last executing test programs: 12m53.474124407s ago: executing program 2 (id=817): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x3) mprotect$auto(0x110c238000, 0x1, 0x3) r1 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/14s\x00', 0x40, 0x0) mmap$auto(0x62b1e91a, 0x851d, 0x0, 0x17, r1, 0x3) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fchmod$auto(r3, 0x7) write$auto(r2, 0x0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r4, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x20, r5, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) r6 = socket(0xa, 0x3, 0x87) getsockopt$auto_SO_ZEROCOPY(r6, 0xff, 0x3c, 0x0, &(0x7f0000000180)=0x1) madvise$auto(0x110c230000, 0x8031ca, 0x9) 12m52.694062721s ago: executing program 2 (id=819): r0 = open(&(0x7f0000000540)='./cgroup\x00', 0x0, 0x310) r1 = socket(0x2b, 0x80004, 0x3) r2 = prctl$auto(0x21, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(r1, 0x29, 0x7, &(0x7f0000000880)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\xf2Vw\xbe\x1c$\xddm\x8a\x9d\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,\xb0\x9fA3\xc2\xa2\x1cM\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x18000113) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) alarm$auto(0x4) mmap$auto(0x8000000000000000, 0x400008, 0x4, 0x18, r1, 0x2) write$auto(0x1, 0x0, 0x80000000) r3 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r4, r3, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) connect$auto(r2, &(0x7f0000000000)=@phonet={0x23, 0x2, 0x5, 0x4b}, 0x5b) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x1, 0x0, 0x803) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0x100000000eb1, 0x401, 0x8000) r7 = socket(0x22, 0x5, 0x0) setsockopt$auto(r7, 0xff, 0x2024, 0x0, 0xffb) sendmsg$auto_OVS_VPORT_CMD_DEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf250200000004000a800800050000000008"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) mmap$auto(0x0, 0x7ffffffff7ffffff, 0x7, 0x9b7e, 0x2, 0x8000) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810003, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x7f, 0xfffffffffffefffd, 0x17) pkey_free$auto(0xfffffffd) bpf$auto(0x8, &(0x7f0000000300)=@bpf_attr_4={0x7ff, r0, 0x43}, 0x10) 12m48.65480573s ago: executing program 2 (id=828): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$auto_ptdump_fops_(r0, &(0x7f00000000c0)=""/57, 0x39) 12m40.88533391s ago: executing program 3 (id=855): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0) write$auto(r0, &(0x7f0000000040)='e\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) 12m40.661584845s ago: executing program 3 (id=856): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x68881, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x800400007, 0x65d, 0xffff, 0xffffffffffffffff, 0x20000000) write$auto(0x3, 0x0, 0x7fffffff) r1 = epoll_create$auto(0x5) fremovexattr$auto(r1, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r1, 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x70001f4) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) 12m39.369472172s ago: executing program 3 (id=859): sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="210026bd7000fedbdf250100000034fea84b6a47cc47946947264ec23f3a8f308c8319bcdfdbb92e3e43b452e67391760db24b17a3860771c814d11ec6c55b1f0010dab9fbd98cdcb276878d30fe709ab6192cc4d1"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002) pipe2$auto(&(0x7f0000000080), 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) socket(0xb, 0x1, 0x84) unshare$auto(0x40000080) mmap$auto(0xc, 0x8000000000000801, 0x2, 0xeb0, r0, 0x400000000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x5, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0x91f5}, 0x800000001, &(0x7f0000000100)={&(0x7f0000001040)="837c43558323ea", 0x1ffffffff}, 0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0xc) sendfile$auto(r3, r3, 0x0, 0x10000800000003) mmap$auto(0xffffffffffffffff, 0x5, 0xffb, 0x18, 0x3, 0x2) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000000}, 0xca25, 0x4000003, 0x6, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40602, 0x0) 12m38.090180705s ago: executing program 2 (id=865): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16, @ANYBLOB="df250c000000000000"], 0x14}}, 0x24048004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendfile$auto(r0, r0, 0x0, 0x3) 12m37.985017395s ago: executing program 3 (id=866): open(0x0, 0x20400, 0x5) pread64$auto(0xffffffffffffffff, &(0x7f00000005c0)='/pr\xa2Cv&P\x11\xf7\x01\xa4\xdcXd\x1dvices\x00F%\xf7\x175)x\xd6\fR\x117\t\x00F\xe6\x8bG$\xdaP\xf1\x1e\xe9Z\xc6K\xe44\xdc\x8f\x94\x86\n\x95\xb3I<\xd2~\xe5\xad\n\x0f\xbf\x97\xcf\xcd\x9b\x8f\x8dh\xb8\xffz_\x84Y\x1bt\xf3\xf19\xc0\x9d\xad\xb3\xd9\x89\x15|\x96\xb6\x7f^\x00\x00\x00\x00\xa5n\'(\xa2\x95*\xda\xfcVCf\xd7\x88h[\xd2\xd9\xba\xc5\xc53\x15\x11^Q\x80\xf8\xa77\xa0\xbd\n*\xe0\xcduw\x96f\x95\xcc\xcbP\xd1\xbe\xe21$=\xb6\xe3lP-\xcbs\xe0\f\xce=\xe9 \xe8\n)\xf2b*\xea\"\x94\x96\xcc\xc8S\xd3]Y\xca\xd3\x13\xe3\xd8\x82\x9c\xa5\x06\x01\xafR\x16r\xa3)9t\xae<(V2\xc7\x98A\xc7<&\x89\x98\x7f\x8a\xb1\x8a\xfc\x05T\x8d\xa3\xc2\xdf\xb0\x0f\xad\x85P\xed\x9ct\xf7M\f-\xd3\xe9\xfe\x15o\xab5\xb23\xd2\xef\x9c\xc2;\x91\x05\xd8^I\x8e\x18p\xfb\x8d\x06\xb8J1\xce\x00', 0x100000001, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x4, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x8500, 0x0) mmap$auto(0x0, 0x40009, 0x5, 0x9b72, 0x7, 0x6) socket(0x10, 0x2, 0x3) acct$auto(&(0x7f0000001580)='/dev/binderfs/binder1\x00') 12m37.77532138s ago: executing program 3 (id=867): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="c80c1b5d", 0xfffffffffffffeec) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x460f, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) shutdown$auto(0x200000003, 0x2) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/47, 0x2f) ioctl$auto_VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1500000091b188694b3f7a982f1b34177df71e0fe028787b9a11eb3b1e0ba0906d98adc5c57c2f997ec78c30c0e307cedc59bce6352841915a511f9502baa691795260b0ef46d1bcf7e26cd798bccda909c84595e6176a90e7812c1708623db66dc84d67fac2ebd7869722487484e2745da0463cb6ee7affdc6357d5b1f45a987210cc445ac283fa776997003217cb47ac0a80799125835426567fb8d0fe99cd0e18496c352a7723648a6ad94b6fda03cbfa31399796f4265841077f6434e7c2613b6707dc5df1ed1595972a616a13a7c2abd3b564385fcb908e00481bb4e70576ad118e461932924e85e10316", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r5 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) read$auto_tracing_iter_fops_trace(r5, &(0x7f0000000040)=""/219, 0xdb) writev$auto(r4, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) read$auto(r1, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x200001, 0x0) 12m36.891737897s ago: executing program 3 (id=868): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$auto_ptdump_fops_(r1, &(0x7f00000000c0)=""/57, 0x39) 12m36.000370651s ago: executing program 2 (id=872): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) getuid() r1 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x7fff, 0x2, 0x0, 0xffffffffffffffc5, 0x4) lseek$auto(0xffffffffffffffff, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04060080", @ANYRES16=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="808f65aa9fc7a2af1f7a94cae44d07bc3e9b2ced40f70f49642170eb2fa775f15e575eb5093a7686412d609cba3779a673336c09c319fff8c3354a5ae78c6fa84ee921d50b2d02f727287f81553cdfca192007fbe7e92ddbd20a9d5f1eb90620aebf289f0490944e1ccdeeadf30208ba143a60216386a613979af0481551580e49a36ffb1c4dc9b4eec23144f674b29ce350c15adac5dbd1cbf8a88239a0dae2056d109a364969d7c3c0078c78a8a2e605b0d2fd37e1128652af1da3325c3669edfbe45d68e61bc1d9d8c47241f979f195e941816286000000"], 0x604}, 0x1, 0x0, 0x0, 0x801}, 0x44) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5381, 0xffffffffffffffff) 12m35.764813816s ago: executing program 2 (id=873): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$auto_ptdump_fops_(r0, &(0x7f00000000c0)=""/57, 0x39) 12m21.786971932s ago: executing program 32 (id=868): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$auto_ptdump_fops_(r1, &(0x7f00000000c0)=""/57, 0x39) 12m20.275599067s ago: executing program 33 (id=873): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$auto_ptdump_fops_(r0, &(0x7f00000000c0)=""/57, 0x39) 3m11.263041768s ago: executing program 5 (id=3041): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x22, 0x2, 0x1) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) ioctl$auto(0xffffffffffffffff, 0x8946, 0x24) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c\f\xb6,NS\xa2(Q\xcc', 0x7f) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, 0x0, 0x20000010) statmount$auto(0x0, 0x0, 0x9, 0xd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x103040, 0x0) socketpair$auto(0x7, 0xa, 0x13, &(0x7f0000000040)=0x40007) r2 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x29, 0x0, 0x8000) read$auto_v4l2_fops_v4l2_dev(r1, 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) 3m10.958403521s ago: executing program 5 (id=3043): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = fanotify_init$auto(0x280, 0x1) r2 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) read$auto_snd_pcm_f_ops_pcm1(r1, &(0x7f00000000c0)=""/109, 0x6d) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0x8905, 0x38) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004) 3m10.867905513s ago: executing program 5 (id=3044): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x801, 0x106) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r0, 0xfffffffe, 0x13, 0x0, 0x8009) 3m10.62887178s ago: executing program 5 (id=3045): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x40103, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r2, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 3m9.177037566s ago: executing program 5 (id=3050): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x81) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/hibernate/parameters/compressor\x00', 0x101942, 0x0) setregid$auto(0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) read$auto(0x3, 0x0, 0x8080) write$auto(r0, 0x0, 0xffdb) mmap$auto(0x0, 0x3, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40043d14, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=':'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) read$auto(0x3, 0x0, 0xf34) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20008040) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x22, 0x0, 0x1) 3m8.347413969s ago: executing program 5 (id=3053): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d400", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff050006000100", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f23500"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendfile$auto(r0, r0, 0x0, 0x3) 2m53.274469793s ago: executing program 34 (id=3053): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d400", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff050006000100", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f23500"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendfile$auto(r0, r0, 0x0, 0x3) 1m55.14009822s ago: executing program 4 (id=3311): r0 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$auto_BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x4) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) setgroups$auto(0xa1, &(0x7f0000000000)=0xc) write$auto(r1, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x5, 0xa, 0xdb, 0x1000355, 0x5, 0x8000) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) io_uring_setup$auto(0x5ded, 0x0) r2 = socket(0x28, 0x805, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(r2, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f0000000000)={0x20, 0x8000, 0x3}, 0x1, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) socket(0x2, 0x1, 0x106) write$auto(0x3, 0x0, 0xffd8) r3 = gettid() rt_tgsigqueueinfo$auto(0x0, r3, 0x16, &(0x7f0000000400)={@siginfo_0_0={0xfffeffff, 0x0, 0x2, @_sigpoll={0x8}}}) tgkill$auto_SIGCONT(0x0, 0x0, 0x12) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) request_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000000140)='.$\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='\x00', 0xfffffffffffffffc) shmget$auto(0x8, 0x10565, 0x7ff) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) 1m54.10068125s ago: executing program 4 (id=3317): rseq$auto(&(0x7f00000004c0)={0x12, 0x401, 0x100, 0x6, 0xfffffeff, 0x2}, 0x8002, 0x0, 0x8) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x2, 0x1, 0x84) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x304) socket(0x2, 0x5, 0x5) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/available_tracers\x00', 0x8000, 0x0) mmap$auto(0x1008, 0xa00006, 0x3fffff, 0x40ebd, r0, 0x2a) r1 = socket(0x2, 0x1, 0x106) ioprio_set$auto(0x3, 0x0, 0x4b34) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = prctl$auto(0x23, 0x6, 0x2008, 0x0, 0x0) listxattrat$auto(r2, 0x0, 0x5, 0x0, 0x15de) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000013c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28100000", @ANYRES16=r3, @ANYBLOB="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"], 0x1028}, 0x1, 0x0, 0x0, 0x41}, 0xc045) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x8, 0x0, 0x4) 1m53.565976457s ago: executing program 4 (id=3318): syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) timer_create$auto(0x9, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r0 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000a40)=""/4096, 0x1000) (async) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) ioperm$auto(0x7, 0x6, 0x2) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) 1m52.474953339s ago: executing program 4 (id=3323): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x18, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r2, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe982, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xffffff00, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x7000000) 1m51.220829407s ago: executing program 4 (id=3326): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x2000003e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf251f0000000800090008000000dc002901e4458ba81167c802627f1545d721b8d3a1ea2b56761aef53219799bf6f1de8bb4ff5dd0e17e7cb5886dc7df18a5ef6afa33540e573c3f35b596332c7dd5a53cb760d99e58837c4f30f465b70f870a5e09ac977170a87c112cbf2933fcc2579a907184a4f5f5304adddfdb7cdf32bf3cd94c08eb5af282ae08da459c0ce05c5e9756abd2413fc8cd32a2edbfbd8dfc4e3a90eccde87e7e3ede57f3f381cbd5fe703a7a32fe26e6d9f9ce3b0edb3b2968d151a0500d46558850c87d0f301d314118cfe853cb0ca878a7f6d5005ef80a02256530d0d74a5e419"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x3, 0x2000c, 0x4, 0x15, 0x40000000000a5, 0x5) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x10001) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setns(0xffffffffffffffff, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x80, 0x2020008, 0x5, 0x19, r2, 0x7) mmap$auto(0x7, 0x2020007, 0x7, 0x100000011, 0xfffffffffffffffa, 0x7ffe) 1m49.503165855s ago: executing program 4 (id=3330): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x40103, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r2, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1m34.415337077s ago: executing program 35 (id=3330): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x40103, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r2, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 6.530726918s ago: executing program 0 (id=3720): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(0x0, 0x0) madvise$auto(0x0, 0x200204, 0x15) 6.381021159s ago: executing program 6 (id=3722): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r3, &(0x7f0000000000)="0a23b9", 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) madvise$auto(0x40000007, 0x2, 0x15) close_range$auto(r0, 0x8, 0x0) shmctl$auto_SHM_STAT(0x30, 0xd, &(0x7f00000004c0)={{0x1, 0x0, 0xee01, 0xfffffffb, 0x101, 0x5, 0xf}, 0x8001, 0x3f9, 0x8000000000000001, 0xd, @raw, @raw=0x6, 0x465, 0x0, &(0x7f0000000380)="ea9395268b1aaca59c5b2d90dc3acdcfb1aaae0788efd1dad2895bfd24a0ed5bc1cbbcea3ff4111978eaab2b5adbc258f57231bbf586cd1933893f58fcf384a9b549ca1993a3bdd9e7", &(0x7f0000000400)="66f41f23289ed7f5679db8e3c1b9a03c1288884d7e01e5619bdda393e7d8e7f9a67e61176ebfd4670afc34b0ad87379b59213c28bb5243bdfef02d68208de8256526b22b785945e666532c11e9c461b0857b798af43ed2779372f8236644b5966073aee9558928b8906a8547532c712b9ba545703e3ec6f7ebbc8d4fd83f463b985b8db8351de4e10b692ee7ce9376a2414cdf2f2797d4b5"}) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0xfff, 0xc8, 0x5, 0x8, 0xee00, 0xee00, 0x0, 0xbede, 0xfffffffffffffeff, 0x1, 0x1, 0x5, 0x9, 0x8000000000000001, 0x6, 0x1, 0xc6}, 0x396bc18e) shmctl$auto_IPC_SET(0x49ea, 0x1, &(0x7f0000000700)={{0x81, 0xee00, 0x0, 0xfffffffb, 0x2, 0x7, 0x101}, 0xb9, 0x9, 0x3, 0x101, @raw=0x40, @inferred=0xffffffffffffffff, 0xf, 0x0, &(0x7f0000001440)="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", &(0x7f0000000800)="c797890fe238ff344a9f7448bb473c6d8694eba318ece04d1ce66bc3b286b6114e6da33c14211e4bc7fd1c746e017bb1d5caa7caa9c5249551f3ec301588fab71a4d277dc95a134becdc6c2b56ade9c68013caa96ef8a3e2fce9e8fc6447b1a79f0aa0faff6fe5783e045feddf226007a92cbfc428db139ba4a0b574c78efb5b16d3b3ce86"}) keyctl$auto(0x4, r4, r5, r7, 0x9) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) statx$auto(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x5, 0x9, &(0x7f0000000a00)={0x14000000, 0x5, 0x3, 0x8, r6, 0x0, 0x81, 0x2, 0xfffffffffffff001, 0x800, 0x80000001, 0x3, {0x4, 0x77b3}, {0x200, 0x6}, {0x2, 0x9}, {0xfff, 0x421e}, 0x7, 0x2, 0x774d, 0xe, 0x7, 0x9fb, 0x10, 0x1, 0x2, 0x4, 0xe, 0x80, [0x8, 0x2, 0x3, 0x8000000000000, 0xeb, 0x7, 0x5d, 0xfffffffffffffff8, 0x3]}) mlockall$auto(0x7) mprotect$auto(0x110c230000, 0xa588, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fb0\x00', 0x20280, 0x0) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r3, 0x9ee, 0x0) r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r8, 0x0, 0x40002) getdents64$auto(r8, 0x0, 0x400) ioctl$auto_SNDCTL_SEQ_SYNC(r8, 0x5101, &(0x7f0000000280)="e3c09915fb638e44f895a56c54c025f356a72a23c421cf754d1b49809d08fa701ce07e7f9538dc1d8b9f901421eac2952450836205ef0684e8a00c30d79ad972383e05a248f2416fa60d9afa691cdb7ff267cf56504b59606347425adef7816095440489a7e95cc844c033e045bd606157977ac7aaf8bddf4068292582c8e8355cd6e8663fc89dc6f28531dd64180a3db5590a410f65cb301906afd4ff23aec7864f39b6326c9c4677c8dec57efc9f69c0fdcde16e07598c7f44c95049a165a8c195e9f454ebcadedee73af389") 6.153506039s ago: executing program 0 (id=3723): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) ioctl$auto(r2, 0x8941, 0x8) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r0) sendmsg$auto_OVS_FLOW_CMD_NEW(r1, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000001e00)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) 6.111681296s ago: executing program 7 (id=3724): unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x8, 0xffffffffffffff49, 0x5, 0x5, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x8, 0x3, 0x4000000000008, 0xfffffffffffffffc, 0xab, 0x1, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0xffffffffffffffff, 0x0, 0x4c85) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, 0x0, 0x6a) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") fcntl$auto(0x0, 0x407, 0x100000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='0[.[\x00', 0xcd04) 5.829652118s ago: executing program 0 (id=3725): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r3, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe982, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xffffff00, 0x3, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) 5.489411748s ago: executing program 6 (id=3727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r1, 0x301, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x28, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x6}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x7f}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}]}, @NL80211_ATTR_VHT_CAPABILITY={0x76, 0x9d, "99dd7f55a9a2bf131a923f7c399ee4521d252f62292fbfa4bf660a5732b60d9a008705b33e6e64a2327bc38d35ee28f49802563a7a05cc0e47fd76f6a23d75584a2574698e9fa3e956cfb1605ff3ad08c0ad7cd9da414cfe891f743c0e8c72dc125a30c2e859cf66f1864b909b2b6e9995b7"}, @NL80211_ATTR_OPER_CLASS={0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 4.505689098s ago: executing program 6 (id=3729): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) write$auto(r1, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(r1, 0x409, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8c42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = set_tid_address$auto(0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) r5 = setfsuid$auto(0xee00) setresuid$auto(r5, 0x0, r5) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000200)={{0x9, 0x0, 0xffffffffffffffff, 0x800, 0x10, 0xad15, 0x7}, &(0x7f0000000180)=0xf, 0x0, 0x3ff, 0x5, 0x200, 0x0, 0x65, 0x7, 0x2, 0x3, @inferred=r0, @inferred=r3}) fstat$auto(r4, &(0x7f0000000300)={0x0, 0xf07, 0xaf4, 0x9, r5, r6, 0x0, 0x0, 0x8000000000, 0x74786f25, 0x1, 0x7, 0x40, 0x2, 0x1, 0xa841, 0x100000000000}) waitid$auto_P_PID(0x1, r0, 0x0, 0x7, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000080)={@raw=0x8, 0xfff, 0x50fa, 0xc, "802e41a0c415f060e955781ca310b7fb01c11e5c988c3eb4006ff3ac492bb1ce76676da7fb06c1c88f5c900c", @inferred=r3}) r7 = semctl$auto_GETPID(0x19, 0x5a48, 0xb, 0x6) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) ioctl$auto(r4, 0x6, r4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000040)={{@inferred=r3, 0x8, 0x5, 0x4338, "0508ef5c02864dd5c35496fab129fe93e170b30016d0cf0a93b570d8ea6943760ea9119f58f5db6093defac0", @inferred=0xffffffffffffffff}, 0x10, 0x1, 0x3, @inferred=r7, @integer={0x7, 0x3fffc000000, 0x9}, "ece132c65533f6ae0f69aea0f58e0ec1fed8e73a2133901c005333801c23678a8922a550ace2a9c0c2c66c50c9048320382f8e2a87ac9e4a277621056af6f983"}) sendto$auto(0xffffffffffffffff, 0x0, 0x404, 0x0, &(0x7f0000000000)=@generic={0x22, "e2e18340cba8fe80000000003f00"}, 0x1d) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000280), 0xc02, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r8 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8905, 0x0) fcntl$auto_F_GETOWN_EX(r1, 0x10, 0x4) 4.262380304s ago: executing program 0 (id=3730): socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/queues\x00', 0x20000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000e80)=""/206, 0xe2) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x90006441, 0xc35) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r2, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r2, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(0x0, &(0x7f0000000100)=&(0x7f0000000500)='\xac\x00', 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) select$auto(0x9, &(0x7f0000000340)={[0x8, 0x5, 0xffff, 0x7, 0xf55c, 0x4, 0x8, 0x1, 0x9, 0xfffffffffffffffd, 0xfffffffffffffff8, 0x2, 0x6, 0x89, 0x3, 0x5]}, &(0x7f00000003c0)={[0x101, 0x9a, 0x10, 0x4, 0x3, 0x1000000000009, 0x5, 0x223d, 0x10000, 0x3, 0x1000, 0x6, 0x4, 0x10000, 0x6, 0x10]}, &(0x7f0000000440)={[0xfffffffffffffff3, 0x8b0, 0x743b, 0x0, 0x10, 0x8, 0xffffffffffffffff, 0x6, 0x5f, 0x9, 0x7, 0x0, 0x401, 0x1, 0x9, 0x3]}, &(0x7f00000004c0)={0x7fff, 0x3}) pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0xfded, 0x3) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r3) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40210}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$auto_NET_SHAPER_CMD_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="090027bd70", @ANYRES32=r4, @ANYBLOB="0c0001800800010002"], 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) 4.040770015s ago: executing program 1 (id=3731): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x2000003e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf251f0000000800090008000000dc002901e4458ba81167c802627f1545d721b8d3a1ea2b56761aef53219799bf6f1de8bb4ff5dd0e17e7cb5886dc7df18a5ef6afa33540e573c3f35b596332c7dd5a53cb760d99e58837c4f30f465b70f870a5e09ac977170a87c112cbf2933fcc2579a907184a4f5f5304adddfdb7cdf32bf3cd94c08eb5af282ae08da459c0ce05c5e9756abd2413fc8cd32a2edbfbd8dfc4e3a90eccde87e7e3ede57f3f381cbd5fe703a7a32fe26e6d9f9ce3b0edb3b2968d151a0500d46558850c87d0f301d314118cfe853cb0ca878a7f6d5005ef80a02256530d0d74a5e419"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x3, 0x2000c, 0x4, 0x15, 0x40000000000a5, 0x5) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x10001) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x80, 0x2020008, 0x5, 0x19, r2, 0x7) mmap$auto(0x7, 0x2020007, 0x7, 0x100000011, 0xfffffffffffffffa, 0x7ffe) 3.431395147s ago: executing program 6 (id=3732): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r0, 0x205, 0xa, 0x4, 0x0) read$auto(0x3, 0x0, 0x87f) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r1, 0x2, 0x9193) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) fstat$auto(0x1, &(0x7f0000001a40)={0x2, 0x3, 0x1, 0x2, 0x3, 0x0, 0x0, 0x6, 0xe, 0x7, 0x3, 0x7, 0x7ff, 0xffffffff80000000, 0x7, 0x7ff, 0x81}) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) 3.056214745s ago: executing program 1 (id=3733): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x2000003e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf251f0000000800090008000000dc002901e4458ba81167c802627f1545d721b8d3a1ea2b56761aef53219799bf6f1de8bb4ff5dd0e17e7cb5886dc7df18a5ef6afa33540e573c3f35b596332c7dd5a53cb760d99e58837c4f30f465b70f870a5e09ac977170a87c112cbf2933fcc2579a907184a4f5f5304adddfdb7cdf32bf3cd94c08eb5af282ae08da459c0ce05c5e9756abd2413fc8cd32a2edbfbd8dfc4e3a90eccde87e7e3ede57f3f381cbd5fe703a7a32fe26e6d9f9ce3b0edb3b2968d151a0500d46558850c87d0f301d314118cfe853cb0ca878a7f6d5005ef80a02256530d0d74a5e419"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = socket(0x2, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x3, 0x2000c, 0x4, 0x15, 0x40000000000a5, 0x5) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x10001) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x80, 0x2020008, 0x5, 0x19, r2, 0x7) mmap$auto(0x7, 0x2020007, 0x7, 0x100000011, 0xfffffffffffffffa, 0x7ffe) 2.836780451s ago: executing program 7 (id=3734): mmap$auto(0x0, 0x2020009, 0x3, 0x20000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x3a, 0xffffff01, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0xfff, 0x9, 0x10001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x800, 0x0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000ffdbdf25200000000c00038008000200b40300001800028014000200766c616e0000000000000000000000006556e2734ce96265af1b0f78efb3dd15baa4c1c33ccc2fd6c3a5d2a9ebc1"], 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c0009"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x224, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DATA={0x24, 0x7, "d8bfb371acc62404aeca99ec197f1c20cd1076a91e97530d9723cd396adc00ed"}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x1ec, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x1be, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x40}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4}, 0x4040811) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc3}, 0x6, 0x0, 0x0, 0x504}, 0x1}, 0x2, 0x0) 2.632827513s ago: executing program 7 (id=3735): clock_gettime$auto(0x80000020, 0x0) mmap$auto(0x5, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x101, &(0x7f0000000000)=@l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket(0x3a, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x23, 0x80805, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x140, 0x0) mmap$auto(0x9, 0x10001, 0x800000004, 0x98, r1, 0x4000400000000000) fcntl$auto_F_SETLKW(r1, 0x7, 0x4) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x49402, 0x0) read$auto(r2, 0x0, 0x9a28) socket(0x2, 0x1, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) write$auto(0x3, 0x0, 0x100082) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) 2.423257597s ago: executing program 0 (id=3736): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r3, &(0x7f0000000000)="0a23b9", 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) madvise$auto(0x40000007, 0x2, 0x15) close_range$auto(r0, 0x8, 0x0) shmctl$auto_SHM_STAT(0x30, 0xd, &(0x7f00000004c0)={{0x1, 0x0, 0xee01, 0xfffffffb, 0x101, 0x5, 0xf}, 0x8001, 0x3f9, 0x8000000000000001, 0xd, @raw, @raw=0x6, 0x465, 0x0, &(0x7f0000000380)="ea9395268b1aaca59c5b2d90dc3acdcfb1aaae0788efd1dad2895bfd24a0ed5bc1cbbcea3ff4111978eaab2b5adbc258f57231bbf586cd1933893f58fcf384a9b549ca1993a3bdd9e7", &(0x7f0000000400)="66f41f23289ed7f5679db8e3c1b9a03c1288884d7e01e5619bdda393e7d8e7f9a67e61176ebfd4670afc34b0ad87379b59213c28bb5243bdfef02d68208de8256526b22b785945e666532c11e9c461b0857b798af43ed2779372f8236644b5966073aee9558928b8906a8547532c712b9ba545703e3ec6f7ebbc8d4fd83f463b985b8db8351de4e10b692ee7ce9376a2414cdf2f2797d4b5"}) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0xfff, 0xc8, 0x5, 0x8, 0xee00, 0xee00, 0x0, 0xbede, 0xfffffffffffffeff, 0x1, 0x1, 0x5, 0x9, 0x8000000000000001, 0x6, 0x1, 0xc6}, 0x396bc18e) shmctl$auto_IPC_SET(0x49ea, 0x1, &(0x7f0000000700)={{0x81, 0xee00, 0x0, 0xfffffffb, 0x2, 0x7, 0x101}, 0xb9, 0x9, 0x3, 0x101, @raw=0x40, @inferred=0xffffffffffffffff, 0xf, 0x0, &(0x7f0000001440)="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", &(0x7f0000000800)="c797890fe238ff344a9f7448bb473c6d8694eba318ece04d1ce66bc3b286b6114e6da33c14211e4bc7fd1c746e017bb1d5caa7caa9c5249551f3ec301588fab71a4d277dc95a134becdc6c2b56ade9c68013caa96ef8a3e2fce9e8fc6447b1a79f0aa0faff6fe5783e045feddf226007a92cbfc428db139ba4a0b574c78efb5b16d3b3ce86"}) keyctl$auto(0x4, r4, r5, r7, 0x9) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) statx$auto(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x5, 0x9, &(0x7f0000000a00)={0x14000000, 0x5, 0x3, 0x8, r6, 0x0, 0x81, 0x2, 0xfffffffffffff001, 0x800, 0x80000001, 0x3, {0x4, 0x77b3}, {0x200, 0x6}, {0x2, 0x9}, {0xfff, 0x421e}, 0x7, 0x2, 0x774d, 0xe, 0x7, 0x9fb, 0x10, 0x1, 0x2, 0x4, 0xe, 0x80, [0x8, 0x2, 0x3, 0x8000000000000, 0xeb, 0x7, 0x5d, 0xfffffffffffffff8, 0x3]}) mlockall$auto(0x7) mprotect$auto(0x110c230000, 0xa588, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fb0\x00', 0x20280, 0x0) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r3, 0x9ee, 0x0) r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r8, 0x0, 0x40002) getdents64$auto(r8, 0x0, 0x400) ioctl$auto_SNDCTL_SEQ_SYNC(r8, 0x5101, &(0x7f0000000280)="e3c09915fb638e44f895a56c54c025f356a72a23c421cf754d1b49809d08fa701ce07e7f9538dc1d8b9f901421eac2952450836205ef0684e8a00c30d79ad972383e05a248f2416fa60d9afa691cdb7ff267cf56504b59606347425adef7816095440489a7e95cc844c033e045bd606157977ac7aaf8bddf4068292582c8e8355cd6e8663fc89dc6f28531dd64180a3db5590a410f65cb301906afd4ff23aec7864f39b6326c9c4677c8dec57efc9f69c0fdcde16e07598c7f44c95049a165a8c195e9f454ebcadedee73af389") 2.037418574s ago: executing program 6 (id=3737): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) getcwd$auto(0x0, 0x7) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x40103, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/pci/devices\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r2, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1.884810062s ago: executing program 7 (id=3738): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x2}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r3, 0x4018620d, 0x9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) setrlimit$auto(0xb, 0x0) getpid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.2/usb3/3-0:1.0/authorized\x00', 0x220080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe982, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xffffff00, 0x3, 0x0) sendmmsg$auto(r0, 0x0, 0x9a6, 0x7000000) 1.759249764s ago: executing program 1 (id=3739): mmap$auto(0x0, 0x2020009, 0x4000003, 0xeb1, 0xfffffffffffffffa, 0xfffffffffffffff7) sysfs$auto(0x2, 0x49, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@inferred, 0x85, 0x3, 0x9, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x8}, 0x0, @integer=@value=[0xedc, 0x1, 0x80, 0x2, 0xfffffffffffffff9, 0x20000000000007, 0x10001, 0x9, 0x200, 0x8, 0x40dc, 0x9, 0x6, 0xfffffffffffffffc, 0x200, 0x88, 0x7, 0xffffffffffffb42b, 0x9b5, 0x4, 0x5, 0x1, 0x53, 0x0, 0xbbd, 0x1688, 0x4, 0xfff, 0x7, 0x9, 0x3, 0x5, 0x0, 0x6, 0x6, 0x7fffffffffffffff, 0xd4, 0x8, 0xfcf, 0x304, 0x696, 0x3c, 0x3, 0x80000000, 0x5, 0x351, 0xad, 0x1000, 0x3ff, 0x50, 0x4, 0x3, 0xf1, 0x1, 0x8, 0xfffffffffffffff5, 0x2, 0x8000000000000000, 0x2, 0xffff, 0xa, 0xfffffffffffffffe, 0x7f, 0xfffffffffffffff4, 0x4, 0x574, 0x2, 0x2, 0x0, 0x80, 0x9, 0xa8, 0x3, 0x9, 0x0, 0x2, 0x3, 0xd96d, 0x8, 0xba, 0x5, 0xfffffffffffff85f, 0x100000001, 0x1, 0x4, 0x8001, 0x7, 0x1000, 0x7d, 0xe2d, 0xc909, 0x2, 0x2, 0x0, 0xe5, 0x3ff, 0x0, 0x7f, 0xffffffff, 0x3f7e476d, 0xb, 0x5, 0x3ff, 0xa, 0x81, 0xce73, 0x9, 0x19a, 0xa, 0x26, 0xfffffffffffffffd, 0xfffffffffffffdff, 0xffffffff, 0x4, 0x101, 0x8, 0x1, 0x0, 0x7, 0xd, 0xffffffff, 0x7fffffff, 0x4, 0x9, 0x0, 0x10000000ffff, 0x1, 0x9], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r1, 0x0, 0x10001, 0x830) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = fsopen$auto(0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) 1.4976722s ago: executing program 1 (id=3740): acct$auto(&(0x7f0000000380)='/sys/kernel/debug/tracing/events/fmalloc/free_vmap_area_noflu/h/fo\"mat\x00') 976.829181ms ago: executing program 7 (id=3741): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) write$auto(r1, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(r1, 0x409, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8c42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = set_tid_address$auto(0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0xf, 0x0, 0x6) r5 = setfsuid$auto(0xee00) setresuid$auto(r5, 0x0, r5) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f0000000200)={{0x9, 0x0, 0xffffffffffffffff, 0x800, 0x10, 0xad15, 0x7}, &(0x7f0000000180)=0xf, 0x0, 0x3ff, 0x5, 0x200, 0x0, 0x65, 0x7, 0x2, 0x3, @inferred=r0, @inferred=r3}) fstat$auto(r4, &(0x7f0000000300)={0x0, 0xf07, 0xaf4, 0x9, r5, r6, 0x0, 0x0, 0x8000000000, 0x74786f25, 0x1, 0x7, 0x40, 0x2, 0x1, 0xa841, 0x100000000000}) waitid$auto_P_PID(0x1, r0, 0x0, 0x7, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000080)={@raw=0x8, 0xfff, 0x50fa, 0xc, "802e41a0c415f060e955781ca310b7fb01c11e5c988c3eb4006ff3ac492bb1ce76676da7fb06c1c88f5c900c", @inferred=r3}) r7 = semctl$auto_GETPID(0x19, 0x5a48, 0xb, 0x6) mmap$auto(0x0, 0x40008, 0x1000000004, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) ioctl$auto(r4, 0x6, r4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000040)={{@inferred=r3, 0x8, 0x5, 0x4338, "0508ef5c02864dd5c35496fab129fe93e170b30016d0cf0a93b570d8ea6943760ea9119f58f5db6093defac0", @inferred=0xffffffffffffffff}, 0x10, 0x1, 0x3, @inferred=r7, @integer={0x7, 0x3fffc000000, 0x9}, "ece132c65533f6ae0f69aea0f58e0ec1fed8e73a2133901c005333801c23678a8922a550ace2a9c0c2c66c50c9048320382f8e2a87ac9e4a277621056af6f983"}) sendto$auto(0xffffffffffffffff, 0x0, 0x404, 0x0, &(0x7f0000000000)=@generic={0x22, "e2e18340cba8fe80000000003f00"}, 0x1d) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000280), 0xc02, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r8 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8905, 0x0) fcntl$auto_F_GETOWN_EX(r1, 0x10, 0x4) 897.857587ms ago: executing program 1 (id=3742): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x2000003e, 0x1, 0x0, 0x400000000001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf251f0000000800090008000000dc002901e4458ba81167c802627f1545d721b8d3a1ea2b56761aef53219799bf6f1de8bb4ff5dd0e17e7cb5886dc7df18a5ef6afa33540e573c3f35b596332c7dd5a53cb760d99e58837c4f30f465b70f870a5e09ac977170a87c112cbf2933fcc2579a907184a4f5f5304adddfdb7cdf32bf3cd94c08eb5af282ae08da459c0ce05c5e9756abd2413fc8cd32a2edbfbd8dfc4e3a90eccde87e7e3ede57f3f381cbd5fe703a7a32fe26e6d9f9ce3b0edb3b2968d151a0500d46558850c87d0f301d314118cfe853cb0ca878a7f6d5005ef80a02256530d0d74a5e419"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r2 = socket(0x2, 0x801, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x3, 0x2000c, 0x4, 0x15, 0x40000000000a5, 0x5) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x10001) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mmap$auto(0x80, 0x2020008, 0x5, 0x19, r2, 0x7) mmap$auto(0x7, 0x2020007, 0x7, 0x100000011, 0xfffffffffffffffa, 0x7ffe) 718.446876ms ago: executing program 0 (id=3743): unshare$auto(0x40000080) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x8, 0xffffffffffffff49, 0x5, 0x5, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x8, 0x3, 0x4000000000008, 0xfffffffffffffffc, 0xab, 0x1, 0x9]}, &(0x7f0000000040)={0x0, 0x7}) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0xffffffffffffffff, 0x0, 0x4c85) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4) mmap$auto(0x0, 0x20000a00006, 0x100, 0x91, 0xffffffffffffffff, 0x2ffffffffffe) mmap$auto(0x0, 0x400008, 0x0, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, 0x0, 0x6a) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f00000003c0)="3dd1fa31") fcntl$auto(0x0, 0x407, 0x100000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='0[.[\x00', 0xcd04) 356.347455ms ago: executing program 6 (id=3744): connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0x301000, 0x0) socket(0x22, 0x3, 0x0) r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000006c0), 0x20040, 0x0) readv$auto(r0, &(0x7f00000007c0)={0x0, 0x5}, 0x5) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x80800, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x4cb00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) bind$auto(0x3, 0x0, 0xb) socket(0x1d, 0x2, 0x7) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) r1 = accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) pidfd_open$auto(0x1, 0x0) setns(r1, 0x80) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000e05f", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) 14.427743ms ago: executing program 7 (id=3745): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000440)={{@raw=0x5, 0x5, 0xf8, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468", @raw}, 0x1ea, 0x3, 0x1, @inferred, @enumerated={0x383, 0x1, "9df82ad3f7e9030c2da31306b14b03ab909ec7ed05341fe427503811a54ec6e093a2d6b26bc285629b63088004840ad40213cdebd9b2076f31f78f35381eb3bb", 0x7, 0xf}, "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"}) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$auto_ptdump_fops_(r1, &(0x7f00000000c0)=""/57, 0x39) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/aqm\x00', 0x28400, 0x0) readv$auto(r2, &(0x7f0000000100)={&(0x7f0000000280), 0x1}, 0x4) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/block/nbd0/rqos/wbt/wb_background\x00', 0x40, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r4 = socket(0x29, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x9, 0x80000}, 0x283) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r4, 0x8932, 0x24) pread64$auto(r3, 0x0, 0x2, 0x9) r6 = socket(0x2, 0x2, 0x106) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r6, 0x9, 0x13, 0x0, 0x8086) 0s ago: executing program 1 (id=3746): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) r1 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000080), r0) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f00000000c0)={0x6, 0xfff8, 0x8, 0x1ff, 0x6, 0x0}) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf25090000005f03018008003a3cebaf2ef39df9c309e7", @ANYRES32=r3, @ANYBLOB="0c0072000010000000000000080025007f000001d84c22852ba5d34fc6e6391fb6f3c1a103faa4cd387106beae887c24dfa717e0310f3b487f80b62417ca9824bbdbfb9fbb07de3e9a699dab7c874a974d5141c0c09d25c67e5c71701ab377fa11998ddf8bddc5756e1dca4d5cdd55e6ffeb2d76b0cf07c01c42ba4de126428e908db44c46379a681741a0a162226bd29cb2b29cd80fd7b59c7e8edde232f1679a4945cba2c39ea2a700e75ab271aa6161c5c5dc7d5b6f22049dc3f104477fdf8cc3329befbc0e1efe2f6a160caa5b104e29f5a1f45b747cc4e84f70f732c5462ca27e5c132451c4853438c636045ad33f4d35d6ea5032c862ffb7aedcb0ea14000a00fe80000000000000000000000000001ac1008c001c4957a29b1f896159fe74660147750ccea55c0b1a97e98ce5774f7697f6db300c77412120fb64bed5761bd8a7d8138581134d4d68847604a4cc404ff7f68f3b1457ea1cb4ca8570e27d38df3c2e9268ba9981aa9ca78442c430ff33354cc931143ad38f70d8a902065ece0e40393358055f0113ca3fb36fced756bfc46018d9d30aa38b1ebfc892eed22e406395123e116dc479256a56fa8300952e99c437aa887f7e6b59b68f496a9a6f983451ec5c1105503beaa04d40f38e0725a40000007a01cf80012c3d76dc815f232e763554e72dd668fe0434cc22e1b1a0c4eb3baeda774305a40075a7d24643c59291af32db1109f4227ac63751093fddf46ca033cb3def8d5eb190d7aaadc2d42d402c980fb08e263eb8347c4ae733f29e4416b31f08423d04b0437698c8040026806f0ab06eceecb195d54039adf96aabfd31d6f401ed0b9b875187a62368b11fad5a23ae964c517a3536bee2bdc9ee11bb51b3c18014f1828714f3250ad15713e05ba0cfd11ef10a3775023c4babb026244b634cbbe48e104a439e5b170d0d50aafaa404032fcc69a1cbe38a761a1ea973adf51c29bd4f66ad54bd795a937aec9eba9c81223ab557352fa887c6dd264531cd5cf6f0c90c2ae1f244e45f2fdd77cba4efd039d404002b8004001280097560814dbe51da41730a2e2422489f33347fe9c814af90253ffe55e3561ed64f403140657d5d95e4c6ed75bd8f508a3568c88894487b8108f9ebe1602d0ba0d7cb68d6e46708e6cc6c6c622be8e05fee27d9e3b19c28d4ae13c812636a15000000f200018052ce1b3036567bb974bb972331c9caacceb4bdedd56553dd71ae263eea689d5fbccc398f526b612ec42545d6c2be4b876df9cb87c0071141002ed12cc70c482a80cded7fc7a6d255974b8946f3fc68d5003054a82e587c031dcdc52bc4ae35bc95f6adb399daeeb184dc3592098daef5f308a09fb030e8bceb1bbf82b7de582156d9f79d404a3c44ca59273458f7255c5687e71f66ae0311d033d191166c4dad3b4795a4068db0446001ce8db1dfe166187b82cca1625f51157040557713f6276b3cccc0d87dfa7eb667954daa33fee2ca2141e070012afa5404376fc0bf86adfa618833734e66695c1809c0791200005c0003803de29479167cd918620dc459ea0d18d78830e1f98d8d12d4314ea7874b6517fd8a6eb72c7407ce5c112b56b5a63e542cd1a255320bfb3c301400a600fe8000000000000000000000000000aa0c003f8004006e8004005d0008000600010000000800050001000000"], 0x4d4}, 0x1, 0x0, 0x0, 0x20008044}, 0x4008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r4, 0x8) kernel console output (not intermixed with test programs): open+0x55/0x170 [ 1023.655483][T22007] seq_open+0x55/0x170 [ 1023.655519][T22007] __seq_open_private+0x3e/0xd0 [ 1023.655560][T22007] seq_open_net+0x1ab/0x2a0 [ 1023.655614][T22007] ? __pfx_seq_open_net+0x10/0x10 [ 1023.655654][T22007] proc_reg_open+0x2ab/0x5f0 [ 1023.655697][T22007] do_dentry_open+0x6d8/0x1660 [ 1023.655742][T22007] ? __pfx_proc_reg_open+0x10/0x10 [ 1023.655791][T22007] vfs_open+0x82/0x3f0 [ 1023.655827][T22007] path_openat+0x208c/0x31a0 [ 1023.655884][T22007] ? __pfx_path_openat+0x10/0x10 [ 1023.655944][T22007] do_file_open+0x20e/0x430 [ 1023.655991][T22007] ? __pfx_do_file_open+0x10/0x10 [ 1023.656050][T22007] ? __pfx_kfree_link+0x10/0x10 [ 1023.656098][T22007] ? alloc_fd+0x476/0x790 [ 1023.656147][T22007] ? do_getname+0x191/0x390 [ 1023.656183][T22007] do_sys_openat2+0x10d/0x1e0 [ 1023.656218][T22007] ? __pfx_do_sys_openat2+0x10/0x10 [ 1023.656256][T22007] ? __fget_files+0x21f/0x3d0 [ 1023.656306][T22007] __x64_sys_openat+0x12d/0x210 [ 1023.656341][T22007] ? __pfx___x64_sys_openat+0x10/0x10 [ 1023.656388][T22007] do_syscall_64+0x106/0xf80 [ 1023.656418][T22007] ? clear_bhb_loop+0x40/0x90 [ 1023.656454][T22007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.656483][T22007] RIP: 0033:0x7fb6b1d9c629 [ 1023.656508][T22007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.656536][T22007] RSP: 002b:00007fb6b2bff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1023.656565][T22007] RAX: ffffffffffffffda RBX: 00007fb6b2015fa0 RCX: 00007fb6b1d9c629 [ 1023.656594][T22007] RDX: 0000000000121000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1023.656615][T22007] RBP: 00007fb6b1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1023.656634][T22007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.656651][T22007] R13: 00007fb6b2016038 R14: 00007fb6b2015fa0 R15: 00007ffe371906d8 [ 1023.656688][T22007] [ 1026.675191][T15127] Bluetooth: hci1: hcon ffff888044ffc000 sent 0 < count 256 [ 1028.544982][T22086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1028.849691][T15127] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1028.857186][T15127] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1029.229557][T22098] ima: policy update failed [ 1029.488708][ T29] audit: type=1807 audit(4295022179.112:625): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1029.507087][ T29] audit: type=1802 audit(4295022179.112:626): pid=22098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3341" res=0 errno=0 [ 1029.569534][ T29] audit: type=1802 audit(4295022179.112:627): pid=22098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3341" res=0 errno=0 [ 1030.074151][T15078] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1030.705959][T22121] ima: policy update failed [ 1030.729001][ T29] audit: type=1807 audit(4295022180.582:628): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1030.748694][T22120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3347'. [ 1030.785851][ T29] audit: type=1802 audit(4295022180.582:629): pid=22121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3345" res=0 errno=0 [ 1030.813667][T22120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3347'. [ 1030.857046][ T29] audit: type=1802 audit(4295022180.592:630): pid=22121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3345" res=0 errno=0 [ 1031.728263][T15078] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1031.754649][T15078] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1031.924620][T21640] block nbd6: Possible stuck request ffff888027f08000: control (read@0,4096B). Runtime 360 seconds [ 1033.244563][T22155] ima: policy update failed [ 1033.489846][ T29] audit: type=1807 audit(4295022183.120:631): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1033.584256][ T29] audit: type=1802 audit(4295022183.120:632): pid=22155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3354" res=0 errno=0 [ 1033.608533][ T29] audit: type=1802 audit(4295022183.120:633): pid=22155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3354" res=0 errno=0 [ 1034.296607][T15127] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1034.443414][T15127] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1034.787072][T15127] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1034.794557][T15127] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1035.086242][T22173] zswap: compressor not available [ 1035.218589][T15078] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1035.228375][T15078] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1036.507545][T15127] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1037.081097][T22214] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1037.553002][T15127] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1037.560462][T15127] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1037.918156][T22250] FAULT_INJECTION: forcing a failure. [ 1037.918156][T22250] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.943976][T22250] CPU: 1 UID: 0 PID: 22250 Comm: syz.6.3372 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1037.944022][T22250] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1037.944032][T22250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1037.944047][T22250] Call Trace: [ 1037.944056][T22250] [ 1037.944067][T22250] dump_stack_lvl+0x100/0x190 [ 1037.944120][T22250] should_fail_ex.cold+0x5/0xa [ 1037.944148][T22250] ? tomoyo_encode2+0xfb/0x3c0 [ 1037.944173][T22250] should_failslab+0xc2/0x120 [ 1037.944214][T22250] __kmalloc_noprof+0xe0/0x850 [ 1037.944254][T22250] tomoyo_encode2+0xfb/0x3c0 [ 1037.944286][T22250] tomoyo_encode+0x29/0x50 [ 1037.944309][T22250] tomoyo_realpath_from_path+0x18c/0x690 [ 1037.944346][T22250] tomoyo_path_number_perm+0x23c/0x580 [ 1037.944383][T22250] ? tomoyo_path_number_perm+0x22e/0x580 [ 1037.944423][T22250] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1037.944493][T22250] ? find_held_lock+0x2b/0x80 [ 1037.944533][T22250] ? __fget_files+0x215/0x3d0 [ 1037.944569][T22250] ? hook_file_ioctl_common+0x146/0x410 [ 1037.944613][T22250] ? __fget_files+0x21f/0x3d0 [ 1037.944656][T22250] security_file_ioctl+0xd3/0x230 [ 1037.944697][T22250] __x64_sys_ioctl+0xb7/0x210 [ 1037.944736][T22250] do_syscall_64+0x106/0xf80 [ 1037.944762][T22250] ? clear_bhb_loop+0x40/0x90 [ 1037.944797][T22250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.944824][T22250] RIP: 0033:0x7fe30419c629 [ 1037.944846][T22250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.944873][T22250] RSP: 002b:00007fe30500c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.944899][T22250] RAX: ffffffffffffffda RBX: 00007fe304415fa0 RCX: 00007fe30419c629 [ 1037.944917][T22250] RDX: 0000000000000003 RSI: 000000008030ae7c RDI: 0000000000000003 [ 1037.944934][T22250] RBP: 00007fe30500c090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.944951][T22250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.944968][T22250] R13: 00007fe304416038 R14: 00007fe304415fa0 R15: 00007ffd86ca80c8 [ 1037.945006][T22250] [ 1037.945031][T22250] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1038.586362][T15127] Bluetooth: hci2: hcon ffff8880373ac000 sent 0 < count 256 [ 1038.661039][T22269] Invalid ELF header magic: != ELF [ 1039.170219][T22285] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 1039.191329][T22279] FAULT_INJECTION: forcing a failure. [ 1039.191329][T22279] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.206294][T22285] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1039.216106][T22279] CPU: 1 UID: 0 PID: 22279 Comm: syz.6.3378 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1039.216153][T22279] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1039.216165][T22279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1039.216184][T22279] Call Trace: [ 1039.216194][T22279] [ 1039.216204][T22279] dump_stack_lvl+0x100/0x190 [ 1039.216256][T22279] should_fail_ex.cold+0x5/0xa [ 1039.216290][T22279] should_failslab+0xc2/0x120 [ 1039.216336][T22279] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1039.216372][T22279] ? can_rx_register+0x582/0x6f0 [ 1039.216404][T22279] can_rx_register+0x582/0x6f0 [ 1039.216427][T22279] ? __pfx_raw_rcv+0x10/0x10 [ 1039.216458][T22279] ? __pfx_can_rx_register+0x10/0x10 [ 1039.216519][T22279] raw_enable_filters+0xe0/0x210 [ 1039.216558][T22279] raw_enable_allfilters+0x8b/0x2b0 [ 1039.216590][T22279] ? __local_bh_enable_ip+0x9e/0x120 [ 1039.216625][T22279] raw_bind+0x1bd/0xdf0 [ 1039.216655][T22279] ? apparmor_socket_bind+0x105/0x1e0 [ 1039.216698][T22279] __sys_bind+0x1a9/0x260 [ 1039.216742][T22279] ? __pfx___sys_bind+0x10/0x10 [ 1039.216811][T22279] __x64_sys_bind+0x72/0xb0 [ 1039.216852][T22279] ? lockdep_hardirqs_on+0x78/0x100 [ 1039.216884][T22279] do_syscall_64+0x106/0xf80 [ 1039.216915][T22279] ? clear_bhb_loop+0x40/0x90 [ 1039.216952][T22279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.216990][T22279] RIP: 0033:0x7fe30419c629 [ 1039.217016][T22279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.217044][T22279] RSP: 002b:00007fe30500c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1039.217072][T22279] RAX: ffffffffffffffda RBX: 00007fe304415fa0 RCX: 00007fe30419c629 [ 1039.217091][T22279] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 1039.217110][T22279] RBP: 00007fe304232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1039.217129][T22279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.217146][T22279] R13: 00007fe304416038 R14: 00007fe304415fa0 R15: 00007ffd86ca80c8 [ 1039.217183][T22279] [ 1039.447154][T22285] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1039.461579][T22285] page_type: f5(slab) [ 1039.466909][T22285] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1039.592413][T22285] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1039.695048][T22285] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1039.704060][T22285] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1039.713241][T22285] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 1039.723172][T22285] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1039.771764][T22285] page dumped because: unmovable page [ 1039.781236][T22285] page_owner tracks the page as allocated [ 1039.806408][T22285] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21986, tgid 21976 (syz.1.3316), ts 1022102215826, free_ts 1021728192594 [ 1039.861009][T22285] post_alloc_hook+0x153/0x170 [ 1039.866284][T22285] get_page_from_freelist+0x111d/0x3140 [ 1039.874709][T22285] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1039.880784][T22285] new_slab+0xa6/0x6d0 [ 1039.900515][T22285] refill_objects+0x26b/0x400 [ 1039.905828][T22285] __pcs_replace_empty_main+0x19f/0x600 [ 1039.911440][T22285] __kmalloc_noprof+0x688/0x850 [ 1039.938201][T22285] tomoyo_realpath_from_path+0xb6/0x690 [ 1039.955232][T22285] tomoyo_path_number_perm+0x23c/0x580 [ 1039.960783][T22285] security_file_ioctl+0xd3/0x230 [ 1039.980585][T22285] __x64_sys_ioctl+0xb7/0x210 [ 1039.994159][T22285] do_syscall_64+0x106/0xf80 [ 1039.999001][T22285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.012441][T22285] page last free pid 21972 tgid 21968 stack trace: [ 1040.019862][T22285] __free_frozen_pages+0x7e1/0x10d0 [ 1040.026920][T22285] qlist_free_all+0x47/0xe0 [ 1040.031695][T22285] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1040.044031][T22285] __kasan_slab_alloc+0x69/0x90 [ 1040.049105][T22285] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1040.056507][T22285] __alloc_skb+0x140/0x710 [ 1040.061240][T22285] __ip_append_data+0x2ec7/0x46d0 [ 1040.067535][T22285] ip_append_data+0x10f/0x1a0 [ 1040.072367][T22285] raw_sendmsg+0xcb6/0x3800 [ 1040.077482][T22285] inet_sendmsg+0x11c/0x140 [ 1040.082163][T22285] ____sys_sendmsg+0x9ad/0xc30 [ 1040.089264][T22285] ___sys_sendmsg+0x190/0x1e0 [ 1040.094125][T22285] __sys_sendmmsg+0x205/0x430 [ 1040.099673][T22285] __x64_sys_sendmmsg+0x9c/0x100 [ 1040.105022][T22285] do_syscall_64+0x106/0xf80 [ 1040.110083][T22285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.378875][T22304] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1040.509726][T22307] ima: policy update failed [ 1040.543026][ T29] audit: type=1807 audit(4295022190.387:634): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1040.834892][ T29] audit: type=1802 audit(4295022190.387:635): pid=22307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3382" res=0 errno=0 [ 1040.869289][T22309] FAULT_INJECTION: forcing a failure. [ 1040.869289][T22309] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.887992][ T29] audit: type=1802 audit(4295022190.397:636): pid=22307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3382" res=0 errno=0 [ 1040.915074][T22309] CPU: 0 UID: 0 PID: 22309 Comm: syz.6.3384 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1040.915126][T22309] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1040.915138][T22309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1040.915156][T22309] Call Trace: [ 1040.915166][T22309] [ 1040.915178][T22309] dump_stack_lvl+0x100/0x190 [ 1040.915225][T22309] should_fail_ex.cold+0x5/0xa [ 1040.915260][T22309] should_failslab+0xc2/0x120 [ 1040.915305][T22309] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1040.915347][T22309] ? __d_alloc+0x34/0xa80 [ 1040.915375][T22309] ? __pfx_stack_trace_save+0x10/0x10 [ 1040.915428][T22309] __d_alloc+0x34/0xa80 [ 1040.915462][T22309] d_alloc_parallel+0x111/0x14e0 [ 1040.915511][T22309] ? find_held_lock+0x2b/0x80 [ 1040.915564][T22309] ? __d_lookup+0x25c/0x4a0 [ 1040.915600][T22309] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1040.915644][T22309] ? __d_lookup+0x266/0x4a0 [ 1040.915691][T22309] lookup_open.isra.0+0x57c/0x11b0 [ 1040.915740][T22309] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1040.915799][T22309] ? mnt_get_write_access+0x1e9/0x2f0 [ 1040.915841][T22309] path_openat+0xa98/0x31a0 [ 1040.915898][T22309] ? __pfx_path_openat+0x10/0x10 [ 1040.915956][T22309] do_file_open+0x20e/0x430 [ 1040.916004][T22309] ? __pfx_do_file_open+0x10/0x10 [ 1040.916078][T22309] ? alloc_fd+0x476/0x790 [ 1040.916125][T22309] ? do_getname+0x191/0x390 [ 1040.916160][T22309] do_sys_openat2+0x10d/0x1e0 [ 1040.916194][T22309] ? __pfx_do_sys_openat2+0x10/0x10 [ 1040.916247][T22309] __x64_sys_openat+0x12d/0x210 [ 1040.916283][T22309] ? __pfx___x64_sys_openat+0x10/0x10 [ 1040.916335][T22309] do_syscall_64+0x106/0xf80 [ 1040.916365][T22309] ? clear_bhb_loop+0x40/0x90 [ 1040.916401][T22309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.916431][T22309] RIP: 0033:0x7fe30419c629 [ 1040.916457][T22309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.916484][T22309] RSP: 002b:00007fe30500c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1040.916511][T22309] RAX: ffffffffffffffda RBX: 00007fe304415fa0 RCX: 00007fe30419c629 [ 1040.916537][T22309] RDX: 0000000000060282 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1040.916557][T22309] RBP: 00007fe304232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1040.916575][T22309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.916593][T22309] R13: 00007fe304416038 R14: 00007fe304415fa0 R15: 00007ffd86ca80c8 [ 1040.916634][T22309] [ 1041.468933][T15127] Bluetooth: hci1: hcon ffff888044ffc000 sent 0 < count 256 [ 1041.903047][T15078] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1042.013765][T15078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1042.054995][T15078] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1042.066220][T15078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1042.077336][T15078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1043.073834][T22331] chnl_net:caif_netlink_parms(): no params data found [ 1043.849183][T22378] input: f¬ as /devices/virtual/input/input15 [ 1043.861603][T22331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.879887][T22331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.914246][T22331] bridge_slave_0: entered allmulticast mode [ 1043.945066][T22331] bridge_slave_0: entered promiscuous mode [ 1043.974063][T22331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.982985][T22331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.002068][T22331] bridge_slave_1: entered allmulticast mode [ 1044.020195][T22331] bridge_slave_1: entered promiscuous mode [ 1044.187228][T15078] Bluetooth: hci6: command tx timeout [ 1044.384089][T22331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.579921][T22331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.684587][T22331] team0: Port device team_slave_0 added [ 1044.703382][T22331] team0: Port device team_slave_1 added [ 1044.765960][T22331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.783129][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.834372][T22331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.857203][T22331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.896573][T22331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.002324][T22331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.120677][T22331] hsr_slave_0: entered promiscuous mode [ 1045.155633][T22331] hsr_slave_1: entered promiscuous mode [ 1045.222946][T22331] debugfs: 'hsr0' already exists in 'hsr' [ 1045.232429][ T29] audit: type=1807 audit(4295022195.104:637): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1045.247900][T22396] ima: policy update failed [ 1045.254297][ T29] audit: type=1802 audit(4295022195.124:638): pid=22396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3395" res=0 errno=0 [ 1045.280582][ T29] audit: type=1802 audit(4295022195.144:639): pid=22396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3395" res=0 errno=0 [ 1045.316960][T22331] Cannot create hsr debugfs directory [ 1045.792521][T22398] FAULT_INJECTION: forcing a failure. [ 1045.792521][T22398] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.816883][T22398] CPU: 0 UID: 0 PID: 22398 Comm: syz.6.3397 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1045.816939][T22398] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1045.816953][T22398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1045.816971][T22398] Call Trace: [ 1045.816982][T22398] [ 1045.816993][T22398] dump_stack_lvl+0x100/0x190 [ 1045.817127][T22398] should_fail_ex.cold+0x5/0xa [ 1045.817172][T22398] should_failslab+0xc2/0x120 [ 1045.817220][T22398] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1045.817256][T22398] ? assoc_array_insert+0x262/0x32c0 [ 1045.817299][T22398] assoc_array_insert+0x262/0x32c0 [ 1045.817332][T22398] ? __mutex_lock+0x26a/0x1b90 [ 1045.817368][T22398] ? key_link+0x2bb/0x390 [ 1045.817413][T22398] ? __pfx_assoc_array_insert+0x10/0x10 [ 1045.817449][T22398] ? __pfx___might_resched+0x10/0x10 [ 1045.817500][T22398] ? down_write+0x146/0x1f0 [ 1045.817541][T22398] __key_link_begin+0xf5/0x260 [ 1045.817574][T22398] key_link+0x103/0x390 [ 1045.817605][T22398] ? __up_read+0x2c5/0x700 [ 1045.817646][T22398] ? __pfx_key_link+0x10/0x10 [ 1045.817677][T22398] ? bpf_lsm_key_permission+0x9/0x10 [ 1045.817726][T22398] ? key_task_permission+0x2c7/0x3c0 [ 1045.817773][T22398] keyctl_get_persistent+0x5e2/0x8b0 [ 1045.817807][T22398] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1045.817844][T22398] ? __x64_sys_futex+0x34f/0x4d0 [ 1045.817881][T22398] ? __x64_sys_futex+0x358/0x4d0 [ 1045.817938][T22398] ? xfd_validate_state+0x129/0x190 [ 1045.817990][T22398] __do_sys_keyctl+0x3b2/0x5a0 [ 1045.818034][T22398] do_syscall_64+0x106/0xf80 [ 1045.818073][T22398] ? clear_bhb_loop+0x40/0x90 [ 1045.818112][T22398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.818144][T22398] RIP: 0033:0x7fe30419c629 [ 1045.818170][T22398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.818200][T22398] RSP: 002b:00007fe30500c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1045.818230][T22398] RAX: ffffffffffffffda RBX: 00007fe304415fa0 RCX: 00007fe30419c629 [ 1045.818251][T22398] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 1045.818272][T22398] RBP: 00007fe304232b39 R08: 000000000000000c R09: 0000000000000000 [ 1045.818291][T22398] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 1045.818308][T22398] R13: 00007fe304416038 R14: 00007fe304415fa0 R15: 00007ffd86ca80c8 [ 1045.818349][T22398] [ 1046.228459][T22403] FAULT_INJECTION: forcing a failure. [ 1046.228459][T22403] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.247044][T15078] Bluetooth: hci6: command tx timeout [ 1046.303262][T22403] CPU: 1 UID: 0 PID: 22403 Comm: syz.6.3399 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1046.303313][T22403] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1046.303323][T22403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1046.303339][T22403] Call Trace: [ 1046.303350][T22403] [ 1046.303361][T22403] dump_stack_lvl+0x100/0x190 [ 1046.303409][T22403] should_fail_ex.cold+0x5/0xa [ 1046.303441][T22403] should_failslab+0xc2/0x120 [ 1046.303487][T22403] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1046.303520][T22403] ? loopback_open+0xa46/0x1370 [ 1046.303556][T22403] loopback_open+0xa46/0x1370 [ 1046.303594][T22403] snd_pcm_open_substream+0xa76/0x1850 [ 1046.303629][T22403] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1046.303664][T22403] ? rcu_is_watching+0x12/0xc0 [ 1046.303709][T22403] snd_pcm_open+0x2a3/0x710 [ 1046.303740][T22403] ? __pfx_snd_pcm_open+0x10/0x10 [ 1046.303772][T22403] ? __pfx_default_wake_function+0x10/0x10 [ 1046.303823][T22403] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1046.303853][T22403] snd_pcm_capture_open+0x89/0xe0 [ 1046.303882][T22403] snd_open+0x22d/0x4c0 [ 1046.303923][T22403] ? __pfx_snd_open+0x10/0x10 [ 1046.303960][T22403] chrdev_open+0x234/0x6a0 [ 1046.303996][T22403] ? __pfx_apparmor_file_open+0x10/0x10 [ 1046.304016][T22403] ? __pfx_chrdev_open+0x10/0x10 [ 1046.304040][T22403] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1046.304068][T22403] do_dentry_open+0x6d8/0x1660 [ 1046.304091][T22403] ? __pfx_chrdev_open+0x10/0x10 [ 1046.304118][T22403] vfs_open+0x82/0x3f0 [ 1046.304137][T22403] path_openat+0x208c/0x31a0 [ 1046.304171][T22403] ? __pfx_path_openat+0x10/0x10 [ 1046.304203][T22403] do_file_open+0x20e/0x430 [ 1046.304234][T22403] ? __pfx_do_file_open+0x10/0x10 [ 1046.304273][T22403] ? alloc_fd+0x476/0x790 [ 1046.304299][T22403] ? do_getname+0x191/0x390 [ 1046.304317][T22403] do_sys_openat2+0x10d/0x1e0 [ 1046.304336][T22403] ? __pfx_do_sys_openat2+0x10/0x10 [ 1046.304356][T22403] ? __fget_files+0x21f/0x3d0 [ 1046.304381][T22403] __x64_sys_openat+0x12d/0x210 [ 1046.304400][T22403] ? __pfx___x64_sys_openat+0x10/0x10 [ 1046.304425][T22403] do_syscall_64+0x106/0xf80 [ 1046.304441][T22403] ? clear_bhb_loop+0x40/0x90 [ 1046.304461][T22403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.304477][T22403] RIP: 0033:0x7fe30419c629 [ 1046.304490][T22403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.304505][T22403] RSP: 002b:00007fe30500c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1046.304521][T22403] RAX: ffffffffffffffda RBX: 00007fe304415fa0 RCX: 00007fe30419c629 [ 1046.304532][T22403] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1046.304541][T22403] RBP: 00007fe304232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1046.304550][T22403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.304559][T22403] R13: 00007fe304416038 R14: 00007fe304415fa0 R15: 00007ffd86ca80c8 [ 1046.304579][T22403] [ 1046.783369][T22331] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1046.832527][T22331] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1046.865334][T22414] FAULT_INJECTION: forcing a failure. [ 1046.865334][T22414] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.879044][T22414] CPU: 1 UID: 0 PID: 22414 Comm: syz.1.3401 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1046.879096][T22414] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1046.879108][T22414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1046.879124][T22414] Call Trace: [ 1046.879134][T22414] [ 1046.879145][T22414] dump_stack_lvl+0x100/0x190 [ 1046.879202][T22414] should_fail_ex.cold+0x5/0xa [ 1046.879233][T22414] ? tomoyo_encode2+0xfb/0x3c0 [ 1046.879260][T22414] should_failslab+0xc2/0x120 [ 1046.879303][T22414] __kmalloc_noprof+0xe0/0x850 [ 1046.879340][T22414] ? d_absolute_path+0x136/0x1b0 [ 1046.879382][T22414] tomoyo_encode2+0xfb/0x3c0 [ 1046.879416][T22414] tomoyo_encode+0x29/0x50 [ 1046.879442][T22414] tomoyo_realpath_from_path+0x18c/0x690 [ 1046.879479][T22414] tomoyo_check_open_permission+0x2af/0x3c0 [ 1046.879519][T22414] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1046.879598][T22414] ? do_raw_spin_lock+0x128/0x260 [ 1046.879643][T22414] ? path_get+0x61/0x80 [ 1046.879676][T22414] tomoyo_file_open+0x6b/0x90 [ 1046.879715][T22414] security_file_open+0xb5/0x1e0 [ 1046.879744][T22414] do_dentry_open+0x5aa/0x1660 [ 1046.879789][T22414] ? security_inode_permission+0xbf/0x250 [ 1046.879837][T22414] vfs_open+0x82/0x3f0 [ 1046.879873][T22414] path_openat+0x208c/0x31a0 [ 1046.879928][T22414] ? __pfx_path_openat+0x10/0x10 [ 1046.879987][T22414] do_file_open+0x20e/0x430 [ 1046.880036][T22414] ? __pfx_do_file_open+0x10/0x10 [ 1046.880109][T22414] ? alloc_fd+0x476/0x790 [ 1046.880157][T22414] ? do_getname+0x191/0x390 [ 1046.880204][T22414] do_sys_openat2+0x10d/0x1e0 [ 1046.880239][T22414] ? __pfx_do_sys_openat2+0x10/0x10 [ 1046.880295][T22414] __x64_sys_openat+0x12d/0x210 [ 1046.880331][T22414] ? __pfx___x64_sys_openat+0x10/0x10 [ 1046.880384][T22414] do_syscall_64+0x106/0xf80 [ 1046.880415][T22414] ? clear_bhb_loop+0x40/0x90 [ 1046.880453][T22414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.880484][T22414] RIP: 0033:0x7fb6b1d9c629 [ 1046.880509][T22414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.880538][T22414] RSP: 002b:00007fb6b2bde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1046.880566][T22414] RAX: ffffffffffffffda RBX: 00007fb6b2016090 RCX: 00007fb6b1d9c629 [ 1046.880587][T22414] RDX: 00000000001cfb03 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1046.880607][T22414] RBP: 00007fb6b1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1046.880625][T22414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.880643][T22414] R13: 00007fb6b2016128 R14: 00007fb6b2016090 R15: 00007ffe371906d8 [ 1046.880682][T22414] [ 1046.880713][T22414] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1047.228599][T22331] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1047.265923][T22416] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 1047.280770][T22331] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1047.294447][T22416] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1047.392766][T22416] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1047.441947][T22416] page_type: f5(slab) [ 1047.460552][T22416] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1047.499185][T22416] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1047.534714][T22416] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1047.570057][T22416] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1047.597443][T22416] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 1047.675638][T22416] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1047.739434][T22416] page dumped because: unmovable page [ 1047.744854][T22416] page_owner tracks the page as allocated [ 1047.777403][T22416] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21986, tgid 21976 (syz.1.3316), ts 1022102215826, free_ts 1021728192594 [ 1047.837823][T22416] post_alloc_hook+0x153/0x170 [ 1047.842808][T22416] get_page_from_freelist+0x111d/0x3140 [ 1047.852933][T22416] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1047.882791][T22416] new_slab+0xa6/0x6d0 [ 1047.903546][T22416] refill_objects+0x26b/0x400 [ 1047.937797][T22416] __pcs_replace_empty_main+0x19f/0x600 [ 1047.974596][T22416] __kmalloc_noprof+0x688/0x850 [ 1047.998564][T22416] tomoyo_realpath_from_path+0xb6/0x690 [ 1048.004182][T22416] tomoyo_path_number_perm+0x23c/0x580 [ 1048.052388][T22416] security_file_ioctl+0xd3/0x230 [ 1048.057491][T22416] __x64_sys_ioctl+0xb7/0x210 [ 1048.083780][T22416] do_syscall_64+0x106/0xf80 [ 1048.113880][T22331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.115960][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.141567][T22331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.172787][T22416] page last free pid 21972 tgid 21968 stack trace: [ 1048.182758][T15890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.189954][T15890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.213655][T22416] __free_frozen_pages+0x7e1/0x10d0 [ 1048.237310][T22416] qlist_free_all+0x47/0xe0 [ 1048.264252][T22416] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1048.279557][T15121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.286735][T15121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.288112][T22416] __kasan_slab_alloc+0x69/0x90 [ 1048.312982][T22416] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1048.328726][T15078] Bluetooth: hci6: command tx timeout [ 1048.334053][T22416] __alloc_skb+0x140/0x710 [ 1048.359522][T22416] __ip_append_data+0x2ec7/0x46d0 [ 1048.364649][T22416] ip_append_data+0x10f/0x1a0 [ 1048.378268][T22416] raw_sendmsg+0xcb6/0x3800 [ 1048.387182][T22416] inet_sendmsg+0x11c/0x140 [ 1048.398096][T22416] ____sys_sendmsg+0x9ad/0xc30 [ 1048.402920][T22416] ___sys_sendmsg+0x190/0x1e0 [ 1048.407637][T22416] __sys_sendmmsg+0x205/0x430 [ 1048.419276][T22416] __x64_sys_sendmmsg+0x9c/0x100 [ 1048.424272][T22416] do_syscall_64+0x106/0xf80 [ 1048.429082][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.681511][T22436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3405'. [ 1048.827413][T22440] FAULT_INJECTION: forcing a failure. [ 1048.827413][T22440] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.858570][T22440] CPU: 1 UID: 0 PID: 22440 Comm: syz.6.3406 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1048.858618][T22440] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1048.858629][T22440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1048.858644][T22440] Call Trace: [ 1048.858653][T22440] [ 1048.858664][T22440] dump_stack_lvl+0x100/0x190 [ 1048.858711][T22440] should_fail_ex.cold+0x5/0xa [ 1048.858744][T22440] should_failslab+0xc2/0x120 [ 1048.858789][T22440] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1048.858822][T22440] ? loopback_open+0x145/0x1370 [ 1048.858863][T22440] loopback_open+0x145/0x1370 [ 1048.858918][T22440] snd_pcm_open_substream+0xa76/0x1850 [ 1048.858953][T22440] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1048.858988][T22440] ? rcu_is_watching+0x12/0xc0 [ 1048.859039][T22440] snd_pcm_open+0x2a3/0x710 [ 1048.859082][T22440] ? __pfx_snd_pcm_open+0x10/0x10 [ 1048.859118][T22440] ? __pfx_default_wake_function+0x10/0x10 [ 1048.859179][T22440] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1048.859212][T22440] snd_pcm_capture_open+0x89/0xe0 [ 1048.859244][T22440] snd_open+0x22d/0x4c0 [ 1048.859284][T22440] ? __pfx_snd_open+0x10/0x10 [ 1048.859319][T22440] chrdev_open+0x234/0x6a0 [ 1048.859361][T22440] ? __pfx_apparmor_file_open+0x10/0x10 [ 1048.859400][T22440] ? __pfx_chrdev_open+0x10/0x10 [ 1048.859449][T22440] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1048.859504][T22440] do_dentry_open+0x6d8/0x1660 [ 1048.859548][T22440] ? __pfx_chrdev_open+0x10/0x10 [ 1048.859600][T22440] vfs_open+0x82/0x3f0 [ 1048.859638][T22440] path_openat+0x208c/0x31a0 [ 1048.859697][T22440] ? __pfx_path_openat+0x10/0x10 [ 1048.859757][T22440] do_file_open+0x20e/0x430 [ 1048.859805][T22440] ? __pfx_do_file_open+0x10/0x10 [ 1048.859876][T22440] ? alloc_fd+0x476/0x790 [ 1048.859924][T22440] ? do_getname+0x191/0x390 [ 1048.859960][T22440] do_sys_openat2+0x10d/0x1e0 [ 1048.859995][T22440] ? __pfx_do_sys_openat2+0x10/0x10 [ 1048.860033][T22440] ? __fget_files+0x21f/0x3d0 [ 1048.860093][T22440] __x64_sys_openat+0x12d/0x210 [ 1048.860129][T22440] ? __pfx___x64_sys_openat+0x10/0x10 [ 1048.860188][T22440] do_syscall_64+0x106/0xf80 [ 1048.860221][T22440] ? clear_bhb_loop+0x40/0x90 [ 1048.860259][T22440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.860289][T22440] RIP: 0033:0x7fe30419c629 [ 1048.860314][T22440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.860343][T22440] RSP: 002b:00007fe30500c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1048.860369][T22440] RAX: ffffffffffffffda RBX: 00007fe304415fa0 RCX: 00007fe30419c629 [ 1048.860386][T22440] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1048.860403][T22440] RBP: 00007fe304232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1048.860423][T22440] R10: 0000000000003f00 R11: 0000000000000246 R12: 0000000000000000 [ 1048.860442][T22440] R13: 00007fe304416038 R14: 00007fe304415fa0 R15: 00007ffd86ca80c8 [ 1048.860481][T22440] [ 1049.307715][T22331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.616435][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1049.805203][T22458] ima: policy update failed [ 1050.067030][ T29] audit: type=1807 audit(4295022199.672:640): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1050.211551][ T29] audit: type=1802 audit(4295022199.672:641): pid=22458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3409" res=0 errno=0 [ 1050.270927][ T29] audit: type=1802 audit(4295022199.682:642): pid=22458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3409" res=0 errno=0 [ 1050.448359][T15078] Bluetooth: hci6: command tx timeout [ 1050.741585][T22448] kexec: Could not allocate control_code_buffer [ 1051.173981][T22331] veth0_vlan: entered promiscuous mode [ 1051.225432][T22331] veth1_vlan: entered promiscuous mode [ 1051.327436][T15078] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1051.345200][T22331] veth0_macvtap: entered promiscuous mode [ 1051.376681][T22331] veth1_macvtap: entered promiscuous mode [ 1051.432787][T22331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.671398][T22331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.739260][T15085] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.996327][T15085] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.019719][T15085] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.051109][T15085] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.772423][T15110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.787241][T15110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.954343][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3416'. [ 1052.977491][T15074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.001267][T15074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.598895][T22476] kexec: Could not allocate control_code_buffer [ 1054.042278][T22521] ima: policy update failed [ 1054.093839][ T29] audit: type=1807 audit(4295022203.910:643): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1054.313544][ T29] audit: type=1802 audit(4295022203.910:644): pid=22521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3418" res=0 errno=0 [ 1054.506541][ T29] audit: type=1802 audit(4295022203.910:645): pid=22521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3418" res=0 errno=0 [ 1054.884813][T22531] qrtr: Invalid version 0 [ 1054.978219][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.984675][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.777151][T22537] kexec: Could not allocate control_code_buffer [ 1056.132596][T22560] FAULT_INJECTION: forcing a failure. [ 1056.132596][T22560] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.146360][T22560] CPU: 1 UID: 0 PID: 22560 Comm: syz.6.3428 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1056.146409][T22560] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1056.146422][T22560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1056.146438][T22560] Call Trace: [ 1056.146448][T22560] [ 1056.146460][T22560] dump_stack_lvl+0x100/0x190 [ 1056.146507][T22560] should_fail_ex.cold+0x5/0xa [ 1056.146540][T22560] should_failslab+0xc2/0x120 [ 1056.146582][T22560] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1056.146618][T22560] ? do_getname+0x35/0x390 [ 1056.146656][T22560] do_getname+0x35/0x390 [ 1056.146693][T22560] do_sys_openat2+0xc5/0x1e0 [ 1056.146728][T22560] ? __pfx_do_sys_openat2+0x10/0x10 [ 1056.146777][T22560] __x64_sys_openat+0x12d/0x210 [ 1056.146813][T22560] ? __pfx___x64_sys_openat+0x10/0x10 [ 1056.146863][T22560] do_syscall_64+0x106/0xf80 [ 1056.146891][T22560] ? clear_bhb_loop+0x40/0x90 [ 1056.146926][T22560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.146955][T22560] RIP: 0033:0x7fe30419c629 [ 1056.146980][T22560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.147006][T22560] RSP: 002b:00007fe30500c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1056.147032][T22560] RAX: ffffffffffffffda RBX: 00007fe304415fa0 RCX: 00007fe30419c629 [ 1056.147052][T22560] RDX: 0000000000022100 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1056.147081][T22560] RBP: 00007fe304232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1056.147098][T22560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.147116][T22560] R13: 00007fe304416038 R14: 00007fe304415fa0 R15: 00007ffd86ca80c8 [ 1056.147156][T22560] [ 1056.689336][T22563] FAULT_INJECTION: forcing a failure. [ 1056.689336][T22563] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.776652][T22563] CPU: 0 UID: 0 PID: 22563 Comm: syz.6.3428 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1056.776702][T22563] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1056.776714][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1056.776732][T22563] Call Trace: [ 1056.776742][T22563] [ 1056.776753][T22563] dump_stack_lvl+0x100/0x190 [ 1056.776816][T22563] should_fail_ex.cold+0x5/0xa [ 1056.776850][T22563] should_failslab+0xc2/0x120 [ 1056.776897][T22563] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1056.776943][T22563] ? kvm_vm_ioctl+0x390/0x4080 [ 1056.776971][T22563] ? kasan_save_stack+0x30/0x50 [ 1056.777011][T22563] ? vmx_vcpu_precreate+0xc8/0x220 [ 1056.777061][T22563] kvm_vm_ioctl+0x390/0x4080 [ 1056.777106][T22563] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1056.777157][T22563] ? tomoyo_path_number_perm+0x46d/0x580 [ 1056.777201][T22563] ? kasan_quarantine_put+0x104/0x240 [ 1056.777236][T22563] ? lockdep_hardirqs_on+0x78/0x100 [ 1056.777259][T22563] ? find_held_lock+0x2b/0x80 [ 1056.777282][T22563] ? tomoyo_path_number_perm+0x28f/0x580 [ 1056.777303][T22563] ? tomoyo_path_number_perm+0x28f/0x580 [ 1056.777328][T22563] ? tomoyo_path_number_perm+0x188/0x580 [ 1056.777351][T22563] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1056.777372][T22563] ? futex_wait+0x125/0x380 [ 1056.777399][T22563] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1056.777424][T22563] ? do_vfs_ioctl+0x226/0x13e0 [ 1056.777443][T22563] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1056.777468][T22563] ? find_held_lock+0x2b/0x80 [ 1056.777489][T22563] ? __fget_files+0x215/0x3d0 [ 1056.777510][T22563] ? hook_file_ioctl_common+0x146/0x410 [ 1056.777535][T22563] ? __fget_files+0x21f/0x3d0 [ 1056.777559][T22563] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1056.777575][T22563] __x64_sys_ioctl+0x18e/0x210 [ 1056.777595][T22563] do_syscall_64+0x106/0xf80 [ 1056.777611][T22563] ? clear_bhb_loop+0x40/0x90 [ 1056.777629][T22563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.777644][T22563] RIP: 0033:0x7fe30419c629 [ 1056.777658][T22563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.777673][T22563] RSP: 002b:00007fe304feb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1056.777689][T22563] RAX: ffffffffffffffda RBX: 00007fe304416090 RCX: 00007fe30419c629 [ 1056.777699][T22563] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1056.777709][T22563] RBP: 00007fe304232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1056.777718][T22563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.777728][T22563] R13: 00007fe304416128 R14: 00007fe304416090 R15: 00007ffd86ca80c8 [ 1056.777748][T22563] [ 1058.804524][T22606] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1059.382254][T22615] ima: policy update failed [ 1059.406230][ T29] audit: type=1807 audit(4295023232.248:646): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1059.469073][ T29] audit: type=1802 audit(4295023232.248:647): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3437" res=0 errno=0 [ 1059.543057][ T29] audit: type=1802 audit(4295023232.288:648): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3437" res=0 errno=0 [ 1059.961710][T22604] kexec: Could not allocate control_code_buffer [ 1060.286991][T22635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 1060.341329][T22636] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3443'. [ 1061.181122][T22655] ima: policy update failed [ 1061.288879][ T29] audit: type=1807 audit(4295023234.047:649): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1061.613605][ T29] audit: type=1802 audit(4295023234.047:650): pid=22655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3448" res=0 errno=0 [ 1061.766674][ T29] audit: type=1802 audit(4295023234.057:651): pid=22655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3448" res=0 errno=0 [ 1061.796852][T22662] ima: policy update failed [ 1061.873388][ T29] audit: type=1807 audit(4295023234.667:652): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1061.889659][ T29] audit: type=1802 audit(4295023234.667:653): pid=22662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3449" res=0 errno=0 [ 1061.918344][ T29] audit: type=1802 audit(4295023234.667:654): pid=22662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3449" res=0 errno=0 [ 1062.035075][T21640] block nbd6: Possible stuck request ffff888027f08000: control (read@0,4096B). Runtime 390 seconds [ 1062.308926][T22647] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1065.324728][T22692] kexec: Could not allocate control_code_buffer [ 1065.572905][T22730] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1065.959670][T22739] FAULT_INJECTION: forcing a failure. [ 1065.959670][T22739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.106956][T22739] CPU: 1 UID: 0 PID: 22739 Comm: syz.7.3461 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1066.107004][T22739] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1066.107013][T22739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1066.107027][T22739] Call Trace: [ 1066.107035][T22739] [ 1066.107047][T22739] dump_stack_lvl+0x100/0x190 [ 1066.107090][T22739] should_fail_ex.cold+0x5/0xa [ 1066.107124][T22739] _copy_to_user+0x32/0xd0 [ 1066.107164][T22739] simple_read_from_buffer+0xcb/0x170 [ 1066.107202][T22739] proc_fail_nth_read+0x1af/0x230 [ 1066.107231][T22739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1066.107261][T22739] ? rw_verify_area+0xce/0x6d0 [ 1066.107293][T22739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1066.107320][T22739] vfs_read+0x1e4/0xb30 [ 1066.107358][T22739] ? __pfx_vfs_read+0x10/0x10 [ 1066.107392][T22739] ? __fget_files+0x215/0x3d0 [ 1066.107435][T22739] ? __fget_files+0x21f/0x3d0 [ 1066.107479][T22739] ksys_read+0x12a/0x250 [ 1066.107515][T22739] ? __pfx_ksys_read+0x10/0x10 [ 1066.107546][T22739] ? set_current_groups+0x91/0xd0 [ 1066.107592][T22739] do_syscall_64+0x106/0xf80 [ 1066.107616][T22739] ? clear_bhb_loop+0x40/0x90 [ 1066.107648][T22739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.107675][T22739] RIP: 0033:0x7f47a3d5cece [ 1066.107698][T22739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1066.107723][T22739] RSP: 002b:00007f47a4baafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1066.107749][T22739] RAX: ffffffffffffffda RBX: 00007f47a4bab6c0 RCX: 00007f47a3d5cece [ 1066.107767][T22739] RDX: 000000000000000f RSI: 00007f47a4bab0a0 RDI: 0000000000000004 [ 1066.107784][T22739] RBP: 00007f47a4bab090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.107800][T22739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.107817][T22739] R13: 00007f47a4016038 R14: 00007f47a4015fa0 R15: 00007ffd94226a18 [ 1066.107853][T22739] [ 1066.967382][T15078] Bluetooth: hci2: hcon ffff8880373ac000 sent 0 < count 256 [ 1067.024441][T22757] ima: policy update failed [ 1067.260074][ T29] audit: type=1807 audit(4295023239.884:655): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1067.324861][ T29] audit: type=1802 audit(4295023239.884:656): pid=22757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3467" res=0 errno=0 [ 1067.431972][ T29] audit: type=1802 audit(4295023239.894:657): pid=22757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3467" res=0 errno=0 [ 1068.417823][T22768] netlink: 'syz.0.3469': attribute type 11 has an invalid length. [ 1069.118782][T22778] FAULT_INJECTION: forcing a failure. [ 1069.118782][T22778] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.209039][T22778] CPU: 1 UID: 0 PID: 22778 Comm: syz.1.3473 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1069.209089][T22778] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1069.209101][T22778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1069.209119][T22778] Call Trace: [ 1069.209129][T22778] [ 1069.209141][T22778] dump_stack_lvl+0x100/0x190 [ 1069.209189][T22778] should_fail_ex.cold+0x5/0xa [ 1069.209224][T22778] should_failslab+0xc2/0x120 [ 1069.209271][T22778] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1069.209313][T22778] ? __d_alloc+0x34/0xa80 [ 1069.209351][T22778] __d_alloc+0x34/0xa80 [ 1069.209385][T22778] d_alloc_pseudo+0x1c/0xc0 [ 1069.209422][T22778] alloc_file_pseudo+0xcf/0x230 [ 1069.209458][T22778] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1069.209502][T22778] __shmem_file_setup+0x221/0x490 [ 1069.209539][T22778] ? __pfx___shmem_file_setup+0x10/0x10 [ 1069.209583][T22778] ? vm_area_alloc+0x1f/0x160 [ 1069.209622][T22778] shmem_zero_setup+0x96/0x1b0 [ 1069.209667][T22778] __mmap_region+0x2198/0x29e0 [ 1069.209712][T22778] ? __pfx___mmap_region+0x10/0x10 [ 1069.209756][T22778] ? process_measurement+0x1f4/0x2350 [ 1069.209795][T22778] ? css_rstat_updated+0x1ce/0x5a0 [ 1069.209829][T22778] ? __pfx_css_rstat_updated+0x10/0x10 [ 1069.209858][T22778] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1069.209915][T22778] ? __lock_acquire+0x4a5/0x2630 [ 1069.209968][T22778] ? find_held_lock+0x2b/0x80 [ 1069.210008][T22778] ? finish_task_switch.isra.0+0x200/0xb80 [ 1069.210037][T22778] ? finish_task_switch.isra.0+0x200/0xb80 [ 1069.210080][T22778] ? trace_sched_exit_tp+0x13a/0x180 [ 1069.210112][T22778] ? __schedule+0x1000/0x60e0 [ 1069.210190][T22778] ? rcu_is_watching+0x12/0xc0 [ 1069.210233][T22778] ? cap_capable+0x107/0x460 [ 1069.210276][T22778] mmap_region+0x180/0x3e0 [ 1069.210322][T22778] do_mmap+0xc63/0x12f0 [ 1069.210359][T22778] ? __pfx_do_mmap+0x10/0x10 [ 1069.210387][T22778] ? __pfx_down_write_killable+0x10/0x10 [ 1069.210431][T22778] vm_mmap_pgoff+0x29e/0x470 [ 1069.210468][T22778] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1069.210500][T22778] ? do_futex+0x192/0x350 [ 1069.210536][T22778] ? __pfx_do_futex+0x10/0x10 [ 1069.210579][T22778] ksys_mmap_pgoff+0xe1/0x650 [ 1069.210624][T22778] ? __x64_sys_futex+0x34f/0x4d0 [ 1069.210658][T22778] ? __x64_sys_futex+0x358/0x4d0 [ 1069.210694][T22778] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1069.210751][T22778] ? xfd_validate_state+0x129/0x190 [ 1069.210801][T22778] __x64_sys_mmap+0x125/0x190 [ 1069.210846][T22778] do_syscall_64+0x106/0xf80 [ 1069.210877][T22778] ? clear_bhb_loop+0x40/0x90 [ 1069.210914][T22778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.210944][T22778] RIP: 0033:0x7fb6b1d9c629 [ 1069.210968][T22778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.210997][T22778] RSP: 002b:00007fb6b2bff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1069.211026][T22778] RAX: ffffffffffffffda RBX: 00007fb6b2015fa0 RCX: 00007fb6b1d9c629 [ 1069.211046][T22778] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 1069.211064][T22778] RBP: 00007fb6b1e32b39 R08: 0000000000000401 R09: 0000000000008000 [ 1069.211083][T22778] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1069.211101][T22778] R13: 00007fb6b2016038 R14: 00007fb6b2015fa0 R15: 00007ffe371906d8 [ 1069.211140][T22778] [ 1070.066077][T22796] FAULT_INJECTION: forcing a failure. [ 1070.066077][T22796] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.213033][T22796] CPU: 1 UID: 0 PID: 22796 Comm: syz.7.3479 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1070.213081][T22796] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1070.213092][T22796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.213109][T22796] Call Trace: [ 1070.213118][T22796] [ 1070.213129][T22796] dump_stack_lvl+0x100/0x190 [ 1070.213175][T22796] should_fail_ex.cold+0x5/0xa [ 1070.213208][T22796] should_failslab+0xc2/0x120 [ 1070.213252][T22796] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1070.213289][T22796] ? __d_alloc+0x34/0xa80 [ 1070.213326][T22796] __d_alloc+0x34/0xa80 [ 1070.213357][T22796] d_alloc_pseudo+0x1c/0xc0 [ 1070.213392][T22796] alloc_file_pseudo+0xcf/0x230 [ 1070.213426][T22796] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1070.213470][T22796] __shmem_file_setup+0x221/0x490 [ 1070.213507][T22796] ? __pfx___shmem_file_setup+0x10/0x10 [ 1070.213548][T22796] ? vm_area_alloc+0x1f/0x160 [ 1070.213586][T22796] shmem_zero_setup+0x96/0x1b0 [ 1070.213638][T22796] __mmap_region+0x2198/0x29e0 [ 1070.213681][T22796] ? __pfx___mmap_region+0x10/0x10 [ 1070.213714][T22796] ? process_measurement+0x1f4/0x2350 [ 1070.213749][T22796] ? css_rstat_updated+0x1ce/0x5a0 [ 1070.213780][T22796] ? __pfx_css_rstat_updated+0x10/0x10 [ 1070.213811][T22796] ? kvm_sched_clock_read+0x11/0x20 [ 1070.213848][T22796] ? __lock_acquire+0x4a5/0x2630 [ 1070.213899][T22796] ? find_held_lock+0x2b/0x80 [ 1070.213938][T22796] ? finish_task_switch.isra.0+0x200/0xb80 [ 1070.213966][T22796] ? finish_task_switch.isra.0+0x200/0xb80 [ 1070.214010][T22796] ? trace_sched_exit_tp+0x13a/0x180 [ 1070.214042][T22796] ? __schedule+0x1000/0x60e0 [ 1070.214118][T22796] ? rcu_is_watching+0x12/0xc0 [ 1070.214156][T22796] ? cap_capable+0x107/0x460 [ 1070.214198][T22796] mmap_region+0x180/0x3e0 [ 1070.214243][T22796] do_mmap+0xc63/0x12f0 [ 1070.214278][T22796] ? __pfx_do_mmap+0x10/0x10 [ 1070.214306][T22796] ? __pfx_down_write_killable+0x10/0x10 [ 1070.214349][T22796] vm_mmap_pgoff+0x29e/0x470 [ 1070.214384][T22796] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1070.214415][T22796] ? do_futex+0x192/0x350 [ 1070.214449][T22796] ? __pfx_do_futex+0x10/0x10 [ 1070.214490][T22796] ksys_mmap_pgoff+0xe1/0x650 [ 1070.214532][T22796] ? __x64_sys_futex+0x34f/0x4d0 [ 1070.214563][T22796] ? __x64_sys_futex+0x358/0x4d0 [ 1070.214598][T22796] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1070.214647][T22796] ? xfd_validate_state+0x129/0x190 [ 1070.214691][T22796] __x64_sys_mmap+0x125/0x190 [ 1070.214737][T22796] do_syscall_64+0x106/0xf80 [ 1070.214765][T22796] ? clear_bhb_loop+0x40/0x90 [ 1070.214798][T22796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.214825][T22796] RIP: 0033:0x7f47a3d9c629 [ 1070.214848][T22796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.214874][T22796] RSP: 002b:00007f47a4bab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1070.214899][T22796] RAX: ffffffffffffffda RBX: 00007f47a4015fa0 RCX: 00007f47a3d9c629 [ 1070.214918][T22796] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1070.214934][T22796] RBP: 00007f47a3e32b39 R08: fffffffffffffffa R09: 0000000000008000 [ 1070.214952][T22796] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1070.214968][T22796] R13: 00007f47a4016038 R14: 00007f47a4015fa0 R15: 00007ffd94226a18 [ 1070.215007][T22796] [ 1070.806513][T22810] FAULT_INJECTION: forcing a failure. [ 1070.806513][T22810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.820611][T22810] CPU: 1 UID: 0 PID: 22810 Comm: syz.6.3480 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1070.820659][T22810] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1070.820669][T22810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.820686][T22810] Call Trace: [ 1070.820695][T22810] [ 1070.820706][T22810] dump_stack_lvl+0x100/0x190 [ 1070.820756][T22810] should_fail_ex.cold+0x5/0xa [ 1070.820788][T22810] _copy_from_user+0x2e/0xd0 [ 1070.820828][T22810] kstrtouint_from_user+0xd6/0x1d0 [ 1070.820861][T22810] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1070.820892][T22810] ? __lock_acquire+0x4a5/0x2630 [ 1070.820928][T22810] ? ocfs2_write_begin_nolock+0x4f60/0x6c50 [ 1070.820970][T22810] proc_fail_nth_write+0x83/0x220 [ 1070.821002][T22810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1070.821043][T22810] vfs_write+0x2aa/0x1070 [ 1070.821084][T22810] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1070.821119][T22810] ? __pfx_vfs_write+0x10/0x10 [ 1070.821176][T22810] ? __pfx___might_resched+0x10/0x10 [ 1070.821218][T22810] ksys_write+0x12a/0x250 [ 1070.821257][T22810] ? __pfx_ksys_write+0x10/0x10 [ 1070.821308][T22810] do_syscall_64+0x106/0xf80 [ 1070.821338][T22810] ? clear_bhb_loop+0x40/0x90 [ 1070.821374][T22810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.821402][T22810] RIP: 0033:0x7fe30415cece [ 1070.821427][T22810] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1070.821454][T22810] RSP: 002b:00007fe304feafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1070.821481][T22810] RAX: ffffffffffffffda RBX: 00007fe304feb6c0 RCX: 00007fe30415cece [ 1070.821500][T22810] RDX: 0000000000000001 RSI: 00007fe304feb0a0 RDI: 0000000000000001 [ 1070.821517][T22810] RBP: 00007fe304feb090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.821535][T22810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1070.821552][T22810] R13: 00007fe304416128 R14: 00007fe304416090 R15: 00007ffd86ca80c8 [ 1070.821591][T22810] [ 1071.497962][T22818] FAULT_INJECTION: forcing a failure. [ 1071.497962][T22818] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.525943][T22818] CPU: 0 UID: 0 PID: 22818 Comm: syz.6.3482 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1071.525989][T22818] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1071.525999][T22818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1071.526016][T22818] Call Trace: [ 1071.526025][T22818] [ 1071.526036][T22818] dump_stack_lvl+0x100/0x190 [ 1071.526080][T22818] should_fail_ex.cold+0x5/0xa [ 1071.526111][T22818] ? iter_file_splice_write+0x1d3/0x10a0 [ 1071.526155][T22818] should_failslab+0xc2/0x120 [ 1071.526197][T22818] __kmalloc_noprof+0xe0/0x850 [ 1071.526242][T22818] iter_file_splice_write+0x1d3/0x10a0 [ 1071.526283][T22818] ? lockdep_hardirqs_on+0x78/0x100 [ 1071.526318][T22818] ? copy_splice_read+0x734/0xb90 [ 1071.526355][T22818] ? kfree+0x1f6/0x6b0 [ 1071.526393][T22818] ? copy_splice_read+0x739/0xb90 [ 1071.526432][T22818] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1071.526491][T22818] ? __pfx_copy_splice_read+0x10/0x10 [ 1071.526534][T22818] ? look_up_lock_class+0x55/0x120 [ 1071.526575][T22818] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1071.526616][T22818] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1071.526662][T22818] direct_splice_actor+0x192/0x6c0 [ 1071.526707][T22818] splice_direct_to_actor+0x345/0xa30 [ 1071.526750][T22818] ? __pfx_direct_splice_actor+0x10/0x10 [ 1071.526798][T22818] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1071.526849][T22818] do_splice_direct+0x174/0x240 [ 1071.526891][T22818] ? __pfx_do_splice_direct+0x10/0x10 [ 1071.526929][T22818] ? common_file_perm+0x1ab/0x4f0 [ 1071.526970][T22818] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1071.527012][T22818] ? bpf_lsm_file_permission+0x9/0x10 [ 1071.527051][T22818] ? security_file_permission+0x76/0x210 [ 1071.527095][T22818] ? rw_verify_area+0xce/0x6d0 [ 1071.527135][T22818] do_sendfile+0xadc/0xe20 [ 1071.527181][T22818] ? __pfx_do_sendfile+0x10/0x10 [ 1071.527220][T22818] ? __fget_files+0x21f/0x3d0 [ 1071.527269][T22818] __x64_sys_sendfile64+0x1d8/0x220 [ 1071.527298][T22818] ? ksys_write+0x1ac/0x250 [ 1071.527338][T22818] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1071.527379][T22818] do_syscall_64+0x106/0xf80 [ 1071.527409][T22818] ? clear_bhb_loop+0x40/0x90 [ 1071.527443][T22818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.527474][T22818] RIP: 0033:0x7fe30419c629 [ 1071.527494][T22818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.527519][T22818] RSP: 002b:00007fe304feb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1071.527543][T22818] RAX: ffffffffffffffda RBX: 00007fe304416090 RCX: 00007fe30419c629 [ 1071.527560][T22818] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1071.527574][T22818] RBP: 00007fe304feb090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.527590][T22818] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000002 [ 1071.527606][T22818] R13: 00007fe304416128 R14: 00007fe304416090 R15: 00007ffd86ca80c8 [ 1071.527639][T22818] [ 1071.925389][T22831] ima: policy update failed [ 1071.931943][ T29] audit: type=1807 audit(4295023244.781:658): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1072.263389][ T29] audit: type=1802 audit(4295023244.781:659): pid=22831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3485" res=0 errno=0 [ 1072.281247][ T29] audit: type=1802 audit(4295023244.791:660): pid=22831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3485" res=0 errno=0 [ 1072.909905][T15078] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1072.911356][T22848] ERROR: Out of memory at tomoyo_memory_ok. [ 1072.923257][T15078] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1073.562732][T22855] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1074.801601][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1075.455099][T22871] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078800000 pfn:0x78800 [ 1075.465683][T22871] memcg:ffff888036077d02 [ 1075.494119][T22871] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1075.513907][T22871] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1075.529248][T22871] raw: ffff888078800000 0000000000000000 00000001ffffffff ffff888036077d02 [ 1075.538776][T22871] page dumped because: unmovable page [ 1075.577823][T22871] page_owner tracks the page as allocated [ 1075.599085][T22909] ima: policy update failed [ 1075.678619][T22871] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 22863, tgid 22863 (syz.6.3496), ts 1073995994351, free_ts 1073852738325 [ 1075.693979][ T29] audit: type=1807 audit(4295023248.460:661): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1075.749260][T15127] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1075.756716][T15127] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1075.769546][ T29] audit: type=1802 audit(4295023248.460:662): pid=22909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.7.3503" res=0 errno=0 [ 1075.788943][ T29] audit: type=1802 audit(4295023248.470:663): pid=22909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3503" res=0 errno=0 [ 1076.082044][T22871] post_alloc_hook+0x153/0x170 [ 1076.086874][T22871] get_page_from_freelist+0x111d/0x3140 [ 1076.120379][T22871] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1076.147064][T22871] alloc_pages_mpol+0x1fb/0x550 [ 1076.154341][T22871] alloc_pages_noprof+0x131/0x390 [ 1076.160923][T22871] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 1076.177330][T22871] __vmalloc_node_noprof+0xad/0xf0 [ 1076.201142][T22871] copy_process+0x5ec/0x7a10 [ 1076.221491][T22871] kernel_clone+0xfc/0x9a0 [ 1076.226466][T22871] __do_sys_clone3+0x214/0x290 [ 1076.231614][T22871] do_syscall_64+0x106/0xf80 [ 1076.254142][T22871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.266159][T22871] page last free pid 15890 tgid 15890 stack trace: [ 1076.318711][T22871] __free_frozen_pages+0x7e1/0x10d0 [ 1076.324357][T22871] rhashtable_free_and_destroy+0x16c/0x9b0 [ 1076.330343][T22871] ila_xlat_exit_net+0x59/0xa0 [ 1076.336821][T22871] ops_undo_list+0x2ee/0xab0 [ 1076.342939][T22871] cleanup_net+0x499/0x920 [ 1076.348471][T22871] process_one_work+0x9d7/0x1920 [ 1076.353752][T22871] worker_thread+0x5da/0xe40 [ 1076.358403][T22871] kthread+0x370/0x450 [ 1076.382142][T22871] ret_from_fork+0x754/0xd80 [ 1076.387398][T22871] ret_from_fork_asm+0x1a/0x30 [ 1077.326827][T22875] kexec: Could not allocate control_code_buffer [ 1077.778376][T22924] [U] [ 1077.781823][T22924] [U] [ 1077.784527][T22924] [U] [ 1077.787238][T22924] [U] [ 1077.853542][T22924] [U] [ 1077.856375][T22924] [U] [ 1077.859087][T22924] [U] [ 1077.861835][T22924] [U] [ 1077.903571][T22924] [U] [ 1077.906305][T22924] [U] [ 1077.908985][T22924] [U] [ 1077.911697][T22924] [U] [ 1077.952527][T22924] [U] [ 1077.955256][T22924] [U] [ 1077.957935][T22924] [U] [ 1077.960626][T22924] [U] [ 1077.973461][T22924] [U] [ 1077.976202][T22924] [U] [ 1077.978913][T22924] [U] [ 1077.981622][T22924] [U] [ 1078.133550][T22924] [U] [ 1078.136259][T22924] [U] [ 1078.138934][T22924] [U] [ 1078.141605][T22924] [U] [ 1078.272369][T22924] [U] [ 1078.275108][T22924] [U] [ 1078.277806][T22924] [U] [ 1078.280505][T22924] [U] [ 1078.341103][T22924] [U] [ 1078.343814][T22924] [U] [ 1078.346504][T22924] [U] [ 1078.349179][T22924] [U] [ 1078.451109][T22924] [U] [ 1078.453867][T22924] [U] [ 1078.456583][T22924] [U] [ 1078.459453][T22924] [U] [ 1078.502087][T22924] [U] [ 1078.504797][T22924] [U] [ 1078.507473][T22924] [U] [ 1078.510146][T22924] [U] [ 1078.534769][T22924] [U] [ 1078.537538][T22924] [U] [ 1078.540260][T22924] [U] [ 1078.542966][T22924] [U] [ 1078.557945][T22924] [U] [ 1078.560713][T22924] [U] [ 1078.563433][T22924] [U] [ 1078.566142][T22924] [U] [ 1078.638351][T22961] ima: policy update failed [ 1078.689215][ T29] audit: type=1807 audit(4295023251.498:664): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1078.704740][T22924] [U] [ 1078.707463][T22924] [U] [ 1078.710167][T22924] [U] [ 1078.712869][T22924] [U] [ 1078.722319][ T29] audit: type=1802 audit(4295023251.498:665): pid=22961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3514" res=0 errno=0 [ 1078.917501][ T29] audit: type=1802 audit(4295023251.498:666): pid=22961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3514" res=0 errno=0 [ 1079.000164][T22924] [U] [ 1079.002912][T22924] [U] [ 1079.005625][T22924] [U] [ 1079.008321][T22924] [U] [ 1079.235609][T22924] [U] [ 1079.238522][T22924] [U] [ 1079.241194][T22924] [U] [ 1079.243863][T22924] [U] [ 1079.351650][T22924] [U] [ 1079.354364][T22924] [U] [ 1079.357065][T22924] [U] [ 1079.359735][T22924] [U] [ 1079.564611][T22924] [U] [ 1079.567348][T22924] [U] [ 1079.570023][T22924] [U] [ 1079.572695][T22924] [U] [ 1079.644668][T22968] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 1079.675564][T22968] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1079.690382][T22924] [U] [ 1079.693130][T22924] [U] [ 1079.695840][T22924] [U] [ 1079.698546][T22924] [U] [ 1079.748601][T22968] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1079.776684][T22968] page_type: f5(slab) [ 1079.844788][T22924] [U] [ 1079.847500][T22924] [U] [ 1079.850172][T22924] [U] [ 1079.852841][T22924] [U] [ 1079.858203][T22968] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1079.873927][T22968] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1079.882618][T22968] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1079.914393][T22968] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1079.923607][T22968] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 1079.934601][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3517'. [ 1079.940923][T22968] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1079.982847][T22968] page dumped because: unmovable page [ 1079.998691][T22968] page_owner tracks the page as allocated [ 1080.009566][T22968] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15890, tgid 15890 (kworker/u10:6), ts 1079481794904, free_ts 1076788526477 [ 1080.024428][T22924] [U] [ 1080.033750][T22924] [U] [ 1080.036434][T22924] [U] [ 1080.039104][T22924] [U] [ 1080.044365][T22968] post_alloc_hook+0x153/0x170 [ 1080.049928][T22968] get_page_from_freelist+0x111d/0x3140 [ 1080.083950][T22968] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1080.094306][T22968] alloc_pages_mpol+0x1fb/0x550 [ 1080.164002][T22968] new_slab+0x43a/0x6d0 [ 1080.168244][T22968] ___slab_alloc+0x2a0/0x850 [ 1080.172870][T22968] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 1080.214221][T22924] [U] [ 1080.216968][T22924] [U] [ 1080.219744][T22924] [U] [ 1080.222448][T22924] [U] [ 1080.228330][T22968] kmalloc_reserve+0xe8/0x350 [ 1080.233067][T22968] __alloc_skb+0x185/0x710 [ 1080.264763][T22968] nsim_dev_trap_report_work+0x2af/0xd10 [ 1080.298839][T22968] process_one_work+0x9d7/0x1920 [ 1080.310212][T22924] [U] [ 1080.312951][T22924] [U] [ 1080.315671][T22924] [U] [ 1080.318379][T22924] [U] [ 1080.321931][T22968] worker_thread+0x5da/0xe40 [ 1080.326827][T22968] kthread+0x370/0x450 [ 1080.330940][T22968] ret_from_fork+0x754/0xd80 [ 1080.332748][T22964] kexec: Could not allocate control_code_buffer [ 1080.364141][T15078] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1080.384428][T22968] ret_from_fork_asm+0x1a/0x30 [ 1080.389246][T22968] page last free pid 14200 tgid 14200 stack trace: [ 1080.414156][T22968] __free_frozen_pages+0x7e1/0x10d0 [ 1080.434218][T22968] vfree.part.0+0x12b/0x9d0 [ 1080.444597][T22968] delayed_vfree_work+0x8e/0xd0 [ 1080.459929][T22968] process_one_work+0x9d7/0x1920 [ 1080.469845][T22968] worker_thread+0x5da/0xe40 [ 1080.479654][T22968] kthread+0x370/0x450 [ 1080.496437][T22968] ret_from_fork+0x754/0xd80 [ 1080.509013][T22968] ret_from_fork_asm+0x1a/0x30 [ 1080.519666][T22922] [U] [ 1081.744824][T23013] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1081.778030][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1081.929114][T23013] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1082.011488][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1082.062778][T23017] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1082.068225][T23013] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1082.082637][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1082.093162][T23013] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1082.171997][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1082.903835][T23042] ima: policy update failed [ 1082.935396][ T29] audit: type=1807 audit(4295023255.756:667): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1083.007265][ T29] audit: type=1802 audit(4295023255.756:668): pid=23042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3532" res=0 errno=0 [ 1083.072010][ T29] audit: type=1802 audit(4295023255.766:669): pid=23042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3532" res=0 errno=0 [ 1083.330462][T23046] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 1083.362451][T23046] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1083.439677][T23046] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1083.447756][T23046] page_type: f5(slab) [ 1083.467378][T23046] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1083.540876][T23046] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1083.761113][T23046] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1083.842433][T23046] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1083.873473][T23046] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 1083.930976][T23046] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1083.992302][T23046] page dumped because: unmovable page [ 1084.045461][T23046] page_owner tracks the page as allocated [ 1084.066048][T23046] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15890, tgid 15890 (kworker/u10:6), ts 1079481794904, free_ts 1076788526477 [ 1084.102107][T23046] post_alloc_hook+0x153/0x170 [ 1084.129072][T23060] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1084.166695][T23046] get_page_from_freelist+0x111d/0x3140 [ 1084.172315][T23046] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1084.220359][T23046] alloc_pages_mpol+0x1fb/0x550 [ 1084.277744][T23046] new_slab+0x43a/0x6d0 [ 1084.317960][T23046] ___slab_alloc+0x2a0/0x850 [ 1084.323246][T23060] CIFS mount error: No usable UNC path provided in device string! [ 1084.323246][T23060] [ 1084.354539][T23060] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1084.363648][T23046] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 1084.382309][T23046] kmalloc_reserve+0xe8/0x350 [ 1084.411510][T23046] __alloc_skb+0x185/0x710 [ 1084.432153][T23046] nsim_dev_trap_report_work+0x2af/0xd10 [ 1084.451535][T23046] process_one_work+0x9d7/0x1920 [ 1084.477520][T23046] worker_thread+0x5da/0xe40 [ 1084.487650][T23046] kthread+0x370/0x450 [ 1084.491785][T23046] ret_from_fork+0x754/0xd80 [ 1084.494081][T23037] kexec: Could not allocate control_code_buffer [ 1084.549289][T23046] ret_from_fork_asm+0x1a/0x30 [ 1084.574688][T23046] page last free pid 14200 tgid 14200 stack trace: [ 1084.585452][T23046] __free_frozen_pages+0x7e1/0x10d0 [ 1084.606259][T23046] vfree.part.0+0x12b/0x9d0 [ 1084.610896][T23046] delayed_vfree_work+0x8e/0xd0 [ 1084.615834][T23046] process_one_work+0x9d7/0x1920 [ 1084.621765][T23046] worker_thread+0x5da/0xe40 [ 1084.626794][T23046] kthread+0x370/0x450 [ 1084.630867][T23046] ret_from_fork+0x754/0xd80 [ 1084.642394][T23046] ret_from_fork_asm+0x1a/0x30 [ 1084.900883][T23071] FAULT_INJECTION: forcing a failure. [ 1084.900883][T23071] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.934959][T23071] CPU: 1 UID: 0 PID: 23071 Comm: syz.7.3540 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1084.935013][T23071] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1084.935025][T23071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1084.935044][T23071] Call Trace: [ 1084.935055][T23071] [ 1084.935067][T23071] dump_stack_lvl+0x100/0x190 [ 1084.935117][T23071] should_fail_ex.cold+0x5/0xa [ 1084.935150][T23071] ? binder_open+0x146/0xdd0 [ 1084.935180][T23071] should_failslab+0xc2/0x120 [ 1084.935229][T23071] __kmalloc_noprof+0xe0/0x850 [ 1084.935278][T23071] binder_open+0x146/0xdd0 [ 1084.935311][T23071] ? __pfx_apparmor_file_open+0x10/0x10 [ 1084.935351][T23071] ? __pfx_binder_open+0x10/0x10 [ 1084.935384][T23071] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1084.935449][T23071] do_dentry_open+0x6d8/0x1660 [ 1084.935496][T23071] ? __pfx_binder_open+0x10/0x10 [ 1084.935537][T23071] vfs_open+0x82/0x3f0 [ 1084.935575][T23071] path_openat+0x208c/0x31a0 [ 1084.935633][T23071] ? __pfx_path_openat+0x10/0x10 [ 1084.935694][T23071] do_file_open+0x20e/0x430 [ 1084.935743][T23071] ? __pfx_do_file_open+0x10/0x10 [ 1084.935818][T23071] ? alloc_fd+0x476/0x790 [ 1084.935868][T23071] ? do_getname+0x191/0x390 [ 1084.935905][T23071] do_sys_openat2+0x10d/0x1e0 [ 1084.935941][T23071] ? __pfx_do_sys_openat2+0x10/0x10 [ 1084.935979][T23071] ? __fget_files+0x21f/0x3d0 [ 1084.936031][T23071] __x64_sys_openat+0x12d/0x210 [ 1084.936069][T23071] ? __pfx___x64_sys_openat+0x10/0x10 [ 1084.936120][T23071] do_syscall_64+0x106/0xf80 [ 1084.936150][T23071] ? clear_bhb_loop+0x40/0x90 [ 1084.936188][T23071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.936218][T23071] RIP: 0033:0x7f47a3d9c629 [ 1084.936247][T23071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.936275][T23071] RSP: 002b:00007f47a4bab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1084.936302][T23071] RAX: ffffffffffffffda RBX: 00007f47a4015fa0 RCX: 00007f47a3d9c629 [ 1084.936320][T23071] RDX: 0000000000062000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1084.936338][T23071] RBP: 00007f47a3e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1084.936353][T23071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.936368][T23071] R13: 00007f47a4016038 R14: 00007f47a4015fa0 R15: 00007ffd94226a18 [ 1084.936409][T23071] [ 1084.996038][T15078] Bluetooth: hci1: hcon ffff888044ffc000 sent 0 < count 256 [ 1085.267325][T23078] FAULT_INJECTION: forcing a failure. [ 1085.267325][T23078] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.342200][T23078] CPU: 1 UID: 0 PID: 23078 Comm: syz.0.3542 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1085.342254][T23078] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1085.342267][T23078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1085.342285][T23078] Call Trace: [ 1085.342295][T23078] [ 1085.342306][T23078] dump_stack_lvl+0x100/0x190 [ 1085.342357][T23078] should_fail_ex.cold+0x5/0xa [ 1085.342392][T23078] should_failslab+0xc2/0x120 [ 1085.342441][T23078] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1085.342483][T23078] ? __kernfs_new_node+0xd2/0x960 [ 1085.342520][T23078] ? kstrdup+0xb3/0xe0 [ 1085.342568][T23078] __kernfs_new_node+0xd2/0x960 [ 1085.342604][T23078] ? __kernel_text_address+0xd/0x30 [ 1085.342647][T23078] ? arch_stack_walk+0xa6/0xf0 [ 1085.342675][T23078] ? __pfx___kernfs_new_node+0x10/0x10 [ 1085.342724][T23078] ? find_held_lock+0x2b/0x80 [ 1085.342770][T23078] ? kernfs_root+0xee/0x2a0 [ 1085.342806][T23078] ? kernfs_root+0xee/0x2a0 [ 1085.342851][T23078] kernfs_new_node+0x11b/0x1a0 [ 1085.342899][T23078] kernfs_create_dir_ns+0x4c/0x1a0 [ 1085.342947][T23078] sysfs_create_dir_ns+0x13a/0x2b0 [ 1085.342986][T23078] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1085.343021][T23078] ? find_held_lock+0x2b/0x80 [ 1085.343072][T23078] ? kobject_add_internal+0x25f/0x930 [ 1085.343111][T23078] ? kobject_add_internal+0x25f/0x930 [ 1085.343153][T23078] ? class_dir_child_ns_type+0xd/0x60 [ 1085.343202][T23078] kobject_add_internal+0x2c8/0x930 [ 1085.343251][T23078] kobject_add+0x16a/0x1e0 [ 1085.343289][T23078] ? __pfx_kobject_add+0x10/0x10 [ 1085.343334][T23078] ? kobject_put+0xb9/0x640 [ 1085.343380][T23078] device_add+0x294/0x1950 [ 1085.343425][T23078] ? alloc_workqueue_noprof+0x192/0x200 [ 1085.343458][T23078] ? alloc_workqueue_noprof+0x198/0x200 [ 1085.343492][T23078] ? __pfx_device_add+0x10/0x10 [ 1085.343552][T23078] nfc_register_device+0x41/0x3e0 [ 1085.343588][T23078] nci_register_device+0x7f1/0xb80 [ 1085.343634][T23078] ? __pfx_nci_register_device+0x10/0x10 [ 1085.343684][T23078] ? lockdep_init_map_type+0x5c/0x250 [ 1085.343729][T23078] virtual_ncidev_open+0x141/0x220 [ 1085.343761][T23078] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1085.343790][T23078] misc_open+0x26d/0x450 [ 1085.343834][T23078] ? __pfx_misc_open+0x10/0x10 [ 1085.343877][T23078] chrdev_open+0x234/0x6a0 [ 1085.343923][T23078] ? __pfx_apparmor_file_open+0x10/0x10 [ 1085.343963][T23078] ? __pfx_chrdev_open+0x10/0x10 [ 1085.344011][T23078] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1085.344075][T23078] do_dentry_open+0x6d8/0x1660 [ 1085.344119][T23078] ? __pfx_chrdev_open+0x10/0x10 [ 1085.344175][T23078] vfs_open+0x82/0x3f0 [ 1085.344215][T23078] path_openat+0x208c/0x31a0 [ 1085.344274][T23078] ? __pfx_path_openat+0x10/0x10 [ 1085.344335][T23078] do_file_open+0x20e/0x430 [ 1085.344385][T23078] ? __pfx_do_file_open+0x10/0x10 [ 1085.344462][T23078] ? alloc_fd+0x476/0x790 [ 1085.344512][T23078] ? do_getname+0x191/0x390 [ 1085.344558][T23078] do_sys_openat2+0x10d/0x1e0 [ 1085.344594][T23078] ? __pfx_do_sys_openat2+0x10/0x10 [ 1085.344646][T23078] __x64_sys_openat+0x12d/0x210 [ 1085.344684][T23078] ? __pfx___x64_sys_openat+0x10/0x10 [ 1085.344738][T23078] do_syscall_64+0x106/0xf80 [ 1085.344768][T23078] ? clear_bhb_loop+0x40/0x90 [ 1085.344806][T23078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.344836][T23078] RIP: 0033:0x7fcf5c79c629 [ 1085.344862][T23078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.344891][T23078] RSP: 002b:00007fcf5d6c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1085.344918][T23078] RAX: ffffffffffffffda RBX: 00007fcf5ca15fa0 RCX: 00007fcf5c79c629 [ 1085.344938][T23078] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1085.344957][T23078] RBP: 00007fcf5c832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1085.344975][T23078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.344993][T23078] R13: 00007fcf5ca16038 R14: 00007fcf5ca15fa0 R15: 00007ffdc8d857f8 [ 1085.345034][T23078] [ 1085.346253][T23078] kobject: kobject_add_internal failed for nfc2 (error: -12 parent: nfc) [ 1086.108612][T23105] ima: policy update failed [ 1086.118217][ T29] audit: type=1807 audit(4295023258.964:670): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1086.156484][ T29] audit: type=1802 audit(4295023258.964:671): pid=23105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.7.3546" res=0 errno=0 [ 1086.244594][T23109] ima: policy update failed [ 1086.539591][ T29] audit: type=1802 audit(4295023258.964:672): pid=23105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3546" res=0 errno=0 [ 1086.767608][ T29] audit: type=1807 audit(4295023259.094:673): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1086.795877][ T29] audit: type=1802 audit(4295023259.094:674): pid=23109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.3547" res=0 errno=0 [ 1086.878939][ T29] audit: type=1802 audit(4295023259.104:675): pid=23109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3547" res=0 errno=0 [ 1087.547584][T23128] __nla_validate_parse: 124 callbacks suppressed [ 1087.547608][T23128] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3553'. [ 1087.789671][T15127] Bluetooth: hci2: command 0x0406 tx timeout [ 1087.825515][T23117] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 1087.918921][T23117] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1088.019531][T23117] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1088.077444][T23117] page_type: f5(slab) [ 1088.083556][T23117] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1088.098306][T15078] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1088.105972][T23117] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1088.120335][T23117] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1088.135999][T23117] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1088.178551][T23117] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 1088.200578][T23117] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1088.228574][T23117] page dumped because: unmovable page [ 1088.243948][T23117] page_owner tracks the page as allocated [ 1088.269749][T23117] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15890, tgid 15890 (kworker/u10:6), ts 1079481794904, free_ts 1076788526477 [ 1088.357217][T23117] post_alloc_hook+0x153/0x170 [ 1088.375289][T23117] get_page_from_freelist+0x111d/0x3140 [ 1088.400776][T23117] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1088.414475][T23117] alloc_pages_mpol+0x1fb/0x550 [ 1088.437892][T23117] new_slab+0x43a/0x6d0 [ 1088.448243][T23117] ___slab_alloc+0x2a0/0x850 [ 1088.492523][T23117] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 1088.538169][T23117] kmalloc_reserve+0xe8/0x350 [ 1088.568168][T23117] __alloc_skb+0x185/0x710 [ 1088.572645][T23117] nsim_dev_trap_report_work+0x2af/0xd10 [ 1088.603936][T23144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 1088.626583][T23117] process_one_work+0x9d7/0x1920 [ 1088.638252][T23117] worker_thread+0x5da/0xe40 [ 1088.642907][T23117] kthread+0x370/0x450 [ 1088.669807][T23117] ret_from_fork+0x754/0xd80 [ 1088.678588][T23117] ret_from_fork_asm+0x1a/0x30 [ 1088.683407][T23117] page last free pid 14200 tgid 14200 stack trace: [ 1088.732102][T23117] __free_frozen_pages+0x7e1/0x10d0 [ 1088.737368][T23117] vfree.part.0+0x12b/0x9d0 [ 1088.749719][T23153] ERROR: Out of memory at tomoyo_memory_ok. [ 1088.766984][T23117] delayed_vfree_work+0x8e/0xd0 [ 1088.788741][T23117] process_one_work+0x9d7/0x1920 [ 1088.793757][T23117] worker_thread+0x5da/0xe40 [ 1088.835284][T23117] kthread+0x370/0x450 [ 1088.838150][T23119] kexec: Could not allocate control_code_buffer [ 1088.859036][T15078] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1088.867481][T15078] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1088.898414][T23117] ret_from_fork+0x754/0xd80 [ 1088.908551][T23117] ret_from_fork_asm+0x1a/0x30 [ 1089.289091][T23163] ima: policy update failed [ 1089.293256][ T29] audit: type=1807 audit(4295023262.143:676): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1089.313582][T23164] ima: policy update failed [ 1089.405446][ T29] audit: type=1802 audit(4295023262.143:677): pid=23163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.7.3561" res=0 errno=0 [ 1089.405511][ T29] audit: type=1802 audit(4295023262.143:678): pid=23163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3561" res=0 errno=0 [ 1089.405563][ T29] audit: type=1807 audit(4295023262.163:679): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1090.956349][T23186] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3565'. [ 1091.006834][T23183] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3565'. [ 1091.141641][T23186] netlink: 210 bytes leftover after parsing attributes in process `syz.7.3565'. [ 1091.158681][T23176] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78800 [ 1091.408155][T23176] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1091.475663][T15127] Bluetooth: hci2: hcon ffff8880373ac000 sent 0 < count 256 [ 1091.507602][T23176] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1091.539808][T23176] page_type: f5(slab) [ 1091.543849][T23176] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1091.554831][T23176] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1091.576720][T23176] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1091.600106][T23176] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1091.610364][T23176] head: 00fff00000000003 ffffea0001e20001 00000000ffffffff 00000000ffffffff [ 1091.620205][T23176] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1091.629834][T23176] page dumped because: unmovable page [ 1091.636487][T23176] page_owner tracks the page as allocated [ 1091.642351][T23176] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15890, tgid 15890 (kworker/u10:6), ts 1079481794904, free_ts 1076788526477 [ 1091.742382][T23176] post_alloc_hook+0x153/0x170 [ 1091.747221][T23176] get_page_from_freelist+0x111d/0x3140 [ 1091.829907][T23176] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1091.911765][T23176] alloc_pages_mpol+0x1fb/0x550 [ 1091.929862][T23176] new_slab+0x43a/0x6d0 [ 1092.111686][T21640] block nbd6: Possible stuck request ffff888027f08000: control (read@0,4096B). Runtime 420 seconds [ 1092.122812][T23176] ___slab_alloc+0x2a0/0x850 [ 1092.127453][T23176] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 1092.198883][T23176] kmalloc_reserve+0xe8/0x350 [ 1092.217445][T23176] __alloc_skb+0x185/0x710 [ 1092.268664][T23176] nsim_dev_trap_report_work+0x2af/0xd10 [ 1092.291671][T23176] process_one_work+0x9d7/0x1920 [ 1092.319783][T23176] worker_thread+0x5da/0xe40 [ 1092.369835][T23176] kthread+0x370/0x450 [ 1092.400123][T23176] ret_from_fork+0x754/0xd80 [ 1092.421811][T23176] ret_from_fork_asm+0x1a/0x30 [ 1092.426656][T23176] page last free pid 14200 tgid 14200 stack trace: [ 1092.470310][T23176] __free_frozen_pages+0x7e1/0x10d0 [ 1092.475593][T23176] vfree.part.0+0x12b/0x9d0 [ 1092.556674][T23224] ima: policy update failed [ 1092.579444][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1092.579466][ T29] audit: type=1807 audit(4295023265.401:682): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1092.606459][T23225] ima: policy update failed [ 1092.633852][T23176] delayed_vfree_work+0x8e/0xd0 [ 1092.638774][T23176] process_one_work+0x9d7/0x1920 [ 1092.665155][ T29] audit: type=1802 audit(4295023265.401:683): pid=23224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3573" res=0 errno=0 [ 1092.683336][T23176] worker_thread+0x5da/0xe40 [ 1092.688012][T23176] kthread+0x370/0x450 [ 1092.698881][T23176] ret_from_fork+0x754/0xd80 [ 1092.740370][T23176] ret_from_fork_asm+0x1a/0x30 [ 1092.764228][ T29] audit: type=1802 audit(4295023265.411:684): pid=23224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3573" res=0 errno=0 [ 1092.788393][ T29] audit: type=1807 audit(4295023265.451:685): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1092.805411][ T29] audit: type=1802 audit(4295023265.451:686): pid=23225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3572" res=0 errno=0 [ 1092.825567][ T29] audit: type=1802 audit(4295023265.461:687): pid=23225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3572" res=0 errno=0 [ 1093.309458][T23227] ERROR: Out of memory at tomoyo_memory_ok. [ 1093.326734][T15127] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 1094.073881][T23172] kexec: Could not allocate control_code_buffer [ 1095.296233][T15078] Bluetooth: hci0: unexpected event 0x09 length: 435 > 3 [ 1095.460176][T15078] Bluetooth: hci6: hcon ffff8880673e0000 sent 1 < count 256 [ 1095.641268][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1096.427304][T23283] ima: policy update failed [ 1096.454739][ T29] audit: type=1807 audit(4295023269.279:688): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1096.536536][T23285] FAULT_INJECTION: forcing a failure. [ 1096.536536][T23285] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.624189][T23285] CPU: 1 UID: 0 PID: 23285 Comm: syz.0.3585 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1096.624229][T23285] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1096.624235][T23285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1096.624245][T23285] Call Trace: [ 1096.624251][T23285] [ 1096.624258][T23285] dump_stack_lvl+0x100/0x190 [ 1096.624285][T23285] should_fail_ex.cold+0x5/0xa [ 1096.624302][T23285] ? __netif_set_xps_queue+0x8a3/0x2340 [ 1096.624318][T23285] should_failslab+0xc2/0x120 [ 1096.624342][T23285] __kmalloc_noprof+0xe0/0x850 [ 1096.624367][T23285] __netif_set_xps_queue+0x8a3/0x2340 [ 1096.624395][T23285] netif_set_xps_queue+0x2a/0x40 [ 1096.624412][T23285] xps_cpus_store+0x279/0x320 [ 1096.624437][T23285] ? __pfx_xps_cpus_store+0x10/0x10 [ 1096.624460][T23285] ? find_held_lock+0x2b/0x80 [ 1096.624483][T23285] ? sysfs_file_kobj+0xe4/0x290 [ 1096.624502][T23285] ? __pfx_xps_cpus_store+0x10/0x10 [ 1096.624523][T23285] netdev_queue_attr_store+0x61/0x90 [ 1096.624542][T23285] ? __pfx_netdev_queue_attr_store+0x10/0x10 [ 1096.624561][T23285] sysfs_kf_write+0xf2/0x150 [ 1096.624579][T23285] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1096.624603][T23285] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1096.624621][T23285] vfs_write+0x6ac/0x1070 [ 1096.624644][T23285] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1096.624669][T23285] ? __pfx_vfs_write+0x10/0x10 [ 1096.624704][T23285] ksys_write+0x12a/0x250 [ 1096.624725][T23285] ? __pfx_ksys_write+0x10/0x10 [ 1096.624756][T23285] do_syscall_64+0x106/0xf80 [ 1096.624772][T23285] ? clear_bhb_loop+0x40/0x90 [ 1096.624791][T23285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.624806][T23285] RIP: 0033:0x7fcf5c79c629 [ 1096.624820][T23285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.624834][T23285] RSP: 002b:00007fcf5d6c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1096.624849][T23285] RAX: ffffffffffffffda RBX: 00007fcf5ca15fa0 RCX: 00007fcf5c79c629 [ 1096.624860][T23285] RDX: 000000000000000f RSI: 0000200000000400 RDI: 0000000000000003 [ 1096.624869][T23285] RBP: 00007fcf5d6c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.624878][T23285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.624886][T23285] R13: 00007fcf5ca16038 R14: 00007fcf5ca15fa0 R15: 00007ffdc8d857f8 [ 1096.624907][T23285] [ 1096.924470][ T29] audit: type=1802 audit(4295023269.279:689): pid=23283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3584" res=0 errno=0 [ 1096.942426][ T29] audit: type=1802 audit(4295023269.289:690): pid=23283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3584" res=0 errno=0 [ 1098.040667][T15127] Bluetooth: hci3: command 0x0406 tx timeout [ 1098.233404][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3591'. [ 1098.398417][T15078] Bluetooth: hci6: hcon ffff8880673e0000 sent 0 < count 256 syzkaller syzkaller login: [ 1099.552864][T23325] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3596'. [ 1100.118197][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3600'. [ 1101.327895][T15078] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1102.310138][T23373] FAULT_INJECTION: forcing a failure. [ 1102.310138][T23373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.323354][T23373] CPU: 1 UID: 0 PID: 23373 Comm: syz.0.3606 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1102.323380][T23373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1102.323386][T23373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1102.323395][T23373] Call Trace: [ 1102.323401][T23373] [ 1102.323407][T23373] dump_stack_lvl+0x100/0x190 [ 1102.323433][T23373] should_fail_ex.cold+0x5/0xa [ 1102.323451][T23373] _copy_to_user+0x32/0xd0 [ 1102.323474][T23373] simple_read_from_buffer+0xcb/0x170 [ 1102.323498][T23373] proc_fail_nth_read+0x1af/0x230 [ 1102.323515][T23373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1102.323532][T23373] ? rw_verify_area+0xce/0x6d0 [ 1102.323551][T23373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1102.323567][T23373] vfs_read+0x1e4/0xb30 [ 1102.323593][T23373] ? __pfx_vfs_read+0x10/0x10 [ 1102.323613][T23373] ? __fget_files+0x215/0x3d0 [ 1102.323639][T23373] ? __fget_files+0x21f/0x3d0 [ 1102.323665][T23373] ksys_read+0x12a/0x250 [ 1102.323686][T23373] ? __pfx_ksys_read+0x10/0x10 [ 1102.323712][T23373] do_syscall_64+0x106/0xf80 [ 1102.323727][T23373] ? clear_bhb_loop+0x40/0x90 [ 1102.323746][T23373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.323761][T23373] RIP: 0033:0x7fcf5c75cece [ 1102.323774][T23373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1102.323789][T23373] RSP: 002b:00007fcf5d69ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1102.323803][T23373] RAX: ffffffffffffffda RBX: 00007fcf5d6a06c0 RCX: 00007fcf5c75cece [ 1102.323813][T23373] RDX: 000000000000000f RSI: 00007fcf5d6a00a0 RDI: 0000000000000009 [ 1102.323822][T23373] RBP: 00007fcf5d6a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.323831][T23373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.323839][T23373] R13: 00007fcf5ca16128 R14: 00007fcf5ca16090 R15: 00007ffdc8d857f8 [ 1102.323859][T23373] [ 1103.244937][T23400] FAULT_INJECTION: forcing a failure. [ 1103.244937][T23400] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.299934][T23400] CPU: 1 UID: 0 PID: 23400 Comm: syz.1.3613 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1103.299985][T23400] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1103.299998][T23400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1103.300016][T23400] Call Trace: [ 1103.300027][T23400] [ 1103.300038][T23400] dump_stack_lvl+0x100/0x190 [ 1103.300092][T23400] should_fail_ex.cold+0x5/0xa [ 1103.300127][T23400] should_failslab+0xc2/0x120 [ 1103.300176][T23400] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1103.300212][T23400] ? zs_create_pool+0x3a2/0x870 [ 1103.300241][T23400] ? lockdep_init_map_type+0x5c/0x250 [ 1103.300286][T23400] zs_create_pool+0x3a2/0x870 [ 1103.300324][T23400] disksize_store+0x17a/0x520 [ 1103.300362][T23400] ? __pfx_disksize_store+0x10/0x10 [ 1103.300392][T23400] dev_attr_store+0x58/0x80 [ 1103.300439][T23400] ? __pfx_dev_attr_store+0x10/0x10 [ 1103.300488][T23400] sysfs_kf_write+0xf2/0x150 [ 1103.300526][T23400] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1103.300570][T23400] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1103.300607][T23400] vfs_write+0x6ac/0x1070 [ 1103.300652][T23400] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1103.300702][T23400] ? __pfx_vfs_write+0x10/0x10 [ 1103.300774][T23400] ksys_write+0x12a/0x250 [ 1103.300816][T23400] ? __pfx_ksys_write+0x10/0x10 [ 1103.300871][T23400] do_syscall_64+0x106/0xf80 [ 1103.300902][T23400] ? clear_bhb_loop+0x40/0x90 [ 1103.300940][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.300972][T23400] RIP: 0033:0x7fb6b1d9c629 [ 1103.300997][T23400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.301026][T23400] RSP: 002b:00007fb6b2bff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1103.301055][T23400] RAX: ffffffffffffffda RBX: 00007fb6b2015fa0 RCX: 00007fb6b1d9c629 [ 1103.301076][T23400] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1103.301095][T23400] RBP: 00007fb6b1e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1103.301113][T23400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.301132][T23400] R13: 00007fb6b2016038 R14: 00007fb6b2015fa0 R15: 00007ffe371906d8 [ 1103.301173][T23400] [ 1105.877459][T15078] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1105.884899][T15078] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1105.908620][T23443] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078806000 pfn:0x78800 [ 1105.964129][T23443] memcg:ffff888031d9e382 [ 1105.984051][T23463] ERROR: Out of memory at tomoyo_memory_ok. [ 1106.007786][T23443] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1106.045645][T23443] page_type: f2(table) [ 1106.055771][T23443] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1106.124414][T23443] raw: ffff888078806000 ffff888037494660 00000001f2000000 ffff888031d9e382 [ 1106.164834][T23443] page dumped because: unmovable page [ 1106.181262][T23443] page_owner tracks the page as allocated [ 1106.187920][T23443] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 23389, tgid 23389 (syz.0.3610), ts 1105078949030, free_ts 1104696258532 [ 1106.316895][T23443] post_alloc_hook+0x153/0x170 [ 1106.327143][T23443] get_page_from_freelist+0x111d/0x3140 [ 1106.339037][T23443] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1106.345021][T23443] alloc_pages_mpol+0x1fb/0x550 [ 1106.350140][T23443] alloc_pages_noprof+0x131/0x390 [ 1106.356145][T23443] pte_alloc_one+0x1e/0x3e0 [ 1106.363828][T23443] do_fault+0x8cc/0x1950 [ 1106.373030][T23443] __handle_mm_fault+0x180f/0x2b60 [ 1106.379682][T23443] handle_mm_fault+0x36d/0xa20 [ 1106.385893][T23443] __get_user_pages+0xf9c/0x34d0 [ 1106.393606][T23443] get_dump_page+0x27e/0x3d0 [ 1106.393812][T23447] kexec: Could not allocate control_code_buffer [ 1106.398278][T23443] dump_user_range+0x18d/0xb50 [ 1106.398310][T23443] elf_core_dump+0x2d16/0x3c60 [ 1106.398341][T23443] vfs_coredump+0x27b4/0x5570 [ 1106.537254][T23443] get_signal+0x1f2a/0x21e0 [ 1106.661722][T23443] arch_do_signal_or_restart+0x91/0x770 [ 1106.672864][T23443] page last free pid 17144 tgid 17144 stack trace: [ 1106.696197][T23443] __free_frozen_pages+0x7e1/0x10d0 [ 1106.716072][T23443] vfree.part.0+0x12b/0x9d0 [ 1106.726195][T23443] delayed_vfree_work+0x8e/0xd0 [ 1106.746969][T23443] process_one_work+0x9d7/0x1920 [ 1106.760059][T23443] worker_thread+0x5da/0xe40 [ 1106.771121][T23443] kthread+0x370/0x450 [ 1106.775250][T23443] ret_from_fork+0x754/0xd80 [ 1106.844261][T23443] ret_from_fork_asm+0x1a/0x30 [ 1108.817907][T15078] Bluetooth: hci1: hcon ffff888044ffc000 sent 0 < count 256 [ 1109.447783][T15078] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1109.456943][T15078] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1112.709124][ T29] audit: type=1807 audit(4295023285.541:691): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1112.780102][ T29] audit: type=1802 audit(4295023285.611:692): pid=23593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.7.3649" res=0 errno=0 [ 1112.793691][T23593] ima: policy update failed [ 1113.026580][ T29] audit: type=1802 audit(4295023285.831:693): pid=23593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3649" res=0 errno=0 [ 1113.726346][T23602] FAULT_INJECTION: forcing a failure. [ 1113.726346][T23602] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.773984][T23602] CPU: 0 UID: 0 PID: 23602 Comm: syz.6.3652 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1113.774027][T23602] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1113.774037][T23602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1113.774052][T23602] Call Trace: [ 1113.774062][T23602] [ 1113.774072][T23602] dump_stack_lvl+0x100/0x190 [ 1113.774116][T23602] should_fail_ex.cold+0x5/0xa [ 1113.774147][T23602] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1113.774175][T23602] should_failslab+0xc2/0x120 [ 1113.774218][T23602] __kmalloc_noprof+0xe0/0x850 [ 1113.774263][T23602] tomoyo_realpath_from_path+0xb6/0x690 [ 1113.774302][T23602] tomoyo_path_number_perm+0x23c/0x580 [ 1113.774339][T23602] ? tomoyo_path_number_perm+0x22e/0x580 [ 1113.774381][T23602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1113.774467][T23602] ? find_held_lock+0x2b/0x80 [ 1113.774507][T23602] ? __fget_files+0x215/0x3d0 [ 1113.774543][T23602] ? hook_file_ioctl_common+0x146/0x410 [ 1113.774586][T23602] ? __fget_files+0x21f/0x3d0 [ 1113.774630][T23602] security_file_ioctl+0xd3/0x230 [ 1113.774671][T23602] __x64_sys_ioctl+0xb7/0x210 [ 1113.774710][T23602] do_syscall_64+0x106/0xf80 [ 1113.774747][T23602] ? clear_bhb_loop+0x40/0x90 [ 1113.774782][T23602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.774812][T23602] RIP: 0033:0x7fe30419c629 [ 1113.774837][T23602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.774864][T23602] RSP: 002b:00007fe304feb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.774891][T23602] RAX: ffffffffffffffda RBX: 00007fe304416090 RCX: 00007fe30419c629 [ 1113.774911][T23602] RDX: 0000000000000003 RSI: 00000000c048aec8 RDI: 0000000000000003 [ 1113.774929][T23602] RBP: 00007fe304feb090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.774947][T23602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.774964][T23602] R13: 00007fe304416128 R14: 00007fe304416090 R15: 00007ffd86ca80c8 [ 1113.775003][T23602] [ 1114.007837][T23602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1115.297360][T23627] random: crng reseeded on system resumption [ 1116.459810][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.466603][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.673070][T23661] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78818 [ 1117.788800][T23661] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1117.815172][T23662] kexec: Could not allocate control_code_buffer [ 1117.832403][T23661] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1117.851087][T23661] page_type: f5(slab) [ 1117.857110][T23661] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1117.866794][T23661] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1117.902886][T23661] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1117.959260][T23661] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1118.025345][T23661] head: 00fff00000000003 ffffea0001e20601 00000000ffffffff 00000000ffffffff [ 1118.071509][T23661] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1118.100282][T23661] page dumped because: unmovable page [ 1118.128861][T23661] page_owner tracks the page as freed [ 1118.145327][T23661] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5193, tgid 5193 (udevd), ts 1106828343631, free_ts 1117976758586 [ 1118.179443][T23661] post_alloc_hook+0x153/0x170 [ 1118.200924][T23661] get_page_from_freelist+0x111d/0x3140 [ 1118.213734][T23661] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1118.219969][T23661] new_slab+0xa6/0x6d0 [ 1118.240288][T23661] refill_objects+0x26b/0x400 [ 1118.258733][T23661] __pcs_replace_empty_main+0x19f/0x600 [ 1118.265223][T15078] Bluetooth: hci2: hcon ffff8880373ac000 sent 0 < count 256 [ 1118.273018][T23661] __kmalloc_cache_noprof+0x493/0x6f0 [ 1118.282873][T23661] kernfs_iop_get_link+0x65/0x16a0 [ 1118.290725][T23661] vfs_readlink+0x213/0x440 [ 1118.352141][T23661] do_readlinkat+0x250/0x370 [ 1118.356893][T23661] __x64_sys_readlink+0x78/0xc0 [ 1118.371214][T23661] do_syscall_64+0x106/0xf80 [ 1118.376204][T23661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.392360][T23661] page last free pid 22459 tgid 22459 stack trace: [ 1118.411557][T23661] __free_frozen_pages+0x7e1/0x10d0 [ 1118.426147][T23661] qlist_free_all+0x47/0xe0 [ 1118.441037][T23661] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1118.447241][T23661] __kasan_slab_alloc+0x69/0x90 [ 1118.457192][T23661] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1118.463604][T23661] __alloc_skb+0x140/0x710 [ 1118.473465][T23661] inet6_netconf_notify_devconf+0x9d/0x170 [ 1118.483397][T23661] addrconf_exit_net+0xe9/0x3f0 [ 1118.493208][T23661] ops_undo_list+0x2ee/0xab0 [ 1118.497822][T23661] cleanup_net+0x499/0x920 [ 1118.512617][T23661] process_one_work+0x9d7/0x1920 [ 1118.518113][T23661] worker_thread+0x5da/0xe40 [ 1118.529583][T23661] kthread+0x370/0x450 [ 1118.543185][T23661] ret_from_fork+0x754/0xd80 [ 1118.547813][T23661] ret_from_fork_asm+0x1a/0x30 [ 1121.333418][T23727] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1121.736944][T15078] Bluetooth: hci0: hcon ffff888036000000 sent 0 < count 256 [ 1121.763189][T23737] ima: policy update failed [ 1121.985224][ T29] audit: type=1807 audit(4295023294.597:694): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1122.034933][ T29] audit: type=1802 audit(4295023294.597:695): pid=23737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3679" res=0 errno=0 [ 1122.137054][ T29] audit: type=1802 audit(4295023294.607:696): pid=23737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3679" res=0 errno=0 [ 1122.223856][T14897] block nbd6: Possible stuck request ffff888027f08000: control (read@0,4096B). Runtime 450 seconds [ 1123.316533][T23767] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1123.471824][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3689'. [ 1123.897453][T15078] Bluetooth: hci6: hcon ffff8880673e0000 sent 0 < count 256 [ 1124.133161][T23791] FAULT_INJECTION: forcing a failure. [ 1124.133161][T23791] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.154537][T23791] CPU: 1 UID: 0 PID: 23791 Comm: syz.6.3694 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1124.154587][T23791] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1124.154598][T23791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1124.154615][T23791] Call Trace: [ 1124.154623][T23791] [ 1124.154634][T23791] dump_stack_lvl+0x100/0x190 [ 1124.154682][T23791] should_fail_ex.cold+0x5/0xa [ 1124.154718][T23791] should_failslab+0xc2/0x120 [ 1124.154771][T23791] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1124.154806][T23791] ? loopback_open+0xa46/0x1370 [ 1124.154847][T23791] loopback_open+0xa46/0x1370 [ 1124.154892][T23791] snd_pcm_open_substream+0xa76/0x1850 [ 1124.154928][T23791] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1124.154961][T23791] ? rcu_is_watching+0x12/0xc0 [ 1124.155011][T23791] snd_pcm_open+0x2a3/0x710 [ 1124.155046][T23791] ? __pfx_snd_pcm_open+0x10/0x10 [ 1124.155082][T23791] ? __pfx_default_wake_function+0x10/0x10 [ 1124.155142][T23791] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 1124.155173][T23791] snd_pcm_capture_open+0x89/0xe0 [ 1124.155202][T23791] snd_open+0x22d/0x4c0 [ 1124.155243][T23791] ? __pfx_snd_open+0x10/0x10 [ 1124.155282][T23791] chrdev_open+0x234/0x6a0 [ 1124.155327][T23791] ? __pfx_apparmor_file_open+0x10/0x10 [ 1124.155366][T23791] ? __pfx_chrdev_open+0x10/0x10 [ 1124.155414][T23791] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1124.155477][T23791] do_dentry_open+0x6d8/0x1660 [ 1124.155521][T23791] ? __pfx_chrdev_open+0x10/0x10 [ 1124.155577][T23791] vfs_open+0x82/0x3f0 [ 1124.155615][T23791] path_openat+0x208c/0x31a0 [ 1124.155674][T23791] ? __pfx_path_openat+0x10/0x10 [ 1124.155733][T23791] do_file_open+0x20e/0x430 [ 1124.155779][T23791] ? __pfx_do_file_open+0x10/0x10 [ 1124.155853][T23791] ? alloc_fd+0x476/0x790 [ 1124.155894][T23791] ? do_getname+0x191/0x390 [ 1124.155928][T23791] do_sys_openat2+0x10d/0x1e0 [ 1124.155963][T23791] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.156001][T23791] ? __fget_files+0x21f/0x3d0 [ 1124.156053][T23791] __x64_sys_openat+0x12d/0x210 [ 1124.156089][T23791] ? __pfx___x64_sys_openat+0x10/0x10 [ 1124.156140][T23791] do_syscall_64+0x106/0xf80 [ 1124.156171][T23791] ? clear_bhb_loop+0x40/0x90 [ 1124.156208][T23791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.156236][T23791] RIP: 0033:0x7fe30419c629 [ 1124.156261][T23791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.156289][T23791] RSP: 002b:00007fe30500c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1124.156317][T23791] RAX: ffffffffffffffda RBX: 00007fe304415fa0 RCX: 00007fe30419c629 [ 1124.156337][T23791] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1124.156356][T23791] RBP: 00007fe304232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1124.156373][T23791] R10: 000000000000ff0f R11: 0000000000000246 R12: 0000000000000000 [ 1124.156391][T23791] R13: 00007fe304416038 R14: 00007fe304415fa0 R15: 00007ffd86ca80c8 [ 1124.156435][T23791] [ 1125.412053][T23818] random: crng reseeded on system resumption [ 1126.658309][T23850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3708'. [ 1126.933739][T23859] FAULT_INJECTION: forcing a failure. [ 1126.933739][T23859] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.968172][T23859] CPU: 1 UID: 0 PID: 23859 Comm: syz.0.3710 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1126.968225][T23859] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1126.968238][T23859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1126.968256][T23859] Call Trace: [ 1126.968266][T23859] [ 1126.968277][T23859] dump_stack_lvl+0x100/0x190 [ 1126.968327][T23859] should_fail_ex.cold+0x5/0xa [ 1126.968362][T23859] should_failslab+0xc2/0x120 [ 1126.968409][T23859] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1126.968449][T23859] ? vm_area_dup+0x27/0x8e0 [ 1126.968484][T23859] ? walk_pgd_range+0x1115/0x1eb0 [ 1126.968531][T23859] vm_area_dup+0x27/0x8e0 [ 1126.968570][T23859] __split_vma+0x18c/0xd90 [ 1126.968613][T23859] ? __pfx___split_vma+0x10/0x10 [ 1126.968659][T23859] ? find_vma+0xbf/0x140 [ 1126.968712][T23859] vma_modify+0x1121/0x2250 [ 1126.968762][T23859] ? __pfx_vma_modify+0x10/0x10 [ 1126.968810][T23859] vma_modify_policy+0x238/0x300 [ 1126.968852][T23859] ? __pfx_vma_modify_policy+0x10/0x10 [ 1126.968915][T23859] ? mas_walk+0x6ef/0x9b0 [ 1126.968949][T23859] mbind_range+0x175/0x550 [ 1126.968988][T23859] do_mbind+0x7de/0xfd0 [ 1126.969029][T23859] ? __might_fault+0xc5/0x140 [ 1126.969067][T23859] ? __pfx_do_mbind+0x10/0x10 [ 1126.969113][T23859] ? _copy_from_user+0x59/0xd0 [ 1126.969173][T23859] ? __pfx_get_nodes+0x10/0x10 [ 1126.969226][T23859] kernel_mbind+0x1b7/0x200 [ 1126.969263][T23859] ? __pfx_kernel_mbind+0x10/0x10 [ 1126.969309][T23859] do_syscall_64+0x106/0xf80 [ 1126.969341][T23859] ? clear_bhb_loop+0x40/0x90 [ 1126.969378][T23859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.969409][T23859] RIP: 0033:0x7fcf5c79c629 [ 1126.969434][T23859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.969464][T23859] RSP: 002b:00007fcf5d6c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1126.969493][T23859] RAX: ffffffffffffffda RBX: 00007fcf5ca15fa0 RCX: 00007fcf5c79c629 [ 1126.969513][T23859] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 1126.969532][T23859] RBP: 00007fcf5c832b39 R08: 0000000000000003 R09: 0000000000000003 [ 1126.969552][T23859] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1126.969571][T23859] R13: 00007fcf5ca16038 R14: 00007fcf5ca15fa0 R15: 00007ffdc8d857f8 [ 1126.969612][T23859] [ 1127.588113][T23859] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78818 [ 1127.635250][T23859] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1127.746391][T23859] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1127.833043][T23859] page_type: f5(slab) [ 1127.837095][T23859] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1127.917901][T23859] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1127.958289][T23859] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1128.095892][T23859] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1128.133355][T23859] head: 00fff00000000003 ffffea0001e20601 00000000ffffffff 00000000ffffffff [ 1128.167990][T23859] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1128.203039][T23859] page dumped because: unmovable page [ 1128.237364][T23859] page_owner tracks the page as allocated [ 1128.247504][T23859] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15110, tgid 15110 (kworker/u10:3), ts 1120477044228, free_ts 1118786670254 [ 1128.298290][T23859] post_alloc_hook+0x153/0x170 [ 1128.308401][T23859] get_page_from_freelist+0x111d/0x3140 [ 1128.320754][T23859] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1128.333669][T23859] alloc_pages_mpol+0x1fb/0x550 [ 1128.354900][T23859] new_slab+0x43a/0x6d0 [ 1128.369465][T23859] ___slab_alloc+0x2a0/0x850 [ 1128.374132][T23859] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 1128.394760][T23859] kmalloc_reserve+0xe8/0x350 [ 1128.411399][T23859] __alloc_skb+0x185/0x710 [ 1128.421497][T23859] nsim_dev_trap_report_work+0x2af/0xd10 [ 1128.427183][T23859] process_one_work+0x9d7/0x1920 [ 1128.455892][T23859] worker_thread+0x5da/0xe40 [ 1128.466596][T23859] kthread+0x370/0x450 [ 1128.478154][T23859] ret_from_fork+0x754/0xd80 [ 1128.481101][T15078] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1128.482806][T23859] ret_from_fork_asm+0x1a/0x30 [ 1128.491252][T15078] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1128.504858][T23859] page last free pid 23683 tgid 23683 stack trace: [ 1128.511940][T23859] __free_frozen_pages+0x7e1/0x10d0 [ 1128.517299][T23859] __folio_put+0x3b4/0x540 [ 1128.527791][T23859] __pskb_trim_head+0x6f9/0xa60 [ 1128.568763][T23859] tcp_trim_head+0x85/0x5f0 [ 1128.573343][T23859] tcp_ack+0x20e1/0x74f0 [ 1128.577586][T23859] tcp_rcv_established+0x1175/0x3980 [ 1128.588160][T23859] tcp_v4_do_rcv+0xc64/0x10a0 [ 1128.593897][T23859] tcp_v4_rcv+0x2de5/0x4680 [ 1128.611685][T23859] ip_protocol_deliver_rcu+0xba/0x4d0 [ 1128.617123][T23859] ip_local_deliver_finish+0x3f2/0x6e0 [ 1128.638253][T23859] ip_local_deliver+0x19a/0x1f0 [ 1128.643179][T23859] ip_list_rcv_finish+0xbee/0x1240 [ 1128.649093][T23859] ip_list_rcv+0x338/0x450 [ 1128.653711][T23859] __netif_receive_skb_list_core+0x74c/0x940 [ 1128.668249][T23859] netif_receive_skb_list_internal+0x722/0xd40 [ 1128.675216][T23859] napi_complete_done+0x221/0x940 [ 1128.691267][T15078] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1128.700100][T15078] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1129.701619][T23916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3722'. [ 1130.335422][T23939] binder: 23936:23939 ioctl c0306201 200000000000 returned -14 [ 1130.601645][T23940] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78818 [ 1130.635376][T23950] ima: policy update failed [ 1130.659720][ T29] audit: type=1807 audit(4295023303.462:697): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1130.924982][ T29] audit: type=1802 audit(4295023303.462:698): pid=23950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3728" res=0 errno=0 [ 1130.954717][T23940] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1131.010070][ T29] audit: type=1802 audit(4295023303.472:699): pid=23950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3728" res=0 errno=0 [ 1131.052854][T23940] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1131.063304][T23940] page_type: f5(slab) [ 1131.072143][T23940] raw: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1131.090707][T23940] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1131.122949][T23940] head: 00fff00000000040 ffff88813fe3c140 dead000000000100 dead000000000122 [ 1131.239129][T23940] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 1131.255491][T23940] head: 00fff00000000003 ffffea0001e20601 00000000ffffffff 00000000ffffffff [ 1131.280217][T23940] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1131.405581][T23940] page dumped because: unmovable page [ 1131.437983][T23940] page_owner tracks the page as allocated [ 1131.540067][T23940] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15110, tgid 15110 (kworker/u10:3), ts 1120477044228, free_ts 1131514518378 [ 1131.699764][T23940] post_alloc_hook+0x153/0x170 [ 1131.736916][T23940] get_page_from_freelist+0x111d/0x3140 [ 1131.768615][T23940] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1131.779375][T23940] alloc_pages_mpol+0x1fb/0x550 [ 1131.805249][T23940] new_slab+0x43a/0x6d0 [ 1131.809470][T23940] ___slab_alloc+0x2a0/0x850 [ 1131.832227][T15078] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1131.851476][T15078] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1132.009873][T23940] __kmalloc_node_track_caller_noprof+0x45c/0x850 [ 1132.012006][T23932] kexec: Could not allocate control_code_buffer [ 1132.016466][T23940] kmalloc_reserve+0xe8/0x350 [ 1132.053544][T23940] __alloc_skb+0x185/0x710 [ 1132.065414][T23940] nsim_dev_trap_report_work+0x2af/0xd10 [ 1132.072584][T20739] NFSD: Failed to start, no listeners configured. [ 1132.079055][T23940] process_one_work+0x9d7/0x1920 [ 1132.151152][T23940] worker_thread+0x5da/0xe40 [ 1132.178641][T23940] kthread+0x370/0x450 [ 1132.183369][T23940] ret_from_fork+0x754/0xd80 [ 1132.188259][T23940] ret_from_fork_asm+0x1a/0x30 [ 1132.197069][T23940] page last free pid 15890 tgid 15890 stack trace: [ 1132.205098][T23940] __free_frozen_pages+0x7e1/0x10d0 [ 1132.212434][T23940] qlist_free_all+0x47/0xe0 [ 1132.218895][T23940] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1132.228595][T23940] __kasan_slab_alloc+0x69/0x90 [ 1132.234331][T23940] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1132.240985][T23940] ext4_init_io_end+0x24/0x170 [ 1132.247363][T23940] ext4_do_writepages+0x9cf/0x3f50 [ 1132.254203][T23940] ext4_writepages+0x347/0x790 [ 1132.270156][T23940] do_writepages+0x278/0x600 [ 1132.284067][T23940] __writeback_single_inode+0x164/0x13c0 [ 1132.289739][T23940] writeback_sb_inodes+0x72e/0x1bf0 [ 1132.303178][T23940] __writeback_inodes_wb+0xf8/0x2d0 [ 1132.308594][T23940] wb_writeback+0x755/0xbe0 [ 1132.314379][T23940] wb_workfn+0x8c6/0xc00 [ 1132.339140][T23940] process_one_work+0x9d7/0x1920 [ 1132.345297][T23940] worker_thread+0x5da/0xe40 [ 1133.201869][T23980] netlink: 146 bytes leftover after parsing attributes in process `syz.7.3734'. [ 1133.444245][T23982] FAULT_INJECTION: forcing a failure. [ 1133.444245][T23982] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.456994][T23982] CPU: 1 UID: 0 PID: 23982 Comm: syz.7.3735 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1133.457048][T23982] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1133.457061][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.457080][T23982] Call Trace: [ 1133.457091][T23982] [ 1133.457103][T23982] dump_stack_lvl+0x100/0x190 [ 1133.457152][T23982] should_fail_ex.cold+0x5/0xa [ 1133.457191][T23982] ? lsm_blob_alloc+0x68/0x90 [ 1133.457223][T23982] should_failslab+0xc2/0x120 [ 1133.457272][T23982] __kmalloc_noprof+0xe0/0x850 [ 1133.457313][T23982] ? trace_kmalloc+0x101/0x130 [ 1133.457346][T23982] lsm_blob_alloc+0x68/0x90 [ 1133.457379][T23982] security_sk_alloc+0x2d/0x290 [ 1133.457420][T23982] sk_prot_alloc+0x12a/0x2a0 [ 1133.457462][T23982] sk_alloc+0x36/0xe80 [ 1133.457491][T23982] __netlink_create+0x5e/0x2c0 [ 1133.457537][T23982] ? __wake_up+0x3f/0x60 [ 1133.457570][T23982] netlink_create+0x293/0x610 [ 1133.457600][T23982] ? __pfx_genl_bind+0x10/0x10 [ 1133.457635][T23982] ? __pfx_genl_unbind+0x10/0x10 [ 1133.457670][T23982] ? __pfx_genl_release+0x10/0x10 [ 1133.457713][T23982] __sock_create+0x339/0x860 [ 1133.457761][T23982] __sys_socket+0x14d/0x260 [ 1133.457804][T23982] ? __pfx___sys_socket+0x10/0x10 [ 1133.457858][T23982] __x64_sys_socket+0x72/0xb0 [ 1133.457899][T23982] ? lockdep_hardirqs_on+0x78/0x100 [ 1133.457932][T23982] do_syscall_64+0x106/0xf80 [ 1133.457963][T23982] ? clear_bhb_loop+0x40/0x90 [ 1133.458000][T23982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.458032][T23982] RIP: 0033:0x7f47a3d9c629 [ 1133.458058][T23982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.458087][T23982] RSP: 002b:00007f47a4bab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1133.458117][T23982] RAX: ffffffffffffffda RBX: 00007f47a4015fa0 RCX: 00007f47a3d9c629 [ 1133.458138][T23982] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1133.458157][T23982] RBP: 00007f47a3e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1133.458183][T23982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.458201][T23982] R13: 00007f47a4016038 R14: 00007f47a4015fa0 R15: 00007ffd94226a18 [ 1133.458240][T23982] [ 1133.961125][T23985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'. [ 1134.248986][T23998] ima: policy update failed [ 1134.286610][ T29] audit: type=1807 audit(4295023307.070:700): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1134.335998][ T29] audit: type=1802 audit(4295023307.070:701): pid=23998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3737" res=0 errno=0 [ 1134.399120][ T29] audit: type=1802 audit(4295023307.080:702): pid=23998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3737" res=0 errno=0 [ 1136.293830][ T30] INFO: task syz-executor:10413 blocked for more than 143 seconds. [ 1136.305863][ T30] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1136.346427][ T30] Blocked by coredump. [ 1136.364964][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1136.393445][ T30] task:syz-executor state:D stack:24232 pid:10413 tgid:10413 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1136.448781][ T30] Call Trace: [ 1136.469899][ T30] [ 1136.486647][ T30] __schedule+0xfee/0x60e0 [ 1136.520313][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1136.539186][ T30] ? __pfx___schedule+0x10/0x10 [ 1136.606652][ T30] ? find_held_lock+0x2b/0x80 [ 1136.611422][ T30] ? schedule+0x2bf/0x390 [ 1136.772425][ T30] schedule+0xdd/0x390 [ 1136.783011][ T30] schedule_preempt_disabled+0x13/0x30 [ 1136.788552][ T30] __mutex_lock+0xc9a/0x1b90 [ 1136.812291][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1136.832281][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1136.837411][ T30] ? net_generic+0xea/0x2a0 [ 1136.857154][ T30] ? net_generic+0xea/0x2a0 [ 1136.888039][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1136.908285][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1136.922350][ T30] nfsd_umount+0x3b/0x60 [ 1136.926653][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1136.951429][ T30] deactivate_super+0xe7/0x110 [ 1136.962382][ T30] cleanup_mnt+0x21f/0x450 [ 1136.977071][ T30] task_work_run+0x150/0x240 [ 1136.991891][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1137.012833][ T30] do_exit+0x829/0x2aa0 [ 1137.017054][ T30] ? anon_pipe_read+0xc1c/0x1200 [ 1137.026408][T24020] kexec: Could not allocate control_code_buffer [ 1137.042410][ T30] ? __pfx_do_exit+0x10/0x10 [ 1137.057586][ T30] ? do_raw_spin_lock+0x128/0x260 [ 1137.078090][ T30] ? find_held_lock+0x2b/0x80 [ 1137.112408][ T30] ? get_signal+0x7e0/0x21e0 [ 1137.117060][ T30] do_group_exit+0xd5/0x2a0 [ 1137.152081][ T30] get_signal+0x1ec7/0x21e0 [ 1137.167398][ T30] ? security_file_permission+0x76/0x210 [ 1137.212744][ T30] ? __pfx_get_signal+0x10/0x10 [ 1137.217923][ T30] ? __pfx_vfs_read+0x10/0x10 [ 1137.232486][ T30] ? __fput+0x68a/0xb40 [ 1137.236704][ T30] arch_do_signal_or_restart+0x91/0x770 [ 1137.242280][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1137.272505][ T30] ? ksys_read+0x1ac/0x250 [ 1137.277573][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 1137.311499][ T30] do_syscall_64+0x668/0xf80 [ 1137.322765][ T30] ? clear_bhb_loop+0x40/0x90 [ 1137.327500][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.342539][ T30] RIP: 0033:0x7fdc5bf5cece [ 1137.347000][ T30] RSP: 002b:00007fff39ceab38 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1137.356340][ T30] RAX: fffffffffffffe00 RBX: 0000555594d4e500 RCX: 00007fdc5bf5cece [ 1137.372545][ T30] RDX: 0000000000000030 RSI: 00007fff39ceac30 RDI: 00000000000000f9 [ 1137.381135][ T30] RBP: 00007fff39ceabdc R08: 0000000000000000 R09: 0000000000000000 [ 1137.392855][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 1137.400855][ T30] R13: 00000000000927c0 R14: 00000000000ed8f7 R15: 00007fff39ceac30 [ 1137.422587][ T30] [ 1137.426042][ T30] [ 1137.426042][ T30] Showing all locks held in the system: [ 1137.453115][ T30] 1 lock held by khungtaskd/30: [ 1137.458012][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1137.492651][ T30] 2 locks held by syz-executor/10413: [ 1137.498068][ T30] #0: ffff88802f47c0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1137.533762][ T30] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1137.552636][ T30] 1 lock held by udevd/14257: [ 1137.557339][ T30] #0: ffff888027ec1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1137.582925][ T30] 6 locks held by kworker/u10:0/15074: [ 1137.589210][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1137.599710][ T30] #1: ffffc90005c9fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1137.609850][ T30] #2: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1137.619244][ T30] #3: ffffffff906118a8 (rtnl_mutex){+.+.}-{4:4}, at: caif_exit_net+0x60/0x3a0 [ 1137.628461][ T30] #4: ffff888058434680 (&caifn->caifdevs.lock){+.+.}-{4:4}, at: caif_exit_net+0x77/0x3a0 [ 1137.638520][ T30] #5: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1137.648783][ T30] 2 locks held by kworker/u10:3/15110: [ 1137.654504][ T30] #0: ffff8880207e8148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1137.665388][ T30] #1: ffffc900033a7d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1137.677149][ T30] 2 locks held by syz.5.3053/20739: [ 1137.682340][ T30] #0: ffffffff906bda30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1137.691245][ T30] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 1137.701374][ T30] 2 locks held by syz-executor/21227: [ 1137.706918][ T30] #0: ffff888022e8a0e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1137.717255][ T30] #1: ffffffff8ec58488 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1137.727080][ T30] 2 locks held by getty/23314: [ 1137.731853][ T30] #0: ffff8880381eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1137.741738][ T30] #1: ffffc9000373b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1137.752066][ T30] 10 locks held by syz.0.3743/24015: [ 1137.757457][ T30] #0: ffff88806ae92d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1137.766776][ T30] #1: ffff8880375c6420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1137.775958][ T30] #2: ffff88806c331c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1137.785942][ T30] #3: ffff88801eedee18 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1137.796595][ T30] #4: ffffffff8f753908 (device_hotplug_lock){+.+.}-{4:4}, at: online_store+0x9a/0x180 [ 1137.806478][ T30] #5: ffff88801f6fe108 (&dev->mutex){....}-{4:4}, at: device_offline+0x1bc/0x3c0 [ 1137.815783][ T30] #6: ffffffff8e680b50 (cpu_hotplug_lock){++++}-{0:0}, at: mem_hotplug_begin+0xe/0x20 [ 1137.825677][ T30] #7: ffffffff8e9b4c50 (mem_hotplug_lock){++++}-{0:0}, at: memory_subsys_offline+0x258/0x530 [ 1137.836086][ T30] #8: ffffffff8e9abd88 (pcp_batch_high_lock){+.+.}-{4:4}, at: zone_pcp_disable+0x16/0x70 [ 1137.846254][ T30] #9: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1137.856356][ T30] 2 locks held by syz.6.3744/24022: [ 1137.861653][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1137.871161][ T30] #1: ffffffff906118a8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1137.881015][ T30] 3 locks held by syz.7.3745/24026: [ 1137.886275][ T30] #0: ffff888031bbc0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1137.895817][ T30] #1: ffff888035753b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1137.904909][ T30] #2: ffffffff8e9b4c50 (mem_hotplug_lock){++++}-{0:0}, at: ptdump_walk_pgd+0x49/0x330 [ 1137.914674][ T30] 2 locks held by syz.1.3746/24029: [ 1137.919868][ T30] #0: ffffffff905f8f70 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1137.929439][ T30] #1: ffffffff906118a8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 1137.938869][ T30] 1 lock held by dhcpcd/24043: [ 1137.943755][ T30] #0: ffff888042644260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 1137.953619][ T30] [ 1137.964173][T24015] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x700000000 pfn:0x78805 [ 1137.982996][ T30] ============================================= [ 1137.982996][ T30] [ 1137.996927][ T30] NMI backtrace for cpu 1 [ 1137.996953][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1137.996995][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1137.997005][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1137.997021][ T30] Call Trace: [ 1137.997030][ T30] [ 1137.997039][ T30] dump_stack_lvl+0x100/0x190 [ 1137.997081][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1137.997124][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1137.997162][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1137.997208][ T30] sys_info+0x141/0x190 [ 1137.997240][ T30] watchdog+0xd25/0x1050 [ 1137.997276][ T30] ? __pfx_watchdog+0x10/0x10 [ 1137.997319][ T30] ? __kthread_parkme+0x18c/0x230 [ 1137.997352][ T30] ? kthread+0x13a/0x450 [ 1137.997383][ T30] ? __pfx_watchdog+0x10/0x10 [ 1137.997418][ T30] kthread+0x370/0x450 [ 1137.997450][ T30] ? __pfx_kthread+0x10/0x10 [ 1137.997485][ T30] ret_from_fork+0x754/0xd80 [ 1137.997523][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.997564][ T30] ? __switch_to+0x7b4/0x1120 [ 1137.997593][ T30] ? __pfx_kthread+0x10/0x10 [ 1137.997628][ T30] ret_from_fork_asm+0x1a/0x30 [ 1137.997676][ T30] [ 1137.997697][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1138.125249][ C0] NMI backtrace for cpu 0 [ 1138.125271][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1138.125308][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1138.125318][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1138.125333][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1138.125364][ C0] Code: c8 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 ba 1e 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1138.125387][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1138.125407][ C0] RAX: 000000000088496d RBX: ffffffff8e4975c0 RCX: ffffffff8b8ccc75 [ 1138.125425][ C0] RDX: 0000000000000000 RSI: ffffffff8de7a16b RDI: ffffffff8c1aeb20 [ 1138.125441][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1138.125456][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1138.125473][ C0] R13: 0000000000000000 R14: ffffffff90d98910 R15: 0000000000000000 [ 1138.125489][ C0] FS: 0000000000000000(0000) GS:ffff888124351000(0000) knlGS:0000000000000000 [ 1138.125512][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1138.125529][ C0] CR2: 0000557897fc7168 CR3: 00000000683ba000 CR4: 00000000003526f0 [ 1138.125544][ C0] Call Trace: [ 1138.125553][ C0] [ 1138.125561][ C0] default_idle+0x9/0x10 [ 1138.125591][ C0] default_idle_call+0x6c/0xb0 [ 1138.125621][ C0] do_idle+0x35b/0x4b0 [ 1138.125659][ C0] ? __pfx_do_idle+0x10/0x10 [ 1138.125699][ C0] cpu_startup_entry+0x4f/0x60 [ 1138.125736][ C0] rest_init+0x251/0x260 [ 1138.125767][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1138.125899][ C0] start_kernel+0x47f/0x480 [ 1138.125929][ C0] x86_64_start_reservations+0x24/0x30 [ 1138.125967][ C0] x86_64_start_kernel+0x12b/0x130 [ 1138.125997][ C0] common_startup_64+0x13e/0x148 [ 1138.126031][ C0] [ 1138.318941][T24015] memcg:ffff888033e81a02 [ 1138.323101][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1138.323127][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1138.323170][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1138.323180][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1138.323196][ T30] Call Trace: [ 1138.323206][ T30] [ 1138.323218][ T30] dump_stack_lvl+0x100/0x190 [ 1138.323260][ T30] vpanic+0x552/0x970 [ 1138.323286][ T30] ? __pfx_vpanic+0x10/0x10 [ 1138.323317][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1138.323362][ T30] panic+0xd1/0xe0 [ 1138.323388][ T30] ? __pfx_panic+0x10/0x10 [ 1138.323421][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1138.323460][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1138.323499][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1138.323539][ T30] ? watchdog.cold+0x198/0x1ca [ 1138.323570][ T30] ? watchdog+0xd35/0x1050 [ 1138.323597][ T30] watchdog.cold+0x1a9/0x1ca [ 1138.323634][ T30] ? __pfx_watchdog+0x10/0x10 [ 1138.323675][ T30] ? __kthread_parkme+0x18c/0x230 [ 1138.323708][ T30] ? kthread+0x13a/0x450 [ 1138.323740][ T30] ? __pfx_watchdog+0x10/0x10 [ 1138.323786][ T30] kthread+0x370/0x450 [ 1138.323819][ T30] ? __pfx_kthread+0x10/0x10 [ 1138.323856][ T30] ret_from_fork+0x754/0xd80 [ 1138.323896][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1138.323937][ T30] ? __switch_to+0x7b4/0x1120 [ 1138.323968][ T30] ? __pfx_kthread+0x10/0x10 [ 1138.324002][ T30] ret_from_fork_asm+0x1a/0x30 [ 1138.324045][ T30] [ 1138.477124][ T30] Kernel Offset: disabled [ 1138.481458][ T30] Rebooting in 86400 seconds..