last executing test programs: 17m9.452041881s ago: executing program 3 (id=4045): r0 = socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) socket(0x2, 0x3, 0x104) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) listen$auto(r0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd12/queue/nomerges\x00', 0xc0002, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x81, &(0x7f00000001c0), 0x9, 0xeb8e, 0x0, @number_of_packets=0xfffffff7, 0x7, 0x800476, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r1, 0xa004b70a, r1) 17m9.244639616s ago: executing program 3 (id=4046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x500}, 0x4000000) 17m8.994755683s ago: executing program 3 (id=4048): openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/stat\x00', 0x103282, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0b02, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x42082, 0x0) ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000180)={0x1, 0x79, 0x0}) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/lapb1/proto_down\x00', 0x5c6842, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x80003, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r5, 0x8000) r6 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r7 = ioctl$auto_dma_heap_fops_dma_heap(r6, 0xffffffffffdffe00, &(0x7f0000000140)) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0xe, 0x0) close_range$auto(0x2, r7, 0x0) 17m7.864141069s ago: executing program 3 (id=4055): r0 = socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) socket(0x2, 0x3, 0x104) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) listen$auto(r0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd12/queue/nomerges\x00', 0xc0002, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x81, &(0x7f00000001c0), 0x9, 0xeb8e, 0x0, @number_of_packets=0xfffffff7, 0x7, 0x800476, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r1, 0xa004b70a, r1) 17m7.676253473s ago: executing program 3 (id=4056): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_TUNSETVNETHDRSZ2(r1, 0x400454d8, &(0x7f0000000000)=0x2) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) set_mempolicy_home_node$auto(0xb67, 0x7, 0x9, 0x7f) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) shutdown$auto(r3, 0xfff) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x5, 0x100000001, 0x8011, 0x3, 0x8000) setuid$auto(0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/numa_maps\x00', 0x42c043, 0x0) 17m6.484280943s ago: executing program 3 (id=4062): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) r2 = socket(0x11, 0xa, 0x9) bind$auto(r2, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdb97250400000004"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc3}, 0x6, 0x0, 0x0, 0x504}, 0x1}, 0x2, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 16m51.396161806s ago: executing program 32 (id=4062): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) r2 = socket(0x11, 0xa, 0x9) bind$auto(r2, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) mmap$auto(0x0, 0x20014, 0x7, 0xeb1, 0x404, 0xf) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdb97250400000004"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/vxlan/parameters/udp_port\x00', 0x2400, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc3}, 0x6, 0x0, 0x0, 0x504}, 0x1}, 0x2, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 6m50.7847197s ago: executing program 4 (id=7779): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/1/type\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/memory/memory0/valid_zones\x00', 0x80, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:352/strict_limit\x00', 0x100b02, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC0D0p\x00', 0x40002, 0x0) writev$auto(r0, &(0x7f0000000040)={0x0, 0x1}, 0x2) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) (async) socket(0xa, 0x3, 0x3b) (async) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) (async) socket(0x2a, 0x2, 0x1) (async) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) socket(0xf, 0x3, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0x23, 0x0) (async) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0xee01) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x8a141, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), r2) 6m50.41270265s ago: executing program 4 (id=7784): r0 = socket(0x2, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) connect$auto(r0, &(0x7f0000000080)=@llc={0x1a, 0x102, 0x9, 0x8, 0x81, 0x87}, 0x54) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1, 0x0) (async) sysfs$auto(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'}) fsopen$auto(0x0, 0x1) (async) r1 = fsopen$auto(0x0, 0x1) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) (async) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) write$auto(0x3, 0x0, 0x0) (async) write$auto(0x3, 0x0, 0x0) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) (async) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000000c0)={0x0, 0x1}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x3, &(0x7f00000000c0)={0x0, 0x1}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) (async) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) ioctl$auto_SG_EMULATED_HOST2(r1, 0x2203, &(0x7f00000002c0)="3cd30851e45e20a927b24d42f33facc664bf3337e173ab890dc43034b9400472b1c750e66f4c7f46bea4449fc8e7610ee07b10c441c1a32427d85c3fc5aab3ae78ba84ba8f6b147e1b0ea0d9fa48ed02eec4825216bb9d627c2a9ba4b35417497e816734ba3530b906c666c32779da8a57") sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) 6m49.580205173s ago: executing program 4 (id=7795): setitimer$auto(0x2, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto(0x2, &(0x7f0000000000)={{0x8003, 0x5}, {0xa4b, 0x6}}, 0x0) (async) unshare$auto(0x40000080) (async) semget$auto(0x0, 0x13c, 0x1ff) semctl$auto_GETNCNT(0x0, 0x4, 0xe, 0x4) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) (async) msgctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000200)={{0x8000, 0x0, 0xee00, 0xbfc, 0x2, 0x5a5, 0x2}, &(0x7f00000000c0)=0x6, &(0x7f0000000140)=0xc, 0x3, 0xfffffffffffffff9, 0x3, 0x100000001, 0x0, 0x1, 0xfff, 0xe3, @inferred=0xffffffffffffffff}) keyctl$auto(0xf, r0, 0x2, r1, 0x10000000077c) (async) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 6m47.488647396s ago: executing program 4 (id=7830): openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x181900, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr9/duplex\x00', 0x30242, 0x0) pwrite64$auto(r0, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x4, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf250a"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) set_mempolicy$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r2 = pipe$auto(0x0) r3 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) sendfile$auto(0x1, r3, 0x0, 0x8fb5) r5 = dup$auto(r0) read$auto_fb_fops_fb_chrdev(r5, &(0x7f0000000100)=""/51, 0x33) vmsplice$auto(r2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) sysfs$auto(0x2, 0x2000000000040, 0x0) poll$auto(0x0, 0x6, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m47.236137044s ago: executing program 4 (id=7837): unshare$auto(0x40000080) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x80301, 0x0) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) io_getevents$auto(0x1, 0x401, 0x2, 0x0, 0x0) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2?', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) socket(0x5, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) chdir$auto(&(0x7f0000000340)='./file1\x00') r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x40001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) waitid$auto_P_PID(0x1, 0x0, 0x0, 0xf, &(0x7f0000000440)={{0x7, 0x24}, {0x929a, 0x1ff}, 0x9, 0x3, 0x4032, 0xfffffffffffffff4, 0x4df, 0x0, 0x8, 0x8fb000, 0x0, 0x100, 0x4, 0x3, 0xd, 0x1}) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xcc0}, 0x1, 0x0, 0x0, 0x10}, 0x8010) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x20002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0x59, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x1, 0x15f4da0d, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) 6m43.733264967s ago: executing program 4 (id=7870): mmap$auto(0x2, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x8000000000000000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0xa, 0x3, 0x3a) (async) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x6b) (async) r1 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x711180, 0x0) (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x22281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x4) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x200000, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket(0x23, 0x80805, 0x0) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) (async) fadvise64$auto_POSIX_FADV_DONTNEED(r4, 0x8000000000000000, 0x14000000000, 0x4) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="58150000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1558}, 0x1, 0x0, 0x0, 0x40000}, 0x44081) (async) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x401, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r5, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x6, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) 6m28.614900885s ago: executing program 33 (id=7870): mmap$auto(0x2, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x8000000000000000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0xa, 0x3, 0x3a) (async) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x6b) (async) r1 = getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x711180, 0x0) (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) (async) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x22281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x4) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x200000, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) socket(0x23, 0x80805, 0x0) (async) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x8000, 0x0) (async) fadvise64$auto_POSIX_FADV_DONTNEED(r4, 0x8000000000000000, 0x14000000000, 0x4) sendmsg$auto_IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="58150000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1558}, 0x1, 0x0, 0x0, 0x40000}, 0x44081) (async) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x401, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r5, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x6, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) 8.543749198s ago: executing program 5 (id=9243): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x400010000, 0x1, 0x8000000000000000, 0x10, 0x5, 0x8000000000000f, 0x1ff, 0x5185}, 0x1) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VF\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xa2\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffffffffffff) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f00000002c0)="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") mmap$auto(0x0, 0x2008b, 0x4, 0x1000000000000ebf, r2, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x800003b, 0x1, 0x0, 0x5, 0x100000000008007) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/netstat\x00', 0xe0000, 0x0) read$auto(r2, 0x0, 0xf) r4 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x4) r5 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@l2={0x1f, 0x5, @none, 0xc}, 0x8d) ioctl$auto(r4, 0x4ab07, r5) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x6, 0x1, 0x0, 0x1, 0x1) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0xb, 0xffffffffffffffff, 0x6, 0x4, 0x7e) unshare$auto(0x40000080) 7.462541709s ago: executing program 5 (id=9251): r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x9) mmap$auto(0xffffffffffffffff, 0x4000f, 0x4, 0x9b72, r0, 0x28000) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454da, r2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) lseek$auto(r1, 0x48f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/comm\x00', 0x2, 0x0) write$auto_proc_pid_set_comm_operations_base(r3, &(0x7f0000000000)="bcba", 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r4) bind$auto(r1, &(0x7f0000000040)=@hci={0x1f, 0x0, 0x4}, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) write$auto(0x3, 0x0, 0xfdf3) 7.022774338s ago: executing program 5 (id=9253): setfsgid$auto(0xee01) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0xa, 0x300) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x2, 0x7}, {0x100, 0x1, 0x10000052, 0x5, 0x14, 0x4, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000c800", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000090004006e6673640000000008000300850000000800010002000000"], 0x30}}, 0x4000) io_uring_register$auto(r1, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) getsockopt$auto_SO_RCVTIMEO_NEW(r4, 0x8, 0x42, &(0x7f0000000000)='^{\x00', 0x0) prctl$auto(0xfffff11b, 0x1, 0x0, 0x8, 0xff) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)=""/18, 0x12) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) write$auto(r0, &(0x7f0000000080)='nfsd\x00', 0x100000000) sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r7, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44848}, 0x0) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.705040614s ago: executing program 2 (id=9259): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20443, 0x0) r2 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/stats\x00', 0x4000, 0x0) r3 = bpf$auto(0x8, &(0x7f00000000c0)=@prog_bind_map={r1, r2, 0x1}, 0xfffffffc) bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x2000b, 0x9, 0x3, 0x5, 0x3, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x2000009, 0x1}, 0x171) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14580000", @ANYRES16=r5, @ANYBLOB="57e72bbd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="000427bd7000fedbdf250f00000008001b000700000008002b000700000014000400626f6e643000"/50], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r7 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r8 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r8, @ANYRES8=r6], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r7, &(0x7f0000000000)='-\x00', 0xfdef) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) 5.030446169s ago: executing program 5 (id=9263): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2000c800) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/offline\x00', 0x800, 0x0) read$auto(r0, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/ep_81/interval\x00', 0x3) poll$auto(0x0, 0x7f, 0x9) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/tdls_wider_bw\x00', 0x40, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop4/queue/wbt_lat_usec\x00', 0x10b142, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x2602, 0x0) sendfile$auto(r5, r6, 0x0, 0x2ee) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) pread64$auto(r7, 0x0, 0x10001, 0x830) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0xa13c2, 0x0) r8 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/ports/2/udp_ports_table0\x00', 0x408680, 0x0) writev$auto(r8, 0x0, 0x2) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x165702, 0x0) write$auto(r9, &(0x7f0000000040)='//\xf2\x00', 0x80000000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f00000005c0)="b09c5d00d291d6ba7d4ed7d4e4fda52d99a8b396b66133d2e47a77c70d8679048736ae09a5bf5864041c24de4003ad2972b1d109d7e737661b5fcfa333302439c3fbdbf00dd4e68e94d02b2c1b219024bd5275a0d4a0722ff69e34574820e022be08c0083fae4c797fca0d30d491dde15ef1c0bbd2d90400ba2c0f1814c720d0f0efccb7a4cee035b68d0ba2739d8b50986011f10e66d1d22fc7fcec2d40dc3deb09") sendfile$auto(r4, r4, 0x0, 0x3) memfd_create$auto(0x0, 0xe) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) pkey_free$auto(0xfffffffd) 4.752776648s ago: executing program 0 (id=9264): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r0, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xcfe1, 0x44f, 0xa, 0x1, 0x1007181, 0x8a0d, 0x4, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000000, 0xfffffffffffff343, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x401, 0x22000, 0x9, 0xfffffffc, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0xb7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x10000, 0x15b, 0x7, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x9, 0xd) unshare$auto(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r1) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x4020009, 0xe, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) r5 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/blk_cgname\x00', 0x5, 0x0) write$auto(r5, 0x0, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2c201, 0x0) socket(0x1d, 0x2, 0x2) socket(0x10, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 4.685980278s ago: executing program 2 (id=9265): r0 = socket(0x2, 0x5, 0x0) read$auto_ctl_device_fops_user(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1b8b51df8f60e61c078", 0x38) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe00000000) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 3.701521824s ago: executing program 2 (id=9268): mmap$auto(0x0, 0x2020009, 0x8, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_CREATE(0x4, 0x1, 0x0, 0x9, 0x101) ioctl$auto_BLKPBSZGET(r0, 0x127b, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/virtio/drivers/virtio_crypto/uevent\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r2) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1b0e26bd7000fddbdf250300000a040008000c0003800800170059f702b8f0d5752caeb082a92ea61abe91c0", @ANYBLOB="12000100898771f1c19f1779008d90828847000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x401c800) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r5 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_clock\x00', 0x8000, 0x0) read$auto_trace_clock_fops_trace(r5, &(0x7f0000000040)=""/56, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x40001000f42c, 0x586) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) r8 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r8, &(0x7f00000000c0)='\xcf\x8d\xb6\xaa\x80\xd5\xb4_:A\xacz\xdc\xa0\x1d', 0x2, 0x6, &(0x7f0000000240)={0x9, 0x101}) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r7, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000000310000"]) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r9, &(0x7f0000000200)={0x0, 0x9}, 0x7) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0xe503, 0x0) ptrace$auto_PTRACE_SETOPTIONS(0x4200, r10, 0x8, 0x7) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x6, 0x28, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r11, 0xc00c6211, 0x0) ioctl$auto_BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000540)="fc1c4959ff21a2458364a2b1590d19513f344e1b39f1cffdd87c4ba311042e1012") ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r1) 3.567226828s ago: executing program 0 (id=9269): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x602, 0x1) open(&(0x7f0000000040)='./bus\x00', 0x1aba7e, 0x45) socketcall$auto(0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008091}, 0x40c0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_TXREHASH(r0, 0x6, 0x4a, &(0x7f0000000280)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/fail_next_enable\x00', 0xfffffffd) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0xc0}) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/fail_next_enable\x00', 0x2641, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) 3.455285768s ago: executing program 1 (id=9270): r0 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), 0xffffffffffffffff) r1 = io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x1000, 0x6, 0x1, 0xffffffff, 0xff35, 0xffffffffffffffff, [0x0, 0xfffffffe], {0x8, 0x1, 0x5352, 0x3, 0x8000100, 0x7fff, 0x5fae, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0xc, 0x52, 0x8, 0x47302, 0x3d, 0x8, 0x7, 0x8001}}) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000140), r1) newfstatat$auto(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x3, 0x100000001, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff7f, 0x80000001, 0x9, 0x3ff, 0x2, 0x3, 0xf, 0xfffffffffffffc01, 0xf800000000000000, 0xf}, 0x3) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000001e00)={0x235c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_CDEV={0x2347, 0xe, 0x0, 0x1, [@typed={0x1004, 0xe3, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x88, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xd3, 0x0, 0x0, @u32=0xe9a}, @nested={0x242, 0xb9, 0x0, 0x1, [@generic="c4e7401ca19788a0fbba0f39462bb02deab1ed2807ba2fa2769a1932483b48a7ec5b3dc41f2c84a4761fc5c3ac485633cb85b2526bc0cd1a47039d8649234b900208092ae9bc2ac0e6fa01b5af1d2d847a45581ad4820aa94d9b7e573f6aa75bf243b0a8ffb484d7178301f572", @generic="7e49ea704abf954456ab250168831bdefa7b0dd031b58fd323809dbe465749992b1763cec5075758a40c362e7b63ee52a0a1443b35ea0a99e29f5b6f42a14e97ef89b30836cc64fd41eec035cd64c778636161e041ffd841ec4b8678c5fede78cb098bb3cadc71e06ff23d180602b50f6e63cb02eb79b696149610136e37d4ec85fb984a35d02cf435785c3da84fd8233d2638bccad0888399f0aeaadd316c4afec9568d8272e8f37a92e3a6df22db846aeb8a92a224436b3a69d84f9706bee55ebd7f0fed506c3a6bf9db8f3c01f7293d", @typed={0x8, 0x9f, 0x0, 0x0, @u32=0xd}, @typed={0xf8, 0x25, 0x0, 0x0, @binary="84c96915263ab18220eae122f6c356b3788685ef7359efd5dc1097b999a3cf48845b32152d51eb441c25307883288743de3a269ba7936174a2ee6b79266f1cd8853f0d1c7a0902bbb5fef9084f7f58d0de57a4fc4267449bddeb658629017a115b20c53eeabbe89b57613e1893c8c11803ef7af2e20194758baa7ee249b8d1c3a0903e24ef8d91447fc0e04ebfa74bc9d4aaa49ec3c0b6bb7df72d823ef87ba9f00eaf27e9061650aaa80f06e03b41120e53d8028ddf5a7022146099315e1fec394908e606b777bcaf78c84b8c0a01276fb6027fae4a66cc2ba16a8f8287360e58fd03b74ba10ef43745d77ff66269b1ba4733e5"}]}, @nested={0xc, 0xce, 0x0, 0x1, [@typed={0x5, 0x12, 0x0, 0x0, @str='\x00'}]}, @generic="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", @generic="b450ed99e40041d0635239bc8c97c0ce6f8655481a31dbace23d6f2adc945170f17c47b2f7de373b9207c362b8b10a0a445481b65ba006367195d2073760cdd5336be873f5e5529f4b40c4684507f37dd940aca5bdce1f9c5a1177e7ed09763c9954f3eb039dd508197f15496001cfcdfdee", @generic="dd65ecf4826a45d8fc44f99d0ef686689dab09672db61dce61817a07844fcb28c5036b6731ca16d481c39373e1e6d7805e8264af133e271cacc2519823161237e37f3573376b58fbbbcc28f0bd3e80e9c7e4f1c493660bd374d5823d0df569639724f6b70cc2dab3d1e8d73429"]}]}, 0x235c}, 0x1, 0x0, 0x0, 0x44804}, 0x81) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r6, 0x402, 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x60002, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r8, 0xc008551c, &(0x7f00000000c0)={0x30db, 0x6}) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x10, 0x7f, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) fcntl$auto(r7, 0x402, 0x2) r9 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r9, 0x0, 0x1f40) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio4\x00', 0x280, 0x0) mprotect$auto(0x200000000000, 0x1, 0x4) r10 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r10, 0x0, 0x100000a3d9) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="71000300a424714237bb7b8f05e5f2c5fea0cbda0b17d766cd8ba56a0e965eb4ea735396ad620aef830450cac40e3937d8ddaddb74bd75f97a80ccaaa37bae5b2b959657e44fc893735e6c18154cd253828ad9c969", @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250500000008000100", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x800) 3.324442995s ago: executing program 0 (id=9271): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/phonet\x00', 0x181800, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) 3.262964292s ago: executing program 1 (id=9272): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x54) r0 = socket(0xa, 0x1, 0x84) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4e24, @remote}, 0x20054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00'}) setsockopt$auto(0x3, 0x0, 0x3, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyyb\x00', 0x8800, 0x0) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0x57177fc5}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2a, 0x2, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x88040, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) 3.143470135s ago: executing program 0 (id=9273): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40000e97f, 0x8000, 0xeb1, r0, 0x7fff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) socket(0x8, 0x1, 0x3) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x101500, 0x0) ioctl$auto_EXT4_IOC_RESIZE_FS(r2, 0x40086610, &(0x7f0000000100)=0x10000) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x200180, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$auto(r3, 0xfffffffc, r5) setreuid$auto(0x0, 0x0) msgctl$auto(0x4bd0, 0x5, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x2d81dfc4bcafbd77) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) 3.064722342s ago: executing program 1 (id=9274): select$auto(0x1, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0xffffffffffffffff, 0xffffffffffffffc1, 0x9, 0x9, 0x0, 0x6, 0x4, 0x8, 0xfffffffffffffff9, 0x80, 0x10, 0x2, 0xfffffffffffffffd, 0x9, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, 0x0, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) write$auto_ppp_device_fops_ppp_generic(0xffffffffffffffff, &(0x7f00000002c0)="d99baa16", 0x4) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp\x00', 0x42500, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000001080)=""/244, 0xf4) statmount$auto(0x0, &(0x7f0000000440)={0x8, 0x1, 0xb, 0x734f, 0x4, 0x67f, 0x8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x7f, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0xe, 0x84, 0x0, 0x0, 0x4, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0xe03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4], "5db90a32a155587a2b25efaa3472d0f3cfaf5b0d762285763ed251bbba63520c231371b7f655740c8b185359d1c0bbdcd4aaad4cdce49757c2b73b383e3716ac1329de09ad5a729927c542ff662a6afdad719822880b041ac4f68d969f86ecde110029eada624298b1061b2139dde66b5573fbfc588f3690ba474ac6e6"}, 0x1fe, 0x8) open(&(0x7f00000000c0)='./file1\x00', 0x71b882, 0x18) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22200, 0x154) r5 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) copy_file_range$auto(r5, 0x0, r4, 0x0, 0x21c1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) 2.411428986s ago: executing program 0 (id=9275): sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x4000091) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x6}) 2.030577192s ago: executing program 1 (id=9276): close_range$auto(0x2, 0x8, 0x0) 1.912599369s ago: executing program 1 (id=9277): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) ioctl$auto_BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000000)={0x2, 0x4}) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BLKIOMIN(r1, 0x1278, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7fffffff, 0x0) write$auto(r1, &(0x7f00000004c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\x04\x00\x00\x00\x00\x00\x00\x00d\x03\rF\xec\xb8\xa8\xb3\xea\x18\xc2\xcdy\x00\x00wxa\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfa\x02\xd8>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\x06\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xf3K\xc9/\xc8Z}\x11=\x17\xd0:\x16\xd0\xd4\xcasY\xc3\xbb/G\x82\b\xa6\x92]\xe7\x89\r\xfa\xcf\x8f\xf2\xd6+&\xe5\xa5N\xfa\\\x14gD3\xa8oI>\x8f\x93m\xc2\x8d\x87[\xc3s\x92\xec\\-2\r_w\xe4\f\xbe\x84\x12\xc4v\xcf\v!=\xf1\x15\x87\xabDT@\x90f', 0x100000a3d9) ioctl$auto_SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) fcntl$auto_F_GET_SEALS(r1, 0x40a, 0x3) lsetxattr$auto(&(0x7f00000000c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000180)='/dev/nullb0\x00', &(0x7f00000001c0)="23c12758350d63a150d7b108fb4c93ac0107b6923733b831", 0x8, 0x5ced) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1.56257953s ago: executing program 0 (id=9278): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r0, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xcfe1, 0x44f, 0xa, 0x1, 0x1007181, 0x8a0d, 0x4, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000000, 0xfffffffffffff343, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x401, 0x22000, 0x9, 0xfffffffc, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0xb7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x10000, 0x15b, 0x7, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x9, 0xd) unshare$auto(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r1) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x4020009, 0xe, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) r5 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/options/blk_cgname\x00', 0x5, 0x0) write$auto(r5, 0x0, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2c201, 0x0) socket(0x1d, 0x2, 0x2) socket(0x10, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1.54159531s ago: executing program 2 (id=9279): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/inflight\x00', 0x88040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000080)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2, "af5aa65a2bb536771b9a92590ddf1861df654b8c8dbc19d9c1cf3c5ec6a406fd9aa5cea1268e12c58c3db8deca1ef39b90a04ebb9983c3af68c41b06d789ce48d6258a6579ec189833df3cb1c96e"}, 0x8000, 0x0, 0x8000006) socket(0x23, 0x80805, 0x0) listen$auto(0x3, 0x83) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250a000000080003000100000008000200", @ANYRES32, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) listen$auto(0x3, 0x81) r4 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r4, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) mmap$auto(0xfffffffffffffcd1, 0x6, 0x0, 0x14, r1, 0x9) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x40140, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r5, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="bd000010", @ANYRES16=r6, @ANYBLOB="010025bd7000f7dbdf250100003f"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.363553696s ago: executing program 5 (id=9280): mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001b80)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"], 0x34}}, 0x200000d4) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram2\x00', 0x10ba02, 0x0) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000003c0)='\x00\xa3B\x9f!\'\xb5\xd8\x7f\xedP\x93S\x8d0\xbe\x80F\x8e\x9d\x97\xea>O\xa0\r\x1d\x15\xd6\xa96\xb3\x0e\xfdf\x14a\x06\x11\xa9r\xad\xe2\x1a\x83/\xa4\x06z\xbf\x88n\xdc\xca\xf3%\xba\x8d\xe7\x17\xccZ\x19Xb\xcf\x1e\x18\xd9\xae\"\xb0\x04=cX\x94\xd3wn\x15\x96[\xc9\xe4B\x99\xf3\xb9\x82-\xad}h\x10o\xec\x05\xe8P_\xa3\xab)\x7f\x97\rS\a\x7f\x97Qt{4C\xe5f\xdc\xe4P\xdb:\xaf\xc5FV s~=\xc9\xda\xbd\xda\x1f\xa9\xda\xd8\x96\x13Hbu\xb5+\"\x94X~\x85\xbf\xc6\xc4\xfcak\x8b\x06UB\xc7R|\x94~.\x90\x8d\xa9d0x0, 0x7, 0x10c, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439d070a00", @raw=0x2}, 0x6, 0x4, 0x6, @raw=0xd7, @enumerated={0x8, 0x4, "ca92ebf12d165f2598d329d91548f9496cf3625512b25d8573c4256436767b587359ad041907e24e072efe3a55cb27075abda08440f0f34a52dafeca4b17dbe5", 0xffffffff, 0xb5}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={@inferred=r2, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x457, 0x7, 0xd, 0x1, 0x948b, 0x6, 0x0, 0x1, 0x3, 0x40, 0x6, 0x1, 0x6d39, 0x5, 0x2, 0x4]}, 0x0) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x206, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) msgsnd$auto(0x0, &(0x7f0000000040)={0x5, 0x20}, 0x1000, 0xfffffffc) sendfile$auto(r0, 0x3, 0x0, 0x400000000006) timerfd_settime$auto(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x401002, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)='T', 0x1) 768.389618ms ago: executing program 1 (id=9281): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r0, 0x0) (async) futex$auto(0x0, 0x7, 0xff, 0x0, &(0x7f0000000180)=0x5b, 0x7c6d13a6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x15, 0x3, 0x8000) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_UI_SET_FFBIT(r2, 0x4004556b, &(0x7f0000000040)=0x10800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x11, 0x80003, 0x300) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x2f}, 0x200022) (async) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth1_to_bond\x00', 0x100, 0x0) pread64$auto(r5, 0x0, 0x6, 0x1ff) readv$auto(r5, 0x0, 0x377) (async) unshare$auto(0x40000080) open(0x0, 0x161342, 0x130) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) (async) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) (async) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x20000007}, 0x3ff) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) syz_clone(0x8000000, 0x0, 0x45, 0x0, 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz8\x00', 0x105000, 0x0) 657.344934ms ago: executing program 5 (id=9282): statmount$auto(0x0, 0x0, 0x1fe, 0xe) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(0x3, 0x4611, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x3, 0x0, 0x0) ioctl$auto(0xc8, 0x800454df, r1) 119.973404ms ago: executing program 2 (id=9283): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x3a) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mountinfo\x00', 0x200000, 0x0) socket(0xa, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x4004014}, 0xc800) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = socket(0x10, 0x2, 0x4) read$auto(0xffffffffffffffff, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x20, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16=r7, @ANYRES8=r8, @ANYBLOB="cf4150856503e1ce1faec23d00d0ca606ae4400a361de63451519788f3ae029f2b9ce06178a8875fb260979dc826db22adebf0265a7c67026d32b79e4519928df48ebd1a1c378354f460e89ed85ec748a56f71ac5365bf61b25ff6f124a7e0e32d2efec40e4f06811b86ee159008cf9879df1a09c8dd1868e20288bb7c9763a8422522e5b03348405fcf3f41cc892b576e5e8916aa1d8eba217b4622047cf41217693d74e263dc4723391a5ccd9e308e0dd17a73de78db24843d5a9a0b60ae533a666ab9e12a9ea5d955ba0b6710a8155d4fdecbe90a47584240efeec7c8d5146ffb2b0060c82348f90857540512a1a76766dbd8", @ANYRES64=r1, @ANYRES64=r8, @ANYRES16=r6, @ANYRESHEX=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x0) write$auto(r8, &(0x7f0000000000)='-\x00', 0xfdef) mmap$auto(0xfffffffffffffffd, 0x101, 0x3, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(r5, &(0x7f0000000180)={0x0, 0x5}, 0x8000000000000000) preadv$auto(0x3, 0x0, 0x3, 0x2, 0x13) close_range$auto(r1, 0xffffffffffffffff, 0x3fffffd) 0s ago: executing program 2 (id=9284): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200, 0x10000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r1) socket(0x29, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x1009644, 0xdf, 0x18, 0x2, 0x2d4a29c0) r3 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r3, &(0x7f0000000180)=""/61, 0xfffffeeb) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x5, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0xffffffffffffffff, 0x0, 0x2) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2c4769", 0x24) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000200), 0x3c1941, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) kernel console output (not intermixed with test programs): 974155][T27245] mapped_file 577536 [ 1954.978079][T27245] dirty 0 [ 1954.981081][T27245] writeback 0 [ 1954.984451][T27245] workingset_refault_anon 17579 [ 1954.989333][T27245] workingset_refault_file 6586 [ 1954.994202][T27245] swap 3747840 [ 1954.997576][T27245] swapcached 69632 [ 1955.001423][T27245] pgpgin 2178908 [ 1955.004995][T27245] pgpgout 2204850 [ 1955.009485][T27245] pgfault 1681525 [ 1955.013115][T27245] pgmajfault 5403 [ 1955.016753][T27245] inactive_anon 69632 [ 1955.021552][T27245] active_anon 0 [ 1955.025045][T27245] inactive_file 0 [ 1955.028681][T27245] active_file 0 [ 1955.032241][T27245] unevictable 577536 [ 1955.036137][T27245] hierarchical_memory_limit 3145728 [ 1955.041463][T27245] hierarchical_memsw_limit 9223372036854771712 [ 1955.047623][T27245] total_cache 577536 [ 1955.051538][T27245] total_rss 0 [ 1955.055003][T27245] total_rss_huge 0 [ 1955.058725][T27245] total_shmem 577536 [ 1955.062713][T27245] total_mapped_file 577536 [ 1955.067300][T27245] total_dirty 0 [ 1955.070826][T27245] total_writeback 0 [ 1955.074625][T27245] total_workingset_refault_anon 17579 [ 1955.093053][T27245] total_workingset_refault_file 6586 [ 1955.098458][T27245] total_swap 3747840 [ 1955.102684][T27245] total_swapcached 69632 [ 1955.107013][T27245] total_pgpgin 2178908 [ 1955.112000][T27245] total_pgpgout 2204850 [ 1955.116247][T27245] total_pgfault 1681525 [ 1955.121240][T27245] total_pgmajfault 5403 [ 1955.125542][T27245] total_inactive_anon 69632 [ 1955.130154][T27245] total_active_anon 0 [ 1955.134138][T27245] total_inactive_file 0 [ 1955.138281][T27245] total_active_file 0 [ 1955.142298][T27245] total_unevictable 577536 [ 1955.146708][T27245] anon_cost 60 [ 1955.151832][T27245] file_cost 0 [ 1955.155214][T27245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8956,pid=27243,uid=0 [ 1955.171264][T18088] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 4 with max blocks 1 with error 117 [ 1955.227837][T18088] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1955.227837][T18088] [ 1955.237875][T27245] Memory cgroup out of memory: Killed process 27243 (syz.0.8956) total-vm:141480kB, anon-rss:1268kB, file-rss:27352kB, shmem-rss:512kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 1955.515748][T27912] Bluetooth: hci1: Malformed HCI Event [ 1955.726625][T27343] FAULT_INJECTION: forcing a failure. [ 1955.726625][T27343] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.799336][T27343] CPU: 0 UID: 0 PID: 27343 Comm: syz.5.8969 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1955.799376][T27343] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1955.799386][T27343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1955.799396][T27343] Call Trace: [ 1955.799402][T27343] [ 1955.799411][T27343] dump_stack_lvl+0x16c/0x1f0 [ 1955.799434][T27343] should_fail_ex+0x512/0x640 [ 1955.799456][T27343] ? __kmalloc_noprof+0xca/0x910 [ 1955.799478][T27343] should_failslab+0xc2/0x120 [ 1955.799506][T27343] __kmalloc_noprof+0xeb/0x910 [ 1955.799526][T27343] ? __seq_open_private+0x22/0xd0 [ 1955.799552][T27343] ? __seq_open_private+0x22/0xd0 [ 1955.799574][T27343] __seq_open_private+0x22/0xd0 [ 1955.799597][T27343] proc_timers_open+0x27/0x150 [ 1955.799622][T27343] do_dentry_open+0x748/0x1590 [ 1955.799647][T27343] ? __pfx_proc_timers_open+0x10/0x10 [ 1955.799677][T27343] vfs_open+0x82/0x3f0 [ 1955.799699][T27343] path_openat+0x2078/0x3140 [ 1955.799740][T27343] ? __pfx_path_openat+0x10/0x10 [ 1955.799773][T27343] do_filp_open+0x20b/0x470 [ 1955.799799][T27343] ? __pfx_do_filp_open+0x10/0x10 [ 1955.799832][T27343] ? __pfx_kfree_link+0x10/0x10 [ 1955.799858][T27343] ? alloc_fd+0x471/0x7d0 [ 1955.799889][T27343] do_sys_openat2+0x121/0x290 [ 1955.799909][T27343] ? __pfx_do_sys_openat2+0x10/0x10 [ 1955.799936][T27343] __x64_sys_openat+0x174/0x210 [ 1955.799959][T27343] ? __pfx___x64_sys_openat+0x10/0x10 [ 1955.799989][T27343] do_syscall_64+0xcd/0xf80 [ 1955.800008][T27343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.800025][T27343] RIP: 0033:0x7ff9d158f7c9 [ 1955.800040][T27343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1955.800056][T27343] RSP: 002b:00007ff9d2460038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1955.800075][T27343] RAX: ffffffffffffffda RBX: 00007ff9d17e5fa0 RCX: 00007ff9d158f7c9 [ 1955.800085][T27343] RDX: 0000000000000040 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1955.800095][T27343] RBP: 00007ff9d1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1955.800105][T27343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1955.800115][T27343] R13: 00007ff9d17e6038 R14: 00007ff9d17e5fa0 R15: 00007ffc0cf4d998 [ 1955.800136][T27343] [ 1956.225254][T27374] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1956.971842][T27411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8975'. [ 1957.060728][T27408] HfR: entered promiscuous mode [ 1957.137675][T27411] HfR: left promiscuous mode [ 1957.619721][T16007] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1384 with max blocks 1 with error 117 [ 1957.705949][T16007] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1957.705949][T16007] [ 1957.976894][T10481] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1384 with max blocks 1 with error 117 [ 1958.052061][T10481] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1958.052061][T10481] [ 1958.515443][T18068] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1365 with max blocks 19 with error 117 [ 1958.588731][T18068] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1958.588731][T18068] [ 1958.870500][T16007] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1365 with max blocks 1 with error 117 [ 1958.951851][T16007] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1958.951851][T16007] [ 1960.708501][T27534] HfR: entered promiscuous mode [ 1960.782636][T27539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8988'. [ 1960.815487][T27534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8989'. [ 1960.878471][T27535] HfR: entered promiscuous mode [ 1960.948619][T27539] HfR: left promiscuous mode [ 1961.180909][T27534] HfR: left promiscuous mode [ 1961.782915][T14341] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1961.889944][ T30] audit: type=1800 audit(6442457914.547:105): pid=27588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8992" name="lu_gp_id" dev="configfs" ino=194090 res=0 errno=0 [ 1961.934235][T14341] CPU: 0 UID: 0 PID: 14341 Comm: syz-executor Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1961.934274][T14341] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1961.934284][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1961.934294][T14341] Call Trace: [ 1961.934302][T14341] [ 1961.934310][T14341] dump_stack_lvl+0x16c/0x1f0 [ 1961.934334][T14341] dump_header+0x101/0x960 [ 1961.934357][T14341] oom_kill_process+0x176/0x910 [ 1961.934379][T14341] out_of_memory+0x350/0x1700 [ 1961.934398][T14341] ? __lock_acquire+0x436/0x2890 [ 1961.934419][T14341] ? __pfx_out_of_memory+0x10/0x10 [ 1961.934444][T14341] mem_cgroup_out_of_memory+0x118/0x130 [ 1961.934467][T14341] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1961.934493][T14341] ? do_raw_spin_unlock+0x172/0x230 [ 1961.934517][T14341] try_charge_memcg+0x695/0xd30 [ 1961.934549][T14341] ? __pfx_try_charge_memcg+0x10/0x10 [ 1961.934582][T14341] ? find_held_lock+0x2b/0x80 [ 1961.934608][T14341] charge_memcg+0x8a/0x230 [ 1961.934636][T14341] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1961.934657][T14341] __read_swap_cache_async+0x397/0x500 [ 1961.934692][T14341] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1961.934715][T14341] ? __lock_acquire+0x436/0x2890 [ 1961.934737][T14341] swap_cluster_readahead+0x432/0x770 [ 1961.934764][T14341] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1961.934789][T14341] ? __lock_acquire+0x436/0x2890 [ 1961.934806][T14341] ? _raw_spin_unlock+0x28/0x50 [ 1961.934839][T14341] ? get_vma_policy+0x242/0x3c0 [ 1961.934858][T14341] swapin_readahead+0x160/0x1220 [ 1961.934888][T14341] ? __pfx_swapin_readahead+0x10/0x10 [ 1961.934910][T14341] ? find_held_lock+0x2b/0x80 [ 1961.934931][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 1961.934951][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 1961.934970][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 1961.934992][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 1961.935012][T14341] ? swap_cache_get_folio+0x293/0x8e0 [ 1961.935034][T14341] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1961.935054][T14341] ? __pfx_get_swap_device+0x10/0x10 [ 1961.935079][T14341] ? rcu_read_unlock+0x2d/0xb0 [ 1961.935103][T14341] ? do_swap_page+0x962/0x64a0 [ 1961.935119][T14341] do_swap_page+0x962/0x64a0 [ 1961.935141][T14341] ? __lock_acquire+0x436/0x2890 [ 1961.935163][T14341] ? __pfx_do_swap_page+0x10/0x10 [ 1961.935188][T14341] ? __pfx_default_wake_function+0x10/0x10 [ 1961.935214][T14341] ? rcu_is_watching+0x12/0xc0 [ 1961.935238][T14341] ? __free_object+0x286/0x410 [ 1961.935265][T14341] ? rcu_is_watching+0x12/0xc0 [ 1961.935289][T14341] ? ___pte_offset_map+0x175/0x380 [ 1961.935317][T14341] __handle_mm_fault+0x19cb/0x2bb0 [ 1961.935340][T14341] ? reacquire_held_locks+0xcd/0x1f0 [ 1961.935357][T14341] ? __pfx___handle_mm_fault+0x10/0x10 [ 1961.935379][T14341] ? lock_vma_under_rcu+0x176/0x580 [ 1961.935405][T14341] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1961.935436][T14341] handle_mm_fault+0x3fe/0xad0 [ 1961.935459][T14341] do_user_addr_fault+0x60c/0x1370 [ 1961.935483][T14341] ? rcu_is_watching+0x12/0xc0 [ 1961.935510][T14341] exc_page_fault+0x64/0xc0 [ 1961.935527][T14341] asm_exc_page_fault+0x26/0x30 [ 1961.935544][T14341] RIP: 0033:0x7fb6dafb75f0 [ 1961.935559][T14341] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 1961.935577][T14341] RSP: 002b:00007ffff0fb1768 EFLAGS: 00010246 [ 1961.935591][T14341] RAX: 0000000000000000 RBX: 0000000000000338 RCX: 00007fb6dafc2085 [ 1961.935602][T14341] RDX: 00007ffff0fb17b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1961.935613][T14341] RBP: 00007ffff0fb181c R08: 0000000000000000 R09: 0000000000000000 [ 1961.935623][T14341] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1961.935633][T14341] R13: 00000000000927c0 R14: 00000000001dfbfc R15: 00007ffff0fb1870 [ 1961.935656][T14341] [ 1962.340001][T14341] memory: usage 3072kB, limit 3072kB, failcnt 68499 [ 1962.347983][T14341] memory+swap: usage 5140kB, limit 9007199254740988kB, failcnt 0 [ 1962.355874][T14341] kmem: usage 808kB, limit 9007199254740988kB, failcnt 0 [ 1962.363081][T14341] Memory cgroup stats for /syz0: [ 1962.363199][T14341] cache 4096 [ 1962.371652][T14341] rss 2281472 [ 1962.375061][T14341] rss_huge 0 [ 1962.378253][T14341] shmem 0 [ 1962.381328][T14341] mapped_file 0 [ 1962.384829][T14341] dirty 0 [ 1962.387795][T14341] writeback 0 [ 1962.391174][T14341] workingset_refault_anon 17835 [ 1962.396151][T14341] workingset_refault_file 7001 [ 1962.400983][T14341] swap 2117632 [ 1962.404506][T14341] swapcached 40960 [ 1962.408410][T14341] pgpgin 2181800 [ 1962.412082][T14341] pgpgout 2207334 [ 1962.415927][T14341] pgfault 1685002 [ 1962.419567][T14341] pgmajfault 5583 [ 1962.423197][T14341] inactive_anon 32768 [ 1962.427243][T14341] active_anon 0 [ 1962.430703][T14341] inactive_file 4096 [ 1962.434639][T14341] active_file 0 [ 1962.438195][T14341] unevictable 2281472 [ 1962.442218][T14341] hierarchical_memory_limit 3145728 [ 1962.448972][T14341] hierarchical_memsw_limit 9223372036854771712 [ 1962.455497][T14341] total_cache 4096 [ 1962.459268][T14341] total_rss 2281472 [ 1962.463341][T14341] total_rss_huge 0 [ 1962.467142][T14341] total_shmem 0 [ 1962.470596][T14341] total_mapped_file 0 [ 1962.474615][T14341] total_dirty 0 [ 1962.478112][T14341] total_writeback 0 [ 1962.481912][T14341] total_workingset_refault_anon 17835 [ 1962.487365][T14341] total_workingset_refault_file 7001 [ 1962.492790][T14341] total_swap 2117632 [ 1962.496850][T14341] total_swapcached 40960 [ 1962.501236][T14341] total_pgpgin 2181800 [ 1962.505945][T14341] total_pgpgout 2207334 [ 1962.510133][T14341] total_pgfault 1685002 [ 1962.514332][T14341] total_pgmajfault 5583 [ 1962.518498][T14341] total_inactive_anon 32768 [ 1962.522999][T14341] total_active_anon 0 [ 1962.527184][T14341] total_inactive_file 4096 [ 1962.531791][T14341] total_active_file 0 [ 1962.535877][T14341] total_unevictable 2281472 [ 1962.540547][T14341] anon_cost 50 [ 1962.543990][T14341] file_cost 0 [ 1962.547466][T14341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8988,pid=27532,uid=0 [ 1962.564487][T14341] Memory cgroup out of memory: Killed process 27532 (syz.0.8988) total-vm:112548kB, anon-rss:3316kB, file-rss:22888kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 1963.260051][T27607] FAULT_INJECTION: forcing a failure. [ 1963.260051][T27607] name failslab, interval 1, probability 0, space 0, times 0 [ 1963.276006][T27607] CPU: 0 UID: 0 PID: 27607 Comm: syz.5.8999 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1963.276045][T27607] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1963.276055][T27607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1963.276065][T27607] Call Trace: [ 1963.276071][T27607] [ 1963.276079][T27607] dump_stack_lvl+0x16c/0x1f0 [ 1963.276101][T27607] should_fail_ex+0x512/0x640 [ 1963.276123][T27607] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1963.276147][T27607] should_failslab+0xc2/0x120 [ 1963.276175][T27607] kmem_cache_alloc_noprof+0x83/0x770 [ 1963.276196][T27607] ? vm_area_alloc+0x1f/0x160 [ 1963.276218][T27607] ? vm_area_alloc+0x1f/0x160 [ 1963.276234][T27607] vm_area_alloc+0x1f/0x160 [ 1963.276252][T27607] __mmap_region+0x1080/0x2ad0 [ 1963.276276][T27607] ? __pfx___mmap_region+0x10/0x10 [ 1963.276294][T27607] ? __lock_acquire+0x436/0x2890 [ 1963.276327][T27607] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1963.276350][T27607] ? lockdep_hardirqs_on+0x7c/0x110 [ 1963.276367][T27607] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1963.276431][T27607] ? rcu_is_watching+0x12/0xc0 [ 1963.276460][T27607] mmap_region+0x1ab/0x3f0 [ 1963.276481][T27607] ? __get_unmapped_area+0x267/0x3f0 [ 1963.276509][T27607] do_mmap+0xa3e/0x1210 [ 1963.276538][T27607] ? __pfx_do_mmap+0x10/0x10 [ 1963.276563][T27607] ? __pfx_down_write_killable+0x10/0x10 [ 1963.276588][T27607] vm_mmap_pgoff+0x29e/0x470 [ 1963.276616][T27607] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1963.276641][T27607] ? find_held_lock+0x2b/0x80 [ 1963.276665][T27607] ? __x64_sys_futex+0x1e0/0x4c0 [ 1963.276684][T27607] ? __x64_sys_futex+0x1e9/0x4c0 [ 1963.276706][T27607] ksys_mmap_pgoff+0x7d/0x5c0 [ 1963.276729][T27607] ? xfd_validate_state+0x61/0x180 [ 1963.276749][T27607] __x64_sys_mmap+0x125/0x190 [ 1963.276777][T27607] do_syscall_64+0xcd/0xf80 [ 1963.276796][T27607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1963.276813][T27607] RIP: 0033:0x7ff9d158f7c9 [ 1963.276829][T27607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1963.276846][T27607] RSP: 002b:00007ff9d2460038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1963.276862][T27607] RAX: ffffffffffffffda RBX: 00007ff9d17e5fa0 RCX: 00007ff9d158f7c9 [ 1963.276873][T27607] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1963.276883][T27607] RBP: 00007ff9d1613f91 R08: 0000000000000002 R09: 0000000000008000 [ 1963.276894][T27607] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1963.276904][T27607] R13: 00007ff9d17e6038 R14: 00007ff9d17e5fa0 R15: 00007ffc0cf4d998 [ 1963.276926][T27607] [ 1963.750306][T27629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9000'. [ 1963.775382][T27628] HfR: entered promiscuous mode [ 1963.915861][T27629] HfR: left promiscuous mode [ 1964.301371][T27627] syz.0.9000 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1964.386530][T27627] CPU: 0 UID: 0 PID: 27627 Comm: syz.0.9000 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1964.386569][T27627] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1964.386579][T27627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1964.386589][T27627] Call Trace: [ 1964.386595][T27627] [ 1964.386602][T27627] dump_stack_lvl+0x16c/0x1f0 [ 1964.386625][T27627] dump_header+0x101/0x960 [ 1964.386648][T27627] oom_kill_process+0x176/0x910 [ 1964.386670][T27627] out_of_memory+0x350/0x1700 [ 1964.386690][T27627] ? __lock_acquire+0x436/0x2890 [ 1964.386710][T27627] ? __pfx_out_of_memory+0x10/0x10 [ 1964.386736][T27627] mem_cgroup_out_of_memory+0x118/0x130 [ 1964.386759][T27627] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1964.386785][T27627] ? do_raw_spin_unlock+0x172/0x230 [ 1964.386810][T27627] try_charge_memcg+0x695/0xd30 [ 1964.386842][T27627] ? __pfx_try_charge_memcg+0x10/0x10 [ 1964.386875][T27627] ? find_held_lock+0x2b/0x80 [ 1964.386901][T27627] charge_memcg+0x8a/0x230 [ 1964.386932][T27627] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1964.386962][T27627] __read_swap_cache_async+0x397/0x500 [ 1964.386987][T27627] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1964.387018][T27627] swap_cluster_readahead+0x432/0x770 [ 1964.387040][T27627] ? find_held_lock+0x2b/0x80 [ 1964.387066][T27627] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1964.387091][T27627] ? __lock_acquire+0x436/0x2890 [ 1964.387116][T27627] ? get_vma_policy+0x242/0x3c0 [ 1964.387135][T27627] swapin_readahead+0x160/0x1220 [ 1964.387165][T27627] ? __pfx_swapin_readahead+0x10/0x10 [ 1964.387188][T27627] ? find_held_lock+0x2b/0x80 [ 1964.387209][T27627] ? swap_cache_get_folio+0x267/0x8e0 [ 1964.387229][T27627] ? swap_cache_get_folio+0x267/0x8e0 [ 1964.387248][T27627] ? swap_cache_get_folio+0x267/0x8e0 [ 1964.387270][T27627] ? swap_cache_get_folio+0x267/0x8e0 [ 1964.387290][T27627] ? swap_cache_get_folio+0x293/0x8e0 [ 1964.387312][T27627] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1964.387332][T27627] ? __pfx_get_swap_device+0x10/0x10 [ 1964.387357][T27627] ? rcu_read_unlock+0x2d/0xb0 [ 1964.387381][T27627] ? do_swap_page+0x962/0x64a0 [ 1964.387398][T27627] do_swap_page+0x962/0x64a0 [ 1964.387419][T27627] ? __lock_acquire+0x436/0x2890 [ 1964.387441][T27627] ? __pfx_do_swap_page+0x10/0x10 [ 1964.387461][T27627] ? __pfx_default_wake_function+0x10/0x10 [ 1964.387492][T27627] ? rcu_is_watching+0x12/0xc0 [ 1964.387517][T27627] ? ___pte_offset_map+0x175/0x380 [ 1964.387544][T27627] __handle_mm_fault+0x19cb/0x2bb0 [ 1964.387567][T27627] ? reacquire_held_locks+0xcd/0x1f0 [ 1964.387585][T27627] ? __pfx___handle_mm_fault+0x10/0x10 [ 1964.387607][T27627] ? lock_vma_under_rcu+0x176/0x580 [ 1964.387633][T27627] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1964.387663][T27627] handle_mm_fault+0x3fe/0xad0 [ 1964.387687][T27627] do_user_addr_fault+0x60c/0x1370 [ 1964.387711][T27627] ? rcu_is_watching+0x12/0xc0 [ 1964.387737][T27627] exc_page_fault+0x64/0xc0 [ 1964.387754][T27627] asm_exc_page_fault+0x26/0x30 [ 1964.387771][T27627] RIP: 0033:0x7fb6dae4d71f [ 1964.387788][T27627] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d f2 48 38 00 89 f0 4c 8d 05 e9 28 38 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 1964.387805][T27627] RSP: 002b:00007ffff0fb1488 EFLAGS: 00010202 [ 1964.387820][T27627] RAX: 00000000845bb745 RBX: 00007fb6dbd15720 RCX: 0000000000000010 [ 1964.387831][T27627] RDX: 0000000000001745 RSI: ffffffff845bb745 RDI: 000000000000000d [ 1964.387841][T27627] RBP: ffffffff845bb745 R08: 00007fb6db1d0000 R09: 00007fb6db1d2000 [ 1964.387852][T27627] R10: 00000000845bb749 R11: 000000000000000d R12: 000000000000000d [ 1964.387862][T27627] R13: 0000000000000010 R14: ffffffff845bb453 R15: 0000000000000010 [ 1964.387873][T27627] ? security_mmap_file+0x143/0x990 [ 1964.387898][T27627] ? security_mmap_file+0x435/0x990 [ 1964.387924][T27627] ? security_mmap_file+0x435/0x990 [ 1964.387956][T27627] [ 1964.387964][T27627] memory: usage 3072kB, limit 3072kB, failcnt 69240 [ 1964.877711][T27676] FAULT_INJECTION: forcing a failure. [ 1964.877711][T27676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1964.927167][T27676] CPU: 0 UID: 0 PID: 27676 Comm: syz.1.9002 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1964.927211][T27676] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1964.927220][T27676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1964.927230][T27676] Call Trace: [ 1964.927236][T27676] [ 1964.927243][T27676] dump_stack_lvl+0x16c/0x1f0 [ 1964.927266][T27676] should_fail_ex+0x512/0x640 [ 1964.927291][T27676] should_fail_alloc_page+0xe7/0x130 [ 1964.927321][T27676] prepare_alloc_pages+0x401/0x670 [ 1964.927352][T27676] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1964.927374][T27676] ? bpf_ksym_find+0x124/0x1c0 [ 1964.927394][T27676] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1964.927423][T27676] ? is_bpf_text_address+0x94/0x1a0 [ 1964.927446][T27676] ? kernel_text_address+0x8d/0x100 [ 1964.927467][T27676] ? __kernel_text_address+0xd/0x40 [ 1964.927486][T27676] ? unwind_get_return_address+0x59/0xa0 [ 1964.927510][T27676] ? arch_stack_walk+0xa6/0x100 [ 1964.927532][T27676] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1964.927559][T27676] ? __lock_acquire+0x436/0x2890 [ 1964.927577][T27676] ? __pfx_stack_trace_save+0x10/0x10 [ 1964.927605][T27676] ? stack_depot_save_flags+0x29/0x9b0 [ 1964.927630][T27676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1964.927658][T27676] ? policy_nodemask+0xea/0x4e0 [ 1964.927686][T27676] alloc_pages_mpol+0x1fb/0x550 [ 1964.927714][T27676] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1964.927747][T27676] ? __lock_acquire+0x436/0x2890 [ 1964.927769][T27676] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1964.927793][T27676] shmem_alloc_folio+0x135/0x160 [ 1964.927823][T27676] shmem_alloc_and_add_folio+0x494/0xc20 [ 1964.927849][T27676] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1964.927871][T27676] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1964.927896][T27676] shmem_get_folio_gfp+0x67f/0x1610 [ 1964.927921][T27676] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1964.927942][T27676] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1964.927970][T27676] ? is_bpf_text_address+0x94/0x1a0 [ 1964.927996][T27676] shmem_fault+0x1fe/0xa00 [ 1964.928015][T27676] ? __lock_acquire+0x436/0x2890 [ 1964.928031][T27676] ? __pfx_shmem_fault+0x10/0x10 [ 1964.928063][T27676] __do_fault+0x10d/0x490 [ 1964.928087][T27676] do_fault+0x302/0x1ad0 [ 1964.928112][T27676] ? __pfx_filemap_map_pages+0x10/0x10 [ 1964.928136][T27676] __handle_mm_fault+0x1919/0x2bb0 [ 1964.928161][T27676] ? __pfx___handle_mm_fault+0x10/0x10 [ 1964.928193][T27676] ? find_vma+0xbf/0x140 [ 1964.928216][T27676] ? __pfx_find_vma+0x10/0x10 [ 1964.928243][T27676] handle_mm_fault+0x3fe/0xad0 [ 1964.928266][T27676] do_user_addr_fault+0x7a6/0x1370 [ 1964.928289][T27676] ? rcu_is_watching+0x12/0xc0 [ 1964.928317][T27676] exc_page_fault+0x64/0xc0 [ 1964.928334][T27676] asm_exc_page_fault+0x26/0x30 [ 1964.928350][T27676] RIP: 0010:__put_user_4+0xd/0x20 [ 1964.928367][T27676] Code: 66 89 01 31 c9 0f 01 ca e9 80 be 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 57 be 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1964.928384][T27676] RSP: 0018:ffffc90003637d48 EFLAGS: 00050206 [ 1964.928399][T27676] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000005c8d [ 1964.928410][T27676] RDX: ffff888021763d00 RSI: ffffffff86656e54 RDI: ffffffff8bf2b600 [ 1964.928420][T27676] RBP: ffffc90003637ed0 R08: 00000000bd92d5b5 R09: 000000005bd92d5b [ 1964.928431][T27676] R10: 0000000000000001 R11: ffff888021764830 R12: ffffc90003637e10 [ 1964.928441][T27676] R13: ffff88805bee8d80 R14: ffff888077876000 R15: ffff88805bee95fc [ 1964.928459][T27676] ? __tun_chr_ioctl+0x3ad4/0x4880 [ 1964.928484][T27676] __tun_chr_ioctl+0x3ae5/0x4880 [ 1964.928503][T27676] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1964.928528][T27676] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1964.928552][T27676] ? hook_file_ioctl_common+0x144/0x410 [ 1964.928580][T27676] ? __fget_files+0x20e/0x3c0 [ 1964.928607][T27676] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1964.928628][T27676] __x64_sys_ioctl+0x18e/0x210 [ 1964.928652][T27676] do_syscall_64+0xcd/0xf80 [ 1964.928670][T27676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1964.928687][T27676] RIP: 0033:0x7f6d1918f7c9 [ 1964.928700][T27676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1964.928716][T27676] RSP: 002b:00007f6d19fb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1964.928736][T27676] RAX: ffffffffffffffda RBX: 00007f6d193e6090 RCX: 00007f6d1918f7c9 [ 1964.928747][T27676] RDX: 0000000000005c8d RSI: 00000000800454df RDI: 00000000000000c8 [ 1964.928757][T27676] RBP: 00007f6d19fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1964.928768][T27676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1964.928777][T27676] R13: 00007f6d193e6128 R14: 00007f6d193e6090 R15: 00007ffc3bf409d8 [ 1964.928800][T27676] [ 1965.449101][T27627] memory+swap: usage 5128kB, limit 9007199254740988kB, failcnt 0 [ 1965.456993][T27627] kmem: usage 776kB, limit 9007199254740988kB, failcnt 0 [ 1965.464261][T27627] Memory cgroup stats for /syz0: [ 1965.464371][T27627] cache 0 [ 1965.472399][T27627] rss 2306048 [ 1965.475743][T27627] rss_huge 0 [ 1965.478972][T27627] shmem 0 [ 1965.481948][T27627] mapped_file 0 [ 1965.485426][T27627] dirty 0 [ 1965.488425][T27627] writeback 0 [ 1965.491996][T27627] workingset_refault_anon 17885 [ 1965.496875][T27627] workingset_refault_file 7001 [ 1965.501834][T27627] swap 2105344 [ 1965.506552][T27627] swapcached 69632 [ 1965.510428][T27627] pgpgin 2182954 [ 1965.514065][T27627] pgpgout 2208486 [ 1965.517797][T27627] pgfault 1686382 [ 1965.521688][T27627] pgmajfault 5618 [ 1965.525541][T27627] inactive_anon 0 [ 1965.529344][T27627] active_anon 28672 [ 1965.533312][T27627] inactive_file 0 [ 1965.536986][T27627] active_file 0 [ 1965.540607][T27627] unevictable 2297856 [ 1965.544582][T27627] hierarchical_memory_limit 3145728 [ 1965.549849][T27627] hierarchical_memsw_limit 9223372036854771712 [ 1965.556000][T27627] total_cache 0 [ 1965.559459][T27627] total_rss 2306048 [ 1965.563368][T27627] total_rss_huge 0 [ 1965.567083][T27627] total_shmem 0 [ 1965.570727][T27627] total_mapped_file 0 [ 1965.574866][T27627] total_dirty 0 [ 1965.578659][T27627] total_writeback 0 [ 1965.582565][T27627] total_workingset_refault_anon 17885 [ 1965.588039][T27627] total_workingset_refault_file 7001 [ 1965.593366][T27627] total_swap 2105344 [ 1965.597600][T27627] total_swapcached 69632 [ 1965.602123][T27627] total_pgpgin 2182954 [ 1965.606290][T27627] total_pgpgout 2208486 [ 1965.612014][T27627] total_pgfault 1686382 [ 1965.616401][T27627] total_pgmajfault 5618 [ 1965.620732][T27627] total_inactive_anon 0 [ 1965.624886][T27627] total_active_anon 28672 [ 1965.629401][T27627] total_inactive_file 0 [ 1965.633557][T27627] total_active_file 0 [ 1965.637543][T27627] total_unevictable 2297856 [ 1965.642214][T27627] anon_cost 200 [ 1965.645673][T27627] file_cost 0 [ 1965.649035][T27627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9000,pid=27627,uid=0 [ 1965.664149][T27627] Memory cgroup out of memory: Killed process 27627 (syz.0.9000) total-vm:106396kB, anon-rss:3316kB, file-rss:22996kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1966.467998][T27721] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119 [ 1968.176945][T27796] HfR: entered promiscuous mode [ 1968.266631][T27796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9014'. [ 1968.327455][T27796] HfR: left promiscuous mode [ 1970.761366][T27840] FAULT_INJECTION: forcing a failure. [ 1970.761366][T27840] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.957681][T27869] NFSD: Failed to start, no listeners configured. [ 1970.976831][T27840] CPU: 0 UID: 0 PID: 27840 Comm: syz.5.9023 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1970.976872][T27840] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1970.976881][T27840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1970.976891][T27840] Call Trace: [ 1970.976897][T27840] [ 1970.976912][T27840] dump_stack_lvl+0x16c/0x1f0 [ 1970.976936][T27840] should_fail_ex+0x512/0x640 [ 1970.976958][T27840] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1970.976983][T27840] should_failslab+0xc2/0x120 [ 1970.977010][T27840] kmem_cache_alloc_noprof+0x83/0x770 [ 1970.977032][T27840] ? __proc_create+0x2c8/0x8d0 [ 1970.977059][T27840] ? __proc_create+0x2c8/0x8d0 [ 1970.977080][T27840] __proc_create+0x2c8/0x8d0 [ 1970.977104][T27840] ? __pfx___proc_create+0x10/0x10 [ 1970.977130][T27840] ? _raw_write_unlock+0x28/0x50 [ 1970.977145][T27840] ? proc_register+0x559/0x8b0 [ 1970.977172][T27840] proc_create_reg+0x7d/0x180 [ 1970.977198][T27840] proc_create_net_data+0x8e/0x1c0 [ 1970.977223][T27840] ? __pfx_proc_create_net_data+0x10/0x10 [ 1970.977254][T27840] sctp_proc_init+0xfb/0x270 [ 1970.977281][T27840] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1970.977296][T27840] sctp_defaults_init+0x758/0xd90 [ 1970.977314][T27840] ? __pfx_sctp_defaults_init+0x10/0x10 [ 1970.977330][T27840] ops_init+0x1e2/0x5f0 [ 1970.977358][T27840] setup_net+0x11d/0x3a0 [ 1970.977383][T27840] ? __pfx_setup_net+0x10/0x10 [ 1970.977407][T27840] ? lockdep_init_map_type+0x5c/0x270 [ 1970.977425][T27840] ? mutex_init_lockep+0x110/0x150 [ 1970.977445][T27840] copy_net_ns+0x351/0x7c0 [ 1970.977464][T27840] create_new_namespaces+0x3ea/0xab0 [ 1970.977492][T27840] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1970.977518][T27840] ksys_unshare+0x45b/0xa40 [ 1970.977534][T27840] ? __pfx_ksys_unshare+0x10/0x10 [ 1970.977550][T27840] ? xfd_validate_state+0x61/0x180 [ 1970.977573][T27840] __x64_sys_unshare+0x31/0x40 [ 1970.977588][T27840] do_syscall_64+0xcd/0xf80 [ 1970.977606][T27840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.977623][T27840] RIP: 0033:0x7ff9d158f7c9 [ 1970.977639][T27840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1970.977656][T27840] RSP: 002b:00007ff9d2460038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1970.977673][T27840] RAX: ffffffffffffffda RBX: 00007ff9d17e5fa0 RCX: 00007ff9d158f7c9 [ 1970.977684][T27840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1970.977694][T27840] RBP: 00007ff9d1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1970.977703][T27840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1970.977713][T27840] R13: 00007ff9d17e6038 R14: 00007ff9d17e5fa0 R15: 00007ffc0cf4d998 [ 1970.977735][T27840] [ 1972.236604][T27915] FAULT_INJECTION: forcing a failure. [ 1972.236604][T27915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1972.288355][T27915] CPU: 0 UID: 0 PID: 27915 Comm: syz.5.9026 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1972.288393][T27915] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1972.288402][T27915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1972.288412][T27915] Call Trace: [ 1972.288418][T27915] [ 1972.288425][T27915] dump_stack_lvl+0x16c/0x1f0 [ 1972.288448][T27915] should_fail_ex+0x512/0x640 [ 1972.288473][T27915] _copy_to_user+0x32/0xd0 [ 1972.288497][T27915] simple_read_from_buffer+0xcb/0x170 [ 1972.288523][T27915] proc_fail_nth_read+0x197/0x240 [ 1972.288543][T27915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1972.288562][T27915] ? rw_verify_area+0xcf/0x6c0 [ 1972.288584][T27915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1972.288601][T27915] vfs_read+0x1e4/0xcf0 [ 1972.288627][T27915] ? __pfx___mutex_lock+0x10/0x10 [ 1972.288648][T27915] ? __pfx_vfs_read+0x10/0x10 [ 1972.288678][T27915] ? __fget_files+0x20e/0x3c0 [ 1972.288709][T27915] ksys_read+0x12a/0x250 [ 1972.288734][T27915] ? __pfx_ksys_read+0x10/0x10 [ 1972.288765][T27915] do_syscall_64+0xcd/0xf80 [ 1972.288784][T27915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1972.288801][T27915] RIP: 0033:0x7ff9d158e1dc [ 1972.288815][T27915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1972.288832][T27915] RSP: 002b:00007ff9d243f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1972.288849][T27915] RAX: ffffffffffffffda RBX: 00007ff9d17e6090 RCX: 00007ff9d158e1dc [ 1972.288860][T27915] RDX: 000000000000000f RSI: 00007ff9d243f0a0 RDI: 0000000000000004 [ 1972.288870][T27915] RBP: 00007ff9d243f090 R08: 0000000000000000 R09: 0000000000000000 [ 1972.288880][T27915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1972.288890][T27915] R13: 00007ff9d17e6128 R14: 00007ff9d17e6090 R15: 00007ffc0cf4d998 [ 1972.288919][T27915] [ 1976.710150][T28051] NFSD: Failed to start, no listeners configured. [ 1977.317282][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.323850][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.407393][T28148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9052'. [ 1981.607419][T28142] kexec: Could not allocate control_code_buffer [ 1981.895764][T28172] FAULT_INJECTION: forcing a failure. [ 1981.895764][T28172] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.930654][T28172] CPU: 0 UID: 8 PID: 28172 Comm: syz.0.9059 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1981.930694][T28172] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1981.930704][T28172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1981.930713][T28172] Call Trace: [ 1981.930721][T28172] [ 1981.930729][T28172] dump_stack_lvl+0x16c/0x1f0 [ 1981.930751][T28172] should_fail_ex+0x512/0x640 [ 1981.930773][T28172] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1981.930799][T28172] should_failslab+0xc2/0x120 [ 1981.930826][T28172] kmem_cache_alloc_noprof+0x83/0x770 [ 1981.930848][T28172] ? key_alloc+0x3e0/0x1330 [ 1981.930874][T28172] ? key_alloc+0x3e0/0x1330 [ 1981.930895][T28172] key_alloc+0x3e0/0x1330 [ 1981.930924][T28172] ? __pfx_key_alloc+0x10/0x10 [ 1981.930947][T28172] ? __pfx_key_default_cmp+0x10/0x10 [ 1981.930972][T28172] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1981.931001][T28172] keyring_alloc+0x44/0xc0 [ 1981.931027][T28172] look_up_user_keyrings+0x510/0x790 [ 1981.931051][T28172] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 1981.931074][T28172] ? futex_hash_put+0x3e/0x50 [ 1981.931091][T28172] ? futex_wake+0x1ad/0x530 [ 1981.931116][T28172] lookup_user_key+0x1a3/0x1300 [ 1981.931139][T28172] ? __pfx_lookup_user_key+0x10/0x10 [ 1981.931160][T28172] ? ksys_write+0x190/0x250 [ 1981.931189][T28172] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1981.931220][T28172] keyctl_get_security+0x85/0x2b0 [ 1981.931239][T28172] ? __pfx_keyctl_get_security+0x10/0x10 [ 1981.931259][T28172] ? xfd_validate_state+0x61/0x180 [ 1981.931279][T28172] __do_sys_keyctl+0x310/0x590 [ 1981.931299][T28172] do_syscall_64+0xcd/0xf80 [ 1981.931318][T28172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1981.931335][T28172] RIP: 0033:0x7fb6daf8f7c9 [ 1981.931350][T28172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1981.931368][T28172] RSP: 002b:00007fb6dbe8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1981.931385][T28172] RAX: ffffffffffffffda RBX: 00007fb6db1e5fa0 RCX: 00007fb6daf8f7c9 [ 1981.931396][T28172] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000011 [ 1981.931406][T28172] RBP: 00007fb6db013f91 R08: 0000000000000001 R09: 0000000000000000 [ 1981.931416][T28172] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 1981.931425][T28172] R13: 00007fb6db1e6038 R14: 00007fb6db1e5fa0 R15: 00007ffff0fb1458 [ 1981.931447][T28172] [ 1982.858745][T28185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1985.094232][T28271] FAULT_INJECTION: forcing a failure. [ 1985.094232][T28271] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.198011][T28271] CPU: 0 UID: 0 PID: 28271 Comm: syz.0.9073 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1985.198050][T28271] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1985.198059][T28271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1985.198069][T28271] Call Trace: [ 1985.198076][T28271] [ 1985.198083][T28271] dump_stack_lvl+0x16c/0x1f0 [ 1985.198105][T28271] should_fail_ex+0x512/0x640 [ 1985.198127][T28271] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1985.198151][T28271] should_failslab+0xc2/0x120 [ 1985.198179][T28271] kmem_cache_alloc_noprof+0x83/0x770 [ 1985.198200][T28271] ? __kernfs_new_node+0xd2/0x9b0 [ 1985.198225][T28271] ? __kernfs_new_node+0xd2/0x9b0 [ 1985.198243][T28271] __kernfs_new_node+0xd2/0x9b0 [ 1985.198266][T28271] ? __pfx___kernfs_new_node+0x10/0x10 [ 1985.198293][T28271] ? find_held_lock+0x2b/0x80 [ 1985.198316][T28271] ? kernfs_root+0xee/0x2a0 [ 1985.198341][T28271] kernfs_new_node+0x13c/0x1e0 [ 1985.198369][T28271] __kernfs_create_file+0x53/0x350 [ 1985.198388][T28271] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1985.198413][T28271] sysfs_merge_group+0x1aa/0x340 [ 1985.198436][T28271] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1985.198461][T28271] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1985.198488][T28271] ? bus_to_subsys+0x131/0x160 [ 1985.198508][T28271] dpm_sysfs_add+0x237/0x280 [ 1985.198534][T28271] device_add+0x9cc/0x1980 [ 1985.198564][T28271] ? __pfx_device_add+0x10/0x10 [ 1985.198589][T28271] ? lockdep_init_map_type+0x5c/0x270 [ 1985.198616][T28271] ? __init_waitqueue_head+0xca/0x150 [ 1985.198648][T28271] rfkill_register+0x1ad/0xb40 [ 1985.198675][T28271] nfc_register_device+0x11f/0x410 [ 1985.198705][T28271] nci_register_device+0x7f1/0xb80 [ 1985.198729][T28271] ? __pfx_nci_register_device+0x10/0x10 [ 1985.198756][T28271] ? lockdep_init_map_type+0x5c/0x270 [ 1985.198778][T28271] virtual_ncidev_open+0x141/0x220 [ 1985.198798][T28271] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1985.198816][T28271] misc_open+0x26d/0x450 [ 1985.198838][T28271] ? __pfx_misc_open+0x10/0x10 [ 1985.198859][T28271] chrdev_open+0x234/0x6a0 [ 1985.198874][T28271] ? __pfx_apparmor_file_open+0x10/0x10 [ 1985.198894][T28271] ? __pfx_chrdev_open+0x10/0x10 [ 1985.198922][T28271] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1985.198955][T28271] do_dentry_open+0x748/0x1590 [ 1985.198981][T28271] ? __pfx_chrdev_open+0x10/0x10 [ 1985.199013][T28271] vfs_open+0x82/0x3f0 [ 1985.199036][T28271] path_openat+0x2078/0x3140 [ 1985.199070][T28271] ? __pfx_path_openat+0x10/0x10 [ 1985.199104][T28271] do_filp_open+0x20b/0x470 [ 1985.199132][T28271] ? __pfx_do_filp_open+0x10/0x10 [ 1985.199174][T28271] ? alloc_fd+0x471/0x7d0 [ 1985.199207][T28271] do_sys_openat2+0x121/0x290 [ 1985.199227][T28271] ? __pfx_do_sys_openat2+0x10/0x10 [ 1985.199255][T28271] __x64_sys_openat+0x174/0x210 [ 1985.199276][T28271] ? __pfx___x64_sys_openat+0x10/0x10 [ 1985.199306][T28271] do_syscall_64+0xcd/0xf80 [ 1985.199325][T28271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.199342][T28271] RIP: 0033:0x7fb6daf8f7c9 [ 1985.199357][T28271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1985.199373][T28271] RSP: 002b:00007fb6dbe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1985.199391][T28271] RAX: ffffffffffffffda RBX: 00007fb6db1e5fa0 RCX: 00007fb6daf8f7c9 [ 1985.199402][T28271] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1985.199412][T28271] RBP: 00007fb6db013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1985.199422][T28271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1985.199432][T28271] R13: 00007fb6db1e6038 R14: 00007fb6db1e5fa0 R15: 00007ffff0fb1458 [ 1985.199454][T28271] [ 1986.462779][T28284] FAULT_INJECTION: forcing a failure. [ 1986.462779][T28284] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.531330][T28284] CPU: 0 UID: 0 PID: 28284 Comm: syz.2.9074 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1986.531375][T28284] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1986.531385][T28284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1986.531396][T28284] Call Trace: [ 1986.531402][T28284] [ 1986.531410][T28284] dump_stack_lvl+0x16c/0x1f0 [ 1986.531434][T28284] should_fail_ex+0x512/0x640 [ 1986.531456][T28284] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1986.531482][T28284] should_failslab+0xc2/0x120 [ 1986.531511][T28284] kmem_cache_alloc_noprof+0x83/0x770 [ 1986.531532][T28284] ? __kernfs_new_node+0xd2/0x9b0 [ 1986.531568][T28284] ? __kernfs_new_node+0xd2/0x9b0 [ 1986.531590][T28284] __kernfs_new_node+0xd2/0x9b0 [ 1986.531616][T28284] ? __pfx___kernfs_new_node+0x10/0x10 [ 1986.531645][T28284] ? find_held_lock+0x2b/0x80 [ 1986.531672][T28284] ? kernfs_root+0xee/0x2a0 [ 1986.531697][T28284] kernfs_new_node+0x13c/0x1e0 [ 1986.531727][T28284] __kernfs_create_file+0x53/0x350 [ 1986.531746][T28284] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1986.531773][T28284] sysfs_merge_group+0x1aa/0x340 [ 1986.531796][T28284] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1986.531822][T28284] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1986.531851][T28284] ? bus_to_subsys+0x131/0x160 [ 1986.531872][T28284] dpm_sysfs_add+0x237/0x280 [ 1986.531899][T28284] device_add+0x9cc/0x1980 [ 1986.531929][T28284] ? __pfx_device_add+0x10/0x10 [ 1986.531960][T28284] ? lockdep_init_map_type+0x5c/0x270 [ 1986.531979][T28284] ? __init_waitqueue_head+0xca/0x150 [ 1986.532008][T28284] rfkill_register+0x1ad/0xb40 [ 1986.532037][T28284] nfc_register_device+0x11f/0x410 [ 1986.532068][T28284] nci_register_device+0x7f1/0xb80 [ 1986.532094][T28284] ? __pfx_nci_register_device+0x10/0x10 [ 1986.532121][T28284] ? lockdep_init_map_type+0x5c/0x270 [ 1986.532144][T28284] virtual_ncidev_open+0x141/0x220 [ 1986.532166][T28284] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1986.532185][T28284] misc_open+0x26d/0x450 [ 1986.532208][T28284] ? __pfx_misc_open+0x10/0x10 [ 1986.532230][T28284] chrdev_open+0x234/0x6a0 [ 1986.532246][T28284] ? __pfx_apparmor_file_open+0x10/0x10 [ 1986.532266][T28284] ? __pfx_chrdev_open+0x10/0x10 [ 1986.532296][T28284] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1986.532329][T28284] do_dentry_open+0x748/0x1590 [ 1986.532355][T28284] ? __pfx_chrdev_open+0x10/0x10 [ 1986.532389][T28284] vfs_open+0x82/0x3f0 [ 1986.532413][T28284] path_openat+0x2078/0x3140 [ 1986.532447][T28284] ? __pfx_path_openat+0x10/0x10 [ 1986.532483][T28284] do_filp_open+0x20b/0x470 [ 1986.532511][T28284] ? __pfx_do_filp_open+0x10/0x10 [ 1986.532563][T28284] ? alloc_fd+0x471/0x7d0 [ 1986.532598][T28284] do_sys_openat2+0x121/0x290 [ 1986.532620][T28284] ? __pfx_do_sys_openat2+0x10/0x10 [ 1986.532651][T28284] __x64_sys_openat+0x174/0x210 [ 1986.532673][T28284] ? __pfx___x64_sys_openat+0x10/0x10 [ 1986.532705][T28284] do_syscall_64+0xcd/0xf80 [ 1986.532726][T28284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.532745][T28284] RIP: 0033:0x7fa906f8f7c9 [ 1986.532762][T28284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1986.532780][T28284] RSP: 002b:00007fa907f06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1986.532799][T28284] RAX: ffffffffffffffda RBX: 00007fa9071e5fa0 RCX: 00007fa906f8f7c9 [ 1986.532811][T28284] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1986.532822][T28284] RBP: 00007fa907013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1986.532833][T28284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1986.532843][T28284] R13: 00007fa9071e6038 R14: 00007fa9071e5fa0 R15: 00007ffc70b983d8 [ 1986.532867][T28284] [ 1987.398925][T27912] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1987.848361][T28239] kexec: Could not allocate control_code_buffer [ 1989.122060][T12973] EXT4-fs: 2 callbacks suppressed [ 1989.122078][T12973] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1363 with max blocks 1 with error 117 [ 1989.259855][T12973] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1989.259855][T12973] [ 1989.524732][T28326] FAULT_INJECTION: forcing a failure. [ 1989.524732][T28326] name failslab, interval 1, probability 0, space 0, times 0 [ 1989.723364][T28326] CPU: 0 UID: 0 PID: 28326 Comm: syz.1.9084 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1989.723405][T28326] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1989.723415][T28326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1989.723425][T28326] Call Trace: [ 1989.723432][T28326] [ 1989.723438][T28326] dump_stack_lvl+0x16c/0x1f0 [ 1989.723461][T28326] should_fail_ex+0x512/0x640 [ 1989.723483][T28326] ? __kmalloc_noprof+0xca/0x910 [ 1989.723505][T28326] should_failslab+0xc2/0x120 [ 1989.723533][T28326] __kmalloc_noprof+0xeb/0x910 [ 1989.723560][T28326] ? lockdep_init_map_type+0x5c/0x270 [ 1989.723578][T28326] ? ops_init+0x77/0x5f0 [ 1989.723608][T28326] ? ops_init+0x77/0x5f0 [ 1989.723631][T28326] ops_init+0x77/0x5f0 [ 1989.723658][T28326] setup_net+0x11d/0x3a0 [ 1989.723683][T28326] ? __pfx_setup_net+0x10/0x10 [ 1989.723708][T28326] ? lockdep_init_map_type+0x5c/0x270 [ 1989.723728][T28326] ? mutex_init_lockep+0x110/0x150 [ 1989.723751][T28326] copy_net_ns+0x351/0x7c0 [ 1989.723770][T28326] create_new_namespaces+0x3ea/0xab0 [ 1989.723798][T28326] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1989.723824][T28326] ksys_unshare+0x45b/0xa40 [ 1989.723840][T28326] ? __pfx_ksys_unshare+0x10/0x10 [ 1989.723856][T28326] ? xfd_validate_state+0x61/0x180 [ 1989.723879][T28326] __x64_sys_unshare+0x31/0x40 [ 1989.723894][T28326] do_syscall_64+0xcd/0xf80 [ 1989.723912][T28326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.723929][T28326] RIP: 0033:0x7f6d1918f7c9 [ 1989.723945][T28326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1989.723962][T28326] RSP: 002b:00007f6d19fda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1989.723978][T28326] RAX: ffffffffffffffda RBX: 00007f6d193e5fa0 RCX: 00007f6d1918f7c9 [ 1989.723989][T28326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1989.724000][T28326] RBP: 00007f6d19213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1989.724010][T28326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1989.724019][T28326] R13: 00007f6d193e6038 R14: 00007f6d193e5fa0 R15: 00007ffc3bf409d8 [ 1989.724041][T28326] [ 1991.466606][T28408] FAULT_INJECTION: forcing a failure. [ 1991.466606][T28408] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.544357][T28408] CPU: 0 UID: 0 PID: 28408 Comm: syz.0.9088 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1991.544400][T28408] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1991.544410][T28408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1991.544422][T28408] Call Trace: [ 1991.544429][T28408] [ 1991.544437][T28408] dump_stack_lvl+0x16c/0x1f0 [ 1991.544461][T28408] should_fail_ex+0x512/0x640 [ 1991.544483][T28408] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1991.544509][T28408] should_failslab+0xc2/0x120 [ 1991.544537][T28408] kmem_cache_alloc_noprof+0x83/0x770 [ 1991.544573][T28408] ? __kernfs_new_node+0xd2/0x9b0 [ 1991.544600][T28408] ? __kernfs_new_node+0xd2/0x9b0 [ 1991.544621][T28408] __kernfs_new_node+0xd2/0x9b0 [ 1991.544647][T28408] ? __pfx___kernfs_new_node+0x10/0x10 [ 1991.544675][T28408] ? find_held_lock+0x2b/0x80 [ 1991.544700][T28408] ? kernfs_root+0xee/0x2a0 [ 1991.544725][T28408] kernfs_new_node+0x13c/0x1e0 [ 1991.544754][T28408] __kernfs_create_file+0x53/0x350 [ 1991.544774][T28408] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1991.544800][T28408] sysfs_merge_group+0x1aa/0x340 [ 1991.544824][T28408] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1991.544849][T28408] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1991.544876][T28408] ? bus_to_subsys+0x131/0x160 [ 1991.544897][T28408] dpm_sysfs_add+0x237/0x280 [ 1991.544924][T28408] device_add+0x9cc/0x1980 [ 1991.544953][T28408] ? __pfx_device_add+0x10/0x10 [ 1991.544979][T28408] ? lockdep_init_map_type+0x5c/0x270 [ 1991.544999][T28408] ? __init_waitqueue_head+0xca/0x150 [ 1991.545026][T28408] rfkill_register+0x1ad/0xb40 [ 1991.545054][T28408] nfc_register_device+0x11f/0x410 [ 1991.545091][T28408] nci_register_device+0x7f1/0xb80 [ 1991.545117][T28408] ? __pfx_nci_register_device+0x10/0x10 [ 1991.545144][T28408] ? lockdep_init_map_type+0x5c/0x270 [ 1991.545168][T28408] virtual_ncidev_open+0x141/0x220 [ 1991.545190][T28408] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1991.545209][T28408] misc_open+0x26d/0x450 [ 1991.545232][T28408] ? __pfx_misc_open+0x10/0x10 [ 1991.545254][T28408] chrdev_open+0x234/0x6a0 [ 1991.545270][T28408] ? __pfx_apparmor_file_open+0x10/0x10 [ 1991.545290][T28408] ? __pfx_chrdev_open+0x10/0x10 [ 1991.545319][T28408] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1991.545353][T28408] do_dentry_open+0x748/0x1590 [ 1991.545380][T28408] ? __pfx_chrdev_open+0x10/0x10 [ 1991.545414][T28408] vfs_open+0x82/0x3f0 [ 1991.545437][T28408] path_openat+0x2078/0x3140 [ 1991.545472][T28408] ? __pfx_path_openat+0x10/0x10 [ 1991.545508][T28408] do_filp_open+0x20b/0x470 [ 1991.545536][T28408] ? __pfx_do_filp_open+0x10/0x10 [ 1991.545590][T28408] ? alloc_fd+0x471/0x7d0 [ 1991.545626][T28408] do_sys_openat2+0x121/0x290 [ 1991.545648][T28408] ? __pfx_do_sys_openat2+0x10/0x10 [ 1991.545679][T28408] __x64_sys_openat+0x174/0x210 [ 1991.545701][T28408] ? __pfx___x64_sys_openat+0x10/0x10 [ 1991.545732][T28408] do_syscall_64+0xcd/0xf80 [ 1991.545752][T28408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.545771][T28408] RIP: 0033:0x7fb6daf8f7c9 [ 1991.545787][T28408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1991.545805][T28408] RSP: 002b:00007fb6dbe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1991.545823][T28408] RAX: ffffffffffffffda RBX: 00007fb6db1e5fa0 RCX: 00007fb6daf8f7c9 [ 1991.545835][T28408] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1991.545846][T28408] RBP: 00007fb6db013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1991.545857][T28408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1991.545867][T28408] R13: 00007fb6db1e6038 R14: 00007fb6db1e5fa0 R15: 00007ffff0fb1458 [ 1991.545891][T28408] [ 1991.939021][T28415] FAULT_INJECTION: forcing a failure. [ 1991.939021][T28415] name failslab, interval 1, probability 0, space 0, times 0 [ 1991.952365][T28415] CPU: 0 UID: 0 PID: 28415 Comm: syz.1.9089 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1991.952405][T28415] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1991.952414][T28415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1991.952424][T28415] Call Trace: [ 1991.952433][T28415] [ 1991.952440][T28415] dump_stack_lvl+0x16c/0x1f0 [ 1991.952463][T28415] should_fail_ex+0x512/0x640 [ 1991.952494][T28415] ? fs_reclaim_acquire+0xae/0x150 [ 1991.952524][T28415] should_failslab+0xc2/0x120 [ 1991.952552][T28415] __kmalloc_noprof+0xeb/0x910 [ 1991.952571][T28415] ? find_held_lock+0x2b/0x80 [ 1991.952593][T28415] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1991.952623][T28415] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1991.952648][T28415] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1991.952676][T28415] ? tomoyo_profile+0x47/0x60 [ 1991.952694][T28415] tomoyo_path_perm+0x274/0x460 [ 1991.952714][T28415] ? tomoyo_path_perm+0x260/0x460 [ 1991.952737][T28415] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1991.952759][T28415] ? __lock_acquire+0x436/0x2890 [ 1991.952782][T28415] ? __lock_acquire+0x436/0x2890 [ 1991.952810][T28415] ? find_held_lock+0x2b/0x80 [ 1991.952832][T28415] ? __pfx___up_read+0x10/0x10 [ 1991.952851][T28415] ? kernfs_dop_revalidate+0x350/0x740 [ 1991.952879][T28415] tomoyo_path_rmdir+0x91/0xe0 [ 1991.952907][T28415] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 1991.952935][T28415] ? lookup_dcache+0x66/0x170 [ 1991.952958][T28415] security_path_rmdir+0x145/0x2b0 [ 1991.952979][T28415] do_rmdir+0x34d/0x560 [ 1991.952995][T28415] ? __pfx_do_rmdir+0x10/0x10 [ 1991.953019][T28415] ? getname_flags.part.0+0x1c5/0x550 [ 1991.953041][T28415] __x64_sys_rmdir+0xc5/0x110 [ 1991.953057][T28415] do_syscall_64+0xcd/0xf80 [ 1991.953076][T28415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1991.953094][T28415] RIP: 0033:0x7f6d1918f7c9 [ 1991.953110][T28415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1991.953127][T28415] RSP: 002b:00007f6d19fda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1991.953144][T28415] RAX: ffffffffffffffda RBX: 00007f6d193e5fa0 RCX: 00007f6d1918f7c9 [ 1991.953156][T28415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 1991.953165][T28415] RBP: 00007f6d19fda090 R08: 0000000000000000 R09: 0000000000000000 [ 1991.953176][T28415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1991.953185][T28415] R13: 00007f6d193e6038 R14: 00007f6d193e5fa0 R15: 00007ffc3bf409d8 [ 1991.953208][T28415] [ 1991.953216][T28415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1992.503530][T18085] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1384 with max blocks 1 with error 117 [ 1992.574024][T18085] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1992.574024][T18085] [ 1992.873111][T28421] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006600 pfn:0x78000 [ 1992.942347][T28421] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1992.952444][T28421] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1992.962546][T28421] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1993.017214][T28421] raw: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 1993.156138][T28421] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1993.227594][T28421] head: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 1993.306098][T28421] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1993.387496][T28421] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1993.504581][T28421] page dumped because: unmovable page [ 1993.527717][T28421] page_owner tracks the page as allocated [ 1993.564163][T28421] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12985, tgid 12985 (kworker/u11:27), ts 1744620870237, free_ts 1744620798216 [ 1993.630792][T28421] post_alloc_hook+0x1af/0x220 [ 1993.647148][T28421] get_page_from_freelist+0xd0b/0x31a0 [ 1993.658733][T28460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1993.673985][T28421] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1993.687109][T28421] alloc_pages_mpol+0x1fb/0x550 [ 1993.701650][T28421] alloc_pages_noprof+0x131/0x390 [ 1993.715295][T28421] skb_page_frag_refill+0x186/0x5c0 [ 1993.727028][T28421] try_fill_recv+0x7e4/0x2930 [ 1993.746888][T28421] virtnet_poll+0x1843/0x3c40 [ 1993.762117][T28421] __napi_poll.constprop.0+0xb3/0x540 [ 1993.780669][T28421] net_rx_action+0x9f9/0xfa0 [ 1993.796554][T28421] handle_softirqs+0x219/0x950 [ 1993.816391][T28421] __irq_exit_rcu+0x109/0x170 [ 1993.835494][T28421] irq_exit_rcu+0x9/0x30 [ 1993.853850][T28421] common_interrupt+0xbf/0xe0 [ 1993.875049][T28421] asm_common_interrupt+0x26/0x40 [ 1993.902855][T28421] page last free pid 12985 tgid 12985 stack trace: [ 1993.948570][T28421] __free_frozen_pages+0x7df/0x1170 [ 1993.954051][T28421] __folio_put+0x329/0x450 [ 1993.978218][T28421] page_to_skb+0xa43/0xbe0 [ 1993.995389][T28421] receive_buf+0x899/0x4770 [ 1994.013493][T28421] virtnet_poll+0x14cc/0x3c40 [ 1994.023601][T28421] __napi_poll.constprop.0+0xb3/0x540 [ 1994.050886][T28421] net_rx_action+0x9f9/0xfa0 [ 1994.070083][T28421] handle_softirqs+0x219/0x950 [ 1994.083581][T28421] __irq_exit_rcu+0x109/0x170 [ 1994.100189][T28421] irq_exit_rcu+0x9/0x30 [ 1994.111917][T28421] common_interrupt+0xbf/0xe0 [ 1994.127270][T28421] asm_common_interrupt+0x26/0x40 [ 1994.222528][T28459] HfR: entered promiscuous mode [ 1994.377272][T28460] HfR: left promiscuous mode [ 1994.468927][T28476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9095'. [ 1994.643793][T28473] HfR: entered promiscuous mode [ 1994.753698][T28476] HfR: left promiscuous mode [ 1994.985415][T28439] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1995.208435][T28491] futex_wake_op: syz.2.9098 tries to shift op by -2048; fix this program [ 1995.250944][T28491] futex_wake_op: syz.2.9098 tries to shift op by -2048; fix this program [ 1996.011397][T28504] netlink: 330 bytes leftover after parsing attributes in process `syz.5.9096'. [ 1996.201739][T28504] : renamed from ip6tnl0 (while UP) [ 1997.515429][T28523] FAULT_INJECTION: forcing a failure. [ 1997.515429][T28523] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.589987][T28523] CPU: 0 UID: 0 PID: 28523 Comm: syz.2.9105 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1997.590031][T28523] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1997.590041][T28523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1997.590053][T28523] Call Trace: [ 1997.590059][T28523] [ 1997.590067][T28523] dump_stack_lvl+0x16c/0x1f0 [ 1997.590090][T28523] should_fail_ex+0x512/0x640 [ 1997.590113][T28523] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1997.590140][T28523] should_failslab+0xc2/0x120 [ 1997.590169][T28523] kmem_cache_alloc_noprof+0x83/0x770 [ 1997.590192][T28523] ? __kernfs_new_node+0xd2/0x9b0 [ 1997.590220][T28523] ? __kernfs_new_node+0xd2/0x9b0 [ 1997.590240][T28523] __kernfs_new_node+0xd2/0x9b0 [ 1997.590264][T28523] ? __pfx___kernfs_new_node+0x10/0x10 [ 1997.590292][T28523] ? find_held_lock+0x2b/0x80 [ 1997.590317][T28523] ? kernfs_root+0xee/0x2a0 [ 1997.590344][T28523] kernfs_new_node+0x13c/0x1e0 [ 1997.590382][T28523] __kernfs_create_file+0x53/0x350 [ 1997.590403][T28523] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1997.590429][T28523] sysfs_merge_group+0x1aa/0x340 [ 1997.590455][T28523] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1997.590481][T28523] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1997.590513][T28523] ? bus_to_subsys+0x131/0x160 [ 1997.590534][T28523] dpm_sysfs_add+0x237/0x280 [ 1997.590560][T28523] device_add+0x9cc/0x1980 [ 1997.590590][T28523] ? __pfx_device_add+0x10/0x10 [ 1997.590616][T28523] ? lockdep_init_map_type+0x5c/0x270 [ 1997.590636][T28523] ? __init_waitqueue_head+0xca/0x150 [ 1997.590668][T28523] rfkill_register+0x1ad/0xb40 [ 1997.590697][T28523] nfc_register_device+0x11f/0x410 [ 1997.590734][T28523] nci_register_device+0x7f1/0xb80 [ 1997.590772][T28523] ? __pfx_nci_register_device+0x10/0x10 [ 1997.590801][T28523] ? lockdep_init_map_type+0x5c/0x270 [ 1997.590825][T28523] virtual_ncidev_open+0x141/0x220 [ 1997.590847][T28523] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1997.590868][T28523] misc_open+0x26d/0x450 [ 1997.590891][T28523] ? __pfx_misc_open+0x10/0x10 [ 1997.590912][T28523] chrdev_open+0x234/0x6a0 [ 1997.590928][T28523] ? __pfx_apparmor_file_open+0x10/0x10 [ 1997.590950][T28523] ? __pfx_chrdev_open+0x10/0x10 [ 1997.590979][T28523] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1997.591013][T28523] do_dentry_open+0x748/0x1590 [ 1997.591039][T28523] ? __pfx_chrdev_open+0x10/0x10 [ 1997.591073][T28523] vfs_open+0x82/0x3f0 [ 1997.591096][T28523] path_openat+0x2078/0x3140 [ 1997.591131][T28523] ? __pfx_path_openat+0x10/0x10 [ 1997.591168][T28523] do_filp_open+0x20b/0x470 [ 1997.591196][T28523] ? __pfx_do_filp_open+0x10/0x10 [ 1997.591240][T28523] ? alloc_fd+0x471/0x7d0 [ 1997.591274][T28523] do_sys_openat2+0x121/0x290 [ 1997.591295][T28523] ? __pfx_do_sys_openat2+0x10/0x10 [ 1997.591325][T28523] __x64_sys_openat+0x174/0x210 [ 1997.591347][T28523] ? __pfx___x64_sys_openat+0x10/0x10 [ 1997.591377][T28523] do_syscall_64+0xcd/0xf80 [ 1997.591398][T28523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1997.591417][T28523] RIP: 0033:0x7fa906f8f7c9 [ 1997.591434][T28523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1997.591452][T28523] RSP: 002b:00007fa907f06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1997.591470][T28523] RAX: ffffffffffffffda RBX: 00007fa9071e5fa0 RCX: 00007fa906f8f7c9 [ 1997.591481][T28523] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1997.591493][T28523] RBP: 00007fa907013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1997.591504][T28523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1997.591516][T28523] R13: 00007fa9071e6038 R14: 00007fa9071e5fa0 R15: 00007ffc70b983d8 [ 1997.591551][T28523] [ 1998.445317][T28531] FAULT_INJECTION: forcing a failure. [ 1998.445317][T28531] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.508427][T28531] CPU: 0 UID: 0 PID: 28531 Comm: syz.5.9106 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1998.508467][T28531] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1998.508476][T28531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1998.508486][T28531] Call Trace: [ 1998.508493][T28531] [ 1998.508499][T28531] dump_stack_lvl+0x16c/0x1f0 [ 1998.508522][T28531] should_fail_ex+0x512/0x640 [ 1998.508544][T28531] ? __kmalloc_noprof+0xca/0x910 [ 1998.508565][T28531] should_failslab+0xc2/0x120 [ 1998.508592][T28531] __kmalloc_noprof+0xeb/0x910 [ 1998.508610][T28531] ? lockdep_init_map_type+0x5c/0x270 [ 1998.508630][T28531] ? udpv6_init_sock+0x24e/0x450 [ 1998.508659][T28531] ? udpv6_init_sock+0x24e/0x450 [ 1998.508681][T28531] udpv6_init_sock+0x24e/0x450 [ 1998.508725][T28531] udplitev6_sk_init+0x15/0x60 [ 1998.508752][T28531] ? __pfx_udplitev6_sk_init+0x10/0x10 [ 1998.508784][T28531] inet6_create+0xb30/0x12b0 [ 1998.508803][T28531] ? inet6_create+0x7f/0x12b0 [ 1998.508821][T28531] __sock_create+0x339/0x8a0 [ 1998.508844][T28531] __sys_socket+0x14d/0x260 [ 1998.508862][T28531] ? fput+0x70/0xf0 [ 1998.508879][T28531] ? __pfx___sys_socket+0x10/0x10 [ 1998.508898][T28531] ? xfd_validate_state+0x61/0x180 [ 1998.508913][T28531] ? __pfx_ksys_write+0x10/0x10 [ 1998.508942][T28531] __x64_sys_socket+0x72/0xb0 [ 1998.508960][T28531] ? lockdep_hardirqs_on+0x7c/0x110 [ 1998.508977][T28531] do_syscall_64+0xcd/0xf80 [ 1998.508996][T28531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1998.509013][T28531] RIP: 0033:0x7ff9d158f7c9 [ 1998.509028][T28531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1998.509046][T28531] RSP: 002b:00007ff9d243f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1998.509063][T28531] RAX: ffffffffffffffda RBX: 00007ff9d17e6090 RCX: 00007ff9d158f7c9 [ 1998.509074][T28531] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 1998.509084][T28531] RBP: 00007ff9d1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1998.509094][T28531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1998.509103][T28531] R13: 00007ff9d17e6128 R14: 00007ff9d17e6090 R15: 00007ffc0cf4d998 [ 1998.509125][T28531] [ 1998.875058][T28538] HfR: entered promiscuous mode [ 1998.887918][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9107'. [ 1998.897380][T28538] HfR: left promiscuous mode [ 1999.609280][T14341] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1999.653485][T14341] CPU: 0 UID: 0 PID: 14341 Comm: syz-executor Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1999.653531][T14341] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1999.653540][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1999.653550][T14341] Call Trace: [ 1999.653556][T14341] [ 1999.653563][T14341] dump_stack_lvl+0x16c/0x1f0 [ 1999.653586][T14341] dump_header+0x101/0x960 [ 1999.653613][T14341] oom_kill_process+0x176/0x910 [ 1999.653635][T14341] out_of_memory+0x350/0x1700 [ 1999.653655][T14341] ? __lock_acquire+0x436/0x2890 [ 1999.653675][T14341] ? __pfx_out_of_memory+0x10/0x10 [ 1999.653701][T14341] mem_cgroup_out_of_memory+0x118/0x130 [ 1999.653724][T14341] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1999.653750][T14341] ? do_raw_spin_unlock+0x172/0x230 [ 1999.653778][T14341] try_charge_memcg+0x695/0xd30 [ 1999.653810][T14341] ? __pfx_try_charge_memcg+0x10/0x10 [ 1999.653843][T14341] ? find_held_lock+0x2b/0x80 [ 1999.653869][T14341] charge_memcg+0x8a/0x230 [ 1999.653896][T14341] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1999.653918][T14341] __read_swap_cache_async+0x397/0x500 [ 1999.653944][T14341] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1999.653966][T14341] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1999.653992][T14341] ? rcu_is_watching+0x12/0xc0 [ 1999.654023][T14341] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1999.654047][T14341] ? lockdep_hardirqs_on+0x7c/0x110 [ 1999.654066][T14341] swap_cluster_readahead+0x432/0x770 [ 1999.654094][T14341] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1999.654119][T14341] ? __lock_acquire+0x436/0x2890 [ 1999.654145][T14341] ? get_vma_policy+0x242/0x3c0 [ 1999.654164][T14341] swapin_readahead+0x160/0x1220 [ 1999.654195][T14341] ? __pfx_swapin_readahead+0x10/0x10 [ 1999.654218][T14341] ? find_held_lock+0x2b/0x80 [ 1999.654239][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 1999.654259][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 1999.654278][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 1999.654300][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 1999.654320][T14341] ? swap_cache_get_folio+0x293/0x8e0 [ 1999.654342][T14341] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1999.654361][T14341] ? __pfx_get_swap_device+0x10/0x10 [ 1999.654387][T14341] ? rcu_read_unlock+0x2d/0xb0 [ 1999.654410][T14341] ? do_swap_page+0x962/0x64a0 [ 1999.654427][T14341] do_swap_page+0x962/0x64a0 [ 1999.654448][T14341] ? __lock_acquire+0x436/0x2890 [ 1999.654470][T14341] ? __pfx_do_swap_page+0x10/0x10 [ 1999.654490][T14341] ? __pfx_default_wake_function+0x10/0x10 [ 1999.654521][T14341] ? rcu_is_watching+0x12/0xc0 [ 1999.654544][T14341] ? __free_object+0x286/0x410 [ 1999.654573][T14341] ? rcu_is_watching+0x12/0xc0 [ 1999.654597][T14341] ? ___pte_offset_map+0x175/0x380 [ 1999.654624][T14341] __handle_mm_fault+0x19cb/0x2bb0 [ 1999.654647][T14341] ? reacquire_held_locks+0xcd/0x1f0 [ 1999.654665][T14341] ? __pfx___handle_mm_fault+0x10/0x10 [ 1999.654686][T14341] ? lock_vma_under_rcu+0x176/0x580 [ 1999.654712][T14341] ? get_timespec64+0x136/0x1b0 [ 1999.654736][T14341] handle_mm_fault+0x3fe/0xad0 [ 1999.654760][T14341] do_user_addr_fault+0x60c/0x1370 [ 1999.654786][T14341] ? rcu_is_watching+0x12/0xc0 [ 1999.654812][T14341] exc_page_fault+0x64/0xc0 [ 1999.654829][T14341] asm_exc_page_fault+0x26/0x30 [ 1999.654846][T14341] RIP: 0033:0x7fb6dafc2088 [ 1999.654861][T14341] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 1999.654879][T14341] RSP: 002b:00007ffff0fb1770 EFLAGS: 00010293 [ 1999.654893][T14341] RAX: 0000000000000000 RBX: 0000000000000399 RCX: 00007fb6dafc2085 [ 1999.654904][T14341] RDX: 00007ffff0fb17b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1999.654914][T14341] RBP: 00007ffff0fb181c R08: 0000000000000000 R09: 0000000000000000 [ 1999.654925][T14341] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1999.654935][T14341] R13: 00000000000927c0 R14: 00000000001e90a0 R15: 00007ffff0fb1870 [ 1999.654958][T14341] [ 1999.658311][T14341] memory: usage 3072kB, limit 3072kB, failcnt 78946 [ 2001.260138][T14341] memory+swap: usage 5124kB, limit 9007199254740988kB, failcnt 0 [ 2001.313066][T14341] kmem: usage 784kB, limit 9007199254740988kB, failcnt 0 [ 2001.353533][T14341] Memory cgroup stats for /syz0: [ 2001.353649][T14341] cache 0 [ 2001.401087][T14341] rss 2260992 [ 2001.404414][T14341] rss_huge 0 [ 2001.407725][T14341] shmem 0 [ 2001.452714][T14341] mapped_file 0 [ 2001.468453][T14341] dirty 0 [ 2001.478363][T14341] writeback 0 [ 2001.492866][T14341] workingset_refault_anon 18887 [ 2001.506552][T14341] workingset_refault_file 7298 [ 2001.536682][T14341] swap 2101248 [ 2001.541820][T14341] swapcached 118784 [ 2001.550175][T14341] pgpgin 2201457 [ 2001.559446][T14341] pgpgout 2229033 [ 2001.569028][T14341] pgfault 1706556 [ 2001.578506][T14341] pgmajfault 6188 [ 2001.608679][T14341] inactive_anon 0 [ 2001.617648][T14341] active_anon 73728 [ 2001.625704][T14341] inactive_file 0 [ 2001.634920][T14341] active_file 0 [ 2001.654741][T14341] unevictable 2252800 [ 2001.665503][T14341] hierarchical_memory_limit 3145728 [ 2001.692688][T14341] hierarchical_memsw_limit 9223372036854771712 [ 2001.707706][T14341] total_cache 0 [ 2001.715847][T14341] total_rss 2260992 [ 2001.723723][T14341] total_rss_huge 0 [ 2001.742814][T14341] total_shmem 0 [ 2001.753088][T14341] total_mapped_file 0 [ 2001.775003][T14341] total_dirty 0 [ 2001.785353][T14341] total_writeback 0 [ 2001.800742][T14341] total_workingset_refault_anon 18887 [ 2001.810633][T14341] total_workingset_refault_file 7298 [ 2001.823671][T14341] total_swap 2101248 [ 2001.836426][T14341] total_swapcached 118784 [ 2001.877201][T14341] total_pgpgin 2201457 [ 2001.910485][T14341] total_pgpgout 2229033 [ 2001.921404][T14341] total_pgfault 1706556 [ 2001.950277][T14341] total_pgmajfault 6188 [ 2001.958182][T14341] total_inactive_anon 0 [ 2001.967180][T14341] total_active_anon 73728 [ 2001.980443][T14341] total_inactive_file 0 [ 2002.010839][T14341] total_active_file 0 [ 2002.019703][T14341] total_unevictable 2252800 [ 2002.030839][T14341] anon_cost 64 [ 2002.047119][T14341] file_cost 0 [ 2002.060942][T14341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9107,pid=28537,uid=0 [ 2002.112638][T14341] Memory cgroup out of memory: Killed process 28537 (syz.0.9107) total-vm:108444kB, anon-rss:3316kB, file-rss:23024kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 2002.427067][T28706] FAULT_INJECTION: forcing a failure. [ 2002.427067][T28706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2002.486800][T28706] CPU: 0 UID: 0 PID: 28706 Comm: syz.1.9114 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2002.486838][T28706] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2002.486847][T28706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2002.486857][T28706] Call Trace: [ 2002.486864][T28706] [ 2002.486871][T28706] dump_stack_lvl+0x16c/0x1f0 [ 2002.486894][T28706] should_fail_ex+0x512/0x640 [ 2002.486919][T28706] _copy_to_user+0x32/0xd0 [ 2002.486942][T28706] simple_read_from_buffer+0xcb/0x170 [ 2002.486969][T28706] proc_fail_nth_read+0x197/0x240 [ 2002.486987][T28706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2002.487006][T28706] ? rw_verify_area+0xcf/0x6c0 [ 2002.487029][T28706] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2002.487046][T28706] vfs_read+0x1e4/0xcf0 [ 2002.487072][T28706] ? __pfx___mutex_lock+0x10/0x10 [ 2002.487093][T28706] ? __pfx_vfs_read+0x10/0x10 [ 2002.487123][T28706] ? __fget_files+0x20e/0x3c0 [ 2002.487147][T28706] ? jump_label_swap+0x130/0x180 [ 2002.487177][T28706] ksys_read+0x12a/0x250 [ 2002.487201][T28706] ? __pfx_ksys_read+0x10/0x10 [ 2002.487233][T28706] do_syscall_64+0xcd/0xf80 [ 2002.487251][T28706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.487269][T28706] RIP: 0033:0x7f6d1918e1dc [ 2002.487283][T28706] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2002.487301][T28706] RSP: 002b:00007f6d19fb9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2002.487318][T28706] RAX: ffffffffffffffda RBX: 00007f6d193e6090 RCX: 00007f6d1918e1dc [ 2002.487329][T28706] RDX: 000000000000000f RSI: 00007f6d19fb90a0 RDI: 0000000000000003 [ 2002.487339][T28706] RBP: 00007f6d19fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 2002.487349][T28706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2002.487359][T28706] R13: 00007f6d193e6128 R14: 00007f6d193e6090 R15: 00007ffc3bf409d8 [ 2002.487381][T28706] [ 2002.966734][T28716] FAULT_INJECTION: forcing a failure. [ 2002.966734][T28716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2002.980266][T28716] CPU: 0 UID: 0 PID: 28716 Comm: syz.0.9116 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2002.980304][T28716] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2002.980313][T28716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2002.980323][T28716] Call Trace: [ 2002.980330][T28716] [ 2002.980336][T28716] dump_stack_lvl+0x16c/0x1f0 [ 2002.980359][T28716] should_fail_ex+0x512/0x640 [ 2002.980384][T28716] _copy_to_user+0x32/0xd0 [ 2002.980407][T28716] simple_read_from_buffer+0xcb/0x170 [ 2002.980434][T28716] proc_fail_nth_read+0x197/0x240 [ 2002.980483][T28716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2002.980503][T28716] ? rw_verify_area+0xcf/0x6c0 [ 2002.980525][T28716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2002.980542][T28716] vfs_read+0x1e4/0xcf0 [ 2002.980568][T28716] ? __pfx___mutex_lock+0x10/0x10 [ 2002.980589][T28716] ? __pfx_vfs_read+0x10/0x10 [ 2002.980619][T28716] ? __fget_files+0x20e/0x3c0 [ 2002.980651][T28716] ksys_read+0x12a/0x250 [ 2002.980675][T28716] ? __pfx_ksys_read+0x10/0x10 [ 2002.980701][T28716] ? fput+0x70/0xf0 [ 2002.980721][T28716] do_syscall_64+0xcd/0xf80 [ 2002.980740][T28716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.980758][T28716] RIP: 0033:0x7fb6daf8e1dc [ 2002.980773][T28716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2002.980790][T28716] RSP: 002b:00007fb6dbe8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2002.980807][T28716] RAX: ffffffffffffffda RBX: 00007fb6db1e5fa0 RCX: 00007fb6daf8e1dc [ 2002.980819][T28716] RDX: 000000000000000f RSI: 00007fb6dbe8e0a0 RDI: 0000000000000004 [ 2002.980829][T28716] RBP: 00007fb6dbe8e090 R08: 0000000000000000 R09: 0000000000000000 [ 2002.980839][T28716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2002.980849][T28716] R13: 00007fb6db1e6038 R14: 00007fb6db1e5fa0 R15: 00007ffff0fb1458 [ 2002.980871][T28716] [ 2004.096074][T10485] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1380 with max blocks 5 with error 117 [ 2004.140497][T10485] EXT4-fs (sda1): This should not happen!! Data will be lost [ 2004.140497][T10485] [ 2005.734606][T28770] netlink: 330 bytes leftover after parsing attributes in process `syz.0.9120'. [ 2005.777717][T28770] : renamed from ip6tnl0 (while UP) [ 2006.006469][T28813] HfR: entered promiscuous mode [ 2006.033464][T28813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9124'. [ 2006.063485][T28813] HfR: left promiscuous mode [ 2006.101521][T28821] syz_tun: tun_chr_ioctl cmd 1074025681 [ 2006.460544][T28829] HfR: entered promiscuous mode [ 2006.510764][T28829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9127'. [ 2006.560036][T28829] HfR: left promiscuous mode [ 2006.947551][T28849] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006600 pfn:0x78000 [ 2006.980219][ T30] audit: type=1800 audit(6442457959.849:106): pid=28851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9132" name="lu_gp_id" dev="configfs" ino=200787 res=0 errno=0 [ 2007.038719][T28849] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2007.124457][T28849] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2007.191833][T28849] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 2007.240265][T28849] raw: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 2007.298568][T28849] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 2007.361249][T28849] head: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 2007.407694][T28849] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 2007.432882][T28849] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2007.452852][T28849] page dumped because: unmovable page [ 2007.520294][T28849] page_owner tracks the page as allocated [ 2007.565264][T28849] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12985, tgid 12985 (kworker/u11:27), ts 1744620870237, free_ts 1744620798216 [ 2007.706813][T28849] post_alloc_hook+0x1af/0x220 [ 2007.747645][T28873] ovs_ÿþÿþ?: entered promiscuous mode [ 2007.761287][T28849] get_page_from_freelist+0xd0b/0x31a0 [ 2007.811337][T28849] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 2007.920148][T28849] alloc_pages_mpol+0x1fb/0x550 [ 2007.959777][T28849] alloc_pages_noprof+0x131/0x390 [ 2007.972844][T28887] HfR: entered promiscuous mode [ 2007.998173][T28849] skb_page_frag_refill+0x186/0x5c0 [ 2008.005104][T28887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9138'. [ 2008.020049][T28849] try_fill_recv+0x7e4/0x2930 [ 2008.024908][T28849] virtnet_poll+0x1843/0x3c40 [ 2008.040957][T28887] HfR: left promiscuous mode [ 2008.045764][T28849] __napi_poll.constprop.0+0xb3/0x540 [ 2008.057982][T28849] net_rx_action+0x9f9/0xfa0 [ 2008.070035][T28849] handle_softirqs+0x219/0x950 [ 2008.107394][T28849] __irq_exit_rcu+0x109/0x170 [ 2008.126222][T28849] irq_exit_rcu+0x9/0x30 [ 2008.150801][T28849] common_interrupt+0xbf/0xe0 [ 2008.175241][T28849] asm_common_interrupt+0x26/0x40 [ 2008.195140][T28849] page last free pid 12985 tgid 12985 stack trace: [ 2008.219015][T28849] __free_frozen_pages+0x7df/0x1170 [ 2008.251672][T28849] __folio_put+0x329/0x450 [ 2008.266275][T28849] page_to_skb+0xa43/0xbe0 [ 2008.283222][T28849] receive_buf+0x899/0x4770 [ 2008.300099][T28849] virtnet_poll+0x14cc/0x3c40 [ 2008.317207][T28849] __napi_poll.constprop.0+0xb3/0x540 [ 2008.334251][T28849] net_rx_action+0x9f9/0xfa0 [ 2008.356209][T28849] handle_softirqs+0x219/0x950 [ 2008.377483][T28849] __irq_exit_rcu+0x109/0x170 [ 2008.395174][T28849] irq_exit_rcu+0x9/0x30 [ 2008.405243][T28849] common_interrupt+0xbf/0xe0 [ 2008.416724][T28849] asm_common_interrupt+0x26/0x40 [ 2008.778331][T28886] syz.0.9138 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2008.850906][T28886] CPU: 0 UID: 0 PID: 28886 Comm: syz.0.9138 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2008.850944][T28886] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2008.850954][T28886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2008.850964][T28886] Call Trace: [ 2008.850970][T28886] [ 2008.850978][T28886] dump_stack_lvl+0x16c/0x1f0 [ 2008.851001][T28886] dump_header+0x101/0x960 [ 2008.851024][T28886] oom_kill_process+0x176/0x910 [ 2008.851046][T28886] out_of_memory+0x350/0x1700 [ 2008.851077][T28886] ? __lock_acquire+0x436/0x2890 [ 2008.851097][T28886] ? __pfx_out_of_memory+0x10/0x10 [ 2008.851123][T28886] mem_cgroup_out_of_memory+0x118/0x130 [ 2008.851145][T28886] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2008.851172][T28886] ? do_raw_spin_unlock+0x172/0x230 [ 2008.851196][T28886] try_charge_memcg+0x695/0xd30 [ 2008.851229][T28886] ? __pfx_try_charge_memcg+0x10/0x10 [ 2008.851262][T28886] ? find_held_lock+0x2b/0x80 [ 2008.851288][T28886] charge_memcg+0x8a/0x230 [ 2008.851315][T28886] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 2008.851337][T28886] __read_swap_cache_async+0x397/0x500 [ 2008.851363][T28886] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2008.851394][T28886] swap_cluster_readahead+0x432/0x770 [ 2008.851416][T28886] ? find_held_lock+0x2b/0x80 [ 2008.851443][T28886] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2008.851467][T28886] ? __lock_acquire+0x436/0x2890 [ 2008.851493][T28886] ? get_vma_policy+0x242/0x3c0 [ 2008.851512][T28886] swapin_readahead+0x160/0x1220 [ 2008.851542][T28886] ? __pfx_swapin_readahead+0x10/0x10 [ 2008.851565][T28886] ? find_held_lock+0x2b/0x80 [ 2008.851585][T28886] ? swap_cache_get_folio+0x267/0x8e0 [ 2008.851605][T28886] ? swap_cache_get_folio+0x267/0x8e0 [ 2008.851624][T28886] ? swap_cache_get_folio+0x267/0x8e0 [ 2008.851653][T28886] ? swap_cache_get_folio+0x267/0x8e0 [ 2008.851674][T28886] ? swap_cache_get_folio+0x293/0x8e0 [ 2008.851695][T28886] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 2008.851715][T28886] ? __pfx_get_swap_device+0x10/0x10 [ 2008.851740][T28886] ? rcu_read_unlock+0x2d/0xb0 [ 2008.851764][T28886] ? do_swap_page+0x962/0x64a0 [ 2008.851780][T28886] do_swap_page+0x962/0x64a0 [ 2008.851801][T28886] ? __lock_acquire+0x436/0x2890 [ 2008.851823][T28886] ? __pfx_do_swap_page+0x10/0x10 [ 2008.851843][T28886] ? __pfx_default_wake_function+0x10/0x10 [ 2008.851874][T28886] ? rcu_is_watching+0x12/0xc0 [ 2008.851898][T28886] ? ___pte_offset_map+0x175/0x380 [ 2008.851927][T28886] __handle_mm_fault+0x19cb/0x2bb0 [ 2008.851950][T28886] ? reacquire_held_locks+0xcd/0x1f0 [ 2008.851967][T28886] ? __pfx___handle_mm_fault+0x10/0x10 [ 2008.851989][T28886] ? lock_vma_under_rcu+0x176/0x580 [ 2008.852015][T28886] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2008.852050][T28886] handle_mm_fault+0x3fe/0xad0 [ 2008.852074][T28886] do_user_addr_fault+0x60c/0x1370 [ 2008.852098][T28886] ? rcu_is_watching+0x12/0xc0 [ 2008.852124][T28886] exc_page_fault+0x64/0xc0 [ 2008.852142][T28886] asm_exc_page_fault+0x26/0x30 [ 2008.852158][T28886] RIP: 0033:0x7fb6dae4d750 [ 2008.852173][T28886] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 2008.852189][T28886] RSP: 002b:00007ffff0fb1488 EFLAGS: 00010246 [ 2008.852205][T28886] RAX: 00000000893a1f7f RBX: 00007fb6dbd15720 RCX: ffffffff893a1f7f [ 2008.852216][T28886] RDX: 0000000000001f7f RSI: ffffffff893a1f7f RDI: 000000000000000c [ 2008.852226][T28886] RBP: ffffffff893a1f7f R08: 00007fb6db1d0000 R09: 00007fb6db1d2000 [ 2008.852236][T28886] R10: 00000000893a1f83 R11: 000000000000000c R12: 000000000000000c [ 2008.852246][T28886] R13: 0000000000000016 R14: ffffffff893a1d14 R15: 0000000000000016 [ 2008.852257][T28886] ? ___sys_sendmsg+0x94/0x1d0 [ 2008.852282][T28886] ? ___sys_recvmsg+0x11f/0x1a0 [ 2008.852308][T28886] ? ___sys_recvmsg+0x11f/0x1a0 [ 2008.852331][T28886] ? ___sys_recvmsg+0x11f/0x1a0 [ 2008.852358][T28886] [ 2009.299289][T28886] memory: usage 3072kB, limit 3072kB, failcnt 80938 [ 2009.306140][T28886] memory+swap: usage 5216kB, limit 9007199254740988kB, failcnt 0 [ 2009.314047][T28886] kmem: usage 892kB, limit 9007199254740988kB, failcnt 0 [ 2009.321253][T28886] Memory cgroup stats for /syz0: [ 2009.321360][T28886] cache 0 [ 2009.329324][T28886] rss 2166784 [ 2009.333948][T28886] rss_huge 0 [ 2009.337260][T28886] shmem 0 [ 2009.340276][T28886] mapped_file 0 [ 2009.343756][T28886] dirty 0 [ 2009.346682][T28886] writeback 0 [ 2009.349990][T28886] workingset_refault_anon 19040 [ 2009.354930][T28886] workingset_refault_file 7327 [ 2009.359739][T28886] swap 2195456 [ 2009.363120][T28886] swapcached 114688 [ 2009.367060][T28886] pgpgin 2205720 [ 2009.370712][T28886] pgpgout 2233319 [ 2009.374426][T28886] pgfault 1711102 [ 2009.378146][T28886] pgmajfault 6245 [ 2009.381772][T28886] inactive_anon 94208 [ 2009.385785][T28886] active_anon 16384 [ 2009.389702][T28886] inactive_file 0 [ 2009.393512][T28886] active_file 0 [ 2009.396980][T28886] unevictable 2121728 [ 2009.401203][T28886] hierarchical_memory_limit 3145728 [ 2009.406698][T28886] hierarchical_memsw_limit 9223372036854771712 [ 2009.413056][T28886] total_cache 0 [ 2009.416606][T28886] total_rss 2166784 [ 2009.420413][T28886] total_rss_huge 0 [ 2009.424288][T28886] total_shmem 0 [ 2009.427740][T28886] total_mapped_file 0 [ 2009.431713][T28886] total_dirty 0 [ 2009.436013][T28886] total_writeback 0 [ 2009.440170][T28886] total_workingset_refault_anon 19040 [ 2009.446272][T28886] total_workingset_refault_file 7327 [ 2009.451571][T28886] total_swap 2195456 [ 2009.455527][T28886] total_swapcached 114688 [ 2009.459995][T28886] total_pgpgin 2205720 [ 2009.464095][T28886] total_pgpgout 2233319 [ 2009.468266][T28886] total_pgfault 1711102 [ 2009.472611][T28886] total_pgmajfault 6245 [ 2009.476892][T28886] total_inactive_anon 94208 [ 2009.481388][T28886] total_active_anon 16384 [ 2009.485852][T28886] total_inactive_file 0 [ 2009.490005][T28886] total_active_file 0 [ 2009.494043][T28886] total_unevictable 2121728 [ 2009.498597][T28886] anon_cost 220 [ 2009.502049][T28886] file_cost 0 [ 2009.505365][T28886] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9138,pid=28886,uid=0 [ 2009.520584][T28886] Memory cgroup out of memory: Killed process 28886 (syz.0.9138) total-vm:106396kB, anon-rss:3188kB, file-rss:22972kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 2009.584246][T28916] syz_tun: tun_chr_ioctl cmd 1074025688 [ 2010.088793][T28922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9145'. [ 2010.152212][T14341] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2010.244865][T14341] CPU: 0 UID: 0 PID: 14341 Comm: syz-executor Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2010.244904][T14341] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2010.244913][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2010.244922][T14341] Call Trace: [ 2010.244929][T14341] [ 2010.244936][T14341] dump_stack_lvl+0x16c/0x1f0 [ 2010.244959][T14341] dump_header+0x101/0x960 [ 2010.244982][T14341] oom_kill_process+0x176/0x910 [ 2010.245004][T14341] out_of_memory+0x350/0x1700 [ 2010.245024][T14341] ? __lock_acquire+0x436/0x2890 [ 2010.245044][T14341] ? __pfx_out_of_memory+0x10/0x10 [ 2010.245069][T14341] mem_cgroup_out_of_memory+0x118/0x130 [ 2010.245092][T14341] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2010.245118][T14341] ? do_raw_spin_unlock+0x172/0x230 [ 2010.245143][T14341] try_charge_memcg+0x695/0xd30 [ 2010.245175][T14341] ? __pfx_try_charge_memcg+0x10/0x10 [ 2010.245207][T14341] ? find_held_lock+0x2b/0x80 [ 2010.245233][T14341] charge_memcg+0x8a/0x230 [ 2010.245260][T14341] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 2010.245282][T14341] __read_swap_cache_async+0x397/0x500 [ 2010.245308][T14341] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2010.245339][T14341] swap_cluster_readahead+0x432/0x770 [ 2010.245367][T14341] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2010.245391][T14341] ? __lock_acquire+0x436/0x2890 [ 2010.245417][T14341] ? get_vma_policy+0x242/0x3c0 [ 2010.245436][T14341] swapin_readahead+0x160/0x1220 [ 2010.245466][T14341] ? __pfx_swapin_readahead+0x10/0x10 [ 2010.245489][T14341] ? find_held_lock+0x2b/0x80 [ 2010.245510][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 2010.245530][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 2010.245549][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 2010.245571][T14341] ? swap_cache_get_folio+0x267/0x8e0 [ 2010.245591][T14341] ? swap_cache_get_folio+0x293/0x8e0 [ 2010.245612][T14341] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 2010.245632][T14341] ? __pfx_get_swap_device+0x10/0x10 [ 2010.245657][T14341] ? rcu_read_unlock+0x2d/0xb0 [ 2010.245681][T14341] ? do_swap_page+0x962/0x64a0 [ 2010.245706][T14341] do_swap_page+0x962/0x64a0 [ 2010.245727][T14341] ? __lock_acquire+0x436/0x2890 [ 2010.245749][T14341] ? __pfx_do_swap_page+0x10/0x10 [ 2010.245770][T14341] ? __pfx_default_wake_function+0x10/0x10 [ 2010.245796][T14341] ? rcu_is_watching+0x12/0xc0 [ 2010.245820][T14341] ? __free_object+0x286/0x410 [ 2010.245849][T14341] ? rcu_is_watching+0x12/0xc0 [ 2010.245873][T14341] ? ___pte_offset_map+0x175/0x380 [ 2010.245901][T14341] __handle_mm_fault+0x19cb/0x2bb0 [ 2010.245924][T14341] ? reacquire_held_locks+0xcd/0x1f0 [ 2010.245941][T14341] ? __pfx___handle_mm_fault+0x10/0x10 [ 2010.245963][T14341] ? lock_vma_under_rcu+0x176/0x580 [ 2010.245989][T14341] ? get_timespec64+0x136/0x1b0 [ 2010.246012][T14341] handle_mm_fault+0x3fe/0xad0 [ 2010.246035][T14341] do_user_addr_fault+0x60c/0x1370 [ 2010.246059][T14341] ? rcu_is_watching+0x12/0xc0 [ 2010.246085][T14341] exc_page_fault+0x64/0xc0 [ 2010.246103][T14341] asm_exc_page_fault+0x26/0x30 [ 2010.246120][T14341] RIP: 0033:0x7fb6dafc2088 [ 2010.246135][T14341] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 2010.246152][T14341] RSP: 002b:00007ffff0fb1770 EFLAGS: 00010293 [ 2010.246167][T14341] RAX: 0000000000000000 RBX: 00000000000003b8 RCX: 00007fb6dafc2085 [ 2010.246178][T14341] RDX: 00007ffff0fb17b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2010.246188][T14341] RBP: 00007ffff0fb181c R08: 0000000000000000 R09: 0000000000000000 [ 2010.246198][T14341] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 2010.246208][T14341] R13: 00000000000927c0 R14: 00000000001ebbd2 R15: 00007ffff0fb1870 [ 2010.246231][T14341] [ 2010.246238][T14341] memory: usage 3072kB, limit 3072kB, failcnt 81709 [ 2010.649860][T28922] FAULT_INJECTION: forcing a failure. [ 2010.649860][T28922] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2010.737326][T28922] CPU: 0 UID: 0 PID: 28922 Comm: syz.2.9145 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2010.737365][T28922] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2010.737375][T28922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2010.737385][T28922] Call Trace: [ 2010.737392][T28922] [ 2010.737406][T28922] dump_stack_lvl+0x16c/0x1f0 [ 2010.737429][T28922] should_fail_ex+0x512/0x640 [ 2010.737454][T28922] get_futex_key+0x1d0/0x15f0 [ 2010.737477][T28922] ? __pfx_get_futex_key+0x10/0x10 [ 2010.737502][T28922] futex_wait_setup+0x9d/0x570 [ 2010.737533][T28922] __futex_wait+0x193/0x2f0 [ 2010.737558][T28922] ? __pfx___futex_wait+0x10/0x10 [ 2010.737581][T28922] ? rcu_is_watching+0x12/0xc0 [ 2010.737608][T28922] ? __pfx_futex_wake_mark+0x10/0x10 [ 2010.737634][T28922] ? futex_hash+0x2c5/0x380 [ 2010.737655][T28922] ? futex_private_hash_put+0x160/0x1b0 [ 2010.737675][T28922] futex_wait+0xe8/0x380 [ 2010.737698][T28922] ? __pfx_futex_wait+0x10/0x10 [ 2010.737733][T28922] do_futex+0x229/0x350 [ 2010.737753][T28922] ? __pfx_do_futex+0x10/0x10 [ 2010.737771][T28922] ? map_id_range_up+0x2ce/0x3b0 [ 2010.737811][T28922] __x64_sys_futex+0x1e0/0x4c0 [ 2010.737833][T28922] ? __pfx___x64_sys_futex+0x10/0x10 [ 2010.737852][T28922] ? from_kuid_munged+0xaa/0x130 [ 2010.737877][T28922] ? __pfx_from_kuid_munged+0x10/0x10 [ 2010.737908][T28922] do_syscall_64+0xcd/0xf80 [ 2010.737927][T28922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2010.737944][T28922] RIP: 0033:0x7fa906f8f7c9 [ 2010.737959][T28922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2010.737976][T28922] RSP: 002b:00007fa907ee50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2010.737993][T28922] RAX: ffffffffffffffda RBX: 00007fa9071e6098 RCX: 00007fa906f8f7c9 [ 2010.738004][T28922] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa9071e6098 [ 2010.738014][T28922] RBP: 00007fa9071e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2010.738023][T28922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2010.738033][T28922] R13: 00007fa9071e6128 R14: 00007ffc70b982f0 R15: 00007ffc70b983d8 [ 2010.738055][T28922] [ 2011.155831][T28921] i2c i2c-0: new_device: Invalid device name [ 2011.353666][T14341] memory+swap: usage 5180kB, limit 9007199254740988kB, failcnt 0 [ 2011.377091][T14341] kmem: usage 860kB, limit 9007199254740988kB, failcnt 0 [ 2011.398749][T14341] Memory cgroup stats for /syz0: [ 2011.398869][T14341] cache 0 [ 2011.425589][T14341] rss 2224128 [ 2011.440728][T14341] rss_huge 0 [ 2011.451155][T14341] shmem 0 [ 2011.466166][T14341] mapped_file 0 [ 2011.480419][T14341] dirty 0 [ 2011.490198][T14341] writeback 0 [ 2011.510097][T14341] workingset_refault_anon 19632 [ 2011.536141][T14341] workingset_refault_file 7327 [ 2011.551157][T14341] swap 2158592 [ 2011.566679][T14341] swapcached 139264 [ 2011.597243][T14341] pgpgin 2207376 [ 2011.600858][T14341] pgpgout 2234968 [ 2011.649467][T14341] pgfault 1712847 [ 2011.661803][T14341] pgmajfault 6359 [ 2011.691821][T14341] inactive_anon 0 [ 2011.706202][T14341] active_anon 0 [ 2011.726937][T14341] inactive_file 0 [ 2011.753671][T14341] active_file 0 [ 2011.757190][T14341] unevictable 2215936 [ 2011.761190][T14341] hierarchical_memory_limit 3145728 [ 2011.810029][T14341] hierarchical_memsw_limit 9223372036854771712 [ 2011.840072][T14341] total_cache 0 [ 2011.859343][T14341] total_rss 2224128 [ 2011.896271][T14341] total_rss_huge 0 [ 2011.914071][T28944] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input120 [ 2011.941595][T14341] total_shmem 0 [ 2011.945264][T14341] total_mapped_file 0 [ 2011.949251][T14341] total_dirty 0 [ 2011.961633][T28939] page: refcount:22 mapcount:0 mapping:0000000000000000 index:0xffff888078006600 pfn:0x78000 [ 2011.990667][T14341] total_writeback 0 [ 2012.013897][T28939] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2012.024552][T14341] total_workingset_refault_anon 19632 [ 2012.030051][T14341] total_workingset_refault_file 7327 [ 2012.069700][T28939] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2012.084953][T14341] total_swap 2158592 [ 2012.111301][T14341] total_swapcached 139264 [ 2012.116016][T14341] total_pgpgin 2207376 [ 2012.120083][T14341] total_pgpgout 2234968 [ 2012.135183][T28939] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 2012.211979][T28939] raw: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 2012.230644][T14341] total_pgfault 1712847 [ 2012.245347][T14341] total_pgmajfault 6359 [ 2012.249714][T14341] total_inactive_anon 0 [ 2012.256765][T28939] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 2012.289388][T14341] total_active_anon 0 [ 2012.312619][T14341] total_inactive_file 0 [ 2012.327875][T28939] head: ffff888078006600 0000000000000000 00000016ffffffff 0000000000000000 [ 2012.355395][T14341] total_active_file 0 [ 2012.360244][T14341] total_unevictable 2215936 [ 2012.364788][T14341] anon_cost 75 [ 2012.368253][T14341] file_cost 0 [ 2012.412503][T14341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9144,pid=28917,uid=0 [ 2012.432063][T28939] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 2012.475280][T28939] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2012.494398][T14341] Memory cgroup out of memory: Killed process 28917 (syz.0.9144) total-vm:106396kB, anon-rss:3316kB, file-rss:22964kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 2012.633172][T28939] page dumped because: unmovable page [ 2012.706735][T28939] page_owner tracks the page as allocated [ 2012.952393][T28939] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12985, tgid 12985 (kworker/u11:27), ts 1744620870237, free_ts 1744620798216 [ 2013.096544][T28939] post_alloc_hook+0x1af/0x220 [ 2013.131401][T28939] get_page_from_freelist+0xd0b/0x31a0 [ 2013.141471][T28939] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 2013.166691][T28939] alloc_pages_mpol+0x1fb/0x550 [ 2013.183278][T28939] alloc_pages_noprof+0x131/0x390 [ 2013.201726][T28939] skb_page_frag_refill+0x186/0x5c0 [ 2013.226011][T28939] try_fill_recv+0x7e4/0x2930 [ 2013.243621][T28939] virtnet_poll+0x1843/0x3c40 [ 2013.260768][T28939] __napi_poll.constprop.0+0xb3/0x540 [ 2013.282442][T28939] net_rx_action+0x9f9/0xfa0 [ 2013.298269][T28939] handle_softirqs+0x219/0x950 [ 2013.319098][T28939] __irq_exit_rcu+0x109/0x170 [ 2013.337919][T28939] irq_exit_rcu+0x9/0x30 [ 2013.353188][T28939] common_interrupt+0xbf/0xe0 [ 2013.370789][T28939] asm_common_interrupt+0x26/0x40 [ 2013.390121][T28939] page last free pid 12985 tgid 12985 stack trace: [ 2013.416590][T28939] __free_frozen_pages+0x7df/0x1170 [ 2013.433029][T28939] __folio_put+0x329/0x450 [ 2013.453684][T28939] page_to_skb+0xa43/0xbe0 [ 2013.473090][T28939] receive_buf+0x899/0x4770 [ 2013.488157][T28939] virtnet_poll+0x14cc/0x3c40 [ 2013.505038][T28939] __napi_poll.constprop.0+0xb3/0x540 [ 2013.527322][T28939] net_rx_action+0x9f9/0xfa0 [ 2013.543426][T28939] handle_softirqs+0x219/0x950 [ 2013.564555][T28939] __irq_exit_rcu+0x109/0x170 [ 2013.581675][T28939] irq_exit_rcu+0x9/0x30 [ 2013.597120][T28939] common_interrupt+0xbf/0xe0 [ 2013.617680][T28939] asm_common_interrupt+0x26/0x40 [ 2013.916759][T29028] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9157'. [ 2014.262427][T29037] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2014.308178][T29037] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2015.642163][T27912] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 2015.925307][T29102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input121 [ 2017.061158][T29140] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2018.123627][T29170] syz_tun: tun_chr_ioctl cmd 1074025678 [ 2018.169030][T29170] syz_tun: group set to 23693 [ 2018.896917][T27912] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 2020.251361][T29246] futex_wake_op: syz.2.9191 tries to shift op by -2048; fix this program [ 2020.309597][T29246] futex_wake_op: syz.2.9191 tries to shift op by -2048; fix this program [ 2020.354151][T29244] 0x000000000001-0x000000020000 : "" [ 2020.417228][T29244] ftl_cs: FTL header corrupt! [ 2021.188141][T27912] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2021.513834][T29325] FAULT_INJECTION: forcing a failure. [ 2021.513834][T29325] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.555533][T29325] CPU: 0 UID: 0 PID: 29325 Comm: syz.0.9194 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2021.555572][T29325] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2021.555581][T29325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2021.555591][T29325] Call Trace: [ 2021.555599][T29325] [ 2021.555606][T29325] dump_stack_lvl+0x16c/0x1f0 [ 2021.555629][T29325] should_fail_ex+0x512/0x640 [ 2021.555650][T29325] ? kmem_cache_alloc_noprof+0x62/0x770 [ 2021.555675][T29325] should_failslab+0xc2/0x120 [ 2021.555703][T29325] kmem_cache_alloc_noprof+0x83/0x770 [ 2021.555724][T29325] ? __kernfs_new_node+0xd2/0x9b0 [ 2021.555751][T29325] ? __kernfs_new_node+0xd2/0x9b0 [ 2021.555769][T29325] __kernfs_new_node+0xd2/0x9b0 [ 2021.555793][T29325] ? __pfx___kernfs_new_node+0x10/0x10 [ 2021.555819][T29325] ? find_held_lock+0x2b/0x80 [ 2021.555842][T29325] ? kernfs_root+0xee/0x2a0 [ 2021.555866][T29325] kernfs_new_node+0x13c/0x1e0 [ 2021.555894][T29325] __kernfs_create_file+0x53/0x350 [ 2021.555912][T29325] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2021.555937][T29325] sysfs_merge_group+0x1aa/0x340 [ 2021.555959][T29325] ? __pfx_sysfs_merge_group+0x10/0x10 [ 2021.555984][T29325] ? __pfx_dev_add_physical_location+0x10/0x10 [ 2021.556010][T29325] ? bus_to_subsys+0x131/0x160 [ 2021.556030][T29325] dpm_sysfs_add+0x237/0x280 [ 2021.556056][T29325] device_add+0x9cc/0x1980 [ 2021.556084][T29325] ? __pfx_device_add+0x10/0x10 [ 2021.556109][T29325] ? lockdep_init_map_type+0x5c/0x270 [ 2021.556127][T29325] ? __init_waitqueue_head+0xca/0x150 [ 2021.556153][T29325] rfkill_register+0x1ad/0xb40 [ 2021.556179][T29325] nfc_register_device+0x11f/0x410 [ 2021.556209][T29325] nci_register_device+0x7f1/0xb80 [ 2021.556232][T29325] ? __pfx_nci_register_device+0x10/0x10 [ 2021.556264][T29325] ? lockdep_init_map_type+0x5c/0x270 [ 2021.556293][T29325] virtual_ncidev_open+0x141/0x220 [ 2021.556312][T29325] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2021.556330][T29325] misc_open+0x26d/0x450 [ 2021.556352][T29325] ? __pfx_misc_open+0x10/0x10 [ 2021.556373][T29325] chrdev_open+0x234/0x6a0 [ 2021.556389][T29325] ? __pfx_apparmor_file_open+0x10/0x10 [ 2021.556408][T29325] ? __pfx_chrdev_open+0x10/0x10 [ 2021.556436][T29325] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2021.556468][T29325] do_dentry_open+0x748/0x1590 [ 2021.556493][T29325] ? __pfx_chrdev_open+0x10/0x10 [ 2021.556525][T29325] vfs_open+0x82/0x3f0 [ 2021.556547][T29325] path_openat+0x2078/0x3140 [ 2021.556580][T29325] ? __pfx_path_openat+0x10/0x10 [ 2021.556616][T29325] do_filp_open+0x20b/0x470 [ 2021.556643][T29325] ? __pfx_do_filp_open+0x10/0x10 [ 2021.556686][T29325] ? alloc_fd+0x471/0x7d0 [ 2021.556718][T29325] do_sys_openat2+0x121/0x290 [ 2021.556737][T29325] ? __pfx_do_sys_openat2+0x10/0x10 [ 2021.556767][T29325] __x64_sys_openat+0x174/0x210 [ 2021.556787][T29325] ? __pfx___x64_sys_openat+0x10/0x10 [ 2021.556816][T29325] do_syscall_64+0xcd/0xf80 [ 2021.556845][T29325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.556863][T29325] RIP: 0033:0x7fb6daf8f7c9 [ 2021.556879][T29325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2021.556896][T29325] RSP: 002b:00007fb6dbe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2021.556914][T29325] RAX: ffffffffffffffda RBX: 00007fb6db1e5fa0 RCX: 00007fb6daf8f7c9 [ 2021.556926][T29325] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2021.556937][T29325] RBP: 00007fb6db013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2021.556946][T29325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2021.556956][T29325] R13: 00007fb6db1e6038 R14: 00007fb6db1e5fa0 R15: 00007ffff0fb1458 [ 2021.556980][T29325] [ 2022.821347][T29345] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122 [ 2024.057756][T29411] HfR: entered promiscuous mode [ 2024.098300][T29411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9201'. [ 2024.155434][T29411] HfR: left promiscuous mode [ 2024.698717][T18085] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1374 with max blocks 11 with error 117 [ 2024.764797][T18085] EXT4-fs (sda1): This should not happen!! Data will be lost [ 2024.764797][T18085] [ 2025.196132][T29438] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123 [ 2025.254117][T29439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9208'. [ 2025.389478][T29439] FAULT_INJECTION: forcing a failure. [ 2025.389478][T29439] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2025.520984][T27912] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 2025.598556][T29439] CPU: 0 UID: 0 PID: 29439 Comm: syz.1.9208 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2025.598601][T29439] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2025.598611][T29439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2025.598622][T29439] Call Trace: [ 2025.598628][T29439] [ 2025.598635][T29439] dump_stack_lvl+0x16c/0x1f0 [ 2025.598658][T29439] should_fail_ex+0x512/0x640 [ 2025.598680][T29439] ? __pfx___might_resched+0x10/0x10 [ 2025.598707][T29439] get_futex_key+0x1d0/0x15f0 [ 2025.598730][T29439] ? __pfx_get_futex_key+0x10/0x10 [ 2025.598752][T29439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2025.598783][T29439] futex_wait_setup+0x9d/0x570 [ 2025.598814][T29439] __futex_wait+0x193/0x2f0 [ 2025.598839][T29439] ? __pfx___futex_wait+0x10/0x10 [ 2025.598862][T29439] ? rcu_is_watching+0x12/0xc0 [ 2025.598888][T29439] ? __pfx_futex_wake_mark+0x10/0x10 [ 2025.598914][T29439] ? futex_hash+0x2c5/0x380 [ 2025.598934][T29439] ? futex_private_hash_put+0x160/0x1b0 [ 2025.598954][T29439] futex_wait+0xe8/0x380 [ 2025.598977][T29439] ? __pfx_futex_wait+0x10/0x10 [ 2025.599012][T29439] do_futex+0x229/0x350 [ 2025.599032][T29439] ? __pfx_do_futex+0x10/0x10 [ 2025.599051][T29439] ? fput+0x70/0xf0 [ 2025.599069][T29439] ? __sys_sendmsg+0x18c/0x220 [ 2025.599095][T29439] __x64_sys_futex+0x1e0/0x4c0 [ 2025.599118][T29439] ? __pfx___x64_sys_futex+0x10/0x10 [ 2025.599138][T29439] ? xfd_validate_state+0x61/0x180 [ 2025.599161][T29439] do_syscall_64+0xcd/0xf80 [ 2025.599180][T29439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2025.599197][T29439] RIP: 0033:0x7f6d1918f7c9 [ 2025.599212][T29439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2025.599228][T29439] RSP: 002b:00007f6d19fb90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2025.599245][T29439] RAX: ffffffffffffffda RBX: 00007f6d193e6098 RCX: 00007f6d1918f7c9 [ 2025.599266][T29439] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6d193e6098 [ 2025.599276][T29439] RBP: 00007f6d193e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2025.599286][T29439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2025.599295][T29439] R13: 00007f6d193e6128 R14: 00007ffc3bf408f0 R15: 00007ffc3bf409d8 [ 2025.599317][T29439] [ 2026.088705][T29451] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 2026.179780][T29439] i2c i2c-0: new_device: Invalid device name [ 2027.930348][T29563] FAULT_INJECTION: forcing a failure. [ 2027.930348][T29563] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.956484][T27912] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2027.990434][T29563] CPU: 0 UID: 0 PID: 29563 Comm: syz.1.9216 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2027.990472][T29563] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2027.990482][T29563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2027.990492][T29563] Call Trace: [ 2027.990509][T29563] [ 2027.990517][T29563] dump_stack_lvl+0x16c/0x1f0 [ 2027.990540][T29563] should_fail_ex+0x512/0x640 [ 2027.990561][T29563] ? kmem_cache_alloc_noprof+0x62/0x770 [ 2027.990586][T29563] should_failslab+0xc2/0x120 [ 2027.990613][T29563] kmem_cache_alloc_noprof+0x83/0x770 [ 2027.990635][T29563] ? __kernfs_new_node+0xd2/0x9b0 [ 2027.990661][T29563] ? __kernfs_new_node+0xd2/0x9b0 [ 2027.990679][T29563] __kernfs_new_node+0xd2/0x9b0 [ 2027.990702][T29563] ? __pfx___kernfs_new_node+0x10/0x10 [ 2027.990729][T29563] ? find_held_lock+0x2b/0x80 [ 2027.990752][T29563] ? kernfs_root+0xee/0x2a0 [ 2027.990777][T29563] kernfs_new_node+0x13c/0x1e0 [ 2027.990804][T29563] __kernfs_create_file+0x53/0x350 [ 2027.990822][T29563] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2027.990847][T29563] sysfs_merge_group+0x1aa/0x340 [ 2027.990869][T29563] ? __pfx_sysfs_merge_group+0x10/0x10 [ 2027.990893][T29563] ? __pfx_dev_add_physical_location+0x10/0x10 [ 2027.990919][T29563] ? bus_to_subsys+0x131/0x160 [ 2027.990939][T29563] dpm_sysfs_add+0x237/0x280 [ 2027.990964][T29563] device_add+0x9cc/0x1980 [ 2027.990992][T29563] ? __pfx_device_add+0x10/0x10 [ 2027.991017][T29563] ? lockdep_init_map_type+0x5c/0x270 [ 2027.991035][T29563] ? __init_waitqueue_head+0xca/0x150 [ 2027.991061][T29563] rfkill_register+0x1ad/0xb40 [ 2027.991086][T29563] nfc_register_device+0x11f/0x410 [ 2027.991116][T29563] nci_register_device+0x7f1/0xb80 [ 2027.991140][T29563] ? __pfx_nci_register_device+0x10/0x10 [ 2027.991166][T29563] ? lockdep_init_map_type+0x5c/0x270 [ 2027.991187][T29563] virtual_ncidev_open+0x141/0x220 [ 2027.991206][T29563] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2027.991224][T29563] misc_open+0x26d/0x450 [ 2027.991246][T29563] ? __pfx_misc_open+0x10/0x10 [ 2027.991266][T29563] chrdev_open+0x234/0x6a0 [ 2027.991282][T29563] ? __pfx_apparmor_file_open+0x10/0x10 [ 2027.991301][T29563] ? __pfx_chrdev_open+0x10/0x10 [ 2027.991329][T29563] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2027.991360][T29563] do_dentry_open+0x748/0x1590 [ 2027.991385][T29563] ? __pfx_chrdev_open+0x10/0x10 [ 2027.991417][T29563] vfs_open+0x82/0x3f0 [ 2027.991439][T29563] path_openat+0x2078/0x3140 [ 2027.991473][T29563] ? __pfx_path_openat+0x10/0x10 [ 2027.991514][T29563] do_filp_open+0x20b/0x470 [ 2027.991541][T29563] ? __pfx_do_filp_open+0x10/0x10 [ 2027.991584][T29563] ? alloc_fd+0x471/0x7d0 [ 2027.991617][T29563] do_sys_openat2+0x121/0x290 [ 2027.991639][T29563] ? __pfx_do_sys_openat2+0x10/0x10 [ 2027.991667][T29563] __x64_sys_openat+0x174/0x210 [ 2027.991687][T29563] ? __pfx___x64_sys_openat+0x10/0x10 [ 2027.991715][T29563] do_syscall_64+0xcd/0xf80 [ 2027.991734][T29563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.991752][T29563] RIP: 0033:0x7f6d1918f7c9 [ 2027.991767][T29563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2027.991785][T29563] RSP: 002b:00007f6d19fda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2027.991801][T29563] RAX: ffffffffffffffda RBX: 00007f6d193e5fa0 RCX: 00007f6d1918f7c9 [ 2027.991812][T29563] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2027.991822][T29563] RBP: 00007f6d19213f91 R08: 0000000000000000 R09: 0000000000000000 [ 2027.991832][T29563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2027.991842][T29563] R13: 00007f6d193e6038 R14: 00007f6d193e5fa0 R15: 00007ffc3bf409d8 [ 2027.991864][T29563] [ 2028.697828][T29604] HfR: entered promiscuous mode [ 2028.705969][T29604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9219'. [ 2028.715443][T29604] HfR: left promiscuous mode [ 2029.615414][T29644] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2029.670467][T29644] netlink: 342 bytes leftover after parsing attributes in process `syz.0.9224'. [ 2029.712827][T27912] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 2029.733259][T29644] netlink: 342 bytes leftover after parsing attributes in process `syz.0.9224'. [ 2029.767134][T29647] FAULT_INJECTION: forcing a failure. [ 2029.767134][T29647] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.844233][T29647] CPU: 0 UID: 0 PID: 29647 Comm: syz.2.9227 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2029.844273][T29647] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2029.844283][T29647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2029.844293][T29647] Call Trace: [ 2029.844299][T29647] [ 2029.844306][T29647] dump_stack_lvl+0x16c/0x1f0 [ 2029.844330][T29647] should_fail_ex+0x512/0x640 [ 2029.844352][T29647] ? kmem_cache_alloc_noprof+0x62/0x770 [ 2029.844376][T29647] should_failslab+0xc2/0x120 [ 2029.844404][T29647] kmem_cache_alloc_noprof+0x83/0x770 [ 2029.844425][T29647] ? __kernfs_new_node+0xd2/0x9b0 [ 2029.844450][T29647] ? __kernfs_new_node+0xd2/0x9b0 [ 2029.844468][T29647] __kernfs_new_node+0xd2/0x9b0 [ 2029.844491][T29647] ? __pfx___kernfs_new_node+0x10/0x10 [ 2029.844527][T29647] ? find_held_lock+0x2b/0x80 [ 2029.844551][T29647] ? kernfs_root+0xee/0x2a0 [ 2029.844575][T29647] kernfs_new_node+0x13c/0x1e0 [ 2029.844603][T29647] __kernfs_create_file+0x53/0x350 [ 2029.844623][T29647] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2029.844649][T29647] sysfs_merge_group+0x1aa/0x340 [ 2029.844671][T29647] ? __pfx_sysfs_merge_group+0x10/0x10 [ 2029.844696][T29647] ? __pfx_dev_add_physical_location+0x10/0x10 [ 2029.844723][T29647] ? bus_to_subsys+0x131/0x160 [ 2029.844743][T29647] dpm_sysfs_add+0x237/0x280 [ 2029.844768][T29647] device_add+0x9cc/0x1980 [ 2029.844796][T29647] ? __pfx_device_add+0x10/0x10 [ 2029.844821][T29647] ? lockdep_init_map_type+0x5c/0x270 [ 2029.844839][T29647] ? __init_waitqueue_head+0xca/0x150 [ 2029.844864][T29647] rfkill_register+0x1ad/0xb40 [ 2029.844890][T29647] nfc_register_device+0x11f/0x410 [ 2029.844920][T29647] nci_register_device+0x7f1/0xb80 [ 2029.844944][T29647] ? __pfx_nci_register_device+0x10/0x10 [ 2029.844970][T29647] ? lockdep_init_map_type+0x5c/0x270 [ 2029.844991][T29647] virtual_ncidev_open+0x141/0x220 [ 2029.845010][T29647] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2029.845027][T29647] misc_open+0x26d/0x450 [ 2029.845049][T29647] ? __pfx_misc_open+0x10/0x10 [ 2029.845069][T29647] chrdev_open+0x234/0x6a0 [ 2029.845084][T29647] ? __pfx_apparmor_file_open+0x10/0x10 [ 2029.845104][T29647] ? __pfx_chrdev_open+0x10/0x10 [ 2029.845131][T29647] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2029.845163][T29647] do_dentry_open+0x748/0x1590 [ 2029.845187][T29647] ? __pfx_chrdev_open+0x10/0x10 [ 2029.845218][T29647] vfs_open+0x82/0x3f0 [ 2029.845240][T29647] path_openat+0x2078/0x3140 [ 2029.845272][T29647] ? __pfx_path_openat+0x10/0x10 [ 2029.845306][T29647] do_filp_open+0x20b/0x470 [ 2029.845332][T29647] ? __pfx_do_filp_open+0x10/0x10 [ 2029.845373][T29647] ? alloc_fd+0x471/0x7d0 [ 2029.845405][T29647] do_sys_openat2+0x121/0x290 [ 2029.845424][T29647] ? __pfx_do_sys_openat2+0x10/0x10 [ 2029.845452][T29647] __x64_sys_openat+0x174/0x210 [ 2029.845472][T29647] ? __pfx___x64_sys_openat+0x10/0x10 [ 2029.845508][T29647] do_syscall_64+0xcd/0xf80 [ 2029.845527][T29647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2029.845545][T29647] RIP: 0033:0x7fa906f8f7c9 [ 2029.845560][T29647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2029.845578][T29647] RSP: 002b:00007fa907f06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2029.845596][T29647] RAX: ffffffffffffffda RBX: 00007fa9071e5fa0 RCX: 00007fa906f8f7c9 [ 2029.845606][T29647] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2029.845616][T29647] RBP: 00007fa907013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2029.845626][T29647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2029.845636][T29647] R13: 00007fa9071e6038 R14: 00007fa9071e5fa0 R15: 00007ffc70b983d8 [ 2029.845658][T29647] [ 2030.217131][T29655] futex_wake_op: syz.1.9226 tries to shift op by -2048; fix this program [ 2030.227440][T29655] futex_wake_op: syz.1.9226 tries to shift op by -2048; fix this program [ 2030.238206][T29655] 0x000000000001-0x000000020000 : "" [ 2030.336368][T29655] ftl_cs: FTL header corrupt! [ 2030.942388][T29721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9231'. [ 2031.494481][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9234'. [ 2032.646229][T29792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9242'. [ 2034.225676][T29876] ACPI: Enabling force_remove is not supported anymore. Please report to linux-acpi@vger.kernel.org if you depend on this functionality [ 2036.250132][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.284564][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.312763][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.332695][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.354817][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.375045][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.394625][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.413544][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.432054][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.453225][T30007] futex_wake_op: syz.0.9262 tries to shift op by -2048; fix this program [ 2036.585760][T30011] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124 [ 2036.626571][T30013] HfR: entered promiscuous mode [ 2036.666151][T30013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9264'. [ 2036.709810][T30013] HfR: left promiscuous mode [ 2037.107686][T30020] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125 [ 2037.747307][T30065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9268'. [ 2038.269332][T30080] FAULT_INJECTION: forcing a failure. [ 2038.269332][T30080] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.318250][T30080] CPU: 0 UID: 0 PID: 30080 Comm: syz.0.9273 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2038.318291][T30080] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2038.318300][T30080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2038.318310][T30080] Call Trace: [ 2038.318317][T30080] [ 2038.318324][T30080] dump_stack_lvl+0x16c/0x1f0 [ 2038.318346][T30080] should_fail_ex+0x512/0x640 [ 2038.318368][T30080] ? kmem_cache_alloc_noprof+0x62/0x770 [ 2038.318392][T30080] should_failslab+0xc2/0x120 [ 2038.318419][T30080] kmem_cache_alloc_noprof+0x83/0x770 [ 2038.318441][T30080] ? __kernfs_new_node+0xd2/0x9b0 [ 2038.318466][T30080] ? __kernfs_new_node+0xd2/0x9b0 [ 2038.318484][T30080] __kernfs_new_node+0xd2/0x9b0 [ 2038.318507][T30080] ? __pfx___kernfs_new_node+0x10/0x10 [ 2038.318533][T30080] ? find_held_lock+0x2b/0x80 [ 2038.318557][T30080] ? kernfs_root+0xee/0x2a0 [ 2038.318581][T30080] kernfs_new_node+0x13c/0x1e0 [ 2038.318609][T30080] __kernfs_create_file+0x53/0x350 [ 2038.318628][T30080] sysfs_add_file_mode_ns+0x207/0x3c0 [ 2038.318652][T30080] sysfs_merge_group+0x1aa/0x340 [ 2038.318674][T30080] ? __pfx_sysfs_merge_group+0x10/0x10 [ 2038.318699][T30080] ? __pfx_dev_add_physical_location+0x10/0x10 [ 2038.318725][T30080] ? bus_to_subsys+0x131/0x160 [ 2038.318744][T30080] dpm_sysfs_add+0x237/0x280 [ 2038.318771][T30080] device_add+0x9cc/0x1980 [ 2038.318799][T30080] ? __pfx_device_add+0x10/0x10 [ 2038.318827][T30080] ? lockdep_init_map_type+0x5c/0x270 [ 2038.318848][T30080] ? __init_waitqueue_head+0xca/0x150 [ 2038.318874][T30080] rfkill_register+0x1ad/0xb40 [ 2038.318899][T30080] nfc_register_device+0x11f/0x410 [ 2038.318929][T30080] nci_register_device+0x7f1/0xb80 [ 2038.318953][T30080] ? __pfx_nci_register_device+0x10/0x10 [ 2038.318980][T30080] ? lockdep_init_map_type+0x5c/0x270 [ 2038.319001][T30080] virtual_ncidev_open+0x141/0x220 [ 2038.319021][T30080] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 2038.319038][T30080] misc_open+0x26d/0x450 [ 2038.319060][T30080] ? __pfx_misc_open+0x10/0x10 [ 2038.319080][T30080] chrdev_open+0x234/0x6a0 [ 2038.319101][T30080] ? __pfx_apparmor_file_open+0x10/0x10 [ 2038.319120][T30080] ? __pfx_chrdev_open+0x10/0x10 [ 2038.319148][T30080] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 2038.319179][T30080] do_dentry_open+0x748/0x1590 [ 2038.319204][T30080] ? __pfx_chrdev_open+0x10/0x10 [ 2038.319245][T30080] vfs_open+0x82/0x3f0 [ 2038.319268][T30080] path_openat+0x2078/0x3140 [ 2038.319302][T30080] ? __pfx_path_openat+0x10/0x10 [ 2038.319338][T30080] do_filp_open+0x20b/0x470 [ 2038.319366][T30080] ? __pfx_do_filp_open+0x10/0x10 [ 2038.319409][T30080] ? alloc_fd+0x471/0x7d0 [ 2038.319441][T30080] do_sys_openat2+0x121/0x290 [ 2038.319461][T30080] ? __pfx_do_sys_openat2+0x10/0x10 [ 2038.319489][T30080] __x64_sys_openat+0x174/0x210 [ 2038.319509][T30080] ? __pfx___x64_sys_openat+0x10/0x10 [ 2038.319538][T30080] do_syscall_64+0xcd/0xf80 [ 2038.319557][T30080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.319575][T30080] RIP: 0033:0x7fb6daf8f7c9 [ 2038.319591][T30080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2038.319607][T30080] RSP: 002b:00007fb6dbe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2038.319625][T30080] RAX: ffffffffffffffda RBX: 00007fb6db1e5fa0 RCX: 00007fb6daf8f7c9 [ 2038.319636][T30080] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2038.319646][T30080] RBP: 00007fb6db013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2038.319656][T30080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2038.319666][T30080] R13: 00007fb6db1e6038 R14: 00007fb6db1e5fa0 R15: 00007ffff0fb1458 [ 2038.319689][T30080] [ 2038.836755][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.843290][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.857469][T30103] HfR: entered promiscuous mode [ 2039.905606][T30103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9278'. [ 2039.947062][T30103] HfR: left promiscuous mode [ 2040.590016][T30102] syz.0.9278 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2040.668422][T30102] CPU: 0 UID: 0 PID: 30102 Comm: syz.0.9278 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2040.668466][T30102] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2040.668475][T30102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2040.668486][T30102] Call Trace: [ 2040.668492][T30102] [ 2040.668499][T30102] dump_stack_lvl+0x16c/0x1f0 [ 2040.668523][T30102] dump_header+0x101/0x960 [ 2040.668545][T30102] oom_kill_process+0x176/0x910 [ 2040.668568][T30102] out_of_memory+0x350/0x1700 [ 2040.668587][T30102] ? __lock_acquire+0x436/0x2890 [ 2040.668607][T30102] ? __pfx_out_of_memory+0x10/0x10 [ 2040.668633][T30102] mem_cgroup_out_of_memory+0x118/0x130 [ 2040.668656][T30102] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2040.668682][T30102] ? do_raw_spin_unlock+0x172/0x230 [ 2040.668706][T30102] try_charge_memcg+0x695/0xd30 [ 2040.668739][T30102] ? __pfx_try_charge_memcg+0x10/0x10 [ 2040.668771][T30102] ? find_held_lock+0x2b/0x80 [ 2040.668797][T30102] charge_memcg+0x8a/0x230 [ 2040.668825][T30102] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 2040.668847][T30102] __read_swap_cache_async+0x397/0x500 [ 2040.668872][T30102] ? __pfx___read_swap_cache_async+0x10/0x10 [ 2040.668903][T30102] swap_cluster_readahead+0x528/0x770 [ 2040.668925][T30102] ? find_held_lock+0x2b/0x80 [ 2040.668951][T30102] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2040.668976][T30102] ? __lock_acquire+0x436/0x2890 [ 2040.669002][T30102] ? get_vma_policy+0x242/0x3c0 [ 2040.669021][T30102] swapin_readahead+0x160/0x1220 [ 2040.669051][T30102] ? __pfx_swapin_readahead+0x10/0x10 [ 2040.669073][T30102] ? find_held_lock+0x2b/0x80 [ 2040.669095][T30102] ? swap_cache_get_folio+0x267/0x8e0 [ 2040.669114][T30102] ? swap_cache_get_folio+0x267/0x8e0 [ 2040.669173][T30102] ? swap_cache_get_folio+0x267/0x8e0 [ 2040.669195][T30102] ? swap_cache_get_folio+0x267/0x8e0 [ 2040.669296][T30102] ? swap_cache_get_folio+0x293/0x8e0 [ 2040.669319][T30102] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 2040.669339][T30102] ? __pfx_get_swap_device+0x10/0x10 [ 2040.669365][T30102] ? rcu_read_unlock+0x2d/0xb0 [ 2040.669392][T30102] ? do_swap_page+0x962/0x64a0 [ 2040.669408][T30102] do_swap_page+0x962/0x64a0 [ 2040.669431][T30102] ? __lock_acquire+0x436/0x2890 [ 2040.669454][T30102] ? __pfx_do_swap_page+0x10/0x10 [ 2040.669475][T30102] ? __pfx_default_wake_function+0x10/0x10 [ 2040.669501][T30102] ? rcu_is_watching+0x12/0xc0 [ 2040.669529][T30102] ? rcu_is_watching+0x12/0xc0 [ 2040.669553][T30102] ? ___pte_offset_map+0x175/0x380 [ 2040.669581][T30102] __handle_mm_fault+0x19cb/0x2bb0 [ 2040.669605][T30102] ? reacquire_held_locks+0xcd/0x1f0 [ 2040.669622][T30102] ? __pfx___handle_mm_fault+0x10/0x10 [ 2040.669644][T30102] ? lock_vma_under_rcu+0x176/0x580 [ 2040.669671][T30102] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2040.669701][T30102] handle_mm_fault+0x3fe/0xad0 [ 2040.669724][T30102] do_user_addr_fault+0x60c/0x1370 [ 2040.669748][T30102] ? rcu_is_watching+0x12/0xc0 [ 2040.669774][T30102] exc_page_fault+0x64/0xc0 [ 2040.669793][T30102] asm_exc_page_fault+0x26/0x30 [ 2040.669809][T30102] RIP: 0033:0x7fb6dae4d71f [ 2040.669825][T30102] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d f2 48 38 00 89 f0 4c 8d 05 e9 28 38 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 2040.669843][T30102] RSP: 002b:00007ffff0fb1488 EFLAGS: 00010206 [ 2040.669857][T30102] RAX: 000000008210f02e RBX: 00007fb6dbd15720 RCX: 0000000000000005 [ 2040.669868][T30102] RDX: 000000000000102e RSI: ffffffff8210f02e RDI: 000000000000000f [ 2040.669878][T30102] RBP: ffffffff8210f02e R08: 00007fb6db1d0000 R09: 00007fb6db1d2000 [ 2040.669889][T30102] R10: 000000008210f032 R11: 000000000000000f R12: 000000000000000f [ 2040.669899][T30102] R13: 0000000000000005 R14: ffffffff8210fb73 R15: 0000000000000005 [ 2040.669910][T30102] ? do_mremap+0x1b3/0x2020 [ 2040.669930][T30102] ? move_vma+0x126e/0x1790 [ 2040.669953][T30102] ? move_vma+0x126e/0x1790 [ 2040.669976][T30102] [ 2040.669984][T30102] memory: usage 3072kB, limit 3072kB, failcnt 87749 [ 2041.358199][T30175] [ 2041.360595][T30175] ====================================================== [ 2041.367692][T30175] WARNING: possible circular locking dependency detected [ 2041.374717][T30175] syzkaller #0 Tainted: G U W L XTNJ [ 2041.380783][T30175] ------------------------------------------------------ [ 2041.387797][T30175] syz.2.9284/30175 is trying to acquire lock: [ 2041.393870][T30175] ffff88805a5bd0c8 (&type->i_mutex_dir_key#6){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 2041.403560][T30175] [ 2041.403560][T30175] but task is already holding lock: [ 2041.411268][T30175] ffffffff8e286c08 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xec/0x300 [ 2041.420274][T30175] [ 2041.420274][T30175] which lock already depends on the new lock. [ 2041.420274][T30175] [ 2041.430780][T30175] [ 2041.430780][T30175] the existing dependency chain (in reverse order) is: [ 2041.439803][T30175] [ 2041.439803][T30175] -> #3 (param_lock){+.+.}-{4:4}: [ 2041.447024][T30175] __mutex_lock+0x1aa/0x1ca0 [ 2041.452135][T30175] ieee80211_init_rate_ctrl_alg+0x18d/0x680 [ 2041.458550][T30175] ieee80211_register_hw+0x21b5/0x4160 [ 2041.464527][T30175] mac80211_hwsim_new_radio+0x3323/0x5150 [ 2041.470861][T30175] init_mac80211_hwsim+0x44e/0x920 [ 2041.476570][T30175] do_one_initcall+0x123/0x680 [ 2041.481904][T30175] kernel_init_freeable+0x5c8/0x920 [ 2041.487869][T30175] kernel_init+0x1c/0x2b0 [ 2041.492814][T30175] ret_from_fork+0x983/0xb10 [ 2041.497935][T30175] ret_from_fork_asm+0x1a/0x30 [ 2041.503256][T30175] [ 2041.503256][T30175] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 2041.510468][T30175] __mutex_lock+0x1aa/0x1ca0 [ 2041.515754][T30175] cgrp_css_online+0xa2/0x1f0 [ 2041.520954][T30175] online_css+0xb2/0x350 [ 2041.525721][T30175] cgroup_apply_control_enable+0x702/0xbb0 [ 2041.532051][T30175] cgroup_mkdir+0x5d9/0x12d0 [ 2041.537181][T30175] kernfs_iop_mkdir+0x111/0x190 [ 2041.542668][T30175] vfs_mkdir+0x731/0xb60 [ 2041.547447][T30175] do_mkdirat+0x442/0x5e0 [ 2041.552301][T30175] __x64_sys_mkdirat+0x83/0xb0 [ 2041.557594][T30175] do_syscall_64+0xcd/0xf80 [ 2041.562613][T30175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.569034][T30175] [ 2041.569034][T30175] -> #1 (cgroup_mutex){+.+.}-{4:4}: [ 2041.576676][T30175] __mutex_lock+0x1aa/0x1ca0 [ 2041.581837][T30175] cgroup_kn_lock_live+0x116/0x520 [ 2041.587569][T30175] cgroup_rmdir+0x20/0x290 [ 2041.592659][T30175] kernfs_iop_rmdir+0x106/0x170 [ 2041.598044][T30175] vfs_rmdir+0x382/0x840 [ 2041.603026][T30175] do_rmdir+0x3be/0x560 [ 2041.607714][T30175] __x64_sys_rmdir+0xc5/0x110 [ 2041.613005][T30175] do_syscall_64+0xcd/0xf80 [ 2041.618205][T30175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.624706][T30175] [ 2041.624706][T30175] -> #0 (&type->i_mutex_dir_key#6){++++}-{4:4}: [ 2041.633273][T30175] __lock_acquire+0x1669/0x2890 [ 2041.638662][T30175] lock_acquire+0x179/0x330 [ 2041.643703][T30175] down_read+0x9b/0x460 [ 2041.648417][T30175] lookup_slow+0x42/0x70 [ 2041.653390][T30175] path_lookupat+0x5e9/0xc40 [ 2041.658621][T30175] filename_lookup+0x224/0x5f0 [ 2041.663923][T30175] kern_path+0x35/0x50 [ 2041.668539][T30175] lookup_bdev+0xd8/0x280 [ 2041.673388][T30175] bdev_file_open_by_path+0x82/0x330 [ 2041.679637][T30175] block2mtd_setup2+0x317/0xe10 [ 2041.685004][T30175] block2mtd_setup+0xbd/0x110 [ 2041.690300][T30175] param_attr_store+0x199/0x300 [ 2041.695852][T30175] module_attr_store+0x58/0x80 [ 2041.701137][T30175] sysfs_kf_write+0xf2/0x150 [ 2041.706268][T30175] kernfs_fop_write_iter+0x3af/0x570 [ 2041.712077][T30175] vfs_write+0x7d3/0x11d0 [ 2041.716958][T30175] ksys_write+0x12a/0x250 [ 2041.721814][T30175] do_syscall_64+0xcd/0xf80 [ 2041.726833][T30175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.733432][T30175] [ 2041.733432][T30175] other info that might help us debug this: [ 2041.733432][T30175] [ 2041.744094][T30175] Chain exists of: [ 2041.744094][T30175] &type->i_mutex_dir_key#6 --> rtnl_mutex --> param_lock [ 2041.744094][T30175] [ 2041.757836][T30175] Possible unsafe locking scenario: [ 2041.757836][T30175] [ 2041.765375][T30175] CPU0 CPU1 [ 2041.770756][T30175] ---- ---- [ 2041.776211][T30175] lock(param_lock); [ 2041.780192][T30175] lock(rtnl_mutex); [ 2041.786778][T30175] lock(param_lock); [ 2041.793532][T30175] rlock(&type->i_mutex_dir_key#6); [ 2041.799051][T30175] [ 2041.799051][T30175] *** DEADLOCK *** [ 2041.799051][T30175] [ 2041.807277][T30175] 5 locks held by syz.2.9284/30175: [ 2041.812479][T30175] #0: ffff888024e65978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 2041.821632][T30175] #1: ffff88803496a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 2041.830610][T30175] #2: ffff888031955088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 2041.841284][T30175] #3: ffff888032d172d8 (kn->active#4){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 2041.851308][T30175] #4: ffffffff8e286c08 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xec/0x300 [ 2041.860534][T30175] [ 2041.860534][T30175] stack backtrace: [ 2041.866788][T30175] CPU: 0 UID: 0 PID: 30175 Comm: syz.2.9284 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 2041.866822][T30175] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 2041.866832][T30175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2041.866842][T30175] Call Trace: [ 2041.866851][T30175] [ 2041.866859][T30175] dump_stack_lvl+0x116/0x1f0 [ 2041.866877][T30175] print_circular_bug+0x275/0x340 [ 2041.866906][T30175] check_noncircular+0x146/0x160 [ 2041.866935][T30175] __lock_acquire+0x1669/0x2890 [ 2041.866952][T30175] ? __up_read+0x2d1/0x700 [ 2041.866972][T30175] lock_acquire+0x179/0x330 [ 2041.866987][T30175] ? lookup_slow+0x42/0x70 [ 2041.867006][T30175] ? __pfx___might_resched+0x10/0x10 [ 2041.867030][T30175] ? find_held_lock+0x2b/0x80 [ 2041.867052][T30175] down_read+0x9b/0x460 [ 2041.867070][T30175] ? lookup_slow+0x42/0x70 [ 2041.867088][T30175] ? __pfx_down_read+0x10/0x10 [ 2041.867112][T30175] ? __d_lookup+0x266/0x4a0 [ 2041.867134][T30175] lookup_slow+0x42/0x70 [ 2041.867158][T30175] path_lookupat+0x5e9/0xc40 [ 2041.867182][T30175] filename_lookup+0x224/0x5f0 [ 2041.867206][T30175] ? __pfx_filename_lookup+0x10/0x10 [ 2041.867235][T30175] ? getname_kernel+0x52/0x370 [ 2041.867252][T30175] ? __asan_memcpy+0x3c/0x60 [ 2041.867274][T30175] kern_path+0x35/0x50 [ 2041.867296][T30175] lookup_bdev+0xd8/0x280 [ 2041.867314][T30175] ? __pfx_lookup_bdev+0x10/0x10 [ 2041.867334][T30175] bdev_file_open_by_path+0x82/0x330 [ 2041.867355][T30175] ? __pfx_bdev_file_open_by_path+0x10/0x10 [ 2041.867379][T30175] block2mtd_setup2+0x317/0xe10 [ 2041.867396][T30175] ? __pfx_block2mtd_setup2+0x10/0x10 [ 2041.867411][T30175] ? rcu_is_watching+0x12/0xc0 [ 2041.867435][T30175] ? trace_contention_end+0xdd/0x110 [ 2041.867462][T30175] block2mtd_setup+0xbd/0x110 [ 2041.867477][T30175] param_attr_store+0x199/0x300 [ 2041.867499][T30175] ? __pfx_param_attr_store+0x10/0x10 [ 2041.867521][T30175] module_attr_store+0x58/0x80 [ 2041.867540][T30175] ? __pfx_module_attr_store+0x10/0x10 [ 2041.867559][T30175] sysfs_kf_write+0xf2/0x150 [ 2041.867577][T30175] kernfs_fop_write_iter+0x3af/0x570 [ 2041.867601][T30175] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2041.867619][T30175] vfs_write+0x7d3/0x11d0 [ 2041.867643][T30175] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2041.867669][T30175] ? __pfx_vfs_write+0x10/0x10 [ 2041.867699][T30175] ksys_write+0x12a/0x250 [ 2041.867722][T30175] ? __pfx_ksys_write+0x10/0x10 [ 2041.867749][T30175] do_syscall_64+0xcd/0xf80 [ 2041.867767][T30175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.867784][T30175] RIP: 0033:0x7fa906f8f7c9 [ 2041.867799][T30175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2041.867817][T30175] RSP: 002b:00007fa907f06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2041.867838][T30175] RAX: ffffffffffffffda RBX: 00007fa9071e5fa0 RCX: 00007fa906f8f7c9 [ 2041.867849][T30175] RDX: 0000000000000024 RSI: 0000200000000140 RDI: 0000000000000006 [ 2041.867859][T30175] RBP: 00007fa907013f91 R08: 0000000000000000 R09: 0000000000000000 [ 2041.867869][T30175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2041.867878][T30175] R13: 00007fa9071e6038 R14: 00007fa9071e5fa0 R15: 00007ffc70b983d8 [ 2041.867894][T30175] [ 2042.264905][T30102] memory+swap: usage 5232kB, limit 9007199254740988kB, failcnt 0 [ 2042.272935][T30102] kmem: usage 880kB, limit 9007199254740988kB, failcnt 0 [ 2042.280204][T30102] Memory cgroup stats for /syz0: [ 2042.280307][T30102] cache 0 [ 2042.288308][T30102] rss 2211840 [ 2042.291687][T30102] rss_huge 0 [ 2042.295022][T30102] shmem 0 [ 2042.297999][T30102] mapped_file 0 [ 2042.301523][T30102] dirty 0 [ 2042.304495][T30102] writeback 0 [ 2042.307902][T30102] workingset_refault_anon 20127 [ 2042.312819][T30102] workingset_refault_file 7327 [ 2042.317613][T30102] swap 2211840 [ 2042.321035][T30102] swapcached 28672 [ 2042.324783][T30102] pgpgin 2219140 [ 2042.328354][T30102] pgpgout 2247764 [ 2042.332127][T30102] pgfault 1729052 [ 2042.335795][T30102] pgmajfault 6602 [ 2042.339603][T30102] inactive_anon 0 [ 2042.343428][T30102] active_anon 8192 [ 2042.347206][T30102] inactive_file 0 [ 2042.350926][T30102] active_file 0 [ 2042.355003][T30102] unevictable 2211840 [ 2042.359046][T30102] hierarchical_memory_limit 3145728 [ 2042.364364][T30102] hierarchical_memsw_limit 9223372036854771712 [ 2042.370637][T30102] total_cache 0 [ 2042.374204][T30102] total_rss 2211840 [ 2042.378208][T30102] total_rss_huge 0 [ 2042.382018][T30102] total_shmem 0 [ 2042.385523][T30102] total_mapped_file 0 [ 2042.389582][T30102] total_dirty 0 [ 2042.393088][T30102] total_writeback 0 [ 2042.397091][T30102] total_workingset_refault_anon 20127 [ 2042.403007][T30102] total_workingset_refault_file 7327 [ 2042.408567][T30102] total_swap 2211840 [ 2042.412673][T30102] total_swapcached 28672 [ 2042.417051][T30102] total_pgpgin 2219140 [ 2042.421268][T30102] total_pgpgout 2247764 [ 2042.425505][T30102] total_pgfault 1729052 [ 2042.429734][T30102] total_pgmajfault 6602 [ 2042.433932][T30102] total_inactive_anon 0 [ 2042.438149][T30102] total_active_anon 8192 [ 2042.442544][T30102] total_inactive_file 0 [ 2042.446735][T30102] total_active_file 0 [ 2042.450780][T30102] total_unevictable 2211840 [ 2042.455380][T30102] anon_cost 78 [ 2042.459552][T30102] file_cost 0 [ 2042.462950][T30102] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9278,pid=30102,uid=0 [ 2042.477979][T30102] Memory cgroup out of memory: Killed process 30102 (syz.0.9278) total-vm:106400kB, anon-rss:3188kB, file-rss:23120kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 2042.525799][T30175] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬