last executing test programs: 13m47.095984596s ago: executing program 2 (id=136): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x3c) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) socket(0x3, 0x1, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(r0, &(0x7f0000000080)='+&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x4, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xabf, 0x2, 0x36242398, 0xfffff5ae, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x6819a}, 0x6f3) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000002c0)=0xffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4020009, 0xe2, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x1, 0x8, 0x0, 0x409) 13m45.751133718s ago: executing program 2 (id=142): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0xa, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006700)={0x24, r2, 0x13, 0x70bd2e, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) r5 = userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6a) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000180)={&(0x7f0000000280), 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3}, @IEEE802154_ATTR_DEST_SHORT_ADDR={0x6, 0xe, 0x3bb1}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x6}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x22}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x2}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0x81}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x4008014) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000000000008000, 0x2}, 0x4}, 0x800008, 0x8) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r7) sendmsg$auto_NFSD_CMD_VERSION_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x28, r8, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x2}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4004840) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, r8, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x6}, @NFSD_A_SERVER_SCOPE={0x11, 0x4, '802.15.4 MAC\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x80000001}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, '$\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x410, 0x0) 13m42.582035169s ago: executing program 2 (id=149): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/trace/act_mask\x00', 0x189002, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) (fail_nth: 8) 13m41.874505336s ago: executing program 2 (id=152): r0 = socket(0x21, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xfffffff7, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x401) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_MTDFILEMODE(r2, 0x4d13, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x17, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0x3fe, 0x3, 0x2, 0xffffffff7ffffffb, 0x800a, 0x4, 0x200000100107}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r4 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x169481, 0x0) writev$auto(r4, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r5 = socket(0x29, 0x2, 0x0) ioctl$auto(r5, 0x89f0, 0x24) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/pfkey\x00', 0x40, 0x0) pread64$auto(r6, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)={0xa, r1, 0x0, 0x77, 0x9, 0xf}) ioctl$auto_TIOCEXCL(r7, 0x540c, &(0x7f0000000100)="05092f356460c652038166ccf344a01263d3103f2a0c97880d24ee03d6dcb216ca77d8976a") ioctl$auto(r0, 0x89f1, 0x24) 13m40.596226722s ago: executing program 2 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_FLUSH(r0, &(0x7f0000005240)={0x0, 0x0, &(0x7f0000005200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf2518000000e6f554fcb549b540cb364112b96046729facc45f60d21c29328152c1c8777bc1a2fbc5232d045af1ea0cea7be62aeec53791c5e41ce6dff92adbd7e2bfeb0a0a25c2768906ff8852ff8b16bf9099c2fd2646832652afb5b4505a993c180beabba3da7ea735c12998f819949152d4c56f9557ccbd49b6b9f02e3ac3c705946920caa947adbd3a2e4dfc2db7e4695d4d6fe77936a9e430df3b966f081ad546d88da0d912a670"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x82043, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mremap$auto(0x200001000000, 0x4, 0x4, 0x3, 0x100000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0x400052, 0x1) futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev5\x00', 0x183281, 0x0) ioctl$auto(r5, 0xc040564a, r4) preadv$auto(0x40000000000003, 0x0, 0x6, 0x2, 0x5) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) pidfd_open$auto(0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x1d, 0x1, 0x100) 13m38.471433762s ago: executing program 2 (id=161): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x110000, 0x7fffbfffefff, 0x8, 0x1, 0x400000000000, 0x7c, 0x0, 0x2, 0x1098, 0x2}) (async) read$auto(r2, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdb8e25010000000500060003000000050005000800000008000300ff03000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) close_range$auto(0x2, 0x8, 0x0) (async) r3 = io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) (async) read$auto_nvmf_dev_fops_fabrics(r3, &(0x7f0000000080)=""/28, 0x1c) socket(0x2, 0x5, 0x0) r4 = epoll_create$auto(0x7) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x101083, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000040)={0x0, 0x5, 0x200, 0x6, 0x2bc9, "05a3b1ec88daacca01cdfa58da68cbb5"}) (async) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0x2, 0x8, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) (async) mlockall$auto(0x7) (async) mremap$auto(0x0, 0x4, 0x5, 0x7, 0x100000000) madvise$auto(0x200000, 0x2003f2, 0x15) 13m22.967862635s ago: executing program 32 (id=161): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x110000, 0x7fffbfffefff, 0x8, 0x1, 0x400000000000, 0x7c, 0x0, 0x2, 0x1098, 0x2}) (async) read$auto(r2, 0x0, 0x20) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdb8e25010000000500060003000000050005000800000008000300ff03000004000400"], 0x30}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) close_range$auto(0x2, 0x8, 0x0) (async) r3 = io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) (async) read$auto_nvmf_dev_fops_fabrics(r3, &(0x7f0000000080)=""/28, 0x1c) socket(0x2, 0x5, 0x0) r4 = epoll_create$auto(0x7) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x101083, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000040)={0x0, 0x5, 0x200, 0x6, 0x2bc9, "05a3b1ec88daacca01cdfa58da68cbb5"}) (async) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0x2, 0x8, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) (async) mlockall$auto(0x7) (async) mremap$auto(0x0, 0x4, 0x5, 0x7, 0x100000000) madvise$auto(0x200000, 0x2003f2, 0x15) 9.034429362s ago: executing program 1 (id=2308): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)='+', 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pipe2$auto(0x0, 0x80) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x5c8) 8.700730613s ago: executing program 3 (id=2309): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000100)) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400044, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) mbind$auto(0xffffffffffffff00, 0xff, 0x9, &(0x7f0000000040)=0x100, 0x3, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2b44c1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) msync$auto(0x80, 0x7, 0x7) read$auto_proc_pid_smaps_operations_internal(r5, 0x0, 0x0) 7.92396162s ago: executing program 4 (id=2311): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x7, 0x202000a, 0x2, 0xfffffffffffffffb, 0xfffffffffffffffa, 0xfff) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r0, 0x300000000000) r2 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) io_uring_setup$auto(0x5, &(0x7f00000001c0)={0x400, 0x6, 0xc564, 0x3, 0xd, 0x200, r2, [0x3, 0x1, 0x6], {0x14d0, 0x2, 0x1868, 0x1, 0x6e, 0x6568, 0x6, 0x5, 0x5}, {0x9, 0x10000000, 0x8, 0x100, 0x0, 0xc52, 0x5, 0x4, 0x9}}) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) getsockopt$auto_SO_RCVBUF(r0, 0x9, 0x8, &(0x7f0000000080)='/dev/nullb0\x00', &(0x7f00000000c0)=0x9) mmap$auto(0xf5f, 0x2020001, 0x2, 0x4fa, 0xfffffffffffffffa, 0x7ffb) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_genetlink_get_family_id$auto_mac802154_hwsim(0x0, r3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) rt_sigpending$auto(0x0, 0x7ffffffff000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) r4 = socket(0x25, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x6c) connect$auto(0x3, 0x0, 0x54) msgctl$auto_IPC_SET(0x3e54, 0x1, &(0x7f0000000300)={{0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5c, 0x0, 0x3ff}, &(0x7f0000000240)=0x3, &(0x7f00000002c0)=0x76, 0x1, 0x85d, 0x3, 0x1, 0x8, 0x5, 0x3, 0xb, @inferred=0xffffffffffffffff, @raw=0x3}) keyctl$auto_KEY_SPEC_THREAD_KEYRING(0x20003, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x165000, 0x0) close_range$auto(0x2, r4, 0x7) 7.592031916s ago: executing program 1 (id=2313): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x175801, 0x0) r2 = prctl$auto_PR_SET_MM_END_CODE(0x8, 0x2, 0xffffffffffffffff, 0x4, 0xffffffffffff0b00) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000000c0)={0x2, 0x2, 0x101, 0xb, 0x68000, 0xe0, "efef96e76d7f32fe27353703cf031336861e8106fe8abed33ba50f6ef3861fe9508ef2f58ab9402b728897404f62f5db818e35d09f957a33cea38f2d8227a0ff"}) sendfile$auto(r0, 0x3, 0x0, 0x7) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6a, 0x85fa, 0x0, 0x0) r3 = socketpair$auto(0x10401e, 0x5, 0xfffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0xf6c7}, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40811) 7.437028147s ago: executing program 0 (id=2314): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x8000000009b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(r0, 0x8000001, 0x100, 0x0, 0x80c) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) read$auto(r2, 0x0, 0xc88e) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)) r3 = io_uring_setup$auto(0x1, 0x0) settimeofday$auto(&(0x7f0000000000)={0x6, 0x6}, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000200)={0x1588, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x98, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x2a, 0x2, '/sys/kernel/tracing/available_tracers\x00'}, @NFSD_A_SOCK_ADDR={0x17, 0x1, "f226d276a158b54bcaa0a1b95afbca1be26cd7"}, @NFSD_A_SOCK_ADDR={0x40, 0x1, "b10c46f8612edc48c02a9efe34e4174fdf39121b2fead24acf35d18c1fa108cf85eb6e784e2f72dc86ad369f40c8a30002ac9231f1ac0d402ab77245"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xf, 0x2, '/dev/audio\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x198, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xc, 0x2, '!*\\@]\'$\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x2a, 0x2, '/sys/kernel/tracing/available_tracers\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '@]^\'\xb9:!\x94{\x00'}, @NFSD_A_SOCK_ADDR={0x7c, 0x1, "89ecf0910b10c94014a7af641f385a317fa8c1106fd4569e1376de2de596c763508aa44f49cf4ed0bf3ff4fc9a3b0495092e54c8bfef9ced8ab57053244e0c6e3ca1676dc644757096cd7cc6682f278e9e1e33c310c39c9d607219cb70128dafbdef6906b4a86f60a0e19e979e0630e763d77bd8069d1a3e"}, @NFSD_A_SOCK_ADDR={0xce, 0x1, "ceccdcb58f9f07d126f2b4047c4e9b7b36ec158e685ec8b27c9611aa5d5ad2edc7ad31ede381eb935c487c8fc2e5771c4928a48a90570229ac31869915eb637352946412295e1b4468809a44160e3d6e2a6a8ed455a9e300d82861e4ac0dda3610e6d6286de31749bf4065cfbf64c5848e49f016f3f237b1b585ced43ef3bc7fb930374b37c84dfdb34315bd6765bdb428735c2e0911788dbe67dbe4cdba7a80bae602b83be83959079c2432b4cde235df68c9285dc0b230a099ac986e9158aa547d4e933aeabb5cc27b"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1150, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x3d, 0x1, "430574cde879d76ea97d334792b4d326903c7c93f214e795c7410adee75994c41755c1af8ec5e58eec2189ea74d52b74f357f8f0387767af0a"}, @NFSD_A_SOCK_ADDR={0xcf, 0x1, "cda1ef6b3b4cafc2f0c3b26951e15f45dbd7bf79305abc5ab3f0cc7803c21bb72e1e95deb92fbf1ee7773142bceae2ff865a73e49684c9928e1dbd9f255eda5c73573b6305921f9979fa258c4e637caa033f7c2dcf0efaee034e15aabcfc554e779d56f3d06c7704108707c6873bdc2108a00078dc6cf81465783127153f06d0ad8761073b7a0c50b3edd03bf0f81207975d0e801fe7228dac090c024a665b27d3fb23cdee69a4042deea5108f83bc5cb72a6e542e6ef0bf5298ad4b00f4fa2167cfc496e9fdf1a5d90204"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '^\x0e\x00'}, @NFSD_A_SOCK_ADDR={0x2d, 0x1, "28251ff4a229f434e3f4e57aede7bbd3584685269ecf5493e565dcd11a2c8958f3daf8f0009209ec9a"}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0xf4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xd2, 0x1, "f16c218d5d64881eedcf524dc4ce2cd76b4d53f8fb69e37cfd50691fe33adfcaf615dc0d17a322ecafe50422fa0306b1b3b65304f3d8b247a4e54bd8b1483b83aaceccb6725fe90e751a513ac5b4489519db6e99388c3428b6a557f4859c136dcd4bd10dda144a0f93907a38e46c8f3cb5d5e901990c39499cf507ea951a26f21ffcb79afe1cc913b44db1f0c0d1d0c42024940204733a5a23b1f9cce4d774204c00ec542f432e275b847de993e7d25559d4bec89926f1c4195ede58e015557ba64e7aa8288ed7d18ac2b8b5d210"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '(():}\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x38, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '[L\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x2a, 0x2, '/sys/kernel/tracing/available_tracers\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xc4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x5, 0x1, 'd'}, @NFSD_A_SOCK_ADDR={0xb8, 0x1, "654ff35794744970766982e02a650a3c7fb669fc67962fecb0a76fa5a3d073254ee8400a07f97cc9ef908163bc0d9cff37037fb8a37c4f06ab63cfc39eb3697a137c7c938d43309cf4c75f1f5d351340062f668750d0179a3666b1013d2f311374df57acb3c6a1e94a6781e0dc254e5c6ffb6c5484ae103831f4685f3fa9511a468c7bffb43286940fd827a34b95b0677a91307b7fed38fd13469c89376741bed60fad6ce60761ff828728f195f26993f8ea1227"}]}]}, 0x1588}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) ioctl$auto_BLKGETNRZONES(r3, 0x80041285, &(0x7f0000000000)=0x703) connect$auto(0x3, 0x0, 0x55) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) pwrite64$auto(0xc8, 0x0, 0x3f, 0x200001000) socket(0x2, 0x1, 0x106) socket(0x21, 0x2, 0xa) socket(0x2, 0x1, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_tracers\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xf9, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) 6.223820866s ago: executing program 0 (id=2315): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x5521, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r1, 0x2400000, 0xffffffffffffffff) futex$auto(0x0, 0x4f549, 0xc, 0x0, 0x0, 0x404) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) socket(0x18, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r2, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, &(0x7f00000000c0)) preadv2$auto(r1, &(0x7f00000003c0)={&(0x7f00000002c0)="47ad91f7036ccbfd21b3f4253202eaff8a2c2a7543a273676b4ce912ddd55684810c46c4f11041e7c701c3c20540b74ebe040453ec3a400ef909a475c7d11f82cfa14fb77d5a98fd6ca42df74c5f79cae3cc9ede510504966bf27b051e898ab7e1421e86bd8b3c680c3469d39a174828cc33b11a00e8410c216e8ce8709276441f7593394221f6b8c8a4728436e81e2f37d046066b2e28b896086ea7c66c198fbbae67d97ef4f687714b937a69f23e3ef13fe556934a090087d55c6645cb6d63409e1f18440e", 0x80000001}, 0xfffffffffffffc97, 0x5, 0x40, 0x1) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mprotect$auto(0x0, 0x8000000000000001, 0x8) 5.988396537s ago: executing program 3 (id=2316): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x8000000009b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(r0, 0x8000001, 0x100, 0x0, 0x80c) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) read$auto(r2, 0x0, 0xc88e) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)) r3 = io_uring_setup$auto(0x1, 0x0) settimeofday$auto(&(0x7f0000000000)={0x6, 0x6}, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000200)={0x1588, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x98, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x2a, 0x2, '/sys/kernel/tracing/available_tracers\x00'}, @NFSD_A_SOCK_ADDR={0x17, 0x1, "f226d276a158b54bcaa0a1b95afbca1be26cd7"}, @NFSD_A_SOCK_ADDR={0x40, 0x1, "b10c46f8612edc48c02a9efe34e4174fdf39121b2fead24acf35d18c1fa108cf85eb6e784e2f72dc86ad369f40c8a30002ac9231f1ac0d402ab77245"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xf, 0x2, '/dev/audio\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x198, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xc, 0x2, '!*\\@]\'$\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x2a, 0x2, '/sys/kernel/tracing/available_tracers\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '@]^\'\xb9:!\x94{\x00'}, @NFSD_A_SOCK_ADDR={0x7c, 0x1, "89ecf0910b10c94014a7af641f385a317fa8c1106fd4569e1376de2de596c763508aa44f49cf4ed0bf3ff4fc9a3b0495092e54c8bfef9ced8ab57053244e0c6e3ca1676dc644757096cd7cc6682f278e9e1e33c310c39c9d607219cb70128dafbdef6906b4a86f60a0e19e979e0630e763d77bd8069d1a3e"}, @NFSD_A_SOCK_ADDR={0xce, 0x1, "ceccdcb58f9f07d126f2b4047c4e9b7b36ec158e685ec8b27c9611aa5d5ad2edc7ad31ede381eb935c487c8fc2e5771c4928a48a90570229ac31869915eb637352946412295e1b4468809a44160e3d6e2a6a8ed455a9e300d82861e4ac0dda3610e6d6286de31749bf4065cfbf64c5848e49f016f3f237b1b585ced43ef3bc7fb930374b37c84dfdb34315bd6765bdb428735c2e0911788dbe67dbe4cdba7a80bae602b83be83959079c2432b4cde235df68c9285dc0b230a099ac986e9158aa547d4e933aeabb5cc27b"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1150, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x3d, 0x1, "430574cde879d76ea97d334792b4d326903c7c93f214e795c7410adee75994c41755c1af8ec5e58eec2189ea74d52b74f357f8f0387767af0a"}, @NFSD_A_SOCK_ADDR={0xcf, 0x1, "cda1ef6b3b4cafc2f0c3b26951e15f45dbd7bf79305abc5ab3f0cc7803c21bb72e1e95deb92fbf1ee7773142bceae2ff865a73e49684c9928e1dbd9f255eda5c73573b6305921f9979fa258c4e637caa033f7c2dcf0efaee034e15aabcfc554e779d56f3d06c7704108707c6873bdc2108a00078dc6cf81465783127153f06d0ad8761073b7a0c50b3edd03bf0f81207975d0e801fe7228dac090c024a665b27d3fb23cdee69a4042deea5108f83bc5cb72a6e542e6ef0bf5298ad4b00f4fa2167cfc496e9fdf1a5d90204"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '^\x0e\x00'}, @NFSD_A_SOCK_ADDR={0x2d, 0x1, "28251ff4a229f434e3f4e57aede7bbd3584685269ecf5493e565dcd11a2c8958f3daf8f0009209ec9a"}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0xf4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xd2, 0x1, "f16c218d5d64881eedcf524dc4ce2cd76b4d53f8fb69e37cfd50691fe33adfcaf615dc0d17a322ecafe50422fa0306b1b3b65304f3d8b247a4e54bd8b1483b83aaceccb6725fe90e751a513ac5b4489519db6e99388c3428b6a557f4859c136dcd4bd10dda144a0f93907a38e46c8f3cb5d5e901990c39499cf507ea951a26f21ffcb79afe1cc913b44db1f0c0d1d0c42024940204733a5a23b1f9cce4d774204c00ec542f432e275b847de993e7d25559d4bec89926f1c4195ede58e015557ba64e7aa8288ed7d18ac2b8b5d210"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '(():}\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x38, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '[L\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x2a, 0x2, '/sys/kernel/tracing/available_tracers\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xc4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x5, 0x1, 'd'}, @NFSD_A_SOCK_ADDR={0xb8, 0x1, "654ff35794744970766982e02a650a3c7fb669fc67962fecb0a76fa5a3d073254ee8400a07f97cc9ef908163bc0d9cff37037fb8a37c4f06ab63cfc39eb3697a137c7c938d43309cf4c75f1f5d351340062f668750d0179a3666b1013d2f311374df57acb3c6a1e94a6781e0dc254e5c6ffb6c5484ae103831f4685f3fa9511a468c7bffb43286940fd827a34b95b0677a91307b7fed38fd13469c89376741bed60fad6ce60761ff828728f195f26993f8ea1227"}]}]}, 0x1588}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) ioctl$auto_BLKGETNRZONES(r3, 0x80041285, &(0x7f0000000000)=0x703) connect$auto(0x3, 0x0, 0x55) connect$auto(0x3, 0x0, 0x55) listen$auto(0x3, 0x81) pwrite64$auto(0xc8, 0x0, 0x3f, 0x200001000) socket(0x2, 0x1, 0x106) socket(0x21, 0x2, 0xa) socket(0x2, 0x1, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_tracers\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xf9, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) 5.824882052s ago: executing program 4 (id=2317): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x5521, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r1, 0x2400000, 0xffffffffffffffff) futex$auto(0x0, 0x4f549, 0xc, 0x0, 0x0, 0x404) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) socket(0x18, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) 5.546740807s ago: executing program 1 (id=2318): ioctl$auto_FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x4) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) (async, rerun: 32) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) (async, rerun: 64) sendmmsg$auto(r0, 0x0, 0x7, 0x8) (async, rerun: 64) unshare$auto(0x40000080) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) (async) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x80) (async, rerun: 64) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) r2 = openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_RNDGETENTCNT(r2, 0x80045200, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x60) (async) sendmsg$auto_NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x300040c0}, 0x24000080) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x21) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) (async) shutdown$auto(0x200000003, 0x2) (async, rerun: 64) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) 5.07438154s ago: executing program 0 (id=2319): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x2f4b, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x8, 0xa, 0xf4) r1 = socket(0x15, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x114, 0x2710, 0xfffffffffffffffc, 0x0) getsockopt$auto(r0, 0x65, 0x6, 0x0, 0x0) process_vm_readv$auto(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)="80e3b5aa6b1b6b05f94f7b9fa513def00d3778258b151a0e2629d7523b793146035954b5d9d60a6e629a10d17b1f9d9c100bc1bf6b876dc4f07ba3675e23e76766aae0a79676ff7bb8cf069cc14158065b4157274dfc650c34fe337db5084ece08e40c9d8b6508f01045dfd290716e3d0bfaa190febf5ab4178f37503a9bf0fa4cab6edbe09db37707603740", 0x1}, 0x292, &(0x7f0000000340)={&(0x7f0000000240)="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", 0xe2}, 0x3, 0x4) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) readv$auto(r3, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x81, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x822, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fsconfig$auto_FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x8) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000005940)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r4, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000012c0), 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='S\x00\x00\xde\xfe\xff\xff\xff\a\xdcm\\\x84\xa90\xfc!\xb7\xb0Y\xafpP\x85\xd2\xe89p\x9a\x98\xe2\xaf\xe8\n\xb4\xac\xd4\xc1Gu0Ue\xa6\xb0\xfb\x9c\xa2\xeco\x122h+\xd4\x96\xa0', 0x8587) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) unshare$auto(0x40000080) mmap$auto(0x20, 0x400000000202000b, 0x0, 0xeb1, r2, 0x8000) pipe2$auto(0x0, 0x80) 4.852538094s ago: executing program 3 (id=2320): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdeb, 0x9) 4.665485179s ago: executing program 3 (id=2321): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa2040, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x10001, 0x830) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x845) mmap$auto(0x0, 0x202000b, 0xfffffffffffffffe, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r2 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyyb\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D2\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0xffff, 0x9, 0x3, 0x40000000001, 0x948c, 0x2, 0x6, 0x7f5, 0xe07, 0x8000000000000001, 0x2a61, 0x7, 0x8, 0x809, 0x6, 0x4]}, 0x0) write$auto(r3, &(0x7f0000000400)=' \x00\x00\x00\xf7\xff\xff\xff\xff\xff\xff\xff', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f00000002c0)={[0x1fa, 0xfffffffffffffffe, 0x8f, 0x3, 0x9487, 0x8, 0x15f4da09, 0x0, 0xfffffffffffffff7, 0x20000000000005e, 0x6, 0x1040000000000007, 0x6d41, 0x3, 0x7, 0x7]}, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r2) r5 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x14d081, 0x0) ioctl$auto_BLKTRACESETUP2(r2, 0xc0481273, &(0x7f0000000240)={"45cf930a4a1b7510bc10eb08b77cfd598059be2356ab6e0dc7921e2bf7067fad", 0x2, 0xe4, 0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff}) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000003940)=ANY=[@ANYBLOB="3c190000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="13003b002a7be23a2db1292f265c40295e5c0000f2e9650ebda942fb0acf83b777958bfedf5e587f1994aaf39d64dd35126b5bebd81b352e510e9c4b350bf193a0be22ff02e569dcfe831d3108005d00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x193c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000800) mmap$auto(0x0, 0x20009, 0xe5, 0xeb1, 0x405, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r7 = getpid() r8 = gettid() r9 = getpid() statx$auto(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x3, 0x0, &(0x7f0000000200)={0xf2, 0x8, 0x4, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0xf330, 0x8, 0x3, 0xf, 0x7, 0x7, {0x7f, 0xf}, {0xffffffffffffffff, 0x2}, {0xfffffffffffffff7, 0x7fffffff}, {0xa, 0x400}, 0x0, 0x1, 0x8, 0x9, 0x97, 0x1000, 0xffffffff, 0x4, 0xddd, 0x5, 0x8, 0xf, [0x7e62e0e2, 0xe7, 0xfffffffffeffffd5, 0x65f, 0x868d, 0x9, 0x3, 0x2, 0xfffffffffffffe08]}) rt_tgsigqueueinfo$auto(r9, r8, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x9, 0xcce3, @_sigchld={r8, r10, 0x3, 0x2, 0x9}}}) rt_tgsigqueueinfo$auto(0x0, r7, 0x6, &(0x7f0000000040)={@_si_pad}) 4.228720032s ago: executing program 1 (id=2322): r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) connect$auto(r0, &(0x7f0000000080)=@can={0x1d, r1}, 0xb0d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DUMP_SEID(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r3, 0x10, 0x70bd28, 0x25dfdbff, {}, "a9d2356a4b32cbbcff42aa2d8157132af0093b4c9c17f333f2db50c5aab9b8308fe08447a21161595b24aaac6632837b98cb3ee0198e038d2c659bbf6e27da8d216c625f38d70b5f1d585dc35dec50a85953481aeb0025302964296be7a4b299504398011edabd0669140269dd7d75d96c9326db55768748cd05dbeca5ca30f3e362c2aceee4827218bb"}, 0xa0}}, 0x20000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ptyva/uevent\x00', 0x48280, 0x0) ioctl$auto_FIDEDUPERANGE(r4, 0xc0189436, 0x9) r5 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x210101, 0x0) read$auto_stats_fops_(r5, &(0x7f0000000300)=""/95, 0x5f) io_uring_register$auto_IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000380)="5d902447c0d66985482b5c5fad68cdad0861fdda4aaed3107d1a97ce1f457be4ff661e146b6374434a7d22f74f042345e885792fdf913f06684d91a7371db7d7ef075a3a2553f04f2b325f79fdb2dddaf25c35e34e2a2ceff4f18405ebd0e03e3409494d1982b28f716a090b64e08b6eb14892780b519545602fcc38679fed775e12bcbcbe4c42a91929c745babaee2337ebb0e3184318d621268e9d8f61aec88a", 0x3d) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6, 0x6, 0x3ff}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x5}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @GTPA_O_TEI={0x8, 0x9, 0x7}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000600), r2) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffe}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) madvise$auto(0x8, 0xffffffffffff8001, 0x80) r8 = prctl$auto_PR_SET_MM_END_DATA(0x4, 0x4, 0x0, 0x4, 0x1) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r2) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r8, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x7c, r9, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0xd41}, @ETHTOOL_A_PSE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x7}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x400}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x805) timer_settime$auto(0x967, 0xe0f, &(0x7f0000000980)={{0x9, 0x7}, {0x0, 0x2}}, &(0x7f00000009c0)={{0x1c000000000, 0x7}, {0x1c, 0xfffffffffffffe00}}) ioctl$auto_FS_IOC_GETFSUUID(r2, 0x80111500, 0x8000) r10 = openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) close_range$auto(r10, r6, 0x9) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/txpower\x00', 0x4000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000ac0), r8) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r11, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x244, r12, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MACSEC_ATTR_RXSC_CONFIG={0xc8, 0x2, 0x0, 0x1, [@typed={0xad, 0xcb, 0x0, 0x0, @binary="2f237f8bda5a8411e4998bd29fd2b61005506661d9b88ebe860c67fa4de0d0b1b6e241134a8ddf5d7253c557d37ea74cf180d495718e5732d8ffcbe6ceb157c39264fbf133f299f6c9cc09ba11c2199d26b6c36036bd99bc62a8cd54705fe770a97f18f1be5b8fc765b35b1bd7ed142a36b05074951a648675be5879038a1293f3426f6d6c001d16c4cee5d3890b6ac53205036980a8f5f092224730f146e2fbb6035325bb823cc439"}, @generic="38162d12505b321d27684e93944eb44fb446d655"]}, @MACSEC_ATTR_OFFLOAD={0x166, 0x9, 0x0, 0x1, [@typed={0xa, 0xee, 0x0, 0x0, @str='\xb7#-^\x1e\x00'}, @nested={0xc, 0x162, 0x0, 0x1, [@typed={0x5, 0xc4, 0x0, 0x0, @str='\x00'}]}, @generic="ec10d2a2c49918086d38ce81b823a926d7d3d8431418994faebb1b94ce212e71eadedc6692651bfd33fbf926616309355471beb8629370cfceb16faa2dd9aff9685c4c4e83158942b50d421009388412ea915f9da15097534f953b1798cf16c86da3c7d4854fe8de490c72c2fa320c880271d3b1df22144e1d229874feeab4e7913efed24d64b19ee2988156335c0a", @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@multicast2}, @generic="49a3fab81689a8117f397acbd18b084a23c7419a9b3a057aec52932b46f8", @nested={0x69, 0x87, 0x0, 0x1, [@nested={0x4, 0xb5}, @nested={0x4, 0x118}, @nested={0x4, 0x43}, @nested={0x4, 0x90}, @typed={0x8, 0x115, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="04678572f7d5a88392f6f2719aac82dbe73907fa9cc6dbea300096b0a5b5b8327e5dbe03117e151ec2a22f541d2739bc4b74035c5913db88376522a0bbf7b23908ce9067c622eed210e4896316"]}, @generic="4dcad51edc7ec3ba8398863c3129f29399511f6d86d1dfd5f07afdd1a2e9e48fb1f0a7d7ea7fce60f0"]}]}, 0x244}}, 0xc000) r13 = ioctl$auto_SW_SYNC_GET_DEADLINE(r8, 0xc0105702, &(0x7f0000000e00)={0x1ff, 0x0, r5}) write$auto(r13, &(0x7f0000000e40)='/dev/dvb/adapter0/demux0\x00', 0x7f) 3.905883011s ago: executing program 4 (id=2323): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/004/001\x00', 0x1102, 0x0) ioctl$auto_USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)={0x5, 0x9}) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci6/force_devcoredump\x00', 0x2800, 0x0) read$auto(r1, &(0x7f0000000080)='%(]![[\x00', 0x8) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) arch_prctl$auto(0x5005, 0x9) 3.85752993s ago: executing program 1 (id=2324): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xae}, 0x5, 0x0, 0x3, 0x3a32182}, 0x4}, 0x3, 0x9) setsockopt$auto(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x1001) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) socket(0x10, 0x2, 0xc) r0 = socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x1}}, 0x6a) r1 = getpid() prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x2, 0x8, 0x4) unshare$auto(0x40000080) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x5, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 3.220249998s ago: executing program 4 (id=2325): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x1000000002, 0xe9, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) r0 = socket(0x21, 0x80000, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x8, 0x4020005, 0xdf, 0xeb1, r0, 0x8000) unshare$auto(0x40000080) ioctl$auto(r0, 0x12, r0) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, 0x0, 0x109040, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8168b8e48af51b30, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r2, 0x40284504, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/discover\x00', 0x2901, 0x0) write$auto_aoe_fops_aoechr(r4, 0x0, 0x12) r5 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) process_madvise$auto_MADV_KEEPONFORK(r5, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0x1, 0x13, 0x3a0) statx$auto(r5, 0x0, 0x401006, 0xf8a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$auto_XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, &(0x7f00000000c0)={0xfffffffffffffffb, 0xfffffffb}) unshare$auto(0x20000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x10000000003, 0x7, 0x400000000ffb, 0x800000000801f, 0x3, 0x2000008000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 3.044799452s ago: executing program 3 (id=2326): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) socketcall$auto_SYS_RECVMSG(0x11, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x40101286, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 2.764919768s ago: executing program 0 (id=2327): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r0, 0x0, 0xfffffdf1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x800, 0xe) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/io.pressure\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000240)=""/127, 0x7f) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x16d080, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x5, @broadcast}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pwritev2$auto(r1, &(0x7f00000003c0)={&(0x7f0000000340)="44185dac32ffd1d1049de872aea73bc8815f9976728185d84a51d5f4a0b2498e39869c021bdcfd0bf9fdaaa64f172f96be9b365e92cb8b7148fe91bce2dc36190cfb82c4e32ea6bcd868427b3c58f0529912310672d814b50deb99891cab3db7b0c7be55dd0afd7257"}, 0x6, 0xe, 0x8, 0x7000) readv$auto(r2, &(0x7f0000000140)={&(0x7f00000002c0), 0x8}, 0x2) socket(0x2, 0x5, 0xff) socket(0xa, 0x3, 0x3b) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setgid$auto(0xee00) r4 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r4, 0x29, 0xcf, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.847230819s ago: executing program 4 (id=2328): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x5521, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r1, 0x2400000, 0xffffffffffffffff) futex$auto(0x0, 0x4f549, 0xc, 0x0, 0x0, 0x404) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) socket(0x18, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r2, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, &(0x7f00000000c0)) preadv2$auto(r1, &(0x7f00000003c0)={&(0x7f00000002c0)="47ad91f7036ccbfd21b3f4253202eaff8a2c2a7543a273676b4ce912ddd55684810c46c4f11041e7c701c3c20540b74ebe040453ec3a400ef909a475c7d11f82cfa14fb77d5a98fd6ca42df74c5f79cae3cc9ede510504966bf27b051e898ab7e1421e86bd8b3c680c3469d39a174828cc33b11a00e8410c216e8ce8709276441f7593394221f6b8c8a4728436e81e2f37d046066b2e28b896086ea7c66c198fbbae67d97ef4f687714b937a69f23e3ef13fe556934a090087d55c6645cb6d63409e1f18440e", 0x80000001}, 0xfffffffffffffc97, 0x5, 0x40, 0x1) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') prctl$auto(0x4, 0x1, 0x0, 0x9, 0x0) 932.576961ms ago: executing program 1 (id=2329): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x105e41, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) r2 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x400000100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0x8a001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x2, 0x9, 0x6, 0x4, 0x8, r4, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x800007f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x5, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r3) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000200)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa9q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\xb2Y\xc9&7\x18\t\xc3\xc5Q\xf8lw\xe3\xdaQN\xcfm~\xf2mJ\xf6\x1c\x12\xb3\xae\x10[\x15\xf1T\xd4\x1b\xdbR\\1\x81\xfd\xd6\xacr(\x9aQ\xcb\xc5\xc9\xcd\xc4\xed3\xc8\xf1\xda\x9e{je\xba\xea\x0e\x8a\x03\x9f\xa7\xd5Hy\xfc\xc5\xafm\xc2Z0K\x90\xf4\xb5\xe7\xc6|\x1c\xeel$y\xe7\xee', 0x3) mmap$auto(0x3, 0x400008, 0x7, 0x4000000000009b72, 0x2, 0x0) 529.937864ms ago: executing program 0 (id=2330): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) getrlimit$auto(0x3, 0x0) ioctl$auto(0x3, 0x400c4d05, r0) ioctl$auto(0x3, 0x400c4d00, r0) close_range$auto(0x2, 0x8, 0x0) 367.636586ms ago: executing program 3 (id=2331): r0 = memfd_create$auto(&(0x7f0000000000)='@+%/\\(#@]\xd6\x00', 0x5) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video62\x00', 0xc0303, 0x0) r1 = mq_open$auto(&(0x7f0000000400)='nlctrl\x00', 0x4f3, 0x29fc, &(0x7f0000000440)={0x9, 0xfa, 0x10, 0x3}) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r1, &(0x7f0000001540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="141000006f5a3a470aef4826450d4b0ba358f4df87256687dd897ee047e21a9298237ccf7c8a1a212bbd6d17f3719f69886cdbe316e1f04dd3240dbf6257ae0dda02be24300d83e427e56b95e280847e2877d87a1a5ec89c9d7633e13687f9f93b2b41564d4e8f52ce879e6e77fb62eb52c3", @ANYRES16=0x0, @ANYBLOB="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"], 0x1014}}, 0xc804) fchmod$auto(r1, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x5d3001, 0x0) write$auto(r3, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) r4 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x11, 0x80000, 0x84) r6 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(r6, &(0x7f0000000300)={0x0, 0x10001}, 0xc) getsockopt$auto(r5, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x8) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r2, &(0x7f0000007b00)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000007a80)={0x14, r4, 0x311, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) mmap$auto(0x0, 0x2000009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRES8=r8, @ANYBLOB="fde78f1f8923d28ffdf020bbac802155525d6ba034b5d13d8ab5265b57929a47cca406dd6c98c7389516fb2cb37fbe86d3e4fc4616a27983df08835ceaa275a1519b26bb52ad71217cf5a0e0c5f685a00c9d364a1100fc6460743c1953ba6cba29a0c0c03025023f2a0e7c22ce783cd79a2dce22a9f743366ffb85ebb8938fb375a1ea50a070d29fd01b52dbf1388a23315139263b94fab59ee10cec3414aa5e741ba8a3b5a210", @ANYRES32, @ANYBLOB="e53fb5cb89c5a8ad40460bcc8e7d8dabca448b29e0df6c34529a083e25a6da7a32bd8a84f9e147c6dafd0ae4efa3485f8b7fd4c9c2ca76d64b3447479c989d285b27826a630daff12d5b4064c5d72a699a5e253b914ebbd8f867482c19478ee7ad3571a0018f75685c642c650b4bf1cab7da11df136e4fedb4c5cac70775df95207d406154a74a5f9b7fef6208607ce621e60943286e923f26d6b2603952d25464df8546"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1a2c2be690b81bb1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4048011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000008f19e5ed37e62aee86621726d351a10dfeaba89c6eefab4ca4bc18b4110e876fd233d148773e2ff7b37fc367bc6b9e5f17261f95d73cebad77629d498d0738238f04012a29163c606a37fc1889805c60c18b4e8ac863ae83b4c2ba6645445d", @ANYRES32=r8, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x48800) 306.452121ms ago: executing program 4 (id=2332): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/drivers\x00', 0x100, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/cifsFYI\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r5 = socket(0x11, 0x80003, 0x300) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_PROTOCOL(r5, 0x9, 0x26, 0x0, 0x0) recvmsg$auto(r4, 0x0, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x2ff, 0x4, 0x1}]}) mmap$auto(0xfffffffffffffffd, 0x3, 0x5, 0x10, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0xa2741, 0x0) semctl$auto(0x0, 0x9, 0x1, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/158, 0x9e) 0s ago: executing program 0 (id=2333): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x5a79, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) read$auto(0x3, 0x0, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.7/usb24/24-0:1.0/usb24-port7/power/runtime_status\x00', 0xa801, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) sendfile$auto(0x3, r1, 0x0, 0xfdef) ioctl$auto_TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)="e4cc11432cb02a340db748cb02d6ba4b1805339f27cb67ee68999864d8bf8febd11e2f9a1a2ddaca941047278e4cdf0e8b5940d277fc5d82aeb246f29ea44b43dbd265eeb77f93dae647ad363851e45875e1c85f99464410c5cd552674c617db627c2960535a") quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): 5.278313][T14145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 665.321456][T14145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 665.355323][T14145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 665.385790][T14145] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 665.462017][T14145] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 665.693384][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 667.085967][T14188] nbd: socks must be embedded in a SOCK_ITEM attr [ 667.132213][T14188] block nbd0: shutting down sockets [ 667.285076][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 667.368829][ T7347] Bluetooth: hci4: command 0x0c1a tx timeout [ 667.375161][ T5639] Bluetooth: hci2: command 0x2016 tx timeout [ 669.433945][ T7347] Bluetooth: hci4: command 0x0c1a tx timeout [ 669.440122][ T5639] Bluetooth: hci2: command 0x2016 tx timeout [ 669.909144][T14231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1574'. [ 670.775699][T14211] syz.1.1572 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 670.815381][T14211] CPU: 0 UID: 0 PID: 14211 Comm: syz.1.1572 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.815420][T14211] Tainted: [L]=SOFTLOCKUP [ 670.815429][T14211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.815445][T14211] Call Trace: [ 670.815454][T14211] [ 670.815464][T14211] dump_stack_lvl+0x100/0x190 [ 670.815513][T14211] dump_header+0xfb/0x606 [ 670.815544][T14211] oom_kill_process.cold+0xd/0x330 [ 670.815574][T14211] out_of_memory+0x340/0x14f0 [ 670.815621][T14211] ? __pfx_out_of_memory+0x10/0x10 [ 670.815668][T14211] mem_cgroup_out_of_memory+0xc6/0x130 [ 670.815708][T14211] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 670.815746][T14211] ? find_held_lock+0x2b/0x80 [ 670.815788][T14211] ? do_raw_spin_unlock+0x145/0x1e0 [ 670.815816][T14211] ? _raw_spin_unlock+0x28/0x50 [ 670.815852][T14211] try_charge_memcg+0x6e5/0xdf0 [ 670.815889][T14211] ? __pfx_try_charge_memcg+0x10/0x10 [ 670.815919][T14211] ? find_held_lock+0x2b/0x80 [ 670.815949][T14211] ? rcu_read_unlock+0x17/0x60 [ 670.815981][T14211] ? rcu_read_unlock+0x17/0x60 [ 670.816021][T14211] __memcg_slab_post_alloc_hook+0x43a/0xff0 [ 670.816063][T14211] ? kasan_unpoison+0x27/0x60 [ 670.816113][T14211] ? __register_sysctl_table+0xac/0x1650 [ 670.816146][T14211] __kmalloc_noprof+0x662/0x850 [ 670.816193][T14211] __register_sysctl_table+0xac/0x1650 [ 670.816226][T14211] ? is_module_address+0x5f/0xf0 [ 670.816257][T14211] ? __pfx___register_sysctl_table+0x10/0x10 [ 670.816288][T14211] ? is_module_address+0x69/0xf0 [ 670.816310][T14211] ? register_net_sysctl_sz+0x222/0x430 [ 670.816357][T14211] __addrconf_sysctl_register+0x1a2/0x360 [ 670.816488][T14211] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 670.816525][T14211] ? lockdep_init_map_type+0x5c/0x250 [ 670.816564][T14211] ? mld_in_v1_mode+0x2b2/0x3a0 [ 670.816604][T14211] addrconf_sysctl_register+0x163/0x200 [ 670.816638][T14211] ipv6_add_dev+0xaf2/0x1520 [ 670.816673][T14211] addrconf_notify+0x5db/0x1ba0 [ 670.816735][T14211] ? __pfx_tls_dev_event+0x10/0x10 [ 670.816781][T14211] ? __pfx_addrconf_notify+0x10/0x10 [ 670.816821][T14211] ? ip6mr_device_event+0x1c4/0x230 [ 670.816881][T14211] notifier_call_chain+0x99/0x400 [ 670.816925][T14211] call_netdevice_notifiers_info+0xbe/0x110 [ 670.816961][T14211] register_netdevice+0x18fe/0x24b0 [ 670.816995][T14211] ? __pfx_register_netdevice+0x10/0x10 [ 670.817023][T14211] ? net_generic+0xea/0x2a0 [ 670.817084][T14211] register_netdev+0x34/0x50 [ 670.817110][T14211] vti6_init_net+0x2ff/0x480 [ 670.817143][T14211] ? __pfx_vti6_init_net+0x10/0x10 [ 670.817175][T14211] ops_init+0x1e2/0x5f0 [ 670.817204][T14211] setup_net+0x118/0x3a0 [ 670.817231][T14211] ? __pfx_setup_net+0x10/0x10 [ 670.817258][T14211] ? mutex_init_lockdep+0xf1/0x120 [ 670.817288][T14211] copy_net_ns+0x46f/0x7c0 [ 670.817320][T14211] create_new_namespaces+0x3ea/0xac0 [ 670.817358][T14211] unshare_nsproxy_namespaces+0xf2/0x220 [ 670.817392][T14211] ksys_unshare+0x438/0xab0 [ 670.817425][T14211] ? kcov_ioctl+0x16a/0x720 [ 670.817457][T14211] ? kfree+0x1dd/0x6c0 [ 670.817492][T14211] ? __pfx_ksys_unshare+0x10/0x10 [ 670.817530][T14211] ? kcov_ioctl+0x16a/0x720 [ 670.817569][T14211] __x64_sys_unshare+0x31/0x40 [ 670.817603][T14211] do_syscall_64+0x115/0x840 [ 670.817638][T14211] ? clear_bhb_loop+0x40/0x90 [ 670.817668][T14211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.817694][T14211] RIP: 0033:0x7f06a479ce59 [ 670.817715][T14211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.817739][T14211] RSP: 002b:00007f06a56b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 670.817762][T14211] RAX: ffffffffffffffda RBX: 00007f06a4a15fa0 RCX: 00007f06a479ce59 [ 670.817778][T14211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 670.817793][T14211] RBP: 00007f06a4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 670.817808][T14211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.817823][T14211] R13: 00007f06a4a16038 R14: 00007f06a4a15fa0 R15: 00007ffc5be07778 [ 670.817854][T14211] [ 671.581969][ T5639] Bluetooth: hci2: command 0x2016 tx timeout [ 671.590254][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout [ 671.604493][T14211] memory: usage 3072kB, limit 3072kB, failcnt 37858 [ 671.683371][T14244] random: crng reseeded on system resumption [ 671.725981][T14211] memory+swap: usage 3308kB, limit 9007199254740988kB, failcnt 0 [ 671.763351][T14211] kmem: usage 3024kB, limit 9007199254740988kB, failcnt 0 [ 671.794717][T14211] Memory cgroup stats for /syz1: [ 671.795067][T14211] cache 0 [ 671.818563][T14211] rss 0 [ 671.826425][T14211] rss_huge 0 [ 671.833056][T14211] shmem 0 [ 671.839424][T14211] mapped_file 0 [ 671.848107][T14211] dirty 0 [ 671.859538][T14211] writeback 0 [ 671.866974][T14211] workingset_refault_anon 8437 [ 671.878141][T14211] workingset_refault_file 7010 [ 671.889913][T14211] swap 241664 [ 671.910223][T14211] swapcached 257318912 [ 671.925945][T14211] pgpgin 323067 [ 671.939709][T14211] pgpgout 327737 [ 671.948348][T14211] pgfault 414672 [ 671.959587][T14211] pgmajfault 3426 [ 671.971289][T14211] inactive_anon 45056 [ 671.984800][T14211] active_anon 0 [ 671.991949][T14211] inactive_file 0 [ 671.999898][T14211] active_file 0 [ 672.011566][T14211] unevictable 0 [ 672.019533][T14211] hierarchical_memory_limit 3145728 [ 672.030368][T14211] hierarchical_memsw_limit 9223372036854771712 [ 672.044108][T14211] total_cache 0 [ 672.051929][T14211] total_rss 0 [ 672.058879][T14211] total_rss_huge 0 [ 672.067130][T14211] total_shmem 0 [ 672.075177][T14211] total_mapped_file 0 [ 672.083650][T14211] total_dirty 0 [ 672.090913][T14211] total_writeback 0 [ 672.100289][T14211] total_workingset_refault_anon 8437 [ 672.114495][T14211] total_workingset_refault_file 7010 [ 672.126775][T14211] total_swap 241664 [ 672.135243][T14211] total_swapcached 257318912 [ 672.145524][T14211] total_pgpgin 323067 [ 672.154373][T14211] total_pgpgout 327737 [ 672.163857][T14211] total_pgfault 414672 [ 672.172401][T14211] total_pgmajfault 3426 [ 672.181147][T14211] total_inactive_anon 45056 [ 672.191231][T14211] total_active_anon 0 [ 672.200719][T14211] total_inactive_file 0 [ 672.209557][T14211] total_active_file 0 [ 672.218008][T14211] total_unevictable 0 [ 672.235021][T14211] anon_cost 0 [ 672.242831][T14211] file_cost 0 [ 672.249600][T14211] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1572,pid=14210,uid=0 [ 672.285165][T14211] Memory cgroup out of memory: Killed process 14210 (syz.1.1572) total-vm:158624kB, anon-rss:1240kB, file-rss:42908kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 674.973379][T14274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1583: iget: checksum invalid [ 675.125115][T14274] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 675.206645][T14274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1583: iget: checksum invalid [ 675.331320][T14274] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 675.415544][T14274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1583: iget: checksum invalid [ 675.428359][T12578] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1345 with max blocks 16 with error 117 [ 675.510094][T14274] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 675.530626][T12578] EXT4-fs (sda1): This should not happen!! Data will be lost [ 675.530626][T12578] [ 675.583805][T14274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1583: iget: checksum invalid [ 675.716134][T14274] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 675.807357][T14274] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 675.872891][T14274] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 676.295560][T14300] netlink: 'syz.4.1587': attribute type 11 has an invalid length. [ 676.332043][T14300] netlink: 'syz.4.1587': attribute type 11 has an invalid length. [ 676.370697][T14300] netlink: 'syz.4.1587': attribute type 11 has an invalid length. [ 681.599242][ T30] audit: type=1800 audit(4294967325.055:19): pid=14387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1599" name="discovery_nqn" dev="configfs" ino=57822 res=0 errno=0 [ 683.265982][T14418] FAULT_INJECTION: forcing a failure. [ 683.265982][T14418] name failslab, interval 1, probability 0, space 0, times 0 [ 683.331473][T14418] CPU: 0 UID: 8 PID: 14418 Comm: syz.0.1604 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.331514][T14418] Tainted: [L]=SOFTLOCKUP [ 683.331524][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 683.331540][T14418] Call Trace: [ 683.331549][T14418] [ 683.331558][T14418] dump_stack_lvl+0x100/0x190 [ 683.331607][T14418] should_fail_ex.cold+0x5/0xa [ 683.331641][T14418] should_failslab+0xc2/0x120 [ 683.331671][T14418] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 683.331712][T14418] ? prepare_creds+0x2c/0x950 [ 683.331744][T14418] prepare_creds+0x2c/0x950 [ 683.331772][T14418] lookup_user_key+0xfb2/0x1300 [ 683.331808][T14418] ? __pfx_lookup_user_key+0x10/0x10 [ 683.331848][T14418] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 683.331884][T14418] ? __x64_sys_futex+0x34f/0x4d0 [ 683.331910][T14418] ? __x64_sys_futex+0x358/0x4d0 [ 683.331942][T14418] keyctl_session_to_parent+0x28/0xae0 [ 683.331976][T14418] __do_sys_keyctl+0x2b1/0x5a0 [ 683.332005][T14418] do_syscall_64+0x115/0x840 [ 683.332042][T14418] ? clear_bhb_loop+0x40/0x90 [ 683.332074][T14418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.332100][T14418] RIP: 0033:0x7f55ebb9ce59 [ 683.332122][T14418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.332148][T14418] RSP: 002b:00007f55ecb3b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 683.332173][T14418] RAX: ffffffffffffffda RBX: 00007f55ebe15fa0 RCX: 00007f55ebb9ce59 [ 683.332190][T14418] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 683.332207][T14418] RBP: 00007f55ebc32d6f R08: 0000000000000001 R09: 0000000000000000 [ 683.332223][T14418] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 683.332246][T14418] R13: 00007f55ebe16038 R14: 00007f55ebe15fa0 R15: 00007ffcf6706ef8 [ 683.332279][T14418] [ 683.809467][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.815917][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.470362][T14426] FAULT_INJECTION: forcing a failure. [ 684.470362][T14426] name failslab, interval 1, probability 0, space 0, times 0 [ 684.529611][T14426] CPU: 0 UID: 8 PID: 14426 Comm: syz.0.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.529653][T14426] Tainted: [L]=SOFTLOCKUP [ 684.529663][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.529679][T14426] Call Trace: [ 684.529687][T14426] [ 684.529697][T14426] dump_stack_lvl+0x100/0x190 [ 684.529747][T14426] should_fail_ex.cold+0x5/0xa [ 684.529779][T14426] should_failslab+0xc2/0x120 [ 684.529810][T14426] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 684.529851][T14426] ? prepare_creds+0x2c/0x950 [ 684.529883][T14426] prepare_creds+0x2c/0x950 [ 684.529910][T14426] lookup_user_key+0xfb2/0x1300 [ 684.529945][T14426] ? __pfx_lookup_user_key+0x10/0x10 [ 684.529983][T14426] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 684.530019][T14426] ? __x64_sys_futex+0x34f/0x4d0 [ 684.530045][T14426] ? __x64_sys_futex+0x358/0x4d0 [ 684.530077][T14426] keyctl_session_to_parent+0x28/0xae0 [ 684.530111][T14426] __do_sys_keyctl+0x2b1/0x5a0 [ 684.530140][T14426] do_syscall_64+0x115/0x840 [ 684.530176][T14426] ? clear_bhb_loop+0x40/0x90 [ 684.530212][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.530239][T14426] RIP: 0033:0x7f55ebb9ce59 [ 684.530260][T14426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.530286][T14426] RSP: 002b:00007f55ecb3b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 684.530310][T14426] RAX: ffffffffffffffda RBX: 00007f55ebe15fa0 RCX: 00007f55ebb9ce59 [ 684.530328][T14426] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 684.530345][T14426] RBP: 00007f55ebc32d6f R08: 0000000000000001 R09: 0000000000000000 [ 684.530360][T14426] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 684.530377][T14426] R13: 00007f55ebe16038 R14: 00007f55ebe15fa0 R15: 00007ffcf6706ef8 [ 684.530408][T14426] [ 687.172866][T14434] QAT: Stopping all acceleration devices. [ 687.193537][T14415] Process accounting paused [ 688.430727][T14457] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13227] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[14457] [ 691.592116][T14461] bond0: no command found in slaves file - use +ifname or -ifname [ 692.062782][T14489] random: crng reseeded on system resumption [ 692.430491][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 693.611085][T14498] FAULT_INJECTION: forcing a failure. [ 693.611085][T14498] name failslab, interval 1, probability 0, space 0, times 0 [ 693.802998][T14498] CPU: 0 UID: 0 PID: 14498 Comm: syz.0.1618 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.803040][T14498] Tainted: [L]=SOFTLOCKUP [ 693.803049][T14498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 693.803065][T14498] Call Trace: [ 693.803073][T14498] [ 693.803083][T14498] dump_stack_lvl+0x100/0x190 [ 693.803132][T14498] should_fail_ex.cold+0x5/0xa [ 693.803164][T14498] should_failslab+0xc2/0x120 [ 693.803195][T14498] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 693.803237][T14498] ? __proc_create+0x2cb/0x8c0 [ 693.803276][T14498] __proc_create+0x2cb/0x8c0 [ 693.803315][T14498] ? __pfx___proc_create+0x10/0x10 [ 693.803353][T14498] ? _raw_write_unlock+0x28/0x50 [ 693.803387][T14498] ? proc_register+0x559/0x8a0 [ 693.803424][T14498] proc_create_reg+0x75/0x170 [ 693.803462][T14498] proc_create_seq_private+0x8e/0x180 [ 693.803500][T14498] ? __pfx_proc_create_seq_private+0x10/0x10 [ 693.803546][T14498] xt_proto_init+0x3ab/0xb80 [ 693.803675][T14498] ? __pfx_xt_proto_init+0x10/0x10 [ 693.803710][T14498] ? trace_kmalloc+0xe3/0x110 [ 693.803744][T14498] ? __kmalloc_noprof+0x320/0x850 [ 693.803789][T14498] ? __pfx_arp_tables_net_init+0x10/0x10 [ 693.803837][T14498] ops_init+0x1e2/0x5f0 [ 693.803869][T14498] setup_net+0x118/0x3a0 [ 693.803897][T14498] ? __pfx_setup_net+0x10/0x10 [ 693.803926][T14498] ? mutex_init_lockdep+0xf1/0x120 [ 693.803955][T14498] copy_net_ns+0x46f/0x7c0 [ 693.803989][T14498] create_new_namespaces+0x3ea/0xac0 [ 693.804027][T14498] unshare_nsproxy_namespaces+0xf2/0x220 [ 693.804062][T14498] ksys_unshare+0x438/0xab0 [ 693.804101][T14498] ? __pfx_ksys_unshare+0x10/0x10 [ 693.804137][T14498] ? xfd_validate_state+0x129/0x190 [ 693.804172][T14498] __x64_sys_unshare+0x31/0x40 [ 693.804209][T14498] do_syscall_64+0x115/0x840 [ 693.804246][T14498] ? clear_bhb_loop+0x40/0x90 [ 693.804277][T14498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.804310][T14498] RIP: 0033:0x7f55ebb9ce59 [ 693.804332][T14498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.804358][T14498] RSP: 002b:00007f55ecb1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 693.804383][T14498] RAX: ffffffffffffffda RBX: 00007f55ebe16090 RCX: 00007f55ebb9ce59 [ 693.804401][T14498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 693.804417][T14498] RBP: 00007f55ebc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 693.804433][T14498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.804449][T14498] R13: 00007f55ebe16128 R14: 00007f55ebe16090 R15: 00007ffcf6706ef8 [ 693.804482][T14498] [ 696.195202][T14525] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 696.334325][ T7347] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 698.478305][T14525] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 698.638105][T14525] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 698.744655][T14525] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 698.880453][T14525] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 699.014641][T14525] page dumped because: unmovable page [ 699.113058][T14525] page_owner tracks the page as allocated [ 699.125797][T10749] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1347 with max blocks 14 with error 117 [ 699.207892][T10749] EXT4-fs (sda1): This should not happen!! Data will be lost [ 699.207892][T10749] [ 699.272744][T14525] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1608393014, free_ts 0 [ 699.437112][T14525] register_early_stack+0x74/0xaf [ 699.501529][T14525] init_page_owner+0x4c/0xa10 [ 699.555187][T14525] page_ext_init+0x71d/0x780 [ 699.586472][T14525] mm_core_init+0x229/0x270 [ 699.620831][T14525] page_owner free stack trace missing [ 700.050787][ T30] audit: type=1801 audit(4294967343.611:20): pid=14582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_metadata cause=unknown comm="syz.0.1630" name="mem" dev="proc" ino=58711 res=0 errno=0 [ 700.185385][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1347 with max blocks 1 with error 117 [ 700.278897][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 700.278897][ T12] [ 702.957696][T14566] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 703.786512][T12578] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1358 with max blocks 3 with error 117 [ 703.865861][T12578] EXT4-fs (sda1): This should not happen!! Data will be lost [ 703.865861][T12578] [ 705.336465][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1641'. [ 705.541742][T14644] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1641'. [ 705.843397][T14647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1642'. [ 705.900501][T10749] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1358 with max blocks 1 with error 117 [ 706.003150][T10749] EXT4-fs (sda1): This should not happen!! Data will be lost [ 706.003150][T10749] [ 706.014697][T14647] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1642'. [ 706.667868][T14664] netlink: 'syz.1.1646': attribute type 4 has an invalid length. [ 708.374151][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 708.450006][T14694] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1651'. [ 715.127004][T14780] input: jJǸ-¶š9ă%vř“ű¨lťĐQ  J86Ö‘ as /devices/virtual/input/input14 [ 715.559383][T14782] FAULT_INJECTION: forcing a failure. [ 715.559383][T14782] name failslab, interval 1, probability 0, space 0, times 0 [ 715.644052][T14782] CPU: 0 UID: 8 PID: 14782 Comm: syz.4.1667 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.644093][T14782] Tainted: [L]=SOFTLOCKUP [ 715.644102][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.644119][T14782] Call Trace: [ 715.644128][T14782] [ 715.644138][T14782] dump_stack_lvl+0x100/0x190 [ 715.644188][T14782] should_fail_ex.cold+0x5/0xa [ 715.644220][T14782] should_failslab+0xc2/0x120 [ 715.644251][T14782] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 715.644293][T14782] ? vm_area_dup+0x27/0x8e0 [ 715.644336][T14782] vm_area_dup+0x27/0x8e0 [ 715.644376][T14782] __split_vma+0x18c/0xda0 [ 715.644418][T14782] ? __pfx___split_vma+0x10/0x10 [ 715.644472][T14782] ? __pfx_mas_prev+0x10/0x10 [ 715.644521][T14782] vms_gather_munmap_vmas+0x3a5/0x1720 [ 715.644564][T14782] ? validate_mm+0x392/0x4e0 [ 715.644604][T14782] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 715.644661][T14782] ? __pfx_validate_mm+0x10/0x10 [ 715.644719][T14782] do_vmi_align_munmap+0x287/0x5f0 [ 715.644764][T14782] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 715.644808][T14782] ? cap_mmap_addr+0x4b/0x120 [ 715.644871][T14782] do_vmi_munmap+0x1f8/0x3e0 [ 715.644916][T14782] __vm_munmap+0x196/0x390 [ 715.644942][T14782] ? __pfx___vm_munmap+0x10/0x10 [ 715.644985][T14782] __x64_sys_munmap+0x59/0x80 [ 715.645019][T14782] do_syscall_64+0x115/0x840 [ 715.645055][T14782] ? clear_bhb_loop+0x40/0x90 [ 715.645086][T14782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.645112][T14782] RIP: 0033:0x7f3ff4f9cc87 [ 715.645133][T14782] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.645158][T14782] RSP: 002b:00007f3ff5e40d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 715.645182][T14782] RAX: ffffffffffffffda RBX: 00007f3fec000000 RCX: 00007f3ff4f9cc87 [ 715.645200][T14782] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 00007f3feb000000 [ 715.645216][T14782] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 715.645232][T14782] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 715.645248][T14782] R13: 0000000000001000 R14: 00007f3ff0000000 R15: 0000000001000000 [ 715.645280][T14782] [ 717.510997][T14804] input: jJǸ-¶š9ă%vř“ű¨lťĐQ  J86Ö‘ as /devices/virtual/input/input15 [ 717.666411][T14810] netlink: 286 bytes leftover after parsing attributes in process `syz.3.1672'. [ 717.749082][T14787] Process accounting resumed [ 720.307876][T14844] Process accounting resumed [ 721.745096][T14879] sg_write: process 1810 (syz.1.1683) changed security contexts after opening file descriptor, this is not allowed. [ 722.132639][T14886] misc userio: The device must be registered before sending interrupts [ 722.394542][T14893] QAT: Stopping all acceleration devices. [ 724.160394][T14927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1691'. [ 724.247522][T14928] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1691'. [ 724.778008][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1692'. [ 724.952577][T14941] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1692'. [ 726.463369][T14968] random: crng reseeded on system resumption [ 727.350915][T14970] FAULT_INJECTION: forcing a failure. [ 727.350915][T14970] name failslab, interval 1, probability 0, space 0, times 0 [ 727.415023][T14970] CPU: 0 UID: 0 PID: 14970 Comm: syz.1.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.415061][T14970] Tainted: [L]=SOFTLOCKUP [ 727.415070][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.415085][T14970] Call Trace: [ 727.415100][T14970] [ 727.415110][T14970] dump_stack_lvl+0x100/0x190 [ 727.415157][T14970] should_fail_ex.cold+0x5/0xa [ 727.415188][T14970] should_failslab+0xc2/0x120 [ 727.415218][T14970] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 727.415258][T14970] ? ptlock_alloc+0x1f/0x70 [ 727.415305][T14970] ? __pfx_filemap_map_pages+0x10/0x10 [ 727.415344][T14970] ptlock_alloc+0x1f/0x70 [ 727.415380][T14970] pte_alloc_one+0x82/0x3d0 [ 727.415413][T14970] __do_fault+0x26c/0x440 [ 727.415440][T14970] do_fault+0x2db/0x1750 [ 727.415470][T14970] ? __pmd_alloc+0x3fb/0x950 [ 727.415504][T14970] __handle_mm_fault+0x187d/0x2a00 [ 727.415550][T14970] ? __pfx___handle_mm_fault+0x10/0x10 [ 727.415585][T14970] ? find_held_lock+0x2b/0x80 [ 727.415616][T14970] ? mtree_load+0x311/0xa90 [ 727.415651][T14970] ? mtree_load+0x311/0xa90 [ 727.415706][T14970] handle_mm_fault+0x37b/0xa30 [ 727.415748][T14970] __get_user_pages+0x1178/0x32a0 [ 727.415790][T14970] ? down_read_killable+0x307/0x4b0 [ 727.415817][T14970] ? __pfx___get_user_pages+0x10/0x10 [ 727.415850][T14970] ? faultin_page_range+0x3ba/0x9e0 [ 727.415886][T14970] faultin_page_range+0x425/0x9e0 [ 727.415924][T14970] madvise_do_behavior+0x354/0x510 [ 727.415961][T14970] ? __pfx_madvise_do_behavior+0x10/0x10 [ 727.416011][T14970] do_madvise+0x195/0x240 [ 727.416043][T14970] ? __pfx_do_madvise+0x10/0x10 [ 727.416075][T14970] ? do_futex+0x192/0x350 [ 727.416107][T14970] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.416148][T14970] ? exit_to_user_mode_loop+0xf3/0x670 [ 727.416195][T14970] __x64_sys_madvise+0xa9/0x110 [ 727.416227][T14970] ? lockdep_hardirqs_on+0x78/0x100 [ 727.416262][T14970] do_syscall_64+0x115/0x840 [ 727.416305][T14970] ? clear_bhb_loop+0x40/0x90 [ 727.416336][T14970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.416361][T14970] RIP: 0033:0x7f06a479ce59 [ 727.416381][T14970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.416407][T14970] RSP: 002b:00007f06a56b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 727.416431][T14970] RAX: ffffffffffffffda RBX: 00007f06a4a15fa0 RCX: 00007f06a479ce59 [ 727.416448][T14970] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 727.416463][T14970] RBP: 00007f06a4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 727.416478][T14970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.416493][T14970] R13: 00007f06a4a16038 R14: 00007f06a4a15fa0 R15: 00007ffc5be07778 [ 727.416524][T14970] [ 731.090622][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1707'. [ 731.856451][T15039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1712'. [ 731.972256][ T7347] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 732.004586][T15034] futex_wake_op: syz.4.1711 tries to shift op by -2048; fix this program [ 732.051585][T15039] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1712'. [ 732.080807][T15034] futex_wake_op: syz.4.1711 tries to shift op by -2048; fix this program [ 733.877892][T15060] Process accounting resumed [ 735.359371][T15104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1723'. [ 735.545236][T15104] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1723'. [ 737.011878][T15136] ubi0: attaching mtd0 [ 737.020892][T15135] FAULT_INJECTION: forcing a failure. [ 737.020892][T15135] name failslab, interval 1, probability 0, space 0, times 0 [ 737.063210][T15135] CPU: 0 UID: 8 PID: 15135 Comm: syz.0.1730 Tainted: G L syzkaller #0 PREEMPT(full) [ 737.063250][T15135] Tainted: [L]=SOFTLOCKUP [ 737.063259][T15135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 737.063275][T15135] Call Trace: [ 737.063284][T15135] [ 737.063294][T15135] dump_stack_lvl+0x100/0x190 [ 737.063349][T15135] should_fail_ex.cold+0x5/0xa [ 737.063382][T15135] should_failslab+0xc2/0x120 [ 737.063414][T15135] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 737.063455][T15135] ? prepare_creds+0x2c/0x950 [ 737.063487][T15135] prepare_creds+0x2c/0x950 [ 737.063515][T15135] lookup_user_key+0xfb2/0x1300 [ 737.063549][T15135] ? __pfx_lookup_user_key+0x10/0x10 [ 737.063588][T15135] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 737.063624][T15135] ? __x64_sys_futex+0x34f/0x4d0 [ 737.063650][T15135] ? __x64_sys_futex+0x358/0x4d0 [ 737.063683][T15135] keyctl_session_to_parent+0x28/0xae0 [ 737.063717][T15135] __do_sys_keyctl+0x2b1/0x5a0 [ 737.063753][T15135] do_syscall_64+0x115/0x840 [ 737.063790][T15135] ? clear_bhb_loop+0x40/0x90 [ 737.063827][T15135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.063853][T15135] RIP: 0033:0x7f55ebb9ce59 [ 737.063873][T15135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.063899][T15135] RSP: 002b:00007f55ecb3b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 737.063925][T15135] RAX: ffffffffffffffda RBX: 00007f55ebe15fa0 RCX: 00007f55ebb9ce59 [ 737.063942][T15135] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 737.063959][T15135] RBP: 00007f55ebc32d6f R08: 0000000000000001 R09: 0000000000000000 [ 737.063975][T15135] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 737.063991][T15135] R13: 00007f55ebe16038 R14: 00007f55ebe15fa0 R15: 00007ffcf6706ef8 [ 737.064023][T15135] [ 737.066031][T15136] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 2 [ 737.913394][T15136] eraseblock attaching information dump: [ 737.939031][T15136] ec 1 [ 737.953708][T15136] pnum 1 [ 737.973555][T15136] lnum 1 [ 737.990326][T15136] scrub 0 [ 738.003682][T15136] sqnum 2 [ 738.235432][T15136] Volume identifier header dump: [ 738.308444][T15136] magic 55424921 [ 738.419958][T15136] version 1 [ 738.480592][T15136] vol_type 1 [ 738.556582][T15136] copy_flag 0 [ 738.630621][T15136] compat 5 [ 738.707891][T15136] vol_id 2147479551 [ 738.791343][T15136] lnum 1 [ 738.857844][T15136] data_size 0 [ 738.933891][T15136] used_ebs 0 [ 738.977920][T15136] data_pad 0 [ 739.034140][T15136] sqnum 2 [ 739.098891][T15136] hdr_crc 7beff9af [ 739.164576][T15136] Volume identifier header hexdump: [ 739.681174][T15136] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 739.883521][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 744.809620][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.816117][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.935558][T15267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1759'. [ 748.337594][T15281] Process accounting paused [ 749.179256][ T7347] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 749.707845][T15387] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1770'. [ 749.926507][T15392] phram: parameter too long [ 750.226737][T15396] netlink: 286 bytes leftover after parsing attributes in process `syz.3.1772'. [ 751.548332][T15406] futex_wake_op: syz.0.1775 tries to shift op by -2048; fix this program [ 751.609819][T15406] 0x000000000001-0x000000000003 : "" [ 751.831357][T15406] ftl_cs: FTL header corrupt! [ 754.002397][T15441] FAULT_INJECTION: forcing a failure. [ 754.002397][T15441] name failslab, interval 1, probability 0, space 0, times 0 [ 754.068166][T15441] CPU: 0 UID: 8 PID: 15441 Comm: syz.0.1781 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.068206][T15441] Tainted: [L]=SOFTLOCKUP [ 754.068215][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 754.068231][T15441] Call Trace: [ 754.068240][T15441] [ 754.068250][T15441] dump_stack_lvl+0x100/0x190 [ 754.068300][T15441] should_fail_ex.cold+0x5/0xa [ 754.068331][T15441] ? lsm_blob_alloc+0x68/0x90 [ 754.068373][T15441] should_failslab+0xc2/0x120 [ 754.068404][T15441] __kmalloc_noprof+0xe0/0x850 [ 754.068445][T15441] ? trace_kmem_cache_alloc+0xd5/0x100 [ 754.068480][T15441] lsm_blob_alloc+0x68/0x90 [ 754.068520][T15441] security_prepare_creds+0x2d/0x290 [ 754.068559][T15441] prepare_creds+0x5d6/0x950 [ 754.068587][T15441] lookup_user_key+0xfb2/0x1300 [ 754.068621][T15441] ? __pfx_lookup_user_key+0x10/0x10 [ 754.068660][T15441] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 754.068695][T15441] ? __x64_sys_futex+0x34f/0x4d0 [ 754.068721][T15441] ? __x64_sys_futex+0x358/0x4d0 [ 754.068753][T15441] keyctl_session_to_parent+0x28/0xae0 [ 754.068787][T15441] __do_sys_keyctl+0x2b1/0x5a0 [ 754.068822][T15441] do_syscall_64+0x115/0x840 [ 754.068859][T15441] ? clear_bhb_loop+0x40/0x90 [ 754.068890][T15441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.068917][T15441] RIP: 0033:0x7f55ebb9ce59 [ 754.068938][T15441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.068963][T15441] RSP: 002b:00007f55ecb3b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 754.068987][T15441] RAX: ffffffffffffffda RBX: 00007f55ebe15fa0 RCX: 00007f55ebb9ce59 [ 754.069005][T15441] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 754.069022][T15441] RBP: 00007f55ebc32d6f R08: 0000000000000001 R09: 0000000000000000 [ 754.069039][T15441] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 754.069055][T15441] R13: 00007f55ebe16038 R14: 00007f55ebe15fa0 R15: 00007ffcf6706ef8 [ 754.069087][T15441] [ 754.516563][T15445] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1783'. [ 755.856240][T15434] syz.1.1780 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 755.951842][T15434] CPU: 0 UID: 0 PID: 15434 Comm: syz.1.1780 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.951881][T15434] Tainted: [L]=SOFTLOCKUP [ 755.951890][T15434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.951905][T15434] Call Trace: [ 755.951915][T15434] [ 755.951925][T15434] dump_stack_lvl+0x100/0x190 [ 755.951972][T15434] dump_header+0xfb/0x606 [ 755.952001][T15434] oom_kill_process.cold+0xd/0x330 [ 755.952031][T15434] out_of_memory+0x340/0x14f0 [ 755.952084][T15434] ? __pfx_out_of_memory+0x10/0x10 [ 755.952131][T15434] mem_cgroup_out_of_memory+0xc6/0x130 [ 755.952170][T15434] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 755.952207][T15434] ? find_held_lock+0x2b/0x80 [ 755.952243][T15434] ? do_raw_spin_unlock+0x145/0x1e0 [ 755.952271][T15434] ? _raw_spin_unlock+0x28/0x50 [ 755.952306][T15434] try_charge_memcg+0x6e5/0xdf0 [ 755.952342][T15434] ? __pfx_try_charge_memcg+0x10/0x10 [ 755.952372][T15434] ? find_held_lock+0x2b/0x80 [ 755.952401][T15434] ? rcu_read_unlock+0x17/0x60 [ 755.952432][T15434] ? rcu_read_unlock+0x17/0x60 [ 755.952472][T15434] obj_cgroup_charge_pages+0x22/0x1d0 [ 755.952505][T15434] __memcg_kmem_charge_page+0x1c1/0x4d0 [ 755.952542][T15434] __alloc_frozen_pages_noprof+0x328/0x2bc0 [ 755.952585][T15434] ? __pfx_vmap_small_pages_range_noflush+0x10/0x10 [ 755.952616][T15434] ? __split_page_owner+0x1f9/0x350 [ 755.952650][T15434] ? alloc_pages_bulk_noprof+0x6d3/0x1360 [ 755.952690][T15434] ? __vmap_pages_range_noflush+0x3db/0x660 [ 755.952720][T15434] ? is_vmalloc_addr+0x86/0xa0 [ 755.952758][T15434] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 755.952812][T15434] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 755.952858][T15434] ? __lock_acquire+0x4a5/0x2630 [ 755.952895][T15434] ? __css_rstat_updated+0x1ce/0x5a0 [ 755.952934][T15434] ? __pfx___css_rstat_updated+0x10/0x10 [ 755.952973][T15434] ? policy_nodemask+0xed/0x4f0 [ 755.953001][T15434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 755.953038][T15434] ? policy_nodemask+0xed/0x4f0 [ 755.953069][T15434] alloc_pages_mpol+0x1fb/0x540 [ 755.953100][T15434] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 755.953130][T15434] ? find_held_lock+0x2b/0x80 [ 755.953159][T15434] ? rcu_read_unlock+0x17/0x60 [ 755.953189][T15434] ? rcu_read_unlock+0x17/0x60 [ 755.953224][T15434] alloc_pages_noprof+0x1a/0x160 [ 755.953258][T15434] __vmalloc_node_range_noprof+0xaec/0x1630 [ 755.953302][T15434] ? io_pin_pages+0xc3/0x1e0 [ 755.953404][T15434] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 755.953445][T15434] ? rcu_is_watching+0x12/0xc0 [ 755.953480][T15434] __kvmalloc_node_noprof+0x3de/0xa00 [ 755.953505][T15434] ? io_pin_pages+0xc3/0x1e0 [ 755.953530][T15434] ? io_pin_pages+0xc3/0x1e0 [ 755.953563][T15434] io_pin_pages+0xc3/0x1e0 [ 755.953591][T15434] io_sqe_buffer_register+0x1d4/0x19d0 [ 755.953651][T15434] ? rcu_is_watching+0x12/0xc0 [ 755.953678][T15434] ? trace_kmalloc+0xe3/0x110 [ 755.953707][T15434] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 755.953737][T15434] ? io_rsrc_data_alloc+0x2c/0xa0 [ 755.953777][T15434] ? copy_iovec_from_user+0x102/0x140 [ 755.953818][T15434] ? iovec_from_user+0xda/0x140 [ 755.953856][T15434] io_sqe_buffers_register.cold+0x351/0x4d2 [ 755.953905][T15434] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 755.953933][T15434] ? __fget_files+0x215/0x3d0 [ 755.953968][T15434] ? __fget_files+0x21f/0x3d0 [ 755.954004][T15434] __do_sys_io_uring_register+0x13e5/0x1bd0 [ 755.954038][T15434] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 755.954075][T15434] ? __x64_sys_futex+0x34f/0x4d0 [ 755.954100][T15434] ? __x64_sys_futex+0x358/0x4d0 [ 755.954134][T15434] ? xfd_validate_state+0x129/0x190 [ 755.954164][T15434] ? rcu_is_watching+0x12/0xc0 [ 755.954195][T15434] do_syscall_64+0x115/0x840 [ 755.954230][T15434] ? clear_bhb_loop+0x40/0x90 [ 755.954259][T15434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.954284][T15434] RIP: 0033:0x7f06a479ce59 [ 755.954306][T15434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.954331][T15434] RSP: 002b:00007f06a5691028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 755.954354][T15434] RAX: ffffffffffffffda RBX: 00007f06a4a16090 RCX: 00007f06a479ce59 [ 755.954371][T15434] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 755.954386][T15434] RBP: 00007f06a4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 755.954402][T15434] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 755.954417][T15434] R13: 00007f06a4a16128 R14: 00007f06a4a16090 R15: 00007ffc5be07778 [ 755.954449][T15434] [ 757.093548][T15469] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1787'. [ 758.172720][T15434] memory: usage 3072kB, limit 3072kB, failcnt 56714 [ 758.200588][T15434] memory+swap: usage 3280kB, limit 9007199254740988kB, failcnt 0 [ 758.239218][T15434] kmem: usage 3068kB, limit 9007199254740988kB, failcnt 0 [ 758.276125][T15434] Memory cgroup stats for /syz1: [ 758.276391][T15434] cache 0 [ 758.309269][T15434] rss 0 [ 758.325616][T15434] rss_huge 0 [ 758.342160][T15434] shmem 0 [ 758.362224][T15434] mapped_file 0 [ 758.376279][T15434] dirty 0 [ 758.382752][T15434] writeback 0 [ 758.397770][T15434] workingset_refault_anon 10216 [ 758.427446][T15434] workingset_refault_file 7095 [ 758.463519][T15434] swap 212992 [ 758.488220][T15434] swapcached 366804992 [ 758.509110][T15434] pgpgin 360297 [ 758.531088][T15434] pgpgout 364977 [ 758.558605][T15434] pgfault 460722 [ 758.574289][T15434] pgmajfault 4652 [ 758.586388][T15434] inactive_anon 0 [ 758.597441][T15434] active_anon 4096 [ 758.610098][T15434] inactive_file 0 [ 758.629214][T15434] active_file 0 [ 758.647919][T15434] unevictable 0 [ 758.664862][T15434] hierarchical_memory_limit 3145728 [ 758.689305][T15434] hierarchical_memsw_limit 9223372036854771712 [ 758.717536][T15434] total_cache 0 [ 758.734583][T15434] total_rss 0 [ 758.745233][T15434] total_rss_huge 0 [ 758.764451][T15434] total_shmem 0 [ 758.780474][T15434] total_mapped_file 0 [ 758.800536][T15434] total_dirty 0 [ 758.816652][T15434] total_writeback 0 [ 758.839765][T15434] total_workingset_refault_anon 10216 [ 758.863136][ T30] audit: type=1804 audit(4294967402.726:21): pid=15491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1790" name="file0" dev="tmpfs" ino=2565 res=1 errno=0 [ 758.900469][T15434] total_workingset_refault_file 7095 [ 758.937276][T15434] total_swap 212992 [ 758.964622][T15434] total_swapcached 366804992 [ 758.987496][T15434] total_pgpgin 360297 [ 759.016289][T15434] total_pgpgout 364977 [ 759.040164][T15434] total_pgfault 460722 [ 759.059733][T15434] total_pgmajfault 4652 [ 759.073257][T15434] total_inactive_anon 0 [ 759.084273][T15434] total_active_anon 4096 [ 759.096317][T15434] total_inactive_file 0 [ 759.107866][T15434] total_active_file 0 [ 759.116332][T15434] total_unevictable 0 [ 759.144626][T15434] anon_cost 0 [ 759.157207][T15434] file_cost 0 [ 759.167035][T15434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1780,pid=15429,uid=0 [ 759.256737][T15434] Memory cgroup out of memory: Killed process 15429 (syz.1.1780) total-vm:170212kB, anon-rss:1240kB, file-rss:22616kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 760.351358][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 760.683808][T15532] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1799'. [ 761.448947][T15546] FAULT_INJECTION: forcing a failure. [ 761.448947][T15546] name failslab, interval 1, probability 0, space 0, times 0 [ 761.519754][T15546] CPU: 0 UID: 8 PID: 15546 Comm: syz.1.1803 Tainted: G L syzkaller #0 PREEMPT(full) [ 761.519794][T15546] Tainted: [L]=SOFTLOCKUP [ 761.519804][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 761.519819][T15546] Call Trace: [ 761.519828][T15546] [ 761.519838][T15546] dump_stack_lvl+0x100/0x190 [ 761.519887][T15546] should_fail_ex.cold+0x5/0xa [ 761.519920][T15546] should_failslab+0xc2/0x120 [ 761.519951][T15546] __kmalloc_cache_noprof+0x7a/0x6f0 [ 761.519995][T15546] ? alloc_pipe_info+0x10e/0x590 [ 761.520028][T15546] ? find_held_lock+0x2b/0x80 [ 761.520065][T15546] alloc_pipe_info+0x10e/0x590 [ 761.520100][T15546] splice_direct_to_actor+0x78f/0xa30 [ 761.520135][T15546] ? __lock_acquire+0x4a5/0x2630 [ 761.520181][T15546] ? __pfx_direct_splice_actor+0x10/0x10 [ 761.520215][T15546] ? __pfx_aa_file_perm+0x10/0x10 [ 761.520257][T15546] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 761.520299][T15546] do_splice_direct+0x174/0x240 [ 761.520332][T15546] ? __pfx_do_splice_direct+0x10/0x10 [ 761.520369][T15546] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 761.520405][T15546] ? rw_verify_area+0xce/0x6d0 [ 761.520433][T15546] do_sendfile+0xadc/0xe20 [ 761.520466][T15546] ? __pfx_do_sendfile+0x10/0x10 [ 761.520497][T15546] ? __x64_sys_futex+0x34f/0x4d0 [ 761.520523][T15546] ? __x64_sys_futex+0x358/0x4d0 [ 761.520552][T15546] __x64_sys_sendfile64+0x1d8/0x220 [ 761.520587][T15546] ? __put_cred+0x111/0x180 [ 761.520610][T15546] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 761.520649][T15546] ? rcu_is_watching+0x12/0xc0 [ 761.520683][T15546] do_syscall_64+0x115/0x840 [ 761.520720][T15546] ? clear_bhb_loop+0x40/0x90 [ 761.520751][T15546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.520778][T15546] RIP: 0033:0x7f06a479ce59 [ 761.520798][T15546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.520824][T15546] RSP: 002b:00007f06a56b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 761.520849][T15546] RAX: ffffffffffffffda RBX: 00007f06a4a15fa0 RCX: 00007f06a479ce59 [ 761.520866][T15546] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 761.520882][T15546] RBP: 00007f06a4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 761.520897][T15546] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 761.520913][T15546] R13: 00007f06a4a16038 R14: 00007f06a4a15fa0 R15: 00007ffc5be07778 [ 761.520945][T15546] [ 763.606063][T15578] bridge0: port 3(team0) entered blocking state [ 763.638485][T15583] random: crng reseeded on system resumption [ 763.644836][T15578] bridge0: port 3(team0) entered disabled state [ 763.670385][T15578] team0: entered allmulticast mode [ 763.699844][T15578] team_slave_0: entered allmulticast mode [ 763.728104][T15578] team_slave_1: entered allmulticast mode [ 763.791110][T15578] team0: entered promiscuous mode [ 763.819159][T15578] team_slave_0: entered promiscuous mode [ 763.849329][T15578] team_slave_1: entered promiscuous mode [ 763.928484][T15578] bridge0: port 3(team0) entered blocking state [ 763.935060][T15578] bridge0: port 3(team0) entered forwarding state [ 764.102650][T15578] Process accounting paused [ 764.120226][T15592] random: crng reseeded on system resumption [ 764.761718][T15605] random: crng reseeded on system resumption [ 765.377768][T15605] hub 1-0:1.0: USB hub found [ 765.457710][T15605] hub 1-0:1.0: 1 port detected [ 766.392147][T15629] FAULT_INJECTION: forcing a failure. [ 766.392147][T15629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.451904][T15629] CPU: 0 UID: 0 PID: 15629 Comm: syz.1.1814 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.451943][T15629] Tainted: [L]=SOFTLOCKUP [ 766.451952][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 766.451967][T15629] Call Trace: [ 766.451975][T15629] [ 766.451987][T15629] dump_stack_lvl+0x100/0x190 [ 766.452033][T15629] should_fail_ex.cold+0x5/0xa [ 766.452064][T15629] _copy_from_user+0x2e/0xd0 [ 766.452099][T15629] get_timespec64+0x8b/0x1b0 [ 766.452142][T15629] ? __pfx_get_timespec64+0x10/0x10 [ 766.452177][T15629] ? lockdep_hardirqs_on+0x78/0x100 [ 766.452218][T15629] __x64_sys_futex+0x21a/0x4d0 [ 766.452247][T15629] ? __pfx___x64_sys_futex+0x10/0x10 [ 766.452278][T15629] ? rcu_is_watching+0x12/0xc0 [ 766.452316][T15629] do_syscall_64+0x115/0x840 [ 766.452349][T15629] ? clear_bhb_loop+0x40/0x90 [ 766.452378][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.452403][T15629] RIP: 0033:0x7f06a479ce59 [ 766.452423][T15629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.452447][T15629] RSP: 002b:00007ffc5be078d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 766.452470][T15629] RAX: ffffffffffffffda RBX: 00000000000bbc09 RCX: 00007f06a479ce59 [ 766.452486][T15629] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06a4a15fac [ 766.452500][T15629] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 766.452514][T15629] R10: 00007ffc5be079e0 R11: 0000000000000246 R12: 00007ffc5be07a00 [ 766.452529][T15629] R13: 00007f06a4a15fac R14: 00000000000bbc3b R15: 00007ffc5be079e0 [ 766.452559][T15629] [ 769.155497][T15662] [ 771.135042][ T30] audit: type=1800 audit(4294967415.070:22): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1825" name="version" dev="configfs" ino=63847 res=0 errno=0 [ 771.279221][T15682] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 774.106377][ T30] audit: type=1800 audit(4294968441.048:23): pid=15729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1835" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 775.639557][T15760] FAULT_INJECTION: forcing a failure. [ 775.639557][T15760] name failslab, interval 1, probability 0, space 0, times 0 [ 775.738107][T15760] CPU: 0 UID: 0 PID: 15760 Comm: syz.1.1840 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.738147][T15760] Tainted: [L]=SOFTLOCKUP [ 775.738156][T15760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 775.738171][T15760] Call Trace: [ 775.738179][T15760] [ 775.738189][T15760] dump_stack_lvl+0x100/0x190 [ 775.738241][T15760] should_fail_ex.cold+0x5/0xa [ 775.738272][T15760] should_failslab+0xc2/0x120 [ 775.738301][T15760] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 775.738343][T15760] ? __alloc_skb+0x140/0x710 [ 775.738436][T15760] ? __alloc_skb+0x5b7/0x710 [ 775.738462][T15760] __alloc_skb+0x140/0x710 [ 775.738483][T15760] ? __alloc_skb+0x5b7/0x710 [ 775.738504][T15760] ? __pfx___alloc_skb+0x10/0x10 [ 775.738528][T15760] ? __pfx___might_resched+0x10/0x10 [ 775.738565][T15760] ? __lock_acquire+0x4a5/0x2630 [ 775.738608][T15760] netlink_alloc_large_skb+0x69/0x150 [ 775.738645][T15760] netlink_sendmsg+0x680/0xda0 [ 775.738687][T15760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.738721][T15760] ? __import_iovec+0x1d2/0x640 [ 775.738760][T15760] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 775.738790][T15760] ____sys_sendmsg+0x9e1/0xb70 [ 775.738821][T15760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.738855][T15760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.738909][T15760] ___sys_sendmsg+0x190/0x1e0 [ 775.738944][T15760] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.739017][T15760] __sys_sendmsg+0x170/0x220 [ 775.739043][T15760] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.739079][T15760] ? rcu_is_watching+0x12/0xc0 [ 775.739111][T15760] do_syscall_64+0x115/0x840 [ 775.739146][T15760] ? clear_bhb_loop+0x40/0x90 [ 775.739175][T15760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.739199][T15760] RIP: 0033:0x7f06a479ce59 [ 775.739219][T15760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.739242][T15760] RSP: 002b:00007f06a5691028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.739264][T15760] RAX: ffffffffffffffda RBX: 00007f06a4a16090 RCX: 00007f06a479ce59 [ 775.739281][T15760] RDX: 0000000000000002 RSI: 00002000000079c0 RDI: 0000000000000005 [ 775.739295][T15760] RBP: 00007f06a5691090 R08: 0000000000000000 R09: 0000000000000000 [ 775.739310][T15760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.739325][T15760] R13: 00007f06a4a16128 R14: 00007f06a4a16090 R15: 00007ffc5be07778 [ 775.739355][T15760] [ 776.893511][ T30] audit: type=1800 audit(4294968443.851:24): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1845" name="dbroot" dev="configfs" ino=64307 res=0 errno=0 [ 779.093062][T15815] Process accounting resumed [ 779.629406][ T7347] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 779.629439][ T7347] Bluetooth: hci0: unexpected subevent 0x0e length: 725 > 15 [ 779.644870][ T7347] Bluetooth: hci0: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 784.339428][T15921] ú˙Ĺoč\ą 'ÇÍd×"h_\˙óŢ ‰ĘöŮČw¦:Óá6;=lgŻÁ!ÜšJč+Ĺ>O‘i‚uŃú,YŃ-nŃ’ha_ŢĺP+ř'"ËĘĽÚL¬))9­ô‰NGÍzőîu÷”YĽ;&íŽp'Ç©•U|eönÇňřźlB†Â í§*ŹŠyľap>%ř;}g]đ?ăCßŻź˝ŞdĎr¤š8ďôáűoS‘ăĎ5]‚ľťR|§h>4u¬}‡ iŚă®m€gđnsęŤç—٦ôáč [ 784.778569][ T7347] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 784.808299][ T7347] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 784.819349][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.819388][ T7347] Tainted: [L]=SOFTLOCKUP [ 784.819397][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 784.819416][ T7347] Workqueue: hci4 hci_rx_work [ 784.819454][ T7347] Call Trace: [ 784.819462][ T7347] [ 784.819472][ T7347] dump_stack_lvl+0x100/0x190 [ 784.819521][ T7347] sysfs_warn_dup.cold+0x1c/0x28 [ 784.819572][ T7347] sysfs_create_dir_ns+0x24b/0x2b0 [ 784.819602][ T7347] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 784.819628][ T7347] ? find_held_lock+0x2b/0x80 [ 784.819667][ T7347] ? kobject_add_internal+0x25f/0x930 [ 784.819695][ T7347] ? kobject_add_internal+0x25f/0x930 [ 784.819730][ T7347] ? do_raw_spin_unlock+0x145/0x1e0 [ 784.819761][ T7347] kobject_add_internal+0x2c8/0x930 [ 784.819792][ T7347] kobject_add+0x16a/0x1e0 [ 784.819817][ T7347] ? __pfx_kobject_add+0x10/0x10 [ 784.819841][ T7347] ? class_to_subsys+0x10f/0x150 [ 784.819878][ T7347] ? kobject_put+0xb9/0x640 [ 784.819917][ T7347] ? _raw_spin_unlock+0x28/0x50 [ 784.819957][ T7347] device_add+0x294/0x1950 [ 784.819984][ T7347] ? __pfx_dev_set_name+0x10/0x10 [ 784.820025][ T7347] ? __pfx_device_add+0x10/0x10 [ 784.820059][ T7347] ? mgmt_send_event_skb+0x2fb/0x460 [ 784.820102][ T7347] hci_conn_add_sysfs+0x1a3/0x260 [ 784.820143][ T7347] le_conn_complete_evt+0x11eb/0x1f60 [ 784.820184][ T7347] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 784.820217][ T7347] ? __pfx_bt_warn+0x10/0x10 [ 784.820262][ T7347] hci_le_conn_complete_evt+0x23c/0x3a0 [ 784.820298][ T7347] ? skb_pull_data+0x15f/0x1e0 [ 784.820336][ T7347] hci_le_meta_evt+0x34a/0x5f0 [ 784.820378][ T7347] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 784.820417][ T7347] hci_event_packet+0x51c/0xcd0 [ 784.820450][ T7347] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 784.820488][ T7347] ? __pfx_hci_event_packet+0x10/0x10 [ 784.820524][ T7347] ? kcov_remote_start+0x374/0x660 [ 784.820561][ T7347] ? lockdep_hardirqs_on+0x78/0x100 [ 784.820604][ T7347] hci_rx_work+0x451/0xfc0 [ 784.820648][ T7347] process_one_work+0xa0e/0x1980 [ 784.820687][ T7347] ? __pfx_process_one_work+0x10/0x10 [ 784.820720][ T7347] ? __pfx_hci_rx_work+0x10/0x10 [ 784.820755][ T7347] worker_thread+0x5ef/0xe50 [ 784.820787][ T7347] ? __pfx_worker_thread+0x10/0x10 [ 784.820812][ T7347] ? kthread+0x13a/0x450 [ 784.820849][ T7347] ? __pfx_worker_thread+0x10/0x10 [ 784.820871][ T7347] kthread+0x370/0x450 [ 784.820909][ T7347] ? __pfx_kthread+0x10/0x10 [ 784.820950][ T7347] ret_from_fork+0x72b/0xd50 [ 784.820978][ T7347] ? __pfx_ret_from_fork+0x10/0x10 [ 784.821006][ T7347] ? __switch_to+0x800/0x1100 [ 784.821040][ T7347] ? __switch_to_asm+0x39/0x70 [ 784.821073][ T7347] ? __pfx_kthread+0x10/0x10 [ 784.821113][ T7347] ret_from_fork_asm+0x1a/0x30 [ 784.821161][ T7347] [ 785.201928][T15945] FAULT_INJECTION: forcing a failure. [ 785.201928][T15945] name failslab, interval 1, probability 0, space 0, times 0 [ 785.214751][T15945] CPU: 0 UID: 0 PID: 15945 Comm: syz.4.1869 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.214790][T15945] Tainted: [L]=SOFTLOCKUP [ 785.214800][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.214817][T15945] Call Trace: [ 785.214826][T15945] [ 785.214836][T15945] dump_stack_lvl+0x100/0x190 [ 785.214885][T15945] should_fail_ex.cold+0x5/0xa [ 785.214919][T15945] should_failslab+0xc2/0x120 [ 785.214951][T15945] __kvmalloc_node_noprof+0xfa/0xa00 [ 785.214977][T15945] ? bucket_table_alloc.isra.0+0x88/0x460 [ 785.215020][T15945] bucket_table_alloc.isra.0+0x88/0x460 [ 785.215060][T15945] rhashtable_init_noprof+0x43b/0x890 [ 785.215095][T15945] ? __pfx_ipmr_new_table_set+0x10/0x10 [ 785.215181][T15945] rhltable_init_noprof+0x20/0x60 [ 785.215214][T15945] mr_table_alloc+0x121/0x3e0 [ 785.215248][T15945] ? __pfx_ipmr_expire_process+0x10/0x10 [ 785.215283][T15945] ipmr_net_init+0x41c/0x5e0 [ 785.215318][T15945] ? __pfx_ipmr_net_init+0x10/0x10 [ 785.215352][T15945] ? mptcp_net_init+0x4d0/0x620 [ 785.215416][T15945] ? __pfx_ipmr_net_init+0x10/0x10 [ 785.215454][T15945] ops_init+0x1e2/0x5f0 [ 785.215486][T15945] setup_net+0x118/0x3a0 [ 785.215514][T15945] ? __pfx_setup_net+0x10/0x10 [ 785.215541][T15945] ? mutex_init_lockdep+0xf1/0x120 [ 785.215572][T15945] copy_net_ns+0x46f/0x7c0 [ 785.215605][T15945] create_new_namespaces+0x3ea/0xac0 [ 785.215644][T15945] unshare_nsproxy_namespaces+0xf2/0x220 [ 785.215679][T15945] ksys_unshare+0x438/0xab0 [ 785.215718][T15945] ? __pfx_ksys_unshare+0x10/0x10 [ 785.215753][T15945] ? xfd_validate_state+0x129/0x190 [ 785.215777][T15945] ? ksys_write+0x1ac/0x250 [ 785.215816][T15945] __x64_sys_unshare+0x31/0x40 [ 785.215853][T15945] do_syscall_64+0x115/0x840 [ 785.215894][T15945] ? clear_bhb_loop+0x40/0x90 [ 785.215926][T15945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.215952][T15945] RIP: 0033:0x7f3ff4f9ce59 [ 785.215974][T15945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.215999][T15945] RSP: 002b:00007f3ff5e21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 785.216023][T15945] RAX: ffffffffffffffda RBX: 00007f3ff5216090 RCX: 00007f3ff4f9ce59 [ 785.216040][T15945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 785.216063][T15945] RBP: 00007f3ff5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 785.216079][T15945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.216095][T15945] R13: 00007f3ff5216128 R14: 00007f3ff5216090 R15: 00007ffe3dfcb978 [ 785.216127][T15945] [ 785.485629][ T7347] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 785.500392][ T7347] Bluetooth: hci4: failed to register connection device [ 786.733341][ T30] audit: type=1326 audit(4294968453.727:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15967 comm="syz.3.1874" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbd239ce59 code=0x0 [ 787.710286][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.257564][T15980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'. [ 789.777605][ T7347] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.854992][T15976] serio: Serial port pty173 [ 793.583118][T16047] FAULT_INJECTION: forcing a failure. [ 793.583118][T16047] name fail_futex, interval 1, probability 0, space 0, times 0 [ 793.889932][T16047] CPU: 0 UID: 0 PID: 16047 Comm: syz.1.1889 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.889977][T16047] Tainted: [L]=SOFTLOCKUP [ 793.889987][T16047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.890005][T16047] Call Trace: [ 793.890014][T16047] [ 793.890030][T16047] dump_stack_lvl+0x100/0x190 [ 793.890078][T16047] should_fail_ex.cold+0x5/0xa [ 793.890109][T16047] ? rcu_is_watching+0x12/0xc0 [ 793.890140][T16047] get_futex_key+0x1d2/0x1510 [ 793.890183][T16047] ? __pfx_get_futex_key+0x10/0x10 [ 793.890224][T16047] ? trace_pid_list_is_set+0x22c/0x390 [ 793.890267][T16047] futex_wait_setup+0x83/0x510 [ 793.890309][T16047] __futex_wait+0x19f/0x300 [ 793.890346][T16047] ? __pfx___futex_wait+0x10/0x10 [ 793.890381][T16047] ? __pfx_futex_wake_mark+0x10/0x10 [ 793.890416][T16047] ? find_held_lock+0x2b/0x80 [ 793.890446][T16047] ? futex_wake+0x456/0x530 [ 793.890481][T16047] futex_wait+0xe6/0x370 [ 793.890511][T16047] ? __pfx_futex_wait+0x10/0x10 [ 793.890549][T16047] ? up_write+0x28c/0x4f0 [ 793.890577][T16047] do_futex+0x1ef/0x350 [ 793.890602][T16047] ? __pfx_do_futex+0x10/0x10 [ 793.890624][T16047] ? __pfx_do_sys_openat2+0x10/0x10 [ 793.890670][T16047] __x64_sys_futex+0x34f/0x4d0 [ 793.890699][T16047] ? __pfx___x64_sys_futex+0x10/0x10 [ 793.890729][T16047] ? rcu_is_watching+0x12/0xc0 [ 793.890759][T16047] do_syscall_64+0x115/0x840 [ 793.890793][T16047] ? clear_bhb_loop+0x40/0x90 [ 793.890822][T16047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.890846][T16047] RIP: 0033:0x7f06a479ce59 [ 793.890867][T16047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.890890][T16047] RSP: 002b:00007f06a56910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 793.890913][T16047] RAX: ffffffffffffffda RBX: 00007f06a4a16098 RCX: 00007f06a479ce59 [ 793.890929][T16047] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f06a4a16098 [ 793.890944][T16047] RBP: 00007f06a4a16090 R08: 0000000000000000 R09: 0000000000000000 [ 793.890959][T16047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.890973][T16047] R13: 00007f06a4a16128 R14: 00007ffc5be07690 R15: 00007ffc5be07778 [ 793.891003][T16047] [ 794.592271][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 795.352874][T16072] Process accounting resumed [ 798.525052][T16128] FAULT_INJECTION: forcing a failure. [ 798.525052][T16128] name failslab, interval 1, probability 0, space 0, times 0 [ 798.584795][T16128] CPU: 0 UID: 8 PID: 16128 Comm: syz.4.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.584838][T16128] Tainted: [L]=SOFTLOCKUP [ 798.584847][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 798.584864][T16128] Call Trace: [ 798.584873][T16128] [ 798.584883][T16128] dump_stack_lvl+0x100/0x190 [ 798.584932][T16128] should_fail_ex.cold+0x5/0xa [ 798.584964][T16128] should_failslab+0xc2/0x120 [ 798.584996][T16128] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 798.585037][T16128] ? cred_alloc_blank+0x1c/0xa0 [ 798.585063][T16128] ? __x64_sys_futex+0x34f/0x4d0 [ 798.585088][T16128] ? __x64_sys_futex+0x358/0x4d0 [ 798.585119][T16128] cred_alloc_blank+0x1c/0xa0 [ 798.585145][T16128] keyctl_session_to_parent+0x55/0xae0 [ 798.585180][T16128] __do_sys_keyctl+0x2b1/0x5a0 [ 798.585210][T16128] do_syscall_64+0x115/0x840 [ 798.585246][T16128] ? clear_bhb_loop+0x40/0x90 [ 798.585277][T16128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.585303][T16128] RIP: 0033:0x7f3ff4f9ce59 [ 798.585324][T16128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.585349][T16128] RSP: 002b:00007f3ff5e42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 798.585373][T16128] RAX: ffffffffffffffda RBX: 00007f3ff5215fa0 RCX: 00007f3ff4f9ce59 [ 798.585390][T16128] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 798.585407][T16128] RBP: 00007f3ff5032d6f R08: 0000000000000005 R09: 0000000000000000 [ 798.585423][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.585439][T16128] R13: 00007f3ff5216038 R14: 00007f3ff5215fa0 R15: 00007ffe3dfcb978 [ 798.585470][T16128] [ 799.227430][T16131] random: crng reseeded on system resumption [ 799.596811][T16132] input: jJǸ-¶š9ă%vř“ű¨lťĐQ  J86Ö‘ as /devices/virtual/input/input17 [ 801.115439][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 801.187763][T16151] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1903'. [ 801.695733][T16159] FAULT_INJECTION: forcing a failure. [ 801.695733][T16159] name failslab, interval 1, probability 0, space 0, times 0 [ 801.765853][T16159] CPU: 0 UID: 8 PID: 16159 Comm: syz.4.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.765894][T16159] Tainted: [L]=SOFTLOCKUP [ 801.765904][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.765920][T16159] Call Trace: [ 801.765928][T16159] [ 801.765938][T16159] dump_stack_lvl+0x100/0x190 [ 801.765988][T16159] should_fail_ex.cold+0x5/0xa [ 801.766021][T16159] should_failslab+0xc2/0x120 [ 801.766052][T16159] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 801.766093][T16159] ? cred_alloc_blank+0x1c/0xa0 [ 801.766119][T16159] ? __x64_sys_futex+0x34f/0x4d0 [ 801.766145][T16159] ? __x64_sys_futex+0x358/0x4d0 [ 801.766175][T16159] cred_alloc_blank+0x1c/0xa0 [ 801.766201][T16159] keyctl_session_to_parent+0x55/0xae0 [ 801.766237][T16159] __do_sys_keyctl+0x2b1/0x5a0 [ 801.766266][T16159] do_syscall_64+0x115/0x840 [ 801.766307][T16159] ? clear_bhb_loop+0x40/0x90 [ 801.766339][T16159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.766366][T16159] RIP: 0033:0x7f3ff4f9ce59 [ 801.766387][T16159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.766412][T16159] RSP: 002b:00007f3ff5e42028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 801.766437][T16159] RAX: ffffffffffffffda RBX: 00007f3ff5215fa0 RCX: 00007f3ff4f9ce59 [ 801.766454][T16159] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 801.766471][T16159] RBP: 00007f3ff5032d6f R08: 0000000000000001 R09: 0000000000000000 [ 801.766486][T16159] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 801.766502][T16159] R13: 00007f3ff5216038 R14: 00007f3ff5215fa0 R15: 00007ffe3dfcb978 [ 801.766534][T16159] [ 802.270139][T16158] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 805.943962][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.950406][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.364588][T16216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1918'. [ 809.437356][T16229] FAULT_INJECTION: forcing a failure. [ 809.437356][T16229] name failslab, interval 1, probability 0, space 0, times 0 [ 809.560024][T16229] CPU: 0 UID: 0 PID: 16229 Comm: syz.0.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.560067][T16229] Tainted: [L]=SOFTLOCKUP [ 809.560077][T16229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 809.560093][T16229] Call Trace: [ 809.560101][T16229] [ 809.560111][T16229] dump_stack_lvl+0x100/0x190 [ 809.560160][T16229] should_fail_ex.cold+0x5/0xa [ 809.560193][T16229] should_failslab+0xc2/0x120 [ 809.560224][T16229] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 809.560266][T16229] ? __kernfs_new_node+0xd2/0x9f0 [ 809.560294][T16229] ? kstrdup+0xb3/0xe0 [ 809.560325][T16229] __kernfs_new_node+0xd2/0x9f0 [ 809.560357][T16229] ? __pfx___kernfs_new_node+0x10/0x10 [ 809.560393][T16229] ? find_held_lock+0x2b/0x80 [ 809.560424][T16229] ? kernfs_root+0xee/0x2a0 [ 809.560451][T16229] ? kernfs_root+0xee/0x2a0 [ 809.560485][T16229] kernfs_new_node+0x11b/0x1a0 [ 809.560523][T16229] kernfs_create_link+0xcc/0x240 [ 809.560565][T16229] sysfs_do_create_link_sd+0x90/0x140 [ 809.560596][T16229] sysfs_create_link+0x61/0xc0 [ 809.560624][T16229] device_add+0x675/0x1950 [ 809.560655][T16229] ? __pfx_device_add+0x10/0x10 [ 809.560682][T16229] ? lockdep_init_map_type+0x5c/0x250 [ 809.560725][T16229] ? __init_waitqueue_head+0xca/0x150 [ 809.560762][T16229] rfkill_register+0x1ad/0xb30 [ 809.560885][T16229] nfc_register_device+0x11f/0x3e0 [ 809.560944][T16229] nci_register_device+0x7f1/0xb80 [ 809.560996][T16229] ? __pfx_nci_register_device+0x10/0x10 [ 809.561029][T16229] ? lockdep_init_map_type+0x5c/0x250 [ 809.561077][T16229] virtual_ncidev_open+0x141/0x220 [ 809.561136][T16229] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 809.561163][T16229] misc_open+0x26d/0x450 [ 809.561212][T16229] ? __pfx_misc_open+0x10/0x10 [ 809.561238][T16229] chrdev_open+0x234/0x6a0 [ 809.561270][T16229] ? __pfx_apparmor_file_open+0x10/0x10 [ 809.561299][T16229] ? __pfx_chrdev_open+0x10/0x10 [ 809.561333][T16229] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 809.561385][T16229] do_dentry_open+0x6ab/0x14d0 [ 809.561415][T16229] ? __pfx_chrdev_open+0x10/0x10 [ 809.561454][T16229] vfs_open+0x82/0x3f0 [ 809.561496][T16229] path_openat+0x208c/0x31a0 [ 809.561539][T16229] ? __pfx_path_openat+0x10/0x10 [ 809.561583][T16229] do_file_open+0x20e/0x430 [ 809.561619][T16229] ? __pfx_do_file_open+0x10/0x10 [ 809.561673][T16229] ? alloc_fd+0x476/0x790 [ 809.561707][T16229] ? do_getname+0x191/0x390 [ 809.561749][T16229] do_sys_openat2+0x10d/0x1e0 [ 809.561789][T16229] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.561832][T16229] ? __fget_files+0x21f/0x3d0 [ 809.561874][T16229] __x64_sys_openat+0x12d/0x210 [ 809.561916][T16229] ? __pfx___x64_sys_openat+0x10/0x10 [ 809.561963][T16229] ? rcu_is_watching+0x12/0xc0 [ 809.561997][T16229] do_syscall_64+0x115/0x840 [ 809.562034][T16229] ? clear_bhb_loop+0x40/0x90 [ 809.562065][T16229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.562092][T16229] RIP: 0033:0x7f55ebb9ce59 [ 809.562114][T16229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.562139][T16229] RSP: 002b:00007f55ecb3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 809.562164][T16229] RAX: ffffffffffffffda RBX: 00007f55ebe15fa0 RCX: 00007f55ebb9ce59 [ 809.562181][T16229] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 809.562197][T16229] RBP: 00007f55ebc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 809.562214][T16229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.562230][T16229] R13: 00007f55ebe16038 R14: 00007f55ebe15fa0 R15: 00007ffcf6706ef8 [ 809.562262][T16229] [ 812.152544][T16230] Process accounting paused [ 813.026129][T16269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1924'. [ 813.102029][T16270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1924'. [ 813.243055][T16269] bridge0: port 3(vlan1) entered disabled state [ 813.644053][T16269] vlan1 (unregistering): left allmulticast mode [ 813.686899][T16269] vlan1 (unregistering): left promiscuous mode [ 813.722283][T16269] bridge0: port 3(vlan1) entered disabled state [ 815.449890][T16306] FAULT_INJECTION: forcing a failure. [ 815.449890][T16306] name failslab, interval 1, probability 0, space 0, times 0 [ 815.640816][T16306] CPU: 0 UID: 0 PID: 16306 Comm: syz.4.1931 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.640858][T16306] Tainted: [L]=SOFTLOCKUP [ 815.640868][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.640884][T16306] Call Trace: [ 815.640893][T16306] [ 815.640903][T16306] dump_stack_lvl+0x100/0x190 [ 815.640952][T16306] should_fail_ex.cold+0x5/0xa [ 815.640985][T16306] should_failslab+0xc2/0x120 [ 815.641016][T16306] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 815.641058][T16306] ? do_getname+0x35/0x390 [ 815.641102][T16306] do_getname+0x35/0x390 [ 815.641142][T16306] do_sys_openat2+0xc5/0x1e0 [ 815.641183][T16306] ? __pfx_do_sys_openat2+0x10/0x10 [ 815.641243][T16306] __x64_sys_openat+0x12d/0x210 [ 815.641288][T16306] ? __pfx___x64_sys_openat+0x10/0x10 [ 815.641334][T16306] ? rcu_is_watching+0x12/0xc0 [ 815.641368][T16306] do_syscall_64+0x115/0x840 [ 815.641404][T16306] ? clear_bhb_loop+0x40/0x90 [ 815.641436][T16306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.641462][T16306] RIP: 0033:0x7f3ff4f9ce59 [ 815.641482][T16306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.641508][T16306] RSP: 002b:00007f3ff5e42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 815.641532][T16306] RAX: ffffffffffffffda RBX: 00007f3ff5215fa0 RCX: 00007f3ff4f9ce59 [ 815.641549][T16306] RDX: 0000000000080802 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 815.641566][T16306] RBP: 00007f3ff5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 815.641582][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.641598][T16306] R13: 00007f3ff5216038 R14: 00007f3ff5215fa0 R15: 00007ffe3dfcb978 [ 815.641630][T16306] [ 816.162349][T16311] capability: warning: `syz.3.1932' uses 32-bit capabilities (legacy support in use) [ 816.829533][T16330] bridge0: port 4(veth1_macvtap) entered blocking state [ 816.837901][T16323] input: f¬ as /devices/virtual/input/input18 [ 816.920840][T16330] bridge0: port 4(veth1_macvtap) entered disabled state [ 817.029096][T16330] veth1_macvtap: entered allmulticast mode [ 817.111423][T16330] veth1_macvtap: left allmulticast mode [ 817.551168][T16336] blktrace: Concurrent blktraces are not allowed on nbd5 [ 819.031292][T16355] openvswitch: netlink: Key type 99 is out of range max 32 [ 821.739305][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1945'. [ 821.814854][T16391] hsr_slave_0: left promiscuous mode [ 821.933971][T16391] hsr_slave_1: left promiscuous mode [ 822.088539][T16398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 824.359197][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'. [ 825.261924][T16450] Process accounting paused [ 828.163470][T16499] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[13227] was attempted by ""[16499] [ 830.806409][ T30] audit: type=1801 audit(4294968498.004:26): pid=16526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_metadata cause=unknown comm="syz.0.1968" name="mem" dev="proc" ino=67704 res=0 errno=0 [ 830.833318][T16526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1968'. [ 832.500514][T16559] input: jJǸ-¶š9ă%vř“ű¨lťĐQ  J86Ö‘ as /devices/virtual/input/input19 [ 835.631901][T16602] netlink: 286 bytes leftover after parsing attributes in process `syz.3.1982'. [ 837.745006][T16624] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1983'. [ 838.406140][T16642] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 838.481207][T16642] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 838.568331][T16642] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 838.642064][T16642] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 838.872305][T16642] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 839.031787][T16642] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 839.712141][T16641] Process accounting resumed [ 840.426261][ T7347] Bluetooth: hci0: command 0x0406 tx timeout [ 840.499660][ T7347] Bluetooth: hci1: command 0x0406 tx timeout [ 840.578106][ T7347] Bluetooth: hci4: command 0x0c1a tx timeout [ 841.056042][ T7347] Bluetooth: hci2: command 0x2016 tx timeout [ 842.238357][ T7347] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 842.648904][ T7347] Bluetooth: hci4: command 0x0c1a tx timeout [ 844.572102][T16743] bridge0: port 4(dummy0) entered blocking state [ 844.607956][T16743] bridge0: port 4(dummy0) entered disabled state [ 844.638214][T16743] dummy0: entered allmulticast mode [ 844.688501][T16743] dummy0: entered promiscuous mode [ 844.718876][ T7347] Bluetooth: hci4: command 0x0c1a tx timeout [ 844.775508][T16743] bridge0: port 4(dummy0) entered blocking state [ 844.782086][T16743] bridge0: port 4(dummy0) entered forwarding state [ 846.432422][T16778] netlink: 696 bytes leftover after parsing attributes in process `syz.3.2008'. [ 846.736808][T16778] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2008'. [ 847.408653][T16789] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2010'. [ 848.175238][T16807] netlink: 'syz.3.2014': attribute type 3 has an invalid length. [ 851.732350][T16846] ubi0: attaching mtd0 [ 851.778125][T16846] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 851.812224][T16846] eraseblock attaching information dump: [ 851.861080][T16846] ec 1 [ 851.882101][T16846] pnum 0 [ 851.908869][T16846] lnum 0 [ 851.928997][T16846] scrub 0 [ 851.950389][T16846] sqnum 1 [ 851.973841][T16846] Volume identifier header dump: [ 852.006965][T16846] magic 55424921 [ 852.049590][T16846] version 1 [ 852.071726][T16846] vol_type 1 [ 852.087064][T16846] copy_flag 0 [ 852.103504][T16846] compat 5 [ 852.122197][T16846] vol_id 2147479551 [ 852.152596][T16846] lnum 0 [ 852.165209][T16846] data_size 0 [ 852.198460][T16846] used_ebs 0 [ 852.229360][T16846] data_pad 0 [ 852.245102][T16846] sqnum 1 [ 852.257264][T16846] hdr_crc 65b3bd2d [ 852.295556][T16846] Volume identifier header hexdump: [ 852.415049][T16853] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2025'. [ 852.450576][T16846] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 852.713507][T16859] blktrace: Concurrent blktraces are not allowed on loop2 [ 852.740158][T16860] [U] ^R [ 861.985285][T17004] netlink: 286 bytes leftover after parsing attributes in process `syz.0.2056'. [ 865.126075][T17058] ovsuČ•˘úE: entered promiscuous mode [ 865.555288][T17070] FAULT_INJECTION: forcing a failure. [ 865.555288][T17070] name failslab, interval 1, probability 0, space 0, times 0 [ 865.658424][T17070] CPU: 0 UID: 0 PID: 17070 Comm: syz.0.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.658465][T17070] Tainted: [L]=SOFTLOCKUP [ 865.658475][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 865.658492][T17070] Call Trace: [ 865.658501][T17070] [ 865.658510][T17070] dump_stack_lvl+0x100/0x190 [ 865.658559][T17070] should_fail_ex.cold+0x5/0xa [ 865.658591][T17070] ? tomoyo_realpath_from_path+0xb6/0x690 [ 865.658629][T17070] should_failslab+0xc2/0x120 [ 865.658661][T17070] __kmalloc_noprof+0xe0/0x850 [ 865.658701][T17070] ? kfree+0x1dd/0x6c0 [ 865.658741][T17070] tomoyo_realpath_from_path+0xb6/0x690 [ 865.658797][T17070] tomoyo_check_open_permission+0x2af/0x3c0 [ 865.658845][T17070] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 865.658889][T17070] ? hook_file_open+0x24e/0x7a0 [ 865.658943][T17070] ? path_get+0x61/0x80 [ 865.658982][T17070] tomoyo_file_open+0x6b/0x90 [ 865.659008][T17070] security_file_open+0xb5/0x1e0 [ 865.659044][T17070] do_dentry_open+0x588/0x14d0 [ 865.659084][T17070] vfs_open+0x82/0x3f0 [ 865.659126][T17070] path_openat+0x208c/0x31a0 [ 865.659168][T17070] ? __pfx_path_openat+0x10/0x10 [ 865.659212][T17070] do_file_open+0x20e/0x430 [ 865.659247][T17070] ? __pfx_do_file_open+0x10/0x10 [ 865.659301][T17070] ? alloc_fd+0x476/0x790 [ 865.659336][T17070] ? do_getname+0x191/0x390 [ 865.659377][T17070] do_sys_openat2+0x10d/0x1e0 [ 865.659418][T17070] ? __pfx_do_sys_openat2+0x10/0x10 [ 865.659469][T17070] __x64_sys_openat+0x12d/0x210 [ 865.659510][T17070] ? __pfx___x64_sys_openat+0x10/0x10 [ 865.659550][T17070] ? ksys_write+0x1ac/0x250 [ 865.659584][T17070] ? rcu_is_watching+0x12/0xc0 [ 865.659617][T17070] do_syscall_64+0x115/0x840 [ 865.659654][T17070] ? clear_bhb_loop+0x40/0x90 [ 865.659685][T17070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.659712][T17070] RIP: 0033:0x7f55ebb9ce59 [ 865.659733][T17070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.659759][T17070] RSP: 002b:00007f55ecb3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 865.659784][T17070] RAX: ffffffffffffffda RBX: 00007f55ebe15fa0 RCX: 00007f55ebb9ce59 [ 865.659800][T17070] RDX: 0000000000000040 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 865.659823][T17070] RBP: 00007f55ebc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 865.659839][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.659854][T17070] R13: 00007f55ebe16038 R14: 00007f55ebe15fa0 R15: 00007ffcf6706ef8 [ 865.659887][T17070] [ 866.194762][T17070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 867.162529][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.171093][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.386810][T17094] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2072'. [ 867.459095][T17087] zswap: compressor not available [ 868.612495][T17111] input: f¬ as /devices/virtual/input/input22 [ 869.893757][T17113] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2075: iget: checksum invalid [ 870.057724][T17113] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 870.171440][T17113] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2075: iget: checksum invalid [ 870.345548][T17113] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 870.463701][T17110] Process accounting paused [ 870.506629][T17113] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2075: iget: checksum invalid [ 870.678895][T17113] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 870.846868][T17113] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2075: iget: checksum invalid [ 871.082695][T17113] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 871.277018][T17113] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 871.434350][T17146] netlink: 'syz.4.2082': attribute type 11 has an invalid length. [ 871.481574][T17113] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 874.378381][T17205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2091'. [ 874.647068][T17208] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 874.647068][T17208] program syz.1.2091 not setting count and/or reply_len properly [ 874.852460][ T7347] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 874.852507][ T7347] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 874.869219][ T7347] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 875.905025][T17224] netlink: 286 bytes leftover after parsing attributes in process `syz.3.2094'. [ 878.138922][T17257] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 878.138922][T17257] The task syz.4.2102 (17257) triggered the difference, watch for misbehavior. [ 878.764582][T17240] queue_state_write: unsupported operation '' [ 878.847139][T17240] queue_state_write: use 'run', 'start' or 'kick' [ 887.894653][T16094] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.541769][T17427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.759676][T17433] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2131'. [ 891.418207][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 891.538852][ T30] audit: type=1804 audit(4294968559.040:27): pid=17446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2132" name="/newroot/502/file0" dev="tmpfs" ino=2673 res=1 errno=0 [ 895.505480][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2143'. [ 898.975070][T17559] x_tables: duplicate underflow at hook 4 [ 900.729537][T17595] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2162'. [ 903.465131][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 903.484049][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 903.495068][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 903.507575][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 903.516977][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 904.865032][T16093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.221644][T16093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.423064][T16093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.552758][ T5639] Bluetooth: hci3: command tx timeout [ 905.864593][T16093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.382674][T16093] dummy0: left allmulticast mode [ 907.441026][T16093] dummy0: left promiscuous mode [ 907.475863][T16093] bridge0: port 3(dummy0) entered disabled state [ 907.547131][T16093] bridge_slave_1: left allmulticast mode [ 907.571803][T16093] bridge_slave_1: left promiscuous mode [ 907.596829][T16093] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.623142][ T5639] Bluetooth: hci3: command tx timeout [ 907.649855][T16093] bridge_slave_0: left allmulticast mode [ 907.682019][T16093] bridge_slave_0: left promiscuous mode [ 907.709810][T16093] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.466608][T16093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.505972][T16093] bond0 (unregistering): Released all slaves [ 908.806434][T16093] ovsuČ•˘úE: left promiscuous mode [ 909.481757][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 909.592491][T16093] tipc: Left network mode [ 909.694145][ T5639] Bluetooth: hci3: command tx timeout [ 910.898463][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.906875][T17723] ACPI: Can not change Invalid GPE/Fixed Event status [ 910.945609][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.988100][T17626] bridge_slave_0: entered allmulticast mode [ 911.029438][T17626] bridge_slave_0: entered promiscuous mode [ 911.094754][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.145050][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.183773][T17626] bridge_slave_1: entered allmulticast mode [ 911.219673][T17626] bridge_slave_1: entered promiscuous mode [ 911.450277][T16093] hsr_slave_0: left promiscuous mode [ 911.490820][T16093] hsr_slave_1: left promiscuous mode [ 911.528065][T16093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.574515][T16093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.627812][T16093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.684732][T16093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.764221][ T5639] Bluetooth: hci3: command tx timeout [ 911.841422][T16093] veth1_macvtap: left promiscuous mode [ 911.893791][T16093] veth0_macvtap: left promiscuous mode [ 912.528526][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'. [ 912.645912][T16093] team0 (unregistering): Port device team_slave_1 removed [ 912.701490][T16093] team0 (unregistering): Port device team_slave_0 removed [ 912.982778][T17743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2182'. [ 913.039432][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 913.061155][T17730] HfR: entered promiscuous mode [ 913.074844][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.141969][T17743] HfR: left promiscuous mode [ 913.220534][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.679728][T17626] team0: Port device team_slave_0 added [ 913.752592][T17626] team0: Port device team_slave_1 added [ 914.005664][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.039471][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.180330][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.286572][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.324185][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.496611][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.220029][T17626] hsr_slave_0: entered promiscuous mode [ 915.253810][T17626] hsr_slave_1: entered promiscuous mode [ 915.737547][ T5639] block nbd0: Receive control failed (result -104) [ 916.250417][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 916.560717][T17798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2191'. [ 918.353246][T17829] FAULT_INJECTION: forcing a failure. [ 918.353246][T17829] name failslab, interval 1, probability 0, space 0, times 0 [ 918.451827][T17829] CPU: 0 UID: 0 PID: 17829 Comm: syz.0.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.451886][T17829] Tainted: [L]=SOFTLOCKUP [ 918.451895][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 918.451913][T17829] Call Trace: [ 918.451921][T17829] [ 918.451931][T17829] dump_stack_lvl+0x100/0x190 [ 918.451983][T17829] should_fail_ex.cold+0x5/0xa [ 918.452017][T17829] should_failslab+0xc2/0x120 [ 918.452050][T17829] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 918.452091][T17829] ? __proc_create+0x2cb/0x8c0 [ 918.452131][T17829] __proc_create+0x2cb/0x8c0 [ 918.452164][T17829] ? __pfx___proc_create+0x10/0x10 [ 918.452201][T17829] ? _raw_write_unlock+0x28/0x50 [ 918.452239][T17829] ? proc_register+0x559/0x8a0 [ 918.452276][T17829] proc_create_reg+0x75/0x170 [ 918.452314][T17829] proc_create_seq_private+0x8e/0x180 [ 918.452351][T17829] ? __pfx_proc_create_seq_private+0x10/0x10 [ 918.452397][T17829] xt_proto_init+0x508/0xb80 [ 918.452441][T17829] ? __pfx_xt_proto_init+0x10/0x10 [ 918.452483][T17829] ? net_generic+0xf4/0x2a0 [ 918.452510][T17829] ? __pfx_ip6_tables_net_init+0x10/0x10 [ 918.452545][T17829] ops_init+0x1e2/0x5f0 [ 918.452577][T17829] setup_net+0x118/0x3a0 [ 918.452605][T17829] ? __pfx_setup_net+0x10/0x10 [ 918.452633][T17829] ? mutex_init_lockdep+0xf1/0x120 [ 918.452664][T17829] copy_net_ns+0x46f/0x7c0 [ 918.452697][T17829] create_new_namespaces+0x3ea/0xac0 [ 918.452736][T17829] unshare_nsproxy_namespaces+0xf2/0x220 [ 918.452772][T17829] ksys_unshare+0x438/0xab0 [ 918.452810][T17829] ? __pfx_ksys_unshare+0x10/0x10 [ 918.452846][T17829] ? xfd_validate_state+0x129/0x190 [ 918.452877][T17829] ? exit_to_user_mode_loop+0xf3/0x670 [ 918.452929][T17829] __x64_sys_unshare+0x31/0x40 [ 918.452965][T17829] do_syscall_64+0x115/0x840 [ 918.453002][T17829] ? clear_bhb_loop+0x40/0x90 [ 918.453034][T17829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.453061][T17829] RIP: 0033:0x7f55ebb9ce59 [ 918.453081][T17829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.453106][T17829] RSP: 002b:00007f55ecb3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 918.453131][T17829] RAX: ffffffffffffffda RBX: 00007f55ebe15fa0 RCX: 00007f55ebb9ce59 [ 918.453149][T17829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 918.453164][T17829] RBP: 00007f55ebc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 918.453181][T17829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.453197][T17829] R13: 00007f55ebe16038 R14: 00007f55ebe15fa0 R15: 00007ffcf6706ef8 [ 918.453230][T17829] [ 918.765751][T17626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 919.135695][T17626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 919.191650][T17626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 919.289315][T17626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 919.342550][T17626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 919.396735][T17626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 919.433201][T17626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 919.531313][T17626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.208593][T17626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.368959][T17626] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.457837][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.465184][T16099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.613455][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.620670][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.984156][T17888] zswap: compressor not available [ 922.308009][ T5639] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 923.143813][T17626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.448864][T17626] veth0_vlan: entered promiscuous mode [ 923.520044][T17626] veth1_vlan: entered promiscuous mode [ 923.753671][T17626] veth0_macvtap: entered promiscuous mode [ 923.825431][T17626] veth1_macvtap: entered promiscuous mode [ 923.994302][T17626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.085519][T17626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.146275][T17938] netlink: 'syz.1.2208': attribute type 11 has an invalid length. [ 924.191545][T17938] netlink: 'syz.1.2208': attribute type 11 has an invalid length. [ 924.209597][ T3688] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.246461][T17938] netlink: 'syz.1.2208': attribute type 11 has an invalid length. [ 924.256183][ T3688] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.345543][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 924.373903][ T3688] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.471400][ T3688] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.011031][ T3688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.287987][ T3688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.417101][ T7347] Bluetooth: hci0: command 0x0406 tx timeout [ 926.597384][T16099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.639617][T16099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.248170][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 928.254563][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 929.437430][T17972] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ›11!phy1!netdev:wlan1!rc_rateid [ 929.989228][T17980] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 930.035401][T17980] CPU: 0 UID: 0 PID: 17980 Comm: syz.0.2212 Tainted: G L syzkaller #0 PREEMPT(full) [ 930.035442][T17980] Tainted: [L]=SOFTLOCKUP [ 930.035452][T17980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 930.035468][T17980] Call Trace: [ 930.035476][T17980] [ 930.035486][T17980] dump_stack_lvl+0x100/0x190 [ 930.035535][T17980] sysfs_warn_dup.cold+0x1c/0x28 [ 930.035574][T17980] sysfs_do_create_link_sd+0x113/0x140 [ 930.035605][T17980] sysfs_create_link+0x61/0xc0 [ 930.035633][T17980] device_add+0x675/0x1950 [ 930.035666][T17980] ? __pfx_device_add+0x10/0x10 [ 930.035693][T17980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 930.035733][T17980] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 930.035879][T17980] wiphy_register+0x1edd/0x2d90 [ 930.035912][T17980] ? __rtnl_unlock+0xb9/0xf0 [ 930.035983][T17980] ? __pfx_wiphy_register+0x10/0x10 [ 930.036017][T17980] ? __asan_memset+0x23/0x50 [ 930.036058][T17980] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 930.036155][T17980] ieee80211_register_hw+0x3055/0x4570 [ 930.036253][T17980] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 930.036294][T17980] ? __pfx___debug_object_init+0x10/0x10 [ 930.036336][T17980] ? find_held_lock+0x2b/0x80 [ 930.036373][T17980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 930.036411][T17980] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 930.036458][T17980] ? __hrtimer_setup+0x208/0x330 [ 930.036495][T17980] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 930.036575][T17980] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 930.036612][T17980] ? __asan_memcpy+0x3c/0x60 [ 930.036655][T17980] hwsim_new_radio_nl+0xc5f/0x1370 [ 930.036688][T17980] ? rcu_is_watching+0x12/0xc0 [ 930.036718][T17980] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 930.036760][T17980] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 930.036802][T17980] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 930.036850][T17980] genl_family_rcv_msg_doit+0x214/0x300 [ 930.036893][T17980] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 930.036932][T17980] ? genl_get_cmd+0x3e7/0x760 [ 930.036981][T17980] ? bpf_lsm_capable+0x9/0x10 [ 930.037010][T17980] ? security_capable+0x80/0x260 [ 930.037037][T17980] ? ns_capable+0xd2/0xf0 [ 930.037069][T17980] genl_rcv_msg+0x560/0x800 [ 930.037112][T17980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 930.037152][T17980] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 930.037196][T17980] netlink_rcv_skb+0x159/0x420 [ 930.037231][T17980] ? __pfx_genl_rcv_msg+0x10/0x10 [ 930.037272][T17980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 930.037319][T17980] ? netlink_deliver_tap+0x1ae/0xcc0 [ 930.037356][T17980] genl_rcv+0x28/0x40 [ 930.037391][T17980] netlink_unicast+0x585/0x850 [ 930.037430][T17980] ? __pfx_netlink_unicast+0x10/0x10 [ 930.037473][T17980] netlink_sendmsg+0x8b0/0xda0 [ 930.037512][T17980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.037546][T17980] ? __import_iovec+0x1d2/0x640 [ 930.037587][T17980] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 930.037619][T17980] ____sys_sendmsg+0x9e1/0xb70 [ 930.037653][T17980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.037690][T17980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.037729][T17980] ? rcu_is_watching+0x12/0xc0 [ 930.037758][T17980] ? ___sys_sendmsg+0x19d/0x1e0 [ 930.037791][T17980] ? kfree+0x1dd/0x6c0 [ 930.037831][T17980] ___sys_sendmsg+0x190/0x1e0 [ 930.037869][T17980] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.037932][T17980] ? __pfx___might_resched+0x10/0x10 [ 930.037971][T17980] __sys_sendmmsg+0x205/0x430 [ 930.038002][T17980] ? __pfx___sys_sendmmsg+0x10/0x10 [ 930.038037][T17980] ? __pfx_do_futex+0x10/0x10 [ 930.038063][T17980] ? clockevents_program_event+0x1ef/0x820 [ 930.038105][T17980] ? xfd_validate_state+0x129/0x190 [ 930.038139][T17980] __x64_sys_sendmmsg+0x9c/0x100 [ 930.038165][T17980] ? lockdep_hardirqs_on+0x78/0x100 [ 930.038203][T17980] do_syscall_64+0x115/0x840 [ 930.038239][T17980] ? clear_bhb_loop+0x40/0x90 [ 930.038270][T17980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.038297][T17980] RIP: 0033:0x7f55ebb9ce59 [ 930.038319][T17980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.038345][T17980] RSP: 002b:00007f55ecb1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 930.038369][T17980] RAX: ffffffffffffffda RBX: 00007f55ebe16090 RCX: 00007f55ebb9ce59 [ 930.038387][T17980] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 930.038404][T17980] RBP: 00007f55ebc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 930.038419][T17980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.038436][T17980] R13: 00007f55ebe16128 R14: 00007f55ebe16090 R15: 00007ffcf6706ef8 [ 930.038469][T17980] [ 930.685784][ T32] oom_reaper: reaped process 17950 (syz.1.2209), now anon-rss:0kB, file-rss:37964kB, shmem-rss:0kB [ 932.142134][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2219'. [ 932.419825][T18049] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 933.513673][T18044] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2220'. [ 936.149174][ T30] audit: type=1326 audit(4294968603.859:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.1.2225" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06a479ce59 code=0x0 [ 938.096737][T18107] FAULT_INJECTION: forcing a failure. [ 938.096737][T18107] name failslab, interval 1, probability 0, space 0, times 0 [ 938.144099][T18107] CPU: 0 UID: 0 PID: 18107 Comm: syz.1.2232 Tainted: G L syzkaller #0 PREEMPT(full) [ 938.144148][T18107] Tainted: [L]=SOFTLOCKUP [ 938.144158][T18107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 938.144174][T18107] Call Trace: [ 938.144182][T18107] [ 938.144192][T18107] dump_stack_lvl+0x100/0x190 [ 938.144240][T18107] should_fail_ex.cold+0x5/0xa [ 938.144272][T18107] should_failslab+0xc2/0x120 [ 938.144304][T18107] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 938.144346][T18107] ? __kernfs_new_node+0xd2/0x9f0 [ 938.144381][T18107] __kernfs_new_node+0xd2/0x9f0 [ 938.144413][T18107] ? __pfx___kernfs_new_node+0x10/0x10 [ 938.144449][T18107] ? find_held_lock+0x2b/0x80 [ 938.144481][T18107] ? kernfs_root+0xee/0x2a0 [ 938.144507][T18107] ? kernfs_root+0xee/0x2a0 [ 938.144541][T18107] kernfs_new_node+0x11b/0x1a0 [ 938.144579][T18107] __kernfs_create_file+0x53/0x350 [ 938.144622][T18107] sysfs_add_file_mode_ns+0x207/0x3c0 [ 938.144655][T18107] sysfs_merge_group+0x194/0x340 [ 938.144686][T18107] ? __pfx_sysfs_merge_group+0x10/0x10 [ 938.144716][T18107] ? bus_add_device+0x368/0x6b0 [ 938.144754][T18107] ? __pfx_bus_add_device+0x10/0x10 [ 938.144788][T18107] ? __pfx_dev_add_physical_location+0x10/0x10 [ 938.144825][T18107] dpm_sysfs_add+0x237/0x280 [ 938.144942][T18107] device_add+0x9ef/0x1950 [ 938.144973][T18107] ? __pfx_device_add+0x10/0x10 [ 938.145000][T18107] ? lockdep_init_map_type+0x5c/0x250 [ 938.145044][T18107] ? __init_waitqueue_head+0xca/0x150 [ 938.145081][T18107] rfkill_register+0x1ad/0xb30 [ 938.145115][T18107] nfc_register_device+0x11f/0x3e0 [ 938.145167][T18107] nci_register_device+0x7f1/0xb80 [ 938.145198][T18107] ? __pfx_nci_register_device+0x10/0x10 [ 938.145232][T18107] ? lockdep_init_map_type+0x5c/0x250 [ 938.145286][T18107] virtual_ncidev_open+0x141/0x220 [ 938.145315][T18107] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 938.145342][T18107] misc_open+0x26d/0x450 [ 938.145369][T18107] ? __pfx_misc_open+0x10/0x10 [ 938.145394][T18107] chrdev_open+0x234/0x6a0 [ 938.145427][T18107] ? __pfx_apparmor_file_open+0x10/0x10 [ 938.145456][T18107] ? __pfx_chrdev_open+0x10/0x10 [ 938.145493][T18107] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 938.145535][T18107] do_dentry_open+0x6ab/0x14d0 [ 938.145566][T18107] ? __pfx_chrdev_open+0x10/0x10 [ 938.145604][T18107] vfs_open+0x82/0x3f0 [ 938.145646][T18107] path_openat+0x208c/0x31a0 [ 938.145689][T18107] ? __pfx_path_openat+0x10/0x10 [ 938.145733][T18107] do_file_open+0x20e/0x430 [ 938.145767][T18107] ? __pfx_do_file_open+0x10/0x10 [ 938.145822][T18107] ? alloc_fd+0x476/0x790 [ 938.145856][T18107] ? do_getname+0x191/0x390 [ 938.145897][T18107] do_sys_openat2+0x10d/0x1e0 [ 938.145937][T18107] ? __pfx_do_sys_openat2+0x10/0x10 [ 938.145980][T18107] ? __fget_files+0x21f/0x3d0 [ 938.146016][T18107] __x64_sys_openat+0x12d/0x210 [ 938.146057][T18107] ? __pfx___x64_sys_openat+0x10/0x10 [ 938.146110][T18107] ? rcu_is_watching+0x12/0xc0 [ 938.146150][T18107] do_syscall_64+0x115/0x840 [ 938.146187][T18107] ? clear_bhb_loop+0x40/0x90 [ 938.146219][T18107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.146245][T18107] RIP: 0033:0x7f06a479ce59 [ 938.146267][T18107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.146292][T18107] RSP: 002b:00007f06a56b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 938.146317][T18107] RAX: ffffffffffffffda RBX: 00007f06a4a15fa0 RCX: 00007f06a479ce59 [ 938.146334][T18107] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 938.146350][T18107] RBP: 00007f06a4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 938.146370][T18107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.146385][T18107] R13: 00007f06a4a16038 R14: 00007f06a4a15fa0 R15: 00007ffc5be07778 [ 938.146418][T18107] [ 939.726771][T18128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2234'. [ 941.715347][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 942.003594][T18140] syz.1.2237 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 942.060307][T18140] CPU: 0 UID: 0 PID: 18140 Comm: syz.1.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 942.060348][T18140] Tainted: [L]=SOFTLOCKUP [ 942.060357][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 942.060372][T18140] Call Trace: [ 942.060381][T18140] [ 942.060393][T18140] dump_stack_lvl+0x100/0x190 [ 942.060441][T18140] dump_header+0xfb/0x606 [ 942.060469][T18140] oom_kill_process.cold+0xd/0x330 [ 942.060499][T18140] out_of_memory+0x340/0x14f0 [ 942.060547][T18140] ? __pfx_out_of_memory+0x10/0x10 [ 942.060595][T18140] mem_cgroup_out_of_memory+0xc6/0x130 [ 942.060634][T18140] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 942.060671][T18140] ? find_held_lock+0x2b/0x80 [ 942.060709][T18140] ? do_raw_spin_unlock+0x145/0x1e0 [ 942.060744][T18140] ? _raw_spin_unlock+0x28/0x50 [ 942.060779][T18140] try_charge_memcg+0x6e5/0xdf0 [ 942.060814][T18140] ? __pfx_try_charge_memcg+0x10/0x10 [ 942.060845][T18140] ? find_held_lock+0x2b/0x80 [ 942.060874][T18140] ? rcu_read_unlock+0x17/0x60 [ 942.060907][T18140] ? rcu_read_unlock+0x17/0x60 [ 942.060948][T18140] __memcg_slab_post_alloc_hook+0x43a/0xff0 [ 942.060990][T18140] ? kasan_unpoison+0x27/0x60 [ 942.061031][T18140] __kmalloc_cache_noprof+0x59d/0x6f0 [ 942.061068][T18140] ? ipv6_add_dev+0x1c9/0x1520 [ 942.061105][T18140] ipv6_add_dev+0x1c9/0x1520 [ 942.061140][T18140] addrconf_notify+0x5db/0x1ba0 [ 942.061182][T18140] ? __pfx_tls_dev_event+0x10/0x10 [ 942.061211][T18140] ? __pfx_addrconf_notify+0x10/0x10 [ 942.061251][T18140] ? ip6mr_device_event+0x1c4/0x230 [ 942.061295][T18140] notifier_call_chain+0x99/0x400 [ 942.061338][T18140] call_netdevice_notifiers_info+0xbe/0x110 [ 942.061373][T18140] register_netdevice+0x18fe/0x24b0 [ 942.061408][T18140] ? __pfx_register_netdevice+0x10/0x10 [ 942.061444][T18140] __ip_tunnel_create+0x52b/0x670 [ 942.061548][T18140] ? __pfx___ip_tunnel_create+0x10/0x10 [ 942.061580][T18140] ? net_generic+0xea/0x2a0 [ 942.061620][T18140] ip_tunnel_init_net+0x230/0x780 [ 942.061659][T18140] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 942.061701][T18140] ? __kmalloc_noprof+0x320/0x850 [ 942.061749][T18140] ? __pfx_erspan_init_net+0x10/0x10 [ 942.061778][T18140] ops_init+0x1e2/0x5f0 [ 942.061807][T18140] setup_net+0x118/0x3a0 [ 942.061835][T18140] ? __pfx_setup_net+0x10/0x10 [ 942.061861][T18140] ? mutex_init_lockdep+0xf1/0x120 [ 942.061893][T18140] copy_net_ns+0x46f/0x7c0 [ 942.061925][T18140] create_new_namespaces+0x3ea/0xac0 [ 942.061961][T18140] unshare_nsproxy_namespaces+0xf2/0x220 [ 942.061995][T18140] ksys_unshare+0x438/0xab0 [ 942.062029][T18140] ? kcov_ioctl+0x16a/0x720 [ 942.062060][T18140] ? kfree+0x1dd/0x6c0 [ 942.062094][T18140] ? __pfx_ksys_unshare+0x10/0x10 [ 942.062133][T18140] ? kcov_ioctl+0x16a/0x720 [ 942.062174][T18140] __x64_sys_unshare+0x31/0x40 [ 942.062209][T18140] do_syscall_64+0x115/0x840 [ 942.062244][T18140] ? clear_bhb_loop+0x40/0x90 [ 942.062274][T18140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.062299][T18140] RIP: 0033:0x7f06a479ce59 [ 942.062319][T18140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.062345][T18140] RSP: 002b:00007f06a56b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 942.062368][T18140] RAX: ffffffffffffffda RBX: 00007f06a4a15fa0 RCX: 00007f06a479ce59 [ 942.062385][T18140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 942.062400][T18140] RBP: 00007f06a4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 942.062416][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.062431][T18140] R13: 00007f06a4a16038 R14: 00007f06a4a15fa0 R15: 00007ffc5be07778 [ 942.062462][T18140] [ 942.610052][T18140] memory: usage 3072kB, limit 3072kB, failcnt 107591 [ 942.616894][T18140] memory+swap: usage 7296kB, limit 9007199254740988kB, failcnt 0 [ 942.626318][T18140] kmem: usage 3052kB, limit 9007199254740988kB, failcnt 0 [ 942.633862][T18140] Memory cgroup stats for /syz1: [ 942.634020][T18140] cache 0 [ 942.643042][T18140] rss 0 [ 942.645940][T18140] rss_huge 0 [ 942.649520][T18140] shmem 0 [ 942.652543][T18140] mapped_file 0 [ 942.656190][T18140] dirty 0 [ 942.664924][T18140] writeback 0 [ 942.669066][T18140] workingset_refault_anon 15604 [ 942.673945][T18140] workingset_refault_file 8108 [ 942.683285][T18140] swap 4325376 [ 942.686685][T18140] swapcached 555274240 [ 942.692115][T18140] pgpgin 439520 [ 942.695666][T18140] pgpgout 444196 [ 942.699554][T18140] pgfault 569077 [ 942.703986][T18140] pgmajfault 7317 [ 942.707700][T18140] inactive_anon 16384 [ 942.712718][T18140] active_anon 4096 [ 942.716551][T18140] inactive_file 0 [ 942.720554][T18140] active_file 0 [ 942.724025][T18140] unevictable 0 [ 942.727594][T18140] hierarchical_memory_limit 3145728 [ 942.733272][T18140] hierarchical_memsw_limit 9223372036854771712 [ 942.740565][T18140] total_cache 0 [ 942.744647][T18140] total_rss 0 [ 942.748324][T18140] total_rss_huge 0 [ 942.752170][T18140] total_shmem 0 [ 942.755695][T18140] total_mapped_file 0 [ 942.760173][T18140] total_dirty 0 [ 942.764825][T18140] total_writeback 0 [ 942.768963][T18140] total_workingset_refault_anon 15604 [ 942.774454][T18140] total_workingset_refault_file 8108 [ 942.780391][T18140] total_swap 4325376 [ 942.784334][T18140] total_swapcached 555274240 [ 942.792114][T18140] total_pgpgin 439520 [ 942.796114][T18140] total_pgpgout 444196 [ 942.800549][T18140] total_pgfault 569077 [ 942.805574][T18140] total_pgmajfault 7317 [ 942.810075][T18140] total_inactive_anon 16384 [ 942.814597][T18140] total_active_anon 4096 [ 942.819745][T18140] total_inactive_file 0 [ 942.823915][T18140] total_active_file 0 [ 942.828340][T18140] total_unevictable 0 [ 942.832497][T18140] anon_cost 0 [ 942.835813][T18140] file_cost 0 [ 942.839693][T18140] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2237,pid=18139,uid=0 [ 942.857158][T18140] Memory cgroup out of memory: Killed process 18139 (syz.1.2237) total-vm:110832kB, anon-rss:1244kB, file-rss:25612kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 948.047728][T18233] random: crng reseeded on system resumption [ 948.998075][T18212] syz.1.2250 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 949.165472][T18212] CPU: 0 UID: 0 PID: 18212 Comm: syz.1.2250 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.165512][T18212] Tainted: [L]=SOFTLOCKUP [ 949.165521][T18212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 949.165536][T18212] Call Trace: [ 949.165545][T18212] [ 949.165554][T18212] dump_stack_lvl+0x100/0x190 [ 949.165601][T18212] dump_header+0xfb/0x606 [ 949.165639][T18212] oom_kill_process.cold+0xd/0x330 [ 949.165675][T18212] out_of_memory+0x340/0x14f0 [ 949.165728][T18212] ? __pfx_out_of_memory+0x10/0x10 [ 949.165781][T18212] mem_cgroup_out_of_memory+0xc6/0x130 [ 949.165821][T18212] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 949.165858][T18212] ? find_held_lock+0x2b/0x80 [ 949.165894][T18212] ? do_raw_spin_unlock+0x145/0x1e0 [ 949.165922][T18212] ? _raw_spin_unlock+0x28/0x50 [ 949.165956][T18212] try_charge_memcg+0x6e5/0xdf0 [ 949.165992][T18212] ? __pfx_try_charge_memcg+0x10/0x10 [ 949.166023][T18212] ? find_held_lock+0x2b/0x80 [ 949.166052][T18212] ? rcu_read_unlock+0x17/0x60 [ 949.166090][T18212] ? rcu_read_unlock+0x17/0x60 [ 949.166136][T18212] __memcg_slab_post_alloc_hook+0x43a/0xff0 [ 949.166178][T18212] ? kasan_save_track+0x14/0x30 [ 949.166206][T18212] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 949.166246][T18212] ? sk_prot_alloc+0x60/0x2a0 [ 949.166284][T18212] sk_prot_alloc+0x60/0x2a0 [ 949.166317][T18212] sk_alloc+0x36/0xe80 [ 949.166357][T18212] inet6_create+0x385/0x12b0 [ 949.166458][T18212] ? inet6_create+0x7f/0x12b0 [ 949.166492][T18212] __sock_create+0x339/0x860 [ 949.166530][T18212] rds_tcp_listen_init+0xd4/0x4e0 [ 949.166597][T18212] ? __pfx_rds_tcp_listen_init+0x10/0x10 [ 949.166650][T18212] ? register_net_sysctl_sz+0x222/0x430 [ 949.166691][T18212] ? __asan_memcpy+0x3c/0x60 [ 949.166732][T18212] rds_tcp_init_net+0x16d/0x310 [ 949.166770][T18212] ? __pfx_rds_tcp_init_net+0x10/0x10 [ 949.166807][T18212] ops_init+0x1e2/0x5f0 [ 949.166836][T18212] setup_net+0x118/0x3a0 [ 949.166863][T18212] ? __pfx_setup_net+0x10/0x10 [ 949.166890][T18212] ? mutex_init_lockdep+0xf1/0x120 [ 949.166919][T18212] copy_net_ns+0x46f/0x7c0 [ 949.166951][T18212] create_new_namespaces+0x3ea/0xac0 [ 949.166989][T18212] unshare_nsproxy_namespaces+0xf2/0x220 [ 949.167023][T18212] ksys_unshare+0x438/0xab0 [ 949.167056][T18212] ? kcov_ioctl+0x16a/0x720 [ 949.167093][T18212] ? kfree+0x1dd/0x6c0 [ 949.167127][T18212] ? __pfx_ksys_unshare+0x10/0x10 [ 949.167165][T18212] ? kcov_ioctl+0x16a/0x720 [ 949.167204][T18212] __x64_sys_unshare+0x31/0x40 [ 949.167238][T18212] do_syscall_64+0x115/0x840 [ 949.167273][T18212] ? clear_bhb_loop+0x40/0x90 [ 949.167303][T18212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.167328][T18212] RIP: 0033:0x7f06a479ce59 [ 949.167348][T18212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.167373][T18212] RSP: 002b:00007f06a56b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 949.167397][T18212] RAX: ffffffffffffffda RBX: 00007f06a4a15fa0 RCX: 00007f06a479ce59 [ 949.167414][T18212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 949.167429][T18212] RBP: 00007f06a4832d6f R08: 0000000000000000 R09: 0000000000000000 [ 949.167445][T18212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.167460][T18212] R13: 00007f06a4a16038 R14: 00007f06a4a15fa0 R15: 00007ffc5be07778 [ 949.167492][T18212] [ 950.366088][T18212] memory: usage 3056kB, limit 3072kB, failcnt 108865 [ 950.392539][T18212] memory+swap: usage 7300kB, limit 9007199254740988kB, failcnt 0 [ 950.430994][T18212] kmem: usage 2760kB, limit 9007199254740988kB, failcnt 0 [ 950.464696][T18212] Memory cgroup stats for /syz1: [ 950.464970][T18212] cache 0 [ 950.507072][T18212] rss 49152 [ 950.520044][T18212] rss_huge 0 [ 950.539177][T18212] shmem 0 [ 950.555251][T18212] mapped_file 0 [ 950.578725][T18212] dirty 0 [ 950.600890][T18212] writeback 0 [ 950.607790][T18212] workingset_refault_anon 15685 [ 950.636114][T18212] workingset_refault_file 8108 [ 950.666461][T18212] swap 4345856 [ 950.698373][T18212] swapcached 561098752 [ 950.721192][T18212] pgpgin 441316 [ 950.738861][T18212] pgpgout 445974 [ 950.758237][T18212] pgfault 571438 [ 950.775997][T18212] pgmajfault 7358 [ 950.792350][T18212] inactive_anon 81920 [ 950.830198][T18212] active_anon 8192 [ 950.848535][T18212] inactive_file 0 [ 950.872607][T18212] active_file 0 [ 950.892747][T18212] unevictable 0 [ 950.924260][T18212] hierarchical_memory_limit 3145728 [ 950.943425][T18212] hierarchical_memsw_limit 9223372036854771712 [ 950.973007][T18212] total_cache 0 [ 950.990882][T18212] total_rss 49152 [ 951.005474][T18212] total_rss_huge 0 [ 951.029693][T18212] total_shmem 0 [ 951.048867][T18212] total_mapped_file 0 [ 951.060992][T18212] total_dirty 0 [ 951.072770][T18212] total_writeback 0 [ 951.087796][T18212] total_workingset_refault_anon 15685 [ 951.119365][T18212] total_workingset_refault_file 8108 [ 951.136814][T18212] total_swap 4345856 [ 951.155155][T18212] total_swapcached 561098752 [ 951.175871][T18212] total_pgpgin 441316 [ 951.200456][T18212] total_pgpgout 445974 [ 951.219045][T18212] total_pgfault 571438 [ 951.240161][T18212] total_pgmajfault 7358 [ 951.258336][T18212] total_inactive_anon 81920 [ 951.285842][T18212] total_active_anon 8192 [ 951.307819][T18212] total_inactive_file 0 [ 951.327893][T18212] total_active_file 0 [ 951.346529][T18212] total_unevictable 0 [ 951.362649][T18212] anon_cost 0 [ 951.378989][T18212] file_cost 0 [ 951.395125][T18212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2250,pid=18211,uid=0 [ 951.462000][T18212] Memory cgroup out of memory: Killed process 18212 (syz.1.2250) total-vm:145784kB, anon-rss:1288kB, file-rss:26476kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 952.166857][ T5639] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 952.232030][T18262] random: crng reseeded on system resumption [ 953.026105][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2262'. [ 953.613437][T18280] syz.1.2261 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 953.799729][T18280] CPU: 0 UID: 0 PID: 18280 Comm: syz.1.2261 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.799767][T18280] Tainted: [L]=SOFTLOCKUP [ 953.799775][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 953.799791][T18280] Call Trace: [ 953.799799][T18280] [ 953.799808][T18280] dump_stack_lvl+0x100/0x190 [ 953.799856][T18280] dump_header+0xfb/0x606 [ 953.799884][T18280] oom_kill_process.cold+0xd/0x330 [ 953.799913][T18280] out_of_memory+0x340/0x14f0 [ 953.799957][T18280] ? __pfx_out_of_memory+0x10/0x10 [ 953.800003][T18280] mem_cgroup_out_of_memory+0xc6/0x130 [ 953.800042][T18280] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 953.800079][T18280] ? find_held_lock+0x2b/0x80 [ 953.800116][T18280] ? do_raw_spin_unlock+0x145/0x1e0 [ 953.800144][T18280] ? _raw_spin_unlock+0x28/0x50 [ 953.800177][T18280] try_charge_memcg+0x6e5/0xdf0 [ 953.800213][T18280] ? __pfx_try_charge_memcg+0x10/0x10 [ 953.800242][T18280] ? find_held_lock+0x2b/0x80 [ 953.800271][T18280] ? rcu_read_unlock+0x17/0x60 [ 953.800302][T18280] ? rcu_read_unlock+0x17/0x60 [ 953.800332][T18280] ? find_held_lock+0x2b/0x80 [ 953.800363][T18280] ? rcu_read_unlock+0x17/0x60 [ 953.800399][T18280] charge_memcg+0x19f/0x210 [ 953.800430][T18280] __mem_cgroup_charge+0x2b/0x1c0 [ 953.800465][T18280] do_anonymous_page+0xb6e/0x2050 [ 953.800503][T18280] ? rcu_read_unlock+0x2d/0xb0 [ 953.800547][T18280] __handle_mm_fault+0x1d2c/0x2a00 [ 953.800589][T18280] ? reacquire_held_locks+0xce/0x1e0 [ 953.800629][T18280] ? __pfx___handle_mm_fault+0x10/0x10 [ 953.800671][T18280] ? lock_vma_under_rcu+0x17c/0x590 [ 953.800729][T18280] handle_mm_fault+0x37b/0xa30 [ 953.800770][T18280] do_user_addr_fault+0x5a3/0x12f0 [ 953.800808][T18280] exc_page_fault+0x6f/0xd0 [ 953.800843][T18280] asm_exc_page_fault+0x26/0x30 [ 953.800866][T18280] RIP: 0033:0x7f06a474b39f [ 953.800886][T18280] Code: b0 00 00 00 0f 29 bc 24 c0 00 00 00 64 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 48 8d 84 24 e0 00 00 00 45 31 c0 48 89 e1 <48> 89 44 24 08 48 8d 44 24 20 c7 04 24 18 00 00 00 c7 44 24 04 30 [ 953.800909][T18280] RSP: 002b:00007f06a564eff0 EFLAGS: 00010246 [ 953.800928][T18280] RAX: 00007f06a564f0d0 RBX: 0000000000020000 RCX: 00007f06a564eff0 [ 953.800944][T18280] RDX: 00007f06a484f156 RSI: 0000000000000023 RDI: 00007f06a564f0d0 [ 953.800959][T18280] RBP: 00007f06a5630000 R08: 0000000000000000 R09: 00007ffc5be07777 [ 953.800974][T18280] R10: 0000000000000008 R11: 0000000000000202 R12: 00007f06a564f0d0 [ 953.800989][T18280] R13: 000000000000006e R14: 00007ffc5be07690 R15: 00007ffc5be07778 [ 953.801020][T18280] [ 953.801029][T18280] memory: usage 3072kB, limit 3072kB, failcnt 108958 [ 955.999167][T18280] memory+swap: usage 3084kB, limit 9007199254740988kB, failcnt 0 [ 956.080079][T18280] kmem: usage 2816kB, limit 9007199254740988kB, failcnt 0 [ 956.116691][T18280] Memory cgroup stats for /syz1: [ 956.116955][T18280] cache 4096 [ 956.190470][T18280] rss 221184 [ 956.211982][T18280] rss_huge 0 [ 956.248791][T18280] shmem 0 [ 956.267515][T18280] mapped_file 4096 [ 956.289727][T18280] dirty 4096 [ 956.320212][T18280] writeback 0 [ 956.351529][T18280] workingset_refault_anon 15704 [ 956.401846][T18280] workingset_refault_file 8108 [ 956.457792][T18280] swap 16384 [ 956.494947][T18280] swapcached 561086464 [ 956.547363][T18280] pgpgin 441514 [ 956.596590][T18280] pgpgout 446137 [ 956.640421][T18280] pgfault 571966 [ 956.694554][T18280] pgmajfault 7370 [ 956.758804][T18280] inactive_anon 8192 [ 956.812263][T18280] active_anon 8192 [ 956.859063][T18280] inactive_file 0 [ 956.952412][T18280] active_file 0 [ 956.996959][T18280] unevictable 221184 [ 957.027365][T18280] hierarchical_memory_limit 3145728 [ 957.069040][T18280] hierarchical_memsw_limit 9223372036854771712 [ 957.229536][T18280] total_cache 4096 [ 957.293133][T18280] total_rss 221184 [ 957.335234][T18280] total_rss_huge 0 [ 957.380899][T18280] total_shmem 0 [ 957.417122][T18280] total_mapped_file 4096 [ 957.443025][T18280] total_dirty 4096 [ 957.481640][T18280] total_writeback 0 [ 957.523916][T18280] total_workingset_refault_anon 15704 [ 957.582274][T18280] total_workingset_refault_file 8108 [ 957.641081][T18280] total_swap 16384 [ 957.688308][T18280] total_swapcached 561086464 [ 957.739556][T18280] total_pgpgin 441514 [ 957.779631][T18280] total_pgpgout 446137 [ 957.821816][T18280] total_pgfault 571966 [ 957.903974][T18280] total_pgmajfault 7370 [ 957.964601][T18280] total_inactive_anon 8192 [ 958.044898][T18280] total_active_anon 8192 [ 958.108976][T18280] total_inactive_file 0 [ 958.126129][T18280] total_active_file 0 [ 958.151413][T18280] total_unevictable 221184 [ 958.181621][T18280] anon_cost 0 [ 958.212941][T18280] file_cost 0 [ 958.234859][T18280] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2261,pid=18265,uid=0 [ 958.315034][T18280] Memory cgroup out of memory: Killed process 18266 (syz.1.2261) total-vm:180600kB, anon-rss:1448kB, file-rss:31316kB, shmem-rss:0kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 958.581316][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2269'. [ 959.141962][ T5639] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 959.800497][T18372] zero sized request [ 961.343673][T18397] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2275'. [ 964.337487][T18436] ubi3: attaching mtd1 [ 968.092481][T18472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2290: iget: checksum invalid [ 968.178090][T18472] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 968.290891][T18472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2290: iget: checksum invalid [ 968.394866][T18472] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 968.454992][T18472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2290: iget: checksum invalid [ 968.548172][T18472] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 968.610001][T18472] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2290: iget: checksum invalid [ 968.668041][T18472] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 968.716562][T18472] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 968.759939][T18472] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 974.203462][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 976.639350][T18579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2312'. [ 981.853252][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 981.861255][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 981.898134][T18654] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 984.293374][ T30] audit: type=1801 audit(4294968652.215:29): pid=18691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_metadata cause=unknown comm="syz.3.2331" name="nlctrl" dev="mqueue" ino=78754 res=0 errno=0 [ 984.355826][T18690] FAULT_INJECTION: forcing a failure. [ 984.355826][T18690] name fail_futex, interval 1, probability 0, space 0, times 0 [ 984.427242][T18691] misc userio: Invalid payload size [ 984.433275][T18690] CPU: 0 UID: 0 PID: 18690 Comm: syz.4.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.433314][T18690] Tainted: [L]=SOFTLOCKUP [ 984.433324][T18690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 984.433341][T18690] Call Trace: [ 984.433351][T18690] [ 984.433360][T18690] dump_stack_lvl+0x100/0x190 [ 984.433408][T18690] should_fail_ex.cold+0x5/0xa [ 984.433440][T18690] get_futex_key+0x1d2/0x1510 [ 984.433486][T18690] ? __pfx_get_futex_key+0x10/0x10 [ 984.433525][T18690] ? futex_hash+0x2ad/0x370 [ 984.433567][T18690] ? futex_hash+0x141/0x370 [ 984.433611][T18690] futex_wake+0xea/0x530 [ 984.433643][T18690] ? __pfx_futex_wait+0x10/0x10 [ 984.433675][T18690] ? __pfx_futex_wake+0x10/0x10 [ 984.433710][T18690] ? do_writev+0x214/0x340 [ 984.433744][T18690] do_futex+0x32b/0x350 [ 984.433770][T18690] ? __pfx_do_futex+0x10/0x10 [ 984.433797][T18690] ? cap_task_prctl+0x104/0xa50 [ 984.433828][T18690] __x64_sys_futex+0x34f/0x4d0 [ 984.433871][T18690] ? __pfx___x64_sys_futex+0x10/0x10 [ 984.433900][T18690] ? __pfx___do_sys_prctl+0x10/0x10 [ 984.433924][T18690] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 984.433964][T18690] ? syscall_user_dispatch+0x76/0x130 [ 984.433997][T18690] do_syscall_64+0x115/0x840 [ 984.434034][T18690] ? clear_bhb_loop+0x40/0x90 [ 984.434064][T18690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.434091][T18690] RIP: 0033:0x7f3ff4f9ce59 [ 984.434111][T18690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.434136][T18690] RSP: 002b:00007f3ff5e420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 984.434160][T18690] RAX: ffffffffffffffda RBX: 00007f3ff5215fa8 RCX: 00007f3ff4f9ce59 [ 984.434178][T18690] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3ff5215fac [ 984.434195][T18690] RBP: 00007f3ff5215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 984.434211][T18690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.434226][T18690] R13: 00007f3ff5216038 R14: 00007ffe3dfcb890 R15: 00007ffe3dfcb978 [ 984.434258][T18690] [ 984.935320][T18695] ================================================================== [ 984.935345][T18695] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 984.935441][T18695] Read of size 26 at addr ffff88803549c2c8 by task syz.4.2332/18695 [ 984.935463][T18695] [ 984.935478][T18695] CPU: 0 UID: 0 PID: 18695 Comm: syz.4.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.935515][T18695] Tainted: [L]=SOFTLOCKUP [ 984.935524][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 984.935541][T18695] Call Trace: [ 984.935550][T18695] [ 984.935560][T18695] dump_stack_lvl+0x100/0x190 [ 984.935605][T18695] print_report+0x13d/0x4b0 [ 984.935643][T18695] ? __virt_addr_valid+0x239/0x430 [ 984.935684][T18695] ? fbcon_prepare_logo+0x94e/0xc60 [ 984.935724][T18695] kasan_report+0xdf/0x1d0 [ 984.935754][T18695] ? fbcon_prepare_logo+0x94e/0xc60 [ 984.935799][T18695] kasan_check_range+0x10f/0x1e0 [ 984.935834][T18695] __asan_memcpy+0x23/0x60 [ 984.935874][T18695] fbcon_prepare_logo+0x94e/0xc60 [ 984.935928][T18695] fbcon_init+0x1065/0x1830 [ 984.935972][T18695] visual_init+0x320/0x620 [ 984.935998][T18695] do_bind_con_driver.isra.0+0x636/0x9c0 [ 984.936033][T18695] store_bind+0x609/0x730 [ 984.936065][T18695] ? __pfx_store_bind+0x10/0x10 [ 984.936094][T18695] dev_attr_store+0x58/0x80 [ 984.936120][T18695] ? __pfx_dev_attr_store+0x10/0x10 [ 984.936147][T18695] sysfs_kf_write+0xf2/0x150 [ 984.936189][T18695] kernfs_fop_write_iter+0x3e0/0x5f0 [ 984.936224][T18695] ? __pfx_sysfs_kf_write+0x10/0x10 [ 984.936270][T18695] do_iter_readv_writev+0x6ee/0x920 [ 984.936298][T18695] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 984.936331][T18695] vfs_writev+0x360/0xe10 [ 984.936358][T18695] ? trace_contention_end+0x122/0x170 [ 984.936385][T18695] ? __pfx_vfs_writev+0x10/0x10 [ 984.936426][T18695] ? __fget_files+0x21f/0x3d0 [ 984.936459][T18695] ? do_writev+0x13e/0x340 [ 984.936484][T18695] do_writev+0x13e/0x340 [ 984.936510][T18695] ? __pfx_do_writev+0x10/0x10 [ 984.936537][T18695] ? rcu_is_watching+0x12/0xc0 [ 984.936568][T18695] do_syscall_64+0x115/0x840 [ 984.936605][T18695] ? clear_bhb_loop+0x40/0x90 [ 984.936638][T18695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.936664][T18695] RIP: 0033:0x7f3ff4f9ce59 [ 984.936683][T18695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.936710][T18695] RSP: 002b:00007f3ff5e21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 984.936735][T18695] RAX: ffffffffffffffda RBX: 00007f3ff5216090 RCX: 00007f3ff4f9ce59 [ 984.936753][T18695] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 984.936770][T18695] RBP: 00007f3ff5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 984.936786][T18695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.936802][T18695] R13: 00007f3ff5216128 R14: 00007f3ff5216090 R15: 00007ffe3dfcb978 [ 984.936828][T18695] [ 984.936837][T18695] [ 984.936844][T18695] Allocated by task 6607: [ 984.936857][T18695] kasan_save_stack+0x30/0x50 [ 984.936880][T18695] kasan_save_track+0x14/0x30 [ 984.936909][T18695] __kasan_kmalloc+0xaa/0xb0 [ 984.936931][T18695] __kmalloc_node_noprof+0x307/0x850 [ 984.936971][T18695] alloc_slab_obj_exts+0xae/0x270 [ 984.937005][T18695] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 984.937038][T18695] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 984.937079][T18695] xas_alloc+0x350/0x460 [ 984.937147][T18695] xas_create+0x75a/0x14e0 [ 984.937181][T18695] xas_store+0x9e/0x1a30 [ 984.937217][T18695] shmem_add_to_page_cache+0x95c/0xcd0 [ 984.937257][T18695] shmem_alloc_and_add_folio+0x558/0xd40 [ 984.937296][T18695] shmem_get_folio_gfp+0x6ab/0x1900 [ 984.937318][T18695] shmem_fault+0x1f9/0xa20 [ 984.937338][T18695] __do_fault+0x10b/0x440 [ 984.937361][T18695] do_fault+0xa99/0x1750 [ 984.937389][T18695] __handle_mm_fault+0x187d/0x2a00 [ 984.937425][T18695] handle_mm_fault+0x37b/0xa30 [ 984.937459][T18695] do_user_addr_fault+0x74c/0x12f0 [ 984.937487][T18695] exc_page_fault+0x6f/0xd0 [ 984.937521][T18695] asm_exc_page_fault+0x26/0x30 [ 984.937545][T18695] [ 984.937551][T18695] The buggy address belongs to the object at ffff88803549c200 [ 984.937551][T18695] which belongs to the cache kmalloc-192 of size 192 [ 984.937571][T18695] The buggy address is located 16 bytes to the right of [ 984.937571][T18695] allocated 184-byte region [ffff88803549c200, ffff88803549c2b8) [ 984.937597][T18695] [ 984.937604][T18695] The buggy address belongs to the physical page: [ 984.937614][T18695] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3549c [ 984.937637][T18695] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 984.937656][T18695] page_type: f5(slab) [ 984.937678][T18695] raw: 00fff00000000000 ffff88813fe2b3c0 dead000000000100 dead000000000122 [ 984.937701][T18695] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 984.937716][T18695] page dumped because: kasan: bad access detected [ 984.937728][T18695] page_owner tracks the page as allocated [ 984.937738][T18695] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 28427826382, free_ts 28427376549 [ 984.937781][T18695] post_alloc_hook+0xfd/0x120 [ 984.937816][T18695] get_page_from_freelist+0x11a6/0x3410 [ 984.937856][T18695] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 984.937897][T18695] new_slab+0xa6/0x6c0 [ 984.937935][T18695] refill_objects+0x277/0x420 [ 984.937972][T18695] __pcs_replace_empty_main+0x375/0x650 [ 984.938012][T18695] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 984.938038][T18695] krealloc_node_align_noprof+0x1f9/0x3e0 [ 984.938063][T18695] add_sysfs_param+0xdb/0x970 [ 984.938092][T18695] param_sysfs_builtin_init+0x313/0x3f0 [ 984.938132][T18695] do_one_initcall+0x121/0x750 [ 984.938161][T18695] kernel_init_freeable+0x6ea/0x7b0 [ 984.938200][T18695] kernel_init+0x1f/0x1e0 [ 984.938223][T18695] ret_from_fork+0x72b/0xd50 [ 984.938247][T18695] ret_from_fork_asm+0x1a/0x30 [ 984.938278][T18695] page last free pid 36 tgid 36 stack trace: [ 984.938291][T18695] __free_frozen_pages+0x794/0x10a0 [ 984.938324][T18695] __kasan_populate_vmalloc+0x164/0x210 [ 984.938364][T18695] alloc_vmap_area+0x95d/0x2b70 [ 984.938390][T18695] __get_vm_area_node+0x1ca/0x330 [ 984.938419][T18695] __vmalloc_node_range_noprof+0x228/0x1630 [ 984.938452][T18695] __vmalloc_node_noprof+0xad/0xf0 [ 984.938483][T18695] copy_process+0x7fb/0x7ed0 [ 984.938514][T18695] kernel_clone+0x176/0x9e0 [ 984.938545][T18695] user_mode_thread+0xcc/0x110 [ 984.938580][T18695] call_usermodehelper_exec_work+0xcb/0x180 [ 984.938606][T18695] process_one_work+0xa0e/0x1980 [ 984.938627][T18695] worker_thread+0x5ef/0xe50 [ 984.938647][T18695] kthread+0x370/0x450 [ 984.938683][T18695] ret_from_fork+0x72b/0xd50 [ 984.938705][T18695] ret_from_fork_asm+0x1a/0x30 [ 984.938736][T18695] [ 984.938742][T18695] Memory state around the buggy address: [ 984.938754][T18695] ffff88803549c180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 984.938773][T18695] ffff88803549c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.938791][T18695] >ffff88803549c280: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 984.938805][T18695] ^ [ 984.938819][T18695] ffff88803549c300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 984.938838][T18695] ffff88803549c380: 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc fc [ 984.938858][T18695] ================================================================== [ 984.948667][T18695] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 984.948693][T18695] CPU: 0 UID: 0 PID: 18695 Comm: syz.4.2332 Tainted: G L syzkaller #0 PREEMPT(full) [ 984.948730][T18695] Tainted: [L]=SOFTLOCKUP [ 984.948740][T18695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 984.948757][T18695] Call Trace: [ 984.948765][T18695] [ 984.948775][T18695] dump_stack_lvl+0x100/0x190 [ 984.948823][T18695] vpanic+0x552/0x970 [ 984.948847][T18695] ? __pfx_vpanic+0x10/0x10 [ 984.948872][T18695] ? mark_held_locks+0x40/0x70 [ 984.948924][T18695] ? fbcon_prepare_logo+0x94e/0xc60 [ 984.948968][T18695] panic+0xd1/0xe0 [ 984.948990][T18695] ? __pfx_panic+0x10/0x10 [ 984.949015][T18695] ? fbcon_prepare_logo+0x94e/0xc60 [ 984.949056][T18695] ? preempt_schedule_common+0x42/0xc0 [ 984.949099][T18695] check_panic_on_warn.cold+0x19/0x34 [ 984.949127][T18695] end_report.part.0+0x3a/0x90 [ 984.949165][T18695] kasan_report.cold+0xe/0x18 [ 984.949204][T18695] ? fbcon_prepare_logo+0x94e/0xc60 [ 984.949250][T18695] kasan_check_range+0x10f/0x1e0 [ 984.949286][T18695] __asan_memcpy+0x23/0x60 [ 984.949325][T18695] fbcon_prepare_logo+0x94e/0xc60 [ 984.949372][T18695] fbcon_init+0x1065/0x1830 [ 984.949417][T18695] visual_init+0x320/0x620 [ 984.949445][T18695] do_bind_con_driver.isra.0+0x636/0x9c0 [ 984.949482][T18695] store_bind+0x609/0x730 [ 984.949515][T18695] ? __pfx_store_bind+0x10/0x10 [ 984.949545][T18695] dev_attr_store+0x58/0x80 [ 984.949572][T18695] ? __pfx_dev_attr_store+0x10/0x10 [ 984.949598][T18695] sysfs_kf_write+0xf2/0x150 [ 984.949641][T18695] kernfs_fop_write_iter+0x3e0/0x5f0 [ 984.949677][T18695] ? __pfx_sysfs_kf_write+0x10/0x10 [ 984.949720][T18695] do_iter_readv_writev+0x6ee/0x920 [ 984.949747][T18695] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 984.949781][T18695] vfs_writev+0x360/0xe10 [ 984.949808][T18695] ? trace_contention_end+0x122/0x170 [ 984.949835][T18695] ? __pfx_vfs_writev+0x10/0x10 [ 984.949873][T18695] ? __fget_files+0x21f/0x3d0 [ 984.949914][T18695] ? do_writev+0x13e/0x340 [ 984.949940][T18695] do_writev+0x13e/0x340 [ 984.949967][T18695] ? __pfx_do_writev+0x10/0x10 [ 984.949996][T18695] ? rcu_is_watching+0x12/0xc0 [ 984.950027][T18695] do_syscall_64+0x115/0x840 [ 984.950063][T18695] ? clear_bhb_loop+0x40/0x90 [ 984.950092][T18695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.950119][T18695] RIP: 0033:0x7f3ff4f9ce59 [ 984.950139][T18695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.950165][T18695] RSP: 002b:00007f3ff5e21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 984.950190][T18695] RAX: ffffffffffffffda RBX: 00007f3ff5216090 RCX: 00007f3ff4f9ce59 [ 984.950209][T18695] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 984.950226][T18695] RBP: 00007f3ff5032d6f R08: 0000000000000000 R09: 0000000000000000 [ 984.950242][T18695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.950258][T18695] R13: 00007f3ff5216128 R14: 00007f3ff5216090 R15: 00007ffe3dfcb978 [ 984.950283][T18695] [ 984.950366][T18695] Kernel Offset: disabled