last executing test programs: 7.425010575s ago: executing program 2 (id=273): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ioctl$auto_FIONBIO(r0, 0x5421, 0x5) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mountinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x6a500, 0x0) socket(0x15, 0x5, 0x0) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r1, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/power/autosuspend_delay_ms\x00', 0x4400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyv8\x00', 0x613000, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) pwrite64$auto(r3, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x4, 0x8) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x80000541b, r2) 6.984028489s ago: executing program 0 (id=274): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x900064b0, 0x2000000000000c38) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyzd/power/control\x00', 0x2a001, 0x0) write$auto(r3, &(0x7f0000000040)='\xf3\xc1\xbf\xa0', 0x7) r4 = socket(0x10, 0x800, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000009000), 0x101181, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200400c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2b, 0x1, 0x1) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x440, 0x0) (async) socket(0x29, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) (async) ioctl$auto(r0, 0x900064b0, 0x2000000000000c38) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b82, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyzd/power/control\x00', 0x2a001, 0x0) (async) write$auto(r3, &(0x7f0000000040)='\xf3\xc1\xbf\xa0', 0x7) (async) socket(0x10, 0x800, 0x14) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000009000), 0x101181, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200400c0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40c0}, 0x48050) (async) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) (async) 6.595392854s ago: executing program 0 (id=275): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop1/hctx0/busy\x00', 0x81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) r1 = fsopen$auto(0x0, 0x1) fsmount$auto(0x4, 0x0, 0x200003) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r1, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop1/hctx0/busy\x00', 0x81, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sysfs$auto(0x2, 0x0, 0x0) (async) fsopen$auto(0x0, 0x1) (async) fsmount$auto(0x4, 0x0, 0x200003) (async) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r1, 0x3, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) 6.473421632s ago: executing program 3 (id=277): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, r0) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x107501, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xdbb3b8900014c086, 0x0) write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou$W&^kjO\tK\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\b\x00\x00\x00\x00\x00\x00\x00I\xcb\x16f\xc0\x8e|8x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5FD\x15f\x90\xa2\x84', 0x16051) readv$auto(0x3, 0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, r0, 0x7fff) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0xa0e42, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x8, 0x810002, 0x8, 0x8000000008011, 0x3, 0x2) mmap$auto(0x0, 0x400006, 0xdf, 0x10, r1, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/netdevsim0/ra_honor_pio_pflag\x00', 0x111840, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x2000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) 6.41662583s ago: executing program 0 (id=278): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd4/state\x00', 0x801, 0x0) mmap$auto(0x0, 0x7fffffff, 0xffffffff, 0xef11, r0, 0x300000000000) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000004140)='/sys/kernel/mm/ksm/stable_node_chains\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x168040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) dup2$auto(r2, r3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc18260, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x4044000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0x26, 0x800, 0x8) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) sysfs$auto(0x2, 0x4000007, 0xfffffffffffffffc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 6.348748114s ago: executing program 2 (id=279): mmap$auto(0x0, 0xf, 0x3, 0xcaf3, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0xc2380, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="50030000", @ANYRES16=r0, @ANYRES8=r1], 0x350}, 0x1, 0x0, 0x0, 0x24010895}, 0x14) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80202, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) 5.432730797s ago: executing program 1 (id=281): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x100080000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x3) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7f}, 0x8000000000000001, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x2, 0x800000df, 0x9b72, 0xffffffffffffffff, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x0, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x14, 0x0, 0x800004) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket(0xa, 0x1, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0x40000cb, 0x0, 0x7) add_key$auto_KEY_SPEC_SESSION_KEYRING(&(0x7f0000000440)='keyring\x00', 0x0, &(0x7f00000004c0), 0xff, 0xfffffffffffffffd) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) 5.429492099s ago: executing program 3 (id=282): sendmsg$auto_GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4884) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x70f, 0x5}, {0x7, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x6a040, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r2 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, r1, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) epoll_create$auto(0x3e) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x149) r3 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x2, 0x0) poll$auto(0x0, 0x5, 0x108) r4 = pidfd_getfd$auto(r0, r3, 0x209) ftruncate$auto(r4, 0x8) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/irq/12/hwirq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r5, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x4, 0x8, 0x2, 0x40eb2, r2, 0x401) r7 = socket(0xa, 0x1, 0x84) setsockopt$auto(r7, 0x11, 0x6, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0xaa100, 0x0) 4.767830502s ago: executing program 2 (id=283): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x1a5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x1e, 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/usb/drivers/cdc_mbim/uevent\x00', 0xdf802, 0x0) sendfile$auto(r0, r1, 0x0, 0xfffffffffffff39c) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2022009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pwritev$auto(r2, &(0x7f00000001c0)={&(0x7f0000000400)="ad808e1a862146420e5cb075a06206c78ca1954f9249efdcb7a7747962cf88c98aaf29063336c097333ee3028eef094f62f2edc4bdff93bcf4518cea402bfd006f037b82e5ef0b8976d1a0397964ac96fe368dbddc67550b65ce996e1dbd25f2c005e2c307a42998cf50961e02a8a9fe7c65b3a41d9f0524c95488e279a78584f5ed62b1241ac47f021908ea7be13353f8f9191f98db23880adbc62d3534603c3b4f39c9e1f1f96ebbddecef0973fc2b53d401241879412d91ba56"}, 0x2000000003, 0xe, 0x8) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto_UI_SET_RELBIT(r5, 0x40045566, &(0x7f0000000040)=0x7fffffff) sendmsg$auto_IPVS_CMD_SET_DEST(r4, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20048000) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) 4.40843534s ago: executing program 3 (id=284): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() fanotify_init$auto(0x5, 0x0) write$auto(0x3, 0x0, 0x100082) msgctl$auto_IPC_RMID(0xb, 0x0, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x3ffc000, 0x97, 0xffffffff, 0x9}, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x65, 0x7fffffff, 0x0, 0x80000000, 0x39ea, 0x8, 0xd, 0xc, 0x3, @raw=0xd7, @inferred=r1}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000180)={{0x10000004, 0xee00, 0xee00, 0x2, 0x28, 0x1, 0x4}, &(0x7f0000000100)=0x14, &(0x7f0000000140)=0x2, 0x4, 0x3062, 0x8000000092, 0x2, 0x3, 0x8, 0x0, 0xf3, @inferred=r1, @raw=0x9}) shmctl$auto_IPC_STAT(0xfe, 0x2, &(0x7f0000000440)={{0x2, r2, r3, 0xffffff7f, 0x2, 0x6, 0x4}, 0x5, 0x7, 0x100, 0x10, @inferred=r1, @inferred=r1, 0x8000, 0x0, &(0x7f0000000280)="9b30bd5743e8373adfa57ea7e5171cd1f0c2bae96838c8099d518a6e8b64cf5e45aa6d40c511aaae61ef0f29184904d5c80d58cca742e734df79effe1cf34602da85d1fa3d33ee56540c1111fe9d49bf232b617de2a032a00bf1a44b5b7dbb042b70e8abbc2213b57134dbb5f5af911fdc615e0a954635a917f9f55d2caf9f0d615b20fac2b936fc150e8292f7b0f78298983d65f793d2afb538958e033d401d99aae0c57840cf22fe8742cc2cf869e60076440b71264f530f87aaf7258f3e90d457365b127a21f5dcbe26ef2bc08184e0d22d5c7dabcc43420ff2f5f2a5a018b400ad9dad6954b46ac61d942ef79b80f7438eca97963d", &(0x7f0000000380)="f814d5a33417dd250616baa4f2c821325e78c58476407265f89cd2fdd6f1917b25f9e4567e009f8ced5551f2b235ef9151f6a6bb0779e04178d01e72efdf9ed1ff1ae6b6330f46bf718c9941156d32e1e6ce9aac09f6b6e80110ec84642da59e269338ebc17ad597f36498747883aab087cd57d69320d3070d7232b030cc463017eae6883d9f07718f9cd68ca961e8a1846d84b736f1845441098e3a52390d148f9370b764c59929dd7165f118ce108de9a0e7ec3760c40a0f572b"}) process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000200), {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(0x0, 0xffffffffffffffde) sendmsg$auto_NL80211_CMD_SET_COALESCE(r0, 0x0, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) symlink$auto(&(0x7f00000020c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='./file0\x00') utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r5, 0x0, 0x1ff) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) socketcall$auto(0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121702, 0x0) unshare$auto(0x40000080) select$auto(0x7, 0x0, &(0x7f0000000200)={[0x9, 0x8, 0x3, 0x2, 0x3, 0x1000000009, 0x9, 0xff, 0x3, 0xffffffffffffffff, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x3, 0x9]}, 0x0, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000540), r0) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r4, 0x0, 0x0) 4.243269722s ago: executing program 1 (id=285): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x0, 0x1, 0x4bc4006d) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40000000000eb1, r0, 0x8100) write$auto(0xffffffffffffffff, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\x00_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x15\xdb\nv\xf5\xff\xd5\x80\xbaC\x962G\x01\x81\xa6,2\x1a\xed\x86m\xa5\xe7\x0e\x1c\xed\x19\x87\xe9\xbc\x1f?\x12+\x95\x83[9\xf0\x89\x8fc\x01\xcc,\x00\x15.\xd2Yv@\xe7@6S\xa30S\xcfo\x8aB\xaem\xfa\x13_\xec\x90\xac\x17\x96\xf6\xe6(\xac\x91\xa5\xd7\xaf\x8c#\xa4\x87\x04', 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/snmp\x00', 0x40, 0x0) pread64$auto(r4, 0x0, 0x80000000, 0x9fffffffd) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_timedsend$auto(r2, 0x0, 0x6e, 0x80000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x4d) r5 = socket(0x2, 0x3, 0x1) setsockopt$auto(r5, 0xff, 0x1, 0x0, 0x444) 3.392507193s ago: executing program 0 (id=286): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa) r0 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0x65, 0x7, 0x0, 0x0) 3.239374908s ago: executing program 3 (id=287): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) prctl$auto(0x0, 0x2, 0xffffffffffffffff, 0x6, 0x9) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x10000000000000}, 0xfffffffd}, 0x100003, 0x0) getpid() openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/tty34\x00', 0x800, 0x0) (async, rerun: 64) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) (rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) close_range$auto(0x2, r1, 0x0) (async, rerun: 32) r3 = socket(0x1a, 0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) read$auto(r4, &(0x7f0000000000)='\x00', 0x91e2) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x6, 0xc) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77eeb07c, 0x0) (async, rerun: 32) fanotify_init$auto(0x65, 0x2) (async) socket(0x22, 0xa, 0x4) (async) socket(0xa, 0x5, 0x2) (async, rerun: 32) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) (rerun: 32) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x20000, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRESDEC=r6, @ANYRES64=r7, @ANYRES8=r7, @ANYRES16=r6, @ANYRESDEC=r0, @ANYRES16], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4008850) write$auto(r3, &(0x7f0000000180)='6]\xe6\xe4\n\'\xdc\xd3t\xb1\b\xd4W\xe7N\xf6\xe1\x8f\x14', 0xfdef) (async, rerun: 64) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) (rerun: 64) 3.2390263s ago: executing program 2 (id=288): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000100)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kGt\x94\xd5\xbd\x9e \xe0\x81}\xa2\xac\x0fIk\xa8\xe2p\x930/\xd9\xc4&\xf3\xff6\xbc\xf3\xac\xfeq\xb8\x0f\x05f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r3 = socket(0x1d, 0x5, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) r6 = open_by_handle_at$auto(r5, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r6, r5, 0x0, 0x2) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x3fe, 0x3, 0x7d, 0x3, 0x5, 0x5, 0xffffffffffffffff, [], {0x0, 0x10, 0x6, 0x6, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x4, 0x80000001, 0x8, 0x6b, 0x5, 0x0, 0xfffffffa, 0xb0}}) 2.397377324s ago: executing program 1 (id=290): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x2841, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000000400)={0x0, 0x40}, 0x6) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f00000001c0)={0x0, 0x8, 0x80}) 2.011108296s ago: executing program 3 (id=291): r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x2000, 0x0) mmap$auto(0x2, 0x200009, 0x2, 0x48eb1, r0, 0x300000000000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0xffffff4b) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x5) io_uring_setup$auto(0x1, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) 1.420970767s ago: executing program 2 (id=292): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x5521, 0xffffffffffffffff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r2, 0x2400000, 0xffffffffffffffff) futex$auto(0x0, 0x4f549, 0xc, 0x0, 0x0, 0x404) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) socket(0x18, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r3, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) ioctl$auto_FS_IOC_SETFLAGS2(r3, 0x40086602, &(0x7f00000000c0)) mprotect$auto(0x0, 0x8000000000000001, 0x8) setsockopt$auto_SO_ATTACH_BPF(r1, 0x0, 0x32, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x5) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) prctl$auto(0x4, 0x1, 0x0, 0x9, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x42, 0x942, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x2000003, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, [0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x47, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000002, 0x9, 0x0, 0xffffffffffffffff, 0x10, 0x4, 0x2, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4000]}, 0x1fe, 0x82) ioctl$auto_TCSBRK2(0xffffffffffffffff, 0x5409, 0x0) 1.310812302s ago: executing program 1 (id=293): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) (async) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x801, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (async) sysfs$auto(0x2, 0x10000000000002d, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40602, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x4fc}, 0x6, 0x8, 0x5) (async) read$auto(0x3, 0x0, 0x8080) (async) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf250f00000008001e00607b0000080015000004000008001d0006000000aa0019007f39d0ae6553e5d715622acffe5367a30c7aea12c70f38d86d210455f2b600368df60357e9ca0a92cb7b5c6937ad4a5623ba5c206a375511b0372228b14fcb1ac1b985c41cd0bc82546c6540dcafbd4ed94241802e4e47a90d4d633f4eada5f864658c72f0c836d74ee6426f29a21c08b41b7ce1ae8d1912601819a99b09bff8ebaef01b0ed6aa68bb959251aa3231a8ae890921909aca1a6d7766afab28e4f1236155716ec100000800030001000080"], 0xe0}}, 0x810) (async) close_range$auto(0x2, 0xa, 0x0) (async) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@siginfo_0_0={0x7bbe, 0x10, 0xd, @_sigpoll={0x8, r2}}}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x36b2}, {0x7, 0x19}, 0x9, 0x6e2f, 0x0, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0xfffffffffffffffc, 0x4}) set_tid_address$auto(&(0x7f0000000500)=0x5) getpgid$auto(0x0) (async) socket(0x2, 0x801, 0x106) 1.035500647s ago: executing program 1 (id=294): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) shmctl$auto_IPC_RMID(0x2c, 0x0, 0x0) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000008", @ANYBLOB="08002abd7000fddbdf25250000000800b700fbffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x40800) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) 505.229792ms ago: executing program 1 (id=295): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) (async, rerun: 32) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 32) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer2\x00', 0x40000, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(r3, 0x801c581f, 0xffffffffffffffff) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) mlockall$auto(0x800000000000005) (async, rerun: 32) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) (rerun: 32) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) (async) mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 277.837752ms ago: executing program 3 (id=296): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getuid() sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000020c0)=""/4093, 0xffd) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) (async) mmap$auto(0x0, 0xaef, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0302, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) r2 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x1, 0x0) writev$auto(r2, &(0x7f0000000bc0)={0x0, 0x81}, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) (async) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r3, 0x6, 0x0, &(0x7f0000000840)="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", 0x2) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b50", 0xfdef) (async) ioctl$auto(0x3, 0x4008ae61, 0xffffffffffffffff) (async) madvise$auto(0x0, 0x454, 0x9) 48.26329ms ago: executing program 0 (id=297): unshare$auto(0x40000080) gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b66, 0x1) 0s ago: executing program 2 (id=298): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, r0, 0x8000) uname$auto(0x0) setsockopt$auto(r0, 0x6, 0x84, 0x0, 0x0) shutdown$auto(0x200000003, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x42, 0x800000001, 0x0, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f00000000c0)={0x2eae, 0x4, 0xfffffffffffffffc, 0x3, 0x100, 0xffffffffffffffff}) prctl$auto_PR_SET_MM_END_CODE(0xcf, 0x2, r3, 0x92, 0x0) unshare$auto(0x40000080) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x80000, 0x0) mmap$auto(0x0, 0x8, 0xe0, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x106) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, r5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto_SO_RCVTIMEO_OLD(r4, 0x3, 0x14, &(0x7f0000000040)=']@\x00', 0x10) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x54) ioctl$auto_FIONCLEX(r4, 0x5450, 0x81) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 82.137143][ T5811] cgroup: Unknown subsys name 'net' [ 82.228909][ T5811] cgroup: Unknown subsys name 'cpuset' [ 82.237983][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.034127][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.421179][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.428714][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.429707][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.446005][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.446008][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.446450][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.453806][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.461486][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.468268][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.475292][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.481757][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.488819][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.508985][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.511109][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.517066][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.524099][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.531958][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.538914][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.545217][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.553454][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.122201][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 87.364732][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 87.384361][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 87.441360][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 87.577462][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.584963][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.592156][ T5823] bridge_slave_0: entered allmulticast mode [ 87.599645][ T5823] bridge_slave_0: entered promiscuous mode [ 87.638612][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.646051][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.653368][ T5823] bridge_slave_1: entered allmulticast mode [ 87.660719][ T5823] bridge_slave_1: entered promiscuous mode [ 87.679893][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.687092][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.694246][ T5822] bridge_slave_0: entered allmulticast mode [ 87.701894][ T5822] bridge_slave_0: entered promiscuous mode [ 87.740113][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.747319][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.754472][ T5822] bridge_slave_1: entered allmulticast mode [ 87.762005][ T5822] bridge_slave_1: entered promiscuous mode [ 87.803245][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.810517][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.817807][ T5825] bridge_slave_0: entered allmulticast mode [ 87.825394][ T5825] bridge_slave_0: entered promiscuous mode [ 87.845965][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.866330][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.873483][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.880803][ T5825] bridge_slave_1: entered allmulticast mode [ 87.888365][ T5825] bridge_slave_1: entered promiscuous mode [ 87.908253][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.927045][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.934186][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.941665][ T5824] bridge_slave_0: entered allmulticast mode [ 87.949122][ T5824] bridge_slave_0: entered promiscuous mode [ 87.969495][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.989959][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.997521][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.004650][ T5824] bridge_slave_1: entered allmulticast mode [ 88.013017][ T5824] bridge_slave_1: entered promiscuous mode [ 88.033396][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.055057][ T5823] team0: Port device team_slave_0 added [ 88.076407][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.097997][ T5823] team0: Port device team_slave_1 added [ 88.115615][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.126520][ T5822] team0: Port device team_slave_0 added [ 88.144949][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.167674][ T5822] team0: Port device team_slave_1 added [ 88.175716][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.227628][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.234616][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.261026][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.274466][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.281619][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.307565][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.321176][ T5825] team0: Port device team_slave_0 added [ 88.329180][ T5825] team0: Port device team_slave_1 added [ 88.369055][ T5824] team0: Port device team_slave_0 added [ 88.388796][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.396122][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.422497][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.435822][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.442801][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.469199][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.490789][ T5824] team0: Port device team_slave_1 added [ 88.552429][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.559597][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.565972][ T51] Bluetooth: hci1: command tx timeout [ 88.586163][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.608663][ T5823] hsr_slave_0: entered promiscuous mode [ 88.615633][ T5823] hsr_slave_1: entered promiscuous mode [ 88.634926][ T51] Bluetooth: hci2: command tx timeout [ 88.634940][ T5829] Bluetooth: hci0: command tx timeout [ 88.635211][ T5829] Bluetooth: hci3: command tx timeout [ 88.644238][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.658798][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.684863][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.696902][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.703884][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.730436][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.752742][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.759808][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.786050][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.822114][ T5822] hsr_slave_0: entered promiscuous mode [ 88.828424][ T5822] hsr_slave_1: entered promiscuous mode [ 88.834629][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 88.840485][ T5822] Cannot create hsr debugfs directory [ 88.940502][ T5824] hsr_slave_0: entered promiscuous mode [ 88.947142][ T5824] hsr_slave_1: entered promiscuous mode [ 88.953374][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 88.959230][ T5824] Cannot create hsr debugfs directory [ 88.991895][ T5825] hsr_slave_0: entered promiscuous mode [ 88.998908][ T5825] hsr_slave_1: entered promiscuous mode [ 89.005137][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 89.011010][ T5825] Cannot create hsr debugfs directory [ 89.450281][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.470840][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.496596][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.511176][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.522578][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.546815][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.570176][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.580627][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.657229][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.677052][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.688213][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.709312][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.803135][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.822072][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.844285][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.862931][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.946773][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.968757][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.012716][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.039654][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.049566][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.056832][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.087216][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.094372][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.112839][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.120323][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.143745][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.150932][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.219856][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.332902][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.354314][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.411078][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.418335][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.438475][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.462181][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.469426][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.507674][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.515044][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.562341][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.569608][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.639065][ T5833] Bluetooth: hci1: command tx timeout [ 90.719537][ T5833] Bluetooth: hci3: command tx timeout [ 90.726618][ T5833] Bluetooth: hci2: command tx timeout [ 90.732055][ T5833] Bluetooth: hci0: command tx timeout [ 90.804667][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.841661][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.001480][ T5822] veth0_vlan: entered promiscuous mode [ 91.064580][ T5822] veth1_vlan: entered promiscuous mode [ 91.119509][ T5823] veth0_vlan: entered promiscuous mode [ 91.190756][ T5823] veth1_vlan: entered promiscuous mode [ 91.203019][ T5822] veth0_macvtap: entered promiscuous mode [ 91.240010][ T5822] veth1_macvtap: entered promiscuous mode [ 91.287079][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.298627][ T5823] veth0_macvtap: entered promiscuous mode [ 91.314403][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.329880][ T5823] veth1_macvtap: entered promiscuous mode [ 91.342133][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.362463][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.385823][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.420776][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.433355][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.446859][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.481494][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.491316][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.500974][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.531158][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.545634][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.565411][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.652126][ T5825] veth0_vlan: entered promiscuous mode [ 91.666962][ T5824] veth0_vlan: entered promiscuous mode [ 91.688212][ T5825] veth1_vlan: entered promiscuous mode [ 91.715167][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.723159][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.727317][ T5824] veth1_vlan: entered promiscuous mode [ 91.772935][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.786025][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.849939][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.852831][ T5824] veth0_macvtap: entered promiscuous mode [ 91.858931][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.870004][ T5824] veth1_macvtap: entered promiscuous mode [ 91.885527][ T5825] veth0_macvtap: entered promiscuous mode [ 91.901962][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.911549][ T5825] veth1_macvtap: entered promiscuous mode [ 91.921693][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.959330][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.989743][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.004459][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.032592][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.048641][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.068409][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.080087][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.091058][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.100639][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.125906][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.134692][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.148207][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.157853][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.175973][ T1217] cfg80211: failed to load regulatory.db [ 92.329233][ T5919] random: crng reseeded on system resumption [ 92.418391][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.431752][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.493323][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.502289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.588473][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.605477][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.645473][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.653486][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.725109][ T5833] Bluetooth: hci1: command tx timeout [ 92.795721][ T5833] Bluetooth: hci2: command tx timeout [ 92.804886][ T51] Bluetooth: hci3: command tx timeout [ 92.810423][ T5833] Bluetooth: hci0: command tx timeout [ 93.003857][ T5928] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 93.081710][ T5930] random: crng reseeded on system resumption [ 93.099791][ T5928] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.140967][ T5928] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 93.519451][ T5940] block nbd0: NBD_DISCONNECT [ 93.701637][ T5945] Console: switching to colour VGA+ 80x25 [ 93.941867][ T5943] NFSD: Failed to start, no listeners configured. [ 94.475946][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 94.795626][ T5833] Bluetooth: hci1: command tx timeout [ 94.875064][ T5833] Bluetooth: hci0: command tx timeout [ 94.884872][ T5833] Bluetooth: hci3: command tx timeout [ 94.885104][ T51] Bluetooth: hci2: command tx timeout [ 97.279469][ T5992] FAULT_INJECTION: forcing a failure. [ 97.279469][ T5992] name fail_futex, interval 1, probability 0, space 0, times 1 [ 97.315893][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 97.315936][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 97.315954][ T5992] Call Trace: [ 97.315964][ T5992] [ 97.315975][ T5992] dump_stack_lvl+0x100/0x190 [ 97.316029][ T5992] should_fail_ex.cold+0x5/0xa [ 97.316066][ T5992] get_futex_key+0x1d2/0x1620 [ 97.316111][ T5992] ? __pfx_get_futex_key+0x10/0x10 [ 97.316154][ T5992] ? reacquire_held_locks+0xce/0x1e0 [ 97.316195][ T5992] ? release_sock+0x21/0x220 [ 97.316245][ T5992] futex_wake+0xea/0x530 [ 97.316289][ T5992] ? tipc_setsockopt+0x232/0xe30 [ 97.316326][ T5992] ? tipc_setsockopt+0x232/0xe30 [ 97.316359][ T5992] ? __pfx_futex_wake+0x10/0x10 [ 97.316414][ T5992] ? __local_bh_enable_ip+0x9e/0x120 [ 97.316451][ T5992] ? __local_bh_enable_ip+0x9e/0x120 [ 97.316485][ T5992] ? tipc_setsockopt+0x412/0xe30 [ 97.316528][ T5992] do_futex+0x32b/0x350 [ 97.316570][ T5992] ? __pfx_do_futex+0x10/0x10 [ 97.316608][ T5992] ? do_sock_setsockopt+0x101/0x1d0 [ 97.316642][ T5992] ? rcu_is_watching+0x12/0xc0 [ 97.316685][ T5992] ? do_sock_setsockopt+0x101/0x1d0 [ 97.316716][ T5992] ? kfree+0x2ec/0x6b0 [ 97.316755][ T5992] __x64_sys_futex+0x34f/0x4d0 [ 97.316793][ T5992] ? __pfx___x64_sys_futex+0x10/0x10 [ 97.316829][ T5992] ? __sys_setsockopt+0x139/0x190 [ 97.316879][ T5992] do_syscall_64+0x106/0xf80 [ 97.316907][ T5992] ? clear_bhb_loop+0x40/0x90 [ 97.316943][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.316972][ T5992] RIP: 0033:0x7f461159c819 [ 97.316997][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.317022][ T5992] RSP: 002b:00007f46123d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.317049][ T5992] RAX: ffffffffffffffda RBX: 00007f4611815fa8 RCX: 00007f461159c819 [ 97.317067][ T5992] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4611815fac [ 97.317084][ T5992] RBP: 00007f4611815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 97.317101][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.317118][ T5992] R13: 00007f4611816038 R14: 00007ffd32cbb2f0 R15: 00007ffd32cbb3d8 [ 97.317158][ T5992] [ 98.990212][ T6006] process 'syz.0.20' launched '/dev/fd/6' with NULL argv: empty string added [ 99.573067][ T6017] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.722781][ T6021] HfR: entered promiscuous mode [ 99.774745][ T6010] netlink: 330 bytes leftover after parsing attributes in process `syz.2.23'. [ 99.976599][ T6010] Zero length message leads to an empty skb [ 99.977821][ T6021] openvswitch: HfR: Dropping previously announced user features syzkaller syzkaller login: [ 100.978110][ T30] audit: type=1800 audit(1775234589.715:2): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.28" name="members" dev="configfs" ino=7816 res=0 errno=0 [ 101.913519][ T6064] openvswitch: HfR: Dropping previously announced user features [ 101.954489][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 102.067779][ T6064] openvswitch: HfR: Dropping previously announced user features [ 102.383674][ T6046] kexec: Could not allocate control_code_buffer [ 102.637143][ T6076] HfR: entered promiscuous mode [ 102.691722][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 102.744431][ T6079] random: crng reseeded on system resumption [ 102.755749][ T6076] openvswitch: HfR: Dropping previously announced user features [ 103.022504][ T6084] random: crng reseeded on system resumption [ 103.322258][ T6086] Console: switching to colour frame buffer device 128x48 [ 103.329809][ T6082] FAULT_INJECTION: forcing a failure. [ 103.329809][ T6082] name failslab, interval 1, probability 0, space 0, times 1 [ 103.329854][ T6082] CPU: 0 UID: 0 PID: 6082 Comm: syz.3.37 Not tainted syzkaller #0 PREEMPT(full) [ 103.329889][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 103.329907][ T6082] Call Trace: [ 103.329917][ T6082] [ 103.329928][ T6082] dump_stack_lvl+0x100/0x190 [ 103.329979][ T6082] should_fail_ex.cold+0x5/0xa [ 103.330018][ T6082] should_failslab+0xc2/0x120 [ 103.330053][ T6082] __kmalloc_cache_noprof+0x7a/0x6f0 [ 103.330096][ T6082] ? __do_sys_timerfd_create+0x1c9/0x3f0 [ 103.330147][ T6082] __do_sys_timerfd_create+0x1c9/0x3f0 [ 103.330184][ T6082] ? do_syscall_64+0x95/0xf80 [ 103.330216][ T6082] do_syscall_64+0x106/0xf80 [ 103.330243][ T6082] ? clear_bhb_loop+0x40/0x90 [ 103.330282][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.330314][ T6082] RIP: 0033:0x7efdb339c819 [ 103.330339][ T6082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.330368][ T6082] RSP: 002b:00007efdb419f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 103.330398][ T6082] RAX: ffffffffffffffda RBX: 00007efdb3615fa0 RCX: 00007efdb339c819 [ 103.330427][ T6082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 103.330444][ T6082] RBP: 00007efdb3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 103.330461][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.330477][ T6082] R13: 00007efdb3616038 R14: 00007efdb3615fa0 R15: 00007ffd647a1d68 [ 103.330516][ T6082] [ 104.265789][ T6104] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.948877][ T6121] FAULT_INJECTION: forcing a failure. [ 104.948877][ T6121] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.025215][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT(full) [ 105.025256][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.025274][ T6121] Call Trace: [ 105.025283][ T6121] [ 105.025294][ T6121] dump_stack_lvl+0x100/0x190 [ 105.025343][ T6121] should_fail_ex.cold+0x5/0xa [ 105.025379][ T6121] _copy_from_user+0x2e/0xd0 [ 105.025417][ T6121] tipc_setsockopt+0x8ee/0xe30 [ 105.025454][ T6121] ? __pfx_tipc_setsockopt+0x10/0x10 [ 105.025501][ T6121] ? aa_sock_opt_perm+0xfe/0x1b0 [ 105.025546][ T6121] ? __pfx_tipc_setsockopt+0x10/0x10 [ 105.025593][ T6121] do_sock_setsockopt+0xf3/0x1d0 [ 105.025633][ T6121] __sys_setsockopt+0x119/0x190 [ 105.025682][ T6121] __x64_sys_setsockopt+0xbd/0x160 [ 105.025725][ T6121] ? do_syscall_64+0x95/0xf80 [ 105.025754][ T6121] ? lockdep_hardirqs_on+0x78/0x100 [ 105.025784][ T6121] do_syscall_64+0x106/0xf80 [ 105.025812][ T6121] ? clear_bhb_loop+0x40/0x90 [ 105.025848][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.025877][ T6121] RIP: 0033:0x7fa3f699c819 [ 105.025903][ T6121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.025929][ T6121] RSP: 002b:00007fa3f7778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.025957][ T6121] RAX: ffffffffffffffda RBX: 00007fa3f6c15fa0 RCX: 00007fa3f699c819 [ 105.025975][ T6121] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 105.025992][ T6121] RBP: 00007fa3f6a32c91 R08: 0000000000000014 R09: 0000000000000000 [ 105.026008][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.026025][ T6121] R13: 00007fa3f6c16038 R14: 00007fa3f6c15fa0 R15: 00007ffc1d3de968 [ 105.026064][ T6121] [ 105.459453][ T6129] FAULT_INJECTION: forcing a failure. [ 105.459453][ T6129] name fail_futex, interval 1, probability 0, space 0, times 0 [ 105.472644][ T6129] CPU: 1 UID: 0 PID: 6129 Comm: syz.3.47 Not tainted syzkaller #0 PREEMPT(full) [ 105.472681][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 105.472696][ T6129] Call Trace: [ 105.472707][ T6129] [ 105.472718][ T6129] dump_stack_lvl+0x100/0x190 [ 105.472756][ T6129] should_fail_ex.cold+0x5/0xa [ 105.472779][ T6129] get_futex_key+0x1d2/0x1620 [ 105.472804][ T6129] ? __pfx_get_futex_key+0x10/0x10 [ 105.472829][ T6129] ? reacquire_held_locks+0xce/0x1e0 [ 105.472853][ T6129] ? release_sock+0x21/0x220 [ 105.472883][ T6129] futex_wake+0xea/0x530 [ 105.472909][ T6129] ? tipc_setsockopt+0x232/0xe30 [ 105.472930][ T6129] ? tipc_setsockopt+0x232/0xe30 [ 105.472950][ T6129] ? __pfx_futex_wake+0x10/0x10 [ 105.472977][ T6129] ? __local_bh_enable_ip+0x9e/0x120 [ 105.472999][ T6129] ? __local_bh_enable_ip+0x9e/0x120 [ 105.473019][ T6129] ? tipc_setsockopt+0x412/0xe30 [ 105.473043][ T6129] do_futex+0x32b/0x350 [ 105.473067][ T6129] ? __pfx_do_futex+0x10/0x10 [ 105.473089][ T6129] ? do_sock_setsockopt+0x101/0x1d0 [ 105.473109][ T6129] ? rcu_is_watching+0x12/0xc0 [ 105.473138][ T6129] ? do_sock_setsockopt+0x101/0x1d0 [ 105.473156][ T6129] ? kfree+0x2ec/0x6b0 [ 105.473183][ T6129] __x64_sys_futex+0x34f/0x4d0 [ 105.473210][ T6129] ? __pfx___x64_sys_futex+0x10/0x10 [ 105.473234][ T6129] ? __sys_setsockopt+0x139/0x190 [ 105.473267][ T6129] do_syscall_64+0x106/0xf80 [ 105.473284][ T6129] ? clear_bhb_loop+0x40/0x90 [ 105.473305][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.473324][ T6129] RIP: 0033:0x7efdb339c819 [ 105.473352][ T6129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.473370][ T6129] RSP: 002b:00007efdb419f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.473388][ T6129] RAX: ffffffffffffffda RBX: 00007efdb3615fa8 RCX: 00007efdb339c819 [ 105.473399][ T6129] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007efdb3615fac [ 105.473410][ T6129] RBP: 00007efdb3615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 105.473421][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.473431][ T6129] R13: 00007efdb3616038 R14: 00007ffd647a1c80 R15: 00007ffd647a1d68 [ 105.473454][ T6129] [ 106.129338][ T6134] random: crng reseeded on system resumption [ 106.285023][ T51] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 106.285066][ T51] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 106.285196][ T6137] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 106.340699][ T6135] Console: switching to colour VGA+ 80x25 [ 106.441456][ T6139] FAULT_INJECTION: forcing a failure. [ 106.441456][ T6139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.457463][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.3.51 Not tainted syzkaller #0 PREEMPT(full) [ 106.457504][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 106.457520][ T6139] Call Trace: [ 106.457529][ T6139] [ 106.457540][ T6139] dump_stack_lvl+0x100/0x190 [ 106.457587][ T6139] should_fail_ex.cold+0x5/0xa [ 106.457620][ T6139] _copy_from_user+0x2e/0xd0 [ 106.457658][ T6139] tipc_setsockopt+0x8ee/0xe30 [ 106.457695][ T6139] ? __pfx_tipc_setsockopt+0x10/0x10 [ 106.457737][ T6139] ? aa_sock_opt_perm+0xfe/0x1b0 [ 106.457782][ T6139] ? __pfx_tipc_setsockopt+0x10/0x10 [ 106.457815][ T6139] do_sock_setsockopt+0xf3/0x1d0 [ 106.457849][ T6139] __sys_setsockopt+0x119/0x190 [ 106.457894][ T6139] __x64_sys_setsockopt+0xbd/0x160 [ 106.457931][ T6139] ? do_syscall_64+0x95/0xf80 [ 106.457958][ T6139] ? lockdep_hardirqs_on+0x78/0x100 [ 106.457984][ T6139] do_syscall_64+0x106/0xf80 [ 106.458009][ T6139] ? clear_bhb_loop+0x40/0x90 [ 106.458041][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.458068][ T6139] RIP: 0033:0x7efdb339c819 [ 106.458091][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.458117][ T6139] RSP: 002b:00007efdb419f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.458144][ T6139] RAX: ffffffffffffffda RBX: 00007efdb3615fa0 RCX: 00007efdb339c819 [ 106.458162][ T6139] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 106.458177][ T6139] RBP: 00007efdb3432c91 R08: 0000000000000014 R09: 0000000000000000 [ 106.458192][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.458208][ T6139] R13: 00007efdb3616038 R14: 00007efdb3615fa0 R15: 00007ffd647a1d68 [ 106.458243][ T6139] [ 108.737127][ T6171] random: crng reseeded on system resumption [ 109.314560][ T6176] FAULT_INJECTION: forcing a failure. [ 109.314560][ T6176] name failslab, interval 1, probability 0, space 0, times 0 [ 109.397725][ T6176] CPU: 0 UID: 0 PID: 6176 Comm: syz.2.58 Not tainted syzkaller #0 PREEMPT(full) [ 109.397765][ T6176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.397781][ T6176] Call Trace: [ 109.397791][ T6176] [ 109.397801][ T6176] dump_stack_lvl+0x100/0x190 [ 109.397850][ T6176] should_fail_ex.cold+0x5/0xa [ 109.397884][ T6176] should_failslab+0xc2/0x120 [ 109.397916][ T6176] __kmalloc_cache_noprof+0x7a/0x6f0 [ 109.397954][ T6176] ? tipc_group_create+0xbc/0x660 [ 109.398006][ T6176] tipc_group_create+0xbc/0x660 [ 109.398054][ T6176] tipc_setsockopt+0x611/0xe30 [ 109.398089][ T6176] ? __pfx_tipc_setsockopt+0x10/0x10 [ 109.398138][ T6176] ? __pfx_tipc_setsockopt+0x10/0x10 [ 109.398172][ T6176] do_sock_setsockopt+0xf3/0x1d0 [ 109.398208][ T6176] __sys_setsockopt+0x119/0x190 [ 109.398255][ T6176] __x64_sys_setsockopt+0xbd/0x160 [ 109.398302][ T6176] ? do_syscall_64+0x95/0xf80 [ 109.398329][ T6176] ? lockdep_hardirqs_on+0x78/0x100 [ 109.398356][ T6176] do_syscall_64+0x106/0xf80 [ 109.398382][ T6176] ? clear_bhb_loop+0x40/0x90 [ 109.398416][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.398445][ T6176] RIP: 0033:0x7fcff419c819 [ 109.398469][ T6176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.398495][ T6176] RSP: 002b:00007fcff5086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.398522][ T6176] RAX: ffffffffffffffda RBX: 00007fcff4415fa0 RCX: 00007fcff419c819 [ 109.398540][ T6176] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 109.398556][ T6176] RBP: 00007fcff4232c91 R08: 0000000000000014 R09: 0000000000000000 [ 109.398573][ T6176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.398589][ T6176] R13: 00007fcff4416038 R14: 00007fcff4415fa0 R15: 00007ffd98611ed8 [ 109.398628][ T6176] [ 110.449259][ T6190] random: crng reseeded on system resumption [ 111.502504][ T6201] HfR: entered promiscuous mode [ 111.857599][ T6210] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.887812][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.941882][ T6213] random: crng reseeded on system resumption [ 112.366767][ T6215] Console: switching to colour frame buffer device 128x48 [ 112.807681][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 113.114241][ T6224] ima: policy update failed [ 113.175736][ T30] audit: type=1802 audit(1775234601.895:3): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.69" res=0 errno=0 [ 114.691722][ T6239] random: crng reseeded on system resumption [ 114.824013][ T6239] Console: switching to colour VGA+ 80x25 [ 115.286950][ T6251] HfR: entered promiscuous mode [ 115.325309][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 115.446215][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 115.682380][ T6251] openvswitch: HfR: Dropping previously announced user features [ 115.965725][ T6257] openvswitch: HfR: Dropping previously announced user features [ 116.025150][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 116.046787][ T6257] openvswitch: HfR: Dropping previously announced user features [ 116.361185][ T6266] random: crng reseeded on system resumption [ 117.121737][ T6283] FAULT_INJECTION: forcing a failure. [ 117.121737][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 117.137539][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.2.81 Not tainted syzkaller #0 PREEMPT(full) [ 117.137583][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 117.137601][ T6283] Call Trace: [ 117.137611][ T6283] [ 117.137623][ T6283] dump_stack_lvl+0x100/0x190 [ 117.137677][ T6283] should_fail_ex.cold+0x5/0xa [ 117.137715][ T6283] should_failslab+0xc2/0x120 [ 117.137751][ T6283] __kmalloc_cache_noprof+0x7a/0x6f0 [ 117.137793][ T6283] ? proc_self_get_link+0x189/0x1f0 [ 117.137848][ T6283] proc_self_get_link+0x189/0x1f0 [ 117.137897][ T6283] pick_link+0xac2/0x13c0 [ 117.137943][ T6283] ? __pfx_proc_self_get_link+0x10/0x10 [ 117.137995][ T6283] step_into_slowpath+0x9ba/0xf90 [ 117.138051][ T6283] ? __pfx_step_into_slowpath+0x10/0x10 [ 117.138107][ T6283] ? lookup_fast+0x2da/0x600 [ 117.138155][ T6283] ? inode_permission+0x374/0x620 [ 117.138202][ T6283] link_path_walk+0xf28/0x1cc0 [ 117.138265][ T6283] path_openat+0x1be/0x31a0 [ 117.138306][ T6283] ? kasan_save_stack+0x3f/0x50 [ 117.138334][ T6283] ? kasan_save_stack+0x30/0x50 [ 117.138360][ T6283] ? kasan_save_track+0x14/0x30 [ 117.138388][ T6283] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 117.138446][ T6283] ? __pfx_path_openat+0x10/0x10 [ 117.138498][ T6283] do_file_open+0x20e/0x430 [ 117.138535][ T6283] ? __pfx_do_file_open+0x10/0x10 [ 117.138600][ T6283] ? alloc_fd+0x476/0x790 [ 117.138638][ T6283] ? do_getname+0x191/0x390 [ 117.138683][ T6283] do_sys_openat2+0x10d/0x1e0 [ 117.138725][ T6283] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.138783][ T6283] __x64_sys_openat+0x12d/0x210 [ 117.138828][ T6283] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.138887][ T6283] do_syscall_64+0x106/0xf80 [ 117.138918][ T6283] ? clear_bhb_loop+0x40/0x90 [ 117.138956][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.138988][ T6283] RIP: 0033:0x7fcff415d04e [ 117.139014][ T6283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.139042][ T6283] RSP: 002b:00007fcff5022ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.139071][ T6283] RAX: ffffffffffffffda RBX: 00007fcff50236c0 RCX: 00007fcff415d04e [ 117.139090][ T6283] RDX: 0000000000000002 RSI: 00007fcff5022f90 RDI: ffffffffffffff9c [ 117.139109][ T6283] RBP: 00007fcff4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 117.139126][ T6283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.139143][ T6283] R13: 00007fcff4416308 R14: 00007fcff4416270 R15: 00007ffd98611ed8 [ 117.139184][ T6283] [ 117.613559][ T6286] random: crng reseeded on system resumption [ 117.927664][ T6292] openvswitch: HfR: Dropping previously announced user features [ 118.079606][ T6290] Console: switching to colour frame buffer device 128x48 [ 118.091851][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 118.093536][ T6292] openvswitch: HfR: Dropping previously announced user features [ 121.691112][ T6374] Unable to find swap-space signature [ 124.717972][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 125.340128][ T6449] FAULT_INJECTION: forcing a failure. [ 125.340128][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 125.474945][ T6449] CPU: 0 UID: 0 PID: 6449 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 125.474987][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.475005][ T6449] Call Trace: [ 125.475015][ T6449] [ 125.475027][ T6449] dump_stack_lvl+0x100/0x190 [ 125.475079][ T6449] should_fail_ex.cold+0x5/0xa [ 125.475129][ T6449] should_failslab+0xc2/0x120 [ 125.475165][ T6449] __kmalloc_cache_noprof+0x7a/0x6f0 [ 125.475208][ T6449] ? tipc_sub_subscribe+0x15c/0x730 [ 125.475258][ T6449] ? find_held_lock+0x2b/0x80 [ 125.475297][ T6449] tipc_sub_subscribe+0x15c/0x730 [ 125.475352][ T6449] tipc_conn_rcv_sub+0x21e/0x3d0 [ 125.475403][ T6449] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 125.475454][ T6449] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 125.475505][ T6449] ? net_generic+0xea/0x2a0 [ 125.475561][ T6449] tipc_group_create+0x4ab/0x660 [ 125.475616][ T6449] tipc_setsockopt+0x611/0xe30 [ 125.475657][ T6449] ? __pfx_tipc_setsockopt+0x10/0x10 [ 125.475711][ T6449] ? __pfx_tipc_setsockopt+0x10/0x10 [ 125.475750][ T6449] do_sock_setsockopt+0xf3/0x1d0 [ 125.475792][ T6449] __sys_setsockopt+0x119/0x190 [ 125.475847][ T6449] __x64_sys_setsockopt+0xbd/0x160 [ 125.475892][ T6449] ? do_syscall_64+0x95/0xf80 [ 125.475923][ T6449] ? lockdep_hardirqs_on+0x78/0x100 [ 125.475954][ T6449] do_syscall_64+0x106/0xf80 [ 125.475982][ T6449] ? clear_bhb_loop+0x40/0x90 [ 125.476020][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.476053][ T6449] RIP: 0033:0x7fcff419c819 [ 125.476080][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.476118][ T6449] RSP: 002b:00007fcff5086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.476150][ T6449] RAX: ffffffffffffffda RBX: 00007fcff4415fa0 RCX: 00007fcff419c819 [ 125.476169][ T6449] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 125.476187][ T6449] RBP: 00007fcff4232c91 R08: 0000000000000014 R09: 0000000000000000 [ 125.476205][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.476223][ T6449] R13: 00007fcff4416038 R14: 00007fcff4415fa0 R15: 00007ffd98611ed8 [ 125.476264][ T6449] [ 125.476277][ T6449] tipc: Subscription rejected, no memory [ 125.698789][ T6456] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.779066][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 126.894447][ T6475] netlink: 330 bytes leftover after parsing attributes in process `syz.2.117'. [ 128.341496][ T6495] could not allocate digest TFM handle [ 128.367268][ T6507] overlayfs: missing 'lowerdir' [ 128.598418][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 130.606979][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 130.945335][ T51] Bluetooth: hci0: unexpected event 0x3e length: 358 > 260 [ 130.945375][ T51] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 132.046168][ T6582] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.426382][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 132.741311][ T6596] QAT: Stopping all acceleration devices. [ 133.123039][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.129872][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.484467][ T6631] FAULT_INJECTION: forcing a failure. [ 135.484467][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 135.505522][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.2.153 Not tainted syzkaller #0 PREEMPT(full) [ 135.505565][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.505583][ T6631] Call Trace: [ 135.505593][ T6631] [ 135.505604][ T6631] dump_stack_lvl+0x100/0x190 [ 135.505658][ T6631] should_fail_ex.cold+0x5/0xa [ 135.505695][ T6631] should_failslab+0xc2/0x120 [ 135.505730][ T6631] __kmalloc_cache_noprof+0x7a/0x6f0 [ 135.505771][ T6631] ? tipc_conn_alloc+0x48/0x590 [ 135.505812][ T6631] ? net_generic+0xea/0x2a0 [ 135.505853][ T6631] ? net_generic+0xea/0x2a0 [ 135.505901][ T6631] tipc_conn_alloc+0x48/0x590 [ 135.505947][ T6631] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 135.505997][ T6631] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 135.506057][ T6631] ? net_generic+0xea/0x2a0 [ 135.506112][ T6631] tipc_group_create+0x4ab/0x660 [ 135.506166][ T6631] tipc_setsockopt+0x611/0xe30 [ 135.506206][ T6631] ? __pfx_tipc_setsockopt+0x10/0x10 [ 135.506260][ T6631] ? __pfx_tipc_setsockopt+0x10/0x10 [ 135.506297][ T6631] do_sock_setsockopt+0xf3/0x1d0 [ 135.506337][ T6631] __sys_setsockopt+0x119/0x190 [ 135.506393][ T6631] __x64_sys_setsockopt+0xbd/0x160 [ 135.506437][ T6631] ? do_syscall_64+0x95/0xf80 [ 135.506466][ T6631] ? lockdep_hardirqs_on+0x78/0x100 [ 135.506497][ T6631] do_syscall_64+0x106/0xf80 [ 135.506525][ T6631] ? clear_bhb_loop+0x40/0x90 [ 135.506563][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.506595][ T6631] RIP: 0033:0x7fcff419c819 [ 135.506620][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.506648][ T6631] RSP: 002b:00007fcff5086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.506677][ T6631] RAX: ffffffffffffffda RBX: 00007fcff4415fa0 RCX: 00007fcff419c819 [ 135.506696][ T6631] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 135.506713][ T6631] RBP: 00007fcff4232c91 R08: 0000000000000014 R09: 0000000000000000 [ 135.506729][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.506745][ T6631] R13: 00007fcff4416038 R14: 00007fcff4415fa0 R15: 00007ffd98611ed8 [ 135.506786][ T6631] [ 136.971918][ T6652] netlink: 334 bytes leftover after parsing attributes in process `syz.2.158'. [ 138.641152][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 139.705739][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 140.948230][ T6699] netlink: 78 bytes leftover after parsing attributes in process `syz.2.170'. [ 141.060971][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 141.167531][ T6704] netlink: 342 bytes leftover after parsing attributes in process `syz.0.172'. [ 142.882024][ T6757] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 143.291775][ T6762] synth uevent: /devices/virtual/tty/ttyz1: unknown uevent action string [ 143.335024][ T6762] tty ttyz1: uevent: failed to send synthetic uevent: -22 [ 145.567059][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 146.476087][ T6820] FAULT_INJECTION: forcing a failure. [ 146.476087][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 146.489070][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.2.195 Not tainted syzkaller #0 PREEMPT(full) [ 146.489111][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.489129][ T6820] Call Trace: [ 146.489139][ T6820] [ 146.489150][ T6820] dump_stack_lvl+0x100/0x190 [ 146.489204][ T6820] should_fail_ex.cold+0x5/0xa [ 146.489241][ T6820] should_failslab+0xc2/0x120 [ 146.489276][ T6820] __kmalloc_cache_noprof+0x7a/0x6f0 [ 146.489319][ T6820] ? tipc_group_create_member+0x58/0x6a0 [ 146.489370][ T6820] ? do_raw_spin_lock+0x128/0x260 [ 146.489422][ T6820] tipc_group_create_member+0x58/0x6a0 [ 146.489477][ T6820] tipc_nametbl_build_group+0x26c/0x470 [ 146.489524][ T6820] tipc_setsockopt+0x7a4/0xe30 [ 146.489565][ T6820] ? __pfx_tipc_setsockopt+0x10/0x10 [ 146.489620][ T6820] ? __pfx_tipc_setsockopt+0x10/0x10 [ 146.489660][ T6820] do_sock_setsockopt+0xf3/0x1d0 [ 146.489702][ T6820] __sys_setsockopt+0x119/0x190 [ 146.489758][ T6820] __x64_sys_setsockopt+0xbd/0x160 [ 146.489803][ T6820] ? do_syscall_64+0x95/0xf80 [ 146.489833][ T6820] ? lockdep_hardirqs_on+0x78/0x100 [ 146.489863][ T6820] do_syscall_64+0x106/0xf80 [ 146.489892][ T6820] ? clear_bhb_loop+0x40/0x90 [ 146.489930][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.489961][ T6820] RIP: 0033:0x7fcff419c819 [ 146.490084][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.490114][ T6820] RSP: 002b:00007fcff5086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.490143][ T6820] RAX: ffffffffffffffda RBX: 00007fcff4415fa0 RCX: 00007fcff419c819 [ 146.490162][ T6820] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 146.490179][ T6820] RBP: 00007fcff4232c91 R08: 0000000000000014 R09: 0000000000000000 [ 146.490198][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.490215][ T6820] R13: 00007fcff4416038 R14: 00007fcff4415fa0 R15: 00007ffd98611ed8 [ 146.490254][ T6820] [ 148.374508][ T6858] netlink: 78 bytes leftover after parsing attributes in process `syz.1.203'. [ 148.526343][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 149.042647][ T51] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 149.042690][ T51] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 149.059845][ T6867] FAULT_INJECTION: forcing a failure. [ 149.059845][ T6867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.165353][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT(full) [ 149.165391][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 149.165406][ T6867] Call Trace: [ 149.165416][ T6867] [ 149.165427][ T6867] dump_stack_lvl+0x100/0x190 [ 149.165476][ T6867] should_fail_ex.cold+0x5/0xa [ 149.165503][ T6867] ? prepare_alloc_pages+0x16d/0x5f0 [ 149.165540][ T6867] should_fail_alloc_page+0xeb/0x140 [ 149.165573][ T6867] prepare_alloc_pages+0x1f0/0x5f0 [ 149.165615][ T6867] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 149.165667][ T6867] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 149.165704][ T6867] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 149.165749][ T6867] ? __lock_acquire+0x4a5/0x2630 [ 149.165792][ T6867] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 149.165866][ T6867] ? find_held_lock+0x2b/0x80 [ 149.165895][ T6867] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.165939][ T6867] ? policy_nodemask+0xed/0x4f0 [ 149.165976][ T6867] alloc_pages_mpol+0x1fb/0x550 [ 149.166011][ T6867] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 149.166056][ T6867] alloc_pages_noprof+0x136/0x390 [ 149.166092][ T6867] __pmd_alloc+0x3b/0x950 [ 149.166133][ T6867] __handle_mm_fault+0xa9e/0x2b60 [ 149.166180][ T6867] ? mt_find+0x45e/0x8e0 [ 149.166214][ T6867] ? __pfx___handle_mm_fault+0x10/0x10 [ 149.166252][ T6867] ? __pfx_mt_find+0x10/0x10 [ 149.166306][ T6867] ? find_vma+0xbf/0x140 [ 149.166336][ T6867] ? __pfx_find_vma+0x10/0x10 [ 149.166371][ T6867] handle_mm_fault+0x36d/0xa20 [ 149.166426][ T6867] do_user_addr_fault+0x74c/0x12f0 [ 149.166468][ T6867] exc_page_fault+0x6f/0xd0 [ 149.166498][ T6867] asm_exc_page_fault+0x26/0x30 [ 149.166526][ T6867] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 149.166566][ T6867] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 [ 149.166591][ T6867] RSP: 0018:ffffc90004b17dc0 EFLAGS: 00050202 [ 149.166615][ T6867] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 149.166631][ T6867] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880579a58f0 [ 149.166648][ T6867] RBP: 0000000000000004 R08: 0000000000000001 R09: ffffed100af34b1e [ 149.166665][ T6867] R10: ffff8880579a58f3 R11: 0000000000000000 R12: 0000000000000000 [ 149.166681][ T6867] R13: ffff8880579a58f0 R14: 0000000000000444 R15: 0000000000000001 [ 149.166718][ T6867] _copy_from_user+0x98/0xd0 [ 149.166758][ T6867] raw_setsockopt+0x16d/0x1b0 [ 149.166795][ T6867] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 149.166834][ T6867] do_sock_setsockopt+0xf3/0x1d0 [ 149.166873][ T6867] __sys_setsockopt+0x119/0x190 [ 149.166934][ T6867] __x64_sys_setsockopt+0xbd/0x160 [ 149.166977][ T6867] ? do_syscall_64+0x95/0xf80 [ 149.167005][ T6867] ? lockdep_hardirqs_on+0x78/0x100 [ 149.167034][ T6867] do_syscall_64+0x106/0xf80 [ 149.167061][ T6867] ? clear_bhb_loop+0x40/0x90 [ 149.167099][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.167128][ T6867] RIP: 0033:0x7fa3f699c819 [ 149.167152][ T6867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.167176][ T6867] RSP: 002b:00007fa3f7778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.167201][ T6867] RAX: ffffffffffffffda RBX: 00007fa3f6c15fa0 RCX: 00007fa3f699c819 [ 149.167219][ T6867] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000003 [ 149.167235][ T6867] RBP: 00007fa3f7778090 R08: 0000000000000444 R09: 0000000000000000 [ 149.167251][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.167267][ T6867] R13: 00007fa3f6c16038 R14: 00007fa3f6c15fa0 R15: 00007ffc1d3de968 [ 149.167305][ T6867] [ 149.604312][ T51] Bluetooth: hci2: unexpected event 0x3e length: 358 > 260 [ 149.604354][ T51] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 150.426870][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 150.879077][ T6910] mmap: syz.2.217 (6910) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.744156][ T6925] FAULT_INJECTION: forcing a failure. [ 151.744156][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 151.762157][ T6925] CPU: 1 UID: 0 PID: 6925 Comm: syz.3.221 Not tainted syzkaller #0 PREEMPT(full) [ 151.762195][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 151.762212][ T6925] Call Trace: [ 151.762221][ T6925] [ 151.762232][ T6925] dump_stack_lvl+0x100/0x190 [ 151.762282][ T6925] should_fail_ex.cold+0x5/0xa [ 151.762319][ T6925] should_failslab+0xc2/0x120 [ 151.762354][ T6925] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 151.762399][ T6925] ? __pmd_alloc+0xbf/0x950 [ 151.762443][ T6925] __pmd_alloc+0xbf/0x950 [ 151.762484][ T6925] __handle_mm_fault+0xa9e/0x2b60 [ 151.762531][ T6925] ? mt_find+0x45e/0x8e0 [ 151.762565][ T6925] ? __pfx___handle_mm_fault+0x10/0x10 [ 151.762603][ T6925] ? __pfx_mt_find+0x10/0x10 [ 151.762657][ T6925] ? find_vma+0xbf/0x140 [ 151.762687][ T6925] ? __pfx_find_vma+0x10/0x10 [ 151.762722][ T6925] handle_mm_fault+0x36d/0xa20 [ 151.762772][ T6925] do_user_addr_fault+0x74c/0x12f0 [ 151.762816][ T6925] exc_page_fault+0x6f/0xd0 [ 151.762847][ T6925] asm_exc_page_fault+0x26/0x30 [ 151.762875][ T6925] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 151.762914][ T6925] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 [ 151.762939][ T6925] RSP: 0018:ffffc900054a7dc0 EFLAGS: 00050202 [ 151.762964][ T6925] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 151.762980][ T6925] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880579a49f0 [ 151.762997][ T6925] RBP: 0000000000000004 R08: 0000000000000001 R09: ffffed100af3493e [ 151.763013][ T6925] R10: ffff8880579a49f3 R11: 0000000000000000 R12: 0000000000000000 [ 151.763029][ T6925] R13: ffff8880579a49f0 R14: 0000000000000444 R15: 0000000000000001 [ 151.763067][ T6925] _copy_from_user+0x98/0xd0 [ 151.763108][ T6925] raw_setsockopt+0x16d/0x1b0 [ 151.763153][ T6925] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 151.763191][ T6925] do_sock_setsockopt+0xf3/0x1d0 [ 151.763231][ T6925] __sys_setsockopt+0x119/0x190 [ 151.763284][ T6925] __x64_sys_setsockopt+0xbd/0x160 [ 151.763327][ T6925] ? do_syscall_64+0x95/0xf80 [ 151.763355][ T6925] ? lockdep_hardirqs_on+0x78/0x100 [ 151.763385][ T6925] do_syscall_64+0x106/0xf80 [ 151.763412][ T6925] ? clear_bhb_loop+0x40/0x90 [ 151.763446][ T6925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.763475][ T6925] RIP: 0033:0x7efdb339c819 [ 151.763496][ T6925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.763520][ T6925] RSP: 002b:00007efdb419f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.763545][ T6925] RAX: ffffffffffffffda RBX: 00007efdb3615fa0 RCX: 00007efdb339c819 [ 151.763562][ T6925] RDX: 0000000000000001 RSI: 00000000000000ff RDI: 0000000000000003 [ 151.763578][ T6925] RBP: 00007efdb419f090 R08: 0000000000000444 R09: 0000000000000000 [ 151.763596][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.763613][ T6925] R13: 00007efdb3616038 R14: 00007efdb3615fa0 R15: 00007ffd647a1d68 [ 151.763653][ T6925] [ 151.820665][ T6927] netlink: 'syz.0.219': attribute type 1 has an invalid length. [ 152.328067][ T6934] Invalid ELF header magic: != ELF [ 152.909936][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'. [ 153.636390][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'. [ 153.687192][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.728575][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.988609][ T6962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.044602][ T6962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.480188][ T6991] can: request_module (can-proto-0) failed. [ 155.546947][ T6991] can: request_module (can-proto-0) failed. [ 155.718002][ T6991] can: request_module (can-proto-0) failed. [ 155.953153][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 156.047912][ T6991] can: request_module (can-proto-0) failed. [ 157.414072][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 157.826368][ T7056] FAULT_INJECTION: forcing a failure. [ 157.826368][ T7056] name failslab, interval 1, probability 0, space 0, times 0 [ 157.839485][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz.3.248 Not tainted syzkaller #0 PREEMPT(full) [ 157.839529][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 157.839547][ T7056] Call Trace: [ 157.839557][ T7056] [ 157.839569][ T7056] dump_stack_lvl+0x100/0x190 [ 157.839632][ T7056] should_fail_ex.cold+0x5/0xa [ 157.839670][ T7056] should_failslab+0xc2/0x120 [ 157.839705][ T7056] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 157.839757][ T7056] ? __alloc_skb+0x140/0x710 [ 157.839831][ T7056] __alloc_skb+0x140/0x710 [ 157.839876][ T7056] ? __alloc_skb+0x5b7/0x710 [ 157.839919][ T7056] ? __pfx___alloc_skb+0x10/0x10 [ 157.839962][ T7056] ? is_bpf_text_address+0x8a/0x1a0 [ 157.840016][ T7056] ? __lock_acquire+0x4a5/0x2630 [ 157.840061][ T7056] alloc_skb_with_frags+0xe0/0x810 [ 157.840094][ T7056] ? __lock_acquire+0x4a5/0x2630 [ 157.840142][ T7056] sock_alloc_send_pskb+0x801/0x980 [ 157.840209][ T7056] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 157.840261][ T7056] ? __lock_acquire+0x4a5/0x2630 [ 157.840309][ T7056] __ip_append_data+0x227d/0x4690 [ 157.840349][ T7056] ? __pfx_udplite_getfrag+0x10/0x10 [ 157.840390][ T7056] ? find_held_lock+0x2b/0x80 [ 157.840420][ T7056] ? ip_dst_mtu_maybe_forward.constprop.0+0x3df/0x750 [ 157.840472][ T7056] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 157.840513][ T7056] ? __pfx___ip_append_data+0x10/0x10 [ 157.840556][ T7056] ip_make_skb+0x28b/0x310 [ 157.840594][ T7056] ? __pfx_udplite_getfrag+0x10/0x10 [ 157.840640][ T7056] ? __pfx_ip_make_skb+0x10/0x10 [ 157.840697][ T7056] ? udp_sendmsg+0x17b6/0x2890 [ 157.840725][ T7056] udp_sendmsg+0x17b6/0x2890 [ 157.840761][ T7056] ? __pfx_udplite_getfrag+0x10/0x10 [ 157.840808][ T7056] ? __pfx_udp_sendmsg+0x10/0x10 [ 157.840836][ T7056] ? rcu_is_watching+0x12/0xc0 [ 157.840931][ T7056] ? kvm_sched_clock_read+0x11/0x20 [ 157.840980][ T7056] ? sched_clock+0x38/0x60 [ 157.841025][ T7056] udpv6_sendmsg+0x156c/0x2f60 [ 157.841072][ T7056] ? find_held_lock+0x2b/0x80 [ 157.841101][ T7056] ? aa_label_sk_perm+0x194/0x5f0 [ 157.841152][ T7056] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 157.841207][ T7056] ? rcu_is_watching+0x12/0xc0 [ 157.841280][ T7056] ? __pfx___might_resched+0x10/0x10 [ 157.841344][ T7056] ? __pfx_aa_sk_perm+0x10/0x10 [ 157.841392][ T7056] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 157.841442][ T7056] ? inet6_sendmsg+0x105/0x140 [ 157.841490][ T7056] inet6_sendmsg+0x105/0x140 [ 157.841540][ T7056] sock_write_iter+0x439/0x5a0 [ 157.841578][ T7056] ? __pfx_sock_write_iter+0x10/0x10 [ 157.841628][ T7056] ? bpf_lsm_file_permission+0x9/0x10 [ 157.841658][ T7056] ? security_file_permission+0x76/0x210 [ 157.841702][ T7056] ? rw_verify_area+0xce/0x6d0 [ 157.841753][ T7056] vfs_write+0x6ac/0x1070 [ 157.841785][ T7056] ? __pfx_sock_write_iter+0x10/0x10 [ 157.841826][ T7056] ? __pfx_vfs_write+0x10/0x10 [ 157.841854][ T7056] ? find_held_lock+0x2b/0x80 [ 157.841909][ T7056] ksys_write+0x1f8/0x250 [ 157.841939][ T7056] ? __pfx_ksys_write+0x10/0x10 [ 157.841982][ T7056] do_syscall_64+0x106/0xf80 [ 157.842012][ T7056] ? clear_bhb_loop+0x40/0x90 [ 157.842051][ T7056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.842084][ T7056] RIP: 0033:0x7efdb339c819 [ 157.842110][ T7056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.842138][ T7056] RSP: 002b:00007efdb417e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.842177][ T7056] RAX: ffffffffffffffda RBX: 00007efdb3616090 RCX: 00007efdb339c819 [ 157.842197][ T7056] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 157.842214][ T7056] RBP: 00007efdb3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 157.842231][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.842248][ T7056] R13: 00007efdb3616128 R14: 00007efdb3616090 R15: 00007ffd647a1d68 [ 157.842288][ T7056] [ 157.866811][ T7062] capability: warning: `syz.0.250' uses 32-bit capabilities (legacy support in use) [ 158.500197][ T51] block nbd0: Receive control failed (result -32) [ 158.675802][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 158.865252][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 159.205919][ T7098] Unable to find swap-space signature [ 159.447849][ T7105] openvswitch: netlink: Multiple metadata blocks provided [ 159.930583][ T51] Bluetooth: hci3: unexpected event 0x3e length: 358 > 260 [ 159.930625][ T51] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 160.340712][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 160.870179][ T7144] zram0: detected capacity change from 0 to 16 [ 163.459011][ T7195] FAULT_INJECTION: forcing a failure. [ 163.459011][ T7195] name failslab, interval 1, probability 0, space 0, times 0 [ 163.494943][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.3.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.494993][ T7195] Tainted: [L]=SOFTLOCKUP [ 163.495004][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 163.495021][ T7195] Call Trace: [ 163.495031][ T7195] [ 163.495043][ T7195] dump_stack_lvl+0x100/0x190 [ 163.495093][ T7195] should_fail_ex.cold+0x5/0xa [ 163.495131][ T7195] should_failslab+0xc2/0x120 [ 163.495167][ T7195] __kmalloc_cache_noprof+0x7a/0x6f0 [ 163.495210][ T7195] ? tracing_log_err+0x4c1/0x6d0 [ 163.495263][ T7195] tracing_log_err+0x4c1/0x6d0 [ 163.495324][ T7195] append_filter_err+0x399/0x620 [ 163.495378][ T7195] create_filter+0x1a6/0x210 [ 163.495427][ T7195] ? __pfx_create_filter+0x10/0x10 [ 163.495479][ T7195] ? find_held_lock+0x2b/0x80 [ 163.495515][ T7195] apply_event_filter+0x220/0x500 [ 163.495566][ T7195] ? __pfx_apply_event_filter+0x10/0x10 [ 163.495628][ T7195] event_filter_write+0x16d/0x290 [ 163.495669][ T7195] vfs_write+0x2aa/0x1070 [ 163.495701][ T7195] ? __pfx_event_filter_write+0x10/0x10 [ 163.495743][ T7195] ? __pfx_vfs_write+0x10/0x10 [ 163.495782][ T7195] ? __fget_files+0x215/0x3d0 [ 163.495824][ T7195] ? __fget_files+0x21f/0x3d0 [ 163.495868][ T7195] ksys_write+0x12a/0x250 [ 163.495897][ T7195] ? __pfx_ksys_write+0x10/0x10 [ 163.495943][ T7195] do_syscall_64+0x106/0xf80 [ 163.495974][ T7195] ? clear_bhb_loop+0x40/0x90 [ 163.496014][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.496044][ T7195] RIP: 0033:0x7efdb339c819 [ 163.496070][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.496097][ T7195] RSP: 002b:00007efdb417e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.496126][ T7195] RAX: ffffffffffffffda RBX: 00007efdb3616090 RCX: 00007efdb339c819 [ 163.496145][ T7195] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 163.496163][ T7195] RBP: 00007efdb3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 163.496180][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.496197][ T7195] R13: 00007efdb3616128 R14: 00007efdb3616090 R15: 00007ffd647a1d68 [ 163.496238][ T7195] [ 164.231243][ T7211] FAULT_INJECTION: forcing a failure. [ 164.231243][ T7211] name failslab, interval 1, probability 0, space 0, times 0 [ 164.246061][ T7211] CPU: 1 UID: 0 PID: 7211 Comm: syz.3.284 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.246110][ T7211] Tainted: [L]=SOFTLOCKUP [ 164.246121][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 164.246138][ T7211] Call Trace: [ 164.246149][ T7211] [ 164.246161][ T7211] dump_stack_lvl+0x100/0x190 [ 164.246212][ T7211] should_fail_ex.cold+0x5/0xa [ 164.246249][ T7211] should_failslab+0xc2/0x120 [ 164.246284][ T7211] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 164.246331][ T7211] ? __kernfs_new_node+0xd2/0x960 [ 164.246385][ T7211] __kernfs_new_node+0xd2/0x960 [ 164.246436][ T7211] ? __pfx___kernfs_new_node+0x10/0x10 [ 164.246492][ T7211] ? find_held_lock+0x2b/0x80 [ 164.246522][ T7211] ? kernfs_root+0xee/0x2a0 [ 164.246565][ T7211] ? kernfs_root+0xee/0x2a0 [ 164.246619][ T7211] kernfs_new_node+0x11b/0x1a0 [ 164.246656][ T7211] __kernfs_create_file+0x53/0x350 [ 164.246700][ T7211] sysfs_add_file_mode_ns+0x207/0x3c0 [ 164.246754][ T7211] internal_create_group+0x593/0xf40 [ 164.246813][ T7211] ? __pfx_internal_create_group+0x10/0x10 [ 164.246875][ T7211] ? kernfs_create_link+0x1bd/0x240 [ 164.246919][ T7211] internal_create_groups+0x9d/0x150 [ 164.246977][ T7211] device_add+0x71a/0x1950 [ 164.247021][ T7211] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.247054][ T7211] ? __pfx_device_add+0x10/0x10 [ 164.247094][ T7211] ? lockdep_init_map_type+0x5c/0x250 [ 164.247135][ T7211] ? __init_waitqueue_head+0xca/0x150 [ 164.247192][ T7211] netdev_register_kobject+0x1a9/0x3d0 [ 164.247233][ T7211] register_netdevice+0x12e0/0x2210 [ 164.247272][ T7211] ? __pfx_register_netdevice+0x10/0x10 [ 164.247313][ T7211] ? __pfx_loopback_net_init+0x10/0x10 [ 164.247350][ T7211] register_netdev+0x34/0x50 [ 164.247379][ T7211] loopback_net_init+0x7a/0x170 [ 164.247418][ T7211] ? __pfx_loopback_net_init+0x10/0x10 [ 164.247452][ T7211] ops_init+0x1e2/0x5f0 [ 164.247487][ T7211] setup_net+0x118/0x3a0 [ 164.247518][ T7211] ? __pfx_setup_net+0x10/0x10 [ 164.247545][ T7211] ? lockdep_init_map_type+0x5c/0x250 [ 164.247584][ T7211] ? mutex_init_lockep+0x110/0x150 [ 164.247629][ T7211] copy_net_ns+0x46f/0x7c0 [ 164.247665][ T7211] create_new_namespaces+0x3ea/0xac0 [ 164.247707][ T7211] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 164.247744][ T7211] ksys_unshare+0x473/0xad0 [ 164.247785][ T7211] ? __pfx_ksys_unshare+0x10/0x10 [ 164.247827][ T7211] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 164.247878][ T7211] ? syscall_user_dispatch+0x76/0x130 [ 164.247925][ T7211] __x64_sys_unshare+0x31/0x40 [ 164.247964][ T7211] do_syscall_64+0x106/0xf80 [ 164.247992][ T7211] ? clear_bhb_loop+0x40/0x90 [ 164.248029][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.248060][ T7211] RIP: 0033:0x7efdb339c819 [ 164.248086][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.248111][ T7211] RSP: 002b:00007efdb419f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 164.248140][ T7211] RAX: ffffffffffffffda RBX: 00007efdb3615fa0 RCX: 00007efdb339c819 [ 164.248161][ T7211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 164.248180][ T7211] RBP: 00007efdb3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 164.248198][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.248215][ T7211] R13: 00007efdb3616038 R14: 00007efdb3615fa0 R15: 00007ffd647a1d68 [ 164.248257][ T7211] [ 165.051247][ T7226] FAULT_INJECTION: forcing a failure. [ 165.051247][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 165.123278][ T7226] CPU: 0 UID: 0 PID: 7226 Comm: syz.2.288 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.123324][ T7226] Tainted: [L]=SOFTLOCKUP [ 165.123333][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.123348][ T7226] Call Trace: [ 165.123357][ T7226] [ 165.123367][ T7226] dump_stack_lvl+0x100/0x190 [ 165.123416][ T7226] should_fail_ex.cold+0x5/0xa [ 165.123452][ T7226] should_failslab+0xc2/0x120 [ 165.123484][ T7226] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 165.123529][ T7226] ? __d_alloc+0x34/0xa80 [ 165.123571][ T7226] __d_alloc+0x34/0xa80 [ 165.123609][ T7226] d_alloc+0x4a/0x1e0 [ 165.123646][ T7226] lookup_one_qstr_excl+0x175/0x250 [ 165.123690][ T7226] start_dirop+0x59/0xb0 [ 165.123720][ T7226] simple_start_creating+0xf9/0x110 [ 165.123750][ T7226] ? __pfx_simple_start_creating+0x10/0x10 [ 165.123780][ T7226] ? mntput+0x70/0xa0 [ 165.123805][ T7226] ? simple_pin_fs+0xa3/0x190 [ 165.123848][ T7226] debugfs_start_creating.part.0+0x82/0x170 [ 165.123885][ T7226] __debugfs_create_file+0xb3/0x4f0 [ 165.123925][ T7226] debugfs_create_file_full+0x41/0x60 [ 165.123964][ T7226] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 165.124006][ T7226] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 165.124053][ T7226] ? find_held_lock+0x2b/0x80 [ 165.124118][ T7226] ? lockdep_init_map_type+0x5c/0x250 [ 165.124164][ T7226] preinit_net.part.0+0x437/0x8f0 [ 165.124196][ T7226] copy_net_ns+0x339/0x7c0 [ 165.124232][ T7226] create_new_namespaces+0x3ea/0xac0 [ 165.124275][ T7226] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 165.124311][ T7226] ksys_unshare+0x473/0xad0 [ 165.124351][ T7226] ? __pfx_ksys_unshare+0x10/0x10 [ 165.124405][ T7226] __x64_sys_unshare+0x31/0x40 [ 165.124441][ T7226] do_syscall_64+0x106/0xf80 [ 165.124469][ T7226] ? clear_bhb_loop+0x40/0x90 [ 165.124505][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.124535][ T7226] RIP: 0033:0x7fcff419c819 [ 165.124560][ T7226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.124586][ T7226] RSP: 002b:00007fcff5086028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 165.124613][ T7226] RAX: ffffffffffffffda RBX: 00007fcff4415fa0 RCX: 00007fcff419c819 [ 165.124631][ T7226] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 165.124647][ T7226] RBP: 00007fcff4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 165.124663][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.124679][ T7226] R13: 00007fcff4416038 R14: 00007fcff4415fa0 R15: 00007ffd98611ed8 [ 165.124718][ T7226] [ 166.223921][ T7251] can: request_module (can-proto-0) failed. [ 166.960175][ T7266] vivid-007: ================= START STATUS ================= [ 167.013366][ T7266] vivid-007: Generate PTS: true [ 167.063435][ T7266] vivid-007: Generate SCR: true [ 167.093373][ T7266] tpg source WxH: 320x240 (Y'CbCr) [ 167.165997][ T7266] tpg field: 1 [ 167.170519][ T7266] tpg crop: (0,0)/320x240 [ 167.178098][ T7266] tpg compose: (0,0)/320x240 [ 167.183824][ T7266] tpg colorspace: 8 [ 167.203114][ T7266] tpg transfer function: 0/0 [ 167.223288][ T7266] tpg Y'CbCr encoding: 0/0 [ 167.228027][ T7266] tpg quantization: 0/0 [ 167.296349][ T7266] tpg RGB range: 0/2 [ 167.300355][ T7266] vivid-007: ================== END STATUS ================== [ 167.590529][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 168.774119][ T7317] FAULT_INJECTION: forcing a failure. [ 168.774119][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 168.835328][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.2.298 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.835379][ T7317] Tainted: [L]=SOFTLOCKUP [ 168.835389][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.835406][ T7317] Call Trace: [ 168.835416][ T7317] [ 168.835428][ T7317] dump_stack_lvl+0x100/0x190 [ 168.835482][ T7317] should_fail_ex.cold+0x5/0xa [ 168.835520][ T7317] should_failslab+0xc2/0x120 [ 168.835557][ T7317] __kmalloc_cache_noprof+0x7a/0x6f0 [ 168.835599][ T7317] ? copy_net_ns+0x135/0x7c0 [ 168.835642][ T7317] copy_net_ns+0x135/0x7c0 [ 168.835674][ T7317] ? copy_cgroup_ns+0x71/0x970 [ 168.835714][ T7317] create_new_namespaces+0x3ea/0xac0 [ 168.835759][ T7317] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 168.835797][ T7317] ksys_unshare+0x473/0xad0 [ 168.835837][ T7317] ? __pfx_ksys_unshare+0x10/0x10 [ 168.835893][ T7317] __x64_sys_unshare+0x31/0x40 [ 168.835933][ T7317] do_syscall_64+0x106/0xf80 [ 168.835963][ T7317] ? clear_bhb_loop+0x40/0x90 [ 168.836002][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.836033][ T7317] RIP: 0033:0x7fcff419c819 [ 168.836059][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.836096][ T7317] RSP: 002b:00007fcff5065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 168.836125][ T7317] RAX: ffffffffffffffda RBX: 00007fcff4416090 RCX: 00007fcff419c819 [ 168.836144][ T7317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 168.836162][ T7317] RBP: 00007fcff4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 168.836179][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.836197][ T7317] R13: 00007fcff4416128 R14: 00007fcff4416090 R15: 00007ffd98611ed8 [ 168.836238][ T7317] [ 169.296762][ T7303] Line length is too long: Should be less than 4094 [ 169.348682][ T7297] ================================================================== [ 169.348695][ T7297] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 169.348730][ T7297] Write of size 8 at addr ffffc90004479000 by task syz.3.296/7297 [ 169.348744][ T7297] [ 169.348755][ T7297] CPU: 1 UID: 0 PID: 7297 Comm: syz.3.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.348781][ T7297] Tainted: [L]=SOFTLOCKUP [ 169.348787][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.348798][ T7297] Call Trace: [ 169.348804][ T7297] [ 169.348810][ T7297] dump_stack_lvl+0x100/0x190 [ 169.348838][ T7297] print_report+0x156/0x4c9 [ 169.348862][ T7297] ? _raw_spin_lock_irqsave+0x52/0x60 [ 169.348889][ T7297] ? __virt_addr_valid+0x81/0x620 [ 169.348915][ T7297] ? sys_imageblit+0x19fb/0x1d60 [ 169.348941][ T7297] kasan_report+0xdf/0x1e0 [ 169.348961][ T7297] ? sys_imageblit+0x19fb/0x1d60 [ 169.348998][ T7297] sys_imageblit+0x19fb/0x1d60 [ 169.349028][ T7297] ? __pfx_sys_imageblit+0x10/0x10 [ 169.349056][ T7297] ? prb_read_valid+0x78/0xa0 [ 169.349084][ T7297] ? __pfx_prb_read_valid+0x10/0x10 [ 169.349110][ T7297] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 169.349132][ T7297] soft_cursor+0x524/0xa10 [ 169.349157][ T7297] ? fb_get_color_depth+0x120/0x250 [ 169.349179][ T7297] bit_cursor+0xe58/0x16f0 [ 169.349204][ T7297] ? __pfx_bit_cursor+0x10/0x10 [ 169.349226][ T7297] ? __lock_acquire+0x4a5/0x2630 [ 169.349252][ T7297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.349271][ T7297] ? get_color+0x1da/0x450 [ 169.349290][ T7297] ? __pfx_bit_cursor+0x10/0x10 [ 169.349312][ T7297] fbcon_cursor+0x43c/0x5e0 [ 169.349331][ T7297] ? add_softcursor+0x200/0x290 [ 169.349357][ T7297] set_cursor+0x1db/0x250 [ 169.349381][ T7297] con_write+0x89/0xb0 [ 169.349397][ T7297] do_output_char+0x63b/0x850 [ 169.349417][ T7297] n_tty_write+0x528/0x12d0 [ 169.349441][ T7297] ? __pfx_n_tty_write+0x10/0x10 [ 169.349461][ T7297] ? __pfx_woken_wake_function+0x10/0x10 [ 169.349490][ T7297] ? __pfx___might_resched+0x10/0x10 [ 169.349518][ T7297] ? __pfx_n_tty_write+0x10/0x10 [ 169.349539][ T7297] file_tty_write.isra.0+0x4d2/0x890 [ 169.349569][ T7297] redirected_tty_write+0xd4/0x120 [ 169.349598][ T7297] vfs_write+0x6ac/0x1070 [ 169.349615][ T7297] ? __pfx_redirected_tty_write+0x10/0x10 [ 169.349644][ T7297] ? __pfx_vfs_write+0x10/0x10 [ 169.349660][ T7297] ? find_held_lock+0x2b/0x80 [ 169.349683][ T7297] ksys_write+0x12a/0x250 [ 169.349699][ T7297] ? __pfx_ksys_write+0x10/0x10 [ 169.349719][ T7297] do_syscall_64+0x106/0xf80 [ 169.349736][ T7297] ? clear_bhb_loop+0x40/0x90 [ 169.349756][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.349775][ T7297] RIP: 0033:0x7efdb339c819 [ 169.349789][ T7297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.349806][ T7297] RSP: 002b:00007efdb419f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.349824][ T7297] RAX: ffffffffffffffda RBX: 00007efdb3615fa0 RCX: 00007efdb339c819 [ 169.349836][ T7297] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 169.349847][ T7297] RBP: 00007efdb3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 169.349857][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.349867][ T7297] R13: 00007efdb3616038 R14: 00007efdb3615fa0 R15: 00007ffd647a1d68 [ 169.349883][ T7297] [ 169.349890][ T7297] [ 169.349894][ T7297] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004179000 allocated at drm_gem_shmem_vmap_locked+0x54b/0x800 [ 169.349926][ T7297] Memory state around the buggy address: [ 169.349935][ T7297] ffffc90004478f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 169.349947][ T7297] ffffc90004478f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 169.349959][ T7297] >ffffc90004479000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 169.349969][ T7297] ^ [ 169.349977][ T7297] ffffc90004479080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 169.349995][ T7297] ffffc90004479100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 169.350005][ T7297] ================================================================== [ 169.351181][ T7297] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 169.351196][ T7297] CPU: 1 UID: 0 PID: 7297 Comm: syz.3.296 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.351221][ T7297] Tainted: [L]=SOFTLOCKUP [ 169.351228][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.351238][ T7297] Call Trace: [ 169.351244][ T7297] [ 169.351250][ T7297] dump_stack_lvl+0x100/0x190 [ 169.351278][ T7297] vpanic+0x552/0x970 [ 169.351294][ T7297] ? __pfx_vpanic+0x10/0x10 [ 169.351314][ T7297] ? sys_imageblit+0x19fb/0x1d60 [ 169.351340][ T7297] panic+0xd1/0xe0 [ 169.351356][ T7297] ? __pfx_panic+0x10/0x10 [ 169.351373][ T7297] ? sys_imageblit+0x19fb/0x1d60 [ 169.351400][ T7297] ? preempt_schedule_common+0x42/0xc0 [ 169.351430][ T7297] ? check_panic_on_warn+0x1f/0x90 [ 169.351456][ T7297] check_panic_on_warn.cold+0x19/0x34 [ 169.351476][ T7297] end_report.part.0+0x3a/0x90 [ 169.351500][ T7297] kasan_report.cold+0xe/0x18 [ 169.351525][ T7297] ? sys_imageblit+0x19fb/0x1d60 [ 169.351554][ T7297] sys_imageblit+0x19fb/0x1d60 [ 169.351584][ T7297] ? __pfx_sys_imageblit+0x10/0x10 [ 169.351612][ T7297] ? prb_read_valid+0x78/0xa0 [ 169.351636][ T7297] ? __pfx_prb_read_valid+0x10/0x10 [ 169.351662][ T7297] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 169.351683][ T7297] soft_cursor+0x524/0xa10 [ 169.351708][ T7297] ? fb_get_color_depth+0x120/0x250 [ 169.351730][ T7297] bit_cursor+0xe58/0x16f0 [ 169.351754][ T7297] ? __pfx_bit_cursor+0x10/0x10 [ 169.351777][ T7297] ? __lock_acquire+0x4a5/0x2630 [ 169.351802][ T7297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.351821][ T7297] ? get_color+0x1da/0x450 [ 169.351839][ T7297] ? __pfx_bit_cursor+0x10/0x10 [ 169.351861][ T7297] fbcon_cursor+0x43c/0x5e0 [ 169.351880][ T7297] ? add_softcursor+0x200/0x290 [ 169.351905][ T7297] set_cursor+0x1db/0x250 [ 169.351929][ T7297] con_write+0x89/0xb0 [ 169.351945][ T7297] do_output_char+0x63b/0x850 [ 169.351965][ T7297] n_tty_write+0x528/0x12d0 [ 169.351995][ T7297] ? __pfx_n_tty_write+0x10/0x10 [ 169.352016][ T7297] ? __pfx_woken_wake_function+0x10/0x10 [ 169.352045][ T7297] ? __pfx___might_resched+0x10/0x10 [ 169.352072][ T7297] ? __pfx_n_tty_write+0x10/0x10 [ 169.352093][ T7297] file_tty_write.isra.0+0x4d2/0x890 [ 169.352126][ T7297] redirected_tty_write+0xd4/0x120 [ 169.352155][ T7297] vfs_write+0x6ac/0x1070 [ 169.352172][ T7297] ? __pfx_redirected_tty_write+0x10/0x10 [ 169.352201][ T7297] ? __pfx_vfs_write+0x10/0x10 [ 169.352221][ T7297] ? find_held_lock+0x2b/0x80 [ 169.352244][ T7297] ksys_write+0x12a/0x250 [ 169.352261][ T7297] ? __pfx_ksys_write+0x10/0x10 [ 169.352280][ T7297] do_syscall_64+0x106/0xf80 [ 169.352297][ T7297] ? clear_bhb_loop+0x40/0x90 [ 169.352318][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.352336][ T7297] RIP: 0033:0x7efdb339c819 [ 169.352349][ T7297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.352366][ T7297] RSP: 002b:00007efdb419f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.352383][ T7297] RAX: ffffffffffffffda RBX: 00007efdb3615fa0 RCX: 00007efdb339c819 [ 169.352394][ T7297] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 169.352405][ T7297] RBP: 00007efdb3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 169.352415][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.352426][ T7297] R13: 00007efdb3616038 R14: 00007efdb3615fa0 R15: 00007ffd647a1d68 [ 169.352442][ T7297] [ 169.352621][ T7297] Kernel Offset: disabled