last executing test programs: 3.988242843s ago: executing program 1 (id=159): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x8006) setsockopt$auto(r0, 0x6, 0x1e, 0x0, 0xa1) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r1, 0x0, 0x6, 0x700, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:01/options\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x2, 0x4, 0xdf, 0x410, 0x401, 0x7ffd) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r5, 0x8004500b, &(0x7f00000002c0)="bfe41123e42b44ccb3d11c558c7b") write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15f4da12, 0x3, 0xd08, 0x8, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) read$auto_trace_fops_debugfs(r1, 0x0, 0x0) 3.216673764s ago: executing program 0 (id=161): socket(0x2, 0x80002, 0x73) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) socket(0xa, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0xfffffff3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x2, 0x3a) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) 3.117482346s ago: executing program 0 (id=162): r0 = socket(0x29, 0x2, 0x0) ioctl$auto(r0, 0x8915, 0x24) write$auto(0x3, 0x0, 0x70) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) madvise$auto(0x7dd0, 0xc, 0xfd) acct$auto(&(0x7f0000000100)='/dev/v4l-subdev2\x00') 2.666069405s ago: executing program 0 (id=164): rseq$auto(&(0x7f00000005c0)={0xe, 0x400, 0x0, 0x6, 0xffffffbf, 0xc, "f8d155a374bda1b2e1f8d7de861bf82f916806b0aeeea26ffbb076b35996bd5d445e591ea7d956171bbee7986ff82fc8162e4971006aa3b91694b5cab036805145a528fef15ac8f21cd9739af87060bc9ce023016cb0247b713c846c84daf6aee118fc4781854ead06942c4f15e52a100109250e81c34deb0714bb765222b0fb3155bb77dc6645b0ea2cb68ec3"}, 0x8000, 0x0, 0x9) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x23, 0x0) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x9eac, 0x20002}, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait$auto(&(0x7f00000000c0)={0x7fffffff}, &(0x7f00000001c0)={@_si_pad}, 0x0, 0x8) kill$auto(r0, 0x11) 2.361994275s ago: executing program 3 (id=165): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram14/queue/max_segments\x00', 0x129c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001480)=""/4107, 0x100b) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x200000}) 2.333613077s ago: executing program 2 (id=166): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) fanotify_init$auto(0x8, 0x401) (async) write$auto(0x3, 0x0, 0x5c8) (async) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) mmap$auto(0x0, 0x400000000004, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000004) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) bpf$auto(0x0, 0x0, 0x92) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r2 = socket(0x2, 0x801, 0x106) getsockopt$auto(r2, 0x11c, 0x3, 0x0, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x100, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x40aa2, 0x0) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/wg1/retrans_time\x00', 0x82, 0x0) write$auto(r5, &(0x7f0000000040)='\xd9\xc8f\xc4\xe6', 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) 2.252565916s ago: executing program 1 (id=167): ioctl$auto(0x3, 0x6, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) (fail_nth: 1) 2.041062966s ago: executing program 2 (id=168): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/swradio5\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80885659, 0x38) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296", 0x2e) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x3800, 0x0) mmap$auto(0x4, 0x2, 0x10, 0x15, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0xe, 0x0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_ERP_RRK={0x11, 0xfc, "db1ec6f094624cf6a12c77337b"}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8c}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x20000004) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) prctl$auto(0x35, 0x2, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) 1.6767076s ago: executing program 1 (id=169): r0 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000180)=0x5) ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000240)=0x2) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff028}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.descendants\x00', 0x22022, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video31\x00', 0x4ae02, 0x0) ioctl$auto(r2, 0x40085618, r2) r3 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000080)=0x7) ioctl$auto_PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000100)=0x2) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) 1.674077898s ago: executing program 0 (id=170): socket(0x2, 0x80002, 0x73) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) socket(0xa, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0xfffffff3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x2, 0x3a) r0 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) 1.577933504s ago: executing program 3 (id=171): r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x80000, 0x0) close_range$auto(r0, r0, 0x0) r1 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x80, 0x0) pread64$auto(r1, &(0x7f0000000100)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0xf3aa, 0x1) 1.497092617s ago: executing program 0 (id=172): r0 = bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da1, 0x0, 0xb4, 0x5, 0x140000000000, 0x0, 0x7fffffff, 0x9, 0x1}, 0x171) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x80001, 0xc, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x1a9440, 0x0) ioctl$auto_TIOCGSERIAL2(r1, 0x541e, &(0x7f00000000c0)) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/192, 0xc0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(r3, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) r5 = fanotify_init$auto(0x5, 0x2000000000002) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0xeb0, 0xffffffffffffffff, 0x8000) timer_create$auto(0x3, 0x0, 0x0) timer_create$auto(0x9, 0x0, 0x0) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3540, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x80) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x10001, &(0x7f0000000540)="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", 0x1001) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.415072339s ago: executing program 3 (id=173): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fedbdf250300000006000600810000000600070000800000060006000e0000000a000500000000000000000800000000aaaaaaaaaaaa00000a000500aaaaaaaaaa4000000800030040000000f8ff0100", @ANYRES32, @ANYBLOB="080004"], 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x44098) r0 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="13"], 0x1ac}}, 0x4004) r1 = openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x2000, 0x0) ioctl$auto_FITRIM2(r1, 0xc0185879, &(0x7f0000000040)={0x4, 0x4, 0xbb31}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x400002, &(0x7f00000002c0)={0x0, 0xc7}, 0x5, 0x0, 0x0, 0x9}, 0xb}, 0x3, 0x40000000) 1.328246031s ago: executing program 3 (id=174): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x3}, 0x55) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)={0x18, 0x0, 0x705, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mmap$auto(0x440000000, 0x1, 0xdf, 0xead4, 0x2, 0x800008000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.202968432s ago: executing program 1 (id=175): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x80, 0x8, 0xc0b3, &(0x7f0000000000)=0xf) r0 = socket(0x15, 0x5, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x20) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) mmap$auto(0x0, 0x40000400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) select$auto(0x8, 0x0, 0x0, &(0x7f0000000240)={[0xe, 0x91e3, 0xb, 0xc, 0x0, 0xf58, 0x4, 0x4412d, 0x8, 0x0, 0x4, 0xf, 0x8000000000000, 0x84c, 0x1, 0x7]}, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 1.0726889s ago: executing program 3 (id=176): sigaltstack$auto(&(0x7f0000000000)={0x0, 0x80000001, 0x8000000000000004}, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000082, 0x402}]}) (async) getpid() (async) gettid() socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x7fffffff, 0xfffffffffffffffa, 0x8000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xd2, 0xfffffffffffffffa, 0x1000008000) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0xa, 0x1, 0x84) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 32) read$auto(0x3, 0x0, 0x1f40) (async, rerun: 32) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x101, 0x8000, 0x3fa, 0x200000401, 0x1000008000) (async) socket(0xa, 0x1, 0x100) 732.576775ms ago: executing program 2 (id=177): ioctl$auto(0x3, 0x6, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) (fail_nth: 2) 408.797792ms ago: executing program 0 (id=178): rseq$auto(&(0x7f00000005c0)={0xe, 0x400, 0x0, 0x6, 0xffffffbf, 0xc, "f8d155a374bda1b2e1f8d7de861bf82f916806b0aeeea26ffbb076b35996bd5d445e591ea7d956171bbee7986ff82fc8162e4971006aa3b91694b5cab036805145a528fef15ac8f21cd9739af87060bc9ce023016cb0247b713c846c84daf6aee118fc4781854ead06942c4f15e52a100109250e81c34deb0714bb765222b0fb3155bb77dc6645b0ea2cb68ec3"}, 0x8000, 0x0, 0x9) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x23, 0x0) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x9eac, 0x20002}, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait$auto(&(0x7f00000000c0)={0x7fffffff}, &(0x7f00000001c0)={@_si_pad}, 0x0, 0x8) kill$auto(r0, 0x11) 354.559854ms ago: executing program 2 (id=179): r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nvmet_tcp/parameters/idle_poll_period_usecs\x00', 0x9801, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) write$auto(0x3, 0x0, 0x6) futex$auto(&(0x7f00000000c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x7, r0}) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x10013, 0x80200000008, 0x2, 0x5f, 0x20000000000803}, 0x6f0) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x12d981, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x80081270, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x4070bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0x4000000000000c8, 0x800454cf, 0xffffffffffffffff) r8 = fcntl$auto_F_RDLCK(r2, 0xc4, 0x0) sendmmsg$auto(r8, &(0x7f0000000100)={{&(0x7f0000000000)="38c20b562418d0c15fd55ce41f5e3c2cc83a2139954722f404c0d1eca4c37556a65cb73f", 0x23, &(0x7f0000000080)={&(0x7f0000000040), 0x2}, 0x7, &(0x7f00000000c0), 0xf, 0x2}, 0x74d0}, 0x401, 0x7) 283.316732ms ago: executing program 1 (id=180): socket(0x2, 0x80002, 0x73) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0xffffffffffffffff, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) socket(0xa, 0x5, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f00000000c0)='\xc4--:\xdd:,./-${\x00', 0x4) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x8, 0x0, 0x106, 0x0, 0x1, 0xfffffff3}, 0xed7138c}, 0x7, 0x0) socket(0xa, 0x2, 0x3a) r2 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) socket(0x18, 0x5, 0x0) socket(0xa, 0x2, 0x73) 200.196757ms ago: executing program 2 (id=181): r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x404000, 0x0) pread64$auto(r0, &(0x7f0000000100)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0xf3aa, 0x1) 163.817437ms ago: executing program 2 (id=182): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x2, 0x2) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy10/reset\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x1, 0x4000000200df, 0x11, 0x404, 0x6) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = open(0x0, 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x0, 0x2}, 0xb6) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setresuid$auto(0x8, 0x8, 0x0) bpf$auto(0x10, &(0x7f00000000c0)=@link_detach, 0x40) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x1000000000001bf) r4 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/msft_opcode\x00', 0x0, 0x0) read$auto(r4, &(0x7f0000006740)='^%-[)>\'\xdf\x00', 0xffff) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x7c3, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) dup2$auto(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop13\x00', 0x208783, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c06, 0x0) ioctl$auto_FS_IOC_GETFSUUID(r3, 0x80111500, 0x10000332a) unshare$auto(0x40000080) fstatfs$auto(0x3, 0xfffffffffffffffd) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r2, 0xffffff7f, &(0x7f0000000140)='/sys/module/zswap/parameters/compressor\x00', &(0x7f0000000240)="358b0494323409f29fd4ccad05a89fe53af504271e25b8770d4055cca35c90b8", 0x4) 100.670215ms ago: executing program 1 (id=183): r0 = ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000180)=0x5) ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000240)=0x2) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff028}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.descendants\x00', 0x22022, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video31\x00', 0x4ae02, 0x0) ioctl$auto(r2, 0x40085618, r2) ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000080)=0x7) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) 0s ago: executing program 3 (id=184): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x42, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x40086200, 0x38) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x03\xa1\x19\x9a_\r\x00\x00X\xa6\x89L\x1e\x1b\x16/\xe8\xca\tL\xd9M\xf3_L\x00\x04\x00\x00\xa2\x00\x00', 0x101) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 81.468745][ T5816] cgroup: Unknown subsys name 'net' [ 81.658837][ T5816] cgroup: Unknown subsys name 'cpuset' [ 81.667482][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.131499][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.099468][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.107744][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.115741][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.123988][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.146803][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.154525][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.162017][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.169876][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.178025][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.185854][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.286214][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.295888][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.303804][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.312274][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.320030][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.345666][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.355066][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.365486][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.373555][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.382076][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.832197][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 85.856245][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 85.981009][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 86.011160][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.050090][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.057404][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.064787][ T5833] bridge_slave_0: entered allmulticast mode [ 86.073764][ T5833] bridge_slave_0: entered promiscuous mode [ 86.119072][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.126450][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.133557][ T5833] bridge_slave_1: entered allmulticast mode [ 86.140776][ T5833] bridge_slave_1: entered promiscuous mode [ 86.199068][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.206737][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.213849][ T5828] bridge_slave_0: entered allmulticast mode [ 86.221058][ T5828] bridge_slave_0: entered promiscuous mode [ 86.249309][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.256588][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.263677][ T5828] bridge_slave_1: entered allmulticast mode [ 86.270886][ T5828] bridge_slave_1: entered promiscuous mode [ 86.290602][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.348868][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.360879][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.409072][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.434521][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.442042][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.449471][ T5841] bridge_slave_0: entered allmulticast mode [ 86.457752][ T5841] bridge_slave_0: entered promiscuous mode [ 86.465215][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.472446][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.479663][ T5839] bridge_slave_0: entered allmulticast mode [ 86.486813][ T5839] bridge_slave_0: entered promiscuous mode [ 86.514928][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.522332][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.530446][ T5841] bridge_slave_1: entered allmulticast mode [ 86.538080][ T5841] bridge_slave_1: entered promiscuous mode [ 86.544505][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.551724][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.558864][ T5839] bridge_slave_1: entered allmulticast mode [ 86.565921][ T5839] bridge_slave_1: entered promiscuous mode [ 86.574335][ T5833] team0: Port device team_slave_0 added [ 86.582915][ T5828] team0: Port device team_slave_0 added [ 86.610836][ T5833] team0: Port device team_slave_1 added [ 86.618474][ T5828] team0: Port device team_slave_1 added [ 86.677195][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.698983][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.712370][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.740374][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.747925][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.774620][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.788128][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.795084][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.822019][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.834786][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.841802][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.867897][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.881782][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.908179][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.915145][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.942116][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.012782][ T5839] team0: Port device team_slave_0 added [ 87.065820][ T5839] team0: Port device team_slave_1 added [ 87.094508][ T5841] team0: Port device team_slave_0 added [ 87.118710][ T5828] hsr_slave_0: entered promiscuous mode [ 87.125218][ T5828] hsr_slave_1: entered promiscuous mode [ 87.137105][ T5833] hsr_slave_0: entered promiscuous mode [ 87.143292][ T5833] hsr_slave_1: entered promiscuous mode [ 87.149572][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 87.155812][ T5833] Cannot create hsr debugfs directory [ 87.163304][ T5841] team0: Port device team_slave_1 added [ 87.182683][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.189782][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.215794][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.229328][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.236304][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.262493][ T5837] Bluetooth: hci1: command tx timeout [ 87.262497][ T52] Bluetooth: hci0: command tx timeout [ 87.263102][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.358647][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.366029][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.392112][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.406638][ T5837] Bluetooth: hci3: command tx timeout [ 87.406645][ T52] Bluetooth: hci2: command tx timeout [ 87.429000][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.436217][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.462211][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.505935][ T5839] hsr_slave_0: entered promiscuous mode [ 87.512562][ T5839] hsr_slave_1: entered promiscuous mode [ 87.518893][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 87.524617][ T5839] Cannot create hsr debugfs directory [ 87.596494][ T5841] hsr_slave_0: entered promiscuous mode [ 87.603077][ T5841] hsr_slave_1: entered promiscuous mode [ 87.609605][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 87.615503][ T5841] Cannot create hsr debugfs directory [ 87.972451][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.985070][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.996150][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.016882][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.067696][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.083274][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.118310][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.128931][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.189429][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.202920][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.218756][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.234195][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.324192][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.334648][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.347112][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.357412][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.408966][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.463840][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.517910][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.525210][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.537156][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.544234][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.609199][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.637893][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.668202][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.700619][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.722311][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.729506][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.752326][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.759508][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.771722][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.778892][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.796046][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.828880][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.836022][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.901456][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.929945][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.937142][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.964554][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.971760][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.141223][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.262048][ T5828] veth0_vlan: entered promiscuous mode [ 89.293920][ T5828] veth1_vlan: entered promiscuous mode [ 89.328607][ T5837] Bluetooth: hci0: command tx timeout [ 89.328615][ T52] Bluetooth: hci1: command tx timeout [ 89.378160][ T5828] veth0_macvtap: entered promiscuous mode [ 89.420843][ T5828] veth1_macvtap: entered promiscuous mode [ 89.467317][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.485706][ T52] Bluetooth: hci3: command tx timeout [ 89.491211][ T5837] Bluetooth: hci2: command tx timeout [ 89.514566][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.544622][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.557513][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.601082][ T1161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.611170][ T1161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.629045][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.654193][ T1161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.663287][ T1161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.681965][ T5833] veth0_vlan: entered promiscuous mode [ 89.720091][ T5833] veth1_vlan: entered promiscuous mode [ 89.790599][ T5841] veth0_vlan: entered promiscuous mode [ 89.799541][ T5839] veth0_vlan: entered promiscuous mode [ 89.841917][ T5839] veth1_vlan: entered promiscuous mode [ 89.854669][ T5841] veth1_vlan: entered promiscuous mode [ 89.860995][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.876951][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.921042][ T5833] veth0_macvtap: entered promiscuous mode [ 89.936761][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.936873][ T5833] veth1_macvtap: entered promiscuous mode [ 89.951411][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.003049][ T5839] veth0_macvtap: entered promiscuous mode [ 90.033600][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.045673][ T5839] veth1_macvtap: entered promiscuous mode [ 90.050573][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.053982][ T5841] veth0_macvtap: entered promiscuous mode [ 90.089589][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.101267][ T5841] veth1_macvtap: entered promiscuous mode [ 90.131804][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.157099][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.179589][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.207312][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.220252][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.243129][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.271782][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.289016][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.299152][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.322015][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.330876][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337917][ T5915] FAULT_INJECTION: forcing a failure. [ 90.337917][ T5915] name failslab, interval 1, probability 0, space 0, times 1 [ 90.353977][ T5915] CPU: 0 UID: 0 PID: 5915 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 90.354008][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.354025][ T5915] Call Trace: [ 90.354033][ T5915] [ 90.354043][ T5915] dump_stack_lvl+0x16c/0x1f0 [ 90.354079][ T5915] should_fail_ex+0x512/0x640 [ 90.354113][ T5915] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 90.354143][ T5915] should_failslab+0xc2/0x120 [ 90.354173][ T5915] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 90.354199][ T5915] ? __d_alloc+0x32/0xae0 [ 90.354230][ T5915] ? __d_alloc+0x32/0xae0 [ 90.354265][ T5915] __d_alloc+0x32/0xae0 [ 90.354298][ T5915] d_alloc_pseudo+0x1c/0xc0 [ 90.354333][ T5915] alloc_file_pseudo+0xcf/0x230 [ 90.354373][ T5915] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 90.354404][ T5915] ? alloc_fd+0x471/0x7d0 [ 90.354433][ T5915] sock_alloc_file+0x50/0x210 [ 90.354460][ T5915] __sys_socket+0x1c0/0x260 [ 90.354495][ T5915] ? __pfx___sys_socket+0x10/0x10 [ 90.354527][ T5915] ? do_user_addr_fault+0x843/0x1370 [ 90.354556][ T5915] __x64_sys_socket+0x72/0xb0 [ 90.354587][ T5915] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.354618][ T5915] do_syscall_64+0xcd/0xfa0 [ 90.354652][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.354678][ T5915] RIP: 0033:0x7f3e31f915e7 [ 90.354698][ T5915] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.354721][ T5915] RSP: 002b:00007f3e32eb4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 90.354746][ T5915] RAX: ffffffffffffffda RBX: 00007f3e321e5fa0 RCX: 00007f3e31f915e7 [ 90.354762][ T5915] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 90.354776][ T5915] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 90.354789][ T5915] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000000 [ 90.354805][ T5915] R13: 00007f3e321e6038 R14: 00007f3e321e5fa0 R15: 00007ffc0d3d9f38 [ 90.354839][ T5915] [ 90.617830][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.631177][ T1148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.683349][ T1148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.694101][ T1148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.728783][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.729003][ T1148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.744068][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.856497][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.864333][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.975405][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.983262][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.016318][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.024167][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.031881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.090894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.124906][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.248980][ T785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.261840][ T5933] random: crng reseeded on system resumption [ 91.274369][ T785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.405941][ T52] Bluetooth: hci0: command tx timeout [ 91.411475][ T5837] Bluetooth: hci1: command tx timeout [ 91.567644][ T5837] Bluetooth: hci2: command tx timeout [ 91.573355][ T52] Bluetooth: hci3: command tx timeout [ 91.680691][ T5939] zswap: compressor not available [ 91.697052][ T5945] Setting dangerous option i915.mitigations - tainting kernel [ 91.732595][ T52] block nbd0: Receive control failed (result -107) [ 91.809517][ T854] cfg80211: failed to load regulatory.db [ 92.005606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.265605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.274358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.282951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.292603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.301387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.310246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.675634][ T5949] delete_channel: no stack [ 92.753042][ T5963] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.895522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 93.215828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.258986][ T5963] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 93.487624][ T52] Bluetooth: hci1: command tx timeout [ 93.493076][ T52] Bluetooth: hci0: command tx timeout [ 93.646025][ T52] Bluetooth: hci3: command tx timeout [ 93.651469][ T5837] Bluetooth: hci2: command tx timeout [ 94.003508][ T5979] hub 8-0:1.0: USB hub found [ 94.037480][ T5986] random: crng reseeded on system resumption [ 94.048435][ T5979] hub 8-0:1.0: 1 port detected [ 95.215388][ T30] audit: type=1800 audit(4294967301.859:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.23" name="members" dev="configfs" ino=8071 res=0 errno=0 [ 95.676672][ T6011] zswap: compressor not available [ 95.684649][ T6020] Setting dangerous option i915.mitigations - tainting kernel [ 96.233735][ T6039] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.747249][ T6055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.753563][ T6055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.778522][ T6055] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 96.803710][ T6055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 96.810999][ T6055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.828597][ T6055] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.923958][ T6055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.934636][ T6055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.957605][ T6055] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.070475][ T6055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.348311][ T6055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.522453][ T6055] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.775762][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.37'. [ 97.787764][ T6077] Zero length message leads to an empty skb [ 98.012827][ T6073] zswap: compressor not available [ 98.022084][ T6080] Setting dangerous option i915.mitigations - tainting kernel [ 98.746855][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'. [ 98.765451][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 98.850238][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.925601][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.085632][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.797900][ T6123] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.052796][ T6127] FAULT_INJECTION: forcing a failure. [ 100.052796][ T6127] name failslab, interval 1, probability 0, space 0, times 0 [ 100.080968][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.1.47 Tainted: G U syzkaller #0 PREEMPT(full) [ 100.081010][ T6127] Tainted: [U]=USER [ 100.081019][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.081034][ T6127] Call Trace: [ 100.081043][ T6127] [ 100.081054][ T6127] dump_stack_lvl+0x16c/0x1f0 [ 100.081092][ T6127] should_fail_ex+0x512/0x640 [ 100.081131][ T6127] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 100.081161][ T6127] should_failslab+0xc2/0x120 [ 100.081193][ T6127] kmem_cache_alloc_noprof+0x75/0x6e0 [ 100.081219][ T6127] ? __proc_create+0x2ce/0x8e0 [ 100.081270][ T6127] ? __proc_create+0x2ce/0x8e0 [ 100.081305][ T6127] __proc_create+0x2ce/0x8e0 [ 100.081343][ T6127] ? __pfx___proc_create+0x10/0x10 [ 100.081376][ T6127] ? __register_sysctl_table+0x736/0x1900 [ 100.081421][ T6127] ? _raw_spin_unlock+0x28/0x50 [ 100.081453][ T6127] proc_create_reg+0x7d/0x180 [ 100.081493][ T6127] proc_create_net_data+0x8e/0x1c0 [ 100.081529][ T6127] ? __pfx_proc_create_net_data+0x10/0x10 [ 100.081573][ T6127] ? __pfx_arp_net_init+0x10/0x10 [ 100.081609][ T6127] arp_net_init+0x53/0x70 [ 100.081645][ T6127] ops_init+0x1e2/0x5f0 [ 100.081675][ T6127] setup_net+0x100/0x390 [ 100.081701][ T6127] ? __pfx_setup_net+0x10/0x10 [ 100.081729][ T6127] ? debug_mutex_init+0x37/0x70 [ 100.081761][ T6127] copy_net_ns+0x2f8/0x690 [ 100.081794][ T6127] create_new_namespaces+0x3ea/0xa90 [ 100.081830][ T6127] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 100.081863][ T6127] ksys_unshare+0x45b/0xa40 [ 100.081896][ T6127] ? __pfx_ksys_unshare+0x10/0x10 [ 100.081932][ T6127] ? xfd_validate_state+0x61/0x180 [ 100.081978][ T6127] __x64_sys_unshare+0x31/0x40 [ 100.082010][ T6127] do_syscall_64+0xcd/0xfa0 [ 100.082043][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.082070][ T6127] RIP: 0033:0x7fd08298f6c9 [ 100.082092][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.082116][ T6127] RSP: 002b:00007fd083828038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 100.082141][ T6127] RAX: ffffffffffffffda RBX: 00007fd082be6090 RCX: 00007fd08298f6c9 [ 100.082158][ T6127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 100.082175][ T6127] RBP: 00007fd082a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 100.082191][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.082206][ T6127] R13: 00007fd082be6128 R14: 00007fd082be6090 R15: 00007ffc14e2b5c8 [ 100.082245][ T6127] [ 100.472221][ T6125] zswap: compressor not available [ 100.546462][ T6130] Setting dangerous option i915.mitigations - tainting kernel [ 100.701151][ T30] audit: type=1804 audit(4294968330.355:3): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.50" name=2F6E6577726F6F742F31362F05 dev="tmpfs" ino=99 res=1 errno=0 [ 100.846450][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.926701][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.006502][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.167851][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.431750][ T6142] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.963486][ T6147] delete_channel: no stack [ 102.357416][ T6158] workqueue: Failed to create a rescuer kthread for wq "nfc26_nci_tx_wq": -EINTR [ 102.938075][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.009500][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.087498][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.225599][ T6263] zswap: compressor not available [ 103.248035][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.443105][ T6302] FAULT_INJECTION: forcing a failure. [ 104.443105][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 104.519901][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.1.73 Tainted: G U syzkaller #0 PREEMPT(full) [ 104.519944][ T6302] Tainted: [U]=USER [ 104.519953][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.519968][ T6302] Call Trace: [ 104.519977][ T6302] [ 104.519988][ T6302] dump_stack_lvl+0x16c/0x1f0 [ 104.520024][ T6302] should_fail_ex+0x512/0x640 [ 104.520062][ T6302] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 104.520104][ T6302] should_failslab+0xc2/0x120 [ 104.520140][ T6302] __kvmalloc_node_noprof+0x141/0x9c0 [ 104.520175][ T6302] ? __v4l2_subdev_state_alloc+0x1ac/0x400 [ 104.520226][ T6302] ? __v4l2_subdev_state_alloc+0x1ac/0x400 [ 104.520266][ T6302] __v4l2_subdev_state_alloc+0x1ac/0x400 [ 104.520311][ T6302] subdev_open+0xa6/0x540 [ 104.520353][ T6302] v4l2_open+0x1d2/0x5e0 [ 104.520383][ T6302] ? __pfx_v4l2_open+0x10/0x10 [ 104.520411][ T6302] chrdev_open+0x234/0x6a0 [ 104.520442][ T6302] ? __pfx_apparmor_file_open+0x10/0x10 [ 104.520481][ T6302] ? __pfx_chrdev_open+0x10/0x10 [ 104.520515][ T6302] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 104.520552][ T6302] do_dentry_open+0x982/0x1530 [ 104.520583][ T6302] ? __pfx_chrdev_open+0x10/0x10 [ 104.520622][ T6302] vfs_open+0x82/0x3f0 [ 104.520664][ T6302] path_openat+0x1de4/0x2cb0 [ 104.520706][ T6302] ? __pfx_path_openat+0x10/0x10 [ 104.520733][ T6302] ? stack_trace_save+0x8e/0xc0 [ 104.520764][ T6302] ? __pfx_stack_trace_save+0x10/0x10 [ 104.520792][ T6302] ? do_syscall_64+0xcd/0xfa0 [ 104.520836][ T6302] do_filp_open+0x20b/0x470 [ 104.520868][ T6302] ? __pfx_do_filp_open+0x10/0x10 [ 104.520896][ T6302] ? add_lock_to_list+0x9d/0x130 [ 104.520960][ T6302] ? find_held_lock+0x2b/0x80 [ 104.520985][ T6302] ? __might_fault+0xe3/0x190 [ 104.521011][ T6302] ? __might_fault+0xe3/0x190 [ 104.521035][ T6302] ? __might_fault+0x13b/0x190 [ 104.521075][ T6302] file_open_name+0x2a3/0x450 [ 104.521115][ T6302] ? __pfx_file_open_name+0x10/0x10 [ 104.521158][ T6302] ? getname_flags.part.0+0x1c5/0x550 [ 104.521204][ T6302] acct_on+0xc7/0xa00 [ 104.521246][ T6302] ? __pfx_acct_on+0x10/0x10 [ 104.521286][ T6302] ? bpf_lsm_capable+0x9/0x10 [ 104.521328][ T6302] __x64_sys_acct+0x81/0x1e0 [ 104.521366][ T6302] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.521396][ T6302] do_syscall_64+0xcd/0xfa0 [ 104.521430][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.521457][ T6302] RIP: 0033:0x7fd08298f6c9 [ 104.521478][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.521503][ T6302] RSP: 002b:00007fd083828038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 104.521528][ T6302] RAX: ffffffffffffffda RBX: 00007fd082be6090 RCX: 00007fd08298f6c9 [ 104.521547][ T6302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 104.521563][ T6302] RBP: 00007fd082a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 104.521580][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.521596][ T6302] R13: 00007fd082be6128 R14: 00007fd082be6090 R15: 00007ffc14e2b5c8 [ 104.521636][ T6302] [ 104.830221][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.947179][ T6286] delete_channel: no stack [ 105.624287][ T6314] process 'syz.0.78' launched './file0' with NULL argv: empty string added [ 106.710833][ T6313] kexec: Could not allocate control_code_buffer [ 106.803566][ T6334] random: crng reseeded on system resumption [ 106.871592][ T6338] binder: 6335:6338 ioctl c00c6211 0 returned -14 [ 107.893512][ T6344] delete_channel: no stack [ 107.929657][ T6341] syz.0.84: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 108.006390][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.0.84 Tainted: G U syzkaller #0 PREEMPT(full) [ 108.006431][ T6341] Tainted: [U]=USER [ 108.006439][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.006453][ T6341] Call Trace: [ 108.006462][ T6341] [ 108.006481][ T6341] dump_stack_lvl+0x16c/0x1f0 [ 108.006516][ T6341] warn_alloc+0x248/0x3a0 [ 108.006546][ T6341] ? __pfx_warn_alloc+0x10/0x10 [ 108.006587][ T6341] ? xt_alloc_table_info+0x43/0xa0 [ 108.006617][ T6341] ? __vmalloc_node_noprof+0xad/0xf0 [ 108.006661][ T6341] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 108.006710][ T6341] ? xt_alloc_table_info+0x43/0xa0 [ 108.006750][ T6341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 108.006793][ T6341] ? ___kmalloc_large_node+0xed/0x160 [ 108.006835][ T6341] __kvmalloc_node_noprof+0x431/0x9c0 [ 108.006866][ T6341] ? xt_alloc_table_info+0x43/0xa0 [ 108.006897][ T6341] ? copy_from_sockptr_offset+0xed/0x1b0 [ 108.006934][ T6341] ? xt_alloc_table_info+0x43/0xa0 [ 108.006972][ T6341] ? xt_alloc_table_info+0x43/0xa0 [ 108.007000][ T6341] xt_alloc_table_info+0x43/0xa0 [ 108.007031][ T6341] do_ip6t_set_ctl+0x498/0xa70 [ 108.007069][ T6341] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 108.007106][ T6341] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 108.007148][ T6341] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.007200][ T6341] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 108.007236][ T6341] nf_setsockopt+0x8d/0xf0 [ 108.007269][ T6341] ipv6_setsockopt+0x135/0x170 [ 108.007305][ T6341] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 108.007340][ T6341] do_sock_setsockopt+0xf3/0x1d0 [ 108.007376][ T6341] __sys_setsockopt+0x120/0x1a0 [ 108.007422][ T6341] __x64_sys_setsockopt+0xbd/0x160 [ 108.007459][ T6341] ? do_syscall_64+0x91/0xfa0 [ 108.007495][ T6341] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.007524][ T6341] do_syscall_64+0xcd/0xfa0 [ 108.007556][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.007583][ T6341] RIP: 0033:0x7f1a7678f6c9 [ 108.007605][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.007630][ T6341] RSP: 002b:00007f1a7760e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.007655][ T6341] RAX: ffffffffffffffda RBX: 00007f1a769e6090 RCX: 00007f1a7678f6c9 [ 108.007673][ T6341] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 108.007688][ T6341] RBP: 00007f1a76811f91 R08: 00000000420b5bf1 R09: 0000000000000000 [ 108.007704][ T6341] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 108.007719][ T6341] R13: 00007f1a769e6128 R14: 00007f1a769e6090 R15: 00007ffd56335f78 [ 108.007755][ T6341] [ 108.007765][ T6341] Mem-Info: [ 108.352651][ T6341] active_anon:8287 inactive_anon:0 isolated_anon:0 [ 108.352651][ T6341] active_file:2987 inactive_file:39895 isolated_file:0 [ 108.352651][ T6341] unevictable:768 dirty:277 writeback:0 [ 108.352651][ T6341] slab_reclaimable:10437 slab_unreclaimable:91082 [ 108.352651][ T6341] mapped:24409 shmem:3905 pagetables:1093 [ 108.352651][ T6341] sec_pagetables:0 bounce:0 [ 108.352651][ T6341] kernel_misc_reclaimable:0 [ 108.352651][ T6341] free:1321682 free_pcp:20741 free_cma:0 [ 108.445067][ T6341] Node 0 active_anon:30048kB inactive_anon:0kB active_file:11948kB inactive_file:159380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97636kB dirty:1108kB writeback:0kB shmem:11084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11192kB pagetables:4272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.477008][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.543980][ T6341] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.589235][ T6341] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.700711][ T6341] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 108.713044][ T6341] Node 0 DMA32 free:1387792kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28448kB inactive_anon:0kB active_file:11948kB inactive_file:159380kB unevictable:1536kB writepending:1108kB zspages:0kB present:3129332kB managed:2545088kB mlocked:0kB bounce:0kB free_pcp:63660kB local_pcp:43972kB free_cma:0kB [ 108.842665][ T6341] lowmem_reserve[]: 0 0 1 1 1 [ 108.857302][ T6341] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.920584][ T6341] lowmem_reserve[]: 0 0 0 0 0 [ 108.948099][ T6341] Node 1 Normal free:3879876kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2004kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25424kB local_pcp:13592kB free_cma:0kB [ 109.002906][ T6373] Invalid ELF header magic: != ELF [ 109.014952][ T6341] lowmem_reserve[]: 0 0 0 0 0 [ 109.019832][ T6341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.066107][ T6341] Node 0 DMA32: 0*4kB 1*8kB (U) 2*16kB (ME) 2*32kB (UM) 5*64kB (UME) 37*128kB (UM) 24*256kB (UM) 10*512kB (ME) 3*1024kB (M) 2*2048kB (ME) 331*4096kB (M) = 1379368kB [ 109.123601][ T6341] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 109.160655][ T6341] Node 1 Normal: 1*4kB (E) 16*8kB (UME) 8*16kB (UME) 56*32kB (UME) 21*64kB (UE) 3*128kB (UE) 5*256kB (UME) 2*512kB (UM) 0*1024kB 3*2048kB (UME) 944*4096kB (M) = 3878852kB [ 109.180741][ T6341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.190947][ T6341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.237005][ T6341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.261748][ T6341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.272194][ T6341] 44747 total pagecache pages [ 109.277132][ T6341] 0 pages in swap cache [ 109.281373][ T6341] Free swap = 124996kB [ 109.287676][ T6341] Total swap = 124996kB [ 109.291936][ T6341] 2097051 pages RAM [ 109.295805][ T6341] 0 pages HighMem/MovableOnly [ 109.300618][ T6341] 428689 pages reserved [ 109.304834][ T6341] 0 pages cma reserved syzkaller syzkaller login: [ 110.223448][ T6400] FAULT_INJECTION: forcing a failure. [ 110.223448][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 110.267129][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.2.103 Tainted: G U syzkaller #0 PREEMPT(full) [ 110.267168][ T6400] Tainted: [U]=USER [ 110.267176][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.267190][ T6400] Call Trace: [ 110.267198][ T6400] [ 110.267208][ T6400] dump_stack_lvl+0x16c/0x1f0 [ 110.267242][ T6400] should_fail_ex+0x512/0x640 [ 110.267283][ T6400] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 110.267313][ T6400] should_failslab+0xc2/0x120 [ 110.267345][ T6400] kmem_cache_alloc_noprof+0x75/0x6e0 [ 110.267370][ T6400] ? alloc_empty_file+0x55/0x1e0 [ 110.267411][ T6400] ? alloc_empty_file+0x55/0x1e0 [ 110.267442][ T6400] alloc_empty_file+0x55/0x1e0 [ 110.267477][ T6400] path_openat+0xda/0x2cb0 [ 110.267504][ T6400] ? stack_depot_save_flags+0x29/0x9c0 [ 110.267550][ T6400] ? kasan_save_stack+0x42/0x60 [ 110.267578][ T6400] ? __pfx_path_openat+0x10/0x10 [ 110.267602][ T6400] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 110.267625][ T6400] ? getname_flags.part.0+0x4c/0x550 [ 110.267657][ T6400] ? getname_flags+0x93/0xf0 [ 110.267678][ T6400] ? acct_on+0x82/0xa00 [ 110.267711][ T6400] ? __x64_sys_acct+0x81/0x1e0 [ 110.267745][ T6400] ? do_syscall_64+0xcd/0xfa0 [ 110.267772][ T6400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.267803][ T6400] do_filp_open+0x20b/0x470 [ 110.267830][ T6400] ? __pfx_do_filp_open+0x10/0x10 [ 110.267886][ T6400] ? find_held_lock+0x2b/0x80 [ 110.267910][ T6400] ? __might_fault+0xe3/0x190 [ 110.267937][ T6400] ? __might_fault+0xe3/0x190 [ 110.267959][ T6400] ? __might_fault+0x13b/0x190 [ 110.267990][ T6400] file_open_name+0x2a3/0x450 [ 110.268027][ T6400] ? __pfx_file_open_name+0x10/0x10 [ 110.268066][ T6400] ? getname_flags.part.0+0x1c5/0x550 [ 110.268108][ T6400] acct_on+0xc7/0xa00 [ 110.268145][ T6400] ? __pfx_acct_on+0x10/0x10 [ 110.268182][ T6400] ? bpf_lsm_capable+0x9/0x10 [ 110.268221][ T6400] __x64_sys_acct+0x81/0x1e0 [ 110.268256][ T6400] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.268289][ T6400] do_syscall_64+0xcd/0xfa0 [ 110.268321][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.268346][ T6400] RIP: 0033:0x7f8740b8f6c9 [ 110.268366][ T6400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.268388][ T6400] RSP: 002b:00007f873edf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 110.268412][ T6400] RAX: ffffffffffffffda RBX: 00007f8740de5fa0 RCX: 00007f8740b8f6c9 [ 110.268428][ T6400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 110.268443][ T6400] RBP: 00007f873edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 110.268458][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.268472][ T6400] R13: 00007f8740de6038 R14: 00007f8740de5fa0 R15: 00007ffce1dce518 [ 110.268508][ T6400] [ 111.072723][ T6415] netlink: Conntrack attr has 5244 unknown bytes [ 112.196726][ T6442] FAULT_INJECTION: forcing a failure. [ 112.196726][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 112.292187][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.2.113 Tainted: G U syzkaller #0 PREEMPT(full) [ 112.292222][ T6442] Tainted: [U]=USER [ 112.292228][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.292239][ T6442] Call Trace: [ 112.292245][ T6442] [ 112.292253][ T6442] dump_stack_lvl+0x16c/0x1f0 [ 112.292282][ T6442] should_fail_ex+0x512/0x640 [ 112.292312][ T6442] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 112.292334][ T6442] should_failslab+0xc2/0x120 [ 112.292361][ T6442] kmem_cache_alloc_noprof+0x75/0x6e0 [ 112.292383][ T6442] ? security_file_alloc+0x34/0x2b0 [ 112.292413][ T6442] ? security_file_alloc+0x34/0x2b0 [ 112.292435][ T6442] security_file_alloc+0x34/0x2b0 [ 112.292458][ T6442] init_file+0x93/0x4c0 [ 112.292489][ T6442] alloc_empty_file+0x73/0x1e0 [ 112.292523][ T6442] path_openat+0xda/0x2cb0 [ 112.292549][ T6442] ? stack_depot_save_flags+0x29/0x9c0 [ 112.292591][ T6442] ? kasan_save_stack+0x42/0x60 [ 112.292617][ T6442] ? __pfx_path_openat+0x10/0x10 [ 112.292640][ T6442] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 112.292664][ T6442] ? getname_flags.part.0+0x4c/0x550 [ 112.292697][ T6442] ? getname_flags+0x93/0xf0 [ 112.292719][ T6442] ? acct_on+0x82/0xa00 [ 112.292750][ T6442] ? __x64_sys_acct+0x81/0x1e0 [ 112.292779][ T6442] ? do_syscall_64+0xcd/0xfa0 [ 112.292804][ T6442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.292836][ T6442] do_filp_open+0x20b/0x470 [ 112.292864][ T6442] ? __pfx_do_filp_open+0x10/0x10 [ 112.292919][ T6442] ? find_held_lock+0x2b/0x80 [ 112.292943][ T6442] ? __might_fault+0xe3/0x190 [ 112.292966][ T6442] ? __might_fault+0xe3/0x190 [ 112.292988][ T6442] ? __might_fault+0x13b/0x190 [ 112.293020][ T6442] file_open_name+0x2a3/0x450 [ 112.293067][ T6442] ? __pfx_file_open_name+0x10/0x10 [ 112.293104][ T6442] ? getname_flags.part.0+0x1c5/0x550 [ 112.293144][ T6442] acct_on+0xc7/0xa00 [ 112.293181][ T6442] ? __pfx_acct_on+0x10/0x10 [ 112.293218][ T6442] ? bpf_lsm_capable+0x9/0x10 [ 112.293255][ T6442] __x64_sys_acct+0x81/0x1e0 [ 112.293291][ T6442] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.293318][ T6442] do_syscall_64+0xcd/0xfa0 [ 112.293349][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.293373][ T6442] RIP: 0033:0x7f8740b8f6c9 [ 112.293393][ T6442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.293415][ T6442] RSP: 002b:00007f873edf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 112.293438][ T6442] RAX: ffffffffffffffda RBX: 00007f8740de5fa0 RCX: 00007f8740b8f6c9 [ 112.293455][ T6442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 112.293470][ T6442] RBP: 00007f873edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 112.293485][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.293500][ T6442] R13: 00007f8740de6038 R14: 00007f8740de5fa0 R15: 00007ffce1dce518 [ 112.293533][ T6442] [ 113.321556][ T6451] zswap: compressor not available [ 113.354349][ T6459] Setting dangerous option i915.mitigations - tainting kernel [ 113.444455][ T6457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.450597][ T6457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.521633][ T6457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.527911][ T6457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.557658][ T6470] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 114.275325][ T6477] delete_channel: no stack [ 114.917252][ T6503] vhci_hcd: invalid port number 16 [ 114.924373][ T6503] vhci_hcd: invalid port number 16 [ 115.112059][ T6509] random: crng reseeded on system resumption [ 115.355723][ T6519] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.495714][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.501844][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.534445][ T6526] FAULT_INJECTION: forcing a failure. [ 115.534445][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 115.561106][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.1.138 Tainted: G U syzkaller #0 PREEMPT(full) [ 115.561135][ T6526] Tainted: [U]=USER [ 115.561140][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.561148][ T6526] Call Trace: [ 115.561153][ T6526] [ 115.561159][ T6526] dump_stack_lvl+0x16c/0x1f0 [ 115.561180][ T6526] should_fail_ex+0x512/0x640 [ 115.561201][ T6526] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 115.561220][ T6526] should_failslab+0xc2/0x120 [ 115.561249][ T6526] kmem_cache_alloc_noprof+0x75/0x6e0 [ 115.561274][ T6526] ? security_file_alloc+0x34/0x2b0 [ 115.561297][ T6526] ? security_file_alloc+0x34/0x2b0 [ 115.561310][ T6526] security_file_alloc+0x34/0x2b0 [ 115.561324][ T6526] init_file+0x93/0x4c0 [ 115.561343][ T6526] alloc_empty_file+0x73/0x1e0 [ 115.561361][ T6526] dentry_open+0x46/0xd0 [ 115.561380][ T6526] acct_on+0x1a5/0xa00 [ 115.561401][ T6526] ? __pfx_acct_on+0x10/0x10 [ 115.561422][ T6526] ? bpf_lsm_capable+0x9/0x10 [ 115.561443][ T6526] __x64_sys_acct+0x81/0x1e0 [ 115.561470][ T6526] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.561487][ T6526] do_syscall_64+0xcd/0xfa0 [ 115.561505][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.561519][ T6526] RIP: 0033:0x7fd08298f6c9 [ 115.561531][ T6526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.561543][ T6526] RSP: 002b:00007fd083849038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 115.561556][ T6526] RAX: ffffffffffffffda RBX: 00007fd082be5fa0 RCX: 00007fd08298f6c9 [ 115.561565][ T6526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 115.561573][ T6526] RBP: 00007fd082a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 115.561581][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.561589][ T6526] R13: 00007fd082be6038 R14: 00007fd082be5fa0 R15: 00007ffc14e2b5c8 [ 115.561609][ T6526] [ 115.573872][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.613783][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.189514][ T6562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.196562][ T6562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.213233][ T6562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.221558][ T6562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.160392][ T6586] FAULT_INJECTION: forcing a failure. [ 118.160392][ T6586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.174130][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.3.154 Tainted: G U syzkaller #0 PREEMPT(full) [ 118.174158][ T6586] Tainted: [U]=USER [ 118.174162][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.174171][ T6586] Call Trace: [ 118.174176][ T6586] [ 118.174181][ T6586] dump_stack_lvl+0x16c/0x1f0 [ 118.174201][ T6586] should_fail_ex+0x512/0x640 [ 118.174225][ T6586] should_fail_alloc_page+0xe7/0x130 [ 118.174246][ T6586] prepare_alloc_pages+0x3c2/0x610 [ 118.174264][ T6586] ? rcu_is_watching+0x12/0xc0 [ 118.174280][ T6586] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 118.174304][ T6586] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 118.174325][ T6586] ? rcu_is_watching+0x12/0xc0 [ 118.174338][ T6586] ? trace_kmalloc+0x2b/0xd0 [ 118.174353][ T6586] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 118.174370][ T6586] ? __alloc_skb+0x166/0x380 [ 118.174389][ T6586] ? rcu_is_watching+0x11/0xc0 [ 118.174403][ T6586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.174426][ T6586] ? policy_nodemask+0xea/0x4e0 [ 118.174445][ T6586] alloc_pages_mpol+0x1fb/0x550 [ 118.174463][ T6586] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 118.174480][ T6586] ? __pfx___alloc_skb+0x10/0x10 [ 118.174499][ T6586] ? find_held_lock+0x2b/0x80 [ 118.174531][ T6586] alloc_pages_noprof+0x131/0x390 [ 118.174550][ T6586] alloc_skb_with_frags+0x24a/0x860 [ 118.174570][ T6586] sock_alloc_send_pskb+0x7f9/0x980 [ 118.174598][ T6586] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 118.174626][ T6586] tun_get_user+0x7e2/0x3cc0 [ 118.174649][ T6586] ? __pfx_tun_get_user+0x10/0x10 [ 118.174664][ T6586] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 118.174690][ T6586] ? find_held_lock+0x2b/0x80 [ 118.174704][ T6586] ? tun_get+0x191/0x370 [ 118.174720][ T6586] tun_chr_write_iter+0xdc/0x210 [ 118.174735][ T6586] vfs_write+0x7d3/0x11d0 [ 118.174750][ T6586] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 118.174768][ T6586] ? __pfx_vfs_write+0x10/0x10 [ 118.174780][ T6586] ? find_held_lock+0x2b/0x80 [ 118.174805][ T6586] __x64_sys_pwrite64+0x1eb/0x250 [ 118.174821][ T6586] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 118.174842][ T6586] do_syscall_64+0xcd/0xfa0 [ 118.174859][ T6586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.174873][ T6586] RIP: 0033:0x7f3e31f8f6c9 [ 118.174884][ T6586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.174897][ T6586] RSP: 002b:00007f3e32eb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 118.174910][ T6586] RAX: ffffffffffffffda RBX: 00007f3e321e5fa0 RCX: 00007f3e31f8f6c9 [ 118.174919][ T6586] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 118.174927][ T6586] RBP: 00007f3e32011f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.174943][ T6586] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 118.174956][ T6586] R13: 00007f3e321e6038 R14: 00007f3e321e5fa0 R15: 00007ffc0d3d9f38 [ 118.174990][ T6586] [ 118.917953][ T6593] FAULT_INJECTION: forcing a failure. [ 118.917953][ T6593] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.932353][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.2.156 Tainted: G U syzkaller #0 PREEMPT(full) [ 118.932391][ T6593] Tainted: [U]=USER [ 118.932399][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.932417][ T6593] Call Trace: [ 118.932425][ T6593] [ 118.932434][ T6593] dump_stack_lvl+0x16c/0x1f0 [ 118.932482][ T6593] should_fail_ex+0x512/0x640 [ 118.932523][ T6593] _copy_to_user+0x32/0xd0 [ 118.932563][ T6593] simple_read_from_buffer+0xcb/0x170 [ 118.932603][ T6593] proc_fail_nth_read+0x197/0x240 [ 118.932640][ T6593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.932671][ T6593] ? rw_verify_area+0xcf/0x6c0 [ 118.932695][ T6593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.932722][ T6593] vfs_read+0x1e4/0xcf0 [ 118.932754][ T6593] ? __pfx___mutex_lock+0x10/0x10 [ 118.932785][ T6593] ? __pfx_vfs_read+0x10/0x10 [ 118.932821][ T6593] ? __fget_files+0x20e/0x3c0 [ 118.932858][ T6593] ksys_read+0x12a/0x250 [ 118.932884][ T6593] ? __pfx_ksys_read+0x10/0x10 [ 118.932922][ T6593] do_syscall_64+0xcd/0xfa0 [ 118.932954][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.932984][ T6593] RIP: 0033:0x7f8740b8e0dc [ 118.933009][ T6593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.933030][ T6593] RSP: 002b:00007f873edf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.933050][ T6593] RAX: ffffffffffffffda RBX: 00007f8740de5fa0 RCX: 00007f8740b8e0dc [ 118.933066][ T6593] RDX: 000000000000000f RSI: 00007f873edf60a0 RDI: 0000000000000004 [ 118.933080][ T6593] RBP: 00007f873edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.933095][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.933109][ T6593] R13: 00007f8740de6038 R14: 00007f8740de5fa0 R15: 00007ffce1dce518 [ 118.933146][ T6593] [ 119.266015][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.266657][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.272168][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.278253][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.446814][ T6602] syz.3.157(6602): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 119.465959][ T5837] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 119.467029][ T5837] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 119.484613][ T5837] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 119.484695][ T5837] Bluetooth: hci3: Malformed LE Event: 0x0d [ 119.911601][ T6613] FAULT_INJECTION: forcing a failure. [ 119.911601][ T6613] name failslab, interval 1, probability 0, space 0, times 0 [ 119.924398][ T6613] CPU: 0 UID: 0 PID: 6613 Comm: syz.0.162 Tainted: G U syzkaller #0 PREEMPT(full) [ 119.924438][ T6613] Tainted: [U]=USER [ 119.924446][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.924459][ T6613] Call Trace: [ 119.924467][ T6613] [ 119.924477][ T6613] dump_stack_lvl+0x16c/0x1f0 [ 119.924511][ T6613] should_fail_ex+0x512/0x640 [ 119.924548][ T6613] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 119.924578][ T6613] should_failslab+0xc2/0x120 [ 119.924613][ T6613] kmem_cache_alloc_noprof+0x75/0x6e0 [ 119.924640][ T6613] ? alloc_empty_file+0x55/0x1e0 [ 119.924683][ T6613] ? alloc_empty_file+0x55/0x1e0 [ 119.924716][ T6613] alloc_empty_file+0x55/0x1e0 [ 119.924753][ T6613] dentry_open+0x46/0xd0 [ 119.924786][ T6613] acct_on+0x1a5/0xa00 [ 119.924827][ T6613] ? __pfx_acct_on+0x10/0x10 [ 119.924865][ T6613] ? bpf_lsm_capable+0x9/0x10 [ 119.924906][ T6613] __x64_sys_acct+0x81/0x1e0 [ 119.924943][ T6613] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.924973][ T6613] do_syscall_64+0xcd/0xfa0 [ 119.925006][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.925032][ T6613] RIP: 0033:0x7f1a7678f6c9 [ 119.925052][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.925077][ T6613] RSP: 002b:00007f1a7762f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 119.925101][ T6613] RAX: ffffffffffffffda RBX: 00007f1a769e5fa0 RCX: 00007f1a7678f6c9 [ 119.925119][ T6613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 119.925136][ T6613] RBP: 00007f1a76811f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.925151][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.925167][ T6613] R13: 00007f1a769e6038 R14: 00007f1a769e5fa0 R15: 00007ffd56335f78 [ 119.925205][ T6613] [ 120.285295][ T6616] FAULT_INJECTION: forcing a failure. [ 120.285295][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 120.298186][ T6616] CPU: 0 UID: 0 PID: 6616 Comm: syz.3.163 Tainted: G U syzkaller #0 PREEMPT(full) [ 120.298208][ T6616] Tainted: [U]=USER [ 120.298213][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.298221][ T6616] Call Trace: [ 120.298225][ T6616] [ 120.298230][ T6616] dump_stack_lvl+0x16c/0x1f0 [ 120.298257][ T6616] should_fail_ex+0x512/0x640 [ 120.298277][ T6616] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 120.298296][ T6616] should_failslab+0xc2/0x120 [ 120.298314][ T6616] __kvmalloc_node_noprof+0x141/0x9c0 [ 120.298331][ T6616] ? traverse.part.0.constprop.0+0x397/0x650 [ 120.298357][ T6616] ? traverse.part.0.constprop.0+0x397/0x650 [ 120.298377][ T6616] traverse.part.0.constprop.0+0x397/0x650 [ 120.298398][ T6616] ? aa_file_perm+0x28f/0x12e0 [ 120.298419][ T6616] seq_read_iter+0x93c/0x12d0 [ 120.298443][ T6616] ? __pfx_aa_file_perm+0x10/0x10 [ 120.298462][ T6616] seq_read+0x3a3/0x570 [ 120.298482][ T6616] ? __pfx_seq_read+0x10/0x10 [ 120.298502][ T6616] ? get_pid_task+0xfc/0x250 [ 120.298530][ T6616] ? rw_verify_area+0xcf/0x6c0 [ 120.298543][ T6616] ? __pfx_seq_read+0x10/0x10 [ 120.298563][ T6616] vfs_read+0x1e4/0xcf0 [ 120.298582][ T6616] ? __pfx_vfs_read+0x10/0x10 [ 120.298594][ T6616] ? find_held_lock+0x2b/0x80 [ 120.298609][ T6616] ? __fget_files+0x204/0x3c0 [ 120.298625][ T6616] ? __fget_files+0x20e/0x3c0 [ 120.298637][ T6616] ? __fget_files+0x200/0x3c0 [ 120.298655][ T6616] __x64_sys_pread64+0x1eb/0x250 [ 120.298670][ T6616] ? __pfx___x64_sys_pread64+0x10/0x10 [ 120.298692][ T6616] do_syscall_64+0xcd/0xfa0 [ 120.298709][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.298723][ T6616] RIP: 0033:0x7f3e31f8f6c9 [ 120.298734][ T6616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.298747][ T6616] RSP: 002b:00007f3e32eb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 120.298760][ T6616] RAX: ffffffffffffffda RBX: 00007f3e321e5fa0 RCX: 00007f3e31f8f6c9 [ 120.298769][ T6616] RDX: 000000000000f3aa RSI: 0000200000000100 RDI: 0000000000000003 [ 120.298777][ T6616] RBP: 00007f3e32eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.298785][ T6616] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 120.298793][ T6616] R13: 00007f3e321e6038 R14: 00007f3e321e5fa0 R15: 00007ffc0d3d9f38 [ 120.298811][ T6616] [ 120.694481][ T6625] FAULT_INJECTION: forcing a failure. [ 120.694481][ T6625] name failslab, interval 1, probability 0, space 0, times 0 [ 120.707545][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.1.167 Tainted: G U syzkaller #0 PREEMPT(full) [ 120.707582][ T6625] Tainted: [U]=USER [ 120.707589][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.707600][ T6625] Call Trace: [ 120.707607][ T6625] [ 120.707617][ T6625] dump_stack_lvl+0x16c/0x1f0 [ 120.707650][ T6625] should_fail_ex+0x512/0x640 [ 120.707689][ T6625] should_failslab+0xc2/0x120 [ 120.707720][ T6625] __kmalloc_cache_noprof+0x72/0x780 [ 120.707757][ T6625] ? __task_pid_nr_ns+0x1f5/0x500 [ 120.707789][ T6625] ? proc_thread_self_get_link+0x1c6/0x240 [ 120.707827][ T6625] ? proc_thread_self_get_link+0x1c6/0x240 [ 120.707857][ T6625] proc_thread_self_get_link+0x1c6/0x240 [ 120.707888][ T6625] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 120.707920][ T6625] step_into+0x189e/0x21a0 [ 120.707952][ T6625] ? __pfx_step_into+0x10/0x10 [ 120.707978][ T6625] ? lookup_fast+0x156/0x610 [ 120.708004][ T6625] walk_component+0xfc/0x5b0 [ 120.708030][ T6625] link_path_walk+0x627/0xe20 [ 120.708065][ T6625] path_openat+0x1b0/0x2cb0 [ 120.708104][ T6625] ? __pfx_path_openat+0x10/0x10 [ 120.708133][ T6625] ? __lock_acquire+0xb8a/0x1c90 [ 120.708168][ T6625] do_filp_open+0x20b/0x470 [ 120.708195][ T6625] ? __pfx_do_filp_open+0x10/0x10 [ 120.708243][ T6625] ? alloc_fd+0x471/0x7d0 [ 120.708278][ T6625] do_sys_openat2+0x11b/0x1d0 [ 120.708311][ T6625] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.708357][ T6625] __x64_sys_openat+0x174/0x210 [ 120.708393][ T6625] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.708455][ T6625] do_syscall_64+0xcd/0xfa0 [ 120.708486][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.708511][ T6625] RIP: 0033:0x7fd08298df10 [ 120.708529][ T6625] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 120.708551][ T6625] RSP: 002b:00007fd083848fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 120.708575][ T6625] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd08298df10 [ 120.708591][ T6625] RDX: 0000000000000002 RSI: 00007fd082a1224b RDI: 00000000ffffff9c [ 120.708607][ T6625] RBP: 00007fd082a1224b R08: 0000000000000000 R09: 00007fd08384a000 [ 120.708622][ T6625] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 120.708635][ T6625] R13: 00007fd082be6038 R14: 00007fd082be5fa0 R15: 00007ffc14e2b5c8 [ 120.708669][ T6625] [ 120.708900][ T6625] FAULT_INJECTION: forcing a failure. [ 120.708900][ T6625] name failslab, interval 1, probability 0, space 0, times 0 [ 120.960289][ T6625] CPU: 0 UID: 0 PID: 6625 Comm: syz.1.167 Tainted: G U syzkaller #0 PREEMPT(full) [ 120.960327][ T6625] Tainted: [U]=USER [ 120.960334][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.960347][ T6625] Call Trace: [ 120.960355][ T6625] [ 120.960364][ T6625] dump_stack_lvl+0x16c/0x1f0 [ 120.960398][ T6625] should_fail_ex+0x512/0x640 [ 120.960431][ T6625] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 120.960461][ T6625] should_failslab+0xc2/0x120 [ 120.960493][ T6625] kmem_cache_alloc_node_noprof+0x78/0x770 [ 120.960518][ T6625] ? __alloc_skb+0x2b2/0x380 [ 120.960559][ T6625] ? __alloc_skb+0x2b2/0x380 [ 120.960590][ T6625] __alloc_skb+0x2b2/0x380 [ 120.960626][ T6625] ? __pfx___alloc_skb+0x10/0x10 [ 120.960668][ T6625] ? find_held_lock+0x2b/0x80 [ 120.960698][ T6625] alloc_skb_with_frags+0xe0/0x860 [ 120.960727][ T6625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.960756][ T6625] ? is_bpf_text_address+0x94/0x1a0 [ 120.960794][ T6625] sock_alloc_send_pskb+0x7f9/0x980 [ 120.960830][ T6625] ? arch_stack_walk+0xa6/0x100 [ 120.960862][ T6625] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 120.960900][ T6625] ? _parse_integer_limit+0x17f/0x1d0 [ 120.960940][ T6625] tun_get_user+0x7e2/0x3cc0 [ 120.960984][ T6625] ? __pfx_tun_get_user+0x10/0x10 [ 120.961010][ T6625] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 120.961055][ T6625] ? find_held_lock+0x2b/0x80 [ 120.961080][ T6625] ? tun_get+0x191/0x370 [ 120.961109][ T6625] tun_chr_write_iter+0xdc/0x210 [ 120.961137][ T6625] vfs_write+0x7d3/0x11d0 [ 120.961164][ T6625] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 120.961200][ T6625] ? __pfx_vfs_write+0x10/0x10 [ 120.961224][ T6625] ? find_held_lock+0x2b/0x80 [ 120.961268][ T6625] __x64_sys_pwrite64+0x1eb/0x250 [ 120.961297][ T6625] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 120.961336][ T6625] do_syscall_64+0xcd/0xfa0 [ 120.961366][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.961389][ T6625] RIP: 0033:0x7fd08298f6c9 [ 120.961407][ T6625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.961428][ T6625] RSP: 002b:00007fd083849038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 120.961450][ T6625] RAX: ffffffffffffffda RBX: 00007fd082be5fa0 RCX: 00007fd08298f6c9 [ 120.961466][ T6625] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 00000000000000c8 [ 120.961479][ T6625] RBP: 00007fd083849090 R08: 0000000000000000 R09: 0000000000000000 [ 120.961494][ T6625] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 120.961508][ T6625] R13: 00007fd082be6038 R14: 00007fd082be5fa0 R15: 00007ffc14e2b5c8 [ 120.961545][ T6625] [ 121.741109][ T30] audit: type=1804 audit(4294967315.520:4): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.174" name=2F6E6577726F6F742F35362F05 dev="tmpfs" ino=305 res=1 errno=0 [ 122.208593][ T6665] FAULT_INJECTION: forcing a failure. [ 122.208593][ T6665] name failslab, interval 1, probability 0, space 0, times 0 [ 122.221988][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.2.177 Tainted: G U syzkaller #0 PREEMPT(full) [ 122.222022][ T6665] Tainted: [U]=USER [ 122.222026][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.222039][ T6665] Call Trace: [ 122.222044][ T6665] [ 122.222050][ T6665] dump_stack_lvl+0x16c/0x1f0 [ 122.222071][ T6665] should_fail_ex+0x512/0x640 [ 122.222092][ T6665] ? fs_reclaim_acquire+0xae/0x150 [ 122.222112][ T6665] should_failslab+0xc2/0x120 [ 122.222130][ T6665] __kmalloc_noprof+0xdd/0x880 [ 122.222150][ T6665] ? kfree+0x252/0x6d0 [ 122.222169][ T6665] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 122.222189][ T6665] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 122.222204][ T6665] tomoyo_realpath_from_path+0xc2/0x6e0 [ 122.222224][ T6665] tomoyo_check_open_permission+0x2ab/0x3c0 [ 122.222247][ T6665] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 122.222289][ T6665] ? lock_acquire+0x179/0x350 [ 122.222308][ T6665] ? find_held_lock+0x2b/0x80 [ 122.222322][ T6665] ? mnt_get_write_access+0x52/0x2f0 [ 122.222343][ T6665] tomoyo_file_open+0x6b/0x90 [ 122.222361][ T6665] security_file_open+0x84/0x1e0 [ 122.222376][ T6665] do_dentry_open+0x596/0x1530 [ 122.222398][ T6665] vfs_open+0x82/0x3f0 [ 122.222419][ T6665] path_openat+0x1de4/0x2cb0 [ 122.222440][ T6665] ? __pfx_path_openat+0x10/0x10 [ 122.222456][ T6665] ? __lock_acquire+0xb8a/0x1c90 [ 122.222476][ T6665] do_filp_open+0x20b/0x470 [ 122.222491][ T6665] ? __pfx_do_filp_open+0x10/0x10 [ 122.222512][ T6665] ? __pfx_kfree_link+0x10/0x10 [ 122.222536][ T6665] ? alloc_fd+0x471/0x7d0 [ 122.222555][ T6665] do_sys_openat2+0x11b/0x1d0 [ 122.222574][ T6665] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.222600][ T6665] __x64_sys_openat+0x174/0x210 [ 122.222620][ T6665] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.222647][ T6665] do_syscall_64+0xcd/0xfa0 [ 122.222668][ T6665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.222682][ T6665] RIP: 0033:0x7f8740b8df10 [ 122.222694][ T6665] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 122.222706][ T6665] RSP: 002b:00007f873edf5fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 122.222719][ T6665] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8740b8df10 [ 122.222728][ T6665] RDX: 0000000000000002 RSI: 00007f8740c1224b RDI: 00000000ffffff9c [ 122.222736][ T6665] RBP: 00007f8740c1224b R08: 0000000000000000 R09: 00007f874191e000 [ 122.222744][ T6665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 122.222752][ T6665] R13: 00007f8740de6038 R14: 00007f8740de5fa0 R15: 00007ffce1dce518 [ 122.222771][ T6665] [ 122.225110][ T6665] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.634763][ T6670] random: crng reseeded on system resumption [ 123.050249][ T6686] ------------[ cut here ]------------ [ 123.055852][ T6686] WARNING: CPU: 1 PID: 6686 at net/mac80211/pm.c:171 __ieee80211_suspend+0x105b/0x1310 [ 123.065975][ T6686] Modules linked in: [ 123.070721][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.2.182 Tainted: G U syzkaller #0 PREEMPT(full) [ 123.081661][ T6686] Tainted: [U]=USER [ 123.085460][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.095607][ T6686] RIP: 0010:__ieee80211_suspend+0x105b/0x1310 [ 123.101734][ T6686] Code: 2e f7 f0 41 80 a4 24 81 01 00 00 fe 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 c4 4c 89 e7 e8 bd b8 2e f7 eb ba e8 76 21 c7 f6 90 <0f> 0b 90 e9 4f f8 ff ff e8 68 21 c7 f6 90 0f 0b 90 e9 30 f6 ff ff [ 123.121411][ T6686] RSP: 0018:ffffc90002fd7c40 EFLAGS: 00010283 [ 123.127537][ T6686] RAX: 0000000000005ed3 RBX: ffff888026888e80 RCX: ffffc9000f33a000 [ 123.135499][ T6686] RDX: 0000000000080000 RSI: ffffffff8af54bda RDI: 0000000000000001 [ 123.143518][ T6686] RBP: ffff88802688ab10 R08: 0000000000000001 R09: 0000000000000000 [ 123.151591][ T6686] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 123.159656][ T6686] R13: ffffed1004d111d9 R14: ffff88802688a910 R15: 0000000000000001 [ 123.167657][ T6686] FS: 00007f873edb46c0(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 123.176579][ T6686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.184724][ T6686] CR2: 000000110c32d853 CR3: 000000002fb36000 CR4: 00000000003526f0 [ 123.193442][ T6686] Call Trace: [ 123.196752][ T6686] [ 123.199726][ T6686] reset_write+0x7a/0x2a0 [ 123.204086][ T6686] short_proxy_write+0x135/0x1a0 [ 123.209150][ T6686] ? __pfx_short_proxy_write+0x10/0x10 [ 123.214622][ T6686] vfs_write+0x2a0/0x11d0 [ 123.218985][ T6686] ? __pfx___mutex_lock+0x10/0x10 [ 123.224029][ T6686] ? __pfx_vfs_write+0x10/0x10 [ 123.228806][ T6686] ? __fget_files+0x20e/0x3c0 [ 123.233472][ T6686] ksys_write+0x12a/0x250 [ 123.237825][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 123.242665][ T6686] do_syscall_64+0xcd/0xfa0 [ 123.247159][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.253063][ T6686] RIP: 0033:0x7f8740b8f6c9 [ 123.257464][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.277143][ T6686] RSP: 002b:00007f873edb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.285584][ T6686] RAX: ffffffffffffffda RBX: 00007f8740de6180 RCX: 00007f8740b8f6c9 [ 123.293582][ T6686] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 123.301596][ T6686] RBP: 00007f8740c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 123.309592][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.317597][ T6686] R13: 00007f8740de6218 R14: 00007f8740de6180 R15: 00007ffce1dce518 [ 123.325603][ T6686] [ 123.328698][ T6686] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.335998][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.2.182 Tainted: G U syzkaller #0 PREEMPT(full) [ 123.346765][ T6686] Tainted: [U]=USER [ 123.350559][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.360606][ T6686] Call Trace: [ 123.363875][ T6686] [ 123.366811][ T6686] dump_stack_lvl+0x3d/0x1f0 [ 123.371413][ T6686] vpanic+0x640/0x6f0 [ 123.375408][ T6686] ? __ieee80211_suspend+0x105b/0x1310 [ 123.380873][ T6686] panic+0xca/0xd0 [ 123.384601][ T6686] ? __pfx_panic+0x10/0x10 [ 123.389039][ T6686] check_panic_on_warn+0xab/0xb0 [ 123.393991][ T6686] __warn+0xf6/0x3c0 [ 123.397897][ T6686] ? __ieee80211_suspend+0x105b/0x1310 [ 123.403365][ T6686] report_bug+0x3c3/0x580 [ 123.407701][ T6686] ? __ieee80211_suspend+0x105b/0x1310 [ 123.413165][ T6686] handle_bug+0x184/0x210 [ 123.417499][ T6686] exc_invalid_op+0x17/0x50 [ 123.422007][ T6686] asm_exc_invalid_op+0x1a/0x20 [ 123.426860][ T6686] RIP: 0010:__ieee80211_suspend+0x105b/0x1310 [ 123.432938][ T6686] Code: 2e f7 f0 41 80 a4 24 81 01 00 00 fe 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 c4 4c 89 e7 e8 bd b8 2e f7 eb ba e8 76 21 c7 f6 90 <0f> 0b 90 e9 4f f8 ff ff e8 68 21 c7 f6 90 0f 0b 90 e9 30 f6 ff ff [ 123.452548][ T6686] RSP: 0018:ffffc90002fd7c40 EFLAGS: 00010283 [ 123.458616][ T6686] RAX: 0000000000005ed3 RBX: ffff888026888e80 RCX: ffffc9000f33a000 [ 123.466582][ T6686] RDX: 0000000000080000 RSI: ffffffff8af54bda RDI: 0000000000000001 [ 123.474547][ T6686] RBP: ffff88802688ab10 R08: 0000000000000001 R09: 0000000000000000 [ 123.482510][ T6686] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 123.490473][ T6686] R13: ffffed1004d111d9 R14: ffff88802688a910 R15: 0000000000000001 [ 123.498451][ T6686] ? __ieee80211_suspend+0x105a/0x1310 [ 123.503932][ T6686] reset_write+0x7a/0x2a0 [ 123.508279][ T6686] short_proxy_write+0x135/0x1a0 [ 123.513229][ T6686] ? __pfx_short_proxy_write+0x10/0x10 [ 123.518694][ T6686] vfs_write+0x2a0/0x11d0 [ 123.523030][ T6686] ? __pfx___mutex_lock+0x10/0x10 [ 123.528062][ T6686] ? __pfx_vfs_write+0x10/0x10 [ 123.532846][ T6686] ? __fget_files+0x20e/0x3c0 [ 123.537535][ T6686] ksys_write+0x12a/0x250 [ 123.541865][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 123.546728][ T6686] do_syscall_64+0xcd/0xfa0 [ 123.551248][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.557139][ T6686] RIP: 0033:0x7f8740b8f6c9 [ 123.561550][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.581155][ T6686] RSP: 002b:00007f873edb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.589569][ T6686] RAX: ffffffffffffffda RBX: 00007f8740de6180 RCX: 00007f8740b8f6c9 [ 123.597535][ T6686] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 123.605501][ T6686] RBP: 00007f8740c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 123.613468][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.621434][ T6686] R13: 00007f8740de6218 R14: 00007f8740de6180 R15: 00007ffce1dce518 [ 123.629420][ T6686] [ 123.632685][ T6686] Kernel Offset: disabled [ 123.636995][ T6686] Rebooting in 86400 seconds..