last executing test programs: 4m30.975074707s ago: executing program 0 (id=723): r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x3e) ppoll$auto(0x0, 0x7, 0x0, 0x0, 0x8) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0xa900, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x20000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7ff, 0xd, 0x2007d4e, 0x9407, 0x4, 0x0, 0xffffffff, 0x3, 0x3, 0x3, 0x1, 0xfffffffffffffff7, 0x5, 0x0, 0x1000]}, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045035, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r3, @ANYBLOB="000427bd7000ffdbdf2504000000380001800400030008000100060000000800010001040000080002000400000008000100010000000400030008000200e1000000040003001800018008000200810000000800020003000000040003003800f3f9f6cf26018008000200010000000400030008000166b40003000000080002000100fdff0300030008000200ff0000000800ee000300000004000300200001800800010050000000040003000800020006000000080002000600000034000180080002000700000004000300040003000800020008000000040003000400030008000200ffffffff08000100ff7f0000080001"], 0xf8}, 0x1, 0x0, 0x0, 0xce93ae6aa5855ab4}, 0x20000040) 4m30.739145344s ago: executing program 0 (id=724): r0 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4830) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/loop6\x00', 0x101282, 0x0) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000240)="7122a0", 0x40000000001243}, 0x1, 0x0) ioctl$auto_XFS_IOC_FREESP(r2, 0x4030580b, &(0x7f0000000040)={0x101, 0x3, 0x401, 0x10000001020, 0x800, r3}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listmount$auto(&(0x7f0000000080)={0x80000000, @raw=0x2, 0x1, 0x4, 0x7}, &(0x7f00000000c0)=0x9, 0x800, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x7fff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) r6 = gettid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xfffbffff}, 0x6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r7, 0x4, 0x100000000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@raw=0x80000000, 0x7, 0x3, 0x4, "3112d58600a8b47148e22af9ffb683dbede3d0bf828bbf0000000000000000b78aad9c0000000000008000", @inferred=r3}, 0x200, 0xffffffff, 0x9, @raw=0x80, @reserved="1f40187317a2631d80f8943785d388ab6e61f72bbd6a123e7cc90e6fa647c347a4e1b4dd36142f917e0b4e40a3027bb1a1dcf75b33cc039ae3784e8fc8d4a182bda6bbcc1c89e4ef64fc8f6f70ca23f6c05986aeb5241e38e7d1b6d067c50b27cd7cd9972745a4a299af07c12adf72bdab5d7d2533efcc6d6200", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b0b552d000000000000000000ebff00000000e6ffff58a200"}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001780)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote\x00', 0xa901, 0x0) write$auto(r8, &(0x7f0000000440)='7\x00\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xbap\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV\x94R+\x94s\x84\xa4\xd4M\xa9\xea\\Vt\xde\xedS\xf8?\x91\xef\xb3 4^\xc9DO\x88Er\xb5\x82b\x8f\xfcd\xe3\x81\xf6\xe4\x16\xe1\x15\xaf\xf2q\xc41\xf5-\xcc\xcfj\x94\xce\xc2>\t=\xe5\"a\xde\x18\xd8\xe8', 0x4) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0xd, 0x1, @_sigpoll={0xd}}}) r9 = socket(0x11, 0x3, 0x9) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$auto(r9, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x22}, 0x5, &(0x7f00000003c0), 0x5, 0xe}, 0x400005}, 0x2, 0x100) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000800000003) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c09, 0x0) 4m30.197609024s ago: executing program 0 (id=725): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) msgctl$auto_MSG_STAT(0x2, 0xb, &(0x7f0000000080)={{0x7, 0xffffffffffffffff, 0x0, 0xd6e, 0xd, 0x1, 0x2004}, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x6, 0xd84, 0x1, 0x4, 0x4, 0x40000000004, 0x9, 0x7, 0xa6b7, @raw=0x2}) setfsuid$auto(r1) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) fcntl$auto(r0, 0x400, 0x1) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cb35905, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) mlockall$auto(0x7) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, 0x0) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x6, 0x0, 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r5, &(0x7f0000000180)=""/205, 0xcd) fsopen$auto(0x0, 0x1) 4m28.990017303s ago: executing program 0 (id=730): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x18b202, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x2, 0x3, 0x13) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x54) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) connect$auto(0x3, 0x0, 0x54) r1 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r1, 0x0, 0x30, 0x0, 0x108000) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) pwritev$auto(r2, &(0x7f0000001f40)={0x0, 0x80}, 0xe, 0x4, 0x8000000000000001) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x20440, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) 4m28.255515332s ago: executing program 0 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x3e) ppoll$auto(0x0, 0x7, 0x0, 0x0, 0x8) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0xa900, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x20000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7ff, 0xd, 0x2007d4e, 0x9407, 0x4, 0x0, 0xffffffff, 0x3, 0x3, 0x3, 0x1, 0xfffffffffffffff7, 0x5, 0x0, 0x1000]}, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r2, 0x80045035, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r3, @ANYBLOB="000427bd7000ffdbdf2504000000380001800400030008000100060000000800010001040000080002000400000008000100010000000400030008000200e1000000040003001800018008000200810000000800020003000000040003003800f3f9f6cf26018008000200010000000400030008000166b40003000000080002000100fdff0300030008000200ff0000000800ee000300000004000300200001800800010050000000040003000800020006000000080002000600000034000180080002000700000004000300040003000800020008000000040003000400030008000200ffffffff08000100ff7f0000080001"], 0xf8}, 0x1, 0x0, 0x0, 0xce93ae6aa5855ab4}, 0x20000040) 4m28.04525951s ago: executing program 0 (id=734): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (rerun: 32) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x6}, 0x7}, 0xb8aa, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000004000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) (async) migrate_pages$auto(0x0, 0x5, 0x0, &(0x7f00000001c0)=0x7b) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) recvfrom$auto(r2, &(0x7f0000000200), 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) (async) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x4000000000003, 0x20009, 0x9, 0xeb1, 0x405, 0x8000) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x6) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8d1a073", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r5, 0x0, 0x800000008) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 4m12.809340441s ago: executing program 32 (id=734): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (rerun: 32) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x6}, 0x7}, 0xb8aa, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x4, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000004000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) listen$auto(0x3, 0x81) (async) migrate_pages$auto(0x0, 0x5, 0x0, &(0x7f00000001c0)=0x7b) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) recvfrom$auto(r2, &(0x7f0000000200), 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) (async) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x4000000000003, 0x20009, 0x9, 0xeb1, 0x405, 0x8000) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x6) (async, rerun: 32) r4 = syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) (rerun: 32) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8d1a073", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r5, 0x0, 0x800000008) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 8.801109656s ago: executing program 3 (id=1642): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x11) read$auto_mon_fops_text_t_mon_text(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x2, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) keyctl$auto(0x20000000000001c, 0xffffffffffffffff, 0x363, 0xffffffffffffffff, 0x8000000000000007) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2881, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xb, 0xdf, 0xeb1, 0x401, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x0) mmap$auto(0x9, 0x1ff, 0x4, 0x14, 0x3, 0x0) 8.190853972s ago: executing program 3 (id=1645): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x189002, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x103342, 0x0) r1 = prctl$auto(0x20003e, 0x80000000001, 0x0, 0x5, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r1, 0x4140, 0x0) readv$auto(r0, &(0x7f0000000240)={0x0, 0x84d}, 0x3) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0xfffffffffffffffc, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x7, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x400, 0x0) read$auto_tracing_pipe_fops_trace(r4, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) 6.608041906s ago: executing program 3 (id=1650): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket(0x2, 0x801, 0x106) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) io_uring_setup$auto(0x1, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r1, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) unshare$auto(0xfffffffffffff344) 5.725934245s ago: executing program 3 (id=1653): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x800) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x608, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x331, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1dc, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000000c0)={0x72c, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x2}, @NCSI_ATTR_DATA={0x6d3, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x2}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x10}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x1ff}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xf3c}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x7f}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}]}, 0x72c}, 0x1, 0x0, 0x0, 0x850}, 0x40001) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) ioctl$auto(0x3, 0x5420, 0x38) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5406, 0x0) 5.680642618s ago: executing program 4 (id=1655): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_udc.7/udc/dummy_udc.7/soft_connect\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x3) sysfs$auto(0x2, 0x100000000000027, 0x0) r1 = fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x1, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x6, 0x6, 0x7, 0x6, 0x7, 0x0, 0xdfffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x80, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r3, r2, 0x0, 0x40002000000a) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r1) fchmod$auto(r1, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r5, 0x100000003, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050080df47c4c492ef107adc0720000000", @ANYRES16=r4, @ANYBLOB="040027bd7000fbdbdf25030000000c0008000900000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x11) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xefff, 0xffffffffffff0005, 0x19) 4.720908938s ago: executing program 3 (id=1657): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x1c1041, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyt8\x00', 0x579980, 0x0) mmap$auto(0xe3, 0x1400005, 0xdf, 0x9b72, 0x2, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote_size\x00', 0x103a42, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) mremap$auto(0x8000000000000002, 0x4, 0x4, 0x7, 0x100000000) r1 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x24300, 0x0) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000240)="fb56cf8d17a13021be9060009e59799685aabc8127915abcc128168df93252b8067e050503eee989b8b49465e4d7c2bfba31f2a94d03dbb46c6b250d22cdc5fb2bfebb8b2581e2a54fd5c8336a924b3f2f4bd7b6e01ded16a99fdc12b361c019cf2f7ef8206e8194ab987575f14f6fc3391f2a096ead8a07825f1afffcccbb4625debd3426a5bbf291e75e80266f30c15fa1d372bcc5e9568aca2e104bd81ebc9c13715ad59ccc06edf72e7ff0de0b06b21b5f1666490c3f7ad28f5ffbc5399b38535304ffecbb226b4a005a1917f9d84588ddc4beb490", 0xd7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x6, 0x400008, 0x7, 0x16, r1, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x10001, 0xb0e, 0x8000000000000001, 0x8000017, 0xffffffffffffffff, 0x7ffc) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) r3 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000005e00)={0x10, 0xf1, "82a0d48cb31f0af60000000423b40e62"}, 0x80000001) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=&(0x7f0000000340)="d27022c3b454251ebd76fb250f8f848b52cf420afdec790a2e83cc79b517fe977c42b5aed71d9a60e0836f55bff61d648b6748defbab38b706dde42643e599fe513e77ae0f51f53362631a0659234f0563c930b8c4d713218e1532cd5a1a1a3babb6f21e2066690381149f3070a309b553fe609857d0391b6e0fde1e5a5f7dd42eedfe9f01023fb9e639cdb015f96be7416aab7167fc83ccd65e68a19c24f33a6bbd8e99cec08de4e29f571235c40662f489d553f5da94f5", 0x800c000, 0x4800c000, 0x80000000}, 0x4) sysfs$auto(0x3, 0x22, 0x40000000) r4 = fsopen$auto(0x0, 0x1) unshare$auto(0x40000080) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x5, 0x9b75, r4, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(r6, 0x0, 0xfffffdef) read$auto(0x3, 0x0, 0x5) sendfile$auto(0x1, 0x3, 0x0, 0x7feff204) ioctl$auto(r5, 0xfffffff7, r3) 4.233766611s ago: executing program 2 (id=1659): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r1 = socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x10000000084, 0x79, 0x0, 0xd) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x12, 0x401, 0x300000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8007) mremap$auto(0x4000, 0x8000b8, 0x13fd4, 0x3, 0xfffff000) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100a6bd7000ffdbdf2505002000a0aecce160173bf2864b9076529113a92e25f5b0ebb41e20366c3a6e6ff24a354c30b78c1488fec66a3a7a255e5d02a1759ffe1521e2e24de1b0aa9277"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0xa, 0x73) socket(0x2, 0xa, 0x1) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890c, 0x8) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000940)={'batadv0\x00'}) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto(r7, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) 4.216917539s ago: executing program 4 (id=1660): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) 3.550185469s ago: executing program 1 (id=1662): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\nu(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1cS\xf2~>\xb1\xc6\xd1\xee\xc8\x06e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}|D\xd0j\xdd\xc6\xbb^\xa92\xa9u/', 0x100000002) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r2) r3 = socket(0x2, 0x1, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x4, 0x5}, 0x7, 0x0, 0x0, 0x8) setsockopt$auto(r4, 0x6, 0x13, &(0x7f0000000040)=')[\x00', 0x9) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r5, 0x7, 0x5, 0x4) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1f, 0x3, 0x7}, 0xffff, 0x10010000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0xffffffff) 3.374301232s ago: executing program 2 (id=1663): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = socket(0x1e, 0x2, 0x0) r1 = getsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sda\x00', 0x84100, 0x0) ioctl$auto_IOC_PR_RELEASE(r2, 0x801070cf, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl802154(0x0, r1) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x4100, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000040)={0x7, 0x8000, 0x2}) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0xffff, @rand_addr=0xfffffffe}, 0xfffffde1) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000a91cbf244264f01169001007b65fdfc790278fdd3062b2aff7ddb249c3ca8c97d43b9af433eed4e58f11e7660f1c44922a37193b59e10c75c1be226d0b2feac3569d4e2086cd992171c1e017cc6f0c3ac38ed4d9830412d3761b8526a79a650a3eaa79d579005ae888b84ad2b7bad3e531c42c2ce4b7a7c5cc5e122d445da47153adfce4f02bf9eb5baebcc61a03385513b4caab56412fc500367a314e", @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf250100000008000b00e0000002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000030}, 0x8040) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2b, 0x1, 0x0) 2.718876384s ago: executing program 3 (id=1664): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101681, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) execveat$auto(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000580)=&(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kc\x85\xa6|\xb4>\v\xe9\x10p\aE\x81\xed\x00<\xdb\xd8\x9d\xe6\xe1\xa4g\x85\xe0A\xea\x94=\"\x98U\x1d7\x83[[b\b,\xed\x10-d\x02\x00\xb7\x81K\x04\x15\x85O\xa9\x0e\xbd\xe3\xaf.9^\xd9n\xc3\x9f\xc2\x86l\x03\x01\xa1\xe1>P\xee\x00\'\xaad\\v=\f\x9aP\xa5x\xf0\v\xd1\x1c\xfcoR\xd2\x1dEuZy\xa5\xc3\xce\x1aIX\xee\xfb\xb9@\xc7\x82\x84&c\xaf\xd2\x8b \x1a/\xafT\x9f\x96l+$\x8d/\xa6\x19\x97\xdc\xae\r\xbe\xfd\xa7\x9d\xf8\x8c\x96\x9dYf&\x81c\x85\x95-\xaa\xdc\xcd(\xdaZ\x84X:I[\x18\xb7\xa1\xe9\xdf\x17E\x87c\xda\xa5\xad4\x86uM\xd7\xc0H\x00\x16?f\xec\xc5]\xaa]O\xd8\xae.\xad$\xec:\xd9\x9b:\xec\xfe\x8f\x11V\xb82\b\xf8\xb5\x86\x1ej\xda\x04~\xa6Z', &(0x7f0000000600)=&(0x7f00000005c0)='$$$\'\x00', 0x4) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0xfffffffffffffffd, 0x7ffffffb, 0x2, 0xffffffff7ffffffc, 0x8009, 0xf, 0x200000100106}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kc\x85\xa6|\xb4>\v\xe9\x10p\aE\x81\xed\x00<\xdb\xd8\x9d\xe6\xe1\xa4g\x85\xe0A\xea\x94=\"\x98U\x1d7\x83[[b\b,\xed\x10-d\x02\x00\xb7\x81K\x04\x15\x85O\xa9\x0e\xbd\xe3\xaf.9^\xd9n\xc3\x9f\xc2\x86l\x03\x01\xa1\xe1>P\xee\x00\'\xaad\\v=\f\x9aP\xa5x\xf0\v\xd1\x1c\xfcoR\xd2\x1dEuZy\xa5\xc3\xce\x1aIX\xee\xfb\xb9@\xc7\x82\x84&c\xaf\xd2\x8b \x1a/\xafT\x9f\x96l+$\x8d/\xa6\x19\x97\xdc\xae\r\xbe\xfd\xa7\x9d\xf8\x8c\x96\x9dYf&\x81c\x85\x95-\xaa\xdc\xcd(\xdaZ\x84X:I[\x18\xb7\xa1\xe9\xdf\x17E\x87c\xda\xa5\xad4\x86uM\xd7\xc0H\x00\x16?f\xec\xc5]\xaa]O\xd8\xae.\xad$\xec:\xd9\x9b:\xec\xfe\x8f\x11V\xb82\b\xf8\xb5\x86\x1ej\xda\x04~\xa6Z', 0x81) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0xa, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x20c00, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) getcwd$auto(0x0, 0xffffffffffffffff) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x60000, 0x28, 0x0, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r2, 0x0, 0x800000008) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r3, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000640)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x8001, "0200000002000000997e763f222ce1", '\x00', "1e01490c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000000)={0x80006, 0x3, 0x7, 0x1, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) 2.709952616s ago: executing program 2 (id=1665): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\nu(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1cS\xf2~>\xb1\xc6\xd1\xee\xc8\x06e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}|D\xd0j\xdd\xc6\xbb^\xa92\xa9u/', 0x100000002) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1f, 0x3, 0x7}, 0xffff, 0x10010000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2300, &(0x7f0000000000), 0x1000) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) prctl$auto(0x1, 0x4000000002, 0x4, 0x2, 0x7) madvise$auto(0x0, 0x400053, 0x9) 2.33740602s ago: executing program 4 (id=1666): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x381502, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) lsetxattr$auto(0x0, &(0x7f0000000040)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2\b\xff\xff\xf0\x00\x00\xf0\x00E2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf2]\xabq\t\x91\xe69\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe91\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaa\x00\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x2, 0x0) unshare$auto(0x8000000) shmget$auto(0x0, 0x7ffffffffffffffd, 0x3) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, 0x1fe, 0x81) getcwd$auto(&(0x7f0000000340)='R\x00', 0x7fff) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) mprotect$auto(0x8, 0xce, 0x1) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000) waitid$auto_P_PID(0x1, 0x0, &(0x7f00000001c0)={@siginfo_0_0={0x0, 0x9, 0x7}}, 0x9, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x100, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/kernel/usermodehelper/bset\x00', 0x8a802, 0x0) sendfile$auto(r2, r2, 0x0, 0x400000000006) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = setfsuid$auto(0xee00) setresuid$auto(0xee01, r3, 0x0) ioctl$auto_UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, &(0x7f0000000040)=0x9) 2.094063736s ago: executing program 1 (id=1667): mmap$auto(0x0, 0x40000c, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio1\x00', 0x1, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000072, 0x1, 0x8003}]}) r3 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(r4, 0x0, 0x6a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r5) sendmsg$auto_CTRL_CMD_GETFAMILY2(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="7d8552bff0932abd7000fedbdf2503230000dde3c65ce9b0fe7f993470dd7ea98746d952d32fbc66aab56eba54abb67ad4e50efabc1f52b701fd701e201398df82ba8f540648ef73c28b0bcfe13eec15779a09ff90b380138b1be87ff7ba3b911d77b681dc674fffe3c692402c5d771027b26a9173c0c0092d1e348a780023753fa349fa55d1469361952635f222"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048004) sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="e4010000fed157"], 0x1e4}, 0x1, 0x0, 0x0, 0x84}, 0x44080) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 1.588359611s ago: executing program 4 (id=1668): mmap$auto(0xa, 0x400009, 0x6a1, 0x9b72, 0xffffffffffffffff, 0x8003) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mknod$auto(&(0x7f0000000100)='./file0\x00', 0x1001, 0x6) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000180)={0x0, 0x1f, 0x12}, 0x18) mount_setattr$auto(r0, &(0x7f0000000240)='./cgroup\x00', 0x3, &(0x7f0000000280)={0x2, 0x8001, 0x80000001, @raw=0xafa5}, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40a01, 0x14) r1 = socket(0x80000000000000a, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x28102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002a00)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_on\x00', 0x400, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') getdents$auto(r4, 0x0, 0xa2b0) pread64$auto(r4, 0x0, 0x75, 0xffffffff) getsockopt$auto(r1, 0x88, 0x69, 0x0, 0x0) mremap$auto(0x4000, 0xfee1, 0x7, 0x3, 0xfffff000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x40280, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)) pselect6$auto(0x5, &(0x7f0000000400)={[0x100000002a, 0xfffffffffffffffc, 0x0, 0x5, 0x598, 0x200000007, 0xac, 0x4, 0xffffffffffffff81, 0x1, 0x2, 0x4000000000008000, 0x1800, 0x7fff, 0xfffffffffffffffa]}, 0x0, 0x0, 0x0, 0x0) 1.379912235s ago: executing program 2 (id=1669): r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00', @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x1) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'ipvlan1\x00', 0x0}) getpeername$auto(r2, &(0x7f0000000040)=@can={0x1d, r3}, &(0x7f0000000100)) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=0x0, @ANYRES16=r4, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYBLOB], 0x3bc}, 0x1, 0x0, 0x0, 0xe28871789fef48c7}, 0x4804) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, 0xffffffffffffffff, 0x8000) arch_prctl$auto_ARCH_SHSTK_STATUS(0x5005, 0xfffffffffffffffb) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x9, 0x20005, 0x81, 0xebc, 0xffffffffffffffff, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) swapon$auto(0x0, 0x6) quotactl_fd$auto(r0, 0x200, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r5 = prctl$auto(0x42, 0x8, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xffffffff00000011, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, r5, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x9, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x6) 1.324646958s ago: executing program 4 (id=1670): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x2, 0x3a) socket(0x2b, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) 1.146439959s ago: executing program 1 (id=1671): close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)) pselect6$auto(0x5, &(0x7f0000000400)={[0x100000002a, 0xfffffffffffffffc, 0x0, 0x5, 0x8001, 0x200000007, 0xac, 0x4, 0xffffffffffffff81, 0x1, 0xfffffffffffffdfe, 0x4000000000008000, 0x1800, 0x7fff, 0xfffffffffffffffa, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) 1.011811646s ago: executing program 1 (id=1672): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101681, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) lstat$auto(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kc\x85\xa6|\xb4>\v\xe9\x10p\aE\x81\xed\x00<\xdb\xd8\x9d\xe6\xe1\xa4g\x85\xe0A\xea\x94=\"\x98U\x1d7\x83[[b\b,\xed\x10-d\x02\x00\xb7\x81K\x04\x15\x85O\xa9\x0e\xbd\xe3\xaf.9^\xd9n\xc3\x9f\xc2\x86l\x03\x01\xa1\xe1>P\xee\x00\'\xaad\\v=\f\x9aP\xa5x\xf0\v\xd1\x1c\xfcoR\xd2\x1dEuZy\xa5\xc3\xce\x1aIX\xee\xfb\xb9@\xc7\x82\x84&c\xaf\xd2\x8b \x1a/\xafT\x9f\x96l+$\x8d/\xa6\x19\x97\xdc\xae\r\xbe\xfd\xa7\x9d\xf8\x8c\x96\x9dYf&\x81c\x85\x95-\xaa\xdc\xcd(\xdaZ\x84X:I[\x18\xb7\xa1\xe9\xdf\x17E\x87c\xda\xa5\xad4\x86uM\xd7\xc0H\x00\x16?f\xec\xc5]\xaa]O\xd8\xae.\xad$\xec:\xd9\x9b:\xec\xfe\x8f\x11V\xb82\b\xf8\xb5\x86\x1ej\xda\x04~\xa6Z', 0x81) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0xa, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x20c00, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) getcwd$auto(0x0, 0xffffffffffffffff) getsockopt$auto_SO_RXQ_OVFL(0xffffffffffffffff, 0x60000, 0x28, 0x0, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r1, 0x0, 0x800000008) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r2, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000640)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x8001, "0200000002000000997e763f222ce1", '\x00', "1e01490c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) 943.839654ms ago: executing program 4 (id=1673): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) mmap$auto(0x0, 0x400000400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r1 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f00000001c0)=@bpf_attr_11={0x1, 0xfffffffffffff000, 0x1, 0xf33, 0x4, 0xffffffff, 0x3, r0}, 0x8637dc8) close_range$auto(r1, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x8, 0x5, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x200a00, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000), 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0x11, 0x3, 0x9) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x121802, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) mmap$auto(0x0, 0x40009, 0xe36b, 0x9b76, 0x7, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x541c, 0xffffffffffffffff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) socket(0x10, 0x2, 0x4) read$auto(0xffffffffffffffff, 0x0, 0x1fc) 470.541953ms ago: executing program 1 (id=1674): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x2, 0x3a) socket(0x2b, 0x3, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) 387.220436ms ago: executing program 2 (id=1675): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff050006000100", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) 132.058444ms ago: executing program 1 (id=1676): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/bNumEndpoints\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) munmap$auto(0x1, 0x9) munmap$auto(0x86e, 0x3) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x10b142, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) select$auto(0x6, 0x0, &(0x7f0000000080)={[0x8, 0x9, 0x6, 0x16, 0x3, 0x6, 0x2, 0x9, 0x0, 0x1, 0x7ff, 0xffffffffffff8000, 0x104, 0x6, 0xfffffffffffffffe, 0x80000801]}, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) 0s ago: executing program 2 (id=1677): openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0xf81e09f4e322f53a, 0x0) (async) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x820181, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x56c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_BEACON_HEAD={0x557, 0xe, "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"}]}, 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008080) (async) madvise$auto(0x9, 0xadf, 0xa) (async) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)={0x2, 0x9, [{r0, 0x0, 0x5, 0xc1c}]}) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_KEY(r1, &(0x7f0000002fc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000004f80)=ANY=[@ANYBLOB="781f0000", @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf25090000000c00580001feffffffffffff05000800a40000000400cc003c1f3880ac000080a8005a800800858004000c809400a880dfcbc25734538b02a7d8c8905694e9fb8e142a89156f607e676ec80cd8729407771b3780ce3b564f71f0c62f21c496e563381e7786a50210b35e863482f4b4c1d0c2436578c79f3556685fd7f2663e04dc8f4a7cccfe4d2f266ceec95c5a0249fdf826e89274d47b790f83d78db9110704fb5087cf59e76279c1a3d6fc13acd645877be3f6c4b263fbe457efea20c12e0800a38004007f00fc0800802400f2003ea5188fdfa327131e2fc4636f85afb7e64f9762676481938247cd0f153295c237009d008901be48c510ff60059507646e889371439e887d8683acf81864c12ce6fe5608ece19c2e2e6c2f2767a07adce63c63a808d97b00390021003a88bcec39a03e8396acd041310d758c89bbc85a3c007486e3d5923e0e1fabe92b8d9c17e8eb8f606304902c3302b2c96f1221cf910000000500d3000200000056080e005dfd793f97d93648ac28a4e10aeb1e87074b350376234c9def57e6f3cb913c042737244b17cc0c333c12fba4fdf64c6174f306feaa6c11cdf2dc3fa506acb2b8b6db17e229be08d6d9dc63f8eef3846a0bf6eacd73eda42b77ccbcfdda0fa2161c03df0d2bdc6db9e10a6f83f5b0671b7e19e52032439e7ed1f89ab0d5ccf3cacbe9bf66208af3427d541749ed441829841305797058d96e98621f60332e8bf569b8bfff2aba5fd8b0147cc42aea0037f0fd44a323463f93d2ce36ec6e417002fcbdcd5650c9ab210bdd3c84de3a301bba3f4a15a7f27bc8151d6bf5da036142a614f3b9c3f897f989b4993ee846c835ed6e3e10553b3bff3b18b79507843da36a2f2dd12b891da447e2f96c94790f039521f2788df03186337639afa44096f0f63d63ac78d592dbc7908eba951c096d3711d1cb0a94ec72b79f44165d7f63fe555cc185fc03f99a56d605b948df91434ab6fda4c58a2228c320119c27145f73346851ec1671e5ca1409419079541f26eea9bdf11430d7be41b16457e56f710af17b2d92f678cb1a61c7bc4d14d0b04abab60981950322da702b032b59b85c4a0951ac0d779e88968b52bfe24ebe3bfe7db8488113d52880259ebd4903d0029017932557c2520ba303587eeed3bdd8d36a613e61d89897ba363e72ff69154b0887eec94cd3efb88bc8762301fc3e71ead618579242407f1aa581cdfdff142dc68bf65a20ad836aa72f627f5810e46b79061337064c647c10a24d1733f5516549a4d4a488245d326293a803c36b6c9bd2f06bc447810b13a0fa727ab9473233f259c67234d09bc11f756a69b3297e4ef4b379cb2145928c5645a670442abd37ef41c3f5947efbd2ce5167021c87469c67bf696bc710630ed422fafc0c22b559475e12f5d4bd216414d03d55614e31d1e5fdf87ad7ff0846bef6a16cc3f9c7896726d29833409ddafcb6d424f11ede236841f31e20fa1bcaff63475099f1f1d557025cc6745e808f0a8b9421b3f96aeb81a9fcb3589b60d0dc9c9d0953bac788a3bc2ac75fecccda140f4d876044823ed01b8d6739a4ad5e50eee7d7572f8834daa29618814da2182f2f2246f7e8ff4c1dc4d09a7e66ed173d76654fed9981e76837d36988d0f88687eddfd1f66e256c2088eeea4c7b9f264780ff9eddc6cdaf42e7e424873f19049d5494b062001067216197d6c7700b9afc382d0071386622b924e04af7aa6336d4383e1305bd39c0cd10343c8285af8106458b17a65d1e3692a52215e49da23ed565b0b492282c2290582fdeff69aa941cb41453b2e0b1302642bf7d76daf8a39c95fc5ab4a28b0ad31e24765dbd62c69d1dc8704c067e5158d092e03591e0e6de09a4d8c9ee1017c301bf4ddba5363fd1bbefeb06226b75ddfdd68faad0677b32a358eb1d246a124359c6ab5d630ea74b3f1279e019a0cd4822c89adfd82d44e9a3adc925156a87b293eb172b5776233ecded6b49c8eb9063b0e9285cd072901b95f45323ab715451c97634412167b2bcc560df3b0cba2df40e523abe3c332beebea3009a1c37b7855b3e7666c8bf34aa1e2192b0772dd6f317bcb7844bdab3ca5fb8851055a4e028cc5be7975b2673d92150720856238364a2b4bd60e0b71215af484e8213f9f127fe696997efb1433948df6afcc45b1f7c57ca64ae9b2aca0a861dc87d312ea5e39f0de0c309674ee84305408571da7a4b9713b9f559903118051fe5f892a2e610c13c5af0999fb509d806b0fa7e475775d5f6940bfd094a100e11503938f35073d578ad8eb2172572d4101ce4e4add23815f2f9ecfb3d0b5d1f640497be3d090e3b41e895fba22da730f347bb16eac28a0f595f76ace680aed2efa065b3b36d39606342c4bda14f2cb99f470deb3415117c91d5200dfb7bc10a4dc023be4b8a4981768cdf6c9a831ad695fa302351125a1c73c0c409e1ee64cc64197ab0c34b9bc3b23a1e7163172a2fafa61e913d0c17fc35e4b78fe1ae60b9f346e02dc3440b538c0138ff06ff92144d251550c33bd80b22f0a9b0f44e98cef9426a0c2c7d80132e92d4ba36270237868f00e353e8c9c4ea048b263f3b8627560bfebf32a88a80d3963ea4db9676a31dc64217c8358b32d721f893d8751bb98c98d927a1d8b0a4b4f6fdb59125ff2561c431ea691a923252ef888756b3ba6e2fc5bf6fef81f05d8c50b74ec1db282690b00b160f95daa11b777975e281364b08bc35cc2eadc34a5c3405acebb73c9dbef5c3d029906a10ef0e122b38d4f285a4bc6b78fd776ed728ef382fb447bbd4832ddac48c93ac111c55640cb08326c7a0bb0f9aab03a645339e183a2c1fbc5138aee1664027fb85eb0f0b91017ead1e83d35190e68fd68d3177051e429e74c0982f529a5bb7525e8d4b3d6c2bf5bd3515e8424d074997178289b868e49e6dba60a9b997e31f953ccbb2deaf6d0086babc97e4a4c47cb425ab8160b29a195dd7995f622242974b3f3d3477f6b6f145bef29fd93b08f033f49c6f11a9d711bdfb24895d35461d2f7b086291287f9cac1deddff660904db9a01216f8efd53ef7c0afb4379ae93b19041681a9477fd9e1470c8942aefc205717fc0c10182beb593cfc033b7d24a383b9de68310ef7fbc54deef82eb7219c65e2be7ec12951aaa903a289a1194a368c61d114ea763a12671fd91bec17cd9bceeef9b151073a57b41a0f5bd1fa5c351200a5aa4bfebadbf1abf19d6195d37a885fc7b0ccade02e384c6691be85a5f70b68635185019903a9c181bcee9e24a439c9ea6db7d8ef45cb5330450c936062650ad847929a57486bd1d4db597de27ee24776ea2342c797303660db2922b1db79ea0a62104260fbd3501d798c26664eead74076337ef5490693e407f09c77e1fc56e4451f05f770e0b63d8e9589b2c7315d0edd1cc84f82d332aceec34a485a11a3a59e3d382a5c664eccad74694373bbed9b552685def67dfe0d4ea10be487532e38f4a0e88d46a5e6d5d52add55d44837af000014000080080005003a08000008009e00030000007c15008026047f00ac526339f8cfe532fcaca83cea657227338870a3bdd7452700a7207f6f35aa5636b6f779b0a1b56e8b253e8a786ddadb0582d3b4dc09d20abcfd14cf33579b813a4955d82cee5b807a31d1b5561f4f7a675c160d6c0e40e0b79606a799a9f081bfb9139aa37fb6419aa5de03ce56827b25c174b6b409b26b0fb18769aa610f8152e0d4bb6c807013e7ddb9ac78237ee25f73b37f1b7b2655f8e60ef97fe09dae04a4642a4160f72678a84703fc0fed8c8ac8d63c90c9919387c6fd7fbc250550d7518733ffad2ed0b6018eb3f921124bdd7624b46f9ee78aaafb187cef9e499e78fa4b41c96f320a71fa8450519a41049d60e0130e06088073e58b55e1cec935db56d5ccc88efffce2ccb53faa9b5bd0e28533ab458112932e1c04bf39f7758b531fe2ad9fc012c24ba32bd95ed766b94d327b4568a8d06c90278b2048f62e042cb02bd65765abec55f28a75a1474112bc4db074b248db724e1500bfaf087056b4bf10301cc7e03a3deda8064d43f4ef3c9aabbf8c41e14b15142d3ecb7e222f5b53f9c11c45c7381107bcf0ccfce6111b5689953d286e0e388c178296e5da56d2a43f06af6187b9b55a4b19d2c67337054d1036fe1cb97408f78b8e7ae6322f5321f90c9d6cf2b344623fe7891f3548b0d224d8517939543604eb66f36f559040267cb798778e84028cf86e6035bd4f95e8da017f5705bcbd382ce25e2eb609541f3313bffcc952c9cdf62ffa7f0b016038bc23997602693f5688a2daffc1e0aed80231b894231d77b67033f72e985e1999c4c98275ebef1720ec63893af52aee4453a357888b683d44f644f28ffb46e138ca049eb95e3c879086a32729aaed641f86a844977ad71ff752eb242130a4df2463cd0761efe0e25d6c173bf79a2ba534135b6141b06d71539fa5aca55a28b12e08d6cbee50843525d6ef47687d205a702fb68498a9e8400a416da1e55f42b2e8b1ab15f0413e50bc01e5c2c34832f119e8b3b6b45e541ae7fa5ae5fc6258f0c8d7ad164fd80264ccccea4899a08828858e9058c28d2132efb164897251b404f4a59832bfcd866a1185774ffee3c2f4fa121c62767d7d65043b29f14bbb41d22a5cc4dc50905119c64db35400cfe353e86cbcd0c846b96acd0981c3ec4a9e57d28d72d0a01fcd198f325fd141cc105864db8e38b5805cea9c703dfdcb3f938acf5762aa6009ff4dc999d713bcc5d79cb60592939eb541093ccf313e82fa8c7397cacc2a562ba9f423b68be39aad83c3c1d2038e1a243b840e37caefa2b1e75e21797b0332ad4094fd74e89bdba986d9dc045f3c76daa576bf9b7836897b396e0be4e1ff600bf8fe40c9f076113c1302c319ce73f52a7f2cf8c34f28b7b284cd9cd974f5980073684726c5d8082bbdabea8af4f3de88e90920bd99e62fabbbdfb21bcbb9c7d1c5ad4a72484963c9235843fb55f9ba7882e0b62a583dc236e910043111381beb8674f093b610247b0f62cc000040012c8008000100800000000800010007000000200002801c0000800800010001000000080001000600000008000200000000000800010000000000080001005bb100000800010008000000f40002804c000080080001000000000008000100090000000800010001000000080001000f000000080001000800000008000200010000000800020009000000080001000800000008000200010000001c0000800800010009000000080002000200000008000200070000000c0000800800020004000000340000800800020001800000080001003b00000008000200ba00000008000100b608000008000200f8ffffff080002000400000024000080080002000500000008000100f2ffff44c63b43edc1430d00eb75ff080002000000000008000100090000002400008008000100ff7f00000800020004000000080002000700000008000200000000000800a10002000000040047010410210093c427ef858c512af816c40af8d7f4d7cdae6e8b4478586e83146f310d8ee8b51f6154233c6ebe42c5357441cedbbc9e052ea2449c6dea7724c1de7ea4242d4ea6db0f89bf2979dd0a681f3b549e5a1b1463ffa2f7aa417a325dfb6d63e69a6e3bef89ad14b909baf013fdccbee8d97daa58468e7c9dbe1110f06800705bad5299e02e256abda83f25d8630670bb25c10231c4a4ce0ac2c4dc6cae81c50ad84d94352380df2f2857622f6d2bd2f2da885e1929261c30f2232110c2e05189d99adfb70321386525c57bc065765d3ac5455d37c610c963628a8e1c88e4bcea30c8d6874f9596365873f50ab48f6cc3792547f2cbd8dca7b78acf394bb483cc0cc7f79e04bb1307638e0418d3f848a2749f31275ab680e785859152fc027d366c0a569c1a2260d72b16519b73e3e4df5b2cadb3b873e2627e171c633e0a48c3734f7daf5fa2a744d36140a8222cf2478492a554958a82864601685fe0994590facb8cd468e46f97d7f33f03618a084e6b24b0a26720ce9f79ac9c932c9780201ed6e16cfa27055cf7b3c53869e3389b4bfe7d88f2d4db85f50dd04709c6dc7e98bdd20178878727c3a3bb1722538637d2e03b669f56b1bc1add18b812b08d8f01bb98631b8d76225b018dc17426906259c852f3e4adc7b57130b58b05a16f2779a8e04a534c05f0665a4376e21f54c2599f134e3ac112030e92ed4354bd60d465f9693e633feb4dadfc93e9b90ee0d33a7b80b40e46889587cdfac1fd8addd7d553277fb9d308064490d5592460bd54783d4ac6b8421708963b9a110362a9b0797624fb47df76f470f92dc6ca8e58ba8614622045db4162bfc64adacca347807a1857cd441b16d3b13e172d6ad9703967c77afb60ad5dc7055a08ae346e18f0038a8604c6a38f8de13ee211d5fa733dbf230583b09695f0d31c75a4b70e0765eaf2da8d11b2fd54630075f0825d643799ac21d1a36f32c9a1f500b785853a21a50dcfc414b410bb760bf01585d099660dac13dff1982b35346cf1f6c2e5813eb4f3a980184f6a6ff497081892765c94e87cd9a5ef2257c7b542c7f1f7a82a2c10edd436cf19f13a5a71c15a6f26b03b5dc4129364806fdd71cf0c56ca0b97b96d193284d647acae5a028e60385bc4a21c328aee8f83366a90d3ad5d3de04bed1d4ec4995b4f796f7b8b464ea0702622d6c068efd324862d7e4033787b4e5b65817db367dc59e2a4f0c4de1dd21445bb1fac3fb184c5029c594291142fe70fdd44be64941dc18588de57f67b92184e741db13e3f78a8050da4fea2211b1dbde78c3dd2652658db695113c497d0aa568bf890476f1794394455cc5f568ac8ed5f0226818ab6130609bce0f861418dd4a54555b036e5e3538a67129e1dad05f1b73dee180e07f6f423e9f9a55bd9fb81cd3c327b9c55f3d55f7dc5de12de6ef4f452ba7d522c76491a6b705aea457ee0fc0c4b54748d81d50c18722ad40afdb5b2f7f6272d20dba3cbdffe90807d5a6df082bf0c17319dfc1ede108e9302a7823e4afd7dde3b94739dc5d349907c91a3a48d309dff5b6e52870269cf9a0c01448c1b3ffecb2fbe7134291229ec875b2195e00132c1ae65ee6972eb85dca8afec1b0e472bf9858dcc472d2e9bb574ec3c871a8e841cd735c91bc47968fade3bc9c7ea41ac851fee9d7607d1c56daf74d744fcef5d184067bb9b2f9cee903b182bd1a34f5e8c8b2e67ea826df9ca30fb0255277c21e13713db0c64c58f2dd05a7ed830cc5a77da747035c94a2373172143b0db4372c9a49de7c73f5e9e5d6ae0606cbf16bf8d4e53483860f3b5616f42a68ea1748c21c25e40ea0f6b28df6f7fa08509dc0f68289e3c4c170888afa4a364c35e0ad618c64c11d737d0f55366ff9822e32b4025669b0df1b6e728200a5e3c6bba24a26c00925c29df8dc54139a7beb39161676d184da8adf9c4c33ec0bc3da2502ed2624b9e9ce2033669f3f81e158eaf138609095a13496c004bbd376d52084d9935bb7cbcf85c1ada8cd896c0da59d6de28e06b50a545a70ac7086a055ea087523180a9a61c1cb73a4a40bb0bd959c2af563971220bab5f0ebac0a581d34a7de301e2518dcac12c138228b13fd846138b113fa3bc9cba645a4122451ecf9b8a6e0cd320e08214336c6b3f91d508cfedaea99922800639db04f66e07c06c59fd0786d72187979e05c0493f2a5da2a8b422ff4235c967fccb08cd696d4425e5dbba13f44b7c28a45eb62635b5955ba1b27619dd0fba70fad1dd2cce4ee7ccd5555fc895193bfb8ab694f9068ffe538f263876cfe349acc79a3a770ac019a3caffe6d5f5eeee59c1202398ce3b766f3498785cf33eef697be194b7e64e650f984ebc2bb7a60579f259fa944d65baab9d06ca777050f059bd30646b096a3964678a73dd844ebed8a8ae76a5d40aae917adf861e603e1bda462fe127d19cdda1ba5af471049e608c7e96e5ea6370919ce291a9dc866f1dd5f7efc7c8f715eec7f2d598a8e9756cd86133cc541f5e0fe6b9dc37f42bc2bd5789e6f9d91bb3691904be4bc6e900dd1b35d5c9943186329110a85b9311058972190cff8a793a2cb2c925d604365610d5cbc25b359ec4eb1d55b23631ed69bbb2f1ee822a3d56f94636e52540be7af782af586f3a96afaf548cec15ed16e861745b7d6bf66949358df404b25a392d2334bc33c2735de695bf94412e5f19e78a609fada70f4efe932a3a70c9a8d33d729f39cd3f6e9122404fc6a14cd6e71de5e788f3c48ee19153b4f72fda821b9eaca22665c1a9377802ac19394bf6a6a4b028edf6c9f1e0f6d1f76bd16d72b465914751e2a8b2e96afedbfede7c98d51ff0b16b50cee1fe7a5fb2a9f87ee2a322d0c29aea7cc7645943677af0d27ba05eb7f0479dd0fe7914391bb17f6bfbd5be25bcaf6d0c0eb79ed1deda0ec3303995278dc2dbb41584370c0c887b438f8a39b25a7d0ff4a93de49fd04a9e2d8e283cb91273c6553715a7f3f2ca3926037e7bbd9386a7c4bf0952ceebd0e65d5ac1bb135fc833e48ebe623e80305db34ede42561c08519373ed0f9e7f007a1bc7aa20c6ecde411603f58f02952000c4012c872baf467b67bb04997bbbcf9927f0dd89d3ce41eb44584ca1dcb04a987e78a53605b2bdde528c24facd4e3eadc4d489aa9dff324c9e38781ac1af73b373c30067be53f3ecdc9fe6cfe42ab88cf50641f0db007ce95a04a627596857df73337f2385ff4aba0cf998a580d8a503f3122f09dc7b5fa0b5f438b4499c25ab543d840b981b57d111ae82c7d311c360f511cfdf6db7368ff32a6ef6b9ac2509efeb01d572c8471dd0251a2397998b1f602ef2facb4e3d0fb8d030ad0275c83a66f6853e2a8004485ffe208a13cb53fd067a23dc8aa34d63deb8eacb0f2575b6df377675252c63877eab78bf3f5ab6052748806575e82db0ac2684f29811990c79a641e54c79b504171a3a4b9fd760e25cfa9ff0724805f9b199a86d552dadbd1c512d3482190426108416c6985e5fa208b90f55e5593ea9f440a30d5c42aabc18ba3ed3e02af436fff871a53df66ba7758daa8bc75d009afb2a9d7afa1f9b8234c843b48f15cebb58eb26e677200aa3b65a51650b0ef20e48ed8bec59770780850eb1dcab02e1214aec6c3b6163d671a1fbe23433851220c3f2a454bf3fe330d3aa766127be99df41dd946dd1b78aa1a2c50af187de1815fecea079d6419109010450c3bc6538b9d61d2a73157c659ab507543c2e711ed546d8125aa5c54bbff8db3948993a1159719557bcaae93439e718cd9d02e808179c03e285ccc7d5fa95b18232bff2f7215aea0b24c3e3afc69aa2e2faf7bf400b3b2dc12d3d6a1186e5da755c84f8f0cab8bbeb775926140b18de0d40934b4de9b5cfe65447c8bc13f1e6fb6572edabd21ce14f428d5cbcc683c3db05bfbf6c0a3af487733b5df730a8a114d63b0ed96755ffc41935c9b9c27212521782d1011314a48c0396c1b8891c5c915617c8ec459a6de8583b9824cb550fb94edbde4f805ac2062eead5164a34a262a1872772eec0a9c1897f78cbd836159a5262a3a8f4e3e704edd62897fdd521e98ff1d198250e977320517c45851c310d2d3f1b06edad0fd174103b28bad83a13ed5885432f83c9a0e66b692640d0c8bba6ffd0c90583df8b1068cff32424e9ee40654905d83cb6277a1e57e7362888ab4d81fd01aff28a970e998b1d16bc1fe00c7bfb08a0095cb8d5f99167170108b700ffd15cce83a387fb9cceddf3438e53326df6d2cc942e8e25affdcee35c724b704e9f9e57f9a1d3e7532668366dc4a8287f74c384257440274b9b3f532b4792871f40088a01fe6d1a47e386d513a046d53187f811972a6b2562f664c0422bb276b05671e0863e7a449be5543d8693e29a79d0154e78cb684425567c8cd7de2d2aff88c16d195d23bba81bfaffa17ac92967305f00e00ace7b0de0cb4e582687f49de4e0e1139983cd9859fdca93cd0db930213c50d91a4a33d7e6acc9b5bb6f46736aa60621281e60254f99f9ea4629e26599af0ae2174c5dc8f37195e92edb761e7e5f04a7dd30febcb061e93a784c67b3b9b6d8cc1cfead8bff26d31e115c0e7e99d14f781bb65e9b445060f33a50503a112bcd64da5f32e5d007c40c102b551a760e6fd077b35bed84f76395dfa50b6346c0f94105c697cb03ed03d84fbf9fe8bf7fffb1e7a27e915d22252da0a417800f0bc046ed75c6405bef9eb320e1da207f71ade17e7fb2ed1f0956a73e9024645b298ec1d58007a158acd7006299a159e6db4f43003fa3a21c87242eecb56939d8f0176cde77598462dd6d12f3924cfb684374a56d0e643dc66ae7aae97d9fbc8a2a7b4ffbf2be65bd2553d94d1ce9977fa19713e0483508ee30e06c185cf76ee55966b0e3b19dd8f027d00f85998b860d8e93f2e605228560f147b7d2becc47b7a36e9c1bfd827b01357d1b48a68b83b9a764e79e900ee8b3b9fe0e31ffb594c2c95419190122c7c1852029aee150210316aeadf0ebc801d8f42baefb50909f204f4b26f8f2d1b3d5ba20ec402c260865f6b384d9135f22e919aa23b95b3a9bf05f885b6abd9c0ff975242de4a1a3e9dcde8e63cee812951d4f322c06534fd1f34c05db70a42eb0bb0366c8f2afdfc302b2232f95bdd32e098f199ca98a18161c6a00c383278b3fe26fb26cc174d4a94163f116d9f8be3d0b38f10e58c9c3d3f37adb9f1092705aa187ac125c602df62e6ab0b9c9408ea4b9faace6bce796b9acce19627c256d8c857b08bf9a425c7f2f5272c4d49f5ab8d3f0c94bd8af00bce60e6e9ec062130351ae496d3fc75bb12799b6081fe895db79ccc94b2901d6acc00a817e31d268f5947d6fb97d7872203bc9eb7c3779277261bb7067539146ead10ef8c6fa4eb3bb736ede5a89716f0ffe24f62856f7af8114bef59938a8e0e0bf3dc3cf82879e5f48bc38bb7fc7dad46d40d8a412c958e05f5a685e7d35dbb414aa4368c200cee39ce25b43585c6ec5df621c7d8fcb92b3a81f98456dfe122584fbf428f62c88d61b0c68695b4972d8951b1ce86601b9e962079d5310d8f4e4b501aade8ca038192caaec12ef32e94344a15b591fc27f8f64f82eeba380c48820bd2c8639d1e1e65190fb0e805d417c94fc1119a21fc78a13aaa9f574037b346f47bf503b2e23bc964002bddd24aa69005bb3dbac25a0d96d395833ebde84e5dba3e8b2fade4d5301cca616671399564d571d62c767da562675e9871675e65779a179ce2ed452189a32caf500df1854786501dfcc08003501a20e00000600ab00f7ff0000"], 0x1f78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x9c0302, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xae}, 0x5, 0x0, 0x3, 0x3a32182}, 0x4}, 0x3, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) (async) prctl$auto_PR_SET_SECCOMP(0x16, 0x494f, 0x5, 0x2, 0x5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2200, 0x0) (async) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, 0x0) (async) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) arch_prctl$auto_ARCH_SHSTK_DISABLE(0x5002, 0x0) (async) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) kernel console output (not intermixed with test programs): [ 471.898173][T12588] Tainted: [L]=SOFTLOCKUP [ 471.898184][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.898200][T12588] Call Trace: [ 471.898209][T12588] [ 471.898219][T12588] dump_stack_lvl+0x100/0x190 [ 471.898258][T12588] should_fail_ex.cold+0x5/0xa [ 471.898291][T12588] get_futex_key+0xf74/0x14f0 [ 471.898342][T12588] ? __pfx_get_futex_key+0x10/0x10 [ 471.898388][T12588] ? lock_acquire+0x1b9/0x370 [ 471.898441][T12588] futex_wake+0xf4/0x5e0 [ 471.898482][T12588] ? __pfx_futex_wake+0x10/0x10 [ 471.898518][T12588] ? find_held_lock+0x2b/0x80 [ 471.898552][T12588] ? exit_mm_release+0x19/0x30 [ 471.898594][T12588] do_futex+0x2b2/0x440 [ 471.898625][T12588] ? __pfx_do_futex+0x10/0x10 [ 471.898678][T12588] ? __might_fault+0xc5/0x140 [ 471.898719][T12588] mm_release+0x24a/0x2f0 [ 471.898752][T12588] do_exit+0x707/0x2ae0 [ 471.898791][T12588] ? rcu_is_watching+0x12/0xc0 [ 471.898832][T12588] ? __pfx_do_exit+0x10/0x10 [ 471.898871][T12588] ? do_raw_spin_lock+0x128/0x260 [ 471.898904][T12588] ? find_held_lock+0x2b/0x80 [ 471.898939][T12588] ? get_signal+0x7e0/0x21e0 [ 471.898974][T12588] do_group_exit+0xd5/0x2a0 [ 471.899019][T12588] get_signal+0x1ec7/0x21e0 [ 471.899065][T12588] ? __pfx_get_signal+0x10/0x10 [ 471.899109][T12588] arch_do_signal_or_restart+0x91/0x7a0 [ 471.899163][T12588] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 471.899236][T12588] exit_to_user_mode_loop+0x139/0x6f0 [ 471.899286][T12588] ? rcu_is_watching+0x12/0xc0 [ 471.899324][T12588] do_syscall_64+0x652/0x840 [ 471.899356][T12588] ? clear_bhb_loop+0x40/0x90 [ 471.899395][T12588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.899428][T12588] RIP: 0033:0x7f9f2cb9de99 [ 471.899454][T12588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.899484][T12588] RSP: 002b:00007f9f2da820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 471.899514][T12588] RAX: fffffffffffffe00 RBX: 00007f9f2ce26098 RCX: 00007f9f2cb9de99 [ 471.899534][T12588] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f2ce26098 [ 471.899579][T12588] RBP: 00007f9f2ce26090 R08: 0000000000000000 R09: 0000000000000000 [ 471.899618][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.899637][T12588] R13: 00007f9f2ce26128 R14: 00007fff8a046cd0 R15: 00007fff8a046db8 [ 471.899688][T12588] [ 472.176428][T12598] ima: policy update failed [ 472.287007][ T29] audit: type=1802 audit(4294967324.680:85): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1258" res=0 errno=0 [ 474.642093][T12640] netlink: 'syz.4.1266': attribute type 6 has an invalid length. [ 474.753214][T12626] Process accounting resumed [ 475.693025][T12652] zswap: compressor û not available [ 475.894013][T12661] FAULT_INJECTION: forcing a failure. [ 475.894013][T12661] name fail_futex, interval 1, probability 0, space 0, times 0 [ 475.959429][T12661] CPU: 0 UID: 0 PID: 12661 Comm: syz.2.1270 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.959468][T12661] Tainted: [L]=SOFTLOCKUP [ 475.959477][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.959491][T12661] Call Trace: [ 475.959498][T12661] [ 475.959507][T12661] dump_stack_lvl+0x100/0x190 [ 475.959538][T12661] should_fail_ex.cold+0x5/0xa [ 475.959566][T12661] get_futex_key+0x1d2/0x14f0 [ 475.959607][T12661] ? __pfx_get_futex_key+0x10/0x10 [ 475.959657][T12661] futex_wake+0xf4/0x5e0 [ 475.959689][T12661] ? __pfx_futex_wake+0x10/0x10 [ 475.959721][T12661] ? __lock_acquire+0x49f/0x1a40 [ 475.959768][T12661] do_futex+0x2b2/0x440 [ 475.959794][T12661] ? __pfx_do_futex+0x10/0x10 [ 475.959817][T12661] ? find_held_lock+0x2b/0x80 [ 475.959843][T12661] ? setid_policy_lookup+0x10c/0x350 [ 475.959883][T12661] __x64_sys_futex+0x34f/0x4d0 [ 475.959911][T12661] ? __pfx___x64_sys_futex+0x10/0x10 [ 475.959935][T12661] ? set_cred_ucounts+0x10f/0x200 [ 475.959981][T12661] do_syscall_64+0x115/0x840 [ 475.960006][T12661] ? clear_bhb_loop+0x40/0x90 [ 475.960035][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.960059][T12661] RIP: 0033:0x7f9f2cb9de99 [ 475.960078][T12661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.960101][T12661] RSP: 002b:00007f9f2daa30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 475.960124][T12661] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa8 RCX: 00007f9f2cb9de99 [ 475.960140][T12661] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f2ce25fac [ 475.960155][T12661] RBP: 00007f9f2ce25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 475.960170][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.960184][T12661] R13: 00007f9f2ce26038 R14: 00007fff8a046cd0 R15: 00007fff8a046db8 [ 475.960213][T12661] [ 476.782086][T12676] FAULT_INJECTION: forcing a failure. [ 476.782086][T12676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.839348][T12676] CPU: 1 UID: 0 PID: 12676 Comm: syz.4.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.839396][T12676] Tainted: [L]=SOFTLOCKUP [ 476.839407][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.839426][T12676] Call Trace: [ 476.839436][T12676] [ 476.839447][T12676] dump_stack_lvl+0x100/0x190 [ 476.839490][T12676] should_fail_ex.cold+0x5/0xa [ 476.839528][T12676] _copy_from_user+0x2e/0xd0 [ 476.839649][T12676] generic_map_update_batch+0x452/0x800 [ 476.839714][T12676] ? __pfx_generic_map_update_batch+0x10/0x10 [ 476.839767][T12676] ? find_held_lock+0x2b/0x80 [ 476.839802][T12676] ? __might_fault+0xc5/0x140 [ 476.839833][T12676] ? __might_fault+0xc5/0x140 [ 476.839869][T12676] ? __pfx_generic_map_update_batch+0x10/0x10 [ 476.839930][T12676] bpf_map_do_batch+0x66f/0x6d0 [ 476.839979][T12676] __sys_bpf+0x4ce/0x4e80 [ 476.840022][T12676] ? __pfx___sys_bpf+0x10/0x10 [ 476.840053][T12676] ? find_held_lock+0x2b/0x80 [ 476.840088][T12676] ? futex_wake+0x4ea/0x5e0 [ 476.840132][T12676] ? futex_private_hash_put+0x115/0x1c0 [ 476.840194][T12676] ? __pfx_futex_wake+0x10/0x10 [ 476.840270][T12676] ? __x64_sys_futex+0x34f/0x4d0 [ 476.840303][T12676] ? __x64_sys_futex+0x358/0x4d0 [ 476.840341][T12676] ? xfd_validate_state+0x129/0x190 [ 476.840381][T12676] ? __x64_sys_bpf+0xce/0x140 [ 476.840412][T12676] __x64_sys_bpf+0xce/0x140 [ 476.840446][T12676] ? do_syscall_64+0x90/0x840 [ 476.840492][T12676] do_syscall_64+0x115/0x840 [ 476.840520][T12676] ? clear_bhb_loop+0x40/0x90 [ 476.840557][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.840587][T12676] RIP: 0033:0x7f3c3bf9de99 [ 476.840611][T12676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.840640][T12676] RSP: 002b:00007f3c3cdc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 476.840668][T12676] RAX: ffffffffffffffda RBX: 00007f3c3c225fa0 RCX: 00007f3c3bf9de99 [ 476.840687][T12676] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a [ 476.840705][T12676] RBP: 00007f3c3c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 476.840722][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.840739][T12676] R13: 00007f3c3c226038 R14: 00007f3c3c225fa0 R15: 00007ffdb3a7f4f8 [ 476.840778][T12676] [ 477.782045][T12677] ima: policy update failed [ 477.838546][ T29] audit: type=1802 audit(4294967330.330:86): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1274" res=0 errno=0 [ 478.058752][T12709] sd 0:0:1:0: PR command failed: 1026 [ 478.069735][T12709] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 478.092424][T12709] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 478.206182][T12711] FAULT_INJECTION: forcing a failure. [ 478.206182][T12711] name failslab, interval 1, probability 0, space 0, times 0 [ 478.232294][T12711] CPU: 1 UID: 0 PID: 12711 Comm: syz.4.1279 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.232341][T12711] Tainted: [L]=SOFTLOCKUP [ 478.232352][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.232370][T12711] Call Trace: [ 478.232380][T12711] [ 478.232391][T12711] dump_stack_lvl+0x100/0x190 [ 478.232432][T12711] should_fail_ex.cold+0x5/0xa [ 478.232485][T12711] should_failslab+0xc2/0x120 [ 478.232528][T12711] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 478.232565][T12711] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 478.232620][T12711] ? sock_alloc_inode+0x26/0x2c0 [ 478.232672][T12711] ? __pfx_sock_alloc_inode+0x10/0x10 [ 478.232722][T12711] sock_alloc_inode+0x26/0x2c0 [ 478.232767][T12711] ? __pfx_sock_alloc_inode+0x10/0x10 [ 478.232811][T12711] alloc_inode+0x68/0x250 [ 478.232851][T12711] sock_alloc+0x44/0x280 [ 478.232890][T12711] ? security_socket_create+0x7f/0x250 [ 478.232927][T12711] __sock_create+0xc2/0x860 [ 478.232976][T12711] ? lockdep_init_map_type+0x5c/0x250 [ 478.233030][T12711] smc_create+0x163/0x290 [ 478.233152][T12711] __sock_create+0x339/0x860 [ 478.233209][T12711] __sys_socket+0x14d/0x260 [ 478.233238][T12711] ? fput+0x79/0x100 [ 478.233271][T12711] ? __pfx___sys_socket+0x10/0x10 [ 478.233301][T12711] ? ksys_write+0x1ac/0x250 [ 478.233351][T12711] ? __pfx_ksys_write+0x10/0x10 [ 478.233407][T12711] __x64_sys_socket+0x72/0xb0 [ 478.233437][T12711] ? lockdep_hardirqs_on+0x78/0x100 [ 478.233470][T12711] do_syscall_64+0x115/0x840 [ 478.233502][T12711] ? clear_bhb_loop+0x40/0x90 [ 478.233542][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.233575][T12711] RIP: 0033:0x7f3c3bf9de99 [ 478.233607][T12711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.233640][T12711] RSP: 002b:00007f3c3cda7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 478.233672][T12711] RAX: ffffffffffffffda RBX: 00007f3c3c226090 RCX: 00007f3c3bf9de99 [ 478.233694][T12711] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 478.233714][T12711] RBP: 00007f3c3c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 478.233734][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.233757][T12711] R13: 00007f3c3c226128 R14: 00007f3c3c226090 R15: 00007ffdb3a7f4f8 [ 478.233799][T12711] [ 478.236066][T12711] socket: no more sockets [ 478.534838][T12697] ima: policy update failed [ 478.547069][ T29] audit: type=1802 audit(4294967331.050:87): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1277" res=0 errno=0 [ 478.875563][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1281'. [ 481.676944][T12762] ima: policy update failed [ 481.685225][ T29] audit: type=1802 audit(4294967334.180:88): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1291" res=0 errno=0 [ 483.294445][T12797] Process accounting resumed [ 483.440896][T12820] random: crng reseeded on system resumption [ 483.601038][ T5626] Bluetooth: hci4: unexpected subevent 0x05 length: 123 > 12 [ 483.813371][T12826] FAULT_INJECTION: forcing a failure. [ 483.813371][T12826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.872100][T12826] CPU: 1 UID: 0 PID: 12826 Comm: syz.1.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.872142][T12826] Tainted: [L]=SOFTLOCKUP [ 483.872151][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.872167][T12826] Call Trace: [ 483.872175][T12826] [ 483.872185][T12826] dump_stack_lvl+0x100/0x190 [ 483.872220][T12826] should_fail_ex.cold+0x5/0xa [ 483.872252][T12826] _copy_to_user+0x32/0xd0 [ 483.872294][T12826] simple_read_from_buffer+0xcb/0x170 [ 483.872407][T12826] proc_fail_nth_read+0x1af/0x230 [ 483.872477][T12826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.872517][T12826] ? rw_verify_area+0xce/0x6d0 [ 483.872555][T12826] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.872590][T12826] vfs_read+0x1e4/0xb40 [ 483.872632][T12826] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 483.872671][T12826] ? __pfx_vfs_read+0x10/0x10 [ 483.872721][T12826] ? hook_file_ioctl_common+0x140/0x440 [ 483.872766][T12826] ksys_read+0x12a/0x250 [ 483.872806][T12826] ? __pfx_ksys_read+0x10/0x10 [ 483.872857][T12826] do_syscall_64+0x115/0x840 [ 483.872886][T12826] ? clear_bhb_loop+0x40/0x90 [ 483.872920][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.872949][T12826] RIP: 0033:0x7f2249d5e6ce [ 483.872971][T12826] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.872999][T12826] RSP: 002b:00007f224acf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.873025][T12826] RAX: ffffffffffffffda RBX: 00007f224acf76c0 RCX: 00007f2249d5e6ce [ 483.873043][T12826] RDX: 000000000000000f RSI: 00007f224acf70a0 RDI: 0000000000000004 [ 483.873060][T12826] RBP: 00007f224acf7090 R08: 0000000000000000 R09: 0000000000000000 [ 483.873077][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.873092][T12826] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 483.873127][T12826] [ 484.663556][T12837] FAULT_INJECTION: forcing a failure. [ 484.663556][T12837] name failslab, interval 1, probability 0, space 0, times 0 [ 484.688179][T12837] CPU: 1 UID: 0 PID: 12837 Comm: syz.1.1305 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.688224][T12837] Tainted: [L]=SOFTLOCKUP [ 484.688235][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.688253][T12837] Call Trace: [ 484.688262][T12837] [ 484.688272][T12837] dump_stack_lvl+0x100/0x190 [ 484.688312][T12837] should_fail_ex.cold+0x5/0xa [ 484.688347][T12837] should_failslab+0xc2/0x120 [ 484.688421][T12837] __kmalloc_noprof+0xfc/0x820 [ 484.688455][T12837] ? trace_kmem_cache_alloc+0xdd/0x100 [ 484.688495][T12837] ? lsm_blob_alloc+0x68/0x90 [ 484.688568][T12837] lsm_blob_alloc+0x68/0x90 [ 484.688623][T12837] security_prepare_creds+0x2d/0x290 [ 484.688672][T12837] prepare_creds+0x5d6/0x950 [ 484.688723][T12837] copy_creds+0xa7/0xa50 [ 484.688776][T12837] copy_process+0x1420/0x8030 [ 484.688814][T12837] ? preempt_schedule_common+0x42/0xc0 [ 484.688881][T12837] ? preempt_schedule_thunk+0x16/0x40 [ 484.688942][T12837] ? __pfx_copy_process+0x10/0x10 [ 484.688986][T12837] ? _copy_from_user+0x59/0xd0 [ 484.689035][T12837] kernel_clone+0x176/0x9d0 [ 484.689072][T12837] ? __pfx_kernel_clone+0x10/0x10 [ 484.689104][T12837] ? futex_private_hash_put+0x115/0x1c0 [ 484.689169][T12837] ? __pfx_futex_wake+0x10/0x10 [ 484.689212][T12837] __do_sys_clone3+0x214/0x290 [ 484.689246][T12837] ? __pfx___do_sys_clone3+0x10/0x10 [ 484.689278][T12837] ? ksys_write+0x190/0x250 [ 484.689336][T12837] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 484.689404][T12837] do_syscall_64+0x115/0x840 [ 484.689434][T12837] ? clear_bhb_loop+0x40/0x90 [ 484.689472][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.689503][T12837] RIP: 0033:0x7f2249d9de99 [ 484.689527][T12837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.689558][T12837] RSP: 002b:00007f224acd5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 484.689586][T12837] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f2249d9de99 [ 484.689605][T12837] RDX: 00007f224acd5f10 RSI: 0000000000000058 RDI: 00007f224acd5f10 [ 484.689624][T12837] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000058 [ 484.689642][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.689659][T12837] R13: 00007f224a026128 R14: 00007f224a026090 R15: 00007ffe689744c8 [ 484.689697][T12837] [ 485.479893][T12851] pim6reg: entered allmulticast mode [ 485.689238][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 486.292285][T12857] ima: policy update failed [ 486.303016][ T29] audit: type=1802 audit(4294967338.800:89): pid=12857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1310" res=0 errno=0 [ 487.524231][T12890] FAULT_INJECTION: forcing a failure. [ 487.524231][T12890] name failslab, interval 1, probability 0, space 0, times 0 [ 487.537288][T12890] CPU: 0 UID: 0 PID: 12890 Comm: syz.1.1315 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.537328][T12890] Tainted: [L]=SOFTLOCKUP [ 487.537337][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 487.537370][T12890] Call Trace: [ 487.537379][T12890] [ 487.537388][T12890] dump_stack_lvl+0x100/0x190 [ 487.537426][T12890] should_fail_ex.cold+0x5/0xa [ 487.537458][T12890] should_failslab+0xc2/0x120 [ 487.537494][T12890] kmem_cache_alloc_noprof+0x91/0x6a0 [ 487.537525][T12890] ? stack_trace_save+0x8e/0xc0 [ 487.537593][T12890] ? alloc_empty_file+0x5b/0x1c0 [ 487.537631][T12890] alloc_empty_file+0x5b/0x1c0 [ 487.537667][T12890] path_openat+0xe7/0x4280 [ 487.537691][T12890] ? __kasan_slab_alloc+0x89/0x90 [ 487.537725][T12890] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 487.537755][T12890] ? do_getname+0x35/0x390 [ 487.537786][T12890] ? do_sys_openat2+0xc7/0x1e0 [ 487.537819][T12890] ? __x64_sys_openat+0x12d/0x210 [ 487.537853][T12890] ? do_syscall_64+0x115/0x840 [ 487.537880][T12890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.537929][T12890] ? __pfx_path_openat+0x10/0x10 [ 487.537966][T12890] do_file_open+0x20e/0x430 [ 487.537995][T12890] ? __pfx_do_file_open+0x10/0x10 [ 487.538045][T12890] ? alloc_fd+0x471/0x7a0 [ 487.538093][T12890] ? do_getname+0x191/0x390 [ 487.538129][T12890] do_sys_openat2+0x10f/0x1e0 [ 487.538165][T12890] ? __pfx_do_sys_openat2+0x10/0x10 [ 487.538201][T12890] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 487.538234][T12890] ? __fget_files+0x21f/0x3d0 [ 487.538288][T12890] __x64_sys_openat+0x12d/0x210 [ 487.538323][T12890] ? __pfx___x64_sys_openat+0x10/0x10 [ 487.538357][T12890] ? ksys_write+0x1ac/0x250 [ 487.538420][T12890] do_syscall_64+0x115/0x840 [ 487.538467][T12890] ? clear_bhb_loop+0x40/0x90 [ 487.538505][T12890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.538537][T12890] RIP: 0033:0x7f2249d9de99 [ 487.538562][T12890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.538604][T12890] RSP: 002b:00007f224acf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 487.538632][T12890] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 487.538652][T12890] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 487.538672][T12890] RBP: 00007f224acf7090 R08: 0000000000000000 R09: 0000000000000000 [ 487.538690][T12890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.538708][T12890] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 487.538748][T12890] [ 488.771382][T12903] FAULT_INJECTION: forcing a failure. [ 488.771382][T12903] name failslab, interval 1, probability 0, space 0, times 0 [ 488.795931][T12903] CPU: 0 UID: 0 PID: 12903 Comm: syz.2.1319 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.795978][T12903] Tainted: [L]=SOFTLOCKUP [ 488.795987][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.796003][T12903] Call Trace: [ 488.796011][T12903] [ 488.796021][T12903] dump_stack_lvl+0x100/0x190 [ 488.796057][T12903] should_fail_ex.cold+0x5/0xa [ 488.796089][T12903] should_failslab+0xc2/0x120 [ 488.796122][T12903] __kmalloc_noprof+0xfc/0x820 [ 488.796154][T12903] ? copy_splice_read+0x1a3/0xbb0 [ 488.796416][T12903] copy_splice_read+0x1a3/0xbb0 [ 488.796476][T12903] ? __pfx_copy_splice_read+0x10/0x10 [ 488.796526][T12903] ? look_up_lock_class+0x55/0x120 [ 488.796563][T12903] ? lockdep_init_map_type+0x5c/0x250 [ 488.796609][T12903] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 488.796655][T12903] ? __pfx_filemap_splice_read+0x10/0x10 [ 488.796684][T12903] do_splice_read+0x2bd/0x370 [ 488.796734][T12903] splice_direct_to_actor+0x2a1/0xa30 [ 488.796765][T12903] ? __pfx_direct_splice_actor+0x10/0x10 [ 488.796818][T12903] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 488.796888][T12903] do_splice_direct+0x174/0x240 [ 488.796917][T12903] ? __pfx_do_splice_direct+0x10/0x10 [ 488.796946][T12903] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 488.796993][T12903] ? bpf_lsm_file_permission+0x9/0x10 [ 488.797034][T12903] ? security_file_permission+0x76/0x210 [ 488.797072][T12903] ? rw_verify_area+0xce/0x6d0 [ 488.797115][T12903] do_sendfile+0xadc/0xe20 [ 488.797174][T12903] ? __pfx_do_sendfile+0x10/0x10 [ 488.797210][T12903] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 488.797242][T12903] ? __fget_files+0x21f/0x3d0 [ 488.797292][T12903] __x64_sys_sendfile64+0x1d8/0x220 [ 488.797320][T12903] ? ksys_write+0x1ac/0x250 [ 488.797360][T12903] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 488.797400][T12903] do_syscall_64+0x115/0x840 [ 488.797426][T12903] ? clear_bhb_loop+0x40/0x90 [ 488.797459][T12903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.797487][T12903] RIP: 0033:0x7f9f2cb9de99 [ 488.797508][T12903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.797535][T12903] RSP: 002b:00007f9f2daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 488.797561][T12903] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa0 RCX: 00007f9f2cb9de99 [ 488.797577][T12903] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 488.797593][T12903] RBP: 00007f9f2daa3090 R08: 0000000000000000 R09: 0000000000000000 [ 488.797610][T12903] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 488.797625][T12903] R13: 00007f9f2ce26038 R14: 00007f9f2ce25fa0 R15: 00007fff8a046db8 [ 488.797658][T12903] [ 490.407908][T12896] Process accounting resumed [ 491.505986][T12951] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1328'. [ 491.538806][T12951] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.560681][T12951] IPv6: Can't replace route, no match found [ 491.735899][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 492.422962][T12970] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 492.451407][T12970] bond0: option packets_per_slave: allowed values 0 - 65535 [ 493.303398][T12977] Process accounting resumed [ 493.343352][T12989] FAULT_INJECTION: forcing a failure. [ 493.343352][T12989] name failslab, interval 1, probability 0, space 0, times 0 [ 493.390554][T12989] CPU: 1 UID: 0 PID: 12989 Comm: syz.1.1339 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.390600][T12989] Tainted: [L]=SOFTLOCKUP [ 493.390608][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.390621][T12989] Call Trace: [ 493.390628][T12989] [ 493.390636][T12989] dump_stack_lvl+0x100/0x190 [ 493.390664][T12989] should_fail_ex.cold+0x5/0xa [ 493.390689][T12989] should_failslab+0xc2/0x120 [ 493.390718][T12989] __kmalloc_cache_noprof+0x91/0x6c0 [ 493.390764][T12989] ? proc_self_get_link+0x189/0x1f0 [ 493.390857][T12989] proc_self_get_link+0x189/0x1f0 [ 493.390887][T12989] pick_link+0xac2/0x13c0 [ 493.390917][T12989] ? __pfx_proc_self_get_link+0x10/0x10 [ 493.390950][T12989] step_into_slowpath+0x9ba/0xf90 [ 493.390986][T12989] ? __pfx_step_into_slowpath+0x10/0x10 [ 493.391019][T12989] ? lookup_fast+0x2da/0x600 [ 493.391076][T12989] ? inode_permission+0x374/0x620 [ 493.391105][T12989] link_path_walk+0xf28/0x1cc0 [ 493.391142][T12989] path_openat+0x1c9/0x4280 [ 493.391159][T12989] ? __kasan_slab_alloc+0x89/0x90 [ 493.391184][T12989] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 493.391206][T12989] ? do_getname+0x35/0x390 [ 493.391228][T12989] ? __x64_sys_openat+0x12d/0x210 [ 493.391261][T12989] ? __pfx_path_openat+0x10/0x10 [ 493.391287][T12989] do_file_open+0x20e/0x430 [ 493.391307][T12989] ? __pfx_do_file_open+0x10/0x10 [ 493.391343][T12989] ? alloc_fd+0x471/0x7a0 [ 493.391377][T12989] ? do_getname+0x191/0x390 [ 493.391402][T12989] do_sys_openat2+0x10f/0x1e0 [ 493.391428][T12989] ? __pfx_do_sys_openat2+0x10/0x10 [ 493.391462][T12989] __x64_sys_openat+0x12d/0x210 [ 493.391495][T12989] ? __pfx___x64_sys_openat+0x10/0x10 [ 493.391531][T12989] do_syscall_64+0x115/0x840 [ 493.391554][T12989] ? clear_bhb_loop+0x40/0x90 [ 493.391579][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.391600][T12989] RIP: 0033:0x7f2249d9de99 [ 493.391616][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.391636][T12989] RSP: 002b:00007f224acf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 493.391655][T12989] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 493.391669][T12989] RDX: 0000000000000100 RSI: 00002000000009c0 RDI: ffffffffffffff9c [ 493.391682][T12989] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 493.391694][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.391706][T12989] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 493.391732][T12989] [ 494.065389][T13010] FAULT_INJECTION: forcing a failure. [ 494.065389][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 494.106673][T13010] CPU: 1 UID: 0 PID: 13010 Comm: syz.3.1343 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.106720][T13010] Tainted: [L]=SOFTLOCKUP [ 494.106732][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.106749][T13010] Call Trace: [ 494.106758][T13010] [ 494.106769][T13010] dump_stack_lvl+0x100/0x190 [ 494.106805][T13010] should_fail_ex.cold+0x5/0xa [ 494.106841][T13010] should_failslab+0xc2/0x120 [ 494.106881][T13010] kmem_cache_alloc_noprof+0x91/0x6a0 [ 494.106924][T13010] ? prepare_creds+0x2c/0x950 [ 494.106972][T13010] prepare_creds+0x2c/0x950 [ 494.107018][T13010] set_current_groups+0x15/0xd0 [ 494.107057][T13010] __do_sys_setgroups+0x3e2/0x4f0 [ 494.107095][T13010] ? 0xffffffffff600000 [ 494.107153][T13010] do_syscall_64+0x115/0x840 [ 494.107182][T13010] ? clear_bhb_loop+0x40/0x90 [ 494.107217][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.107247][T13010] RIP: 0033:0x7f8d59b9de99 [ 494.107269][T13010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.107297][T13010] RSP: 002b:00007f8d5aafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 494.107323][T13010] RAX: ffffffffffffffda RBX: 00007f8d59e25fa0 RCX: 00007f8d59b9de99 [ 494.107342][T13010] RDX: 0000000000000000 RSI: ffffffffff600000 RDI: 0000000c00000000 [ 494.107360][T13010] RBP: 00007f8d59c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 494.107377][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.107394][T13010] R13: 00007f8d59e26038 R14: 00007f8d59e25fa0 R15: 00007fff0ebe8e38 [ 494.107424][T13010] ? 0xffffffffff600000 [ 494.107451][T13010] [ 494.684792][T13010] netlink: 'syz.3.1343': attribute type 27 has an invalid length. [ 494.703254][T13010] netlink: 'syz.3.1343': attribute type 28 has an invalid length. [ 494.712595][T13010] netlink: 'syz.3.1343': attribute type 29 has an invalid length. [ 494.722347][T13010] netlink: 'syz.3.1343': attribute type 30 has an invalid length. [ 494.737075][T13010] netlink: 'syz.3.1343': attribute type 31 has an invalid length. [ 494.750016][T13010] netlink: 'syz.3.1343': attribute type 32 has an invalid length. [ 494.790479][T13010] netlink: 'syz.3.1343': attribute type 33 has an invalid length. [ 494.823947][T13010] netlink: 'syz.3.1343': attribute type 35 has an invalid length. [ 494.861501][T13010] netlink: 'syz.3.1343': attribute type 37 has an invalid length. [ 494.899784][T13010] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1343'. [ 494.984358][T13026] Process accounting paused [ 495.196595][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 496.115602][T13035] Process accounting resumed [ 496.270415][T13059] ubi0: attaching mtd0 [ 496.304330][T13059] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 496.328319][T13059] eraseblock attaching information dump: [ 496.345462][T13059] ec 1 [ 496.354560][T13059] pnum 0 [ 496.359527][T13059] lnum 0 [ 496.412399][T13059] scrub 0 [ 496.420680][T13059] sqnum 1 [ 496.467898][T13059] Volume identifier header dump: [ 496.486339][T13059] magic 55424921 [ 496.497185][T13059] version 1 [ 496.512727][T13059] vol_type 1 [ 496.531190][T13059] copy_flag 0 [ 496.545942][T13059] compat 5 [ 496.563981][T13059] vol_id 2147479551 [ 496.579917][T13059] lnum 0 [ 496.585730][T13059] data_size 0 [ 496.601018][T13059] used_ebs 0 [ 496.613413][T13059] data_pad 0 [ 496.639843][T13059] sqnum 1 [ 496.655502][T13059] hdr_crc 65b3bd2d [ 496.684191][T13059] Volume identifier header hexdump: [ 497.049098][T13059] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 497.779540][T13071] ima: policy update failed [ 497.806193][ T29] audit: type=1802 audit(4294967350.300:90): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1357" res=0 errno=0 [ 498.795299][T13107] sd 0:0:1:0: PR command failed: 1026 [ 498.815339][T13107] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 498.836522][T13107] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 498.989300][T13109] FAULT_INJECTION: forcing a failure. [ 498.989300][T13109] name failslab, interval 1, probability 0, space 0, times 0 [ 499.004617][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.2.1364 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.004654][T13109] Tainted: [L]=SOFTLOCKUP [ 499.004663][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.004677][T13109] Call Trace: [ 499.004684][T13109] [ 499.004693][T13109] dump_stack_lvl+0x100/0x190 [ 499.004724][T13109] should_fail_ex.cold+0x5/0xa [ 499.004758][T13109] should_failslab+0xc2/0x120 [ 499.004790][T13109] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 499.004818][T13109] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 499.004860][T13109] ? sock_alloc_inode+0x26/0x2c0 [ 499.004899][T13109] ? __pfx_sock_alloc_inode+0x10/0x10 [ 499.004936][T13109] sock_alloc_inode+0x26/0x2c0 [ 499.004970][T13109] ? __pfx_sock_alloc_inode+0x10/0x10 [ 499.005004][T13109] alloc_inode+0x68/0x250 [ 499.005034][T13109] sock_alloc+0x44/0x280 [ 499.005063][T13109] ? security_socket_create+0x7f/0x250 [ 499.005090][T13109] __sock_create+0xc2/0x860 [ 499.005127][T13109] ? lockdep_init_map_type+0x5c/0x250 [ 499.005169][T13109] smc_create+0x163/0x290 [ 499.005195][T13109] __sock_create+0x339/0x860 [ 499.005240][T13109] __sys_socket+0x14d/0x260 [ 499.005266][T13109] ? __pfx___sys_socket+0x10/0x10 [ 499.005322][T13109] __x64_sys_socket+0x72/0xb0 [ 499.005354][T13109] ? lockdep_hardirqs_on+0x78/0x100 [ 499.005390][T13109] do_syscall_64+0x115/0x840 [ 499.005426][T13109] ? clear_bhb_loop+0x40/0x90 [ 499.005463][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.005488][T13109] RIP: 0033:0x7f9f2cb9de99 [ 499.005507][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.005531][T13109] RSP: 002b:00007f9f2da82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 499.005554][T13109] RAX: ffffffffffffffda RBX: 00007f9f2ce26090 RCX: 00007f9f2cb9de99 [ 499.005570][T13109] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 499.005584][T13109] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 499.005598][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.005612][T13109] R13: 00007f9f2ce26128 R14: 00007f9f2ce26090 R15: 00007fff8a046db8 [ 499.005653][T13109] [ 499.005732][T13109] socket: no more sockets [ 499.337474][T13101] Process accounting resumed [ 499.505650][T13113] sd 0:0:1:0: PR command failed: 1026 [ 499.512135][T13113] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 499.537035][T13113] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 499.548236][T13114] FAULT_INJECTION: forcing a failure. [ 499.548236][T13114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.584222][T13114] CPU: 0 UID: 0 PID: 13114 Comm: syz.2.1366 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.584257][T13114] Tainted: [L]=SOFTLOCKUP [ 499.584265][T13114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.584278][T13114] Call Trace: [ 499.584285][T13114] [ 499.584294][T13114] dump_stack_lvl+0x100/0x190 [ 499.584323][T13114] should_fail_ex.cold+0x5/0xa [ 499.584349][T13114] _copy_from_user+0x2e/0xd0 [ 499.584446][T13114] snd_seq_oss_write+0x53c/0x8b0 [ 499.584580][T13114] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 499.584625][T13114] ? apparmor_file_permission+0x13f/0x1c0 [ 499.584654][T13114] ? bpf_lsm_file_permission+0x9/0x10 [ 499.584694][T13114] odev_write+0x51/0xa0 [ 499.584732][T13114] vfs_write+0x2aa/0x1050 [ 499.584768][T13114] ? __pfx_odev_write+0x10/0x10 [ 499.584802][T13114] ? __pfx_vfs_write+0x10/0x10 [ 499.584835][T13114] ? find_held_lock+0x2b/0x80 [ 499.584861][T13114] ? __fget_files+0x215/0x3d0 [ 499.584896][T13114] ? __fget_files+0x215/0x3d0 [ 499.584935][T13114] ? __fget_files+0x21f/0x3d0 [ 499.584977][T13114] ksys_write+0x12a/0x250 [ 499.585012][T13114] ? __pfx_ksys_write+0x10/0x10 [ 499.585055][T13114] do_syscall_64+0x115/0x840 [ 499.585079][T13114] ? clear_bhb_loop+0x40/0x90 [ 499.585108][T13114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.585132][T13114] RIP: 0033:0x7f9f2cb9de99 [ 499.585150][T13114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.585173][T13114] RSP: 002b:00007f9f2da82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.585194][T13114] RAX: ffffffffffffffda RBX: 00007f9f2ce26090 RCX: 00007f9f2cb9de99 [ 499.585212][T13114] RDX: 0000000000000134 RSI: 0000200000000040 RDI: 0000000000000004 [ 499.585226][T13114] RBP: 00007f9f2da82090 R08: 0000000000000000 R09: 0000000000000000 [ 499.585241][T13114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.585254][T13114] R13: 00007f9f2ce26128 R14: 00007f9f2ce26090 R15: 00007fff8a046db8 [ 499.585283][T13114] [ 500.047203][T13113] FAULT_INJECTION: forcing a failure. [ 500.047203][T13113] name failslab, interval 1, probability 0, space 0, times 0 [ 500.081205][T13113] CPU: 1 UID: 0 PID: 13113 Comm: syz.4.1365 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.081248][T13113] Tainted: [L]=SOFTLOCKUP [ 500.081258][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 500.081275][T13113] Call Trace: [ 500.081285][T13113] [ 500.081295][T13113] dump_stack_lvl+0x100/0x190 [ 500.081333][T13113] should_fail_ex.cold+0x5/0xa [ 500.081366][T13113] should_failslab+0xc2/0x120 [ 500.081403][T13113] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 500.081436][T13113] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 500.081485][T13113] ? sock_alloc_inode+0x26/0x2c0 [ 500.081529][T13113] ? __pfx_sock_alloc_inode+0x10/0x10 [ 500.081572][T13113] sock_alloc_inode+0x26/0x2c0 [ 500.081612][T13113] ? __pfx_sock_alloc_inode+0x10/0x10 [ 500.081652][T13113] alloc_inode+0x68/0x250 [ 500.081687][T13113] sock_alloc+0x44/0x280 [ 500.081723][T13113] ? security_socket_create+0x7f/0x250 [ 500.081756][T13113] __sock_create+0xc2/0x860 [ 500.081804][T13113] ? lockdep_init_map_type+0x5c/0x250 [ 500.081855][T13113] smc_create+0x163/0x290 [ 500.081887][T13113] __sock_create+0x339/0x860 [ 500.081938][T13113] __sys_socket+0x14d/0x260 [ 500.081966][T13113] ? __pfx___sys_socket+0x10/0x10 [ 500.082002][T13113] __x64_sys_socket+0x72/0xb0 [ 500.082036][T13113] ? lockdep_hardirqs_on+0x78/0x100 [ 500.082066][T13113] do_syscall_64+0x115/0x840 [ 500.082096][T13113] ? clear_bhb_loop+0x40/0x90 [ 500.082131][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.082162][T13113] RIP: 0033:0x7f3c3bf9de99 [ 500.082185][T13113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.082214][T13113] RSP: 002b:00007f3c3cdc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 500.082242][T13113] RAX: ffffffffffffffda RBX: 00007f3c3c225fa0 RCX: 00007f3c3bf9de99 [ 500.082260][T13113] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 500.082277][T13113] RBP: 00007f3c3c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 500.082294][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.082310][T13113] R13: 00007f3c3c226038 R14: 00007f3c3c225fa0 R15: 00007ffdb3a7f4f8 [ 500.082345][T13113] [ 500.084126][T13113] socket: no more sockets [ 500.485315][T13125] random: crng reseeded on system resumption [ 500.632769][T13123] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 500.668577][T13123] bond0: option packets_per_slave: allowed values 0 - 65535 [ 501.610388][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.618546][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.648629][T13147] Process accounting resumed [ 503.587377][T13169] FAULT_INJECTION: forcing a failure. [ 503.587377][T13169] name failslab, interval 1, probability 0, space 0, times 0 [ 503.637815][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.1.1378 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.637869][T13169] Tainted: [L]=SOFTLOCKUP [ 503.637882][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.637901][T13169] Call Trace: [ 503.637912][T13169] [ 503.637924][T13169] dump_stack_lvl+0x100/0x190 [ 503.637970][T13169] should_fail_ex.cold+0x5/0xa [ 503.638010][T13169] should_failslab+0xc2/0x120 [ 503.638056][T13169] kmem_cache_alloc_noprof+0x91/0x6a0 [ 503.638095][T13169] ? rcu_is_watching+0x12/0xc0 [ 503.638136][T13169] ? prepare_creds+0x2c/0x950 [ 503.638191][T13169] prepare_creds+0x2c/0x950 [ 503.638242][T13169] __sys_setresuid+0x458/0x1280 [ 503.638283][T13169] do_syscall_64+0x115/0x840 [ 503.638319][T13169] ? clear_bhb_loop+0x40/0x90 [ 503.638361][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.638409][T13169] RIP: 0033:0x7f2249d9de99 [ 503.638435][T13169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.638470][T13169] RSP: 002b:00007f224acf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 503.638501][T13169] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 503.638523][T13169] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.638542][T13169] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 503.638562][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.638581][T13169] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 503.638622][T13169] [ 504.115162][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1379'. [ 504.920197][ T5626] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 505.540742][T13207] random: crng reseeded on system resumption [ 506.452580][T13218] FAULT_INJECTION: forcing a failure. [ 506.452580][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 506.496019][T13218] CPU: 0 UID: 0 PID: 13218 Comm: syz.2.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.496068][T13218] Tainted: [L]=SOFTLOCKUP [ 506.496076][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.496089][T13218] Call Trace: [ 506.496096][T13218] [ 506.496104][T13218] dump_stack_lvl+0x100/0x190 [ 506.496134][T13218] should_fail_ex.cold+0x5/0xa [ 506.496159][T13218] should_failslab+0xc2/0x120 [ 506.496190][T13218] kmem_cache_alloc_noprof+0x91/0x6a0 [ 506.496213][T13218] ? rcu_is_watching+0x12/0xc0 [ 506.496240][T13218] ? prepare_creds+0x2c/0x950 [ 506.496276][T13218] prepare_creds+0x2c/0x950 [ 506.496308][T13218] __sys_setresuid+0x458/0x1280 [ 506.496333][T13218] do_syscall_64+0x115/0x840 [ 506.496355][T13218] ? clear_bhb_loop+0x40/0x90 [ 506.496381][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.496403][T13218] RIP: 0033:0x7f9f2cb9de99 [ 506.496421][T13218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.496442][T13218] RSP: 002b:00007f9f2daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 506.496462][T13218] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa0 RCX: 00007f9f2cb9de99 [ 506.496477][T13218] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.496490][T13218] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 506.496502][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.496515][T13218] R13: 00007f9f2ce26038 R14: 00007f9f2ce25fa0 R15: 00007fff8a046db8 [ 506.496544][T13218] [ 506.977205][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 507.526982][ T5626] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 507.952779][T13232] FAULT_INJECTION: forcing a failure. [ 507.952779][T13232] name failslab, interval 1, probability 0, space 0, times 0 [ 508.086525][T13232] CPU: 0 UID: 0 PID: 13232 Comm: syz.1.1388 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.086557][T13232] Tainted: [L]=SOFTLOCKUP [ 508.086564][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.086575][T13232] Call Trace: [ 508.086582][T13232] [ 508.086589][T13232] dump_stack_lvl+0x100/0x190 [ 508.086615][T13232] should_fail_ex.cold+0x5/0xa [ 508.086638][T13232] should_failslab+0xc2/0x120 [ 508.086664][T13232] __kmalloc_cache_noprof+0x91/0x6c0 [ 508.086697][T13232] ? alloc_pipe_info+0x10e/0x590 [ 508.086739][T13232] alloc_pipe_info+0x10e/0x590 [ 508.086761][T13232] splice_direct_to_actor+0x78f/0xa30 [ 508.086784][T13232] ? __pfx_direct_splice_actor+0x10/0x10 [ 508.086821][T13232] ? __pfx_aa_file_perm+0x10/0x10 [ 508.086885][T13232] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 508.086950][T13232] do_splice_direct+0x174/0x240 [ 508.086978][T13232] ? __pfx_do_splice_direct+0x10/0x10 [ 508.087026][T13232] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 508.087082][T13232] ? rw_verify_area+0xce/0x6d0 [ 508.087126][T13232] do_sendfile+0xadc/0xe20 [ 508.087177][T13232] ? __pfx_do_sendfile+0x10/0x10 [ 508.087219][T13232] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 508.087255][T13232] ? __fget_files+0x21f/0x3d0 [ 508.087314][T13232] __x64_sys_sendfile64+0x1d8/0x220 [ 508.087347][T13232] ? ksys_write+0x1ac/0x250 [ 508.087393][T13232] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 508.087439][T13232] do_syscall_64+0x115/0x840 [ 508.087471][T13232] ? clear_bhb_loop+0x40/0x90 [ 508.087509][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.087542][T13232] RIP: 0033:0x7f2249d9de99 [ 508.087566][T13232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.087596][T13232] RSP: 002b:00007f224acb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 508.087625][T13232] RAX: ffffffffffffffda RBX: 00007f224a026180 RCX: 00007f2249d9de99 [ 508.087644][T13232] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 508.087661][T13232] RBP: 00007f224acb5090 R08: 0000000000000000 R09: 0000000000000000 [ 508.087679][T13232] R10: 0000000001000200 R11: 0000000000000246 R12: 0000000000000001 [ 508.087696][T13232] R13: 00007f224a026218 R14: 00007f224a026180 R15: 00007ffe689744c8 [ 508.087736][T13232] [ 508.591277][T13238] sd 0:0:1:0: PR command failed: 1026 [ 508.617082][T13238] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 508.623943][T13238] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 509.048545][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 510.073350][T13246] ima: policy update failed [ 510.109105][ T29] audit: type=1802 audit(4294967362.600:91): pid=13246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1391" res=0 errno=0 [ 512.472793][T13278] Process accounting resumed [ 512.726313][T13287] FAULT_INJECTION: forcing a failure. [ 512.726313][T13287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.777641][T13287] CPU: 1 UID: 0 PID: 13287 Comm: syz.3.1399 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.777690][T13287] Tainted: [L]=SOFTLOCKUP [ 512.777700][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.777718][T13287] Call Trace: [ 512.777728][T13287] [ 512.777739][T13287] dump_stack_lvl+0x100/0x190 [ 512.777781][T13287] should_fail_ex.cold+0x5/0xa [ 512.777826][T13287] _copy_from_user+0x2e/0xd0 [ 512.777870][T13287] futex_parse_waitv+0xf2/0x510 [ 512.777916][T13287] ? __pfx_futex_wake_mark+0x10/0x10 [ 512.777952][T13287] ? __pfx_futex_parse_waitv+0x10/0x10 [ 512.777986][T13287] ? __do_sys_futex_waitv+0x204/0x2b0 [ 512.778022][T13287] __do_sys_futex_waitv+0x22c/0x2b0 [ 512.778061][T13287] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 512.778111][T13287] do_syscall_64+0x115/0x840 [ 512.778145][T13287] ? clear_bhb_loop+0x40/0x90 [ 512.778180][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.778209][T13287] RIP: 0033:0x7f8d59b9de99 [ 512.778231][T13287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.778258][T13287] RSP: 002b:00007f8d5aafd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 512.778284][T13287] RAX: ffffffffffffffda RBX: 00007f8d59e25fa0 RCX: 00007f8d59b9de99 [ 512.778302][T13287] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 512.778319][T13287] RBP: 00007f8d5aafd090 R08: 000000000000623d R09: 0000000000000000 [ 512.778336][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.778352][T13287] R13: 00007f8d59e26038 R14: 00007f8d59e25fa0 R15: 00007fff0ebe8e38 [ 512.778388][T13287] [ 513.395254][T13306] warning: `syz.4.1403' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 513.949826][T13291] Process accounting resumed [ 514.294699][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 514.485845][T13311] Process accounting resumed [ 514.738243][T13331] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 514.764403][T13331] bond0: option packets_per_slave: allowed values 0 - 65535 [ 515.152936][T13347] futex_wake_op: syz.4.1413 tries to shift op by -2048; fix this program [ 515.163523][T13347] 0x000000000001-0x000000020000 : "" [ 515.245056][T13347] ftl_cs: FTL header corrupt! [ 516.158194][T13366] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 516.678910][T13372] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3 with max blocks 1 with error 117 [ 516.693451][T13372] EXT4-fs (sda1): This should not happen!! Data will be lost [ 516.693451][T13372] [ 517.880425][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 518.103728][T13398] FAULT_INJECTION: forcing a failure. [ 518.103728][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 518.150613][T13398] CPU: 1 UID: 0 PID: 13398 Comm: syz.1.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.150696][T13398] Tainted: [L]=SOFTLOCKUP [ 518.150707][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.150727][T13398] Call Trace: [ 518.150738][T13398] [ 518.150752][T13398] dump_stack_lvl+0x100/0x190 [ 518.150800][T13398] should_fail_ex.cold+0x5/0xa [ 518.150837][T13398] should_failslab+0xc2/0x120 [ 518.150881][T13398] __kmalloc_noprof+0xfc/0x820 [ 518.150921][T13398] ? sk_prot_alloc+0x10b/0x2a0 [ 518.150977][T13398] sk_prot_alloc+0x10b/0x2a0 [ 518.151028][T13398] sk_alloc+0x36/0xe80 [ 518.151069][T13398] __netlink_create+0x5e/0x2c0 [ 518.151114][T13398] ? __wake_up+0x3f/0x60 [ 518.151162][T13398] netlink_create+0x29b/0x610 [ 518.151211][T13398] ? __pfx_genl_bind+0x10/0x10 [ 518.151246][T13398] ? __pfx_genl_unbind+0x10/0x10 [ 518.151279][T13398] ? __pfx_genl_release+0x10/0x10 [ 518.151320][T13398] __sock_create+0x339/0x860 [ 518.151381][T13398] __sys_socket+0x14d/0x260 [ 518.151414][T13398] ? exc_page_fault+0x6f/0xd0 [ 518.151447][T13398] ? __pfx___sys_socket+0x10/0x10 [ 518.151491][T13398] __x64_sys_socket+0x72/0xb0 [ 518.151519][T13398] ? lockdep_hardirqs_on+0x78/0x100 [ 518.151553][T13398] do_syscall_64+0x115/0x840 [ 518.151586][T13398] ? clear_bhb_loop+0x40/0x90 [ 518.151626][T13398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.151671][T13398] RIP: 0033:0x7f2249d9f707 [ 518.151699][T13398] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.151731][T13398] RSP: 002b:00007f224acd4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 518.151762][T13398] RAX: ffffffffffffffda RBX: 00007f224a026090 RCX: 00007f2249d9f707 [ 518.151784][T13398] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 518.151805][T13398] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 518.151824][T13398] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 518.151845][T13398] R13: 00007f224a026128 R14: 00007f224a026090 R15: 00007ffe689744c8 [ 518.151889][T13398] [ 519.063456][T13410] FAULT_INJECTION: forcing a failure. [ 519.063456][T13410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 519.098334][T13410] CPU: 1 UID: 0 PID: 13410 Comm: syz.3.1425 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.098374][T13410] Tainted: [L]=SOFTLOCKUP [ 519.098385][T13410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.098400][T13410] Call Trace: [ 519.098409][T13410] [ 519.098419][T13410] dump_stack_lvl+0x100/0x190 [ 519.098456][T13410] should_fail_ex.cold+0x5/0xa [ 519.098486][T13410] ? prepare_alloc_pages+0x16d/0x5f0 [ 519.098529][T13410] should_fail_alloc_page+0xeb/0x140 [ 519.098569][T13410] prepare_alloc_pages+0x1f0/0x5f0 [ 519.098608][T13410] ? rcu_is_watching+0x12/0xc0 [ 519.098645][T13410] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 519.098687][T13410] ? __lock_acquire+0x49f/0x1a40 [ 519.098739][T13410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 519.098769][T13410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 519.098806][T13410] ? find_held_lock+0x2b/0x80 [ 519.098837][T13410] ? is_bpf_text_address+0x8a/0x1a0 [ 519.098876][T13410] ? is_bpf_text_address+0x8a/0x1a0 [ 519.098915][T13410] ? bpf_ksym_find+0x124/0x1c0 [ 519.098943][T13410] ? look_up_lock_class+0x64/0x120 [ 519.098979][T13410] ? __lock_acquire+0x49f/0x1a40 [ 519.099018][T13410] ? __css_rstat_updated+0x1ce/0x5a0 [ 519.099065][T13410] ? __lock_acquire+0x49f/0x1a40 [ 519.099113][T13410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 519.099156][T13410] ? policy_nodemask+0xed/0x4f0 [ 519.099199][T13410] alloc_pages_mpol+0x1fb/0x540 [ 519.099240][T13410] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 519.099280][T13410] ? find_held_lock+0x2b/0x80 [ 519.099311][T13410] ? __pud_alloc+0x4f6/0x690 [ 519.099350][T13410] ? __pud_alloc+0x4f6/0x690 [ 519.099392][T13410] alloc_pages_noprof+0x1a/0x160 [ 519.099437][T13410] __pmd_alloc+0x3b/0x950 [ 519.099473][T13410] ? __pud_alloc+0x4fb/0x690 [ 519.099515][T13410] copy_page_range+0x41a8/0x5b20 [ 519.099563][T13410] ? rcu_is_watching+0x12/0xc0 [ 519.099606][T13410] ? rcu_read_unlock+0x17/0x60 [ 519.099695][T13410] ? mas_wr_store_entry+0xa1/0x1e80 [ 519.099786][T13410] ? __pfx_copy_page_range+0x10/0x10 [ 519.099841][T13410] ? mas_store+0x666/0xac0 [ 519.099880][T13410] ? __pfx_mas_store+0x10/0x10 [ 519.099924][T13410] ? __pfx___vma_start_write+0x10/0x10 [ 519.099980][T13410] dup_mmap+0xd44/0x21b0 [ 519.100035][T13410] ? __pfx_dup_mmap+0x10/0x10 [ 519.100082][T13410] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.100138][T13410] ? __lock_acquire+0x49f/0x1a40 [ 519.100182][T13410] ? find_held_lock+0x2b/0x80 [ 519.100215][T13410] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 519.100319][T13410] copy_process+0x4588/0x8030 [ 519.100356][T13410] ? try_to_wake_up+0x70a/0x1c90 [ 519.100404][T13410] ? __pfx_copy_process+0x10/0x10 [ 519.100438][T13410] ? futex_wake+0x4ea/0x5e0 [ 519.100477][T13410] ? futex_private_hash_put+0x115/0x1c0 [ 519.100529][T13410] kernel_clone+0x176/0x9d0 [ 519.100562][T13410] ? __pfx_futex_wake+0x10/0x10 [ 519.100596][T13410] ? __pfx_kernel_clone+0x10/0x10 [ 519.100649][T13410] __do_sys_clone+0xd9/0x120 [ 519.100682][T13410] ? __pfx___do_sys_clone+0x10/0x10 [ 519.100714][T13410] ? __fget_files+0x21f/0x3d0 [ 519.100786][T13410] do_syscall_64+0x115/0x840 [ 519.100815][T13410] ? clear_bhb_loop+0x40/0x90 [ 519.100851][T13410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.100880][T13410] RIP: 0033:0x7f8d59b9de99 [ 519.100904][T13410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.100933][T13410] RSP: 002b:00007f8d5aafcfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 519.100962][T13410] RAX: ffffffffffffffda RBX: 00007f8d59e25fa0 RCX: 00007f8d59b9de99 [ 519.100982][T13410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 519.100999][T13410] RBP: 00007f8d59c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 519.101018][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.101035][T13410] R13: 00007f8d59e26038 R14: 00007f8d59e25fa0 R15: 00007fff0ebe8e38 [ 519.101079][T13410] [ 520.010318][T13421] ovs_?: entered promiscuous mode [ 520.141960][T13425] FAULT_INJECTION: forcing a failure. [ 520.141960][T13425] name failslab, interval 1, probability 0, space 0, times 0 [ 520.155711][T13425] CPU: 0 UID: 0 PID: 13425 Comm: syz.4.1428 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.155753][T13425] Tainted: [L]=SOFTLOCKUP [ 520.155763][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.155779][T13425] Call Trace: [ 520.155788][T13425] [ 520.155797][T13425] dump_stack_lvl+0x100/0x190 [ 520.155835][T13425] should_fail_ex.cold+0x5/0xa [ 520.155867][T13425] should_failslab+0xc2/0x120 [ 520.155905][T13425] kmem_cache_alloc_noprof+0x91/0x6a0 [ 520.155939][T13425] ? __pmd_alloc+0xbf/0x950 [ 520.156005][T13425] __pmd_alloc+0xbf/0x950 [ 520.156067][T13425] __handle_mm_fault+0xa9c/0x2a00 [ 520.156123][T13425] ? mt_find+0x45e/0x8e0 [ 520.156164][T13425] ? __pfx___handle_mm_fault+0x10/0x10 [ 520.156212][T13425] ? __pfx_mt_find+0x10/0x10 [ 520.156273][T13425] ? find_vma+0xbf/0x140 [ 520.156309][T13425] ? __pfx_find_vma+0x10/0x10 [ 520.156350][T13425] handle_mm_fault+0x37b/0xa30 [ 520.156409][T13425] do_user_addr_fault+0x74c/0x12f0 [ 520.156463][T13425] exc_page_fault+0x6f/0xd0 [ 520.156496][T13425] asm_exc_page_fault+0x26/0x30 [ 520.156531][T13425] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 520.156578][T13425] Code: 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 9d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 520.156609][T13425] RSP: 0018:ffffc90003227b98 EFLAGS: 00050206 [ 520.156634][T13425] RAX: 0000000000000001 RBX: ffff88805d1a0000 RCX: 0000000000001000 [ 520.156653][T13425] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88805d1a0000 [ 520.156672][T13425] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100ba341ff [ 520.156690][T13425] R10: ffff88805d1a0fff R11: 0000000000000000 R12: ffffc90003227d80 [ 520.156711][T13425] R13: 0000000000000000 R14: 0000000000001000 R15: 0000000000000000 [ 520.156750][T13425] _copy_from_iter+0x355/0x1690 [ 520.156806][T13425] ? __pfx__copy_from_iter+0x10/0x10 [ 520.156849][T13425] ? trace_kmalloc+0xeb/0x110 [ 520.156891][T13425] ? __kasan_kmalloc+0xaa/0xb0 [ 520.156931][T13425] ? __kmalloc_noprof+0x343/0x820 [ 520.156970][T13425] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 520.157021][T13425] kernfs_fop_write_iter+0x186/0x5f0 [ 520.157063][T13425] vfs_write+0x6ac/0x1050 [ 520.157113][T13425] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 520.157154][T13425] ? __pfx_vfs_write+0x10/0x10 [ 520.157250][T13425] ksys_write+0x12a/0x250 [ 520.157291][T13425] ? __pfx_ksys_write+0x10/0x10 [ 520.157342][T13425] do_syscall_64+0x115/0x840 [ 520.157371][T13425] ? clear_bhb_loop+0x40/0x90 [ 520.157405][T13425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.157434][T13425] RIP: 0033:0x7f3c3bf9de99 [ 520.157455][T13425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.157481][T13425] RSP: 002b:00007f3c3cdc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.157506][T13425] RAX: ffffffffffffffda RBX: 00007f3c3c225fa0 RCX: 00007f3c3bf9de99 [ 520.157523][T13425] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 520.157540][T13425] RBP: 00007f3c3cdc8090 R08: 0000000000000000 R09: 0000000000000000 [ 520.157556][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.157572][T13425] R13: 00007f3c3c226038 R14: 00007f3c3c225fa0 R15: 00007ffdb3a7f4f8 [ 520.157609][T13425] [ 520.495126][T13423] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1427'. [ 521.208427][T13445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1433'. [ 521.209257][T13440] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.1431: bg 1: bad block bitmap checksum [ 521.237252][T13440] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6679: Filesystem failed CRC [ 521.320121][T13445] bond0: (slave bond_slave_0): Releasing backup interface [ 523.505691][T13520] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1444: iget: checksum invalid [ 523.558844][T13520] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 523.601671][T13492] Process accounting resumed [ 523.632880][T13520] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1444: iget: checksum invalid [ 523.723953][T13520] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 523.767073][T13520] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1444: iget: checksum invalid [ 523.807729][T13520] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 523.828774][T13520] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1444: iget: checksum invalid [ 523.853593][T13520] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 523.873348][T13520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 523.892018][T13520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 523.940875][T13523] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1445'. [ 524.375095][T13544] FAULT_INJECTION: forcing a failure. [ 524.375095][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 524.397101][T13544] CPU: 1 UID: 0 PID: 13544 Comm: syz.4.1448 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.397144][T13544] Tainted: [L]=SOFTLOCKUP [ 524.397154][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.397170][T13544] Call Trace: [ 524.397188][T13544] [ 524.397198][T13544] dump_stack_lvl+0x100/0x190 [ 524.397236][T13544] should_fail_ex.cold+0x5/0xa [ 524.397270][T13544] should_failslab+0xc2/0x120 [ 524.397308][T13544] kmem_cache_alloc_noprof+0x91/0x6a0 [ 524.397344][T13544] ? mas_preallocate+0x1105/0x14a0 [ 524.397391][T13544] mas_preallocate+0x1105/0x14a0 [ 524.397437][T13544] ? __pfx_mas_preallocate+0x10/0x10 [ 524.397487][T13544] ? anon_vma_name+0x5a/0x250 [ 524.397537][T13544] __split_vma+0x33d/0xda0 [ 524.397591][T13544] ? __pfx___split_vma+0x10/0x10 [ 524.397634][T13544] ? is_bpf_text_address+0x8a/0x1a0 [ 524.397674][T13544] ? is_bpf_text_address+0x8a/0x1a0 [ 524.397721][T13544] ? is_bpf_text_address+0x94/0x1a0 [ 524.397761][T13544] ? kernel_text_address+0x8d/0x100 [ 524.397803][T13544] ? __kernel_text_address+0xd/0x30 [ 524.397849][T13544] vms_gather_munmap_vmas+0x1d2/0x1720 [ 524.397905][T13544] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 524.397952][T13544] ? _parse_integer_limit+0x1ac/0x220 [ 524.397990][T13544] ? _kstrtoull+0x13c/0x1f0 [ 524.398018][T13544] ? __pfx__kstrtoull+0x10/0x10 [ 524.398061][T13544] do_vmi_align_munmap+0x287/0x5f0 [ 524.398097][T13544] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 524.398178][T13544] do_vmi_munmap+0x1f8/0x3e0 [ 524.398221][T13544] __vm_munmap+0x196/0x390 [ 524.398255][T13544] ? __pfx___vm_munmap+0x10/0x10 [ 524.398299][T13544] ? __pfx_ksys_write+0x10/0x10 [ 524.398352][T13544] __x64_sys_munmap+0x59/0x80 [ 524.398393][T13544] do_syscall_64+0x115/0x840 [ 524.398424][T13544] ? clear_bhb_loop+0x40/0x90 [ 524.398464][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.398495][T13544] RIP: 0033:0x7f3c3bf9de99 [ 524.398519][T13544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.398548][T13544] RSP: 002b:00007f3c3cda7028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 524.398586][T13544] RAX: ffffffffffffffda RBX: 00007f3c3c226090 RCX: 00007f3c3bf9de99 [ 524.398604][T13544] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000008000 [ 524.398619][T13544] RBP: 00007f3c3cda7090 R08: 0000000000000000 R09: 0000000000000000 [ 524.398636][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.398651][T13544] R13: 00007f3c3c226128 R14: 00007f3c3c226090 R15: 00007ffdb3a7f4f8 [ 524.398687][T13544] [ 524.860348][T13551] sd 0:0:1:0: PR command failed: 1026 [ 524.884003][T13551] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 524.917019][T13551] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 525.940908][T13519] kexec: Could not allocate control_code_buffer [ 526.737880][T13564] ima: policy update failed [ 526.742610][ T29] audit: type=1802 audit(4294967379.240:92): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1455" res=0 errno=0 [ 526.859609][T13572] Process accounting paused [ 528.466763][T13614] bond0: invalid ARP target specified [ 528.688668][T13612] nbd: socks must be embedded in a SOCK_ITEM attr [ 528.742292][T13612] block nbd0: shutting down sockets [ 529.121499][T13622] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 529.291308][T13484] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3 with max blocks 2 with error 117 [ 529.331242][T13484] EXT4-fs (sda1): This should not happen!! Data will be lost [ 529.331242][T13484] [ 530.707341][T13654] FAULT_INJECTION: forcing a failure. [ 530.707341][T13654] name failslab, interval 1, probability 0, space 0, times 0 [ 530.760091][T13654] CPU: 0 UID: 0 PID: 13654 Comm: syz.2.1471 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.760144][T13654] Tainted: [L]=SOFTLOCKUP [ 530.760156][T13654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 530.760175][T13654] Call Trace: [ 530.760185][T13654] [ 530.760197][T13654] dump_stack_lvl+0x100/0x190 [ 530.760250][T13654] should_fail_ex.cold+0x5/0xa [ 530.760289][T13654] should_failslab+0xc2/0x120 [ 530.760334][T13654] kmem_cache_alloc_noprof+0x91/0x6a0 [ 530.760372][T13654] ? __asan_memcpy+0x3c/0x60 [ 530.760403][T13654] ? __kernfs_new_node+0xd2/0xa10 [ 530.760459][T13654] __kernfs_new_node+0xd2/0xa10 [ 530.760518][T13654] ? stack_trace_save+0x8e/0xc0 [ 530.760558][T13654] ? __pfx_stack_trace_save+0x10/0x10 [ 530.760597][T13654] ? __pfx___kernfs_new_node+0x10/0x10 [ 530.760653][T13654] ? find_held_lock+0x2b/0x80 [ 530.760688][T13654] ? kernfs_root+0xee/0x2a0 [ 530.760728][T13654] ? kernfs_root+0xee/0x2a0 [ 530.760778][T13654] kernfs_create_dir_ns+0xa6/0x2b0 [ 530.760814][T13654] sysfs_create_dir_ns+0x13a/0x2b0 [ 530.760858][T13654] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 530.760897][T13654] ? find_held_lock+0x2b/0x80 [ 530.760931][T13654] ? kobject_add_internal+0x25f/0x930 [ 530.761041][T13654] ? kobject_add_internal+0x25f/0x930 [ 530.761087][T13654] ? class_dir_child_ns_type+0xd/0x60 [ 530.761168][T13654] kobject_add_internal+0x2c8/0x930 [ 530.761224][T13654] kobject_add+0x16a/0x1e0 [ 530.761268][T13654] ? __pfx_kobject_add+0x10/0x10 [ 530.761312][T13654] ? get_device_parent+0x1b3/0x4c0 [ 530.761354][T13654] ? kobject_put+0xb9/0x640 [ 530.761400][T13654] device_add+0x294/0x1970 [ 530.761449][T13654] ? __pfx_device_add+0x10/0x10 [ 530.761509][T13654] nfc_register_device+0x41/0x3e0 [ 530.761551][T13654] nci_register_device+0x7f1/0xb80 [ 530.761600][T13654] ? __pfx_nci_register_device+0x10/0x10 [ 530.761653][T13654] ? lockdep_init_map_type+0x5c/0x250 [ 530.761707][T13654] virtual_ncidev_open+0x141/0x220 [ 530.761755][T13654] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 530.761801][T13654] misc_open+0x26d/0x450 [ 530.761832][T13654] ? __pfx_misc_open+0x10/0x10 [ 530.761861][T13654] chrdev_open+0x234/0x6a0 [ 530.761890][T13654] ? __pfx_apparmor_file_open+0x10/0x10 [ 530.761923][T13654] ? __pfx_chrdev_open+0x10/0x10 [ 530.761955][T13654] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 530.762006][T13654] do_dentry_open+0x6ab/0x14d0 [ 530.762052][T13654] ? __pfx_chrdev_open+0x10/0x10 [ 530.762088][T13654] vfs_open+0x82/0x3f0 [ 530.762127][T13654] path_openat+0x2873/0x4280 [ 530.762171][T13654] ? __pfx_path_openat+0x10/0x10 [ 530.762208][T13654] do_file_open+0x20e/0x430 [ 530.762247][T13654] ? __pfx_do_file_open+0x10/0x10 [ 530.762301][T13654] ? alloc_fd+0x471/0x7a0 [ 530.762368][T13654] ? do_getname+0x191/0x390 [ 530.762414][T13654] do_sys_openat2+0x10f/0x1e0 [ 530.762454][T13654] ? __pfx_do_sys_openat2+0x10/0x10 [ 530.762506][T13654] __x64_sys_openat+0x12d/0x210 [ 530.762547][T13654] ? __pfx___x64_sys_openat+0x10/0x10 [ 530.762601][T13654] do_syscall_64+0x115/0x840 [ 530.762633][T13654] ? clear_bhb_loop+0x40/0x90 [ 530.762671][T13654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.762703][T13654] RIP: 0033:0x7f9f2cb9de99 [ 530.762729][T13654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.762760][T13654] RSP: 002b:00007f9f2daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 530.762792][T13654] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa0 RCX: 00007f9f2cb9de99 [ 530.762812][T13654] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 530.762832][T13654] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 530.762851][T13654] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 530.762869][T13654] R13: 00007f9f2ce26038 R14: 00007f9f2ce25fa0 R15: 00007fff8a046db8 [ 530.762910][T13654] [ 530.779055][T13654] kobject: kobject_add_internal failed for nfc2 (error: -12 parent: nfc) [ 530.876059][T11574] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 531.555752][T13676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1474'. [ 531.870994][T13700] sd 0:0:1:0: PR command failed: 1026 [ 531.881063][T13700] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 531.904143][T13700] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 531.950231][T13666] Process accounting resumed [ 532.474805][T13717] FAULT_INJECTION: forcing a failure. [ 532.474805][T13717] name failslab, interval 1, probability 0, space 0, times 0 [ 532.512812][T13717] CPU: 0 UID: 0 PID: 13717 Comm: syz.2.1478 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.512853][T13717] Tainted: [L]=SOFTLOCKUP [ 532.512860][T13717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.512873][T13717] Call Trace: [ 532.512881][T13717] [ 532.512888][T13717] dump_stack_lvl+0x100/0x190 [ 532.512916][T13717] should_fail_ex.cold+0x5/0xa [ 532.512940][T13717] should_failslab+0xc2/0x120 [ 532.512969][T13717] kmem_cache_alloc_noprof+0x91/0x6a0 [ 532.512994][T13717] ? rcu_is_watching+0x12/0xc0 [ 532.513019][T13717] ? prepare_creds+0x2c/0x950 [ 532.513053][T13717] prepare_creds+0x2c/0x950 [ 532.513098][T13717] __sys_setresuid+0x458/0x1280 [ 532.513122][T13717] do_syscall_64+0x115/0x840 [ 532.513162][T13717] ? clear_bhb_loop+0x40/0x90 [ 532.513189][T13717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.513211][T13717] RIP: 0033:0x7f9f2cb9de99 [ 532.513228][T13717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.513249][T13717] RSP: 002b:00007f9f2daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 532.513269][T13717] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa0 RCX: 00007f9f2cb9de99 [ 532.513284][T13717] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.513296][T13717] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 532.513309][T13717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.513322][T13717] R13: 00007f9f2ce26038 R14: 00007f9f2ce25fa0 R15: 00007fff8a046db8 [ 532.513349][T13717] [ 532.990941][T13722] netlink: Unknown NAT attribute (type=262, max=9) [ 533.243250][T13712] ima: policy update failed [ 533.292476][ T29] audit: type=1802 audit(4294967385.790:93): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1476" res=0 errno=0 [ 534.996775][T11574] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 536.276210][T13817] ima: policy update failed [ 536.281191][ T29] audit: type=1802 audit(4294967388.780:94): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1490" res=0 errno=0 [ 536.998552][T13842] ima: policy update failed [ 537.003307][ T29] audit: type=1802 audit(4294967389.500:95): pid=13842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1494" res=0 errno=0 [ 537.803081][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'. [ 539.507487][ T29] audit: type=1804 audit(4294967392.000:96): pid=13911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1504" name="/newroot/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger" dev="tracefs" ino=19680823 res=1 errno=0 [ 539.680745][T13907] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 540.698410][T13933] sd 0:0:1:0: PR command failed: 1026 [ 540.733309][T13933] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 540.773081][T13933] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 540.914108][T13933] FAULT_INJECTION: forcing a failure. [ 540.914108][T13933] name failslab, interval 1, probability 0, space 0, times 0 [ 540.962449][T13933] CPU: 1 UID: 0 PID: 13933 Comm: syz.1.1509 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.962497][T13933] Tainted: [L]=SOFTLOCKUP [ 540.962507][T13933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 540.962524][T13933] Call Trace: [ 540.962533][T13933] [ 540.962543][T13933] dump_stack_lvl+0x100/0x190 [ 540.962583][T13933] should_fail_ex.cold+0x5/0xa [ 540.962617][T13933] should_failslab+0xc2/0x120 [ 540.962656][T13933] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 540.962691][T13933] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 540.962740][T13933] ? sock_alloc_inode+0x26/0x2c0 [ 540.962790][T13933] ? __pfx_sock_alloc_inode+0x10/0x10 [ 540.962833][T13933] sock_alloc_inode+0x26/0x2c0 [ 540.962873][T13933] ? __pfx_sock_alloc_inode+0x10/0x10 [ 540.962912][T13933] alloc_inode+0x68/0x250 [ 540.962947][T13933] sock_alloc+0x44/0x280 [ 540.962983][T13933] ? security_socket_create+0x7f/0x250 [ 540.963021][T13933] __sock_create+0xc2/0x860 [ 540.963068][T13933] ? lockdep_init_map_type+0x5c/0x250 [ 540.963119][T13933] smc_create+0x163/0x290 [ 540.963149][T13933] __sock_create+0x339/0x860 [ 540.963200][T13933] __sys_socket+0x14d/0x260 [ 540.963228][T13933] ? __pfx___sys_socket+0x10/0x10 [ 540.963265][T13933] __x64_sys_socket+0x72/0xb0 [ 540.963290][T13933] ? lockdep_hardirqs_on+0x78/0x100 [ 540.963320][T13933] do_syscall_64+0x115/0x840 [ 540.963349][T13933] ? clear_bhb_loop+0x40/0x90 [ 540.963384][T13933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.963413][T13933] RIP: 0033:0x7f2249d9de99 [ 540.963436][T13933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.963464][T13933] RSP: 002b:00007f224acf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 540.963492][T13933] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 540.963511][T13933] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 540.963528][T13933] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 540.963545][T13933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.963561][T13933] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 540.963597][T13933] [ 541.188847][T13933] socket: no more sockets [ 541.520085][T13944] sd 0:0:1:0: PR command failed: 1026 [ 541.552397][T13944] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 541.583796][T13944] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 542.055779][T13958] FAULT_INJECTION: forcing a failure. [ 542.055779][T13958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.096293][T13958] CPU: 1 UID: 0 PID: 13958 Comm: syz.2.1516 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.096324][T13958] Tainted: [L]=SOFTLOCKUP [ 542.096331][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.096342][T13958] Call Trace: [ 542.096349][T13958] [ 542.096356][T13958] dump_stack_lvl+0x100/0x190 [ 542.096384][T13958] should_fail_ex.cold+0x5/0xa [ 542.096406][T13958] _copy_from_user+0x2e/0xd0 [ 542.096437][T13958] copy_msghdr_from_user+0x9f/0x4c0 [ 542.096472][T13958] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 542.096515][T13958] ___sys_sendmsg+0x106/0x1e0 [ 542.096564][T13958] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.096596][T13958] ? __lock_acquire+0x49f/0x1a40 [ 542.096628][T13958] ? get_pid_task+0x106/0x250 [ 542.096680][T13958] __sys_sendmsg+0x160/0x210 [ 542.096707][T13958] ? __pfx___sys_sendmsg+0x10/0x10 [ 542.096748][T13958] do_syscall_64+0x115/0x840 [ 542.096770][T13958] ? clear_bhb_loop+0x40/0x90 [ 542.096795][T13958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.096836][T13958] RIP: 0033:0x7f9f2cb9de99 [ 542.096859][T13958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.096887][T13958] RSP: 002b:00007f9f2daa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.096913][T13958] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa0 RCX: 00007f9f2cb9de99 [ 542.096938][T13958] RDX: 000000000000c000 RSI: 0000200000000140 RDI: 0000000000000003 [ 542.096956][T13958] RBP: 00007f9f2daa3090 R08: 0000000000000000 R09: 0000000000000000 [ 542.096973][T13958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.096991][T13958] R13: 00007f9f2ce26038 R14: 00007f9f2ce25fa0 R15: 00007fff8a046db8 [ 542.097029][T13958] [ 544.078504][T13986] FAULT_INJECTION: forcing a failure. [ 544.078504][T13986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.126707][T13986] CPU: 0 UID: 0 PID: 13986 Comm: syz.2.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.126748][T13986] Tainted: [L]=SOFTLOCKUP [ 544.126757][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.126773][T13986] Call Trace: [ 544.126781][T13986] [ 544.126791][T13986] dump_stack_lvl+0x100/0x190 [ 544.126831][T13986] should_fail_ex.cold+0x5/0xa [ 544.126861][T13986] _copy_from_user+0x2e/0xd0 [ 544.126901][T13986] copy_msghdr_from_user+0x9f/0x4c0 [ 544.126947][T13986] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 544.126999][T13986] ? __lock_acquire+0x49f/0x1a40 [ 544.127045][T13986] ___sys_recvmsg+0xdd/0x1a0 [ 544.127090][T13986] ? __pfx____sys_recvmsg+0x10/0x10 [ 544.127136][T13986] ? find_held_lock+0x2b/0x80 [ 544.127189][T13986] do_recvmmsg+0x2f3/0x740 [ 544.127238][T13986] ? __pfx_do_recvmmsg+0x10/0x10 [ 544.127296][T13986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 544.127351][T13986] __x64_sys_recvmmsg+0x22a/0x280 [ 544.127389][T13986] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 544.127436][T13986] do_syscall_64+0x115/0x840 [ 544.127465][T13986] ? clear_bhb_loop+0x40/0x90 [ 544.127499][T13986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.127527][T13986] RIP: 0033:0x7f9f2cb9de99 [ 544.127549][T13986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.127576][T13986] RSP: 002b:00007f9f2daa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 544.127602][T13986] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa0 RCX: 00007f9f2cb9de99 [ 544.127619][T13986] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 544.127635][T13986] RBP: 00007f9f2daa3090 R08: 0000000000000000 R09: 0000000000000000 [ 544.127651][T13986] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 544.127667][T13986] R13: 00007f9f2ce26038 R14: 00007f9f2ce25fa0 R15: 00007fff8a046db8 [ 544.127702][T13986] [ 544.505275][T13991] Process accounting paused [ 544.700724][T14002] Process accounting paused [ 545.181938][T14017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1530'. [ 545.245727][T14023] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 545.260694][T14023] bond0: option packets_per_slave: allowed values 0 - 65535 [ 547.230362][T14045] ima: policy update failed [ 547.240194][ T29] audit: type=1802 audit(4294967399.740:97): pid=14045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1536" res=0 errno=0 [ 548.229802][T14083] FAULT_INJECTION: forcing a failure. [ 548.229802][T14083] name failslab, interval 1, probability 0, space 0, times 0 [ 548.258181][T14083] CPU: 0 UID: 0 PID: 14083 Comm: syz.1.1542 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.258227][T14083] Tainted: [L]=SOFTLOCKUP [ 548.258238][T14083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.258255][T14083] Call Trace: [ 548.258265][T14083] [ 548.258276][T14083] dump_stack_lvl+0x100/0x190 [ 548.258335][T14083] should_fail_ex.cold+0x5/0xa [ 548.258373][T14083] should_failslab+0xc2/0x120 [ 548.258419][T14083] kmem_cache_alloc_noprof+0x91/0x6a0 [ 548.258460][T14083] ? __kernfs_new_node+0xd2/0xa10 [ 548.258518][T14083] __kernfs_new_node+0xd2/0xa10 [ 548.258575][T14083] ? __pfx___kernfs_new_node+0x10/0x10 [ 548.258637][T14083] ? find_held_lock+0x2b/0x80 [ 548.258675][T14083] ? kernfs_root+0xee/0x2a0 [ 548.258720][T14083] ? kernfs_root+0xee/0x2a0 [ 548.258794][T14083] kernfs_new_node+0x117/0x150 [ 548.258855][T14083] __kernfs_create_file+0x53/0x350 [ 548.258901][T14083] sysfs_add_file_mode_ns+0x207/0x3c0 [ 548.258964][T14083] sysfs_merge_group+0x194/0x340 [ 548.259016][T14083] ? __pfx_sysfs_merge_group+0x10/0x10 [ 548.259080][T14083] ? bus_add_device+0x2e2/0x6c0 [ 548.259119][T14083] ? __pfx_bus_add_device+0x10/0x10 [ 548.259152][T14083] ? __pfx_dev_add_physical_location+0x10/0x10 [ 548.259214][T14083] dpm_sysfs_add+0x237/0x280 [ 548.259264][T14083] device_add+0x9f4/0x1970 [ 548.259317][T14083] ? __pfx_device_add+0x10/0x10 [ 548.259373][T14083] ? irqentry_exit+0x24d/0xa00 [ 548.259417][T14083] nfc_register_device+0x41/0x3e0 [ 548.259458][T14083] nci_register_device+0x7f1/0xb80 [ 548.259511][T14083] ? __pfx_nci_register_device+0x10/0x10 [ 548.259579][T14083] ? lockdep_init_map_type+0x5c/0x250 [ 548.259635][T14083] virtual_ncidev_open+0x141/0x220 [ 548.259681][T14083] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 548.259726][T14083] misc_open+0x26d/0x450 [ 548.259756][T14083] ? __pfx_misc_open+0x10/0x10 [ 548.259785][T14083] chrdev_open+0x234/0x6a0 [ 548.259814][T14083] ? __pfx_apparmor_file_open+0x10/0x10 [ 548.259847][T14083] ? __pfx_chrdev_open+0x10/0x10 [ 548.259880][T14083] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 548.259922][T14083] do_dentry_open+0x6ab/0x14d0 [ 548.259980][T14083] ? __pfx_chrdev_open+0x10/0x10 [ 548.260017][T14083] vfs_open+0x82/0x3f0 [ 548.260058][T14083] path_openat+0x2873/0x4280 [ 548.260104][T14083] ? __pfx_path_openat+0x10/0x10 [ 548.260143][T14083] do_file_open+0x20e/0x430 [ 548.260176][T14083] ? __pfx_do_file_open+0x10/0x10 [ 548.260233][T14083] ? alloc_fd+0x471/0x7a0 [ 548.260286][T14083] ? do_getname+0x191/0x390 [ 548.260326][T14083] do_sys_openat2+0x10f/0x1e0 [ 548.260366][T14083] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.260419][T14083] __x64_sys_openat+0x12d/0x210 [ 548.260459][T14083] ? __pfx___x64_sys_openat+0x10/0x10 [ 548.260514][T14083] do_syscall_64+0x115/0x840 [ 548.260546][T14083] ? clear_bhb_loop+0x40/0x90 [ 548.260584][T14083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.260617][T14083] RIP: 0033:0x7f2249d9de99 [ 548.260642][T14083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.260673][T14083] RSP: 002b:00007f224acf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.260703][T14083] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 548.260723][T14083] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 548.260742][T14083] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 548.260761][T14083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.260780][T14083] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 548.260822][T14083] [ 549.064909][T14085] ima: policy update failed [ 549.072926][ T29] audit: type=1802 audit(4294967401.570:98): pid=14085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1543" res=0 errno=0 [ 549.602318][T14104] sd 0:0:1:0: PR command failed: 1026 [ 549.609366][T14104] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 549.616216][T14104] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 550.017480][T14107] FAULT_INJECTION: forcing a failure. [ 550.017480][T14107] name failslab, interval 1, probability 0, space 0, times 0 [ 550.047103][T14107] CPU: 0 UID: 0 PID: 14107 Comm: syz.3.1548 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.047147][T14107] Tainted: [L]=SOFTLOCKUP [ 550.047158][T14107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.047176][T14107] Call Trace: [ 550.047185][T14107] [ 550.047196][T14107] dump_stack_lvl+0x100/0x190 [ 550.047237][T14107] should_fail_ex.cold+0x5/0xa [ 550.047272][T14107] should_failslab+0xc2/0x120 [ 550.047317][T14107] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 550.047350][T14107] ? kernel_text_address+0x8d/0x100 [ 550.047406][T14107] ? __kmalloc_node_track_caller_noprof+0x331/0x830 [ 550.047439][T14107] ? kstrdup_const+0x63/0x80 [ 550.047472][T14107] kstrdup+0x51/0xe0 [ 550.047499][T14107] kstrdup_const+0x63/0x80 [ 550.047526][T14107] __kernfs_new_node+0x9b/0xa10 [ 550.047567][T14107] ? stack_trace_save+0x8e/0xc0 [ 550.047600][T14107] ? __pfx_stack_trace_save+0x10/0x10 [ 550.047633][T14107] ? __pfx___kernfs_new_node+0x10/0x10 [ 550.047680][T14107] ? find_held_lock+0x2b/0x80 [ 550.047709][T14107] ? kernfs_root+0xee/0x2a0 [ 550.047744][T14107] ? kernfs_root+0xee/0x2a0 [ 550.047787][T14107] kernfs_create_dir_ns+0xa6/0x2b0 [ 550.047819][T14107] sysfs_create_dir_ns+0x13a/0x2b0 [ 550.047866][T14107] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 550.047898][T14107] ? find_held_lock+0x2b/0x80 [ 550.047925][T14107] ? kobject_add_internal+0x25f/0x930 [ 550.047958][T14107] ? kobject_add_internal+0x25f/0x930 [ 550.047994][T14107] ? class_dir_child_ns_type+0xd/0x60 [ 550.048034][T14107] kobject_add_internal+0x2c8/0x930 [ 550.048074][T14107] kobject_add+0x16a/0x1e0 [ 550.048107][T14107] ? __pfx_kobject_add+0x10/0x10 [ 550.048142][T14107] ? get_device_parent+0x1b3/0x4c0 [ 550.048174][T14107] ? kobject_put+0xb9/0x640 [ 550.048212][T14107] device_add+0x294/0x1970 [ 550.048250][T14107] ? __pfx_device_add+0x10/0x10 [ 550.048295][T14107] nfc_register_device+0x41/0x3e0 [ 550.048330][T14107] nci_register_device+0x7f1/0xb80 [ 550.048370][T14107] ? __pfx_nci_register_device+0x10/0x10 [ 550.048411][T14107] ? lockdep_init_map_type+0x5c/0x250 [ 550.048457][T14107] virtual_ncidev_open+0x141/0x220 [ 550.048493][T14107] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 550.048528][T14107] misc_open+0x26d/0x450 [ 550.048552][T14107] ? __pfx_misc_open+0x10/0x10 [ 550.048574][T14107] chrdev_open+0x234/0x6a0 [ 550.048596][T14107] ? __pfx_apparmor_file_open+0x10/0x10 [ 550.048621][T14107] ? __pfx_chrdev_open+0x10/0x10 [ 550.048645][T14107] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 550.048677][T14107] do_dentry_open+0x6ab/0x14d0 [ 550.048715][T14107] ? __pfx_chrdev_open+0x10/0x10 [ 550.048747][T14107] vfs_open+0x82/0x3f0 [ 550.048779][T14107] path_openat+0x2873/0x4280 [ 550.048815][T14107] ? __pfx_path_openat+0x10/0x10 [ 550.048845][T14107] do_file_open+0x20e/0x430 [ 550.048870][T14107] ? __pfx_do_file_open+0x10/0x10 [ 550.048912][T14107] ? alloc_fd+0x471/0x7a0 [ 550.048952][T14107] ? do_getname+0x191/0x390 [ 550.048983][T14107] do_sys_openat2+0x10f/0x1e0 [ 550.049013][T14107] ? __pfx_do_sys_openat2+0x10/0x10 [ 550.049045][T14107] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.049089][T14107] __x64_sys_openat+0x12d/0x210 [ 550.049120][T14107] ? __pfx___x64_sys_openat+0x10/0x10 [ 550.049162][T14107] do_syscall_64+0x115/0x840 [ 550.049186][T14107] ? clear_bhb_loop+0x40/0x90 [ 550.049215][T14107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.049240][T14107] RIP: 0033:0x7f8d59b9de99 [ 550.049260][T14107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.049302][T14107] RSP: 002b:00007f8d5aafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 550.049333][T14107] RAX: ffffffffffffffda RBX: 00007f8d59e25fa0 RCX: 00007f8d59b9de99 [ 550.049349][T14107] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 550.049365][T14107] RBP: 00007f8d59c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 550.049381][T14107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.049396][T14107] R13: 00007f8d59e26038 R14: 00007f8d59e25fa0 R15: 00007fff0ebe8e38 [ 550.049429][T14107] [ 550.536996][T14107] kobject: kobject_add_internal failed for nfc2 (error: -12 parent: nfc) [ 551.079155][T14125] FAULT_INJECTION: forcing a failure. [ 551.079155][T14125] name failslab, interval 1, probability 0, space 0, times 0 [ 551.134702][T14125] CPU: 1 UID: 0 PID: 14125 Comm: syz.2.1550 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.134751][T14125] Tainted: [L]=SOFTLOCKUP [ 551.134763][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.134782][T14125] Call Trace: [ 551.134793][T14125] [ 551.134805][T14125] dump_stack_lvl+0x100/0x190 [ 551.134848][T14125] should_fail_ex.cold+0x5/0xa [ 551.134887][T14125] should_failslab+0xc2/0x120 [ 551.134932][T14125] kmem_cache_alloc_noprof+0x91/0x6a0 [ 551.134974][T14125] ? fcntl_setlk+0xaa/0xe20 [ 551.135114][T14125] fcntl_setlk+0xaa/0xe20 [ 551.135146][T14125] ? lockdep_hardirqs_on+0x78/0x100 [ 551.135185][T14125] ? __pfx_fcntl_setlk+0x10/0x10 [ 551.135236][T14125] ? rep_movs_alternative+0x30/0xa0 [ 551.135298][T14125] do_fcntl+0xf39/0x1670 [ 551.135334][T14125] ? __pfx_do_fcntl+0x10/0x10 [ 551.135368][T14125] ? __fget_files+0x215/0x3d0 [ 551.135430][T14125] ? tomoyo_file_fcntl+0x6c/0xc0 [ 551.135492][T14125] __x64_sys_fcntl+0x163/0x200 [ 551.135537][T14125] do_syscall_64+0x115/0x840 [ 551.135570][T14125] ? clear_bhb_loop+0x40/0x90 [ 551.135617][T14125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.135647][T14125] RIP: 0033:0x7f9f2cb9de99 [ 551.135671][T14125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.135699][T14125] RSP: 002b:00007f9f2da40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 551.135728][T14125] RAX: ffffffffffffffda RBX: 00007f9f2ce26270 RCX: 00007f9f2cb9de99 [ 551.135747][T14125] RDX: 0000000000002009 RSI: 0000000000000006 RDI: 0000000000000003 [ 551.135764][T14125] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 551.135780][T14125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.135796][T14125] R13: 00007f9f2ce26308 R14: 00007f9f2ce26270 R15: 00007fff8a046db8 [ 551.135831][T14125] [ 551.513439][T14108] ima: policy update failed [ 551.513591][ T29] audit: type=1802 audit(4294967404.010:99): pid=14108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1549" res=0 errno=0 [ 554.394828][T14182] FAULT_INJECTION: forcing a failure. [ 554.394828][T14182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.421004][T14182] CPU: 1 UID: 0 PID: 14182 Comm: syz.1.1562 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.421051][T14182] Tainted: [L]=SOFTLOCKUP [ 554.421063][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 554.421081][T14182] Call Trace: [ 554.421091][T14182] [ 554.421102][T14182] dump_stack_lvl+0x100/0x190 [ 554.421147][T14182] should_fail_ex.cold+0x5/0xa [ 554.421178][T14182] ? prepare_alloc_pages+0x16d/0x5f0 [ 554.421224][T14182] should_fail_alloc_page+0xeb/0x140 [ 554.421268][T14182] prepare_alloc_pages+0x1f0/0x5f0 [ 554.421310][T14182] ? unwind_get_return_address+0x59/0xa0 [ 554.421359][T14182] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 554.421406][T14182] ? stack_trace_save+0x8e/0xc0 [ 554.421445][T14182] ? __pfx_stack_trace_save+0x10/0x10 [ 554.421494][T14182] ? stack_depot_save_flags+0x27/0x9d0 [ 554.421584][T14182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 554.421636][T14182] ? kasan_save_stack+0x30/0x50 [ 554.421671][T14182] ? kasan_save_track+0x14/0x30 [ 554.421705][T14182] ? __kasan_slab_alloc+0x89/0x90 [ 554.421740][T14182] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 554.421773][T14182] ? __pmd_alloc+0xbf/0x950 [ 554.421812][T14182] ? copy_page_range+0x41a8/0x5b20 [ 554.421858][T14182] ? dup_mmap+0xd44/0x21b0 [ 554.421897][T14182] ? copy_process+0x4588/0x8030 [ 554.421929][T14182] ? kernel_clone+0x176/0x9d0 [ 554.421961][T14182] ? __do_sys_clone+0xd9/0x120 [ 554.421993][T14182] ? do_syscall_64+0x115/0x840 [ 554.422026][T14182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.422085][T14182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 554.422132][T14182] ? policy_nodemask+0xed/0x4f0 [ 554.422180][T14182] alloc_pages_mpol+0x1fb/0x540 [ 554.422224][T14182] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 554.422277][T14182] alloc_pages_noprof+0x1a/0x160 [ 554.422326][T14182] pte_alloc_one+0x1c/0x3d0 [ 554.422373][T14182] __pte_alloc+0x6d/0x3e0 [ 554.422411][T14182] ? __pfx___pte_alloc+0x10/0x10 [ 554.422449][T14182] ? _raw_spin_unlock+0x28/0x50 [ 554.422503][T14182] ? __pmd_alloc+0x3fb/0x950 [ 554.422551][T14182] copy_page_range+0x3dd8/0x5b20 [ 554.422642][T14182] ? mas_wr_store_entry+0xa1/0x1e80 [ 554.422685][T14182] ? __pfx_copy_page_range+0x10/0x10 [ 554.422742][T14182] ? mas_store+0x666/0xac0 [ 554.422784][T14182] ? __pfx_mas_store+0x10/0x10 [ 554.422833][T14182] ? __pfx___vma_start_write+0x10/0x10 [ 554.422892][T14182] dup_mmap+0xd44/0x21b0 [ 554.422951][T14182] ? __pfx_dup_mmap+0x10/0x10 [ 554.422993][T14182] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 554.423051][T14182] ? __lock_acquire+0x49f/0x1a40 [ 554.423098][T14182] ? find_held_lock+0x2b/0x80 [ 554.423133][T14182] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 554.423205][T14182] copy_process+0x4588/0x8030 [ 554.423262][T14182] ? __pfx_copy_process+0x10/0x10 [ 554.423316][T14182] kernel_clone+0x176/0x9d0 [ 554.423354][T14182] ? __pfx_kernel_clone+0x10/0x10 [ 554.423409][T14182] __do_sys_clone+0xd9/0x120 [ 554.423445][T14182] ? __pfx___do_sys_clone+0x10/0x10 [ 554.423520][T14182] do_syscall_64+0x115/0x840 [ 554.423554][T14182] ? clear_bhb_loop+0x40/0x90 [ 554.423592][T14182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.423625][T14182] RIP: 0033:0x7f2249d9de99 [ 554.423649][T14182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.423680][T14182] RSP: 002b:00007f224acf6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 554.423709][T14182] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 554.423729][T14182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.423746][T14182] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 554.423764][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.423783][T14182] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 554.423821][T14182] [ 554.819583][T14165] ima: policy update failed [ 554.834103][ T29] audit: type=1802 audit(4294967407.320:100): pid=14165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1559" res=0 errno=0 [ 555.764464][T14205] binder: 14204:14205 ioctl 541b 0 returned -22 [ 556.002595][T14214] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1568'. [ 556.332895][T14222] FAULT_INJECTION: forcing a failure. [ 556.332895][T14222] name failslab, interval 1, probability 0, space 0, times 0 [ 556.368129][T14222] CPU: 0 UID: 0 PID: 14222 Comm: syz.1.1571 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.368172][T14222] Tainted: [L]=SOFTLOCKUP [ 556.368181][T14222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 556.368198][T14222] Call Trace: [ 556.368208][T14222] [ 556.368218][T14222] dump_stack_lvl+0x100/0x190 [ 556.368256][T14222] should_fail_ex.cold+0x5/0xa [ 556.368290][T14222] should_failslab+0xc2/0x120 [ 556.368335][T14222] __kmalloc_noprof+0xfc/0x820 [ 556.368372][T14222] ? process_preds+0x452/0x1d90 [ 556.368418][T14222] process_preds+0x452/0x1d90 [ 556.368471][T14222] apply_subsystem_event_filter+0x4a0/0x17a0 [ 556.368525][T14222] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 556.368573][T14222] ? _copy_from_user+0x59/0xd0 [ 556.368619][T14222] subsystem_filter_write+0x95/0x120 [ 556.368660][T14222] vfs_write+0x2aa/0x1050 [ 556.368703][T14222] ? __pfx_subsystem_filter_write+0x10/0x10 [ 556.368747][T14222] ? __pfx_vfs_write+0x10/0x10 [ 556.368790][T14222] ? __fget_files+0x215/0x3d0 [ 556.368842][T14222] ? __fget_files+0x21f/0x3d0 [ 556.368894][T14222] ksys_write+0x12a/0x250 [ 556.368937][T14222] ? __pfx_ksys_write+0x10/0x10 [ 556.368989][T14222] do_syscall_64+0x115/0x840 [ 556.369021][T14222] ? clear_bhb_loop+0x40/0x90 [ 556.369058][T14222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.369088][T14222] RIP: 0033:0x7f2249d9de99 [ 556.369111][T14222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.369138][T14222] RSP: 002b:00007f224acf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 556.369164][T14222] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 556.369183][T14222] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000008 [ 556.369200][T14222] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 556.369222][T14222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.369235][T14222] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 556.369261][T14222] [ 559.102184][T14267] FAULT_INJECTION: forcing a failure. [ 559.102184][T14267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.159011][T14267] CPU: 0 UID: 0 PID: 14267 Comm: syz.2.1579 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.159053][T14267] Tainted: [L]=SOFTLOCKUP [ 559.159062][T14267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.159078][T14267] Call Trace: [ 559.159086][T14267] [ 559.159096][T14267] dump_stack_lvl+0x100/0x190 [ 559.159132][T14267] should_fail_ex.cold+0x5/0xa [ 559.159163][T14267] _copy_from_user+0x2e/0xd0 [ 559.159204][T14267] move_addr_to_kernel+0x65/0x170 [ 559.159251][T14267] __sys_bind+0x11d/0x260 [ 559.159280][T14267] ? __pfx___sys_bind+0x10/0x10 [ 559.159305][T14267] ? __fget_files+0x21f/0x3d0 [ 559.159359][T14267] ? __pfx_ksys_write+0x10/0x10 [ 559.159409][T14267] __x64_sys_bind+0x72/0xb0 [ 559.159435][T14267] ? lockdep_hardirqs_on+0x78/0x100 [ 559.159463][T14267] do_syscall_64+0x115/0x840 [ 559.159491][T14267] ? clear_bhb_loop+0x40/0x90 [ 559.159525][T14267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.159553][T14267] RIP: 0033:0x7f9f2cb9de99 [ 559.159575][T14267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.159603][T14267] RSP: 002b:00007f9f2daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 559.159635][T14267] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa0 RCX: 00007f9f2cb9de99 [ 559.159653][T14267] RDX: 000000000000006b RSI: 0000200000000240 RDI: 0000000000000004 [ 559.159669][T14267] RBP: 00007f9f2daa3090 R08: 0000000000000000 R09: 0000000000000000 [ 559.159686][T14267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.159702][T14267] R13: 00007f9f2ce26038 R14: 00007f9f2ce25fa0 R15: 00007fff8a046db8 [ 559.159738][T14267] [ 559.798434][ T29] audit: type=1804 audit(4294967412.300:101): pid=14284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1585" name="/newroot/407/file0" dev="tmpfs" ino=2197 res=1 errno=0 [ 559.845381][ T29] audit: type=1804 audit(4294967412.320:102): pid=14285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1585" name="/newroot/407/file0" dev="tmpfs" ino=2197 res=1 errno=0 [ 560.238666][T14296] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 560.256658][T14296] bond0: option packets_per_slave: allowed values 0 - 65535 [ 560.294569][T14297] FAULT_INJECTION: forcing a failure. [ 560.294569][T14297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.340016][T14297] CPU: 1 UID: 0 PID: 14297 Comm: syz.1.1588 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.340069][T14297] Tainted: [L]=SOFTLOCKUP [ 560.340079][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 560.340097][T14297] Call Trace: [ 560.340106][T14297] [ 560.340117][T14297] dump_stack_lvl+0x100/0x190 [ 560.340166][T14297] should_fail_ex.cold+0x5/0xa [ 560.340218][T14297] _copy_from_user+0x2e/0xd0 [ 560.340275][T14297] copy_msghdr_from_user+0x9f/0x4c0 [ 560.340324][T14297] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 560.340378][T14297] ? rcu_is_watching+0x12/0xc0 [ 560.340409][T14297] ? ___sys_sendmsg+0x19d/0x1e0 [ 560.340453][T14297] ? kfree+0x1e5/0x6c0 [ 560.340503][T14297] ___sys_sendmsg+0x106/0x1e0 [ 560.340552][T14297] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.340634][T14297] ? __pfx___might_resched+0x10/0x10 [ 560.340695][T14297] __sys_sendmmsg+0x20c/0x440 [ 560.340734][T14297] ? __pfx___sys_sendmmsg+0x10/0x10 [ 560.340768][T14297] ? ksys_write+0x190/0x250 [ 560.340834][T14297] ? fput+0x79/0x100 [ 560.340863][T14297] ? ksys_write+0x1ac/0x250 [ 560.340904][T14297] ? __pfx_ksys_write+0x10/0x10 [ 560.340951][T14297] __x64_sys_sendmmsg+0x9c/0x100 [ 560.340986][T14297] ? lockdep_hardirqs_on+0x78/0x100 [ 560.341015][T14297] do_syscall_64+0x115/0x840 [ 560.341048][T14297] ? clear_bhb_loop+0x40/0x90 [ 560.341081][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.341110][T14297] RIP: 0033:0x7f2249d9de99 [ 560.341132][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.341157][T14297] RSP: 002b:00007f224acd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 560.341183][T14297] RAX: ffffffffffffffda RBX: 00007f224a026090 RCX: 00007f2249d9de99 [ 560.341200][T14297] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 560.341215][T14297] RBP: 00007f224acd6090 R08: 0000000000000000 R09: 0000000000000000 [ 560.341231][T14297] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000002 [ 560.341246][T14297] R13: 00007f224a026128 R14: 00007f224a026090 R15: 00007ffe689744c8 [ 560.341280][T14297] [ 560.641432][T14276] ima: policy update failed [ 560.664637][ T29] audit: type=1802 audit(4294967413.150:103): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1584" res=0 errno=0 [ 562.386701][T14329] sd 0:0:1:0: PR command failed: 1026 [ 562.396245][T14329] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 562.405321][T14329] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 562.497365][T14329] FAULT_INJECTION: forcing a failure. [ 562.497365][T14329] name failslab, interval 1, probability 0, space 0, times 0 [ 562.519052][T14329] CPU: 0 UID: 0 PID: 14329 Comm: syz.2.1594 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.519100][T14329] Tainted: [L]=SOFTLOCKUP [ 562.519111][T14329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.519128][T14329] Call Trace: [ 562.519138][T14329] [ 562.519149][T14329] dump_stack_lvl+0x100/0x190 [ 562.519188][T14329] should_fail_ex.cold+0x5/0xa [ 562.519222][T14329] should_failslab+0xc2/0x120 [ 562.519261][T14329] kmem_cache_alloc_noprof+0x91/0x6a0 [ 562.519295][T14329] ? __pfx_map_id_range_down+0x10/0x10 [ 562.519335][T14329] ? security_inode_alloc+0x3b/0x2c0 [ 562.519383][T14329] security_inode_alloc+0x3b/0x2c0 [ 562.519415][T14329] inode_init_always_gfp+0xc77/0xfb0 [ 562.519465][T14329] alloc_inode+0x8e/0x250 [ 562.519500][T14329] sock_alloc+0x44/0x280 [ 562.519536][T14329] ? security_socket_create+0x7f/0x250 [ 562.519567][T14329] __sock_create+0xc2/0x860 [ 562.519613][T14329] ? lockdep_init_map_type+0x5c/0x250 [ 562.519667][T14329] smc_create+0x163/0x290 [ 562.519701][T14329] __sock_create+0x339/0x860 [ 562.519756][T14329] __sys_socket+0x14d/0x260 [ 562.519786][T14329] ? __pfx___sys_socket+0x10/0x10 [ 562.519825][T14329] __x64_sys_socket+0x72/0xb0 [ 562.519852][T14329] ? lockdep_hardirqs_on+0x78/0x100 [ 562.519882][T14329] do_syscall_64+0x115/0x840 [ 562.519915][T14329] ? clear_bhb_loop+0x40/0x90 [ 562.519953][T14329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.519987][T14329] RIP: 0033:0x7f9f2cb9de99 [ 562.520009][T14329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.520039][T14329] RSP: 002b:00007f9f2daa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 562.520068][T14329] RAX: ffffffffffffffda RBX: 00007f9f2ce25fa0 RCX: 00007f9f2cb9de99 [ 562.520098][T14329] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 562.520115][T14329] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 562.520132][T14329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.520149][T14329] R13: 00007f9f2ce26038 R14: 00007f9f2ce25fa0 R15: 00007fff8a046db8 [ 562.520184][T14329] [ 562.520240][T14329] socket: no more sockets [ 562.779335][T14276] Process accounting paused [ 562.861711][T14326] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1593'. [ 563.004691][T14325] tipc: Started in network mode [ 563.014354][T14325] tipc: Node identity ee00, cluster identity 4711 [ 563.029417][T14325] tipc: Node number set to 60928 [ 563.051805][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.059038][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.220585][T14345] sd 0:0:1:0: PR command failed: 1026 [ 563.231431][T14345] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 563.251941][T14345] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 563.977515][ T61] tipc: Left network mode [ 565.383951][T14368] ima: policy update failed [ 565.389098][ T29] audit: type=1802 audit(4294967417.890:104): pid=14368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1605" res=0 errno=0 [ 566.131504][T14410] FAULT_INJECTION: forcing a failure. [ 566.131504][T14410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.145008][T14410] CPU: 1 UID: 0 PID: 14410 Comm: syz.3.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.145055][T14410] Tainted: [L]=SOFTLOCKUP [ 566.145066][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.145085][T14410] Call Trace: [ 566.145095][T14410] [ 566.145114][T14410] dump_stack_lvl+0x100/0x190 [ 566.145156][T14410] should_fail_ex.cold+0x5/0xa [ 566.145193][T14410] _copy_to_user+0x32/0xd0 [ 566.145242][T14410] copy_siginfo_to_user+0x27/0xc0 [ 566.145281][T14410] x64_setup_rt_frame+0xa03/0xce0 [ 566.145340][T14410] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 566.145391][T14410] ? do_send_specific+0x15c/0x360 [ 566.145427][T14410] ? __pfx_do_send_specific+0x10/0x10 [ 566.145468][T14410] arch_do_signal_or_restart+0x6b6/0x7a0 [ 566.145520][T14410] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 566.145580][T14410] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 566.145623][T14410] ? fput+0x79/0x100 [ 566.145677][T14410] exit_to_user_mode_loop+0x139/0x6f0 [ 566.145723][T14410] ? rcu_is_watching+0x12/0xc0 [ 566.145758][T14410] do_syscall_64+0x652/0x840 [ 566.145788][T14410] ? clear_bhb_loop+0x40/0x90 [ 566.145824][T14410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.145853][T14410] RIP: 0033:0x7f8d59b9de99 [ 566.145879][T14410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.145907][T14410] RSP: 002b:00007f8d5aafd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 566.145935][T14410] RAX: 0000000000000000 RBX: 00007f8d59e25fa0 RCX: 00007f8d59b9de99 [ 566.145952][T14410] RDX: 0000000000000021 RSI: 0000000000000671 RDI: 0000000000000670 [ 566.145971][T14410] RBP: 00007f8d5aafd090 R08: 0000000000000000 R09: 0000000000000000 [ 566.145988][T14410] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 566.146006][T14410] R13: 00007f8d59e26038 R14: 00007f8d59e25fa0 R15: 00007fff0ebe8e38 [ 566.146045][T14410] [ 566.442052][T14393] ima: policy update failed [ 566.451217][ T29] audit: type=1802 audit(4294967418.940:105): pid=14393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1610" res=0 errno=0 [ 567.221982][T14423] sd 0:0:1:0: PR command failed: 1026 [ 567.227807][T14423] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 567.234695][T14423] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 568.484338][T14456] FAULT_INJECTION: forcing a failure. [ 568.484338][T14456] name failslab, interval 1, probability 0, space 0, times 0 [ 568.531718][T14456] CPU: 1 UID: 0 PID: 14456 Comm: syz.4.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.531768][T14456] Tainted: [L]=SOFTLOCKUP [ 568.531783][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 568.531802][T14456] Call Trace: [ 568.531824][T14456] [ 568.531835][T14456] dump_stack_lvl+0x100/0x190 [ 568.531875][T14456] should_fail_ex.cold+0x5/0xa [ 568.531910][T14456] should_failslab+0xc2/0x120 [ 568.531960][T14456] kmem_cache_alloc_noprof+0x91/0x6a0 [ 568.531999][T14456] ? fcntl_setlk+0xaa/0xe20 [ 568.532037][T14456] fcntl_setlk+0xaa/0xe20 [ 568.532066][T14456] ? lockdep_hardirqs_on+0x78/0x100 [ 568.532103][T14456] ? __pfx_fcntl_setlk+0x10/0x10 [ 568.532150][T14456] ? rep_movs_alternative+0x30/0xa0 [ 568.532199][T14456] do_fcntl+0xf39/0x1670 [ 568.532236][T14456] ? __pfx_do_fcntl+0x10/0x10 [ 568.532271][T14456] ? __fget_files+0x215/0x3d0 [ 568.532329][T14456] ? tomoyo_file_fcntl+0x6c/0xc0 [ 568.532385][T14456] __x64_sys_fcntl+0x163/0x200 [ 568.532441][T14456] do_syscall_64+0x115/0x840 [ 568.532472][T14456] ? clear_bhb_loop+0x40/0x90 [ 568.532530][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.532566][T14456] RIP: 0033:0x7f3c3bf9de99 [ 568.532593][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.532627][T14456] RSP: 002b:00007f3c39df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 568.532660][T14456] RAX: ffffffffffffffda RBX: 00007f3c3c226270 RCX: 00007f3c3bf9de99 [ 568.532682][T14456] RDX: 0000000000002009 RSI: 0000000000000006 RDI: 0000000000000003 [ 568.532703][T14456] RBP: 00007f3c3c033eaf R08: 0000000000000000 R09: 0000000000000000 [ 568.532723][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.532742][T14456] R13: 00007f3c3c226308 R14: 00007f3c3c226270 R15: 00007ffdb3a7f4f8 [ 568.532784][T14456] [ 568.539633][T14450] FAULT_INJECTION: forcing a failure. [ 568.539633][T14450] name failslab, interval 1, probability 0, space 0, times 0 [ 568.797041][T14450] CPU: 1 UID: 0 PID: 14450 Comm: syz.1.1623 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.797080][T14450] Tainted: [L]=SOFTLOCKUP [ 568.797089][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 568.797105][T14450] Call Trace: [ 568.797113][T14450] [ 568.797122][T14450] dump_stack_lvl+0x100/0x190 [ 568.797158][T14450] should_fail_ex.cold+0x5/0xa [ 568.797190][T14450] should_failslab+0xc2/0x120 [ 568.797228][T14450] __kmalloc_cache_noprof+0x91/0x6c0 [ 568.797272][T14450] ? mark_held_locks+0x40/0x70 [ 568.797311][T14450] ? device_add+0xd3f/0x1970 [ 568.797355][T14450] device_add+0xd3f/0x1970 [ 568.797394][T14450] ? __pfx___debug_object_init+0x10/0x10 [ 568.797439][T14450] ? __pfx_device_add+0x10/0x10 [ 568.797495][T14450] nfc_register_device+0x41/0x3e0 [ 568.797531][T14450] nci_register_device+0x7f1/0xb80 [ 568.797578][T14450] ? __pfx_nci_register_device+0x10/0x10 [ 568.797625][T14450] ? lockdep_init_map_type+0x5c/0x250 [ 568.797668][T14450] virtual_ncidev_open+0x141/0x220 [ 568.797705][T14450] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 568.797748][T14450] misc_open+0x26d/0x450 [ 568.797778][T14450] ? __pfx_misc_open+0x10/0x10 [ 568.797808][T14450] chrdev_open+0x234/0x6a0 [ 568.797837][T14450] ? __pfx_apparmor_file_open+0x10/0x10 [ 568.797867][T14450] ? __pfx_chrdev_open+0x10/0x10 [ 568.797899][T14450] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 568.797950][T14450] do_dentry_open+0x6ab/0x14d0 [ 568.798000][T14450] ? __pfx_chrdev_open+0x10/0x10 [ 568.798036][T14450] vfs_open+0x82/0x3f0 [ 568.798077][T14450] path_openat+0x2873/0x4280 [ 568.798121][T14450] ? __pfx_path_openat+0x10/0x10 [ 568.798162][T14450] do_file_open+0x20e/0x430 [ 568.798192][T14450] ? __pfx_do_file_open+0x10/0x10 [ 568.798239][T14450] ? alloc_fd+0x471/0x7a0 [ 568.798290][T14450] ? do_getname+0x191/0x390 [ 568.798334][T14450] do_sys_openat2+0x10f/0x1e0 [ 568.798372][T14450] ? __pfx_do_sys_openat2+0x10/0x10 [ 568.798424][T14450] __x64_sys_openat+0x12d/0x210 [ 568.798465][T14450] ? __pfx___x64_sys_openat+0x10/0x10 [ 568.798518][T14450] do_syscall_64+0x115/0x840 [ 568.798550][T14450] ? clear_bhb_loop+0x40/0x90 [ 568.798587][T14450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.798619][T14450] RIP: 0033:0x7f2249d9de99 [ 568.798644][T14450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.798676][T14450] RSP: 002b:00007f224acf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 568.798705][T14450] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 568.798725][T14450] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 568.798745][T14450] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 568.798763][T14450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.798782][T14450] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 568.798823][T14450] [ 570.071535][T14485] input: f¬ as /devices/virtual/input/input7 [ 570.096148][T14467] ima: policy update failed [ 570.103018][ T29] audit: type=1802 audit(4294967422.600:106): pid=14467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1625" res=0 errno=0 [ 571.378339][T14502] ima: policy update failed [ 571.383081][ T29] audit: type=1802 audit(4294967423.880:107): pid=14502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1631" res=0 errno=0 [ 572.043461][ T29] audit: type=1804 audit(4294967424.540:108): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1637" name="/newroot/404/file0" dev="tmpfs" ino=2163 res=1 errno=0 [ 572.089757][ T29] audit: type=1804 audit(4294967424.590:109): pid=14526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1637" name="/newroot/404/file0" dev="tmpfs" ino=2163 res=1 errno=0 [ 572.977976][ T29] audit: type=1804 audit(4294967425.480:110): pid=14549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1642" name="/newroot/409/file0" dev="tmpfs" ino=2191 res=1 errno=0 [ 573.114700][ T29] audit: type=1804 audit(4294967425.510:111): pid=14552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1642" name="/newroot/409/file0" dev="tmpfs" ino=2191 res=1 errno=0 [ 573.512843][ T29] audit: type=1800 audit(4294967426.010:112): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1646" name="dbroot" dev="configfs" ino=64157 res=0 errno=0 [ 574.066207][T14557] ima: policy update failed [ 574.088947][ T29] audit: type=1802 audit(4294967426.590:113): pid=14557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1644" res=0 errno=0 [ 574.703092][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 574.784295][T14588] Process accounting resumed [ 575.243699][T14604] sd 0:0:1:0: PR command failed: 1026 [ 575.253551][T14604] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 575.263481][T14604] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 575.343872][T14604] FAULT_INJECTION: forcing a failure. [ 575.343872][T14604] name failslab, interval 1, probability 0, space 0, times 0 [ 575.369825][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.1.1652 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.369875][T14604] Tainted: [L]=SOFTLOCKUP [ 575.369886][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.369917][T14604] Call Trace: [ 575.369927][T14604] [ 575.369938][T14604] dump_stack_lvl+0x100/0x190 [ 575.369980][T14604] should_fail_ex.cold+0x5/0xa [ 575.370014][T14604] should_failslab+0xc2/0x120 [ 575.370056][T14604] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 575.370093][T14604] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 575.370144][T14604] ? sock_alloc_inode+0x26/0x2c0 [ 575.370191][T14604] ? __pfx_sock_alloc_inode+0x10/0x10 [ 575.370238][T14604] sock_alloc_inode+0x26/0x2c0 [ 575.370280][T14604] ? __pfx_sock_alloc_inode+0x10/0x10 [ 575.370319][T14604] alloc_inode+0x68/0x250 [ 575.370351][T14604] sock_alloc+0x44/0x280 [ 575.370383][T14604] ? security_socket_create+0x7f/0x250 [ 575.370411][T14604] __sock_create+0xc2/0x860 [ 575.370458][T14604] ? lockdep_init_map_type+0x5c/0x250 [ 575.370504][T14604] smc_create+0x163/0x290 [ 575.370531][T14604] __sock_create+0x339/0x860 [ 575.370576][T14604] __sys_socket+0x14d/0x260 [ 575.370601][T14604] ? __pfx___sys_socket+0x10/0x10 [ 575.370636][T14604] __x64_sys_socket+0x72/0xb0 [ 575.370659][T14604] ? lockdep_hardirqs_on+0x78/0x100 [ 575.370685][T14604] do_syscall_64+0x115/0x840 [ 575.370710][T14604] ? clear_bhb_loop+0x40/0x90 [ 575.370741][T14604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.370768][T14604] RIP: 0033:0x7f2249d9de99 [ 575.370789][T14604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.370815][T14604] RSP: 002b:00007f224acf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 575.370841][T14604] RAX: ffffffffffffffda RBX: 00007f224a025fa0 RCX: 00007f2249d9de99 [ 575.370858][T14604] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 575.370873][T14604] RBP: 00007f2249e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 575.370889][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.370904][T14604] R13: 00007f224a026038 R14: 00007f224a025fa0 R15: 00007ffe689744c8 [ 575.370936][T14604] [ 575.370994][T14604] socket: no more sockets [ 575.993306][T14621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1655'. [ 576.196234][T14621] smc: removing net device dummy0 with user defined pnetid DUMMY0 [ 576.268997][T14557] Process accounting resumed [ 576.826494][T14632] Line length is too long: Should be less than 4094 [ 577.530149][T14649] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0f13a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 577.545899][T14649] Call Trace: [ 577.549210][T14649] [ 577.552176][T14649] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 577.558925][T14649] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 577.565480][T14649] mce_cpu_restart+0xd5/0x1f0 [ 577.570176][T14649] ? __pfx_mce_cpu_restart+0x10/0x10 [ 577.575487][T14649] smp_call_function_many_cond+0x139d/0x16c0 [ 577.581494][T14649] ? __pfx_mce_cpu_restart+0x10/0x10 [ 577.586807][T14649] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 577.592664][T14649] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 577.599018][T14649] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 577.605018][T14649] ? __timer_delete_sync+0x151/0x1c0 [ 577.610325][T14649] ? __pfx_mce_cpu_restart+0x10/0x10 [ 577.615620][T14649] on_each_cpu_cond_mask+0x40/0x90 [ 577.620764][T14649] set_bank+0x240/0x3a0 [ 577.624933][T14649] ? __pfx_set_bank+0x10/0x10 [ 577.629622][T14649] ? find_held_lock+0x2b/0x80 [ 577.634311][T14649] ? sysfs_file_kobj+0xe4/0x290 [ 577.639170][T14649] ? sysfs_file_kobj+0xe4/0x290 [ 577.644052][T14649] ? __pfx_set_bank+0x10/0x10 [ 577.648744][T14649] dev_attr_store+0x58/0x80 [ 577.653275][T14649] ? __pfx_dev_attr_store+0x10/0x10 [ 577.658494][T14649] sysfs_kf_write+0xf2/0x150 [ 577.663105][T14649] kernfs_fop_write_iter+0x3e0/0x5f0 [ 577.668396][T14649] ? __pfx_sysfs_kf_write+0x10/0x10 [ 577.673626][T14649] vfs_write+0x6ac/0x1050 [ 577.677973][T14649] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 577.683787][T14649] ? __pfx_vfs_write+0x10/0x10 [ 577.688598][T14649] ksys_write+0x12a/0x250 [ 577.692985][T14649] ? __pfx_ksys_write+0x10/0x10 [ 577.697920][T14649] do_syscall_64+0x115/0x840 [ 577.702575][T14649] ? clear_bhb_loop+0x40/0x90 [ 577.707291][T14649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.713190][T14649] RIP: 0033:0x7f9f2cb9de99 [ 577.717611][T14649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.737247][T14649] RSP: 002b:00007f9f2da82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 577.745695][T14649] RAX: ffffffffffffffda RBX: 00007f9f2ce26090 RCX: 00007f9f2cb9de99 [ 577.753676][T14649] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000008 [ 577.761650][T14649] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 577.769643][T14649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.777633][T14649] R13: 00007f9f2ce26128 R14: 00007f9f2ce26090 R15: 00007fff8a046db8 [ 577.785635][T14649] [ 578.101425][T14656] sd 0:0:1:0: PR command failed: 1026 [ 578.108105][T14656] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 578.115001][T14656] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 578.198683][T14658] FAULT_INJECTION: forcing a failure. [ 578.198683][T14658] name failslab, interval 1, probability 0, space 0, times 0 [ 578.228243][T14658] CPU: 1 UID: 0 PID: 14658 Comm: syz.2.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.228277][T14658] Tainted: [L]=SOFTLOCKUP [ 578.228285][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.228323][T14658] Call Trace: [ 578.228333][T14658] [ 578.228342][T14658] dump_stack_lvl+0x100/0x190 [ 578.228395][T14658] should_fail_ex.cold+0x5/0xa [ 578.228419][T14658] should_failslab+0xc2/0x120 [ 578.228448][T14658] kmem_cache_alloc_noprof+0x91/0x6a0 [ 578.228490][T14658] ? __pfx_map_id_range_down+0x10/0x10 [ 578.228530][T14658] ? security_inode_alloc+0x3b/0x2c0 [ 578.228567][T14658] security_inode_alloc+0x3b/0x2c0 [ 578.228591][T14658] inode_init_always_gfp+0xc77/0xfb0 [ 578.228640][T14658] alloc_inode+0x8e/0x250 [ 578.228665][T14658] sock_alloc+0x44/0x280 [ 578.228692][T14658] ? security_socket_create+0x7f/0x250 [ 578.228718][T14658] __sock_create+0xc2/0x860 [ 578.228750][T14658] ? lockdep_init_map_type+0x5c/0x250 [ 578.228785][T14658] smc_create+0x163/0x290 [ 578.228807][T14658] __sock_create+0x339/0x860 [ 578.228843][T14658] __sys_socket+0x14d/0x260 [ 578.228862][T14658] ? __pfx___sys_socket+0x10/0x10 [ 578.228889][T14658] __x64_sys_socket+0x72/0xb0 [ 578.228907][T14658] ? lockdep_hardirqs_on+0x78/0x100 [ 578.228928][T14658] do_syscall_64+0x115/0x840 [ 578.228948][T14658] ? clear_bhb_loop+0x40/0x90 [ 578.228973][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.229012][T14658] RIP: 0033:0x7f9f2cb9de99 [ 578.229030][T14658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.229051][T14658] RSP: 002b:00007f9f2da82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 578.229072][T14658] RAX: ffffffffffffffda RBX: 00007f9f2ce26090 RCX: 00007f9f2cb9de99 [ 578.229086][T14658] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 578.229098][T14658] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 578.229110][T14658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.229124][T14658] R13: 00007f9f2ce26128 R14: 00007f9f2ce26090 R15: 00007fff8a046db8 [ 578.229151][T14658] [ 578.229183][T14658] socket: no more sockets [ 579.565155][T14673] __vm_enough_memory: pid: 14673, comm: syz.4.1666, bytes: 9223372036854775808 not enough memory for the allocation [ 579.731282][T14664] ima: policy update failed [ 579.746226][ T29] audit: type=1802 audit(4294967432.240:114): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1664" res=0 errno=0 [ 580.858930][T14700] ima: policy update failed [ 580.864105][ T29] audit: type=1802 audit(4294967433.360:115): pid=14700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1672" res=0 errno=0 [ 580.933919][T14690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.947179][T14690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.956430][T14690] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 581.887157][T14727] ================================================================== [ 581.887205][T14727] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 581.887324][T14727] Write of size 8 at addr ffffc90004a492a0 by task syz.2.1677/14727 [ 581.887350][T14727] [ 581.887366][T14727] CPU: 1 UID: 0 PID: 14727 Comm: syz.2.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.887409][T14727] Tainted: [L]=SOFTLOCKUP [ 581.887420][T14727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.887438][T14727] Call Trace: [ 581.887447][T14727] [ 581.887458][T14727] dump_stack_lvl+0x100/0x190 [ 581.887491][T14727] print_report+0x13d/0x4b0 [ 581.887536][T14727] ? _raw_spin_lock_irqsave+0x52/0x60 [ 581.887588][T14727] ? sys_imageblit+0x19fb/0x1d60 [ 581.887625][T14727] kasan_report+0xdf/0x1c0 [ 581.887666][T14727] ? sys_imageblit+0x19fb/0x1d60 [ 581.887707][T14727] sys_imageblit+0x19fb/0x1d60 [ 581.887749][T14727] ? __pfx_sys_imageblit+0x10/0x10 [ 581.887790][T14727] ? prb_read_valid+0x78/0xa0 [ 581.887841][T14727] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 581.887895][T14727] soft_cursor+0x524/0xa10 [ 581.887927][T14727] ? atomic_notifier_call_chain+0x60/0x1c0 [ 581.887967][T14727] ? fb_get_color_depth+0x120/0x250 [ 581.888055][T14727] bit_cursor+0xca1/0x1490 [ 581.888101][T14727] ? __pfx_bit_cursor+0x10/0x10 [ 581.888136][T14727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 581.888180][T14727] ? get_color+0x1da/0x450 [ 581.888224][T14727] ? __pfx_bit_cursor+0x10/0x10 [ 581.888252][T14727] fbcon_cursor+0x43c/0x5e0 [ 581.888302][T14727] ? add_softcursor+0x180/0x290 [ 581.888328][T14727] set_cursor+0x1db/0x250 [ 581.888350][T14727] con_write+0x89/0xb0 [ 581.888397][T14727] n_tty_write+0x431/0x1160 [ 581.888453][T14727] ? __pfx_n_tty_write+0x10/0x10 [ 581.888487][T14727] ? __pfx_woken_wake_function+0x10/0x10 [ 581.888510][T14727] ? __pfx___might_resched+0x10/0x10 [ 581.888541][T14727] ? kfree+0x1e5/0x6c0 [ 581.888591][T14727] ? __pfx_n_tty_write+0x10/0x10 [ 581.888639][T14727] file_tty_write.isra.0+0x4d2/0x890 [ 581.888684][T14727] redirected_tty_write+0xd4/0x120 [ 581.888722][T14727] vfs_write+0x6ac/0x1050 [ 581.888756][T14727] ? __pfx_redirected_tty_write+0x10/0x10 [ 581.888787][T14727] ? __pfx_vfs_write+0x10/0x10 [ 581.888819][T14727] ? find_held_lock+0x2b/0x80 [ 581.888852][T14727] ksys_write+0x12a/0x250 [ 581.888885][T14727] ? __pfx_ksys_write+0x10/0x10 [ 581.888922][T14727] do_syscall_64+0x115/0x840 [ 581.888945][T14727] ? clear_bhb_loop+0x40/0x90 [ 581.888971][T14727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.888994][T14727] RIP: 0033:0x7f9f2cb9de99 [ 581.889011][T14727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.889034][T14727] RSP: 002b:00007f9f2da61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.889070][T14727] RAX: ffffffffffffffda RBX: 00007f9f2ce26180 RCX: 00007f9f2cb9de99 [ 581.889084][T14727] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 581.889097][T14727] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 581.889111][T14727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.889123][T14727] R13: 00007f9f2ce26218 R14: 00007f9f2ce26180 R15: 00007fff8a046db8 [ 581.889144][T14727] [ 581.889151][T14727] [ 581.889157][T14727] The buggy address belongs to a vmalloc virtual mapping [ 581.889171][T14727] Memory state around the buggy address: [ 581.889182][T14727] ffffc90004a49180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 581.889197][T14727] ffffc90004a49200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 581.889211][T14727] >ffffc90004a49280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 581.889222][T14727] ^ [ 581.889233][T14727] ffffc90004a49300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 581.889246][T14727] ffffc90004a49380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 581.889258][T14727] ================================================================== [ 581.904776][T14727] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 581.904803][T14727] CPU: 1 UID: 0 PID: 14727 Comm: syz.2.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.904848][T14727] Tainted: [L]=SOFTLOCKUP [ 581.904860][T14727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.904880][T14727] Call Trace: [ 581.904891][T14727] [ 581.904903][T14727] dump_stack_lvl+0x100/0x190 [ 581.904940][T14727] vpanic+0x552/0x970 [ 581.904969][T14727] ? __pfx_vpanic+0x10/0x10 [ 581.905000][T14727] ? mark_held_locks+0x40/0x70 [ 581.905051][T14727] ? sys_imageblit+0x19fb/0x1d60 [ 581.905097][T14727] panic+0xd1/0xe0 [ 581.905126][T14727] ? __pfx_panic+0x10/0x10 [ 581.905158][T14727] ? sys_imageblit+0x19fb/0x1d60 [ 581.905195][T14727] ? preempt_schedule_common+0x42/0xc0 [ 581.905250][T14727] ? check_panic_on_warn+0x1f/0x90 [ 581.905297][T14727] check_panic_on_warn.cold+0x19/0x34 [ 581.905331][T14727] end_report.part.0+0x3a/0x90 [ 581.905378][T14727] kasan_report.cold+0xe/0x18 [ 581.905426][T14727] ? sys_imageblit+0x19fb/0x1d60 [ 581.905471][T14727] sys_imageblit+0x19fb/0x1d60 [ 581.905516][T14727] ? __pfx_sys_imageblit+0x10/0x10 [ 581.905559][T14727] ? prb_read_valid+0x78/0xa0 [ 581.905609][T14727] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 581.905664][T14727] soft_cursor+0x524/0xa10 [ 581.905699][T14727] ? atomic_notifier_call_chain+0x60/0x1c0 [ 581.905758][T14727] ? fb_get_color_depth+0x120/0x250 [ 581.905805][T14727] bit_cursor+0xca1/0x1490 [ 581.905839][T14727] ? __pfx_bit_cursor+0x10/0x10 [ 581.905890][T14727] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 581.905932][T14727] ? get_color+0x1da/0x450 [ 581.905963][T14727] ? __pfx_bit_cursor+0x10/0x10 [ 581.905983][T14727] fbcon_cursor+0x43c/0x5e0 [ 581.906015][T14727] ? add_softcursor+0x180/0x290 [ 581.906040][T14727] set_cursor+0x1db/0x250 [ 581.906068][T14727] con_write+0x89/0xb0 [ 581.906096][T14727] n_tty_write+0x431/0x1160 [ 581.906136][T14727] ? __pfx_n_tty_write+0x10/0x10 [ 581.906170][T14727] ? __pfx_woken_wake_function+0x10/0x10 [ 581.906212][T14727] ? __pfx___might_resched+0x10/0x10 [ 581.906258][T14727] ? kfree+0x1e5/0x6c0 [ 581.906311][T14727] ? __pfx_n_tty_write+0x10/0x10 [ 581.906345][T14727] file_tty_write.isra.0+0x4d2/0x890 [ 581.906378][T14727] redirected_tty_write+0xd4/0x120 [ 581.906406][T14727] vfs_write+0x6ac/0x1050 [ 581.906441][T14727] ? __pfx_redirected_tty_write+0x10/0x10 [ 581.906471][T14727] ? __pfx_vfs_write+0x10/0x10 [ 581.906503][T14727] ? find_held_lock+0x2b/0x80 [ 581.906537][T14727] ksys_write+0x12a/0x250 [ 581.906573][T14727] ? __pfx_ksys_write+0x10/0x10 [ 581.906611][T14727] do_syscall_64+0x115/0x840 [ 581.906634][T14727] ? clear_bhb_loop+0x40/0x90 [ 581.906670][T14727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.906692][T14727] RIP: 0033:0x7f9f2cb9de99 [ 581.906707][T14727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.906728][T14727] RSP: 002b:00007f9f2da61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.906749][T14727] RAX: ffffffffffffffda RBX: 00007f9f2ce26180 RCX: 00007f9f2cb9de99 [ 581.906763][T14727] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000005 [ 581.906777][T14727] RBP: 00007f9f2cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 581.906807][T14727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.906825][T14727] R13: 00007f9f2ce26218 R14: 00007f9f2ce26180 R15: 00007fff8a046db8 [ 581.906854][T14727] [ 581.907459][T14727] Kernel Offset: disabled