last executing test programs: 6.219369644s ago: executing program 3 (id=166): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000440)={0xfff, 0x1, 0x1, 0x2, 0x7, 0xffffffffffffffff}) syz_clone3(0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/if_inet6\x00', 0x440, 0x0) pread64$auto(r2, 0x0, 0x10001, 0x830) 5.52953086s ago: executing program 2 (id=171): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0x1000000000df, 0x9b72, r1, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) 5.019186456s ago: executing program 2 (id=173): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x0, 0x5, 0x3, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81) r0 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0x0, 0x1}, 0x7) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto_SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)="58f9fb") fsconfig$auto_XFS_DAX_ALWAYS(r0, 0x5, &(0x7f00000000c0)='\x00', &(0x7f0000000100)="f05fb6b90b87672fe1d22cefc2d7781168dfe4101d2db725ed043a563edc4c56db2da8078fc2faba6055377243e86a85e9f6b77af87ea9a2d5fa52ef6ab74cbe70c509935e88230a24dce9b13c36974eac88e30e55d8451a565b9bb319b45706335a88b75c2daf19320a5324dcea1d5bea483a8f08a1042c2b3e60ef1a4cb7e90d65b0", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) socket(0x1d, 0x1, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r4, 0x40086602, 0x8) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x2b, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x0, 0x18, r1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 4.831139383s ago: executing program 1 (id=174): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r0 = fcntl$auto(0x8000000000000001, 0x26, 0x8) setsockopt$auto(r0, 0x94f3, 0x6, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x2) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, "4d8783e39d322ae5460b7e44ac9ffe953f0c96fb335fc4c489860100a36951eafccb2f6ab40b1e6177ff8094e1e6f4686140e7d408e4f38efde67dfda4ab68133f08137f5eb1e4a634878905eac2212ff05c145bf8cd9e8454a9a797175a5351f4ba9ba5ca1d0c54818a04931d97b37934898c50b4fd0462e5f3897fd58c616a025b6821532665025098cf9765fc410e12ed0f3615fa3177c5b7dc7417ea611ed21698c8fadceef067a91128c273128623bab00145d831010ae568f37f7f66cf00258911f7ec06616c18c5f69260ec1faf9c3a4483d2b1fdcd092b69231229"}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto(r4, 0x0, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/20, 0xfffffcc4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 4.646828508s ago: executing program 3 (id=175): close_range$auto(0x2, 0x8, 0x0) r0 = socketcall$auto(0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xaea2, 0x10000000000402) ioctl$auto(0x3, 0xae41, r0) 4.265542952s ago: executing program 3 (id=177): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) utimes$auto(0x0, 0xfffffffffffffffd) 3.949740947s ago: executing program 2 (id=178): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r0 = fcntl$auto(0x8000000000000001, 0x26, 0x8) setsockopt$auto(r0, 0x94f3, 0x6, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x2) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, "4d8783e39d322ae5460b7e44ac9ffe953f0c96fb335fc4c489860100a36951eafccb2f6ab40b1e6177ff8094e1e6f4686140e7d408e4f38efde67dfda4ab68133f08137f5eb1e4a634878905eac2212ff05c145bf8cd9e8454a9a797175a5351f4ba9ba5ca1d0c54818a04931d97b37934898c50b4fd0462e5f3897fd58c616a025b6821532665025098cf9765fc410e12ed0f3615fa3177c5b7dc7417ea611ed21698c8fadceef067a91128c273128623bab00145d831010ae568f37f7f66cf00258911f7ec06616c18c5f69260ec1faf9c3a4483d2b1fdcd092b69231229"}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto(r4, 0x0, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/20, 0xfffffcc4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 3.823951353s ago: executing program 1 (id=179): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r0 = fcntl$auto(0x8000000000000001, 0x26, 0x8) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, "4d8783e39d322ae5460b7e44ac9ffe953f0c96fb335fc4c489860100a36951eafccb2f6ab40b1e6177ff8094e1e6f4686140e7d408e4f38efde67dfda4ab68133f08137f5eb1e4a634878905eac2212ff05c145bf8cd9e8454a9a797175a5351f4ba9ba5ca1d0c54818a04931d97b37934898c50b4fd0462e5f3897fd58c616a025b6821532665025098cf9765fc410e12ed0f3615fa3177c5b7dc7417ea611ed21698c8fadceef067a91128c273128623bab00145d831010ae568f37f7f66cf00258911f7ec06616c18c5f69260ec1faf9c3a4483d2b1fdcd092b69231229"}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto(r4, 0x0, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/20, 0xfffffcc4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 3.53952218s ago: executing program 0 (id=181): socket(0x2a, 0x2, 0x6) accept$auto(0x3, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, 0x0, 0x5) memfd_create$auto(0x0, 0x40) bpf$auto_BPF_BTF_LOAD(0x12, 0x0, 0x4) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x101841, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x1, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto(r1, 0x560f, r2) 3.204075962s ago: executing program 0 (id=182): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x8, 0x2, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) 2.90329062s ago: executing program 0 (id=183): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) openat$auto_full_fops_mem(0xffffffffffffff9c, 0x0, 0x1e100, 0x0) socket(0x1d, 0x2, 0x7) clone$auto(0x7fff, 0x101, 0x0, 0x0, 0x8000) capset$auto(0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd3e, 0x1, 0x9, 0x3, 0xf1f, 0xc0, 0x3, 0x62, 0x80000001, 0x400a, 0xce6, 0x9, 0x2, 0x539f]}, 0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x10000, 0x9) 2.872074411s ago: executing program 2 (id=184): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) epoll_create1$auto(0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) 2.792038671s ago: executing program 1 (id=185): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$auto(0x0, 0x0, &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000180)) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000100)="17") 2.649720033s ago: executing program 1 (id=186): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x0, 0x5, 0x3, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81) r0 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0x0, 0x1}, 0x7) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto_SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)="58f9fb") fsconfig$auto_XFS_DAX_ALWAYS(r0, 0x5, &(0x7f00000000c0)='\x00', &(0x7f0000000100)="f05fb6b90b87672fe1d22cefc2d7781168dfe4101d2db725ed043a563edc4c56db2da8078fc2faba6055377243e86a85e9f6b77af87ea9a2d5fa52ef6ab74cbe70c509935e88230a24dce9b13c36974eac88e30e55d8451a565b9bb319b45706335a88b75c2daf19320a5324dcea1d5bea483a8f08a1042c2b3e60ef1a4cb7e90d65b0", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) socket(0x1d, 0x1, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r4, 0x40086602, 0x8) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x2b, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x0, 0x18, r1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 2.400367901s ago: executing program 2 (id=187): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) r0 = socket(0xa, 0x1, 0x84) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(r0, 0x0, 0x60, 0x0, 0x6f7250c4) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kexec_load$auto(0x5, 0x2, 0x0, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r2, 0x0) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) 2.248604413s ago: executing program 3 (id=188): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r0 = fcntl$auto(0x8000000000000001, 0x26, 0x8) setsockopt$auto(r0, 0x94f3, 0x6, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x2) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, "4d8783e39d322ae5460b7e44ac9ffe953f0c96fb335fc4c489860100a36951eafccb2f6ab40b1e6177ff8094e1e6f4686140e7d408e4f38efde67dfda4ab68133f08137f5eb1e4a634878905eac2212ff05c145bf8cd9e8454a9a797175a5351f4ba9ba5ca1d0c54818a04931d97b37934898c50b4fd0462e5f3897fd58c616a025b6821532665025098cf9765fc410e12ed0f3615fa3177c5b7dc7417ea611ed21698c8fadceef067a91128c273128623bab00145d831010ae568f37f7f66cf00258911f7ec06616c18c5f69260ec1faf9c3a4483d2b1fdcd092b69231229"}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto(r4, 0x0, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/20, 0xfffffcc4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 1.948919958s ago: executing program 0 (id=189): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0xffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r0 = socket(0x2, 0xa, 0x106) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r0) r1 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000003c0), 0x28000, 0x0) read$auto_fops_atomic_t_ro_(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32, @ANYBLOB], 0x24}}, 0x4000000) bpf$auto(0x100, &(0x7f0000000100)=@bpf_attr_4={0x7, r2, 0x3, r3}, 0x93) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr5\x00', 0x0, 0x0) 1.512725724s ago: executing program 1 (id=190): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x0, 0x5, 0x3, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81) r0 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0x0, 0x1}, 0x7) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto_SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)="58f9fb") fsconfig$auto_XFS_DAX_ALWAYS(r0, 0x5, &(0x7f00000000c0)='\x00', &(0x7f0000000100)="f05fb6b90b87672fe1d22cefc2d7781168dfe4101d2db725ed043a563edc4c56db2da8078fc2faba6055377243e86a85e9f6b77af87ea9a2d5fa52ef6ab74cbe70c509935e88230a24dce9b13c36974eac88e30e55d8451a565b9bb319b45706335a88b75c2daf19320a5324dcea1d5bea483a8f08a1042c2b3e60ef1a4cb7e90d65b0", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) socket(0x1d, 0x1, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r4, 0x40086602, 0x8) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x2b, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x0, 0x18, r1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 1.283151619s ago: executing program 0 (id=191): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20443, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x400) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 1.046839252s ago: executing program 3 (id=192): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x0, 0x5, 0x3, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x81) r0 = openat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9, 0x0, 0x1}, 0x7) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto_SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)="58f9fb") fsconfig$auto_XFS_DAX_ALWAYS(r0, 0x5, &(0x7f00000000c0)='\x00', &(0x7f0000000100)="f05fb6b90b87672fe1d22cefc2d7781168dfe4101d2db725ed043a563edc4c56db2da8078fc2faba6055377243e86a85e9f6b77af87ea9a2d5fa52ef6ab74cbe70c509935e88230a24dce9b13c36974eac88e30e55d8451a565b9bb319b45706335a88b75c2daf19320a5324dcea1d5bea483a8f08a1042c2b3e60ef1a4cb7e90d65b0", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) socket(0x1d, 0x1, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) ioctl$auto_FS_IOC_SETFLAGS(r4, 0x40086602, 0x8) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x2b, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x0, 0x18, r1, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 864.054267ms ago: executing program 0 (id=193): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) r0 = fcntl$auto(0x8000000000000001, 0x26, 0x8) setsockopt$auto(r0, 0x94f3, 0x6, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x2) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, "4d8783e39d322ae5460b7e44ac9ffe953f0c96fb335fc4c489860100a36951eafccb2f6ab40b1e6177ff8094e1e6f4686140e7d408e4f38efde67dfda4ab68133f08137f5eb1e4a634878905eac2212ff05c145bf8cd9e8454a9a797175a5351f4ba9ba5ca1d0c54818a04931d97b37934898c50b4fd0462e5f3897fd58c616a025b6821532665025098cf9765fc410e12ed0f3615fa3177c5b7dc7417ea611ed21698c8fadceef067a91128c273128623bab00145d831010ae568f37f7f66cf00258911f7ec06616c18c5f69260ec1faf9c3a4483d2b1fdcd092b69231229"}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto(r4, 0x0, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/20, 0xfffffcc4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 747.414651ms ago: executing program 2 (id=194): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) setsockopt$auto(0xffffffffffffffff, 0x94f3, 0x6, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x2) r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, r0, 0x400, 0x70bd29, 0x25dfdbfd, {}, "4d8783e39d322ae5460b7e44ac9ffe953f0c96fb335fc4c489860100a36951eafccb2f6ab40b1e6177ff8094e1e6f4686140e7d408e4f38efde67dfda4ab68133f08137f5eb1e4a634878905eac2212ff05c145bf8cd9e8454a9a797175a5351f4ba9ba5ca1d0c54818a04931d97b37934898c50b4fd0462e5f3897fd58c616a025b6821532665025098cf9765fc410e12ed0f3615fa3177c5b7dc7417ea611ed21698c8fadceef067a91128c273128623bab00145d831010ae568f37f7f66cf00258911f7ec06616c18c5f69260ec1faf9c3a4483d2b1fdcd092b69231229"}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x2000c000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) setreuid$auto(0xffffffffffffffff, 0x8) prctl$auto_PR_SET_VMA_ANON_NAME(0x401, 0x0, 0x0, 0x30000001, 0x3) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) write$auto(r3, 0x0, 0x7) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)=""/20, 0xfffffcc4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0x402c542c, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 644.397978ms ago: executing program 1 (id=195): open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) socket(0x2, 0x1, 0x106) acct$auto(0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x10000, 0x4) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x3) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0xfff, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x80000000, 0x2ffc}, 0x4) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') 0s ago: executing program 3 (id=196): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) epoll_create1$auto(0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 86.952816][ T5818] cgroup: Unknown subsys name 'net' [ 87.110343][ T5818] cgroup: Unknown subsys name 'cpuset' [ 87.119697][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.742518][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.628452][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.639019][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.648536][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.667993][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.678638][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.688343][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.699772][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.708848][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.709463][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.719158][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.726905][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.735146][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.749437][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.750117][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.761500][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.777415][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.787435][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.787720][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.795230][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.804238][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.423870][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 91.448402][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.488729][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.520254][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 91.728639][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.737358][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.745409][ T5835] bridge_slave_0: entered allmulticast mode [ 91.753876][ T5835] bridge_slave_0: entered promiscuous mode [ 91.774172][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.782444][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.790162][ T5840] bridge_slave_0: entered allmulticast mode [ 91.797940][ T5840] bridge_slave_0: entered promiscuous mode [ 91.818725][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.826787][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.837103][ T5829] bridge_slave_0: entered allmulticast mode [ 91.846904][ T5829] bridge_slave_0: entered promiscuous mode [ 91.855217][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.863430][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.872501][ T5835] bridge_slave_1: entered allmulticast mode [ 91.880105][ T5835] bridge_slave_1: entered promiscuous mode [ 91.899855][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.907756][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.915756][ T5840] bridge_slave_1: entered allmulticast mode [ 91.923640][ T5840] bridge_slave_1: entered promiscuous mode [ 91.940394][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.949514][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.959601][ T5829] bridge_slave_1: entered allmulticast mode [ 91.969483][ T5829] bridge_slave_1: entered promiscuous mode [ 91.999908][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.009297][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.017310][ T5830] bridge_slave_0: entered allmulticast mode [ 92.024831][ T5830] bridge_slave_0: entered promiscuous mode [ 92.063351][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.072031][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.080669][ T5830] bridge_slave_1: entered allmulticast mode [ 92.089305][ T5830] bridge_slave_1: entered promiscuous mode [ 92.100600][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.114535][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.129305][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.152638][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.168108][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.181100][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.247053][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.292369][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.304208][ T5840] team0: Port device team_slave_0 added [ 92.312860][ T5835] team0: Port device team_slave_0 added [ 92.321885][ T5829] team0: Port device team_slave_0 added [ 92.340957][ T5840] team0: Port device team_slave_1 added [ 92.358202][ T5835] team0: Port device team_slave_1 added [ 92.367883][ T5829] team0: Port device team_slave_1 added [ 92.413858][ T5830] team0: Port device team_slave_0 added [ 92.467695][ T5830] team0: Port device team_slave_1 added [ 92.475094][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.484556][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.514548][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.529277][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.538372][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.568103][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.581347][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.597142][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.625329][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.651755][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.659846][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.688498][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.701997][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.710073][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.737713][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.751363][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.760264][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.790352][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.839948][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.848526][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.880544][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.894486][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.903275][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.933291][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.933368][ T5842] Bluetooth: hci1: command tx timeout [ 92.955059][ T5839] Bluetooth: hci3: command tx timeout [ 92.955324][ T5152] Bluetooth: hci2: command tx timeout [ 92.970257][ T5833] Bluetooth: hci0: command tx timeout [ 93.038832][ T5835] hsr_slave_0: entered promiscuous mode [ 93.045916][ T5835] hsr_slave_1: entered promiscuous mode [ 93.062959][ T5829] hsr_slave_0: entered promiscuous mode [ 93.070384][ T5829] hsr_slave_1: entered promiscuous mode [ 93.078243][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 93.085815][ T5829] Cannot create hsr debugfs directory [ 93.139225][ T5840] hsr_slave_0: entered promiscuous mode [ 93.145999][ T5840] hsr_slave_1: entered promiscuous mode [ 93.153154][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 93.160218][ T5840] Cannot create hsr debugfs directory [ 93.214089][ T5830] hsr_slave_0: entered promiscuous mode [ 93.222106][ T5830] hsr_slave_1: entered promiscuous mode [ 93.229689][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 93.236053][ T5830] Cannot create hsr debugfs directory [ 93.661572][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.680171][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.698469][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.723034][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.788300][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.802026][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.824339][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.847939][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.955861][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.970917][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.983336][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.998207][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.089000][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.111121][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.122832][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.141125][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.299431][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.316123][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.351406][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.375623][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.404579][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.422018][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.430644][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.457992][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.475415][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.483782][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.494626][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.503247][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.517222][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.531947][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.541185][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.562859][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.572386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.602508][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.629520][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.638855][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.663213][ T4540] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.671126][ T4540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.704012][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.712735][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.992844][ T5833] Bluetooth: hci0: command tx timeout [ 94.992871][ T5842] Bluetooth: hci1: command tx timeout [ 95.000149][ T5152] Bluetooth: hci2: command tx timeout [ 95.006275][ T5839] Bluetooth: hci3: command tx timeout [ 95.304346][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.404315][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.414543][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.432422][ T5840] veth0_vlan: entered promiscuous mode [ 95.464441][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.478489][ T5840] veth1_vlan: entered promiscuous mode [ 95.589797][ T5835] veth0_vlan: entered promiscuous mode [ 95.599645][ T5829] veth0_vlan: entered promiscuous mode [ 95.630470][ T5840] veth0_macvtap: entered promiscuous mode [ 95.643429][ T5835] veth1_vlan: entered promiscuous mode [ 95.664053][ T5829] veth1_vlan: entered promiscuous mode [ 95.673761][ T5840] veth1_macvtap: entered promiscuous mode [ 95.685204][ T5830] veth0_vlan: entered promiscuous mode [ 95.725546][ T5830] veth1_vlan: entered promiscuous mode [ 95.738391][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.772348][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.814694][ T5835] veth0_macvtap: entered promiscuous mode [ 95.826511][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.839546][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.856823][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.868805][ T1113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.884359][ T5835] veth1_macvtap: entered promiscuous mode [ 95.893179][ T5829] veth0_macvtap: entered promiscuous mode [ 95.923192][ T5829] veth1_macvtap: entered promiscuous mode [ 95.950015][ T5830] veth0_macvtap: entered promiscuous mode [ 95.975879][ T5830] veth1_macvtap: entered promiscuous mode [ 95.993267][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.038966][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.061764][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.075441][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.093576][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.110561][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.121405][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.126866][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.155237][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.163310][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.173720][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.196174][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.219416][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.229433][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.245600][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.257290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.258559][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.265905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.327653][ T149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.351928][ T149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.373731][ T149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.396645][ T149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.400326][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.527636][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.553517][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.624624][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.635063][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.698628][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.732900][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.769688][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.778832][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.901507][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.925968][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.939294][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.067215][ T5842] Bluetooth: hci0: command tx timeout [ 97.073934][ T5839] Bluetooth: hci2: command tx timeout [ 97.081966][ T5842] Bluetooth: hci3: command tx timeout [ 97.081981][ T5152] Bluetooth: hci1: command tx timeout [ 97.105546][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.131567][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.387690][ T5938] random: crng reseeded on system resumption [ 97.566934][ T10] cfg80211: failed to load regulatory.db [ 97.766812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.856643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.032597][ T5951] FAULT_INJECTION: forcing a failure. [ 98.032597][ T5951] name fail_futex, interval 1, probability 0, space 0, times 1 [ 98.055825][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 98.055860][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.055926][ T5951] Call Trace: [ 98.055932][ T5951] [ 98.055939][ T5951] dump_stack_lvl+0x16c/0x1f0 [ 98.055970][ T5951] should_fail_ex+0x512/0x640 [ 98.055990][ T5951] get_futex_key+0x1d0/0x15f0 [ 98.056009][ T5951] ? __pfx_get_futex_key+0x10/0x10 [ 98.056031][ T5951] futex_wake+0xea/0x530 [ 98.056051][ T5951] ? kasan_quarantine_put+0x10a/0x240 [ 98.056072][ T5951] ? __pfx_futex_wake+0x10/0x10 [ 98.056093][ T5951] ? putname+0xf5/0x1a0 [ 98.056110][ T5951] do_futex+0x1e3/0x350 [ 98.056132][ T5951] ? __pfx_do_futex+0x10/0x10 [ 98.056162][ T5951] __x64_sys_futex+0x1e0/0x4c0 [ 98.056180][ T5951] ? __x64_sys_openat+0x174/0x210 [ 98.056201][ T5951] ? __pfx___x64_sys_futex+0x10/0x10 [ 98.056229][ T5951] ? xfd_validate_state+0x61/0x180 [ 98.056260][ T5951] do_syscall_64+0xcd/0xf80 [ 98.056297][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.056321][ T5951] RIP: 0033:0x7ff8ccd8f7c9 [ 98.056348][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.056373][ T5951] RSP: 002b:00007ff8cdbd30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.056395][ T5951] RAX: ffffffffffffffda RBX: 00007ff8ccfe5fa8 RCX: 00007ff8ccd8f7c9 [ 98.056411][ T5951] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff8ccfe5fac [ 98.056426][ T5951] RBP: 00007ff8ccfe5fa0 R08: 00007ff8cdbd4000 R09: 0000000000000000 [ 98.056441][ T5951] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 98.056467][ T5951] R13: 00007ff8ccfe6038 R14: 00007fff642d0dd0 R15: 00007fff642d0eb8 [ 98.056502][ T5951] [ 98.376957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.146359][ T5842] Bluetooth: hci1: command tx timeout [ 99.152405][ T5842] Bluetooth: hci3: command tx timeout [ 99.157106][ T5839] Bluetooth: hci2: command tx timeout [ 99.164972][ T5839] Bluetooth: hci0: command tx timeout [ 99.507774][ T5972] FAULT_INJECTION: forcing a failure. [ 99.507774][ T5972] name failslab, interval 1, probability 0, space 0, times 1 [ 99.546577][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 99.546614][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.546630][ T5972] Call Trace: [ 99.546639][ T5972] [ 99.546648][ T5972] dump_stack_lvl+0x16c/0x1f0 [ 99.546691][ T5972] should_fail_ex+0x512/0x640 [ 99.546719][ T5972] ? kmem_cache_alloc_noprof+0x62/0x770 [ 99.546754][ T5972] should_failslab+0xc2/0x120 [ 99.546807][ T5972] kmem_cache_alloc_noprof+0x83/0x770 [ 99.546839][ T5972] ? __kernfs_new_node+0xd2/0x9b0 [ 99.546873][ T5972] ? __kernfs_new_node+0xd2/0x9b0 [ 99.546901][ T5972] __kernfs_new_node+0xd2/0x9b0 [ 99.546935][ T5972] ? __pfx___kernfs_new_node+0x10/0x10 [ 99.546974][ T5972] ? find_held_lock+0x2b/0x80 [ 99.547005][ T5972] ? kernfs_root+0xee/0x2a0 [ 99.547039][ T5972] kernfs_new_node+0x13c/0x1e0 [ 99.547076][ T5972] __kernfs_create_file+0x53/0x350 [ 99.547116][ T5972] sysfs_add_file_mode_ns+0x207/0x3c0 [ 99.547152][ T5972] internal_create_group+0x597/0xf70 [ 99.547192][ T5972] ? __pfx_internal_create_group+0x10/0x10 [ 99.547227][ T5972] ? kernfs_create_link+0x1bd/0x240 [ 99.547268][ T5972] internal_create_groups+0x9d/0x150 [ 99.547302][ T5972] device_add+0x7a5/0x1980 [ 99.547341][ T5972] ? __pfx_device_add+0x10/0x10 [ 99.547376][ T5972] ? lockdep_init_map_type+0x5c/0x270 [ 99.547403][ T5972] ? __init_waitqueue_head+0xca/0x150 [ 99.547441][ T5972] netdev_register_kobject+0x1a9/0x3d0 [ 99.547485][ T5972] register_netdevice+0x13ac/0x21d0 [ 99.547528][ T5972] ? __pfx_register_netdevice+0x10/0x10 [ 99.547571][ T5972] ppp_dev_configure+0xa1e/0xd40 [ 99.547612][ T5972] ppp_ioctl+0x170e/0x2880 [ 99.547649][ T5972] ? find_held_lock+0x2b/0x80 [ 99.547679][ T5972] ? __pfx_ppp_ioctl+0x10/0x10 [ 99.547722][ T5972] ? __fget_files+0x20e/0x3c0 [ 99.547761][ T5972] ? __pfx_ppp_ioctl+0x10/0x10 [ 99.547808][ T5972] __x64_sys_ioctl+0x18e/0x210 [ 99.547843][ T5972] do_syscall_64+0xcd/0xf80 [ 99.547880][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.547903][ T5972] RIP: 0033:0x7ff8ccd8f7c9 [ 99.547921][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.547945][ T5972] RSP: 002b:00007ff8cdbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.547971][ T5972] RAX: ffffffffffffffda RBX: 00007ff8ccfe5fa0 RCX: 00007ff8ccd8f7c9 [ 99.547988][ T5972] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000005 [ 99.548003][ T5972] RBP: 00007ff8cce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.548017][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.548031][ T5972] R13: 00007ff8ccfe6038 R14: 00007ff8ccfe5fa0 R15: 00007fff642d0eb8 [ 99.548068][ T5972] [ 99.925141][ T5978] FAULT_INJECTION: forcing a failure. [ 99.925141][ T5978] name failslab, interval 1, probability 0, space 0, times 0 [ 99.972165][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 99.972199][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.972215][ T5978] Call Trace: [ 99.972223][ T5978] [ 99.972234][ T5978] dump_stack_lvl+0x16c/0x1f0 [ 99.972278][ T5978] should_fail_ex+0x512/0x640 [ 99.972307][ T5978] ? __kvmalloc_node_noprof+0x129/0xa40 [ 99.972347][ T5978] should_failslab+0xc2/0x120 [ 99.972383][ T5978] __kvmalloc_node_noprof+0x14a/0xa40 [ 99.972414][ T5978] ? trace_kmalloc+0x2b/0xb0 [ 99.972447][ T5978] ? __kvmalloc_node_noprof+0x3c9/0xa40 [ 99.972480][ T5978] ? io_alloc_cache_init+0x38/0x170 [ 99.972517][ T5978] ? io_alloc_cache_init+0x38/0x170 [ 99.972559][ T5978] ? io_alloc_cache_init+0x38/0x170 [ 99.972595][ T5978] io_alloc_cache_init+0x38/0x170 [ 99.972632][ T5978] ? io_alloc_cache_init+0x38/0x170 [ 99.972668][ T5978] io_rsrc_cache_init+0x26/0x50 [ 99.972712][ T5978] io_uring_setup+0x5e8/0x1f80 [ 99.972749][ T5978] ? __pfx_io_uring_setup+0x10/0x10 [ 99.972784][ T5978] ? do_futex+0x122/0x350 [ 99.972814][ T5978] ? __pfx_do_futex+0x10/0x10 [ 99.972860][ T5978] ? xfd_validate_state+0x61/0x180 [ 99.972905][ T5978] __x64_sys_io_uring_setup+0xc2/0x170 [ 99.972942][ T5978] do_syscall_64+0xcd/0xf80 [ 99.972981][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.973008][ T5978] RIP: 0033:0x7f8a7118f7c9 [ 99.973029][ T5978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.973055][ T5978] RSP: 002b:00007f8a720ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 99.973079][ T5978] RAX: ffffffffffffffda RBX: 00007f8a713e5fa0 RCX: 00007f8a7118f7c9 [ 99.973096][ T5978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000206 [ 99.973111][ T5978] RBP: 00007f8a71213f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.973127][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.973142][ T5978] R13: 00007f8a713e6038 R14: 00007f8a713e5fa0 R15: 00007ffc6dfae4d8 [ 99.973182][ T5978] [ 101.211109][ T6004] mkiss: ax0: crc mode is auto. [ 102.089320][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.655945][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.092159][ T6046] FAULT_INJECTION: forcing a failure. [ 103.092159][ T6046] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 103.119288][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.3.49 Not tainted syzkaller #0 PREEMPT(full) [ 103.119325][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.119341][ T6046] Call Trace: [ 103.119349][ T6046] [ 103.119360][ T6046] dump_stack_lvl+0x16c/0x1f0 [ 103.119405][ T6046] should_fail_ex+0x512/0x640 [ 103.119440][ T6046] should_fail_alloc_page+0xe7/0x130 [ 103.119482][ T6046] prepare_alloc_pages+0x401/0x670 [ 103.119519][ T6046] ? rcu_is_watching+0x12/0xc0 [ 103.119554][ T6046] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 103.119598][ T6046] ? __lock_acquire+0x436/0x2890 [ 103.119637][ T6046] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 103.119670][ T6046] ? do_raw_spin_lock+0x12c/0x2b0 [ 103.119700][ T6046] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 103.119730][ T6046] ? find_held_lock+0x2b/0x80 [ 103.119772][ T6046] ? __lock_acquire+0x436/0x2890 [ 103.119797][ T6046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 103.119836][ T6046] ? policy_nodemask+0xea/0x4e0 [ 103.119877][ T6046] alloc_pages_mpol+0x1fb/0x550 [ 103.119916][ T6046] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 103.119964][ T6046] folio_alloc_mpol_noprof+0x36/0x2f0 [ 103.119995][ T6046] shmem_alloc_folio+0x135/0x160 [ 103.120037][ T6046] shmem_alloc_and_add_folio+0x494/0xc20 [ 103.120076][ T6046] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 103.120109][ T6046] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 103.120148][ T6046] shmem_get_folio_gfp+0x67f/0x1610 [ 103.120186][ T6046] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 103.120218][ T6046] ? __pfx___might_resched+0x10/0x10 [ 103.120260][ T6046] shmem_fallocate+0x79e/0xfb0 [ 103.120305][ T6046] ? __pfx_shmem_fallocate+0x10/0x10 [ 103.120345][ T6046] ? __lock_acquire+0x436/0x2890 [ 103.120374][ T6046] ? __lock_acquire+0x436/0x2890 [ 103.120398][ T6046] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 103.120449][ T6046] ? __pfx_shmem_fallocate+0x10/0x10 [ 103.120479][ T6046] vfs_fallocate+0x5b4/0x10e0 [ 103.120519][ T6046] ? __pfx_vfs_fallocate+0x10/0x10 [ 103.120574][ T6046] __x64_sys_fallocate+0xd5/0x150 [ 103.120619][ T6046] do_syscall_64+0xcd/0xf80 [ 103.120668][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.120696][ T6046] RIP: 0033:0x7f8a7118f7c9 [ 103.120718][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.120742][ T6046] RSP: 002b:00007f8a720ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 103.120767][ T6046] RAX: ffffffffffffffda RBX: 00007f8a713e5fa0 RCX: 00007f8a7118f7c9 [ 103.120784][ T6046] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 103.120799][ T6046] RBP: 00007f8a71213f91 R08: 0000000000000000 R09: 0000000000000000 [ 103.120815][ T6046] R10: 00000000004cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 103.120830][ T6046] R13: 00007f8a713e6038 R14: 00007f8a713e5fa0 R15: 00007ffc6dfae4d8 [ 103.120868][ T6046] [ 103.465984][ T6049] netlink: 342 bytes leftover after parsing attributes in process `syz.2.50'. [ 103.708395][ T6056] mkiss: ax0: crc mode is auto. [ 104.189831][ T6071] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 104.497227][ T6082] FAULT_INJECTION: forcing a failure. [ 104.497227][ T6082] name failslab, interval 1, probability 0, space 0, times 0 [ 104.516952][ T6082] CPU: 0 UID: 0 PID: 6082 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 104.516991][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.517006][ T6082] Call Trace: [ 104.517016][ T6082] [ 104.517027][ T6082] dump_stack_lvl+0x16c/0x1f0 [ 104.517072][ T6082] should_fail_ex+0x512/0x640 [ 104.517106][ T6082] should_failslab+0xc2/0x120 [ 104.517148][ T6082] __kmalloc_cache_noprof+0x80/0x800 [ 104.517179][ T6082] ? tipc_conn_alloc+0x48/0x590 [ 104.517217][ T6082] ? tipc_conn_alloc+0x48/0x590 [ 104.517248][ T6082] tipc_conn_alloc+0x48/0x590 [ 104.517280][ T6082] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 104.517317][ T6082] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 104.517355][ T6082] ? net_generic+0xea/0x2a0 [ 104.517395][ T6082] tipc_group_create+0x4ab/0x660 [ 104.517444][ T6082] tipc_setsockopt+0x7c5/0xe00 [ 104.517472][ T6082] ? __pfx_tipc_setsockopt+0x10/0x10 [ 104.517521][ T6082] ? __pfx_tipc_setsockopt+0x10/0x10 [ 104.517550][ T6082] do_sock_setsockopt+0xf3/0x1d0 [ 104.517596][ T6082] __sys_setsockopt+0x120/0x1a0 [ 104.517635][ T6082] __x64_sys_setsockopt+0xbd/0x160 [ 104.517665][ T6082] ? do_syscall_64+0x91/0xf80 [ 104.517701][ T6082] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.517737][ T6082] do_syscall_64+0xcd/0xf80 [ 104.517775][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.517802][ T6082] RIP: 0033:0x7f8a7118f7c9 [ 104.517824][ T6082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.517848][ T6082] RSP: 002b:00007f8a720ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.517873][ T6082] RAX: ffffffffffffffda RBX: 00007f8a713e5fa0 RCX: 00007f8a7118f7c9 [ 104.517921][ T6082] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 104.517937][ T6082] RBP: 00007f8a71213f91 R08: 0000000000000014 R09: 0000000000000000 [ 104.517953][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.517970][ T6082] R13: 00007f8a713e6038 R14: 00007f8a713e5fa0 R15: 00007ffc6dfae4d8 [ 104.518007][ T6082] [ 105.203200][ T5839] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 106.504691][ T6120] kvm_intel: kvm [6119]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 106.880151][ T6122] FAULT_INJECTION: forcing a failure. [ 106.880151][ T6122] name failslab, interval 1, probability 0, space 0, times 0 [ 106.895538][ T6122] CPU: 1 UID: 0 PID: 6122 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 106.895575][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.895592][ T6122] Call Trace: [ 106.895600][ T6122] [ 106.895610][ T6122] dump_stack_lvl+0x16c/0x1f0 [ 106.895672][ T6122] should_fail_ex+0x512/0x640 [ 106.895706][ T6122] ? fs_reclaim_acquire+0xae/0x150 [ 106.895759][ T6122] should_failslab+0xc2/0x120 [ 106.895798][ T6122] __kmalloc_noprof+0xeb/0x910 [ 106.895827][ T6122] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 106.895867][ T6122] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 106.895898][ T6122] tomoyo_realpath_from_path+0xc2/0x6e0 [ 106.895942][ T6122] tomoyo_check_open_permission+0x2ab/0x3c0 [ 106.895969][ T6122] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 106.896029][ T6122] ? do_raw_spin_lock+0x12c/0x2b0 [ 106.896066][ T6122] tomoyo_file_open+0x6b/0x90 [ 106.896104][ T6122] security_file_open+0x84/0x1e0 [ 106.896136][ T6122] do_dentry_open+0x597/0x1590 [ 106.896176][ T6122] ? security_inode_permission+0xbf/0x260 [ 106.896215][ T6122] vfs_open+0x82/0x3f0 [ 106.896246][ T6122] path_openat+0x2078/0x3140 [ 106.896303][ T6122] ? __pfx_path_openat+0x10/0x10 [ 106.896353][ T6122] do_filp_open+0x20b/0x470 [ 106.896391][ T6122] ? __pfx_do_filp_open+0x10/0x10 [ 106.896453][ T6122] ? alloc_fd+0x471/0x7d0 [ 106.896499][ T6122] do_sys_openat2+0x121/0x290 [ 106.896528][ T6122] ? __pfx_do_sys_openat2+0x10/0x10 [ 106.896572][ T6122] __x64_sys_openat+0x174/0x210 [ 106.896602][ T6122] ? __pfx___x64_sys_openat+0x10/0x10 [ 106.896646][ T6122] do_syscall_64+0xcd/0xf80 [ 106.896686][ T6122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.896713][ T6122] RIP: 0033:0x7f8a7118f7c9 [ 106.896736][ T6122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.896761][ T6122] RSP: 002b:00007f8a720ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.896786][ T6122] RAX: ffffffffffffffda RBX: 00007f8a713e5fa0 RCX: 00007f8a7118f7c9 [ 106.896804][ T6122] RDX: 00000000001a9382 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 106.896821][ T6122] RBP: 00007f8a71213f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.896838][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.896853][ T6122] R13: 00007f8a713e6038 R14: 00007f8a713e5fa0 R15: 00007ffc6dfae4d8 [ 106.896892][ T6122] [ 107.218306][ T6122] ERROR: Out of memory at tomoyo_realpath_from_path. syzkaller syzkaller login: [ 108.160011][ T6142] zswap: compressor not available [ 108.650168][ T6161] netlink: 330 bytes leftover after parsing attributes in process `syz.1.92'. [ 108.686563][ T6161] Zero length message leads to an empty skb [ 108.828750][ T6164] netlink: 146 bytes leftover after parsing attributes in process `syz.0.93'. [ 109.165379][ T6168] FAULT_INJECTION: forcing a failure. [ 109.165379][ T6168] name failslab, interval 1, probability 0, space 0, times 0 [ 109.180245][ T6168] CPU: 1 UID: 0 PID: 6168 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) [ 109.180277][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.180291][ T6168] Call Trace: [ 109.180298][ T6168] [ 109.180308][ T6168] dump_stack_lvl+0x16c/0x1f0 [ 109.180350][ T6168] should_fail_ex+0x512/0x640 [ 109.180378][ T6168] ? __kmalloc_noprof+0xca/0x910 [ 109.180408][ T6168] ? __pfx_stats_fop_open+0x10/0x10 [ 109.180440][ T6168] should_failslab+0xc2/0x120 [ 109.180477][ T6168] __kmalloc_noprof+0xeb/0x910 [ 109.180504][ T6168] ? __seq_open_private+0x22/0xd0 [ 109.180540][ T6168] ? __pfx_stats_fop_open+0x10/0x10 [ 109.180570][ T6168] ? __seq_open_private+0x22/0xd0 [ 109.180599][ T6168] __seq_open_private+0x22/0xd0 [ 109.180631][ T6168] sc_common_open+0x6b/0x200 [ 109.180663][ T6168] full_proxy_open_regular+0x1b9/0x350 [ 109.180703][ T6168] do_dentry_open+0x748/0x1590 [ 109.180752][ T6168] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 109.180800][ T6168] vfs_open+0x82/0x3f0 [ 109.180835][ T6168] path_openat+0x2078/0x3140 [ 109.180882][ T6168] ? __pfx_path_openat+0x10/0x10 [ 109.180932][ T6168] do_filp_open+0x20b/0x470 [ 109.180966][ T6168] ? __pfx_do_filp_open+0x10/0x10 [ 109.181026][ T6168] ? alloc_fd+0x471/0x7d0 [ 109.181071][ T6168] do_sys_openat2+0x121/0x290 [ 109.181107][ T6168] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.181150][ T6168] __x64_sys_openat+0x174/0x210 [ 109.181180][ T6168] ? __pfx___x64_sys_openat+0x10/0x10 [ 109.181224][ T6168] do_syscall_64+0xcd/0xf80 [ 109.181263][ T6168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.181290][ T6168] RIP: 0033:0x7ff8ccd8f7c9 [ 109.181312][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.181335][ T6168] RSP: 002b:00007ff8cdbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.181378][ T6168] RAX: ffffffffffffffda RBX: 00007ff8ccfe5fa0 RCX: 00007ff8ccd8f7c9 [ 109.181396][ T6168] RDX: 0000000000088180 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 109.181414][ T6168] RBP: 00007ff8cce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.181431][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.181447][ T6168] R13: 00007ff8ccfe6038 R14: 00007ff8ccfe5fa0 R15: 00007fff642d0eb8 [ 109.181482][ T6168] [ 109.688687][ T6177] FAULT_INJECTION: forcing a failure. [ 109.688687][ T6177] name failslab, interval 1, probability 0, space 0, times 0 [ 109.752375][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.2.97 Not tainted syzkaller #0 PREEMPT(full) [ 109.752417][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.752433][ T6177] Call Trace: [ 109.752442][ T6177] [ 109.752452][ T6177] dump_stack_lvl+0x16c/0x1f0 [ 109.752496][ T6177] should_fail_ex+0x512/0x640 [ 109.752531][ T6177] should_failslab+0xc2/0x120 [ 109.752572][ T6177] __kmalloc_noprof+0xeb/0x910 [ 109.752603][ T6177] ? aa_label_asxprint+0x75/0x130 [ 109.752637][ T6177] ? aa_label_asxprint+0x75/0x130 [ 109.752662][ T6177] aa_label_asxprint+0x75/0x130 [ 109.752692][ T6177] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 109.752728][ T6177] security_lsmprop_to_secctx+0x146/0x1a0 [ 109.752771][ T6177] audit_log_subj_ctx+0x29b/0x460 [ 109.752805][ T6177] ? map_id_range_up+0x2ce/0x3b0 [ 109.752844][ T6177] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 109.752884][ T6177] ? audit_log_format+0xe8/0x130 [ 109.752916][ T6177] ? apparmor_current_getlsmprop_subj+0xf0/0x3f0 [ 109.752952][ T6177] audit_log_task_context+0x85/0xb0 [ 109.752993][ T6177] ? __pfx_audit_log_task_context+0x10/0x10 [ 109.753036][ T6177] integrity_audit_message+0x269/0x580 [ 109.753077][ T6177] ? take_dentry_name_snapshot+0x314/0x7d0 [ 109.753108][ T6177] ? __pfx_integrity_audit_message+0x10/0x10 [ 109.753148][ T6177] ? take_dentry_name_snapshot+0x319/0x7d0 [ 109.753183][ T6177] integrity_audit_msg+0x41/0x60 [ 109.753223][ T6177] ima_collect_measurement+0x793/0xa50 [ 109.753264][ T6177] ? __pfx_ima_collect_measurement+0x10/0x10 [ 109.753320][ T6177] ? do_raw_read_unlock+0x44/0xe0 [ 109.753351][ T6177] ? _raw_read_unlock+0x28/0x50 [ 109.753392][ T6177] ? vfs_getxattr_alloc+0xec/0x350 [ 109.753436][ T6177] ? ima_get_hash_algo+0x27c/0x400 [ 109.753474][ T6177] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 109.753520][ T6177] ? process_measurement+0x11b9/0x22d0 [ 109.753558][ T6177] process_measurement+0x11b9/0x22d0 [ 109.753607][ T6177] ? trace_sched_set_need_resched_tp+0xf3/0x130 [ 109.753647][ T6177] ? __pfx_process_measurement+0x10/0x10 [ 109.753700][ T6177] ? find_held_lock+0x2b/0x80 [ 109.753730][ T6177] ? aa_file_perm+0x29e/0x1560 [ 109.753794][ T6177] ? futex_private_hash_put+0x160/0x1b0 [ 109.753824][ T6177] ? futex_hash_put+0x3e/0x50 [ 109.753854][ T6177] ima_file_mmap+0x1b6/0x1e0 [ 109.753897][ T6177] ? __pfx_ima_file_mmap+0x10/0x10 [ 109.753946][ T6177] security_mmap_file+0x88c/0x990 [ 109.753993][ T6177] vm_mmap_pgoff+0xec/0x470 [ 109.754033][ T6177] ? find_held_lock+0x2b/0x80 [ 109.754066][ T6177] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 109.754110][ T6177] ? __fget_files+0x20e/0x3c0 [ 109.754143][ T6177] ksys_mmap_pgoff+0x32c/0x5c0 [ 109.754193][ T6177] ? __pfx_ksys_write+0x10/0x10 [ 109.754233][ T6177] __x64_sys_mmap+0x125/0x190 [ 109.754266][ T6177] do_syscall_64+0xcd/0xf80 [ 109.754307][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.754334][ T6177] RIP: 0033:0x7fbca438f7c9 [ 109.754356][ T6177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.754380][ T6177] RSP: 002b:00007fbca530f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.754406][ T6177] RAX: ffffffffffffffda RBX: 00007fbca45e5fa0 RCX: 00007fbca438f7c9 [ 109.754424][ T6177] RDX: 000000000000ffff RSI: 0000000000000009 RDI: fffffffffffffffc [ 109.754440][ T6177] RBP: 00007fbca4413f91 R08: 0000000000000003 R09: 0000000000008000 [ 109.754457][ T6177] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000000 [ 109.754474][ T6177] R13: 00007fbca45e6038 R14: 00007fbca45e5fa0 R15: 00007ffe2739f6a8 [ 109.754512][ T6177] [ 109.762299][ T6180] syz.1.98 uses obsolete (PF_INET,SOCK_PACKET) [ 109.786725][ T6177] audit: error in audit_log_subj_ctx [ 109.897489][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 109.952610][ T30] audit: type=1800 audit(1767949346.682:2): pid=6177 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.2.97" name="file0" dev="tmpfs" ino=149 res=0 errno=0 [ 110.685838][ T6195] FAULT_INJECTION: forcing a failure. [ 110.685838][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 110.716740][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.1.104 Not tainted syzkaller #0 PREEMPT(full) [ 110.716776][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.716790][ T6195] Call Trace: [ 110.716797][ T6195] [ 110.716806][ T6195] dump_stack_lvl+0x16c/0x1f0 [ 110.716885][ T6195] should_fail_ex+0x512/0x640 [ 110.716911][ T6195] ? __kmalloc_cache_noprof+0x5f/0x800 [ 110.716940][ T6195] should_failslab+0xc2/0x120 [ 110.716975][ T6195] __kmalloc_cache_noprof+0x80/0x800 [ 110.716999][ T6195] ? copy_mount_options+0x55/0x190 [ 110.717036][ T6195] ? copy_mount_options+0x55/0x190 [ 110.717058][ T6195] copy_mount_options+0x55/0x190 [ 110.717085][ T6195] __x64_sys_mount+0x1ab/0x310 [ 110.717107][ T6195] ? __pfx___x64_sys_mount+0x10/0x10 [ 110.717137][ T6195] do_syscall_64+0xcd/0xf80 [ 110.717176][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.717199][ T6195] RIP: 0033:0x7fe33178f7c9 [ 110.717217][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.717238][ T6195] RSP: 002b:00007fe33255c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.717259][ T6195] RAX: ffffffffffffffda RBX: 00007fe3319e5fa0 RCX: 00007fe33178f7c9 [ 110.717301][ T6195] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 110.717316][ T6195] RBP: 00007fe331813f91 R08: 0000200000000280 R09: 0000000000000000 [ 110.717329][ T6195] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 110.717342][ T6195] R13: 00007fe3319e6038 R14: 00007fe3319e5fa0 R15: 00007ffee374f1d8 [ 110.717372][ T6195] [ 110.953825][ T6203] netlink: 330 bytes leftover after parsing attributes in process `syz.0.105'. [ 110.969272][ T6203] : renamed from bridge_slave_1 (while UP) [ 110.999017][ T6203] bridge0: port 2() entered disabled state [ 111.305189][ T6208] zswap: compressor not available [ 111.312294][ T6210] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 111.674660][ T6222] zswap: compressor not available [ 111.776961][ T30] audit: type=1800 audit(1767949348.772:3): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.112" name="dbroot" dev="configfs" ino=10705 res=0 errno=0 [ 111.799202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 111.919688][ T6217] zswap: compressor not available [ 111.972411][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 113.002404][ T6249] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 113.004823][ T6250] FAULT_INJECTION: forcing a failure. [ 113.004823][ T6250] name failslab, interval 1, probability 0, space 0, times 0 [ 113.048306][ T6250] CPU: 1 UID: 0 PID: 6250 Comm: syz.3.118 Not tainted syzkaller #0 PREEMPT(full) [ 113.048343][ T6250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.048359][ T6250] Call Trace: [ 113.048368][ T6250] [ 113.048392][ T6250] dump_stack_lvl+0x16c/0x1f0 [ 113.048436][ T6250] should_fail_ex+0x512/0x640 [ 113.048465][ T6250] ? __kmalloc_cache_noprof+0x5f/0x800 [ 113.048495][ T6250] should_failslab+0xc2/0x120 [ 113.048535][ T6250] __kmalloc_cache_noprof+0x80/0x800 [ 113.048566][ T6250] ? nfc_allocate_device+0x15b/0x5e0 [ 113.048607][ T6250] ? nfc_allocate_device+0x15b/0x5e0 [ 113.048641][ T6250] nfc_allocate_device+0x15b/0x5e0 [ 113.048675][ T6250] ? __init_swait_queue_head+0xca/0x150 [ 113.048710][ T6250] nci_allocate_device+0x23b/0x460 [ 113.048740][ T6250] virtual_ncidev_open+0x6f/0x220 [ 113.048779][ T6250] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 113.048820][ T6250] misc_open+0x26d/0x450 [ 113.048849][ T6250] ? __pfx_misc_open+0x10/0x10 [ 113.048874][ T6250] chrdev_open+0x234/0x6a0 [ 113.048911][ T6250] ? __pfx_chrdev_open+0x10/0x10 [ 113.048948][ T6250] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 113.048989][ T6250] do_dentry_open+0x748/0x1590 [ 113.049022][ T6250] ? __pfx_chrdev_open+0x10/0x10 [ 113.049068][ T6250] vfs_open+0x82/0x3f0 [ 113.049098][ T6250] path_openat+0x2078/0x3140 [ 113.049141][ T6250] ? __pfx_path_openat+0x10/0x10 [ 113.049189][ T6250] do_filp_open+0x20b/0x470 [ 113.049221][ T6250] ? __pfx_do_filp_open+0x10/0x10 [ 113.049278][ T6250] ? alloc_fd+0x471/0x7d0 [ 113.049320][ T6250] do_sys_openat2+0x121/0x290 [ 113.049355][ T6250] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.049406][ T6250] __x64_sys_openat+0x174/0x210 [ 113.049436][ T6250] ? __pfx___x64_sys_openat+0x10/0x10 [ 113.049479][ T6250] do_syscall_64+0xcd/0xf80 [ 113.049519][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.049545][ T6250] RIP: 0033:0x7f8a7118f7c9 [ 113.049564][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.049589][ T6250] RSP: 002b:00007f8a720ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.049612][ T6250] RAX: ffffffffffffffda RBX: 00007f8a713e5fa0 RCX: 00007f8a7118f7c9 [ 113.049628][ T6250] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 113.049643][ T6250] RBP: 00007f8a71213f91 R08: 0000000000000000 R09: 0000000000000000 [ 113.049656][ T6250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.049670][ T6250] R13: 00007f8a713e6038 R14: 00007f8a713e5fa0 R15: 00007ffc6dfae4d8 [ 113.049708][ T6250] [ 113.446600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.477259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.496432][ T30] audit: type=1800 audit(1767949350.482:4): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.120" name="features" dev="configfs" ino=10104 res=0 errno=0 [ 113.646836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.768879][ T6266] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.834619][ T30] audit: type=1800 audit(1767949350.822:5): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.124" name="dbroot" dev="configfs" ino=10781 res=0 errno=0 [ 113.876660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.106379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 114.187645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.215335][ T6273] zswap: compressor not available [ 114.297235][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 114.734766][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 114.809396][ T6291] FAULT_INJECTION: forcing a failure. [ 114.809396][ T6291] name failslab, interval 1, probability 0, space 0, times 0 [ 114.856727][ T6291] CPU: 1 UID: 0 PID: 6291 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT(full) [ 114.856764][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.856780][ T6291] Call Trace: [ 114.856789][ T6291] [ 114.856799][ T6291] dump_stack_lvl+0x16c/0x1f0 [ 114.856846][ T6291] should_fail_ex+0x512/0x640 [ 114.856875][ T6291] ? kmem_cache_alloc_noprof+0x62/0x770 [ 114.856913][ T6291] should_failslab+0xc2/0x120 [ 114.856951][ T6291] kmem_cache_alloc_noprof+0x83/0x770 [ 114.856983][ T6291] ? __kernfs_new_node+0xd2/0x9b0 [ 114.857031][ T6291] ? __kernfs_new_node+0xd2/0x9b0 [ 114.857060][ T6291] __kernfs_new_node+0xd2/0x9b0 [ 114.857096][ T6291] ? __pfx___kernfs_new_node+0x10/0x10 [ 114.857138][ T6291] ? find_held_lock+0x2b/0x80 [ 114.857172][ T6291] ? kernfs_root+0xee/0x2a0 [ 114.857218][ T6291] kernfs_new_node+0x13c/0x1e0 [ 114.857260][ T6291] __kernfs_create_file+0x53/0x350 [ 114.857305][ T6291] sysfs_add_file_mode_ns+0x207/0x3c0 [ 114.857345][ T6291] internal_create_group+0x597/0xf70 [ 114.857386][ T6291] ? __pfx_internal_create_group+0x10/0x10 [ 114.857423][ T6291] ? kernfs_create_link+0x1bd/0x240 [ 114.857467][ T6291] internal_create_groups+0x9d/0x150 [ 114.857503][ T6291] device_add+0xf56/0x1980 [ 114.857546][ T6291] ? __pfx_device_add+0x10/0x10 [ 114.857582][ T6291] ? lockdep_init_map_type+0x5c/0x270 [ 114.857611][ T6291] ? __init_waitqueue_head+0xca/0x150 [ 114.857651][ T6291] netdev_register_kobject+0x1a9/0x3d0 [ 114.857696][ T6291] register_netdevice+0x13ac/0x21d0 [ 114.857740][ T6291] ? __pfx_register_netdevice+0x10/0x10 [ 114.857778][ T6291] ? dev_addr_mod+0x31a/0x4f0 [ 114.857811][ T6291] __tun_chr_ioctl+0x1eb6/0x4880 [ 114.857838][ T6291] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 114.857875][ T6291] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 114.857907][ T6291] ? hook_file_ioctl_common+0x144/0x410 [ 114.857945][ T6291] ? __fget_files+0x20e/0x3c0 [ 114.857986][ T6291] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 114.858036][ T6291] __x64_sys_ioctl+0x18e/0x210 [ 114.858071][ T6291] do_syscall_64+0xcd/0xf80 [ 114.858113][ T6291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.858141][ T6291] RIP: 0033:0x7fbca438f7c9 [ 114.858165][ T6291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.858188][ T6291] RSP: 002b:00007fbca530f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.858226][ T6291] RAX: ffffffffffffffda RBX: 00007fbca45e5fa0 RCX: 00007fbca438f7c9 [ 114.858244][ T6291] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000005 [ 114.858261][ T6291] RBP: 00007fbca4413f91 R08: 0000000000000000 R09: 0000000000000000 [ 114.858278][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.858295][ T6291] R13: 00007fbca45e6038 R14: 00007fbca45e5fa0 R15: 00007ffe2739f6a8 [ 114.858331][ T6291] [ 115.331615][ T6301] FAULT_INJECTION: forcing a failure. [ 115.331615][ T6301] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.382542][ T6301] CPU: 0 UID: 0 PID: 6301 Comm: syz.0.133 Not tainted syzkaller #0 PREEMPT(full) [ 115.382582][ T6301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.382599][ T6301] Call Trace: [ 115.382608][ T6301] [ 115.382619][ T6301] dump_stack_lvl+0x16c/0x1f0 [ 115.382680][ T6301] should_fail_ex+0x512/0x640 [ 115.382715][ T6301] get_futex_key+0x1d0/0x15f0 [ 115.382750][ T6301] ? __pfx_get_futex_key+0x10/0x10 [ 115.382791][ T6301] futex_wake+0xea/0x530 [ 115.382830][ T6301] ? __pfx_futex_wake+0x10/0x10 [ 115.382862][ T6301] ? find_held_lock+0x2b/0x80 [ 115.382899][ T6301] ? __local_bh_enable_ip+0xa4/0x120 [ 115.382941][ T6301] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.382979][ T6301] ? ip4_datagram_connect+0x38/0x50 [ 115.383007][ T6301] ? __local_bh_enable_ip+0xa4/0x120 [ 115.383047][ T6301] do_futex+0x1e3/0x350 [ 115.383086][ T6301] ? __pfx_do_futex+0x10/0x10 [ 115.383115][ T6301] ? fput+0x70/0xf0 [ 115.383141][ T6301] ? __sys_connect+0xe0/0x160 [ 115.383175][ T6301] __x64_sys_futex+0x1e0/0x4c0 [ 115.383210][ T6301] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.383241][ T6301] ? xfd_validate_state+0x61/0x180 [ 115.383278][ T6301] do_syscall_64+0xcd/0xf80 [ 115.383332][ T6301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.383359][ T6301] RIP: 0033:0x7ff8ccd8f7c9 [ 115.383387][ T6301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.383412][ T6301] RSP: 002b:00007ff8cdbd30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.383437][ T6301] RAX: ffffffffffffffda RBX: 00007ff8ccfe5fa8 RCX: 00007ff8ccd8f7c9 [ 115.383455][ T6301] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff8ccfe5fac [ 115.383472][ T6301] RBP: 00007ff8ccfe5fa0 R08: 00007ff8cdbd4000 R09: 0000000000000000 [ 115.383489][ T6301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.383505][ T6301] R13: 00007ff8ccfe6038 R14: 00007fff642d0dd0 R15: 00007fff642d0eb8 [ 115.383543][ T6301] [ 115.912782][ T6313] FAULT_INJECTION: forcing a failure. [ 115.912782][ T6313] name fail_futex, interval 1, probability 0, space 0, times 0 [ 115.927497][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT(full) [ 115.927533][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.927548][ T6313] Call Trace: [ 115.927557][ T6313] [ 115.927566][ T6313] dump_stack_lvl+0x16c/0x1f0 [ 115.927610][ T6313] should_fail_ex+0x512/0x640 [ 115.927643][ T6313] should_fail_futex+0x4c/0x60 [ 115.927670][ T6313] futex_lock_pi_atomic+0x127/0xc50 [ 115.927712][ T6313] futex_lock_pi+0x23f/0x7c0 [ 115.927750][ T6313] ? __pfx_futex_lock_pi+0x10/0x10 [ 115.927780][ T6313] ? __futex_wait+0x24b/0x2f0 [ 115.927839][ T6313] ? futex_private_hash_put+0x160/0x1b0 [ 115.927870][ T6313] ? __pfx_futex_wake_mark+0x10/0x10 [ 115.927914][ T6313] ? ksys_write+0x190/0x250 [ 115.927955][ T6313] do_futex+0x11a/0x350 [ 115.927983][ T6313] ? __pfx_do_futex+0x10/0x10 [ 115.928020][ T6313] __x64_sys_futex+0x1e0/0x4c0 [ 115.928050][ T6313] ? fput+0x70/0xf0 [ 115.928072][ T6313] ? __pfx___x64_sys_futex+0x10/0x10 [ 115.928112][ T6313] ? xfd_validate_state+0x61/0x180 [ 115.928135][ T6313] ? __pfx_ksys_write+0x10/0x10 [ 115.928181][ T6313] do_syscall_64+0xcd/0xf80 [ 115.928220][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.928245][ T6313] RIP: 0033:0x7ff8ccd8f7c9 [ 115.928267][ T6313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.928294][ T6313] RSP: 002b:00007ff8cdbd3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 115.928319][ T6313] RAX: ffffffffffffffda RBX: 00007ff8ccfe5fa0 RCX: 00007ff8ccd8f7c9 [ 115.928336][ T6313] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 115.928351][ T6313] RBP: 00007ff8cce13f91 R08: 0000000000000000 R09: 000000008000fff5 [ 115.928367][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.928383][ T6313] R13: 00007ff8ccfe6038 R14: 00007ff8ccfe5fa0 R15: 00007fff642d0eb8 [ 115.928419][ T6313] [ 116.268984][ T6322] FAULT_INJECTION: forcing a failure. [ 116.268984][ T6322] name failslab, interval 1, probability 0, space 0, times 0 [ 116.292994][ T6322] CPU: 1 UID: 0 PID: 6322 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(full) [ 116.293038][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.293063][ T6322] Call Trace: [ 116.293072][ T6322] [ 116.293083][ T6322] dump_stack_lvl+0x16c/0x1f0 [ 116.293132][ T6322] should_fail_ex+0x512/0x640 [ 116.293161][ T6322] ? fs_reclaim_acquire+0xae/0x150 [ 116.293204][ T6322] should_failslab+0xc2/0x120 [ 116.293245][ T6322] __kmalloc_noprof+0xeb/0x910 [ 116.293274][ T6322] ? tomoyo_encode2+0x100/0x3e0 [ 116.293313][ T6322] ? tomoyo_encode2+0x100/0x3e0 [ 116.293350][ T6322] tomoyo_encode2+0x100/0x3e0 [ 116.293387][ T6322] tomoyo_encode+0x29/0x50 [ 116.293422][ T6322] tomoyo_realpath_from_path+0x18f/0x6e0 [ 116.293465][ T6322] tomoyo_check_open_permission+0x2ab/0x3c0 [ 116.293497][ T6322] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 116.293556][ T6322] ? do_raw_spin_lock+0x12c/0x2b0 [ 116.293595][ T6322] tomoyo_file_open+0x6b/0x90 [ 116.293633][ T6322] security_file_open+0x84/0x1e0 [ 116.293666][ T6322] do_dentry_open+0x597/0x1590 [ 116.293704][ T6322] ? security_inode_permission+0xbf/0x260 [ 116.293735][ T6322] vfs_open+0x82/0x3f0 [ 116.293766][ T6322] path_openat+0x2078/0x3140 [ 116.293813][ T6322] ? __pfx_path_openat+0x10/0x10 [ 116.293865][ T6322] do_filp_open+0x20b/0x470 [ 116.293902][ T6322] ? __pfx_do_filp_open+0x10/0x10 [ 116.293963][ T6322] ? alloc_fd+0x471/0x7d0 [ 116.294010][ T6322] do_sys_openat2+0x121/0x290 [ 116.294037][ T6322] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.294089][ T6322] __x64_sys_openat+0x174/0x210 [ 116.294117][ T6322] ? __pfx___x64_sys_openat+0x10/0x10 [ 116.294156][ T6322] do_syscall_64+0xcd/0xf80 [ 116.294194][ T6322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.294219][ T6322] RIP: 0033:0x7fe33178f7c9 [ 116.294240][ T6322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.294262][ T6322] RSP: 002b:00007fe32f9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.294287][ T6322] RAX: ffffffffffffffda RBX: 00007fe3319e6180 RCX: 00007fe33178f7c9 [ 116.294303][ T6322] RDX: 000000000000a000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 116.294321][ T6322] RBP: 00007fe331813f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.294337][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.294353][ T6322] R13: 00007fe3319e6218 R14: 00007fe3319e6180 R15: 00007ffee374f1d8 [ 116.294387][ T6322] [ 116.294408][ T6322] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.814176][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 116.909848][ T6332] bridge0: port 3(gretap0) entered blocking state [ 116.938232][ T6332] bridge0: port 3(gretap0) entered disabled state [ 116.945593][ T6332] gretap0: entered allmulticast mode [ 116.957016][ T6332] FAULT_INJECTION: forcing a failure. [ 116.957016][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 116.996990][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) [ 116.997038][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.997054][ T6332] Call Trace: [ 116.997063][ T6332] [ 116.997074][ T6332] dump_stack_lvl+0x16c/0x1f0 [ 116.997118][ T6332] should_fail_ex+0x512/0x640 [ 116.997146][ T6332] ? kmem_cache_alloc_noprof+0x62/0x770 [ 116.997182][ T6332] should_failslab+0xc2/0x120 [ 116.997220][ T6332] kmem_cache_alloc_noprof+0x83/0x770 [ 116.997250][ T6332] ? __kernfs_new_node+0xd2/0x9b0 [ 116.997293][ T6332] ? __kernfs_new_node+0xd2/0x9b0 [ 116.997321][ T6332] __kernfs_new_node+0xd2/0x9b0 [ 116.997356][ T6332] ? __pfx___kernfs_new_node+0x10/0x10 [ 116.997396][ T6332] ? find_held_lock+0x2b/0x80 [ 116.997430][ T6332] ? kernfs_root+0xee/0x2a0 [ 116.997467][ T6332] kernfs_new_node+0x13c/0x1e0 [ 116.997507][ T6332] kernfs_create_link+0xcc/0x240 [ 116.997548][ T6332] sysfs_do_create_link_sd+0x90/0x140 [ 116.997580][ T6332] sysfs_create_link+0x61/0xc0 [ 116.997609][ T6332] br_sysfs_addif+0x1ae/0x220 [ 116.997651][ T6332] br_add_if+0x70d/0x1b70 [ 116.997687][ T6332] ? security_capable+0x7e/0x260 [ 116.997731][ T6332] add_del_if+0x114/0x160 [ 116.997768][ T6332] br_dev_siocdevprivate+0x908/0x1650 [ 116.997832][ T6332] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 116.997885][ T6332] ? lock_acquire+0x179/0x330 [ 116.997914][ T6332] ? __pfx___might_resched+0x10/0x10 [ 116.997956][ T6332] ? netdev_name_node_lookup+0x127/0x180 [ 116.997986][ T6332] ? __mutex_lock+0x27b/0x1ca0 [ 116.998043][ T6332] dev_ifsioc+0x8ee/0x1ee0 [ 116.998080][ T6332] ? __pfx_dev_ifsioc+0x10/0x10 [ 116.998109][ T6332] ? __pfx___mutex_lock+0x10/0x10 [ 116.998168][ T6332] ? dev_load+0x8e/0x240 [ 116.998205][ T6332] dev_ioctl+0x1b2/0x1060 [ 116.998240][ T6332] sock_ioctl+0x5b3/0x6b0 [ 116.998266][ T6332] ? __pfx_sock_ioctl+0x10/0x10 [ 116.998288][ T6332] ? hook_file_ioctl_common+0x144/0x410 [ 116.998328][ T6332] ? __fget_files+0x20e/0x3c0 [ 116.998368][ T6332] ? __pfx_sock_ioctl+0x10/0x10 [ 116.998395][ T6332] __x64_sys_ioctl+0x18e/0x210 [ 116.998429][ T6332] do_syscall_64+0xcd/0xf80 [ 116.998468][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.998495][ T6332] RIP: 0033:0x7f8a7118f7c9 [ 116.998516][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.998539][ T6332] RSP: 002b:00007f8a720ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.998562][ T6332] RAX: ffffffffffffffda RBX: 00007f8a713e5fa0 RCX: 00007f8a7118f7c9 [ 116.998579][ T6332] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000005 [ 116.998595][ T6332] RBP: 00007f8a71213f91 R08: 0000000000000000 R09: 0000000000000000 [ 116.998610][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.998625][ T6332] R13: 00007f8a713e6038 R14: 00007f8a713e5fa0 R15: 00007ffc6dfae4d8 [ 116.998660][ T6332] [ 117.385366][ T6332] gretap0: left allmulticast mode [ 117.422144][ T6337] FAULT_INJECTION: forcing a failure. [ 117.422144][ T6337] name failslab, interval 1, probability 0, space 0, times 0 [ 117.443265][ T6337] CPU: 1 UID: 0 PID: 6337 Comm: syz.0.142 Not tainted syzkaller #0 PREEMPT(full) [ 117.443302][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.443317][ T6337] Call Trace: [ 117.443326][ T6337] [ 117.443336][ T6337] dump_stack_lvl+0x16c/0x1f0 [ 117.443382][ T6337] should_fail_ex+0x512/0x640 [ 117.443436][ T6337] ? __kmalloc_cache_noprof+0x5f/0x800 [ 117.443471][ T6337] should_failslab+0xc2/0x120 [ 117.443511][ T6337] __kmalloc_cache_noprof+0x80/0x800 [ 117.443544][ T6337] ? ptp_open+0xe4/0x550 [ 117.443579][ T6337] ? ptp_open+0xe4/0x550 [ 117.443606][ T6337] ptp_open+0xe4/0x550 [ 117.443640][ T6337] ? __pfx_ptp_open+0x10/0x10 [ 117.443681][ T6337] ? __pfx_ptp_open+0x10/0x10 [ 117.443711][ T6337] posix_clock_open+0x17b/0x290 [ 117.443739][ T6337] ? __pfx_posix_clock_open+0x10/0x10 [ 117.443764][ T6337] chrdev_open+0x234/0x6a0 [ 117.443804][ T6337] ? __pfx_chrdev_open+0x10/0x10 [ 117.443844][ T6337] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 117.443891][ T6337] do_dentry_open+0x748/0x1590 [ 117.443926][ T6337] ? __pfx_chrdev_open+0x10/0x10 [ 117.443973][ T6337] vfs_open+0x82/0x3f0 [ 117.444006][ T6337] path_openat+0x2078/0x3140 [ 117.444055][ T6337] ? __pfx_path_openat+0x10/0x10 [ 117.444106][ T6337] do_filp_open+0x20b/0x470 [ 117.444149][ T6337] ? __pfx_do_filp_open+0x10/0x10 [ 117.444219][ T6337] ? alloc_fd+0x471/0x7d0 [ 117.444267][ T6337] do_sys_openat2+0x121/0x290 [ 117.444297][ T6337] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.444342][ T6337] __x64_sys_openat+0x174/0x210 [ 117.444373][ T6337] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.444419][ T6337] do_syscall_64+0xcd/0xf80 [ 117.444460][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.444487][ T6337] RIP: 0033:0x7ff8ccd8f7c9 [ 117.444509][ T6337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.444534][ T6337] RSP: 002b:00007ff8cdbd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.444560][ T6337] RAX: ffffffffffffffda RBX: 00007ff8ccfe5fa0 RCX: 00007ff8ccd8f7c9 [ 117.444578][ T6337] RDX: 0000000000028840 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 117.444596][ T6337] RBP: 00007ff8cce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 117.444612][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.444628][ T6337] R13: 00007ff8ccfe6038 R14: 00007ff8ccfe5fa0 R15: 00007fff642d0eb8 [ 117.444667][ T6337] [ 117.783147][ T30] audit: type=1800 audit(1767949354.702:6): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.141" name="dbroot" dev="configfs" ino=10938 res=0 errno=0 [ 118.026049][ T6344] sp0: Synchronizing with TNC [ 118.268943][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 118.524892][ T6357] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 118.639950][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 118.663768][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.151'. [ 118.675412][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.685188][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.697883][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.707135][ T6362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.176575][ T6374] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.697832][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 119.901788][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 120.216002][ T6400] FAULT_INJECTION: forcing a failure. [ 120.216002][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 120.296580][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.1.163 Not tainted syzkaller #0 PREEMPT(full) [ 120.296621][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.296638][ T6400] Call Trace: [ 120.296647][ T6400] [ 120.296658][ T6400] dump_stack_lvl+0x16c/0x1f0 [ 120.296704][ T6400] should_fail_ex+0x512/0x640 [ 120.296734][ T6400] ? __kmalloc_node_noprof+0xcd/0x930 [ 120.296772][ T6400] should_failslab+0xc2/0x120 [ 120.296818][ T6400] __kmalloc_node_noprof+0xee/0x930 [ 120.296854][ T6400] ? alloc_slab_obj_exts+0x43/0xf0 [ 120.296880][ T6400] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 120.296934][ T6400] ? alloc_slab_obj_exts+0x43/0xf0 [ 120.296961][ T6400] alloc_slab_obj_exts+0x43/0xf0 [ 120.296992][ T6400] new_slab+0x353/0x430 [ 120.297022][ T6400] ___slab_alloc+0xe18/0x1c90 [ 120.297052][ T6400] ? proc_alloc_inode+0x25/0x200 [ 120.297091][ T6400] ? proc_alloc_inode+0x25/0x200 [ 120.297120][ T6400] ? __slab_alloc.constprop.0+0x63/0x110 [ 120.297151][ T6400] __slab_alloc.constprop.0+0x63/0x110 [ 120.297185][ T6400] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 120.297220][ T6400] ? proc_alloc_inode+0x25/0x200 [ 120.297256][ T6400] ? __pfx_proc_alloc_inode+0x10/0x10 [ 120.297286][ T6400] ? proc_alloc_inode+0x25/0x200 [ 120.297317][ T6400] proc_alloc_inode+0x25/0x200 [ 120.297347][ T6400] alloc_inode+0x64/0x240 [ 120.297377][ T6400] new_inode+0x22/0x1c0 [ 120.297410][ T6400] proc_pid_make_inode+0x22/0x160 [ 120.297466][ T6400] proc_pident_instantiate+0x85/0x310 [ 120.297504][ T6400] proc_pident_lookup+0x1f5/0x270 [ 120.297542][ T6400] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 120.297574][ T6400] lookup_open.isra.0+0x4e2/0x1780 [ 120.297616][ T6400] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 120.297668][ T6400] ? mnt_get_write_access+0x1e9/0x2f0 [ 120.297704][ T6400] path_openat+0x12bb/0x3140 [ 120.297752][ T6400] ? __pfx_path_openat+0x10/0x10 [ 120.297810][ T6400] do_filp_open+0x20b/0x470 [ 120.297850][ T6400] ? __pfx_do_filp_open+0x10/0x10 [ 120.297907][ T6400] ? __pfx_kfree_link+0x10/0x10 [ 120.297948][ T6400] ? alloc_fd+0x471/0x7d0 [ 120.297995][ T6400] do_sys_openat2+0x121/0x290 [ 120.298026][ T6400] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.298053][ T6400] ? __do_sys_ustat+0x126/0x1f0 [ 120.298100][ T6400] __x64_sys_openat+0x174/0x210 [ 120.298130][ T6400] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.298176][ T6400] do_syscall_64+0xcd/0xf80 [ 120.298217][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.298243][ T6400] RIP: 0033:0x7fe33178f7c9 [ 120.298267][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.298292][ T6400] RSP: 002b:00007fe32f9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.298318][ T6400] RAX: ffffffffffffffda RBX: 00007fe3319e6090 RCX: 00007fe33178f7c9 [ 120.298350][ T6400] RDX: 0000000000183200 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 120.298368][ T6400] RBP: 00007fe331813f91 R08: 0000000000000000 R09: 0000000000000000 [ 120.298385][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.298401][ T6400] R13: 00007fe3319e6128 R14: 00007fe3319e6090 R15: 00007ffee374f1d8 [ 120.298439][ T6400] [ 121.247264][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 121.305041][ T6427] capability: warning: `syz.1.168' uses 32-bit capabilities (legacy support in use) [ 121.625870][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 122.070194][ T4540] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.433029][ T30] audit: type=1800 audit(1767949359.402:7): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.174" name="dbroot" dev="configfs" ino=11127 res=0 errno=0 [ 122.589444][ T6465] kvm: user requested TSC rate below hardware speed [ 123.350770][ T30] audit: type=1800 audit(1767949360.342:8): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.178" name="dbroot" dev="configfs" ino=11228 res=0 errno=0 [ 123.471160][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 124.321769][ T6497] Console: switching to colour VGA+ 80x25 [ 124.501285][ T6497] Console: switching to colour frame buffer device 128x48 [ 125.096280][ T30] audit: type=1800 audit(1767949362.072:9): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.188" name="dbroot" dev="configfs" ino=11757 res=0 errno=0 [ 125.565389][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 126.221409][ T6507] kexec: Could not allocate control_code_buffer [ 126.440143][ T30] audit: type=1800 audit(1767949363.422:10): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.194" name="dbroot" dev="configfs" ino=12334 res=0 errno=0 [ 126.640514][ T6536] FAULT_INJECTION: forcing a failure. [ 126.640514][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 126.700008][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT(full) [ 126.700044][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.700057][ T6536] Call Trace: [ 126.700065][ T6536] [ 126.700074][ T6536] dump_stack_lvl+0x16c/0x1f0 [ 126.700116][ T6536] should_fail_ex+0x512/0x640 [ 126.700143][ T6536] ? fs_reclaim_acquire+0xae/0x150 [ 126.700182][ T6536] should_failslab+0xc2/0x120 [ 126.700219][ T6536] __kmalloc_noprof+0xeb/0x910 [ 126.700247][ T6536] ? tomoyo_encode2+0x100/0x3e0 [ 126.700288][ T6536] ? tomoyo_encode2+0x100/0x3e0 [ 126.700318][ T6536] tomoyo_encode2+0x100/0x3e0 [ 126.700354][ T6536] tomoyo_encode+0x29/0x50 [ 126.700384][ T6536] tomoyo_realpath_from_path+0x18f/0x6e0 [ 126.700424][ T6536] tomoyo_path2_perm+0x2a1/0x710 [ 126.700448][ T6536] ? tomoyo_path2_perm+0x293/0x710 [ 126.700479][ T6536] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 126.700532][ T6536] ? __d_add+0x45c/0xb20 [ 126.700549][ T6536] ? do_raw_spin_lock+0x12c/0x2b0 [ 126.700571][ T6536] tomoyo_path_rename+0xfc/0x1a0 [ 126.700592][ T6536] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 126.700614][ T6536] ? __start_renaming+0x28c/0x530 [ 126.700632][ T6536] ? do_raw_spin_unlock+0x172/0x230 [ 126.700652][ T6536] security_path_rename+0x18e/0x3c0 [ 126.700671][ T6536] do_renameat2+0x6f9/0x9b0 [ 126.700690][ T6536] ? __pfx_do_renameat2+0x10/0x10 [ 126.700706][ T6536] ? find_held_lock+0x2b/0x80 [ 126.700724][ T6536] ? __might_fault+0xe3/0x190 [ 126.700740][ T6536] ? __might_fault+0x13b/0x190 [ 126.700765][ T6536] ? getname_flags.part.0+0x1c5/0x550 [ 126.700785][ T6536] __x64_sys_rename+0x7d/0xa0 [ 126.700800][ T6536] do_syscall_64+0xcd/0xf80 [ 126.700823][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.700838][ T6536] RIP: 0033:0x7fe33178f7c9 [ 126.700851][ T6536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.700865][ T6536] RSP: 002b:00007fe33255c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 126.700880][ T6536] RAX: ffffffffffffffda RBX: 00007fe3319e5fa0 RCX: 00007fe33178f7c9 [ 126.700889][ T6536] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 126.700898][ T6536] RBP: 00007fe331813f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.700907][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.700915][ T6536] R13: 00007fe3319e6038 R14: 00007fe3319e5fa0 R15: 00007ffee374f1d8 [ 126.700935][ T6536] [ 126.702795][ T6536] ERROR: Out of memory at tomoyo_realpath_from_path. [ 127.129466][ T6542] Console: switching to colour VGA+ 80x25 [ 127.204408][ T6542] ================================================================== [ 127.204424][ T6542] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 127.204450][ T6542] Read of size 256 at addr ffff88807ba4f860 by task syz.3.196/6542 [ 127.204463][ T6542] [ 127.204472][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(full) [ 127.204489][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.204498][ T6542] Call Trace: [ 127.204503][ T6542] [ 127.204509][ T6542] dump_stack_lvl+0x116/0x1f0 [ 127.204532][ T6542] print_report+0xcd/0x630 [ 127.204555][ T6542] ? __virt_addr_valid+0x81/0x610 [ 127.204578][ T6542] ? __phys_addr+0xe8/0x180 [ 127.204599][ T6542] ? fbcon_prepare_logo+0xa03/0xc70 [ 127.204614][ T6542] kasan_report+0xe0/0x110 [ 127.204635][ T6542] ? fbcon_prepare_logo+0xa03/0xc70 [ 127.204652][ T6542] kasan_check_range+0x100/0x1b0 [ 127.204685][ T6542] __asan_memcpy+0x23/0x60 [ 127.204703][ T6542] fbcon_prepare_logo+0xa03/0xc70 [ 127.204722][ T6542] fbcon_init+0xda0/0x1930 [ 127.204737][ T6542] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 127.204754][ T6542] visual_init+0x320/0x620 [ 127.204771][ T6542] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 127.204793][ T6542] store_bind+0x61d/0x760 [ 127.204812][ T6542] ? sysfs_file_kobj+0xe4/0x290 [ 127.204826][ T6542] ? __pfx_store_bind+0x10/0x10 [ 127.204844][ T6542] dev_attr_store+0x58/0x80 [ 127.204862][ T6542] ? __pfx_dev_attr_store+0x10/0x10 [ 127.204880][ T6542] sysfs_kf_write+0xf2/0x150 [ 127.204893][ T6542] kernfs_fop_write_iter+0x3af/0x570 [ 127.204914][ T6542] ? __pfx_sysfs_kf_write+0x10/0x10 [ 127.204928][ T6542] iter_file_splice_write+0xa24/0x12b0 [ 127.204958][ T6542] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.204982][ T6542] ? __pfx_copy_splice_read+0x10/0x10 [ 127.205017][ T6542] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.205040][ T6542] direct_splice_actor+0x192/0x6c0 [ 127.205064][ T6542] splice_direct_to_actor+0x345/0xa30 [ 127.205086][ T6542] ? __pfx_direct_splice_actor+0x10/0x10 [ 127.205109][ T6542] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 127.205132][ T6542] do_splice_direct+0x174/0x240 [ 127.205153][ T6542] ? __pfx_do_splice_direct+0x10/0x10 [ 127.205173][ T6542] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 127.205201][ T6542] ? rw_verify_area+0xcf/0x6c0 [ 127.205221][ T6542] do_sendfile+0xb06/0xe50 [ 127.205242][ T6542] ? __pfx_do_sendfile+0x10/0x10 [ 127.205263][ T6542] ? __x64_sys_futex+0x1e0/0x4c0 [ 127.205281][ T6542] ? __x64_sys_futex+0x1e9/0x4c0 [ 127.205298][ T6542] __x64_sys_sendfile64+0x1d8/0x220 [ 127.205313][ T6542] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 127.205329][ T6542] do_syscall_64+0xcd/0xf80 [ 127.205351][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.205369][ T6542] RIP: 0033:0x7f8a7118f7c9 [ 127.205383][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.205397][ T6542] RSP: 002b:00007f8a720ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 127.205411][ T6542] RAX: ffffffffffffffda RBX: 00007f8a713e5fa0 RCX: 00007f8a7118f7c9 [ 127.205422][ T6542] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 127.205431][ T6542] RBP: 00007f8a71213f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.205440][ T6542] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 127.205449][ T6542] R13: 00007f8a713e6038 R14: 00007f8a713e5fa0 R15: 00007ffc6dfae4d8 [ 127.205464][ T6542] [ 127.205469][ T6542] [ 127.205473][ T6542] Allocated by task 5840: [ 127.205481][ T6542] kasan_save_stack+0x33/0x60 [ 127.205500][ T6542] kasan_save_track+0x14/0x30 [ 127.205518][ T6542] __kasan_kmalloc+0xaa/0xb0 [ 127.205537][ T6542] __kmalloc_node_noprof+0x355/0x930 [ 127.205556][ T6542] qdisc_alloc+0xb7/0xa50 [ 127.205573][ T6542] qdisc_create_dflt+0x94/0x460 [ 127.205589][ T6542] mq_init+0x345/0x490 [ 127.205605][ T6542] qdisc_create_dflt+0x125/0x460 [ 127.205621][ T6542] dev_activate+0xaae/0x12d0 [ 127.205637][ T6542] __dev_open+0x4f1/0x960 [ 127.205653][ T6542] __dev_change_flags+0x55d/0x6f0 [ 127.205669][ T6542] netif_change_flags+0x8d/0x160 [ 127.205686][ T6542] do_setlink.constprop.0+0xb53/0x4380 [ 127.205798][ T6542] rtnl_newlink+0x1376/0x1f50 [ 127.206049][ T6542] rtnetlink_rcv_msg+0x95e/0xe90 [ 127.206071][ T6542] netlink_rcv_skb+0x158/0x420 [ 127.206092][ T6542] netlink_unicast+0x5aa/0x870 [ 127.206112][ T6542] netlink_sendmsg+0x8c8/0xdd0 [ 127.206133][ T6542] __sys_sendto+0x4a3/0x520 [ 127.206148][ T6542] __x64_sys_sendto+0xe0/0x1c0 [ 127.206162][ T6542] do_syscall_64+0xcd/0xf80 [ 127.206187][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.206209][ T6542] [ 127.206216][ T6542] The buggy address belongs to the object at ffff88807ba4f000 [ 127.206216][ T6542] which belongs to the cache kmalloc-2k of size 2048 [ 127.206236][ T6542] The buggy address is located 544 bytes to the right of [ 127.206236][ T6542] allocated 1600-byte region [ffff88807ba4f000, ffff88807ba4f640) [ 127.206260][ T6542] [ 127.206267][ T6542] The buggy address belongs to the physical page: [ 127.206289][ T6542] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ba48 [ 127.206310][ T6542] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 127.206324][ T6542] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 127.206343][ T6542] page_type: f5(slab) [ 127.206357][ T6542] raw: 00fff00000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 127.206370][ T6542] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 127.206384][ T6542] head: 00fff00000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 127.206397][ T6542] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 127.206411][ T6542] head: 00fff00000000003 ffffea0001ee9201 00000000ffffffff 00000000ffffffff [ 127.206424][ T6542] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 127.206432][ T6542] page dumped because: kasan: bad access detected [ 127.206443][ T6542] page_owner tracks the page as allocated [ 127.206448][ T6542] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5872, tgid 5872 (kworker/1:3), ts 95627983210, free_ts 95335820449 [ 127.206474][ T6542] post_alloc_hook+0x1af/0x220 [ 127.206490][ T6542] get_page_from_freelist+0xd0b/0x31a0 [ 127.206507][ T6542] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 127.206523][ T6542] alloc_pages_mpol+0x1fb/0x550 [ 127.206543][ T6542] new_slab+0x2c3/0x430 [ 127.206556][ T6542] ___slab_alloc+0xe18/0x1c90 [ 127.206569][ T6542] __slab_alloc.constprop.0+0x63/0x110 [ 127.206584][ T6542] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 127.206605][ T6542] kmalloc_reserve+0xef/0x2c0 [ 127.206631][ T6542] __alloc_skb+0x186/0x410 [ 127.206645][ T6542] mld_newpack.isra.0+0x18e/0xa20 [ 127.206663][ T6542] add_grhead+0x299/0x340 [ 127.206678][ T6542] add_grec+0x11b5/0x1720 [ 127.206693][ T6542] mld_ifc_work+0x41f/0xbf0 [ 127.206709][ T6542] process_one_work+0x9ba/0x1b20 [ 127.206724][ T6542] worker_thread+0x6c8/0xf10 [ 127.206738][ T6542] page last free pid 5835 tgid 5835 stack trace: [ 127.206746][ T6542] __free_frozen_pages+0x7df/0x1170 [ 127.206759][ T6542] __put_partials+0x130/0x170 [ 127.206773][ T6542] qlist_free_all+0x4c/0xf0 [ 127.206789][ T6542] kasan_quarantine_reduce+0x195/0x1e0 [ 127.206807][ T6542] __kasan_slab_alloc+0x69/0x90 [ 127.206827][ T6542] __kmalloc_cache_noprof+0x282/0x800 [ 127.206841][ T6542] ____ip_mc_inc_group+0x403/0x10c0 [ 127.206861][ T6542] ip_mc_up+0x154/0x380 [ 127.206880][ T6542] inetdev_event+0xafb/0x1870 [ 127.206893][ T6542] notifier_call_chain+0xbc/0x3e0 [ 127.206915][ T6542] call_netdevice_notifiers_info+0xbe/0x110 [ 127.206937][ T6542] __dev_notify_flags+0x12c/0x2e0 [ 127.206962][ T6542] netif_change_flags+0x108/0x160 [ 127.206981][ T6542] do_setlink.constprop.0+0xb53/0x4380 [ 127.207001][ T6542] rtnl_newlink+0x1376/0x1f50 [ 127.207019][ T6542] rtnetlink_rcv_msg+0x95e/0xe90 [ 127.207039][ T6542] [ 127.207043][ T6542] Memory state around the buggy address: [ 127.207050][ T6542] ffff88807ba4f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.207061][ T6542] ffff88807ba4f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.207071][ T6542] >ffff88807ba4f800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.207078][ T6542] ^ [ 127.207086][ T6542] ffff88807ba4f880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.207096][ T6542] ffff88807ba4f900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 127.207104][ T6542] ================================================================== [ 127.217615][ T6542] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.217637][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(full) [ 127.217657][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.217667][ T6542] Call Trace: [ 127.217672][ T6542] [ 127.217678][ T6542] dump_stack_lvl+0x3d/0x1f0 [ 127.217707][ T6542] vpanic+0x640/0x6f0 [ 127.217724][ T6542] panic+0xca/0xd0 [ 127.217737][ T6542] ? __pfx_panic+0x10/0x10 [ 127.217751][ T6542] ? fbcon_prepare_logo+0xa03/0xc70 [ 127.217768][ T6542] ? preempt_schedule_common+0x44/0xc0 [ 127.217791][ T6542] ? preempt_schedule_thunk+0x16/0x30 [ 127.217807][ T6542] check_panic_on_warn+0xab/0xb0 [ 127.217823][ T6542] end_report+0x107/0x160 [ 127.217844][ T6542] kasan_report+0xee/0x110 [ 127.217866][ T6542] ? fbcon_prepare_logo+0xa03/0xc70 [ 127.217883][ T6542] kasan_check_range+0x100/0x1b0 [ 127.217898][ T6542] __asan_memcpy+0x23/0x60 [ 127.217924][ T6542] fbcon_prepare_logo+0xa03/0xc70 [ 127.217945][ T6542] fbcon_init+0xda0/0x1930 [ 127.217962][ T6542] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 127.217981][ T6542] visual_init+0x320/0x620 [ 127.217999][ T6542] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 127.218022][ T6542] store_bind+0x61d/0x760 [ 127.218041][ T6542] ? sysfs_file_kobj+0xe4/0x290 [ 127.218057][ T6542] ? __pfx_store_bind+0x10/0x10 [ 127.218075][ T6542] dev_attr_store+0x58/0x80 [ 127.218094][ T6542] ? __pfx_dev_attr_store+0x10/0x10 [ 127.218112][ T6542] sysfs_kf_write+0xf2/0x150 [ 127.218126][ T6542] kernfs_fop_write_iter+0x3af/0x570 [ 127.218147][ T6542] ? __pfx_sysfs_kf_write+0x10/0x10 [ 127.218161][ T6542] iter_file_splice_write+0xa24/0x12b0 [ 127.218192][ T6542] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.218216][ T6542] ? __pfx_copy_splice_read+0x10/0x10 [ 127.218240][ T6542] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.218263][ T6542] direct_splice_actor+0x192/0x6c0 [ 127.218285][ T6542] splice_direct_to_actor+0x345/0xa30 [ 127.218306][ T6542] ? __pfx_direct_splice_actor+0x10/0x10 [ 127.218329][ T6542] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 127.218353][ T6542] do_splice_direct+0x174/0x240 [ 127.218373][ T6542] ? __pfx_do_splice_direct+0x10/0x10 [ 127.218401][ T6542] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 127.218433][ T6542] ? rw_verify_area+0xcf/0x6c0 [ 127.218462][ T6542] do_sendfile+0xb06/0xe50 [ 127.218494][ T6542] ? __pfx_do_sendfile+0x10/0x10 [ 127.218525][ T6542] ? __x64_sys_futex+0x1e0/0x4c0 [ 127.218542][ T6542] ? __x64_sys_futex+0x1e9/0x4c0 [ 127.218559][ T6542] __x64_sys_sendfile64+0x1d8/0x220 [ 127.218574][ T6542] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 127.218590][ T6542] do_syscall_64+0xcd/0xf80 [ 127.218613][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.218634][ T6542] RIP: 0033:0x7f8a7118f7c9 [ 127.218648][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.218663][ T6542] RSP: 002b:00007f8a720ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 127.218678][ T6542] RAX: ffffffffffffffda RBX: 00007f8a713e5fa0 RCX: 00007f8a7118f7c9 [ 127.218688][ T6542] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 127.218697][ T6542] RBP: 00007f8a71213f91 R08: 0000000000000000 R09: 0000000000000000 [ 127.218706][ T6542] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 127.218716][ T6542] R13: 00007f8a713e6038 R14: 00007f8a713e5fa0 R15: 00007ffc6dfae4d8 [ 127.218731][ T6542] [ 127.219386][ T6542] Kernel Offset: disabled