1593.141626][T28539] ops_init+0x1e2/0x5f0 [ 1593.141642][T28539] setup_net+0x11d/0x3a0 [ 1593.141656][T28539] ? __pfx_setup_net+0x10/0x10 [ 1593.141669][T28539] ? lockdep_init_map_type+0x5c/0x270 [ 1593.141684][T28539] ? mutex_init_lockep+0x110/0x150 [ 1593.141728][T28539] copy_net_ns+0x351/0x7c0 [ 1593.141746][T28539] create_new_namespaces+0x3ea/0xab0 [ 1593.141771][T28539] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1593.141793][T28539] ksys_unshare+0x45b/0xa40 [ 1593.141817][T28539] ? __pfx_ksys_unshare+0x10/0x10 [ 1593.141841][T28539] ? xfd_validate_state+0x61/0x180 [ 1593.141868][T28539] __x64_sys_unshare+0x31/0x40 [ 1593.141892][T28539] do_syscall_64+0xcd/0xf80 [ 1593.141911][T28539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.141926][T28539] RIP: 0033:0x7f432358f7c9 [ 1593.141939][T28539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1593.141954][T28539] RSP: 002b:00007f4324399038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1593.141969][T28539] RAX: ffffffffffffffda RBX: 00007f43237e6090 RCX: 00007f432358f7c9 [ 1593.141979][T28539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1593.141988][T28539] RBP: 00007f4323613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1593.141997][T28539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1593.142006][T28539] R13: 00007f43237e6128 R14: 00007f43237e6090 R15: 00007ffe9e350ec8 [ 1593.142027][T28539] [ 1593.143171][T28539] memory: usage 3072kB, limit 3072kB, failcnt 313839 [ 1593.517013][T28539] memory+swap: usage 3404kB, limit 9007199254740988kB, failcnt 0 [ 1593.526208][T28539] kmem: usage 2836kB, limit 9007199254740988kB, failcnt 0 [ 1593.551848][T28539] Memory cgroup stats for /syz5: [ 1593.551968][T28539] cache 0 [ 1593.561494][T28539] rss 0 [ 1593.564315][T28539] rss_huge 0 [ 1593.568633][T28539] shmem 0 [ 1593.573404][T28539] mapped_file 0 [ 1593.578007][T28539] dirty 0 [ 1593.585316][T28539] writeback 0 [ 1593.589774][T28539] workingset_refault_anon 29832 [ 1593.599786][T28539] workingset_refault_file 44853 [ 1593.604708][T28539] swap 339968 [ 1593.612560][T28539] swapcached 221184 [ 1593.616434][T28539] pgpgin 684968 [ 1593.620666][T28539] pgpgout 698201 [ 1593.625354][T28539] pgfault 454929 [ 1593.630571][T28539] pgmajfault 15124 [ 1593.634589][T28539] inactive_anon 0 [ 1593.638208][T28539] active_anon 221184 [ 1593.644590][T28539] inactive_file 0 [ 1593.648642][T28539] active_file 0 [ 1593.653670][T28539] unevictable 0 [ 1593.658378][T28539] hierarchical_memory_limit 3145728 [ 1593.665320][T28539] hierarchical_memsw_limit 9223372036854771712 [ 1593.673088][T28539] total_cache 0 [ 1593.676627][T28539] total_rss 0 [ 1593.680509][T28539] total_rss_huge 0 [ 1593.684968][T28539] total_shmem 0 [ 1593.691066][T28539] total_mapped_file 0 [ 1593.695214][T28551] i2c i2c-0: new_device: Extra parameters [ 1593.701572][T28539] total_dirty 0 [ 1593.705032][T28539] total_writeback 0 [ 1593.710283][T28539] total_workingset_refault_anon 29832 [ 1593.716179][T28539] total_workingset_refault_file 44853 [ 1593.724704][T28539] total_swap 339968 [ 1593.728584][T28539] total_swapcached 221184 [ 1593.733712][T28539] total_pgpgin 684968 [ 1593.738005][T28539] total_pgpgout 698201 [ 1593.743265][T28539] total_pgfault 454929 [ 1593.747461][T28539] total_pgmajfault 15124 [ 1593.755416][T28539] total_inactive_anon 0 [ 1593.762386][T28539] total_active_anon 221184 [ 1593.767295][T28539] total_inactive_file 0 [ 1593.772149][T28539] total_active_file 0 [ 1593.776121][T28539] total_unevictable 0 [ 1593.780483][T28539] anon_cost 21 [ 1593.783842][T28539] file_cost 0 [ 1593.787108][T28539] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4790,pid=28537,uid=0 [ 1593.802501][T28539] Memory cgroup out of memory: Killed process 28537 (syz.5.4790) total-vm:139432kB, anon-rss:1268kB, file-rss:26164kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 1594.130194][T28569] FAULT_INJECTION: forcing a failure. [ 1594.130194][T28569] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.146789][T28569] CPU: 1 UID: 0 PID: 28569 Comm: syz.5.4796 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1594.146818][T28569] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1594.146825][T28569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1594.146834][T28569] Call Trace: [ 1594.146849][T28569] [ 1594.146856][T28569] dump_stack_lvl+0x16c/0x1f0 [ 1594.146878][T28569] should_fail_ex+0x512/0x640 [ 1594.146900][T28569] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1594.146923][T28569] should_failslab+0xc2/0x120 [ 1594.146946][T28569] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1594.146965][T28569] ? __d_alloc+0x35/0xa80 [ 1594.146993][T28569] ? __d_alloc+0x35/0xa80 [ 1594.147014][T28569] __d_alloc+0x35/0xa80 [ 1594.147038][T28569] d_alloc_pseudo+0x1c/0xc0 [ 1594.147055][T28569] alloc_file_pseudo+0xcf/0x230 [ 1594.147073][T28569] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1594.147089][T28569] ? alloc_fd+0x471/0x7d0 [ 1594.147113][T28569] sock_alloc_file+0x50/0x210 [ 1594.147129][T28569] __sys_socket+0x1c0/0x260 [ 1594.147147][T28569] ? __pfx___sys_socket+0x10/0x10 [ 1594.147164][T28569] ? xfd_validate_state+0x61/0x180 [ 1594.147183][T28569] __x64_sys_socket+0x72/0xb0 [ 1594.147200][T28569] ? lockdep_hardirqs_on+0x7c/0x110 [ 1594.147216][T28569] do_syscall_64+0xcd/0xf80 [ 1594.147233][T28569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.147248][T28569] RIP: 0033:0x7f432358f7c9 [ 1594.147262][T28569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.147277][T28569] RSP: 002b:00007f43243ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1594.147292][T28569] RAX: ffffffffffffffda RBX: 00007f43237e5fa0 RCX: 00007f432358f7c9 [ 1594.147302][T28569] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000025 [ 1594.147311][T28569] RBP: 00007f4323613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1594.147321][T28569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1594.147330][T28569] R13: 00007f43237e6038 R14: 00007f43237e5fa0 R15: 00007ffe9e350ec8 [ 1594.147349][T28569] [ 1594.369942][T28567] ptp: physical clock is free running [ 1594.488128][T28576] random: crng reseeded on system resumption [ 1594.582704][T28578] FAULT_INJECTION: forcing a failure. [ 1594.582704][T28578] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.670244][T28581] FAULT_INJECTION: forcing a failure. [ 1594.670244][T28581] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.726611][T28578] CPU: 1 UID: 0 PID: 28578 Comm: syz.6.4797 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1594.726639][T28578] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1594.726646][T28578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1594.726655][T28578] Call Trace: [ 1594.726661][T28578] [ 1594.726668][T28578] dump_stack_lvl+0x16c/0x1f0 [ 1594.726689][T28578] should_fail_ex+0x512/0x640 [ 1594.726711][T28578] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1594.726732][T28578] should_failslab+0xc2/0x120 [ 1594.726755][T28578] kmem_cache_alloc_noprof+0x83/0x770 [ 1594.726772][T28578] ? alloc_empty_file+0x55/0x1e0 [ 1594.726791][T28578] ? alloc_empty_file+0x55/0x1e0 [ 1594.726805][T28578] alloc_empty_file+0x55/0x1e0 [ 1594.726832][T28578] alloc_file_pseudo+0x13a/0x230 [ 1594.726849][T28578] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1594.726868][T28578] ? do_raw_spin_unlock+0x172/0x230 [ 1594.726889][T28578] __anon_inode_getfile+0xe8/0x280 [ 1594.726906][T28578] anon_inode_getfile_fmode+0x37/0xa0 [ 1594.726923][T28578] __do_sys_timerfd_create+0x2fd/0x4e0 [ 1594.726942][T28578] do_syscall_64+0xcd/0xf80 [ 1594.726960][T28578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.726975][T28578] RIP: 0033:0x7f5e8458f7c9 [ 1594.726988][T28578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.727003][T28578] RSP: 002b:00007f5e85501038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 1594.727018][T28578] RAX: ffffffffffffffda RBX: 00007f5e847e5fa0 RCX: 00007f5e8458f7c9 [ 1594.727029][T28578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1594.727038][T28578] RBP: 00007f5e84613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1594.727047][T28578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1594.727056][T28578] R13: 00007f5e847e6038 R14: 00007f5e847e5fa0 R15: 00007ffc03e533f8 [ 1594.727075][T28578] [ 1594.931520][T28581] CPU: 1 UID: 0 PID: 28581 Comm: syz.1.4798 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1594.931551][T28581] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1594.931558][T28581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1594.931568][T28581] Call Trace: [ 1594.931574][T28581] [ 1594.931582][T28581] dump_stack_lvl+0x16c/0x1f0 [ 1594.931603][T28581] should_fail_ex+0x512/0x640 [ 1594.931625][T28581] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1594.931646][T28581] should_failslab+0xc2/0x120 [ 1594.931669][T28581] kmem_cache_alloc_noprof+0x83/0x770 [ 1594.931686][T28581] ? __anon_vma_prepare+0xae/0x5e0 [ 1594.931706][T28581] ? __anon_vma_prepare+0xae/0x5e0 [ 1594.931721][T28581] __anon_vma_prepare+0xae/0x5e0 [ 1594.931736][T28581] ? do_raw_spin_lock+0x12c/0x2b0 [ 1594.931756][T28581] __vmf_anon_prepare+0x11c/0x240 [ 1594.931780][T28581] do_huge_pmd_anonymous_page+0x161/0x2200 [ 1594.931807][T28581] ? __pmd_alloc+0x6aa/0x9c0 [ 1594.931831][T28581] __handle_mm_fault+0x25ca/0x2bb0 [ 1594.931853][T28581] ? __pfx___handle_mm_fault+0x10/0x10 [ 1594.931886][T28581] handle_mm_fault+0x3fe/0xad0 [ 1594.931908][T28581] __get_user_pages+0x54e/0x3590 [ 1594.931939][T28581] ? __pfx___get_user_pages+0x10/0x10 [ 1594.931967][T28581] populate_vma_page_range+0x267/0x3f0 [ 1594.931991][T28581] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1594.932013][T28581] ? __pfx_find_vma_intersection+0x10/0x10 [ 1594.932036][T28581] ? do_mmap+0x69c/0x1210 [ 1594.932059][T28581] __mm_populate+0x1d8/0x380 [ 1594.932083][T28581] ? __pfx___mm_populate+0x10/0x10 [ 1594.932107][T28581] ? up_write+0x282/0x4e0 [ 1594.932126][T28581] vm_mmap_pgoff+0x37f/0x470 [ 1594.932149][T28581] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1594.932174][T28581] ? __x64_sys_futex+0x1e0/0x4c0 [ 1594.932190][T28581] ? __x64_sys_futex+0x1e9/0x4c0 [ 1594.932210][T28581] ksys_mmap_pgoff+0x7d/0x5c0 [ 1594.932230][T28581] ? xfd_validate_state+0x61/0x180 [ 1594.932243][T28581] ? __pfx_ksys_write+0x10/0x10 [ 1594.932267][T28581] __x64_sys_mmap+0x125/0x190 [ 1594.932284][T28581] do_syscall_64+0xcd/0xf80 [ 1594.932302][T28581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.932318][T28581] RIP: 0033:0x7f8f4938f7c9 [ 1594.932332][T28581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.932347][T28581] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1594.932362][T28581] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1594.932372][T28581] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1594.932381][T28581] RBP: 00007f8f49413f91 R08: 0000000000000002 R09: 0000000000008000 [ 1594.932390][T28581] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1594.932399][T28581] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1594.932420][T28581] [ 1596.367988][T17158] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1596.430811][T17158] CPU: 1 UID: 0 PID: 17158 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1596.430839][T17158] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1596.430846][T17158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1596.430855][T17158] Call Trace: [ 1596.430866][T17158] [ 1596.430872][T17158] dump_stack_lvl+0x16c/0x1f0 [ 1596.430894][T17158] dump_header+0x101/0x960 [ 1596.430914][T17158] oom_kill_process+0x176/0x910 [ 1596.430932][T17158] out_of_memory+0x350/0x1700 [ 1596.430948][T17158] ? __lock_acquire+0x436/0x2890 [ 1596.430966][T17158] ? __pfx_out_of_memory+0x10/0x10 [ 1596.430987][T17158] mem_cgroup_out_of_memory+0x118/0x130 [ 1596.431005][T17158] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1596.431027][T17158] ? do_raw_spin_unlock+0x172/0x230 [ 1596.431048][T17158] try_charge_memcg+0x695/0xd30 [ 1596.431074][T17158] ? __pfx_try_charge_memcg+0x10/0x10 [ 1596.431101][T17158] ? find_held_lock+0x2b/0x80 [ 1596.431123][T17158] charge_memcg+0x8a/0x230 [ 1596.431145][T17158] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1596.431163][T17158] __read_swap_cache_async+0x397/0x500 [ 1596.431184][T17158] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1596.431203][T17158] ? mlock_drain_local+0x22d/0x4e0 [ 1596.431226][T17158] swap_cluster_readahead+0x528/0x770 [ 1596.431249][T17158] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1596.431269][T17158] ? trace_pelt_se_tp+0xed/0x130 [ 1596.431283][T17158] ? __update_load_avg_se+0x3fb/0x940 [ 1596.431312][T17158] ? get_vma_policy+0x242/0x3c0 [ 1596.431336][T17158] swapin_readahead+0x160/0x1220 [ 1596.431361][T17158] ? __pfx_swapin_readahead+0x10/0x10 [ 1596.431379][T17158] ? find_held_lock+0x2b/0x80 [ 1596.431396][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1596.431412][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1596.431427][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1596.431445][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1596.431461][T17158] ? swap_cache_get_folio+0x293/0x8e0 [ 1596.431479][T17158] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1596.431495][T17158] ? __pfx_get_swap_device+0x10/0x10 [ 1596.431515][T17158] ? rcu_read_unlock+0x2d/0xb0 [ 1596.431535][T17158] ? do_swap_page+0x962/0x64a0 [ 1596.431548][T17158] do_swap_page+0x962/0x64a0 [ 1596.431565][T17158] ? __lock_acquire+0x436/0x2890 [ 1596.431584][T17158] ? __pfx_do_swap_page+0x10/0x10 [ 1596.431600][T17158] ? __pfx_default_wake_function+0x10/0x10 [ 1596.431622][T17158] ? rcu_is_watching+0x12/0xc0 [ 1596.431642][T17158] ? __free_object+0x286/0x410 [ 1596.431659][T17158] ? rcu_is_watching+0x12/0xc0 [ 1596.431679][T17158] ? ___pte_offset_map+0x175/0x380 [ 1596.431702][T17158] __handle_mm_fault+0x19cb/0x2bb0 [ 1596.431720][T17158] ? reacquire_held_locks+0xcd/0x1f0 [ 1596.431735][T17158] ? __pfx___handle_mm_fault+0x10/0x10 [ 1596.431752][T17158] ? lock_vma_under_rcu+0x176/0x580 [ 1596.431774][T17158] ? get_timespec64+0x136/0x1b0 [ 1596.431793][T17158] handle_mm_fault+0x3fe/0xad0 [ 1596.431812][T17158] do_user_addr_fault+0x60c/0x1370 [ 1596.431832][T17158] ? rcu_is_watching+0x12/0xc0 [ 1596.431865][T17158] exc_page_fault+0x64/0xc0 [ 1596.431881][T17158] asm_exc_page_fault+0x26/0x30 [ 1596.431898][T17158] RIP: 0033:0x7f43235c2088 [ 1596.431913][T17158] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 1596.431927][T17158] RSP: 002b:00007ffe9e3511e0 EFLAGS: 00010293 [ 1596.431940][T17158] RAX: 0000000000000000 RBX: 0000000000000909 RCX: 00007f43235c2085 [ 1596.431950][T17158] RDX: 00007ffe9e351220 RSI: 0000000000000000 RDI: 0000000000000000 [ 1596.431959][T17158] RBP: 00007ffe9e35128c R08: 0000000000000000 R09: 0000000000000000 [ 1596.431968][T17158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1596.431977][T17158] R13: 00000000000927c0 R14: 0000000000185a5e R15: 00007ffe9e3512e0 [ 1596.431997][T17158] [ 1596.432003][T17158] memory: usage 3072kB, limit 3072kB, failcnt 314960 [ 1597.060061][T17158] memory+swap: usage 3324kB, limit 9007199254740988kB, failcnt 0 [ 1597.072038][T17158] kmem: usage 2864kB, limit 9007199254740988kB, failcnt 0 [ 1597.088180][T17158] Memory cgroup stats for /syz5: [ 1597.088282][T17158] cache 0 [ 1597.098648][T17158] rss 0 [ 1597.108266][T17158] rss_huge 0 [ 1597.111739][T17158] shmem 0 [ 1597.114823][T17158] mapped_file 0 [ 1597.120662][T17158] dirty 0 [ 1597.126159][T17158] writeback 0 [ 1597.133152][T17158] workingset_refault_anon 29962 [ 1597.144535][T17158] workingset_refault_file 44853 [ 1597.156317][T17158] swap 258048 [ 1597.161840][T17158] swapcached 212992 [ 1597.170095][T17158] pgpgin 686186 [ 1597.174977][T17158] pgpgout 699422 [ 1597.179268][T17158] pgfault 456298 [ 1597.185298][T17158] pgmajfault 15200 [ 1597.195040][T17158] inactive_anon 90112 [ 1597.203137][T17158] active_anon 122880 [ 1597.211842][T17158] inactive_file 0 [ 1597.215500][T17158] active_file 0 [ 1597.231378][T17158] unevictable 0 [ 1597.238346][T17158] hierarchical_memory_limit 3145728 [ 1597.244679][T17158] hierarchical_memsw_limit 9223372036854771712 [ 1597.254421][T17158] total_cache 0 [ 1597.260430][T17158] total_rss 0 [ 1597.279194][T17158] total_rss_huge 0 [ 1597.282938][T17158] total_shmem 0 [ 1597.291806][T17158] total_mapped_file 0 [ 1597.297837][T17158] total_dirty 0 [ 1597.308035][T17158] total_writeback 0 [ 1597.314840][T17158] total_workingset_refault_anon 29962 [ 1597.326168][T17158] total_workingset_refault_file 44853 [ 1597.336299][T17158] total_swap 258048 [ 1597.347400][T17158] total_swapcached 212992 [ 1597.357205][T17158] total_pgpgin 686186 [ 1597.366653][T17158] total_pgpgout 699422 [ 1597.373609][T17158] total_pgfault 456298 [ 1597.384376][T17158] total_pgmajfault 15200 [ 1597.395378][T17158] total_inactive_anon 90112 [ 1597.402239][T17158] total_active_anon 122880 [ 1597.406673][T17158] total_inactive_file 0 [ 1597.425050][T17158] total_active_file 0 [ 1597.434828][T17158] total_unevictable 0 [ 1597.443372][T17158] anon_cost 22 [ 1597.452235][T17158] file_cost 0 [ 1597.459824][T17158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4804,pid=28615,uid=0 [ 1597.509055][T17158] Memory cgroup out of memory: Killed process 28615 (syz.5.4804) total-vm:131224kB, anon-rss:1240kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 1597.710651][T28637] ovs_: entered promiscuous mode [ 1598.128573][T28646] __nla_validate_parse: 56 callbacks suppressed [ 1598.128590][T28646] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4809'. [ 1598.852004][T28671] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 1599.024465][T28677] zswap: compressor not available [ 1599.560498][T17158] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1599.584039][T17158] CPU: 1 UID: 0 PID: 17158 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1599.584067][T17158] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1599.584074][T17158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1599.584082][T17158] Call Trace: [ 1599.584088][T17158] [ 1599.584095][T17158] dump_stack_lvl+0x16c/0x1f0 [ 1599.584116][T17158] dump_header+0x101/0x960 [ 1599.584136][T17158] oom_kill_process+0x176/0x910 [ 1599.584154][T17158] out_of_memory+0x350/0x1700 [ 1599.584170][T17158] ? __lock_acquire+0x436/0x2890 [ 1599.584187][T17158] ? __pfx_out_of_memory+0x10/0x10 [ 1599.584209][T17158] mem_cgroup_out_of_memory+0x118/0x130 [ 1599.584227][T17158] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1599.584248][T17158] ? do_raw_spin_unlock+0x172/0x230 [ 1599.584269][T17158] try_charge_memcg+0x695/0xd30 [ 1599.584295][T17158] ? __pfx_try_charge_memcg+0x10/0x10 [ 1599.584327][T17158] ? find_held_lock+0x2b/0x80 [ 1599.584350][T17158] charge_memcg+0x8a/0x230 [ 1599.584371][T17158] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1599.584389][T17158] __read_swap_cache_async+0x397/0x500 [ 1599.584411][T17158] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1599.584429][T17158] ? mlock_drain_local+0x22d/0x4e0 [ 1599.584452][T17158] swap_cluster_readahead+0x432/0x770 [ 1599.584475][T17158] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1599.584495][T17158] ? __lock_acquire+0x436/0x2890 [ 1599.584517][T17158] ? get_vma_policy+0x242/0x3c0 [ 1599.584542][T17158] swapin_readahead+0x160/0x1220 [ 1599.584566][T17158] ? __pfx_swapin_readahead+0x10/0x10 [ 1599.584584][T17158] ? find_held_lock+0x2b/0x80 [ 1599.584602][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1599.584618][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1599.584633][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1599.584652][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1599.584668][T17158] ? swap_cache_get_folio+0x293/0x8e0 [ 1599.584686][T17158] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1599.584701][T17158] ? __pfx_get_swap_device+0x10/0x10 [ 1599.584722][T17158] ? rcu_read_unlock+0x2d/0xb0 [ 1599.584741][T17158] ? do_swap_page+0x962/0x64a0 [ 1599.584754][T17158] do_swap_page+0x962/0x64a0 [ 1599.584771][T17158] ? __lock_acquire+0x436/0x2890 [ 1599.584790][T17158] ? __pfx_do_swap_page+0x10/0x10 [ 1599.584806][T17158] ? __pfx_default_wake_function+0x10/0x10 [ 1599.584828][T17158] ? rcu_is_watching+0x12/0xc0 [ 1599.584848][T17158] ? __free_object+0x286/0x410 [ 1599.584865][T17158] ? rcu_is_watching+0x12/0xc0 [ 1599.584885][T17158] ? ___pte_offset_map+0x175/0x380 [ 1599.584908][T17158] __handle_mm_fault+0x19cb/0x2bb0 [ 1599.584927][T17158] ? reacquire_held_locks+0xcd/0x1f0 [ 1599.584944][T17158] ? __pfx___handle_mm_fault+0x10/0x10 [ 1599.584962][T17158] ? lock_vma_under_rcu+0x176/0x580 [ 1599.584983][T17158] ? get_timespec64+0x136/0x1b0 [ 1599.585003][T17158] handle_mm_fault+0x3fe/0xad0 [ 1599.585021][T17158] do_user_addr_fault+0x60c/0x1370 [ 1599.585042][T17158] ? rcu_is_watching+0x12/0xc0 [ 1599.585064][T17158] exc_page_fault+0x64/0xc0 [ 1599.585080][T17158] asm_exc_page_fault+0x26/0x30 [ 1599.585094][T17158] RIP: 0033:0x7f43235c2088 [ 1599.585108][T17158] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 1599.585122][T17158] RSP: 002b:00007ffe9e3511e0 EFLAGS: 00010293 [ 1599.585134][T17158] RAX: 0000000000000000 RBX: 0000000000000914 RCX: 00007f43235c2085 [ 1599.585144][T17158] RDX: 00007ffe9e351220 RSI: 0000000000000000 RDI: 0000000000000000 [ 1599.585153][T17158] RBP: 00007ffe9e35128c R08: 0000000000000000 R09: 0000000000000000 [ 1599.585161][T17158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1599.585170][T17158] R13: 00000000000927c0 R14: 0000000000186680 R15: 00007ffe9e3512e0 [ 1599.585190][T17158] [ 1599.585236][T17158] memory: usage 3072kB, limit 3072kB, failcnt 315443 [ 1600.013420][T17158] memory+swap: usage 3372kB, limit 9007199254740988kB, failcnt 0 [ 1600.029222][T17158] kmem: usage 2788kB, limit 9007199254740988kB, failcnt 0 [ 1600.036468][T17158] Memory cgroup stats for /syz5: [ 1600.036565][T17158] cache 0 [ 1600.064312][T17158] rss 0 [ 1600.067796][T17158] rss_huge 0 [ 1600.071501][T17158] shmem 0 [ 1600.074432][T17158] mapped_file 0 [ 1600.082373][T17158] dirty 0 [ 1600.085461][T17158] writeback 0 [ 1600.093470][T17158] workingset_refault_anon 30202 [ 1600.102179][T17158] workingset_refault_file 44853 [ 1600.107049][T17158] swap 307200 [ 1600.119143][T17158] swapcached 270336 [ 1600.123050][T17158] pgpgin 686608 [ 1600.126492][T17158] pgpgout 699832 [ 1600.132095][T17158] pgfault 456944 [ 1600.136391][T17158] pgmajfault 15374 [ 1600.143609][T17158] inactive_anon 40960 [ 1600.147675][T17158] active_anon 229376 [ 1600.153471][T17158] inactive_file 0 [ 1600.157135][T17158] active_file 0 [ 1600.164325][T17158] unevictable 0 [ 1600.167790][T17158] hierarchical_memory_limit 3145728 [ 1600.177328][T17158] hierarchical_memsw_limit 9223372036854771712 [ 1600.186657][T17158] total_cache 0 [ 1600.192433][T17158] total_rss 0 [ 1600.197209][T17158] total_rss_huge 0 [ 1600.203291][T17158] total_shmem 0 [ 1600.211280][T17158] total_mapped_file 0 [ 1600.215268][T17158] total_dirty 0 [ 1600.229017][T17158] total_writeback 0 [ 1600.232867][T17158] total_workingset_refault_anon 30202 [ 1600.238242][T17158] total_workingset_refault_file 44853 [ 1600.247466][T17158] total_swap 307200 [ 1600.252049][T17158] total_swapcached 270336 [ 1600.256816][T17158] total_pgpgin 686608 [ 1600.262470][T17158] total_pgpgout 699832 [ 1600.269051][T17158] total_pgfault 456944 [ 1600.277066][T17158] total_pgmajfault 15374 [ 1600.281499][T17158] total_inactive_anon 40960 [ 1600.289451][T17158] total_active_anon 229376 [ 1600.293878][T17158] total_inactive_file 0 [ 1600.308336][T17158] total_active_file 0 [ 1600.318431][T17158] total_unevictable 0 [ 1600.325407][T17158] anon_cost 23 [ 1600.329129][T17158] file_cost 0 [ 1600.332402][T17158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4815,pid=28676,uid=0 [ 1600.358643][T17158] Memory cgroup out of memory: Killed process 28676 (syz.5.4815) total-vm:139432kB, anon-rss:1268kB, file-rss:26152kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 1601.149266][T28712] input: f as /devices/virtual/input/input83 [ 1602.302024][T28735] ima: policy update failed [ 1602.306663][ T30] audit: type=1802 audit(4294967446.750:143): pid=28735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.4824" res=0 errno=0 [ 1602.713728][T28739] FAULT_INJECTION: forcing a failure. [ 1602.713728][T28739] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1602.923893][T28748] netlink: 'syz.6.4826': attribute type 10 has an invalid length. [ 1603.019576][T28739] CPU: 1 UID: 0 PID: 28739 Comm: syz.6.4826 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1603.019607][T28739] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1603.019613][T28739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1603.019623][T28739] Call Trace: [ 1603.019630][T28739] [ 1603.019636][T28739] dump_stack_lvl+0x16c/0x1f0 [ 1603.019658][T28739] should_fail_ex+0x512/0x640 [ 1603.019683][T28739] should_fail_alloc_page+0xe7/0x130 [ 1603.019708][T28739] prepare_alloc_pages+0x401/0x670 [ 1603.019732][T28739] ? rcu_is_watching+0x12/0xc0 [ 1603.019755][T28739] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1603.019773][T28739] ? should_fail_alloc_page+0xee/0x130 [ 1603.019797][T28739] ? rcu_is_watching+0x12/0xc0 [ 1603.019817][T28739] ? trace_mm_page_alloc+0x11b/0x180 [ 1603.019840][T28739] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 1603.019860][T28739] ? __pfx_stack_trace_save+0x10/0x10 [ 1603.019884][T28739] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1603.019901][T28739] ? stack_depot_save_flags+0x29/0x9b0 [ 1603.019922][T28739] ? find_held_lock+0x2b/0x80 [ 1603.019946][T28739] ? alloc_vmap_area+0x66f/0x2a50 [ 1603.019966][T28739] ? __vmalloc_node_range_noprof+0x247/0x16b0 [ 1603.019999][T28739] ? __snd_dma_alloc_pages+0x53/0x90 [ 1603.020021][T28739] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1603.020043][T28739] ? do_alloc_pages+0x136/0x2d0 [ 1603.020061][T28739] ? snd_pcm_lib_malloc_pages+0x3df/0x9a0 [ 1603.020082][T28739] ? snd_pcm_hw_params+0x1656/0x1ba0 [ 1603.020104][T28739] ? snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1603.020125][T28739] ? snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 1603.020146][T28739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.020165][T28739] alloc_pages_bulk_noprof+0x77a/0x1410 [ 1603.020183][T28739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1603.020207][T28739] ? policy_nodemask+0xea/0x4e0 [ 1603.020232][T28739] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1603.020251][T28739] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1603.020281][T28739] __kasan_populate_vmalloc+0xfb/0x220 [ 1603.020305][T28739] alloc_vmap_area+0x98d/0x2a50 [ 1603.020334][T28739] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1603.020361][T28739] __get_vm_area_node+0x1ca/0x330 [ 1603.020388][T28739] __vmalloc_node_range_noprof+0x247/0x16b0 [ 1603.020412][T28739] ? __snd_dma_alloc_pages+0x53/0x90 [ 1603.020434][T28739] ? lock_acquire+0x179/0x330 [ 1603.020452][T28739] ? __snd_dma_alloc_pages+0x53/0x90 [ 1603.020474][T28739] ? trace_contention_end+0xdd/0x110 [ 1603.020493][T28739] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1603.020518][T28739] ? do_alloc_pages+0xf8/0x2d0 [ 1603.020540][T28739] ? __mutex_unlock_slowpath+0x161/0x790 [ 1603.020561][T28739] ? __snd_dma_alloc_pages+0x53/0x90 [ 1603.020581][T28739] __vmalloc_node_noprof+0xad/0xf0 [ 1603.020605][T28739] ? __snd_dma_alloc_pages+0x53/0x90 [ 1603.020625][T28739] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1603.020649][T28739] __snd_dma_alloc_pages+0x53/0x90 [ 1603.020672][T28739] snd_dma_alloc_dir_pages+0x151/0x240 [ 1603.020696][T28739] do_alloc_pages+0x136/0x2d0 [ 1603.020720][T28739] snd_pcm_lib_malloc_pages+0x3df/0x9a0 [ 1603.020745][T28739] snd_pcm_hw_params+0x1656/0x1ba0 [ 1603.020770][T28739] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1603.020790][T28739] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1603.020809][T28739] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1603.020830][T28739] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1603.020850][T28739] ? __asan_memset+0x23/0x50 [ 1603.020869][T28739] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1603.020891][T28739] snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 1603.020919][T28739] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1603.020938][T28739] ? __pfx___mutex_lock+0x10/0x10 [ 1603.020963][T28739] ? futex_wake+0x1ad/0x530 [ 1603.020992][T28739] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1603.021016][T28739] snd_pcm_oss_get_formats+0x7e/0x340 [ 1603.021034][T28739] ? find_held_lock+0x2b/0x80 [ 1603.021054][T28739] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1603.021072][T28739] ? __might_fault+0x13b/0x190 [ 1603.021094][T28739] snd_pcm_oss_ioctl+0x2f49/0x37f0 [ 1603.021113][T28739] ? find_held_lock+0x2b/0x80 [ 1603.021132][T28739] ? hook_file_ioctl_common+0x144/0x410 [ 1603.021155][T28739] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1603.021175][T28739] ? __fget_files+0x20e/0x3c0 [ 1603.021199][T28739] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1603.021218][T28739] __x64_sys_ioctl+0x18e/0x210 [ 1603.021238][T28739] do_syscall_64+0xcd/0xf80 [ 1603.021256][T28739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.021272][T28739] RIP: 0033:0x7f5e8458f7c9 [ 1603.021286][T28739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1603.021301][T28739] RSP: 002b:00007f5e85501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1603.021317][T28739] RAX: ffffffffffffffda RBX: 00007f5e847e5fa0 RCX: 00007f5e8458f7c9 [ 1603.021327][T28739] RDX: 0000200000000180 RSI: 00000000c0045005 RDI: 000000000000000a [ 1603.021338][T28739] RBP: 00007f5e84613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1603.021348][T28739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1603.021358][T28739] R13: 00007f5e847e6038 R14: 00007f5e847e5fa0 R15: 00007ffc03e533f8 [ 1603.021379][T28739] [ 1603.021747][T28739] syz.6.4826: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 1603.578058][T28752] random: crng reseeded on system resumption [ 1606.765257][T28767] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1606.765257][T28767] M' is too long [ 1606.970714][T28767] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1606.970714][T28767] W ' is too long [ 1607.463226][T17158] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1607.489631][T17158] CPU: 1 UID: 0 PID: 17158 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 1607.489660][T17158] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1607.489666][T17158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1607.489676][T17158] Call Trace: [ 1607.489682][T17158] [ 1607.489689][T17158] dump_stack_lvl+0x16c/0x1f0 [ 1607.489710][T17158] dump_header+0x101/0x960 [ 1607.489729][T17158] oom_kill_process+0x176/0x910 [ 1607.489747][T17158] out_of_memory+0x350/0x1700 [ 1607.489764][T17158] ? __lock_acquire+0x436/0x2890 [ 1607.489781][T17158] ? __pfx_out_of_memory+0x10/0x10 [ 1607.489802][T17158] mem_cgroup_out_of_memory+0x118/0x130 [ 1607.489821][T17158] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1607.489843][T17158] ? do_raw_spin_unlock+0x172/0x230 [ 1607.489864][T17158] try_charge_memcg+0x695/0xd30 [ 1607.489890][T17158] ? __pfx_try_charge_memcg+0x10/0x10 [ 1607.489917][T17158] ? find_held_lock+0x2b/0x80 [ 1607.489939][T17158] charge_memcg+0x8a/0x230 [ 1607.489961][T17158] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1607.489978][T17158] __read_swap_cache_async+0x397/0x500 [ 1607.490000][T17158] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1607.490019][T17158] ? __lock_acquire+0x436/0x2890 [ 1607.490037][T17158] swap_cluster_readahead+0x528/0x770 [ 1607.490060][T17158] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1607.490080][T17158] ? trace_pelt_se_tp+0xed/0x130 [ 1607.490094][T17158] ? __update_load_avg_se+0x3fb/0x940 [ 1607.490123][T17158] ? get_vma_policy+0x242/0x3c0 [ 1607.490147][T17158] swapin_readahead+0x160/0x1220 [ 1607.490172][T17158] ? __pfx_swapin_readahead+0x10/0x10 [ 1607.490190][T17158] ? find_held_lock+0x2b/0x80 [ 1607.490208][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1607.490224][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1607.490239][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1607.490257][T17158] ? swap_cache_get_folio+0x267/0x8e0 [ 1607.490273][T17158] ? swap_cache_get_folio+0x293/0x8e0 [ 1607.490291][T17158] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1607.490307][T17158] ? __pfx_get_swap_device+0x10/0x10 [ 1607.490327][T17158] ? rcu_read_unlock+0x2d/0xb0 [ 1607.490347][T17158] ? do_swap_page+0x962/0x64a0 [ 1607.490360][T17158] do_swap_page+0x962/0x64a0 [ 1607.490377][T17158] ? __lock_acquire+0x436/0x2890 [ 1607.490396][T17158] ? __pfx_do_swap_page+0x10/0x10 [ 1607.490412][T17158] ? __pfx_default_wake_function+0x10/0x10 [ 1607.490434][T17158] ? rcu_is_watching+0x12/0xc0 [ 1607.490455][T17158] ? __free_object+0x286/0x410 [ 1607.490472][T17158] ? rcu_is_watching+0x12/0xc0 [ 1607.490492][T17158] ? ___pte_offset_map+0x175/0x380 [ 1607.490521][T17158] __handle_mm_fault+0x19cb/0x2bb0 [ 1607.490540][T17158] ? reacquire_held_locks+0xcd/0x1f0 [ 1607.490554][T17158] ? __pfx___handle_mm_fault+0x10/0x10 [ 1607.490572][T17158] ? lock_vma_under_rcu+0x176/0x580 [ 1607.490593][T17158] ? get_timespec64+0x136/0x1b0 [ 1607.490613][T17158] handle_mm_fault+0x3fe/0xad0 [ 1607.490632][T17158] do_user_addr_fault+0x60c/0x1370 [ 1607.490652][T17158] ? rcu_is_watching+0x12/0xc0 [ 1607.490674][T17158] exc_page_fault+0x64/0xc0 [ 1607.490690][T17158] asm_exc_page_fault+0x26/0x30 [ 1607.490705][T17158] RIP: 0033:0x7f43235c2088 [ 1607.490720][T17158] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 1607.490741][T17158] RSP: 002b:00007ffe9e3511e0 EFLAGS: 00010293 [ 1607.490755][T17158] RAX: 0000000000000000 RBX: 000000000000092a RCX: 00007f43235c2085 [ 1607.490764][T17158] RDX: 00007ffe9e351220 RSI: 0000000000000000 RDI: 0000000000000000 [ 1607.490773][T17158] RBP: 00007ffe9e35128c R08: 0000000000000000 R09: 0000000000000000 [ 1607.490782][T17158] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1607.490791][T17158] R13: 00000000000927c0 R14: 0000000000188594 R15: 00007ffe9e3512e0 [ 1607.490811][T17158] [ 1607.490817][T17158] memory: usage 3072kB, limit 3072kB, failcnt 330869 [ 1607.941836][T28748] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4826'. [ 1607.979274][T28739] ,cpuset=/,mems_allowed=0-1 [ 1607.990369][T28739] CPU: 1 UID: 0 PID: 28739 Comm: syz.6.4826 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1607.990396][T28739] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1607.990402][T28739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1607.990411][T28739] Call Trace: [ 1607.990417][T28739] [ 1607.990423][T28739] dump_stack_lvl+0x16c/0x1f0 [ 1607.990449][T28739] warn_alloc+0x248/0x3a0 [ 1607.990468][T28739] ? __pfx_warn_alloc+0x10/0x10 [ 1607.990486][T28739] ? kfree+0x2f8/0x6e0 [ 1607.990501][T28739] ? __get_vm_area_node+0x2cd/0x330 [ 1607.990527][T28739] ? __get_vm_area_node+0x2cd/0x330 [ 1607.990547][T28739] ? __get_vm_area_node+0x1dc/0x330 [ 1607.990568][T28739] ? __get_vm_area_node+0x208/0x330 [ 1607.990594][T28739] __vmalloc_node_range_noprof+0xbe0/0x16b0 [ 1607.990620][T28739] ? lock_acquire+0x179/0x330 [ 1607.990638][T28739] ? __snd_dma_alloc_pages+0x53/0x90 [ 1607.990662][T28739] ? trace_contention_end+0xdd/0x110 [ 1607.990680][T28739] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1607.990705][T28739] ? do_alloc_pages+0xf8/0x2d0 [ 1607.990727][T28739] ? __mutex_unlock_slowpath+0x161/0x790 [ 1607.990746][T28739] ? __snd_dma_alloc_pages+0x53/0x90 [ 1607.990767][T28739] __vmalloc_node_noprof+0xad/0xf0 [ 1607.990790][T28739] ? __snd_dma_alloc_pages+0x53/0x90 [ 1607.990811][T28739] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1607.990835][T28739] __snd_dma_alloc_pages+0x53/0x90 [ 1607.990857][T28739] snd_dma_alloc_dir_pages+0x151/0x240 [ 1607.990881][T28739] do_alloc_pages+0x136/0x2d0 [ 1607.990904][T28739] snd_pcm_lib_malloc_pages+0x3df/0x9a0 [ 1607.990929][T28739] snd_pcm_hw_params+0x1656/0x1ba0 [ 1607.990954][T28739] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1607.990975][T28739] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1607.990994][T28739] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1607.991015][T28739] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1607.991035][T28739] ? __asan_memset+0x23/0x50 [ 1607.991054][T28739] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1607.991076][T28739] snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 1607.991104][T28739] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1607.991122][T28739] ? __pfx___mutex_lock+0x10/0x10 [ 1607.991151][T28739] ? futex_wake+0x1ad/0x530 [ 1607.991176][T28739] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1607.991199][T28739] snd_pcm_oss_get_formats+0x7e/0x340 [ 1607.991216][T28739] ? find_held_lock+0x2b/0x80 [ 1607.991235][T28739] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 1607.991255][T28739] ? __might_fault+0x13b/0x190 [ 1607.991277][T28739] snd_pcm_oss_ioctl+0x2f49/0x37f0 [ 1607.991295][T28739] ? find_held_lock+0x2b/0x80 [ 1607.991314][T28739] ? hook_file_ioctl_common+0x144/0x410 [ 1607.991337][T28739] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1607.991358][T28739] ? __fget_files+0x20e/0x3c0 [ 1607.991382][T28739] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1607.991404][T28739] __x64_sys_ioctl+0x18e/0x210 [ 1607.991424][T28739] do_syscall_64+0xcd/0xf80 [ 1607.991441][T28739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1607.991460][T28739] RIP: 0033:0x7f5e8458f7c9 [ 1607.991474][T28739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1607.991489][T28739] RSP: 002b:00007f5e85501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.991504][T28739] RAX: ffffffffffffffda RBX: 00007f5e847e5fa0 RCX: 00007f5e8458f7c9 [ 1607.991514][T28739] RDX: 0000200000000180 RSI: 00000000c0045005 RDI: 000000000000000a [ 1607.991523][T28739] RBP: 00007f5e84613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1607.991532][T28739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1607.991541][T28739] R13: 00007f5e847e6038 R14: 00007f5e847e5fa0 R15: 00007ffc03e533f8 [ 1607.991561][T28739] [ 1607.991614][T28739] Mem-Info: [ 1608.430431][T17158] memory+swap: usage 3396kB, limit 9007199254740988kB, failcnt 0 [ 1608.438174][T17158] kmem: usage 2868kB, limit 9007199254740988kB, failcnt 0 [ 1608.449324][T17158] Memory cgroup stats for /syz5: [ 1608.449430][T17158] cache 0 [ 1608.458390][T17158] rss 0 [ 1608.461557][T17158] rss_huge 0 [ 1608.464744][T17158] shmem 0 [ 1608.467660][T17158] mapped_file 0 [ 1608.472188][T17158] dirty 0 [ 1608.475119][T17158] writeback 0 [ 1608.478381][T17158] workingset_refault_anon 31116 [ 1608.483743][T17158] workingset_refault_file 44853 [ 1608.488587][T17158] swap 331776 [ 1608.492341][T17158] swapcached 208896 [ 1608.496141][T17158] pgpgin 706022 [ 1608.509244][T17158] pgpgout 719262 [ 1608.519056][T17158] pgfault 467162 [ 1608.522616][T17158] pgmajfault 16123 [ 1608.528996][T17158] inactive_anon 86016 [ 1608.532970][T17158] active_anon 122880 [ 1608.539070][T17158] inactive_file 0 [ 1608.542697][T17158] active_file 0 [ 1608.546137][T17158] unevictable 0 [ 1608.569042][T17158] hierarchical_memory_limit 3145728 [ 1608.583287][T17158] hierarchical_memsw_limit 9223372036854771712 [ 1608.589927][T17158] total_cache 0 [ 1608.593489][T17158] total_rss 0 [ 1608.596754][T17158] total_rss_huge 0 [ 1608.600550][T17158] total_shmem 0 [ 1608.603989][T17158] total_mapped_file 0 [ 1608.607974][T17158] total_dirty 0 [ 1608.611472][T17158] total_writeback 0 [ 1608.615260][T17158] total_workingset_refault_anon 31116 [ 1608.620661][T17158] total_workingset_refault_file 44853 [ 1608.626014][T17158] total_swap 331776 [ 1608.629838][T17158] total_swapcached 208896 [ 1608.634423][T17158] total_pgpgin 706022 [ 1608.638389][T17158] total_pgpgout 719262 [ 1608.642507][T17158] total_pgfault 467162 [ 1608.646554][T17158] total_pgmajfault 16123 [ 1608.650824][T17158] total_inactive_anon 86016 [ 1608.655308][T17158] total_active_anon 122880 [ 1608.669022][T17158] total_inactive_file 0 [ 1608.673195][T17158] total_active_file 0 [ 1608.677156][T17158] total_unevictable 0 [ 1608.681178][T17158] anon_cost 22 [ 1608.684663][T17158] file_cost 0 [ 1608.687931][T17158] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4833,pid=28769,uid=0 [ 1608.702962][T17158] Memory cgroup out of memory: Killed process 28769 (syz.5.4833) total-vm:106264kB, anon-rss:1268kB, file-rss:21952kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1609.413071][T28739] active_anon:3145 inactive_anon:39111 isolated_anon:0 [ 1609.413071][T28739] active_file:24541 inactive_file:39411 isolated_file:0 [ 1609.413071][T28739] unevictable:768 dirty:587 writeback:0 [ 1609.413071][T28739] slab_reclaimable:13076 slab_unreclaimable:101528 [ 1609.413071][T28739] mapped:41533 shmem:24303 pagetables:1619 [ 1609.413071][T28739] sec_pagetables:0 bounce:0 [ 1609.413071][T28739] kernel_misc_reclaimable:0 [ 1609.413071][T28739] free:1255263 free_pcp:17632 free_cma:0 [ 1609.533743][T28776] FAULT_INJECTION: forcing a failure. [ 1609.533743][T28776] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.549486][T28739] Node 0 active_anon:12580kB inactive_anon:158628kB active_file:98160kB inactive_file:157516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168420kB dirty:2348kB writeback:0kB shmem:97964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:51200kB kernel_stack:12160kB pagetables:6296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1609.610385][T28776] CPU: 1 UID: 0 PID: 28776 Comm: syz.1.4834 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1609.610414][T28776] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1609.610421][T28776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1609.610431][T28776] Call Trace: [ 1609.610437][T28776] [ 1609.610444][T28776] dump_stack_lvl+0x16c/0x1f0 [ 1609.610466][T28776] should_fail_ex+0x512/0x640 [ 1609.610487][T28776] ? __kmalloc_noprof+0xca/0x910 [ 1609.610506][T28776] should_failslab+0xc2/0x120 [ 1609.610529][T28776] __kmalloc_noprof+0xeb/0x910 [ 1609.610545][T28776] ? __register_sysctl_table+0xb3/0x1900 [ 1609.610569][T28776] ? __register_sysctl_table+0xb3/0x1900 [ 1609.610587][T28776] __register_sysctl_table+0xb3/0x1900 [ 1609.610607][T28776] ? is_module_address+0x5f/0xf0 [ 1609.610628][T28776] ? __pfx___register_sysctl_table+0x10/0x10 [ 1609.610647][T28776] ? is_module_address+0x69/0xf0 [ 1609.610664][T28776] ? register_net_sysctl_sz+0x222/0x450 [ 1609.610688][T28776] __addrconf_sysctl_register+0x1a2/0x360 [ 1609.610707][T28776] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1609.610726][T28776] ? lockdep_init_map_type+0x5c/0x270 [ 1609.610741][T28776] ? mld_in_v1_mode+0x2b2/0x3a0 [ 1609.610763][T28776] addrconf_sysctl_register+0x15f/0x1f0 [ 1609.610781][T28776] ipv6_add_dev+0xb31/0x15f0 [ 1609.610799][T28776] addrconf_notify+0x53e/0x19f0 [ 1609.610819][T28776] ? ip6mr_device_event+0x1bc/0x230 [ 1609.610843][T28776] notifier_call_chain+0xbc/0x3e0 [ 1609.610867][T28776] ? __pfx_addrconf_notify+0x10/0x10 [ 1609.610891][T28776] call_netdevice_notifiers_info+0xbe/0x110 [ 1609.610911][T28776] register_netdevice+0x1792/0x21d0 [ 1609.610931][T28776] ? __pfx_register_netdevice+0x10/0x10 [ 1609.610952][T28776] __ip_tunnel_create+0x540/0x6b0 [ 1609.610971][T28776] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1609.610994][T28776] ip_tunnel_init_net+0x22f/0x7d0 [ 1609.611015][T28776] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1609.611038][T28776] ? ops_init+0x77/0x5f0 [ 1609.611053][T28776] ? __pfx_erspan_init_net+0x10/0x10 [ 1609.611077][T28776] ops_init+0x1e2/0x5f0 [ 1609.611093][T28776] setup_net+0x11d/0x3a0 [ 1609.611110][T28776] ? __pfx_setup_net+0x10/0x10 [ 1609.611122][T28776] ? lockdep_init_map_type+0x5c/0x270 [ 1609.611138][T28776] ? mutex_init_lockep+0x110/0x150 [ 1609.611156][T28776] copy_net_ns+0x351/0x7c0 [ 1609.611173][T28776] create_new_namespaces+0x3ea/0xab0 [ 1609.611198][T28776] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1609.611221][T28776] ksys_unshare+0x45b/0xa40 [ 1609.611245][T28776] ? __pfx_ksys_unshare+0x10/0x10 [ 1609.611269][T28776] ? xfd_validate_state+0x61/0x180 [ 1609.611289][T28776] __x64_sys_unshare+0x31/0x40 [ 1609.611312][T28776] do_syscall_64+0xcd/0xf80 [ 1609.611329][T28776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.611346][T28776] RIP: 0033:0x7f8f4938f7c9 [ 1609.611359][T28776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.611379][T28776] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1609.611395][T28776] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1609.611407][T28776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1609.611417][T28776] RBP: 00007f8f49413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1609.611426][T28776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.611436][T28776] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1609.611457][T28776] [ 1610.311843][T28739] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1610.397684][T28739] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.592798][T28739] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 1610.649044][T28739] Node 0 DMA32 free:1085244kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12652kB inactive_anon:154828kB active_file:98164kB inactive_file:157528kB unevictable:1536kB writepending:2496kB zspages:604kB present:3129332kB managed:2541136kB mlocked:0kB bounce:0kB free_pcp:76504kB local_pcp:76504kB free_cma:0kB [ 1610.886310][T28789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4837'. [ 1611.012096][T28739] lowmem_reserve[]: 0 0 1 1 1 [ 1611.072229][T28739] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1611.367128][T28739] lowmem_reserve[]: 0 0 0 0 0 [ 1611.403996][T28739] Node 1 Normal free:3880352kB boost:0kB min:55544kB low:69428kB high:83312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:128kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:35224kB local_pcp:35224kB free_cma:0kB [ 1611.729034][T28739] lowmem_reserve[]: 0 0 0 0 0 [ 1611.770373][T28739] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1611.890470][T28739] Node 0 DMA32: 2591*4kB (UME) 5190*8kB (UME) 3203*16kB (UE) 361*32kB (UE) 343*64kB (UE) 335*128kB (UME) 572*256kB (UME) 403*512kB (UME) 258*1024kB (UME) 9*2048kB (UM) 66*4096kB (UM) = 1085244kB [ 1612.007841][T28795] syz.5.4839 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 1612.068490][T28795] CPU: 1 UID: 0 PID: 28795 Comm: syz.5.4839 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1612.068517][T28795] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1612.068523][T28795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1612.068532][T28795] Call Trace: [ 1612.068538][T28795] [ 1612.068545][T28795] dump_stack_lvl+0x16c/0x1f0 [ 1612.068565][T28795] dump_header+0x101/0x960 [ 1612.068585][T28795] oom_kill_process+0x176/0x910 [ 1612.068603][T28795] out_of_memory+0x350/0x1700 [ 1612.068620][T28795] ? __lock_acquire+0x436/0x2890 [ 1612.068637][T28795] ? __pfx_out_of_memory+0x10/0x10 [ 1612.068658][T28795] mem_cgroup_out_of_memory+0x118/0x130 [ 1612.068677][T28795] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1612.068698][T28795] ? do_raw_spin_unlock+0x172/0x230 [ 1612.068719][T28795] try_charge_memcg+0x695/0xd30 [ 1612.068746][T28795] ? __pfx_try_charge_memcg+0x10/0x10 [ 1612.068768][T28795] ? __pfx_peak_open+0x1/0x10 [ 1612.068794][T28795] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1612.068815][T28795] obj_cgroup_charge_account+0x336/0x670 [ 1612.068841][T28795] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1612.068871][T28795] __kmalloc_cache_noprof+0x5cc/0x800 [ 1612.068889][T28795] ? ipv6_add_dev+0x6af/0x15f0 [ 1612.068909][T28795] ? ipv6_add_dev+0x6af/0x15f0 [ 1612.068922][T28795] ipv6_add_dev+0x6af/0x15f0 [ 1612.068945][T28795] addrconf_notify+0x53e/0x19f0 [ 1612.068964][T28795] ? ip6mr_device_event+0x1bc/0x230 [ 1612.068989][T28795] notifier_call_chain+0xbc/0x3e0 [ 1612.069014][T28795] ? __pfx_addrconf_notify+0x10/0x10 [ 1612.069038][T28795] call_netdevice_notifiers_info+0xbe/0x110 [ 1612.069058][T28795] register_netdevice+0x1792/0x21d0 [ 1612.069114][T28795] ? __pfx_register_netdevice+0x10/0x10 [ 1612.069131][T28795] ? net_generic+0xea/0x2a0 [ 1612.069149][T28795] register_netdev+0x34/0x50 [ 1612.069164][T28795] ip6_tnl_init_net+0x2c7/0x4d0 [ 1612.069180][T28795] ? __pfx_ip6_tnl_init_net+0x10/0x10 [ 1612.069195][T28795] ops_init+0x1e2/0x5f0 [ 1612.069211][T28795] setup_net+0x11d/0x3a0 [ 1612.069225][T28795] ? __pfx_setup_net+0x10/0x10 [ 1612.069237][T28795] ? lockdep_init_map_type+0x5c/0x270 [ 1612.069252][T28795] ? mutex_init_lockep+0x110/0x150 [ 1612.069270][T28795] copy_net_ns+0x351/0x7c0 [ 1612.069288][T28795] create_new_namespaces+0x3ea/0xab0 [ 1612.069313][T28795] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1612.069336][T28795] ksys_unshare+0x45b/0xa40 [ 1612.069360][T28795] ? __pfx_ksys_unshare+0x10/0x10 [ 1612.069384][T28795] ? xfd_validate_state+0x61/0x180 [ 1612.069404][T28795] __x64_sys_unshare+0x31/0x40 [ 1612.069427][T28795] do_syscall_64+0xcd/0xf80 [ 1612.069444][T28795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.069459][T28795] RIP: 0033:0x7f432358f7c9 [ 1612.069473][T28795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1612.069488][T28795] RSP: 002b:00007f43243ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1612.069503][T28795] RAX: ffffffffffffffda RBX: 00007f43237e5fa0 RCX: 00007f432358f7c9 [ 1612.069513][T28795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1612.069522][T28795] RBP: 00007f4323613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1612.069531][T28795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.069540][T28795] R13: 00007f43237e6038 R14: 00007f43237e5fa0 R15: 00007ffe9e350ec8 [ 1612.069560][T28795] [ 1612.749060][T28739] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1612.782299][T28739] Node 1 Normal: 4*4kB (UME) 8*8kB (UME) 59*16kB (UME) 173*32kB (UME) 82*64kB (UME) 45*128kB (UME) 17*256kB (UME) 8*512kB (UM) 8*1024kB (UME) 4*2048kB (UME) 937*4096kB (UM) = 3880352kB [ 1612.839089][T28739] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.857589][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.869076][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.891794][T28739] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=0 hugepages_size=2048kB [ 1612.929183][T28739] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1612.984251][T28739] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1613.024819][T27517] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1613.108074][T28739] 92285 total pagecache pages [ 1613.157559][T28739] 90 pages in swap cache [ 1613.202813][T28739] Free swap = 123064kB [ 1613.267523][T28739] Total swap = 124996kB [ 1613.319124][T28739] 2097051 pages RAM [ 1613.362580][T28739] 0 pages HighMem/MovableOnly [ 1613.397892][T28739] 429741 pages reserved [ 1613.473339][T28739] 0 pages cma reserved [ 1613.688013][T28795] memory: usage 3072kB, limit 3072kB, failcnt 332790 [ 1613.740427][T28795] memory+swap: usage 5664kB, limit 9007199254740988kB, failcnt 0 [ 1613.748192][T28795] kmem: usage 2828kB, limit 9007199254740988kB, failcnt 0 [ 1613.767141][T28807] netlink: set zone limit has 8 unknown bytes [ 1613.801496][T28795] Memory cgroup stats for /syz5: [ 1613.801600][T28795] cache 0 [ 1613.853398][T28795] rss 4096 [ 1613.856462][T28795] rss_huge 0 [ 1613.883927][T28795] shmem 0 [ 1613.886886][T28795] mapped_file 0 [ 1613.909519][T28795] dirty 0 [ 1613.912499][T28795] writeback 0 [ 1613.915785][T28795] workingset_refault_anon 31604 [ 1613.949507][T28795] workingset_refault_file 44853 [ 1613.959085][T28795] swap 2686976 [ 1613.968535][T28795] swapcached 245760 [ 1613.984591][T28795] pgpgin 707745 [ 1613.993211][T28795] pgpgout 721398 [ 1614.009083][T28795] pgfault 469120 [ 1614.024440][T28795] pgmajfault 16441 [ 1614.028200][T28795] inactive_anon 131072 [ 1614.048284][T28795] active_anon 118784 [ 1614.069460][T28795] inactive_file 0 [ 1614.073143][T28795] active_file 0 [ 1614.092354][T28795] unevictable 0 [ 1614.098576][T28795] hierarchical_memory_limit 3145728 [ 1614.116005][T28795] hierarchical_memsw_limit 9223372036854771712 [ 1614.139663][T28795] total_cache 0 [ 1614.143145][T28795] total_rss 4096 [ 1614.166498][T28795] total_rss_huge 0 [ 1614.174975][T28795] total_shmem 0 [ 1614.178485][T28795] total_mapped_file 0 [ 1614.199114][T28795] total_dirty 0 [ 1614.209508][T28795] total_writeback 0 [ 1614.224684][T28795] total_workingset_refault_anon 31604 [ 1614.249536][T28795] total_workingset_refault_file 44853 [ 1614.261283][T28795] total_swap 2686976 [ 1614.265218][T28795] total_swapcached 245760 [ 1614.289138][T28795] total_pgpgin 707745 [ 1614.302535][T28795] total_pgpgout 721398 [ 1614.314285][T28795] total_pgfault 469120 [ 1614.324199][T28795] total_pgmajfault 16441 [ 1614.337444][T28795] total_inactive_anon 131072 [ 1614.350473][T28795] total_active_anon 118784 [ 1614.363777][T28795] total_inactive_file 0 [ 1614.375676][T28795] total_active_file 0 [ 1614.388765][T28795] total_unevictable 0 [ 1614.404350][T28795] anon_cost 21 [ 1614.414595][T28795] file_cost 0 [ 1614.423111][T28795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4839,pid=28794,uid=0 [ 1614.470343][T28795] Memory cgroup out of memory: Killed process 28794 (syz.5.4839) total-vm:108312kB, anon-rss:1268kB, file-rss:21796kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1615.100211][T11491] Bluetooth: hci3: command 0x0c1a tx timeout [ 1616.474526][T19763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1616.488786][T19763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1616.497866][T19763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1616.506020][T19763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1616.521012][T19763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1617.103510][T28860] netlink: 322 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1617.130239][T28853] zswap: compressor not available [ 1617.188847][T11491] Bluetooth: hci3: command 0x0c1a tx timeout [ 1617.274045][T28849] chnl_net:caif_netlink_parms(): no params data found [ 1617.363223][T28863] FAULT_INJECTION: forcing a failure. [ 1617.363223][T28863] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.454753][T28863] CPU: 1 UID: 0 PID: 28863 Comm: syz.6.4852 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1617.454783][T28863] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1617.454790][T28863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1617.454799][T28863] Call Trace: [ 1617.454805][T28863] [ 1617.454812][T28863] dump_stack_lvl+0x16c/0x1f0 [ 1617.454834][T28863] should_fail_ex+0x512/0x640 [ 1617.454854][T28863] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1617.454874][T28863] should_failslab+0xc2/0x120 [ 1617.454897][T28863] __kmalloc_cache_noprof+0x80/0x800 [ 1617.454914][T28863] ? rfkill_fop_open+0x1b6/0x750 [ 1617.454939][T28863] ? rfkill_fop_open+0x1b6/0x750 [ 1617.454960][T28863] rfkill_fop_open+0x1b6/0x750 [ 1617.454984][T28863] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1617.455007][T28863] misc_open+0x26d/0x450 [ 1617.455028][T28863] ? __pfx_misc_open+0x10/0x10 [ 1617.455048][T28863] chrdev_open+0x234/0x6a0 [ 1617.455070][T28863] ? __pfx_apparmor_file_open+0x10/0x10 [ 1617.455091][T28863] ? __pfx_chrdev_open+0x10/0x10 [ 1617.455114][T28863] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1617.455141][T28863] do_dentry_open+0x748/0x1590 [ 1617.455163][T28863] ? __pfx_chrdev_open+0x10/0x10 [ 1617.455190][T28863] vfs_open+0x82/0x3f0 [ 1617.455208][T28863] path_openat+0x2078/0x3140 [ 1617.455236][T28863] ? __pfx_path_openat+0x10/0x10 [ 1617.455264][T28863] do_filp_open+0x20b/0x470 [ 1617.455287][T28863] ? __pfx_do_filp_open+0x10/0x10 [ 1617.455323][T28863] ? alloc_fd+0x471/0x7d0 [ 1617.455349][T28863] do_sys_openat2+0x11f/0x280 [ 1617.455365][T28863] ? __pfx_do_sys_openat2+0x10/0x10 [ 1617.455388][T28863] __x64_sys_openat+0x174/0x210 [ 1617.455405][T28863] ? __pfx___x64_sys_openat+0x10/0x10 [ 1617.455430][T28863] do_syscall_64+0xcd/0xf80 [ 1617.455447][T28863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.455462][T28863] RIP: 0033:0x7f5e8458f7c9 [ 1617.455477][T28863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1617.455491][T28863] RSP: 002b:00007f5e85501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1617.455515][T28863] RAX: ffffffffffffffda RBX: 00007f5e847e5fa0 RCX: 00007f5e8458f7c9 [ 1617.455526][T28863] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1617.455536][T28863] RBP: 00007f5e84613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1617.455546][T28863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.455556][T28863] R13: 00007f5e847e6038 R14: 00007f5e847e5fa0 R15: 00007ffc03e533f8 [ 1617.455578][T28863] [ 1617.730780][T28849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.737938][T28849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.745645][T28849] bridge_slave_0: entered allmulticast mode [ 1617.752661][T28849] bridge_slave_0: entered promiscuous mode [ 1617.760046][T28849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.767160][T28849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.774352][T28849] bridge_slave_1: entered allmulticast mode [ 1617.781884][T28849] bridge_slave_1: entered promiscuous mode [ 1617.805497][T28849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.816896][T28849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.842360][T28849] team0: Port device team_slave_0 added [ 1617.849868][T28849] team0: Port device team_slave_1 added [ 1617.870840][T28849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.878338][T28849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.904534][T28849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.916445][T28849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.923452][T28849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.949431][T28849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.124311][T28849] hsr_slave_0: entered promiscuous mode [ 1618.130613][T28849] hsr_slave_1: entered promiscuous mode [ 1618.173063][T28849] debugfs: 'hsr0' already exists in 'hsr' [ 1618.202225][T28849] Cannot create hsr debugfs directory [ 1618.440750][T11491] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1618.623026][T11491] Bluetooth: hci2: command tx timeout [ 1618.969450][T28849] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.324892][T28849] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.509898][T28849] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.634783][T28849] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.265159][T28849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1620.318881][T28849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1620.463805][T28849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1620.592978][T28849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1620.702968][T11491] Bluetooth: hci2: command tx timeout [ 1620.753837][T28911] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 1621.113834][T28849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.188376][T28849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.236032][T28912] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 1621.255730][T12883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.262866][T12883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.337250][T12883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.344458][T12883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.994790][T28849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1622.784548][T11491] Bluetooth: hci2: command tx timeout [ 1622.860263][T28849] veth0_vlan: entered promiscuous mode [ 1622.930336][T28849] veth1_vlan: entered promiscuous mode [ 1623.173169][T28849] veth0_macvtap: entered promiscuous mode [ 1623.276848][T28849] veth1_macvtap: entered promiscuous mode [ 1623.412425][T28849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1623.466311][T28849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1623.543777][T12879] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.607417][T12879] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.680147][T12879] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.739810][T12879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.027127][T28965] Setting dangerous option i915.mitigations - tainting kernel [ 1624.035861][ T30] audit: type=1800 audit(4294968491.459:144): pid=28965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4868" name="lu_gp_id" dev="configfs" ino=151321 res=0 errno=0 [ 1624.100564][T19588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.159815][T19588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.319638][T12883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.351803][T12883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.635141][T28977] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input86 [ 1624.865109][T19763] Bluetooth: hci2: command tx timeout [ 1624.914638][T28981] mkiss: ax0: crc mode is auto. [ 1625.464540][T28991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4874'. [ 1625.660619][T28991] Invalid ELF header magic: != ELF [ 1625.945561][T29001] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1626.080884][T29003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4878'. [ 1626.359701][T19763] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1626.866125][T11491] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1627.165337][T11491] Bluetooth: hci1: unexpected event 0x2f length: 721 > 260 [ 1627.165363][T11491] Bluetooth: hci1: Malformed Event: 0x2f [ 1627.539908][T29050] netlink: 346 bytes leftover after parsing attributes in process `syz.1.4890'. [ 1627.613576][T29055] random: crng reseeded on system resumption [ 1627.711444][T29047] Process accounting resumed [ 1627.760800][T29063] binder: 29054:29063 ioctl c018620c 0 returned -1 [ 1628.649156][T29071] can: request_module (can-proto-0) failed. [ 1629.826887][T29107] ptrace attach of "./syz-executor exec"[29108] was attempted by "./syz-executor exec"[29107] [ 1629.935044][T29101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4902'. [ 1630.696659][T29116] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 1631.115713][T11491] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 1631.115738][T11491] Bluetooth: hci3: unexpected subevent 0x0c length: 727 > 5 [ 1631.149604][T29135] FAULT_INJECTION: forcing a failure. [ 1631.149604][T29135] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.191736][T29135] CPU: 1 UID: 0 PID: 29135 Comm: syz.1.4913 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1631.191767][T29135] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1631.191773][T29135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1631.191783][T29135] Call Trace: [ 1631.191790][T29135] [ 1631.191797][T29135] dump_stack_lvl+0x16c/0x1f0 [ 1631.191818][T29135] should_fail_ex+0x512/0x640 [ 1631.191841][T29135] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1631.191866][T29135] should_failslab+0xc2/0x120 [ 1631.191894][T29135] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1631.191917][T29135] ? kstrdup_const+0x63/0x80 [ 1631.191940][T29135] ? kstrdup+0x53/0x100 [ 1631.191956][T29135] kstrdup+0x53/0x100 [ 1631.191975][T29135] kstrdup_const+0x63/0x80 [ 1631.191992][T29135] __kernfs_new_node+0x9b/0x990 [ 1631.192009][T29135] ? __kernel_text_address+0xd/0x40 [ 1631.192029][T29135] ? __pfx___kernfs_new_node+0x10/0x10 [ 1631.192051][T29135] ? find_held_lock+0x2b/0x80 [ 1631.192071][T29135] ? kernfs_root+0xee/0x2a0 [ 1631.192092][T29135] kernfs_new_node+0x13c/0x1e0 [ 1631.192111][T29135] ? net_ns_get_ownership+0xf8/0x1b0 [ 1631.192137][T29135] kernfs_create_dir_ns+0x4c/0x1a0 [ 1631.192160][T29135] sysfs_create_dir_ns+0x13a/0x2b0 [ 1631.192176][T29135] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1631.192192][T29135] ? find_held_lock+0x2b/0x80 [ 1631.192213][T29135] ? net_namespace+0x12/0x50 [ 1631.192229][T29135] ? device_namespace+0x76/0xa0 [ 1631.192261][T29135] kobject_add_internal+0x2c4/0x9d0 [ 1631.192284][T29135] kobject_add+0x16e/0x240 [ 1631.192303][T29135] ? __pfx_kobject_add+0x10/0x10 [ 1631.192322][T29135] ? get_device_parent+0x1c5/0x4e0 [ 1631.192344][T29135] ? kobject_put+0xaf/0x6f0 [ 1631.192366][T29135] device_add+0x288/0x1980 [ 1631.192380][T29135] ? __pfx_dev_set_name+0x10/0x10 [ 1631.192397][T29135] ? __pfx_device_add+0x10/0x10 [ 1631.192411][T29135] ? lockdep_init_map_type+0x5c/0x270 [ 1631.192427][T29135] ? __init_waitqueue_head+0xca/0x150 [ 1631.192448][T29135] netdev_register_kobject+0x1a9/0x3d0 [ 1631.192468][T29135] register_netdevice+0x13ac/0x21d0 [ 1631.192488][T29135] ? __pfx_register_netdevice+0x10/0x10 [ 1631.192509][T29135] ppp_dev_configure+0xa1e/0xd40 [ 1631.192530][T29135] ppp_ioctl+0x170e/0x2880 [ 1631.192546][T29135] ? find_held_lock+0x2b/0x80 [ 1631.192565][T29135] ? __pfx_ppp_ioctl+0x10/0x10 [ 1631.192584][T29135] ? __fget_files+0x20e/0x3c0 [ 1631.192607][T29135] ? __pfx_ppp_ioctl+0x10/0x10 [ 1631.192623][T29135] __x64_sys_ioctl+0x18e/0x210 [ 1631.192643][T29135] do_syscall_64+0xcd/0xf80 [ 1631.192660][T29135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.192676][T29135] RIP: 0033:0x7f8f4938f7c9 [ 1631.192690][T29135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1631.192705][T29135] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1631.192721][T29135] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1631.192735][T29135] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000009 [ 1631.192745][T29135] RBP: 00007f8f49413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1631.192755][T29135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.192764][T29135] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1631.192784][T29135] [ 1631.195992][T29135] kobject: kobject_add_internal failed for ppp808482864 (error: -12 parent: net) [ 1632.144078][T29162] sp0: Synchronizing with TNC [ 1632.187599][T29164] FAULT_INJECTION: forcing a failure. [ 1632.187599][T29164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1632.215422][T29164] CPU: 1 UID: 0 PID: 29164 Comm: syz.1.4919 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1632.215451][T29164] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1632.215458][T29164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1632.215469][T29164] Call Trace: [ 1632.215475][T29164] [ 1632.215485][T29164] dump_stack_lvl+0x16c/0x1f0 [ 1632.215507][T29164] should_fail_ex+0x512/0x640 [ 1632.215533][T29164] should_fail_alloc_page+0xe7/0x130 [ 1632.215559][T29164] prepare_alloc_pages+0x401/0x670 [ 1632.215582][T29164] ? _raw_spin_unlock+0x28/0x50 [ 1632.215607][T29164] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1632.215626][T29164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1632.215650][T29164] ? __lock_acquire+0x436/0x2890 [ 1632.215667][T29164] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1632.215693][T29164] ? __lock_acquire+0x436/0x2890 [ 1632.215709][T29164] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1632.215733][T29164] ? policy_nodemask+0xea/0x4e0 [ 1632.215757][T29164] alloc_pages_mpol+0x1fb/0x550 [ 1632.215780][T29164] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1632.215807][T29164] alloc_pages_noprof+0x131/0x390 [ 1632.215836][T29164] pte_alloc_one+0x1e/0x3d0 [ 1632.215858][T29164] do_huge_pmd_anonymous_page+0x2bb/0x2200 [ 1632.215883][T29164] __handle_mm_fault+0x25ca/0x2bb0 [ 1632.215901][T29164] ? __lock_acquire+0x436/0x2890 [ 1632.215914][T29164] ? css_rstat_updated+0x1c2/0x510 [ 1632.215929][T29164] ? __pfx___handle_mm_fault+0x10/0x10 [ 1632.215945][T29164] ? __pfx_css_rstat_updated+0x10/0x10 [ 1632.215963][T29164] ? __lock_acquire+0x436/0x2890 [ 1632.215989][T29164] handle_mm_fault+0x3fe/0xad0 [ 1632.216008][T29164] __get_user_pages+0x54e/0x3590 [ 1632.216039][T29164] ? __pfx___get_user_pages+0x10/0x10 [ 1632.216073][T29164] populate_vma_page_range+0x267/0x3f0 [ 1632.216098][T29164] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1632.216121][T29164] ? __pfx_find_vma_intersection+0x10/0x10 [ 1632.216144][T29164] ? do_mmap+0x69c/0x1210 [ 1632.216168][T29164] __mm_populate+0x1d8/0x380 [ 1632.216191][T29164] ? __pfx___mm_populate+0x10/0x10 [ 1632.216215][T29164] ? up_write+0x282/0x4e0 [ 1632.216234][T29164] vm_mmap_pgoff+0x37f/0x470 [ 1632.216257][T29164] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1632.216282][T29164] ? __x64_sys_futex+0x1e0/0x4c0 [ 1632.216299][T29164] ? __x64_sys_futex+0x1e9/0x4c0 [ 1632.216318][T29164] ksys_mmap_pgoff+0x7d/0x5c0 [ 1632.216339][T29164] ? xfd_validate_state+0x61/0x180 [ 1632.216352][T29164] ? __pfx_do_writev+0x10/0x10 [ 1632.216374][T29164] __x64_sys_mmap+0x125/0x190 [ 1632.216392][T29164] do_syscall_64+0xcd/0xf80 [ 1632.216409][T29164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.216425][T29164] RIP: 0033:0x7f8f4938f7c9 [ 1632.216439][T29164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1632.216454][T29164] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1632.216469][T29164] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1632.216480][T29164] RDX: 00000000000000e3 RSI: 0000000000400008 RDI: 0000000000000000 [ 1632.216490][T29164] RBP: 00007f8f49413f91 R08: 0000000000000002 R09: 0000000000008000 [ 1632.216499][T29164] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1632.216509][T29164] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1632.216530][T29164] [ 1634.346074][T29205] serio: Serial port pty6 [ 1634.595880][T29202] FAULT_INJECTION: forcing a failure. [ 1634.595880][T29202] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.647648][T29202] CPU: 1 UID: 0 PID: 29202 Comm: syz.5.4930 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1634.647676][T29202] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1634.647683][T29202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1634.647692][T29202] Call Trace: [ 1634.647698][T29202] [ 1634.647706][T29202] dump_stack_lvl+0x16c/0x1f0 [ 1634.647728][T29202] should_fail_ex+0x512/0x640 [ 1634.647750][T29202] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1634.647769][T29202] should_failslab+0xc2/0x120 [ 1634.647851][T29202] __kmalloc_cache_noprof+0x80/0x800 [ 1634.647879][T29202] ? trace_pid_list_alloc+0x232/0x480 [ 1634.647905][T29202] ? trace_pid_list_alloc+0x232/0x480 [ 1634.647933][T29202] trace_pid_list_alloc+0x232/0x480 [ 1634.647956][T29202] trace_pid_write+0x10c/0x4b0 [ 1634.647975][T29202] ? __pfx_trace_pid_write+0x10/0x10 [ 1634.647988][T29202] ? __pfx_aa_file_perm+0x10/0x10 [ 1634.648005][T29202] ? update_last_data+0xaa/0x510 [ 1634.648032][T29202] event_pid_write.isra.0+0x1e4/0x7f0 [ 1634.648059][T29202] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 1634.648086][T29202] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 1634.648108][T29202] vfs_write+0x2a0/0x11d0 [ 1634.648130][T29202] ? __pfx___mutex_lock+0x10/0x10 [ 1634.648149][T29202] ? __pfx_vfs_write+0x10/0x10 [ 1634.648175][T29202] ? __fget_files+0x20e/0x3c0 [ 1634.648201][T29202] ksys_write+0x12a/0x250 [ 1634.648222][T29202] ? __pfx_ksys_write+0x10/0x10 [ 1634.648250][T29202] do_syscall_64+0xcd/0xf80 [ 1634.648273][T29202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.648289][T29202] RIP: 0033:0x7fe2ce98f7c9 [ 1634.648304][T29202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.648319][T29202] RSP: 002b:00007fe2cf7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1634.648334][T29202] RAX: ffffffffffffffda RBX: 00007fe2cebe6090 RCX: 00007fe2ce98f7c9 [ 1634.648346][T29202] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1634.648357][T29202] RBP: 00007fe2cea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1634.648367][T29202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.648376][T29202] R13: 00007fe2cebe6128 R14: 00007fe2cebe6090 R15: 00007ffc837f0af8 [ 1634.648396][T29202] [ 1636.787780][T29273] random: crng reseeded on system resumption [ 1637.327799][T29283] vivid-007: ================= START STATUS ================= [ 1637.438962][T29283] vivid-007: Generate PTS: true [ 1637.558079][T29283] vivid-007: Generate SCR: true [ 1637.563061][T29283] tpg source WxH: 320x240 (Y'CbCr) [ 1637.729647][T29283] tpg field: 1 [ 1637.783417][T29283] tpg crop: (0,0)/320x240 [ 1637.850031][T29283] tpg compose: (0,0)/320x240 [ 1637.909002][T29283] tpg colorspace: 8 [ 1637.954616][T29283] tpg transfer function: 0/0 [ 1638.025103][T29283] tpg Y'CbCr encoding: 0/0 [ 1638.076761][T29289] zswap: compressor not available [ 1638.082630][T29283] tpg quantization: 0/0 [ 1638.145144][T29283] tpg RGB range: 0/2 [ 1638.149064][T29283] vivid-007: ================== END STATUS ================== [ 1638.381303][T29285] kexec: Could not allocate control_code_buffer [ 1638.596598][T29364] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1638.726470][T29367] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1640.965194][T29420] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1641.123438][T29418] sp0: Synchronizing with TNC [ 1641.157998][T29430] netlink: 178 bytes leftover after parsing attributes in process `syz.5.4970'. [ 1641.256960][T29434] FAULT_INJECTION: forcing a failure. [ 1641.256960][T29434] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.273304][T29434] CPU: 1 UID: 0 PID: 29434 Comm: syz.5.4971 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1641.273333][T29434] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1641.273339][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1641.273348][T29434] Call Trace: [ 1641.273354][T29434] [ 1641.273361][T29434] dump_stack_lvl+0x16c/0x1f0 [ 1641.273381][T29434] should_fail_ex+0x512/0x640 [ 1641.273402][T29434] ? fs_reclaim_acquire+0xae/0x150 [ 1641.273427][T29434] should_failslab+0xc2/0x120 [ 1641.273449][T29434] kmem_cache_alloc_noprof+0x83/0x770 [ 1641.273466][T29434] ? __pfx_map_id_range_down+0x10/0x10 [ 1641.273488][T29434] ? security_inode_alloc+0x3b/0x2b0 [ 1641.273511][T29434] ? security_inode_alloc+0x3b/0x2b0 [ 1641.273529][T29434] security_inode_alloc+0x3b/0x2b0 [ 1641.273549][T29434] inode_init_always_gfp+0xced/0x1040 [ 1641.273573][T29434] alloc_inode+0x86/0x240 [ 1641.273589][T29434] sock_alloc+0x40/0x280 [ 1641.273605][T29434] __sock_create+0xc2/0x8a0 [ 1641.273625][T29434] __sys_socket+0x14d/0x260 [ 1641.273642][T29434] ? __pfx___sys_socket+0x10/0x10 [ 1641.273660][T29434] ? xfd_validate_state+0x61/0x180 [ 1641.273673][T29434] ? __task_pid_nr_ns+0x1f5/0x500 [ 1641.273690][T29434] __x64_sys_socket+0x72/0xb0 [ 1641.273707][T29434] ? lockdep_hardirqs_on+0x7c/0x110 [ 1641.273723][T29434] do_syscall_64+0xcd/0xf80 [ 1641.273739][T29434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.273755][T29434] RIP: 0033:0x7fe2ce98f7c9 [ 1641.273767][T29434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.273782][T29434] RSP: 002b:00007fe2cf816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1641.273797][T29434] RAX: ffffffffffffffda RBX: 00007fe2cebe5fa0 RCX: 00007fe2ce98f7c9 [ 1641.273807][T29434] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 1641.273815][T29434] RBP: 00007fe2cea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1641.273824][T29434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.273833][T29434] R13: 00007fe2cebe6038 R14: 00007fe2cebe5fa0 R15: 00007ffc837f0af8 [ 1641.273852][T29434] [ 1641.273873][T29434] socket: no more sockets [ 1641.934737][T29449] futex_wake_op: syz.3.4974 tries to shift op by -2048; fix this program [ 1641.986277][T29449] futex_wake_op: syz.3.4974 tries to shift op by -2048; fix this program [ 1642.031596][T29449] 0x000000000001-0x000000020000 : "" [ 1642.180640][T29449] ftl_cs: FTL header corrupt! [ 1642.229628][T29459] bond0: invalid ARP target specified [ 1642.329756][T19763] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1642.397564][T19763] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 1642.692425][T29476] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4980'. [ 1643.081420][T11491] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1643.632661][T11491] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1643.643337][T11491] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 1643.653035][T11491] CPU: 1 UID: 0 PID: 11491 Comm: kworker/u11:1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1643.653063][T11491] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1643.653070][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1643.653081][T11491] Workqueue: hci0 hci_rx_work [ 1643.653108][T11491] Call Trace: [ 1643.653115][T11491] [ 1643.653122][T11491] dump_stack_lvl+0x16c/0x1f0 [ 1643.653140][T11491] sysfs_warn_dup+0x7f/0xa0 [ 1643.653169][T11491] sysfs_create_dir_ns+0x24b/0x2b0 [ 1643.653185][T11491] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1643.653201][T11491] ? find_held_lock+0x2b/0x80 [ 1643.653225][T11491] ? do_raw_spin_unlock+0x172/0x230 [ 1643.653244][T11491] kobject_add_internal+0x2c4/0x9d0 [ 1643.653266][T11491] kobject_add+0x16e/0x240 [ 1643.653284][T11491] ? __pfx_kobject_add+0x10/0x10 [ 1643.653304][T11491] ? kobject_put+0xaf/0x6f0 [ 1643.653319][T11491] ? _raw_spin_unlock+0x28/0x50 [ 1643.653347][T11491] device_add+0x288/0x1980 [ 1643.653363][T11491] ? __pfx_dev_set_name+0x10/0x10 [ 1643.653379][T11491] ? __pfx_device_add+0x10/0x10 [ 1643.653393][T11491] ? mgmt_send_event_skb+0x2fb/0x460 [ 1643.653421][T11491] hci_conn_add_sysfs+0x1a8/0x260 [ 1643.653438][T11491] le_conn_complete_evt+0x11ed/0x1fa0 [ 1643.653466][T11491] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1643.653488][T11491] ? __pfx_bt_warn+0x10/0x10 [ 1643.653514][T11491] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1643.653541][T11491] hci_le_meta_evt+0x357/0x610 [ 1643.653555][T11491] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1643.653581][T11491] hci_event_packet+0x685/0x1210 [ 1643.653604][T11491] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1643.653619][T11491] ? __pfx_hci_event_packet+0x10/0x10 [ 1643.653644][T11491] ? kcov_remote_start+0x399/0x680 [ 1643.653666][T11491] ? lockdep_hardirqs_on+0x7c/0x110 [ 1643.653686][T11491] hci_rx_work+0x2c9/0x1020 [ 1643.653711][T11491] process_one_work+0x9ba/0x1b20 [ 1643.653735][T11491] ? __pfx_process_one_work+0x10/0x10 [ 1643.653758][T11491] ? assign_work+0x1a0/0x250 [ 1643.653775][T11491] worker_thread+0x6c8/0xf10 [ 1643.653800][T11491] ? __pfx_worker_thread+0x10/0x10 [ 1643.653816][T11491] kthread+0x3c5/0x780 [ 1643.653831][T11491] ? __pfx_kthread+0x10/0x10 [ 1643.653848][T11491] ? rcu_is_watching+0x12/0xc0 [ 1643.653868][T11491] ? __pfx_kthread+0x10/0x10 [ 1643.653884][T11491] ret_from_fork+0x983/0xb10 [ 1643.653903][T11491] ? __pfx_ret_from_fork+0x10/0x10 [ 1643.653920][T11491] ? __switch_to+0x7af/0x10d0 [ 1643.653939][T11491] ? __pfx_kthread+0x10/0x10 [ 1643.653955][T11491] ret_from_fork_asm+0x1a/0x30 [ 1643.653989][T11491] [ 1643.654070][T11491] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1643.961014][T11491] Bluetooth: hci0: failed to register connection device [ 1644.572278][T29508] netlink: set zone limit has 8 unknown bytes [ 1646.031199][T19763] Bluetooth: hci0: command 0x2016 tx timeout [ 1646.650334][T29570] tipc: Started in network mode [ 1646.659060][T29570] tipc: Node identity ee00, cluster identity 4711 [ 1646.674744][T29570] tipc: Node number set to 60928 [ 1646.683016][T29570] nvme_fcloop: unknown parameter or missing value '' [ 1646.706772][T29560] EXT4-fs error (device sda1): trigger_test_error:129: comm syz.3.4998:  [ 1647.368042][T29585] FAULT_INJECTION: forcing a failure. [ 1647.368042][T29585] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.382156][T29585] CPU: 1 UID: 0 PID: 29585 Comm: syz.5.5005 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1647.382185][T29585] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1647.382192][T29585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1647.382202][T29585] Call Trace: [ 1647.382210][T29585] [ 1647.382217][T29585] dump_stack_lvl+0x16c/0x1f0 [ 1647.382239][T29585] should_fail_ex+0x512/0x640 [ 1647.382260][T29585] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1647.382280][T29585] should_failslab+0xc2/0x120 [ 1647.382304][T29585] kmem_cache_alloc_noprof+0x83/0x770 [ 1647.382322][T29585] ? create_new_namespaces+0x30/0xab0 [ 1647.382346][T29585] ? create_new_namespaces+0x30/0xab0 [ 1647.382365][T29585] create_new_namespaces+0x30/0xab0 [ 1647.382384][T29585] ? bpf_lsm_capable+0x9/0x10 [ 1647.382404][T29585] ? security_capable+0x7e/0x260 [ 1647.382424][T29585] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1647.382446][T29585] ksys_unshare+0x45b/0xa40 [ 1647.382470][T29585] ? __pfx_ksys_unshare+0x10/0x10 [ 1647.382494][T29585] ? xfd_validate_state+0x61/0x180 [ 1647.382513][T29585] __x64_sys_unshare+0x31/0x40 [ 1647.382536][T29585] do_syscall_64+0xcd/0xf80 [ 1647.382553][T29585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.382568][T29585] RIP: 0033:0x7fe2ce98f7c9 [ 1647.382582][T29585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1647.382596][T29585] RSP: 002b:00007fe2cf816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1647.382638][T29585] RAX: ffffffffffffffda RBX: 00007fe2cebe5fa0 RCX: 00007fe2ce98f7c9 [ 1647.382649][T29585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1647.382658][T29585] RBP: 00007fe2cea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1647.382668][T29585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.382678][T29585] R13: 00007fe2cebe6038 R14: 00007fe2cebe5fa0 R15: 00007ffc837f0af8 [ 1647.382699][T29585] [ 1647.916443][ T30] audit: type=1800 audit(4294967311.071:145): pid=29602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5007" name="dbroot" dev="configfs" ino=155936 res=0 errno=0 [ 1648.022374][T29594] could not allocate digest TFM handle 237 [ 1648.022374][T29594] [ 1648.101792][T19763] Bluetooth: hci0: command 0x2016 tx timeout [ 1648.317818][T29621] FAULT_INJECTION: forcing a failure. [ 1648.317818][T29621] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1648.330793][T29621] CPU: 1 UID: 0 PID: 29621 Comm: syz.1.5011 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1648.330821][T29621] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1648.330827][T29621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1648.330837][T29621] Call Trace: [ 1648.330844][T29621] [ 1648.330852][T29621] dump_stack_lvl+0x16c/0x1f0 [ 1648.330873][T29621] should_fail_ex+0x512/0x640 [ 1648.330898][T29621] should_fail_futex+0x4c/0x60 [ 1648.330915][T29621] futex_lock_pi_atomic+0x127/0xc50 [ 1648.330940][T29621] futex_lock_pi+0x23f/0x7c0 [ 1648.330962][T29621] ? __pfx_futex_lock_pi+0x10/0x10 [ 1648.330981][T29621] ? __futex_wait+0x24b/0x2f0 [ 1648.331014][T29621] ? futex_private_hash_put+0x160/0x1b0 [ 1648.331033][T29621] ? __pfx_futex_wake_mark+0x10/0x10 [ 1648.331059][T29621] ? ksys_write+0x190/0x250 [ 1648.331083][T29621] do_futex+0x11a/0x350 [ 1648.331100][T29621] ? __pfx_do_futex+0x10/0x10 [ 1648.331122][T29621] __x64_sys_futex+0x1e0/0x4c0 [ 1648.331141][T29621] ? fput+0x70/0xf0 [ 1648.331153][T29621] ? __pfx___x64_sys_futex+0x10/0x10 [ 1648.331171][T29621] ? xfd_validate_state+0x61/0x180 [ 1648.331184][T29621] ? __pfx_ksys_write+0x10/0x10 [ 1648.331210][T29621] do_syscall_64+0xcd/0xf80 [ 1648.331227][T29621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.331243][T29621] RIP: 0033:0x7f8f4938f7c9 [ 1648.331257][T29621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.331272][T29621] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1648.331286][T29621] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1648.331296][T29621] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 1648.331305][T29621] RBP: 00007f8f49413f91 R08: 0000000000000000 R09: 000000008000fff5 [ 1648.331315][T29621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.331325][T29621] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1648.331345][T29621] [ 1648.744189][T29626] FAULT_INJECTION: forcing a failure. [ 1648.744189][T29626] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.763459][T29626] CPU: 1 UID: 0 PID: 29626 Comm: syz.1.5014 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1648.763487][T29626] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1648.763493][T29626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1648.763503][T29626] Call Trace: [ 1648.763508][T29626] [ 1648.763515][T29626] dump_stack_lvl+0x16c/0x1f0 [ 1648.763536][T29626] should_fail_ex+0x512/0x640 [ 1648.763557][T29626] ? __kmalloc_noprof+0xca/0x910 [ 1648.763575][T29626] should_failslab+0xc2/0x120 [ 1648.763598][T29626] __kmalloc_noprof+0xeb/0x910 [ 1648.763613][T29626] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1648.763636][T29626] ? copy_splice_read+0x1a8/0xc20 [ 1648.763659][T29626] ? copy_splice_read+0x1a8/0xc20 [ 1648.763678][T29626] copy_splice_read+0x1a8/0xc20 [ 1648.763699][T29626] ? __pfx_pipe_to_null+0x10/0x10 [ 1648.763718][T29626] ? __pfx_copy_splice_read+0x10/0x10 [ 1648.763737][T29626] ? pipe_unlock+0x4a/0x70 [ 1648.763759][T29626] ? __pfx_splice_from_pipe+0x10/0x10 [ 1648.763785][T29626] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1648.763806][T29626] ? __pfx_copy_splice_read+0x10/0x10 [ 1648.763826][T29626] do_splice_read+0x285/0x370 [ 1648.763848][T29626] splice_direct_to_actor+0x2a1/0xa30 [ 1648.763870][T29626] ? __pfx_direct_splice_actor+0x10/0x10 [ 1648.763899][T29626] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1648.763931][T29626] ? futex_private_hash_put+0x160/0x1b0 [ 1648.763949][T29626] do_splice_direct+0x174/0x240 [ 1648.763971][T29626] ? __pfx_do_splice_direct+0x10/0x10 [ 1648.763992][T29626] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1648.764014][T29626] ? bpf_lsm_file_permission+0x9/0x10 [ 1648.764031][T29626] ? security_file_permission+0x71/0x210 [ 1648.764056][T29626] ? rw_verify_area+0xcf/0x6c0 [ 1648.764076][T29626] do_sendfile+0xb06/0xe50 [ 1648.764099][T29626] ? __pfx_do_sendfile+0x10/0x10 [ 1648.764121][T29626] ? __x64_sys_futex+0x1e0/0x4c0 [ 1648.764137][T29626] ? __x64_sys_futex+0x1e9/0x4c0 [ 1648.764156][T29626] __x64_sys_sendfile64+0x1d8/0x220 [ 1648.764180][T29626] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1648.764209][T29626] do_syscall_64+0xcd/0xf80 [ 1648.764227][T29626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.764243][T29626] RIP: 0033:0x7f8f4938f7c9 [ 1648.764255][T29626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1648.764270][T29626] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1648.764285][T29626] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1648.764295][T29626] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1648.764304][T29626] RBP: 00007f8f49413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1648.764313][T29626] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1648.764322][T29626] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1648.764341][T29626] [ 1649.248679][T29638] No such timeout policy "" [ 1649.253418][T29638] netlink: Failed to associated timeout policy '' [ 1649.313395][T11491] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1649.424532][T29647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5018'. [ 1649.999594][T29656] FAULT_INJECTION: forcing a failure. [ 1649.999594][T29656] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.114598][T29660] FAULT_INJECTION: forcing a failure. [ 1650.114598][T29660] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.128563][T29656] CPU: 1 UID: 0 PID: 29656 Comm: syz.1.5020 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1650.128591][T29656] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1650.128598][T29656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1650.128607][T29656] Call Trace: [ 1650.128614][T29656] [ 1650.128620][T29656] dump_stack_lvl+0x16c/0x1f0 [ 1650.128643][T29656] should_fail_ex+0x512/0x640 [ 1650.128664][T29656] ? fs_reclaim_acquire+0xae/0x150 [ 1650.128691][T29656] should_failslab+0xc2/0x120 [ 1650.128713][T29656] __kmalloc_noprof+0xeb/0x910 [ 1650.128730][T29656] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1650.128748][T29656] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1650.128762][T29656] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1650.128779][T29656] ? tomoyo_profile+0x47/0x60 [ 1650.128797][T29656] tomoyo_path_number_perm+0x245/0x580 [ 1650.128818][T29656] ? tomoyo_path_number_perm+0x237/0x580 [ 1650.128840][T29656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1650.128881][T29656] ? find_held_lock+0x2b/0x80 [ 1650.128900][T29656] ? hook_file_ioctl_common+0x144/0x410 [ 1650.128926][T29656] ? __fget_files+0x20e/0x3c0 [ 1650.128950][T29656] security_file_ioctl+0x9b/0x240 [ 1650.128972][T29656] __x64_sys_ioctl+0xb7/0x210 [ 1650.128992][T29656] do_syscall_64+0xcd/0xf80 [ 1650.129010][T29656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.129025][T29656] RIP: 0033:0x7f8f4938f7c9 [ 1650.129039][T29656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.129053][T29656] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.129068][T29656] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1650.129078][T29656] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1650.129087][T29656] RBP: 00007f8f49413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1650.129096][T29656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1650.129105][T29656] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1650.129125][T29656] [ 1650.129132][T29656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1650.389914][T29660] CPU: 1 UID: 0 PID: 29660 Comm: syz.5.5023 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1650.389942][T29660] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1650.389949][T29660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1650.389959][T29660] Call Trace: [ 1650.389965][T29660] [ 1650.389972][T29660] dump_stack_lvl+0x16c/0x1f0 [ 1650.389994][T29660] should_fail_ex+0x512/0x640 [ 1650.390016][T29660] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1650.390042][T29660] should_failslab+0xc2/0x120 [ 1650.390065][T29660] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1650.390088][T29660] ? kstrdup_const+0x63/0x80 [ 1650.390110][T29660] ? kstrdup+0x53/0x100 [ 1650.390126][T29660] kstrdup+0x53/0x100 [ 1650.390144][T29660] kstrdup_const+0x63/0x80 [ 1650.390161][T29660] __kernfs_new_node+0x9b/0x990 [ 1650.390179][T29660] ? do_raw_spin_lock+0x12c/0x2b0 [ 1650.390198][T29660] ? __pfx___kernfs_new_node+0x10/0x10 [ 1650.390221][T29660] ? find_held_lock+0x2b/0x80 [ 1650.390249][T29660] ? kernfs_root+0xee/0x2a0 [ 1650.390272][T29660] kernfs_new_node+0x13c/0x1e0 [ 1650.390293][T29660] ? do_raw_spin_lock+0x12c/0x2b0 [ 1650.390312][T29660] __kernfs_create_file+0x53/0x350 [ 1650.390339][T29660] cgroup_addrm_files+0x546/0xc20 [ 1650.390369][T29660] ? __lock_acquire+0x436/0x2890 [ 1650.390383][T29660] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 1650.390411][T29660] ? css_next_child+0xcf/0x2d0 [ 1650.390430][T29660] ? css_next_descendant_pre+0x58/0x1a0 [ 1650.390451][T29660] css_populate_dir+0x45d/0x570 [ 1650.390473][T29660] cgroup_mkdir+0x5c4/0x12e0 [ 1650.390497][T29660] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1650.390519][T29660] kernfs_iop_mkdir+0x111/0x190 [ 1650.390537][T29660] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1650.390554][T29660] vfs_mkdir+0x731/0xb60 [ 1650.390574][T29660] do_mkdirat+0x442/0x5e0 [ 1650.390598][T29660] ? __pfx_do_mkdirat+0x10/0x10 [ 1650.390620][T29660] ? strncpy_from_user+0x203/0x2e0 [ 1650.390641][T29660] ? getname_flags.part.0+0x1c5/0x550 [ 1650.390659][T29660] __x64_sys_mkdir+0xef/0x140 [ 1650.390682][T29660] do_syscall_64+0xcd/0xf80 [ 1650.390700][T29660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.390716][T29660] RIP: 0033:0x7fe2ce98f7c9 [ 1650.390730][T29660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.390745][T29660] RSP: 002b:00007fe2cf816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1650.390761][T29660] RAX: ffffffffffffffda RBX: 00007fe2cebe5fa0 RCX: 00007fe2ce98f7c9 [ 1650.390771][T29660] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000480 [ 1650.390780][T29660] RBP: 00007fe2cea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1650.390789][T29660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1650.390798][T29660] R13: 00007fe2cebe6038 R14: 00007fe2cebe5fa0 R15: 00007ffc837f0af8 [ 1650.390819][T29660] [ 1650.390827][T29660] cgroup: cgroup_addrm_files: failed to add cgroup.pressure, err=-12 [ 1650.975406][T29671] binder: 29668:29671 ioctl c018620c 0 returned -1 [ 1650.995985][T29671] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5026'. [ 1651.069768][T29673] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1651.922321][ T30] audit: type=1806 audit(4294967315.110:146): xattr=CFE1D972E5990420196EE9E809 res=-22 [ 1651.993363][T29684] netlink: 338 bytes leftover after parsing attributes in process `syz.5.5030'. [ 1652.861308][T29701] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5035'. [ 1654.468615][T11491] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1654.651019][T29738] serio: Serial port ttyS0 [ 1655.807225][T29765] FAULT_INJECTION: forcing a failure. [ 1655.807225][T29765] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.828035][T29765] CPU: 1 UID: 0 PID: 29765 Comm: syz.5.5048 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1655.828064][T29765] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1655.828071][T29765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1655.828080][T29765] Call Trace: [ 1655.828087][T29765] [ 1655.828093][T29765] dump_stack_lvl+0x16c/0x1f0 [ 1655.828115][T29765] should_fail_ex+0x512/0x640 [ 1655.828137][T29765] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1655.828159][T29765] should_failslab+0xc2/0x120 [ 1655.828182][T29765] kmem_cache_alloc_noprof+0x83/0x770 [ 1655.828200][T29765] ? fasync_helper+0x3d/0xd0 [ 1655.828220][T29765] ? fasync_helper+0x3d/0xd0 [ 1655.828235][T29765] fasync_helper+0x3d/0xd0 [ 1655.828252][T29765] pipe_fasync+0xc7/0x200 [ 1655.828274][T29765] ? __pfx_pipe_fasync+0x10/0x10 [ 1655.828293][T29765] do_fcntl+0xc56/0x1660 [ 1655.828309][T29765] ? __pfx_do_fcntl+0x10/0x10 [ 1655.828331][T29765] ? tomoyo_file_fcntl+0xa5/0xc0 [ 1655.828352][T29765] __x64_sys_fcntl+0x163/0x200 [ 1655.828370][T29765] do_syscall_64+0xcd/0xf80 [ 1655.828387][T29765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.828402][T29765] RIP: 0033:0x7fe2ce98f7c9 [ 1655.828416][T29765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1655.828430][T29765] RSP: 002b:00007fe2cf816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1655.828445][T29765] RAX: ffffffffffffffda RBX: 00007fe2cebe5fa0 RCX: 00007fe2ce98f7c9 [ 1655.828455][T29765] RDX: fffffffffffffffc RSI: 0000000000000004 RDI: ff80000000000000 [ 1655.828465][T29765] RBP: 00007fe2cea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1655.828474][T29765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1655.828482][T29765] R13: 00007fe2cebe6038 R14: 00007fe2cebe5fa0 R15: 00007ffc837f0af8 [ 1655.828503][T29765] [ 1657.863587][T29794] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1657.915916][T29794] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1657.925083][T29801] kfence: disabled [ 1657.935285][T29802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5056'. [ 1657.949141][T29794] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1657.958227][T29794] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1657.968088][T29794] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1658.000133][T29794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1658.007458][T29794] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1658.017573][T29794] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1658.064686][T29794] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1658.086414][T29794] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1658.106274][T29794] CPU0 is offline. [ 1658.701282][T29795] Process accounting paused [ 1659.101522][T29828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5062'. [ 1659.884591][T19763] Bluetooth: hci0: command 0x2016 tx timeout [ 1659.962150][T19763] Bluetooth: hci3: command 0x0c1a tx timeout [ 1660.046261][T27517] Bluetooth: hci1: command 0x0c1a tx timeout [ 1660.052468][T19763] Bluetooth: hci2: command 0x0c1a tx timeout [ 1660.121471][T11491] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1661.952684][T11491] Bluetooth: hci0: command 0x2016 tx timeout [ 1662.032392][T11491] Bluetooth: hci3: command 0x0c1a tx timeout [ 1662.065194][T29863] kexec: Could not allocate control_code_buffer [ 1662.111944][T11491] Bluetooth: hci2: command 0x0c1a tx timeout [ 1662.173507][T29892] random: crng reseeded on system resumption [ 1662.624297][T29893] Invalid ELF header magic: != ELF [ 1663.874924][T29924] hub 1-0:1.0: USB hub found [ 1663.931166][T29924] hub 1-0:1.0: 1 port detected [ 1664.024062][T11491] Bluetooth: hci0: command 0x2016 tx timeout [ 1664.182152][T11491] Bluetooth: hci2: command 0x0c1a tx timeout [ 1664.300469][T29929] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5082'. [ 1665.118147][T29942] Invalid ELF header magic: != ELF [ 1665.556383][T29950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5089'. [ 1666.253526][T11491] Bluetooth: hci2: command 0x0c1a tx timeout [ 1666.787233][T29973] zswap: compressor not available [ 1667.708575][ T30] audit: type=1804 audit(4294967330.953:147): pid=29988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5096" name="/newroot/422/file0" dev="tmpfs" ino=2239 res=1 errno=0 [ 1667.983806][ T30] audit: type=1804 audit(4294967330.953:148): pid=29989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5096" name="/newroot/422/file0" dev="tmpfs" ino=2239 res=1 errno=0 [ 1668.154933][T29991] zswap: compressor not available [ 1670.927255][T30069] FAULT_INJECTION: forcing a failure. [ 1670.927255][T30069] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.253648][T30069] CPU: 1 UID: 0 PID: 30069 Comm: syz.1.5113 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1671.253676][T30069] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1671.253683][T30069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1671.253693][T30069] Call Trace: [ 1671.253698][T30069] [ 1671.253705][T30069] dump_stack_lvl+0x16c/0x1f0 [ 1671.253726][T30069] should_fail_ex+0x512/0x640 [ 1671.253748][T30069] ? fs_reclaim_acquire+0xae/0x150 [ 1671.253775][T30069] should_failslab+0xc2/0x120 [ 1671.253798][T30069] __kmalloc_noprof+0xeb/0x910 [ 1671.253814][T30069] ? trace_kmalloc+0x2b/0xb0 [ 1671.253834][T30069] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1671.253853][T30069] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1671.253868][T30069] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1671.253884][T30069] ? tomoyo_fill_path_info+0x233/0x420 [ 1671.253906][T30069] tomoyo_mount_acl+0x1ae/0x850 [ 1671.253930][T30069] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1671.253955][T30069] ? kernel_text_address+0x8d/0x100 [ 1671.253973][T30069] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1671.253995][T30069] ? arch_stack_walk+0xa6/0x100 [ 1671.254033][T30069] ? tomoyo_domain+0xba/0x150 [ 1671.254048][T30069] ? tomoyo_profile+0x47/0x60 [ 1671.254066][T30069] tomoyo_mount_permission+0x16d/0x420 [ 1671.254088][T30069] ? tomoyo_mount_permission+0x14f/0x420 [ 1671.254112][T30069] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1671.254145][T30069] security_sb_mount+0x9b/0x260 [ 1671.254166][T30069] path_mount+0x158/0x23a0 [ 1671.254180][T30069] ? rcu_is_watching+0x12/0xc0 [ 1671.254204][T30069] ? __pfx_path_mount+0x10/0x10 [ 1671.254218][T30069] ? kmem_cache_free+0x2d8/0x770 [ 1671.254246][T30069] ? putname+0xf5/0x1a0 [ 1671.254263][T30069] ? putname+0xf5/0x1a0 [ 1671.254274][T30069] ? putname+0xf5/0x1a0 [ 1671.254290][T30069] ? __x64_sys_mount+0x293/0x310 [ 1671.254304][T30069] __x64_sys_mount+0x293/0x310 [ 1671.254322][T30069] ? __pfx___x64_sys_mount+0x10/0x10 [ 1671.254342][T30069] do_syscall_64+0xcd/0xf80 [ 1671.254359][T30069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.254375][T30069] RIP: 0033:0x7f8f4938f7c9 [ 1671.254388][T30069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1671.254403][T30069] RSP: 002b:00007f8f4a275038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1671.254418][T30069] RAX: ffffffffffffffda RBX: 00007f8f495e6180 RCX: 00007f8f4938f7c9 [ 1671.254429][T30069] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1671.254439][T30069] RBP: 00007f8f49413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1671.254448][T30069] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1671.254458][T30069] R13: 00007f8f495e6218 R14: 00007f8f495e6180 R15: 00007ffd7516c498 [ 1671.254478][T30069] [ 1671.581993][T30069] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1671.842769][T27517] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 1671.842796][T27517] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 1671.862049][T27517] Bluetooth: hci0: Dropping invalid advertising data [ 1671.870851][T27517] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 1671.870871][T27517] Bluetooth: hci0: unknown advertising packet type: 0xbd [ 1671.878191][T27517] Bluetooth: hci0: Dropping invalid advertising data [ 1671.892730][T27517] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1672.037967][T11491] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1673.741848][T30138] hub 3-0:1.0: USB hub found [ 1673.833408][T30138] hub 3-0:1.0: 1 port detected [ 1674.056441][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.062808][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.407145][T30155] futex_wake_op: syz.3.5127 tries to shift op by -2048; fix this program [ 1674.499442][T30155] futex_wake_op: syz.3.5127 tries to shift op by -2048; fix this program [ 1674.584389][T30138] usb usb3: authorized to connect [ 1674.636442][T30170] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1674.643346][T30170] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1676.145220][T30207] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 1677.596616][T30256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5147'. [ 1679.249007][T30297] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1679.249007][T30297] M' is too long [ 1679.264991][T30297] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1679.264991][T30297] W ' is too long [ 1679.300914][T30297] usb usb36: usbfs: process 30297 (syz.5.5157) did not claim interface 0 before use [ 1679.452419][T30292] ubi0: attaching mtd0 [ 1679.614430][T30292] ubi0: scanning is finished [ 1679.981418][T30292] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1680.405259][T30292] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1680.540248][T30326] netlink: 342 bytes leftover after parsing attributes in process `syz.6.5163'. [ 1680.588992][T30320] futex_wake_op: syz.1.5160 tries to shift op by -2048; fix this program [ 1680.664733][T30326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5163'. [ 1681.562720][T30352] FAULT_INJECTION: forcing a failure. [ 1681.562720][T30352] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.795476][T30352] CPU: 1 UID: 0 PID: 30352 Comm: syz.1.5170 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1681.795503][T30352] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1681.795510][T30352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1681.795519][T30352] Call Trace: [ 1681.795525][T30352] [ 1681.795532][T30352] dump_stack_lvl+0x16c/0x1f0 [ 1681.795551][T30352] should_fail_ex+0x512/0x640 [ 1681.795572][T30352] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1681.795592][T30352] should_failslab+0xc2/0x120 [ 1681.795618][T30352] kmem_cache_alloc_noprof+0x83/0x770 [ 1681.795635][T30352] ? __anon_vma_prepare+0x344/0x5e0 [ 1681.795655][T30352] ? __anon_vma_prepare+0x344/0x5e0 [ 1681.795669][T30352] __anon_vma_prepare+0x344/0x5e0 [ 1681.795684][T30352] ? do_raw_spin_lock+0x12c/0x2b0 [ 1681.795704][T30352] __vmf_anon_prepare+0x11c/0x240 [ 1681.795728][T30352] do_huge_pmd_anonymous_page+0x161/0x2200 [ 1681.795748][T30352] ? __pmd_alloc+0x6aa/0x9c0 [ 1681.795771][T30352] __handle_mm_fault+0x25ca/0x2bb0 [ 1681.795792][T30352] ? __pfx___handle_mm_fault+0x10/0x10 [ 1681.795823][T30352] handle_mm_fault+0x3fe/0xad0 [ 1681.795842][T30352] __get_user_pages+0x54e/0x3590 [ 1681.795872][T30352] ? __pfx___get_user_pages+0x10/0x10 [ 1681.795899][T30352] populate_vma_page_range+0x267/0x3f0 [ 1681.795923][T30352] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1681.795945][T30352] ? __pfx_find_vma_intersection+0x10/0x10 [ 1681.795968][T30352] ? do_mmap+0x69c/0x1210 [ 1681.795990][T30352] __mm_populate+0x1d8/0x380 [ 1681.796014][T30352] ? __pfx___mm_populate+0x10/0x10 [ 1681.796038][T30352] ? up_write+0x282/0x4e0 [ 1681.796056][T30352] vm_mmap_pgoff+0x37f/0x470 [ 1681.796080][T30352] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1681.796112][T30352] ? __x64_sys_futex+0x1e0/0x4c0 [ 1681.796129][T30352] ? __x64_sys_futex+0x1e9/0x4c0 [ 1681.796148][T30352] ksys_mmap_pgoff+0x7d/0x5c0 [ 1681.796171][T30352] ? xfd_validate_state+0x61/0x180 [ 1681.796188][T30352] __x64_sys_mmap+0x125/0x190 [ 1681.796207][T30352] do_syscall_64+0xcd/0xf80 [ 1681.796224][T30352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.796240][T30352] RIP: 0033:0x7f8f4938f7c9 [ 1681.796253][T30352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.796268][T30352] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1681.796283][T30352] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1681.796293][T30352] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1681.796302][T30352] RBP: 00007f8f49413f91 R08: 0000000000000002 R09: 0000000000008000 [ 1681.796312][T30352] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1681.796321][T30352] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1681.796341][T30352] [ 1682.710396][T30366] FAULT_INJECTION: forcing a failure. [ 1682.710396][T30366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1682.745320][T30366] CPU: 1 UID: 7 PID: 30366 Comm: syz.1.5175 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1682.745350][T30366] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1682.745357][T30366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1682.745367][T30366] Call Trace: [ 1682.745373][T30366] [ 1682.745380][T30366] dump_stack_lvl+0x16c/0x1f0 [ 1682.745402][T30366] should_fail_ex+0x512/0x640 [ 1682.745427][T30366] should_fail_alloc_page+0xe7/0x130 [ 1682.745452][T30366] prepare_alloc_pages+0x401/0x670 [ 1682.745478][T30366] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1682.745501][T30366] ? stack_trace_save+0x8e/0xc0 [ 1682.745524][T30366] ? __pfx_stack_trace_save+0x10/0x10 [ 1682.745546][T30366] ? is_bpf_text_address+0x94/0x1a0 [ 1682.745566][T30366] ? stack_depot_save_flags+0x29/0x9b0 [ 1682.745587][T30366] ? __kernel_text_address+0xd/0x40 [ 1682.745606][T30366] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1682.745624][T30366] ? kasan_save_stack+0x42/0x60 [ 1682.745643][T30366] ? kasan_save_track+0x14/0x30 [ 1682.745661][T30366] ? snd_pcm_attach_substream+0x441/0xd60 [ 1682.745684][T30366] ? snd_pcm_open_substream+0x8d/0x1820 [ 1682.745704][T30366] ? snd_pcm_oss_open+0x735/0x1400 [ 1682.745720][T30366] ? soundcore_open+0x40c/0x580 [ 1682.745734][T30366] ? chrdev_open+0x234/0x6a0 [ 1682.745756][T30366] ? do_dentry_open+0x748/0x1590 [ 1682.745777][T30366] ? vfs_open+0x82/0x3f0 [ 1682.745793][T30366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.745814][T30366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1682.745839][T30366] ? policy_nodemask+0xea/0x4e0 [ 1682.745863][T30366] alloc_pages_mpol+0x1fb/0x550 [ 1682.745886][T30366] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1682.745913][T30366] alloc_pages_noprof+0x131/0x390 [ 1682.745936][T30366] alloc_pages_exact_noprof+0x37/0xe0 [ 1682.745961][T30366] snd_pcm_attach_substream+0x468/0xd60 [ 1682.745988][T30366] snd_pcm_open_substream+0x8d/0x1820 [ 1682.746012][T30366] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1682.746039][T30366] snd_pcm_oss_open+0x735/0x1400 [ 1682.746071][T30366] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1682.746090][T30366] ? __lock_acquire+0x436/0x2890 [ 1682.746106][T30366] ? __pfx_default_wake_function+0x10/0x10 [ 1682.746129][T30366] ? __lock_acquire+0x436/0x2890 [ 1682.746148][T30366] ? do_raw_spin_lock+0x12c/0x2b0 [ 1682.746167][T30366] ? soundcore_open+0x35a/0x580 [ 1682.746184][T30366] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1682.746202][T30366] soundcore_open+0x40c/0x580 [ 1682.746220][T30366] ? __pfx_soundcore_open+0x10/0x10 [ 1682.746235][T30366] chrdev_open+0x234/0x6a0 [ 1682.746257][T30366] ? __pfx_apparmor_file_open+0x10/0x10 [ 1682.746276][T30366] ? __pfx_chrdev_open+0x10/0x10 [ 1682.746302][T30366] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1682.746331][T30366] do_dentry_open+0x748/0x1590 [ 1682.746352][T30366] ? __pfx_chrdev_open+0x10/0x10 [ 1682.746379][T30366] vfs_open+0x82/0x3f0 [ 1682.746398][T30366] path_openat+0x2078/0x3140 [ 1682.746427][T30366] ? __pfx_path_openat+0x10/0x10 [ 1682.746456][T30366] do_filp_open+0x20b/0x470 [ 1682.746479][T30366] ? __pfx_do_filp_open+0x10/0x10 [ 1682.746514][T30366] ? alloc_fd+0x471/0x7d0 [ 1682.746541][T30366] do_sys_openat2+0x11f/0x280 [ 1682.746557][T30366] ? __pfx_do_sys_openat2+0x10/0x10 [ 1682.746581][T30366] __x64_sys_openat+0x174/0x210 [ 1682.746598][T30366] ? __pfx___x64_sys_openat+0x10/0x10 [ 1682.746623][T30366] do_syscall_64+0xcd/0xf80 [ 1682.746641][T30366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.746656][T30366] RIP: 0033:0x7f8f4938f7c9 [ 1682.746671][T30366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1682.746686][T30366] RSP: 002b:00007f8f4a2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1682.746701][T30366] RAX: ffffffffffffffda RBX: 00007f8f495e5fa0 RCX: 00007f8f4938f7c9 [ 1682.746711][T30366] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1682.746721][T30366] RBP: 00007f8f49413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1682.746731][T30366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.746740][T30366] R13: 00007f8f495e6038 R14: 00007f8f495e5fa0 R15: 00007ffd7516c498 [ 1682.746761][T30366] [ 1683.580879][T11491] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1683.990836][T30392] FAULT_INJECTION: forcing a failure. [ 1683.990836][T30392] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.005556][T30390] can: request_module (can-proto-5) failed. [ 1684.030916][T30392] CPU: 1 UID: 0 PID: 30392 Comm: syz.6.5179 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1684.030946][T30392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1684.030952][T30392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1684.030969][T30392] Call Trace: [ 1684.030975][T30392] [ 1684.030983][T30392] dump_stack_lvl+0x16c/0x1f0 [ 1684.031004][T30392] should_fail_ex+0x512/0x640 [ 1684.031027][T30392] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1684.031047][T30392] should_failslab+0xc2/0x120 [ 1684.031070][T30392] __kmalloc_cache_noprof+0x80/0x800 [ 1684.031088][T30392] ? copy_mount_options+0x55/0x190 [ 1684.031108][T30392] ? copy_mount_options+0x55/0x190 [ 1684.031124][T30392] copy_mount_options+0x55/0x190 [ 1684.031141][T30392] __x64_sys_mount+0x1ab/0x310 [ 1684.031156][T30392] ? __pfx___x64_sys_mount+0x10/0x10 [ 1684.031176][T30392] do_syscall_64+0xcd/0xf80 [ 1684.031194][T30392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.031210][T30392] RIP: 0033:0x7f5e8458f7c9 [ 1684.031222][T30392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1684.031237][T30392] RSP: 002b:00007f5e854e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1684.031251][T30392] RAX: ffffffffffffffda RBX: 00007f5e847e6090 RCX: 00007f5e8458f7c9 [ 1684.031261][T30392] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 0000200000000080 [ 1684.031271][T30392] RBP: 00007f5e84613f91 R08: 0000200000000240 R09: 0000000000000000 [ 1684.031280][T30392] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1684.031289][T30392] R13: 00007f5e847e6128 R14: 00007f5e847e6090 R15: 00007ffc03e533f8 [ 1684.031309][T30392] [ 1684.034585][T30394] netlink: 186 bytes leftover after parsing attributes in process `syz.5.5180'. [ 1684.659079][T30399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5181'. [ 1684.897299][T30409] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 1684.909213][T30409] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 1684.917628][T30409] CPU: 1 UID: 0 PID: 30409 Comm: syz.5.5183 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1684.928561][T30409] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1684.933735][T30409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1684.943774][T30409] RIP: 0010:handshake_complete+0x31/0x390 [ 1684.949497][T30409] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 14 3a 58 f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 ac 3a 0e 00 48 b8 00 [ 1684.969106][T30409] RSP: 0018:ffffc9000417f4f8 EFLAGS: 00010206 [ 1684.975162][T30409] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000d09b000 [ 1684.983120][T30409] RDX: 0000000000000005 RSI: ffffffff8b661c8c RDI: 0000000000000028 [ 1684.991082][T30409] RBP: ffffc9000417f5c0 R08: 0000000000000000 R09: ffffed10289eb930 [ 1684.999043][T30409] R10: ffff888144f5c983 R11: 0000000000000001 R12: 00000000fffffffb [ 1685.007005][T30409] R13: 0000000000000000 R14: ffff888045e88000 R15: ffff88807d2b8000 [ 1685.014969][T30409] FS: 00007fe2cf7f56c0(0000) GS:ffff888124a0e000(0000) knlGS:0000000000000000 [ 1685.023889][T30409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1685.030494][T30409] CR2: 0000001b2f908ff8 CR3: 000000003afe2000 CR4: 00000000003526f0 [ 1685.038467][T30409] Call Trace: [ 1685.041744][T30409] [ 1685.044663][T30409] handshake_nl_accept_doit+0x2dc/0x910 [ 1685.050207][T30409] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1685.055746][T30409] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1685.061802][T30409] ? genl_get_cmd+0x194/0x580 [ 1685.066471][T30409] ? bpf_lsm_capable+0x9/0x10 [ 1685.071141][T30409] ? security_capable+0x7e/0x260 [ 1685.076069][T30409] genl_rcv_msg+0x55c/0x800 [ 1685.080561][T30409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1685.085572][T30409] ? __pfx_handshake_nl_accept_doit+0x10/0x10 [ 1685.091660][T30409] netlink_rcv_skb+0x158/0x420 [ 1685.096419][T30409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1685.101437][T30409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1685.106716][T30409] ? netlink_deliver_tap+0x1ae/0xd30 [ 1685.112006][T30409] genl_rcv+0x28/0x40 [ 1685.115978][T30409] netlink_unicast+0x5aa/0x870 [ 1685.120731][T30409] ? __pfx_netlink_unicast+0x10/0x10 [ 1685.126017][T30409] netlink_sendmsg+0x8c8/0xdd0 [ 1685.130772][T30409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1685.136071][T30409] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1685.142151][T30409] ____sys_sendmsg+0xa5d/0xc30 [ 1685.146930][T30409] ? copy_msghdr_from_user+0x10a/0x160 [ 1685.152384][T30409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1685.157658][T30409] ? __pfx_futex_wake_mark+0x10/0x10 [ 1685.162940][T30409] ___sys_sendmsg+0x134/0x1d0 [ 1685.167611][T30409] ? __pfx____sys_sendmsg+0x10/0x10 [ 1685.172805][T30409] ? futex_private_hash_put+0x160/0x1b0 [ 1685.178346][T30409] __sys_sendmsg+0x16d/0x220 [ 1685.182930][T30409] ? __pfx___sys_sendmsg+0x10/0x10 [ 1685.188036][T30409] ? __x64_sys_futex+0x1e0/0x4c0 [ 1685.192970][T30409] do_syscall_64+0xcd/0xf80 [ 1685.197462][T30409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.203344][T30409] RIP: 0033:0x7fe2ce98f7c9 [ 1685.207755][T30409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1685.227357][T30409] RSP: 002b:00007fe2cf7f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1685.235767][T30409] RAX: ffffffffffffffda RBX: 00007fe2cebe6090 RCX: 00007fe2ce98f7c9 [ 1685.243729][T30409] RDX: 000000002004881c RSI: 0000200000000580 RDI: 0000000000000006 [ 1685.251689][T30409] RBP: 00007fe2cea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1685.259646][T30409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.267617][T30409] R13: 00007fe2cebe6128 R14: 00007fe2cebe6090 R15: 00007ffc837f0af8 [ 1685.275599][T30409] [ 1685.278615][T30409] Modules linked in: [ 1685.283257][T30409] ---[ end trace 0000000000000000 ]--- [ 1685.441460][T12879] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1333 with max blocks 19 with error 117 [ 1685.492468][T12879] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1685.492468][T12879] [ 1685.506035][T30409] RIP: 0010:handshake_complete+0x31/0x390 [ 1685.511840][T30409] Code: 56 41 55 49 89 d5 41 54 41 89 f4 55 53 48 89 fb e8 14 3a 58 f6 48 8d 7b 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 0f 03 00 00 48 8b 6b 28 e8 ac 3a 0e 00 48 b8 00 [ 1685.545979][T30409] RSP: 0018:ffffc9000417f4f8 EFLAGS: 00010206 [ 1685.552303][T30409] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000d09b000 [ 1685.564522][T30409] RDX: 0000000000000005 RSI: ffffffff8b661c8c RDI: 0000000000000028 [ 1685.577115][T30409] RBP: ffffc9000417f5c0 R08: 0000000000000000 R09: ffffed10289eb930 [ 1685.589494][T30409] R10: ffff888144f5c983 R11: 0000000000000001 R12: 00000000fffffffb [ 1685.599530][T30409] R13: 0000000000000000 R14: ffff888045e88000 R15: ffff88807d2b8000 [ 1685.611259][T30409] FS: 00007fe2cf7f56c0(0000) GS:ffff888124a0e000(0000) knlGS:0000000000000000 [ 1685.625755][T30409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1685.633952][T30409] CR2: 0000001b2f8faff8 CR3: 000000003afe2000 CR4: 00000000003526f0 [ 1685.644128][T30409] Kernel panic - not syncing: Fatal exception [ 1685.650234][T30409] Kernel Offset: disabled [ 1685.654544][T30409] Rebooting in 86400 seconds..