last executing test programs: 7.195618412s ago: executing program 0 (id=558): mmap$auto(0x8001, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x5744) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) socket(0x5, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x800000d1f9, 0x0, 0x5, 0xb}, 0xfff}, 0xc, 0x311) mmap$auto(0x4000000, 0x40009, 0x3, 0x9372, 0xffffffffffffffff, 0x28000) ioctl$auto_TUNSETGROUP(0xffffffffffffffff, 0x400454ce, &(0x7f0000000000)=0x8) prctl$auto(0x39, 0x6, 0x0, 0x9, 0x3ee2576e) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) socketpair$auto(0xb6c, 0x5, 0x9, 0x0) open(0x0, 0x22240, 0x155) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xfa44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdba0100"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0xfffffffffffffffc, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x5, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x2a082, 0x0) socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x103281, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.7/usb8/authorized_default\x00', 0x20582, 0x0) 6.515579245s ago: executing program 3 (id=561): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0) socket(0xa, 0x1, 0x84) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0x80045438, 0x0) 6.484922252s ago: executing program 0 (id=562): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000140)) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x1d, 0x2, 0x7) r3 = getsockopt$auto(r2, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0) r4 = prctl$auto_PR_SET_MM_START_CODE(0x80, 0x1, 0xffffffffffffffff, 0x7, 0x410) madvise$auto(0x8, 0x6, 0x8) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/45, 0x2d) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r5, 0x80045519, 0x0) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), r2) sendmsg$auto_IPVS_CMD_SET_DEST(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x804c) read$auto(r1, 0x0, 0x9) 6.40109388s ago: executing program 2 (id=563): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) r0 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)=0x8) waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0xffff, 0x413, 0x0, @_sigsys={0x0, 0x0, 0x3ff}}}, 0x7fff, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) accept4$auto(r1, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, &(0x7f00000000c0)=0x7fffffff, 0x3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xa00, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKPG(r0, 0x1269, 0x0) write$auto(0x1, 0x0, 0x80000000) rseq$auto(&(0x7f0000000180)={0x5, 0xffffff0f, 0x8000000000, 0x6, 0x40, 0xd05, "bfda1245adc923e81b9dd57c484d507c745c53a29d3327bee682a98a47a738123f1455277b6f96e98015f67140568ba32a334bb62d53fbeb4345"}, 0xffffffd1, 0x4, 0x7) madvise$auto_MADV_GUARD_INSTALL(0x0, 0xffffffff9ccb137a, 0x66) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r3, 0x0, 0x400000, 0xc) socket(0xa, 0x1, 0x84) 6.215331891s ago: executing program 3 (id=564): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mlockall$auto(0x7) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x1}, 0x15a) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x200000, 0x2003f0, 0x14) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf2512e233da08000300", @ANYRES32=r3], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2) r4 = socket(0x2, 0x801, 0x106) getsockopt$auto(r4, 0x6, 0x2, 0x0, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r5, 0x0, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) r6 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x210043, 0x0) read$auto_proc_environ_operations_base(r6, 0x0, 0x0) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x6358c0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) semctl$auto_SEM_STAT(0x2, 0x3, 0x12, 0xb63) r8 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r8, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan1/rc_rateidx_mcs_mask_5ghz\x00', 0x46a3c0, 0x0) 5.723803365s ago: executing program 0 (id=566): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) fdatasync$auto(r0) mmap$auto(0x8, 0xfffffffffffffff9, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x7fff) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0xb678b6e7b274944f}, 0x3000c000) execveat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = pipe$auto(0x0) read$auto_transactions_fops_(r2, &(0x7f0000001140)=""/220, 0xdc) write$auto(0x1, 0x0, 0x80000000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mq_notify$auto(0xffffffffffffffff, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x68f}, 0x6, 0xffffffffffffffff, 0x8000000000040, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20048000) clock_gettime$auto(0xb, &(0x7f0000000200)={0x1, 0x1}) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) ioctl$auto_MEMGETINFO(0xffffffffffffffff, 0x80204d01, 0x0) 5.286345629s ago: executing program 1 (id=568): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) sched_setscheduler$auto(0x0, 0x80000001, &(0x7f0000000040)={0x2}) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="1235015049bf97c3e69367a7e995ea5d93d33e4d72943b6c92bef36e1dda40b820", 0x21) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) (async) sched_setscheduler$auto(0x0, 0x80000001, &(0x7f0000000040)={0x2}) (async) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="1235015049bf97c3e69367a7e995ea5d93d33e4d72943b6c92bef36e1dda40b820", 0x21) (async) 5.019995484s ago: executing program 1 (id=569): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/route/flush\x00', 0x80401, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(&(0x7f0000000080)={0x7fffffff, 0x5}, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/net_prio.prioidx\x00', 0x103200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/64, 0x40) (async) write$auto(0x3, 0x0, 0xfdef) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x110) fcntl$auto(r1, 0xb, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000500)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msync$auto(0x100000000, 0x0, 0x3) 4.93272949s ago: executing program 3 (id=570): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x100009a6, 0x7000400) socket(0x11, 0x2, 0x300) (async) socket(0x11, 0x2, 0x300) socket(0x11, 0x3, 0x9) (async) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, 0x0, 0x2, 0x100) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000240)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0), 0xff}, 0x5, 0x0, 0x4) (async) preadv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0), 0xff}, 0x5, 0x0, 0x4) r3 = socket(0x2, 0x1, 0x106) setsockopt$auto(r3, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x4000007) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0xffffffffffffffff, 0x4008550d, 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) (async) r5 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r5, &(0x7f0000000000)=' ', 0x1) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0) (async) settimeofday$auto(&(0x7f0000000180)={0x6ddb8b07, 0x9}, 0x0) write$auto(r4, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) writev$auto(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x10001}, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) 4.727664222s ago: executing program 0 (id=571): r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000080)='\x04\x0e\x0e\xd5\x04\x00d\v\x00\xbb\xee\xa2N\xe9\xe6\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0xc) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x3c, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040), 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4010744d, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x42e01, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x1000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) 4.607917344s ago: executing program 3 (id=572): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80ebd01, 0x0) socket(0xa, 0x1, 0x84) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0x80045438, 0x0) 4.253524805s ago: executing program 3 (id=573): socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) migrate_pages$auto(0x0, 0xa, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x9, 0x0) fsopen$auto(0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010025bd700002dced0300018004000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) pidfd_open$auto(0x0, 0x1) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) readv$auto(r0, 0x0, 0x3) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) 3.976401373s ago: executing program 2 (id=574): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r2 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_prog_fd=r2, 0x7fff, @old_prog_fd=0x13b}, 0xa3) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101005, 0x0) mmap$auto(0x0, 0x9, 0xb, 0x8000008b71, 0xffffffffffffffff, 0x8000) futex$auto(0x0, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x7, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x7, 0x0, [{0x561, 0x1, 0x7}]}) 3.904399502s ago: executing program 1 (id=575): open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_gettime$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, &(0x7f0000000040)=0x6) (async) r1 = ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, &(0x7f0000000040)=0x6) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000080)=""/211, 0xd3) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x7, 0xb, 0x3ff) madvise$auto(0xbfc, 0x5, 0x6) getsockopt$auto(r2, 0x200000000001, 0x3b, 0x0, 0x0) (async) getsockopt$auto(r2, 0x200000000001, 0x3b, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) 2.657500063s ago: executing program 2 (id=576): socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_UNLOCK(0xfffffffc, 0xc, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) socket(0x8, 0x80000, 0xe) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f00000005c0)={0x8, 0x3ff, 0x8, 0xd77, 0x800, 0x7181, 0x81, 0x7, 0x3, 0x109a89, 0x5, 0x80005, 0x800, 0x1fffffffffff, 0xb4, 0x3, 0x2, 0x10007, 0x80, 0xfffffffffffffffc, 0x0, 0xa, 0x22004, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, [0x0, 0x0, 0xea4, 0x9cf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000000, 0x40000000000, 0xbcc1, 0x4, 0x5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcc, 0x4000000002, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x100000000, 0x0, 0x0, 0x80000, 0x0, 0x100000000]}, 0x1fe, 0xe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb3, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "0037ff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) bpf$auto(0x1a, &(0x7f0000000500)=@link_create={@prog_fd=r1, @target_fd=r0, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 2.537893329s ago: executing program 1 (id=577): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x6, 0x0, 0x0, 0x9}}, 0x3, 0x0) sysfs$auto(0x2, 0x4d, 0x7fffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0xffffffffffffffff, 0x0, 0x8, 0xd, 0x0, 0x1c) map_shadow_stack$auto(0x40, 0xebfd, 0x1ff) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={"ef65ce6cc80c0000000000ff291d0000000107000b000002ffffffffec00", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) 2.001211932s ago: executing program 3 (id=578): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) unshare$auto(0x40000080) write$auto(r0, &(0x7f0000000000)='\x04\x02\x9c%\xb6\x9a\\S\xa2(Q\xcc\x00\xfa\x00'/25, 0x7) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10, 0x3e, 0x0, 0x9) socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x0, 0x8) socket(0x18, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x21, 0x3, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(0x0, &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x100880, 0x1c5) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xe2a7214) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x8042, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) mount_setattr$auto(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1, &(0x7f0000000340)={0x1, 0x9, 0x3, @raw=0x8c71}, 0x6) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='n', 0x1) ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000080)={0xfffffffc, "e91a1ae2", 0x3, 0xffffffffffffffff, 0x5, 0xfffffffe, 0x6, 0xfffffffffffffffa, 0x1, 0x6cca, 0x7fff, 0x5, 0x7, 0x1, 0x1, 0x80000001, 0x1, 0x8, 0x400, "cec3ec4c01d0132df17dbe7378730314ad618988"}) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) 1.942810054s ago: executing program 2 (id=579): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r0, &(0x7f00000000c0)='.', 0x1) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0p\x00', 0xa0002, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000180)={0x0, '\x00', 0x8, 0x3, 0x7fff, 0x7, 0x0, 0x8000000000000000, 0x0, 0x9, 0x9, 0x2, 0x0, 0x11, 0x0, 0x7, 0x5, 0x4, 0x5, "0fb085bb3608adc13bbc38f14abce3be7f0f9ef4"}) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socketpair$auto(0x1e, 0x7, 0x8000000000000000, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socket(0x10, 0x2, 0x0) socket(0x2a, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) setfsuid$auto(0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) quotactl_fd$auto(r3, 0x6, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) 1.64986169s ago: executing program 2 (id=580): mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1d, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x1d, 0x3, 0x1) read$auto(r0, &(0x7f0000000000)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x2f) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x800) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x8a241, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x5}, 0xa) 1.544538993s ago: executing program 0 (id=581): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x406801, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x406801, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x44) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x44) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) (async) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0x2, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r2, 0x0, 0x3, 0xe9) (async) pread64$auto(r2, 0x0, 0x3, 0xe9) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x400000000000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x14, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x14, 0x401, 0x300000000000) sysfs$auto(0x2, 0x24, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) write$auto(r3, 0x0, 0x3) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) (async) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r0, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) socketpair$auto(0x6, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0x2, 0x3, 0xa) (async) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) 794.811851ms ago: executing program 1 (id=582): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x9, 0xaa3, 0x9b72, 0xffffffffffffffff, 0x8040) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x1, 0x2, 0xe2, 0x13, 0x405, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x4c810) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r1 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000000)=0x1) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000000140)={0x14, r3, 0x8574a35e838157a1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008801}, 0x14) sendmsg$auto_IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r3, 0x107, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}}, 0x24000000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nvme_core/parameters/max_retries\x00', 0x101342, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) sendfile$auto(r4, 0x3, 0x0, 0xc01) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0xffffffffffffffff, 0x3) bind$auto(0x3, 0x0, 0x6a) mbind$auto(0x1, 0x1, 0x4, 0x0, 0x1, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/ext4/sda1/sra_exceeded_retry_limit\x00', 0x103080, 0x0) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x5) ioctl$auto(r6, 0x4008af13, r0) r7 = socket(0xa, 0x1, 0x84) getsockopt$auto(r7, 0x84, 0x11, 0x0, &(0x7f0000000040)=0x28000000) 609.986838ms ago: executing program 2 (id=583): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x1a, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0xb9, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r1, 0x1, 0x21, 0x0, 0x9) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) read$auto(0x3, 0x0, 0x7ffffffff000) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x9, 0x7, 0xc, 0x1, 0x948b, 0x8, 0x15f4da0a, 0x81, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0x7ffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS2={0x3d, 0x43, "93cdd123969780c92c3683b777ee6a8085876c4e6a2bc33a9c242f92d399e00472613cf52b3263f9417b058817f95fccf4f1d796b83716e817"}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0xffffffffffffffff, 0x8000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="cb5b"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) ioctl$auto(r4, 0xab03, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) 49.841079ms ago: executing program 1 (id=584): mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r0 = prctl$auto_PR_SYS_DISPATCH_OFF(0x1, 0x0, 0xffffffffffffffff, 0x8000000000000001, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000900), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'virt_wifi0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000a80)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_OFFLOAD={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x40840) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf03, 0x5, 0x6, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) socketpair$auto(0x5b, 0x4, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) r5 = getsid$auto(0x0) r6 = getpgrp(0x0) r7 = setfsuid$auto(0xee00) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000bc0)=""/168, 0xa8) setreuid$auto(r7, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000100)={{0x2, 0xee00, 0xee01, 0x2, 0x8, 0xfffffff9, 0x7}, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x3, 0xa, 0x723, 0x3, 0x9, 0x5, 0x10, 0x2, 0x1ff, @inferred, @inferred=0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000012c0)=ANY=[@ANYBLOB="10060000", @ANYRES16=r2, @ANYBLOB="08002cbd7000ffdbdf25040000007302028002012e80040002800400bc80080032000050000061a9142821e6b6b9373b8a59e07807be4df032f9842ede58301042e9315d078689100dcd199970e43ed3f53986afb8ad2408ae53eb8d9da69528afb191fd03f4e804d8b0fb505f3687f70fc23b5305318c04b158ec0de4cae2a0ea2bb5445d037af5a47191bc5567af16790c47e41f372a0bb72ba58214acde551672bfc157e38e49ce251134821cfa085fc7cd33c8be325b76dbb77fd735f6bc22c4a1e57de5fd0954403f54b1a5832c793a77bea0ed9f03f9729eef852fecea91aceaf7dba057acbbcf9a066ccc85dd43c6d404ab8738eb979eb41f9334656fb8331f021e80de085e3798d7ace476af3d797bb500006b00530035670b2d4f2f3d115a0c3b1dd553cab57357f9643a886807b333a6bb0f845b205af5599c6e358d7eaa48e75787ca3d09fb65d4ca61ef51fbdf01fe7c8fc27328497421696bf5558d4a49f9c3c7703bc464c88947079e577a794db77a1889677a4e40c88efb432800d7214e5294dfd04b96f82f5b806d1d759199e869d0a8036a42998000ea696bbe77b08958def77242322f5a648d0cad24a017d7bfba0f618d1468e2881c5f3abe478f27026c792334e663255ecf2aaa759dddebc9eb2a016f2c1e3e69dc48569117a85f49ca7b6e336c6840e1a386d4388d0c000d00040000000000000008009d00", @ANYRES32=r5, @ANYBLOB="6ca2687ebf0df9510b9bd549078381059b3d96ba26ab34ee6fbc711f2658feaa6cbc79219d7500bf8317900aec73152e8a073209c8736eef3ca7cd968bf8bfa66c65540cf72a3baac73b8981999047b5e0124445fe1b0927e4532a325c30c03e313384f204726ae0810c8eb8c1f4c857a6bc08005800", @ANYRES32=r6, @ANYBLOB="002c01028008004100", @ANYRES32=r7, @ANYBLOB="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"/318, @ANYRESDEC=r10, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x610}}, 0x20000000) shmctl$auto_SHM_LOCK(0xac40, 0xb, &(0x7f0000000b40)={{0x9, r8, r9, 0x1, 0x6, 0xefbe, 0xb6f}, 0x6, 0x3, 0x8, 0x1b, @raw=0x3, @inferred=r5, 0xb9b2, 0x0, &(0x7f00000009c0)="33bac72f34802a541b4032f4d6512f069a17152cc8d9bfee68163684a6217f4360a2fc90e527b5b4e81574d001061fae127481f77b944be0c72f2b0675a4cd5ab53d6a30e1476ecf90508ba5a490988b9e79b29ee5c8d3b59437d1d8046545732b0c73c8948097a60f093884893f3b352f337812027fb438fdbcdfbe169720422117ce6890483282a54bbbfeb0bc827da9fe5f5dea8f", &(0x7f0000000ac0)="2a9718b0cee7f83cf9eca7656e6512816dd972a0440b3abf9b1beedc013a8bb4816656210421c00ae656aae40d74837091df5296ccad6ab49f25c46e01a0b43e4b325363ccb0e19b207fe541b714a0174d1ed11995241ec1d48a"}) unshare$auto(0x40000080) 0s ago: executing program 0 (id=585): io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x2, 0x8, 0xffffffffffffffff, [0x10001, 0x8, 0x8000a], {0x8, 0x8, 0x3fc000, 0x4, 0xffffff7a, 0x3, 0x9, 0x9, 0xffff}, {0xd5, 0x3dc, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/tls_stat\x00', 0x40000, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/net/stat/rt_cache\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/266, 0x10a) mmap$auto(0x5, 0x2020009, 0xb, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setregid$auto(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. [ 78.364968][ T5612] cgroup: Unknown subsys name 'net' [ 78.492756][ T5612] cgroup: Unknown subsys name 'cpuset' [ 78.501756][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.971964][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.695321][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.705961][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.715881][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.725487][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.735109][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.755351][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.765612][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.773396][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.788679][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.800743][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.904078][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.918460][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.928828][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.938027][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.946104][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.035079][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.043941][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.053057][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.065158][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.072975][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.578539][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.585860][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.593399][ T5625] bridge_slave_0: entered allmulticast mode [ 83.600836][ T5625] bridge_slave_0: entered promiscuous mode [ 83.635901][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.643616][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.651021][ T5625] bridge_slave_1: entered allmulticast mode [ 83.658163][ T5625] bridge_slave_1: entered promiscuous mode [ 83.670525][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.677708][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.684954][ T5628] bridge_slave_0: entered allmulticast mode [ 83.692045][ T5628] bridge_slave_0: entered promiscuous mode [ 83.733288][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.740584][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.747767][ T5628] bridge_slave_1: entered allmulticast mode [ 83.755061][ T5628] bridge_slave_1: entered promiscuous mode [ 83.818430][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.827856][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.835666][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.840300][ T5626] Bluetooth: hci1: command tx timeout [ 83.843806][ T51] Bluetooth: hci0: command tx timeout [ 83.850299][ T5639] bridge_slave_0: entered allmulticast mode [ 83.862848][ T5639] bridge_slave_0: entered promiscuous mode [ 83.873402][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.894592][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.904408][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.911818][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.919723][ T5639] bridge_slave_1: entered allmulticast mode [ 83.927085][ T5639] bridge_slave_1: entered promiscuous mode [ 83.936580][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.996185][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.000948][ T51] Bluetooth: hci2: command tx timeout [ 84.003696][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.003860][ T5633] bridge_slave_0: entered allmulticast mode [ 84.005714][ T5633] bridge_slave_0: entered promiscuous mode [ 84.030208][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.037865][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.045356][ T5633] bridge_slave_1: entered allmulticast mode [ 84.052408][ T5633] bridge_slave_1: entered promiscuous mode [ 84.074345][ T5625] team0: Port device team_slave_0 added [ 84.115748][ T5625] team0: Port device team_slave_1 added [ 84.140099][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.151358][ T5628] team0: Port device team_slave_0 added [ 84.159670][ T51] Bluetooth: hci3: command tx timeout [ 84.160016][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.185879][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.198213][ T5628] team0: Port device team_slave_1 added [ 84.211154][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.221334][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.228302][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.254362][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.295401][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.302602][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.328592][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.379006][ T5633] team0: Port device team_slave_0 added [ 84.388134][ T5633] team0: Port device team_slave_1 added [ 84.395879][ T5639] team0: Port device team_slave_0 added [ 84.403167][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.410371][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.436317][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.448587][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.455656][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.481668][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.504596][ T5639] team0: Port device team_slave_1 added [ 84.556353][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.563439][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.589381][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.617209][ T5625] hsr_slave_0: entered promiscuous mode [ 84.623782][ T5625] hsr_slave_1: entered promiscuous mode [ 84.633789][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.641365][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.667291][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.678809][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.685956][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.712003][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.749788][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.756783][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.782871][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.809687][ T5628] hsr_slave_0: entered promiscuous mode [ 84.816456][ T5628] hsr_slave_1: entered promiscuous mode [ 84.822723][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 84.828518][ T5628] Cannot create hsr debugfs directory [ 84.932312][ T5633] hsr_slave_0: entered promiscuous mode [ 84.938654][ T5633] hsr_slave_1: entered promiscuous mode [ 84.945133][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 84.950897][ T5633] Cannot create hsr debugfs directory [ 85.002515][ T5639] hsr_slave_0: entered promiscuous mode [ 85.008782][ T5639] hsr_slave_1: entered promiscuous mode [ 85.015089][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 85.020856][ T5639] Cannot create hsr debugfs directory [ 85.393231][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.412140][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.420409][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.430816][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.438811][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.452918][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.461050][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.471541][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.556582][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.566580][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.575910][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.585528][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.593715][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.606035][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.615385][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.626401][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.712353][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.723699][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.738982][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.751105][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.764920][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.775249][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.802404][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.815780][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.901499][ T5639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.913429][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.920080][ T51] Bluetooth: hci1: command tx timeout [ 85.923024][ T5639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.925894][ T5626] Bluetooth: hci0: command tx timeout [ 85.943320][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.951979][ T5639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.962520][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.975067][ T5639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.985349][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.019536][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.075825][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.082479][ T5626] Bluetooth: hci2: command tx timeout [ 86.114193][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.121813][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.133110][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.140366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.172745][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.228617][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.239705][ T5626] Bluetooth: hci3: command tx timeout [ 86.272663][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.279833][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.295226][ T184] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.302449][ T184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.366124][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.407755][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.465393][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.487666][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.513182][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.520398][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.550859][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.558066][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.575621][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.582847][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.617752][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.624984][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.910629][ T1227] cfg80211: failed to load regulatory.db [ 87.288096][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.459043][ T5625] veth0_vlan: entered promiscuous mode [ 87.512707][ T5625] veth1_vlan: entered promiscuous mode [ 87.564502][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.666843][ T5625] veth0_macvtap: entered promiscuous mode [ 87.698807][ T5625] veth1_macvtap: entered promiscuous mode [ 87.757146][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.772695][ T5628] veth0_vlan: entered promiscuous mode [ 87.799945][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.816058][ T5628] veth1_vlan: entered promiscuous mode [ 87.831459][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.843476][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.878626][ T184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.888947][ T184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.907665][ T184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.916829][ T184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.000008][ T5626] Bluetooth: hci1: command tx timeout [ 88.000744][ T51] Bluetooth: hci0: command tx timeout [ 88.056046][ T5628] veth0_macvtap: entered promiscuous mode [ 88.083476][ T5639] veth0_vlan: entered promiscuous mode [ 88.091369][ T5633] veth0_vlan: entered promiscuous mode [ 88.103183][ T5628] veth1_macvtap: entered promiscuous mode [ 88.118095][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.134691][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.147899][ T5639] veth1_vlan: entered promiscuous mode [ 88.160201][ T51] Bluetooth: hci2: command tx timeout [ 88.160491][ T5633] veth1_vlan: entered promiscuous mode [ 88.211385][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.220929][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.223569][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.234459][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.277824][ T3335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.288019][ T3335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.297803][ T3335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.318263][ T3335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.327197][ T51] Bluetooth: hci3: command tx timeout [ 88.369055][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.395842][ T5639] veth0_macvtap: entered promiscuous mode [ 88.410558][ T5639] veth1_macvtap: entered promiscuous mode [ 88.423552][ T5633] veth0_macvtap: entered promiscuous mode [ 88.469985][ T5633] veth1_macvtap: entered promiscuous mode [ 88.566439][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.574252][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.584021][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.594455][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.626262][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.658654][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.688757][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.700291][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.707701][ T3335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.717923][ T3335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.762226][ T3335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.776947][ T3335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.814416][ T3335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.832344][ T3335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.882177][ T3335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.924836][ T3335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.056374][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.066957][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.120419][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.145362][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.203418][ T5782] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 89.213503][ T3335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.230561][ T3335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.316016][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.335230][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.668400][ T5793] ecryptfs_miscdev_write: Error while inspecting packet size [ 90.080954][ T51] Bluetooth: hci0: command tx timeout [ 90.083896][ T5626] Bluetooth: hci1: command tx timeout [ 90.226885][ T5807] vivid-003: ================= START STATUS ================= [ 90.236052][ T5807] vivid-003: Radio HW Seek Mode: Bounded [ 90.242253][ T5626] Bluetooth: hci2: command tx timeout [ 90.245243][ T5807] vivid-003: Radio Programmable HW Seek: false [ 90.269261][ T5807] vivid-003: RDS Rx I/O Mode: Block I/O [ 90.279686][ T5807] vivid-003: Generate RBDS Instead of RDS: false [ 90.331428][ T5807] vivid-003: RDS Reception: true [ 90.378516][ T5807] vivid-003: RDS Program Type: 0 inactive [ 90.392879][ T5807] vivid-003: RDS PS Name: inactive [ 90.400550][ T5804] FAULT_INJECTION: forcing a failure. [ 90.400550][ T5804] name failslab, interval 1, probability 0, space 0, times 1 [ 90.401231][ T5626] Bluetooth: hci3: command tx timeout [ 90.422493][ T5807] vivid-003: RDS Radio Text: inactive [ 90.441479][ T5807] vivid-003: RDS Traffic Announcement: false inactive [ 90.450296][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: syz.3.8 Not tainted syzkaller #0 PREEMPT(full) [ 90.450336][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.450360][ T5804] Call Trace: [ 90.450368][ T5804] [ 90.450386][ T5804] dump_stack_lvl+0x100/0x190 [ 90.450433][ T5804] should_fail_ex.cold+0x5/0xa [ 90.450468][ T5804] should_failslab+0xc2/0x120 [ 90.450505][ T5804] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 90.450550][ T5804] ? sock_alloc_inode+0x26/0x290 [ 90.450588][ T5804] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.450623][ T5804] sock_alloc_inode+0x26/0x290 [ 90.450657][ T5804] ? __pfx_sock_alloc_inode+0x10/0x10 [ 90.450697][ T5804] alloc_inode+0x68/0x250 [ 90.450733][ T5804] sock_alloc+0x44/0x280 [ 90.450760][ T5804] ? security_socket_create+0x7f/0x250 [ 90.450804][ T5804] __sock_create+0xc2/0x860 [ 90.450848][ T5804] __sys_socket+0x14d/0x260 [ 90.450886][ T5804] ? __pfx___sys_socket+0x10/0x10 [ 90.450935][ T5804] __x64_sys_socket+0x72/0xb0 [ 90.450972][ T5804] ? lockdep_hardirqs_on+0x78/0x100 [ 90.451008][ T5804] do_syscall_64+0x10b/0xf80 [ 90.451041][ T5804] ? clear_bhb_loop+0x40/0x90 [ 90.451076][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.451105][ T5804] RIP: 0033:0x7fa31439cdd9 [ 90.451128][ T5804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.451154][ T5804] RSP: 002b:00007fa3121f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 90.451186][ T5804] RAX: ffffffffffffffda RBX: 00007fa314616270 RCX: 00007fa31439cdd9 [ 90.451203][ T5804] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 90.451219][ T5804] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000000 [ 90.451236][ T5804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.451250][ T5804] R13: 00007fa314616308 R14: 00007fa314616270 R15: 00007ffc0b306948 [ 90.451284][ T5804] [ 90.451444][ T5804] socket: no more sockets [ 90.499615][ T5807] vivid-003: RDS Traffic Program: [ 90.654874][ T5812] netlink: 342 bytes leftover after parsing attributes in process `syz.1.12'. [ 90.660894][ T5807] false inactive [ 90.676513][ T5807] vivid-003: RDS Music: false inactive [ 90.682063][ T5807] vivid-003: ================== END STATUS ================== [ 90.898744][ T5812] Zero length message leads to an empty skb [ 91.159169][ T30] audit: type=1806 audit(1778045227.441:2): xattr="." res=0 [ 93.513486][ T5844] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 93.908920][ T5852] futex_wake_op: syz.1.20 tries to shift op by -1; fix this program [ 93.976307][ T5863] FAULT_INJECTION: forcing a failure. [ 93.976307][ T5863] name failslab, interval 1, probability 0, space 0, times 0 [ 94.030801][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 94.030838][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.030853][ T5863] Call Trace: [ 94.030863][ T5863] [ 94.030874][ T5863] dump_stack_lvl+0x100/0x190 [ 94.030911][ T5863] should_fail_ex.cold+0x5/0xa [ 94.030949][ T5863] ? __register_sysctl_table+0xac/0x1650 [ 94.030996][ T5863] should_failslab+0xc2/0x120 [ 94.031030][ T5863] __kmalloc_noprof+0xe0/0x850 [ 94.031079][ T5863] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 94.031117][ T5863] __register_sysctl_table+0xac/0x1650 [ 94.031154][ T5863] ? is_module_address+0x5f/0xf0 [ 94.031189][ T5863] ? __pfx___register_sysctl_table+0x10/0x10 [ 94.031225][ T5863] ? is_module_address+0x69/0xf0 [ 94.031250][ T5863] ? register_net_sysctl_sz+0x222/0x430 [ 94.031292][ T5863] ? __asan_memcpy+0x3c/0x60 [ 94.031338][ T5863] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 94.031374][ T5863] nf_lwtunnel_net_init+0x60/0xf0 [ 94.031409][ T5863] ops_init+0x1e2/0x5f0 [ 94.031445][ T5863] setup_net+0x118/0x3a0 [ 94.031477][ T5863] ? __pfx_setup_net+0x10/0x10 [ 94.031507][ T5863] ? mutex_init_lockdep+0xf1/0x120 [ 94.031544][ T5863] copy_net_ns+0x46f/0x7c0 [ 94.031581][ T5863] create_new_namespaces+0x3ea/0xac0 [ 94.031626][ T5863] unshare_nsproxy_namespaces+0xf2/0x220 [ 94.031666][ T5863] ksys_unshare+0x438/0xab0 [ 94.031707][ T5863] ? __pfx_ksys_unshare+0x10/0x10 [ 94.031742][ T5863] ? xfd_validate_state+0x129/0x190 [ 94.031780][ T5863] __x64_sys_unshare+0x31/0x40 [ 94.031817][ T5863] do_syscall_64+0x10b/0xf80 [ 94.031847][ T5863] ? clear_bhb_loop+0x40/0x90 [ 94.031879][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.031902][ T5863] RIP: 0033:0x7fa31439cdd9 [ 94.031920][ T5863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.031947][ T5863] RSP: 002b:00007fa3151c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.031971][ T5863] RAX: ffffffffffffffda RBX: 00007fa314615fa0 RCX: 00007fa31439cdd9 [ 94.031997][ T5863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 94.032012][ T5863] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000000 [ 94.032027][ T5863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.032043][ T5863] R13: 00007fa314616038 R14: 00007fa314615fa0 R15: 00007ffc0b306948 [ 94.032078][ T5863] [ 95.000877][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'. [ 95.236683][ T30] audit: type=1804 audit(1778045231.521:3): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.24" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1063 res=1 errno=0 [ 96.355964][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.873744][ T5910] random: crng reseeded on system resumption [ 97.534734][ T5920] FAULT_INJECTION: forcing a failure. [ 97.534734][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 97.595154][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.1.33 Not tainted syzkaller #0 PREEMPT(full) [ 97.595186][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.595200][ T5920] Call Trace: [ 97.595208][ T5920] [ 97.595216][ T5920] dump_stack_lvl+0x100/0x190 [ 97.595249][ T5920] should_fail_ex.cold+0x5/0xa [ 97.595280][ T5920] should_failslab+0xc2/0x120 [ 97.595308][ T5920] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 97.595344][ T5920] ? alloc_empty_file+0x5b/0x1c0 [ 97.595380][ T5920] ? __pfx_stack_trace_save+0x10/0x10 [ 97.595418][ T5920] alloc_empty_file+0x5b/0x1c0 [ 97.595453][ T5920] path_openat+0xe8/0x31a0 [ 97.595482][ T5920] ? kasan_save_stack+0x3f/0x50 [ 97.595503][ T5920] ? kasan_save_stack+0x30/0x50 [ 97.595524][ T5920] ? kasan_save_track+0x14/0x30 [ 97.595547][ T5920] ? __kasan_slab_alloc+0x89/0x90 [ 97.595570][ T5920] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 97.595604][ T5920] ? do_getname+0x35/0x390 [ 97.595636][ T5920] ? do_sys_openat2+0xc5/0x1e0 [ 97.595672][ T5920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.595703][ T5920] ? __pfx_path_openat+0x10/0x10 [ 97.595745][ T5920] do_file_open+0x20e/0x430 [ 97.595778][ T5920] ? __pfx_do_file_open+0x10/0x10 [ 97.595831][ T5920] ? alloc_fd+0x476/0x790 [ 97.595862][ T5920] ? do_getname+0x191/0x390 [ 97.595898][ T5920] do_sys_openat2+0x10d/0x1e0 [ 97.595934][ T5920] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.595984][ T5920] __x64_sys_openat+0x12d/0x210 [ 97.596031][ T5920] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.596080][ T5920] ? rcu_is_watching+0x12/0xc0 [ 97.596115][ T5920] do_syscall_64+0x10b/0xf80 [ 97.596146][ T5920] ? clear_bhb_loop+0x40/0x90 [ 97.596177][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.596203][ T5920] RIP: 0033:0x7fdc9259cdd9 [ 97.596224][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.596247][ T5920] RSP: 002b:00007fdc934b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.596270][ T5920] RAX: ffffffffffffffda RBX: 00007fdc92816090 RCX: 00007fdc9259cdd9 [ 97.596287][ T5920] RDX: 000000000014f602 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 97.596303][ T5920] RBP: 00007fdc92632d69 R08: 0000000000000000 R09: 0000000000000000 [ 97.596318][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.596333][ T5920] R13: 00007fdc92816128 R14: 00007fdc92816090 R15: 00007ffd7a14b6c8 [ 97.596368][ T5920] [ 98.344372][ T5934] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.357047][ T30] audit: type=1800 audit(1778045235.641:4): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.37" name="file0" dev="tmpfs" ino=70 res=0 errno=0 [ 99.567463][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 104.901083][ T6046] blktrace: Concurrent blktraces are not allowed on loop2 [ 105.078279][ T6035] FAULT_INJECTION: forcing a failure. [ 105.078279][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 105.201490][ T30] audit: type=1800 audit(1778045241.491:5): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.55" name="file0" dev="tmpfs" ino=80 res=0 errno=0 [ 105.210996][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.3.56 Not tainted syzkaller #0 PREEMPT(full) [ 105.211040][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.211056][ T6035] Call Trace: [ 105.211066][ T6035] [ 105.211076][ T6035] dump_stack_lvl+0x100/0x190 [ 105.211118][ T6035] should_fail_ex.cold+0x5/0xa [ 105.211153][ T6035] should_failslab+0xc2/0x120 [ 105.211186][ T6035] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 105.211227][ T6035] ? sk_prot_alloc+0x60/0x2a0 [ 105.211267][ T6035] sk_prot_alloc+0x60/0x2a0 [ 105.211303][ T6035] sk_alloc+0x36/0xe80 [ 105.211330][ T6035] inet_create+0x3a0/0x1060 [ 105.211371][ T6035] ? inet_create+0x94/0x1060 [ 105.211415][ T6035] __sock_create+0x339/0x860 [ 105.211456][ T6035] __sys_socket+0x14d/0x260 [ 105.211500][ T6035] ? __pfx___sys_socket+0x10/0x10 [ 105.211534][ T6035] ? ksys_write+0x1ac/0x250 [ 105.211575][ T6035] __x64_sys_socket+0x72/0xb0 [ 105.211611][ T6035] ? lockdep_hardirqs_on+0x78/0x100 [ 105.211645][ T6035] do_syscall_64+0x10b/0xf80 [ 105.211678][ T6035] ? clear_bhb_loop+0x40/0x90 [ 105.211710][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.211737][ T6035] RIP: 0033:0x7fa31439cdd9 [ 105.211759][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.211785][ T6035] RSP: 002b:00007fa3151a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 105.211810][ T6035] RAX: ffffffffffffffda RBX: 00007fa314616090 RCX: 00007fa31439cdd9 [ 105.211829][ T6035] RDX: 0000000000000073 RSI: 0000000000080002 RDI: 0000000000000002 [ 105.211845][ T6035] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000000 [ 105.211862][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.211877][ T6035] R13: 00007fa314616128 R14: 00007fa314616090 R15: 00007ffc0b306948 [ 105.211913][ T6035] [ 108.028116][ T6082] FAULT_INJECTION: forcing a failure. [ 108.028116][ T6082] name failslab, interval 1, probability 0, space 0, times 0 [ 108.060682][ T6082] CPU: 1 UID: 0 PID: 6082 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) [ 108.060723][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.060746][ T6082] Call Trace: [ 108.060755][ T6082] [ 108.060766][ T6082] dump_stack_lvl+0x100/0x190 [ 108.060809][ T6082] should_fail_ex.cold+0x5/0xa [ 108.060846][ T6082] should_failslab+0xc2/0x120 [ 108.060880][ T6082] __kmalloc_cache_noprof+0x7a/0x6f0 [ 108.060917][ T6082] ? tipc_sub_subscribe+0x15c/0x730 [ 108.060960][ T6082] ? find_held_lock+0x2b/0x80 [ 108.061003][ T6082] tipc_sub_subscribe+0x15c/0x730 [ 108.061046][ T6082] tipc_conn_rcv_sub+0x21e/0x3d0 [ 108.061084][ T6082] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 108.061122][ T6082] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 108.061160][ T6082] ? net_generic+0xea/0x2a0 [ 108.061202][ T6082] tipc_group_create+0x4ab/0x660 [ 108.061243][ T6082] tipc_setsockopt+0x611/0xe30 [ 108.061285][ T6082] ? __pfx_tipc_setsockopt+0x10/0x10 [ 108.061344][ T6082] ? __pfx_tipc_setsockopt+0x10/0x10 [ 108.061388][ T6082] do_sock_setsockopt+0xf3/0x1d0 [ 108.061429][ T6082] __sys_setsockopt+0x119/0x190 [ 108.061464][ T6082] __x64_sys_setsockopt+0xbd/0x160 [ 108.061498][ T6082] ? do_syscall_64+0x90/0xf80 [ 108.061534][ T6082] ? lockdep_hardirqs_on+0x78/0x100 [ 108.061570][ T6082] do_syscall_64+0x10b/0xf80 [ 108.061605][ T6082] ? clear_bhb_loop+0x40/0x90 [ 108.061639][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.061668][ T6082] RIP: 0033:0x7f005619cdd9 [ 108.061691][ T6082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.061718][ T6082] RSP: 002b:00007f005709d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.061751][ T6082] RAX: ffffffffffffffda RBX: 00007f0056415fa0 RCX: 00007f005619cdd9 [ 108.061769][ T6082] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 108.061785][ T6082] RBP: 00007f0056232d69 R08: 0000000000000014 R09: 0000000000000000 [ 108.061801][ T6082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.061817][ T6082] R13: 00007f0056416038 R14: 00007f0056415fa0 R15: 00007fff40cfc978 [ 108.061854][ T6082] [ 108.067876][ T6082] tipc: Subscription rejected, no memory [ 109.037453][ T6103] blktrace: Concurrent blktraces are not allowed on loop2 [ 110.532940][ T6109] syz.3.70 (6109) used greatest stack depth: 19720 bytes left [ 111.340969][ T6121] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.565570][ T30] audit: type=1800 audit(1778045247.851:6): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.71" name="file0" dev="tmpfs" ino=112 res=0 errno=0 [ 112.005393][ T6136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.047575][ T6136] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.171381][ T6136] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.212952][ T6136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.239950][ T6136] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.278638][ T6136] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.333578][ T6136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.339858][ T6136] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.403956][ T6136] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.441304][ T6136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.452082][ T6136] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.518394][ T6131] mmap: syz.2.75 (6131) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.535305][ T6136] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.872225][ T6151] FAULT_INJECTION: forcing a failure. [ 112.872225][ T6151] name failslab, interval 1, probability 0, space 0, times 0 [ 112.903395][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.0.78 Not tainted syzkaller #0 PREEMPT(full) [ 112.903434][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.903451][ T6151] Call Trace: [ 112.903460][ T6151] [ 112.903470][ T6151] dump_stack_lvl+0x100/0x190 [ 112.903507][ T6151] should_fail_ex.cold+0x5/0xa [ 112.903543][ T6151] should_failslab+0xc2/0x120 [ 112.903575][ T6151] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 112.903613][ T6151] ? __pmd_alloc+0xbf/0x950 [ 112.903662][ T6151] __pmd_alloc+0xbf/0x950 [ 112.903701][ T6151] __handle_mm_fault+0xa9c/0x2a00 [ 112.903750][ T6151] ? mt_find+0x45e/0x8e0 [ 112.903792][ T6151] ? __pfx___handle_mm_fault+0x10/0x10 [ 112.903830][ T6151] ? __pfx_mt_find+0x10/0x10 [ 112.903898][ T6151] handle_mm_fault+0x36d/0xa20 [ 112.903948][ T6151] __get_user_pages+0x1178/0x32a0 [ 112.903998][ T6151] ? __pfx___get_user_pages+0x10/0x10 [ 112.904045][ T6151] populate_vma_page_range+0x267/0x3f0 [ 112.904083][ T6151] ? __pfx_populate_vma_page_range+0x10/0x10 [ 112.904118][ T6151] ? __pfx_find_vma_intersection+0x10/0x10 [ 112.904153][ T6151] ? do_mmap+0x93f/0x12f0 [ 112.904193][ T6151] __mm_populate+0x107/0x3a0 [ 112.904230][ T6151] ? __pfx___mm_populate+0x10/0x10 [ 112.904269][ T6151] ? up_write+0x28c/0x4f0 [ 112.904304][ T6151] vm_mmap_pgoff+0x37f/0x470 [ 112.904343][ T6151] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 112.904380][ T6151] ? do_futex+0x192/0x350 [ 112.904411][ T6151] ? __pfx_do_futex+0x10/0x10 [ 112.904448][ T6151] ksys_mmap_pgoff+0xe4/0x610 [ 112.904482][ T6151] ? __x64_sys_futex+0x358/0x4d0 [ 112.904513][ T6151] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 112.904546][ T6151] ? xfd_validate_state+0x129/0x190 [ 112.904574][ T6151] ? ksys_write+0x1ac/0x250 [ 112.904613][ T6151] __x64_sys_mmap+0x125/0x190 [ 112.904658][ T6151] do_syscall_64+0x10b/0xf80 [ 112.904695][ T6151] ? clear_bhb_loop+0x40/0x90 [ 112.904730][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.904759][ T6151] RIP: 0033:0x7f075019cdd9 [ 112.904783][ T6151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.904811][ T6151] RSP: 002b:00007f0750fa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 112.904838][ T6151] RAX: ffffffffffffffda RBX: 00007f0750416090 RCX: 00007f075019cdd9 [ 112.904857][ T6151] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 112.904872][ T6151] RBP: 00007f0750232d69 R08: 0000000000000007 R09: 0000000000028000 [ 112.904889][ T6151] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 112.904906][ T6151] R13: 00007f0750416128 R14: 00007f0750416090 R15: 00007ffe8bf93bf8 [ 112.904944][ T6151] [ 113.902129][ T6169] blktrace: Concurrent blktraces are not allowed on loop2 [ 114.001186][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.239662][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.401681][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.480215][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.148895][ T30] audit: type=1800 audit(1778045251.431:7): pid=6187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.86" name="file0" dev="tmpfs" ino=146 res=0 errno=0 [ 115.834428][ T30] audit: type=1800 audit(1778045252.121:8): pid=6205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.89" name="file0" dev="tmpfs" ino=117 res=0 errno=0 [ 116.063182][ T6214] FAULT_INJECTION: forcing a failure. [ 116.063182][ T6214] name failslab, interval 1, probability 0, space 0, times 0 [ 116.082137][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.090245][ T6214] CPU: 1 UID: 0 PID: 6214 Comm: syz.1.93 Not tainted syzkaller #0 PREEMPT(full) [ 116.090280][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.090296][ T6214] Call Trace: [ 116.090307][ T6214] [ 116.090319][ T6214] dump_stack_lvl+0x100/0x190 [ 116.090356][ T6214] should_fail_ex.cold+0x5/0xa [ 116.090392][ T6214] should_failslab+0xc2/0x120 [ 116.090421][ T6214] __kmalloc_cache_noprof+0x7a/0x6f0 [ 116.090455][ T6214] ? kernfs_fop_open+0x23d/0xd50 [ 116.090497][ T6214] kernfs_fop_open+0x23d/0xd50 [ 116.090539][ T6214] do_dentry_open+0x6d8/0x1660 [ 116.090569][ T6214] ? __pfx_kernfs_fop_open+0x10/0x10 [ 116.090611][ T6214] vfs_open+0x82/0x3f0 [ 116.090650][ T6214] path_openat+0x208c/0x31a0 [ 116.090699][ T6214] ? __pfx_path_openat+0x10/0x10 [ 116.090742][ T6214] do_file_open+0x20e/0x430 [ 116.090775][ T6214] ? __pfx_do_file_open+0x10/0x10 [ 116.090829][ T6214] ? alloc_fd+0x476/0x790 [ 116.090862][ T6214] ? do_getname+0x191/0x390 [ 116.090904][ T6214] do_sys_openat2+0x10d/0x1e0 [ 116.090941][ T6214] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.090980][ T6214] ? __might_fault+0xc5/0x140 [ 116.091025][ T6214] __x64_sys_openat+0x12d/0x210 [ 116.091064][ T6214] ? __pfx___x64_sys_openat+0x10/0x10 [ 116.091108][ T6214] ? rcu_is_watching+0x12/0xc0 [ 116.091142][ T6214] do_syscall_64+0x10b/0xf80 [ 116.091172][ T6214] ? clear_bhb_loop+0x40/0x90 [ 116.091203][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.091228][ T6214] RIP: 0033:0x7fdc9259cdd9 [ 116.091250][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.091273][ T6214] RSP: 002b:00007fdc934d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.091297][ T6214] RAX: ffffffffffffffda RBX: 00007fdc92815fa0 RCX: 00007fdc9259cdd9 [ 116.091313][ T6214] RDX: 0000000000149b01 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 116.091329][ T6214] RBP: 00007fdc92632d69 R08: 0000000000000000 R09: 0000000000000000 [ 116.091344][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.091358][ T6214] R13: 00007fdc92816038 R14: 00007fdc92815fa0 R15: 00007ffd7a14b6c8 [ 116.091391][ T6214] [ 116.334867][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.479427][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.563311][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.632993][ T6221] netlink: 338 bytes leftover after parsing attributes in process `syz.0.94'. [ 117.241582][ T6230] netlink: 334 bytes leftover after parsing attributes in process `syz.0.97'. [ 117.407526][ T6241] blktrace: Concurrent blktraces are not allowed on loop2 [ 118.159395][ T5626] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.404368][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.559515][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.639837][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.845067][ T30] audit: type=1800 audit(1778053055.125:9): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.108" name="file0" dev="tmpfs" ino=162 res=0 errno=0 [ 120.323758][ T6304] blktrace: Concurrent blktraces are not allowed on loop2 [ 120.576922][ T6310] random: crng reseeded on system resumption [ 122.026764][ T6345] random: crng reseeded on system resumption [ 122.622187][ T6357] blktrace: Concurrent blktraces are not allowed on loop2 [ 122.835115][ T30] audit: type=1800 audit(1778053059.115:10): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.127" name="file0" dev="tmpfs" ino=171 res=0 errno=0 [ 125.542694][ T6392] blktrace: Concurrent blktraces are not allowed on loop2 [ 125.783013][ T30] audit: type=1800 audit(1778053062.065:11): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.141" name="file0" dev="tmpfs" ino=223 res=0 errno=0 [ 127.808952][ T6442] blktrace: Concurrent blktraces are not allowed on loop2 [ 128.348186][ T6454] ubi0: attaching mtd0 [ 128.371429][ T6454] ubi0: scanning is finished [ 128.400954][ T6454] ubi0: empty MTD device detected [ 128.986721][ T30] audit: type=1800 audit(1778053065.265:12): pid=6475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.158" name="file0" dev="tmpfs" ino=212 res=0 errno=0 [ 129.562227][ T6454] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 130.018196][ T6496] blktrace: Concurrent blktraces are not allowed on loop2 [ 131.140428][ T6526] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 131.140428][ T6526] The task syz.1.169 (6526) triggered the difference, watch for misbehavior. [ 132.415227][ T30] audit: type=1800 audit(1778053068.695:13): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.176" name="file0" dev="tmpfs" ino=239 res=0 errno=0 [ 132.530891][ T6550] blktrace: Concurrent blktraces are not allowed on loop2 [ 132.974127][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.983923][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.568972][ T6567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 137.053533][ T5626] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 137.053574][ T5626] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 137.068575][ T5626] Bluetooth: hci1: Unknown advertising packet type: 0x3e [ 137.068618][ T5626] Bluetooth: hci1: adv larger than maximum supported [ 137.075958][ T5626] Bluetooth: hci1: Unknown advertising packet type: 0x52 [ 137.083912][ T5626] Bluetooth: hci1: adv larger than maximum supported [ 137.091343][ T5626] Bluetooth: hci1: Malformed LE Event: 0x0d [ 137.375416][ T6602] blktrace: Concurrent blktraces are not allowed on loop2 [ 138.550238][ T5626] Bluetooth: hci2: Unexpected cc 0x7c89 with no status [ 140.118505][ T6649] blktrace: Concurrent blktraces are not allowed on loop2 [ 140.512550][ T6657] FAULT_INJECTION: forcing a failure. [ 140.512550][ T6657] name failslab, interval 1, probability 0, space 0, times 0 [ 140.570512][ T6657] CPU: 0 UID: 0 PID: 6657 Comm: syz.2.207 Not tainted syzkaller #0 PREEMPT(full) [ 140.570543][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.570557][ T6657] Call Trace: [ 140.570565][ T6657] [ 140.570573][ T6657] dump_stack_lvl+0x100/0x190 [ 140.570605][ T6657] should_fail_ex.cold+0x5/0xa [ 140.570635][ T6657] ? tomoyo_encode2+0xfb/0x3c0 [ 140.570662][ T6657] should_failslab+0xc2/0x120 [ 140.570691][ T6657] __kmalloc_noprof+0xe0/0x850 [ 140.570727][ T6657] ? d_absolute_path+0x136/0x1b0 [ 140.570758][ T6657] tomoyo_encode2+0xfb/0x3c0 [ 140.570794][ T6657] tomoyo_encode+0x29/0x50 [ 140.570826][ T6657] tomoyo_realpath_from_path+0x18c/0x690 [ 140.570864][ T6657] tomoyo_path_number_perm+0x23c/0x580 [ 140.570889][ T6657] ? tomoyo_path_number_perm+0x22e/0x580 [ 140.570918][ T6657] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 140.570980][ T6657] ? find_held_lock+0x2b/0x80 [ 140.571012][ T6657] ? __fget_files+0x215/0x3d0 [ 140.571039][ T6657] ? hook_file_ioctl_common+0x149/0x410 [ 140.571064][ T6657] ? __fget_files+0x215/0x3d0 [ 140.571105][ T6657] ? __fget_files+0x21f/0x3d0 [ 140.571140][ T6657] security_file_ioctl+0xd3/0x230 [ 140.571167][ T6657] __x64_sys_ioctl+0xb7/0x210 [ 140.571195][ T6657] do_syscall_64+0x10b/0xf80 [ 140.571227][ T6657] ? clear_bhb_loop+0x40/0x90 [ 140.571258][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.571284][ T6657] RIP: 0033:0x7f005619cdd9 [ 140.571312][ T6657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.571340][ T6657] RSP: 002b:00007f005707c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.571364][ T6657] RAX: ffffffffffffffda RBX: 00007f0056416090 RCX: 00007f005619cdd9 [ 140.571381][ T6657] RDX: 0000000000000000 RSI: 00000000c05c6104 RDI: 0000000000000006 [ 140.571396][ T6657] RBP: 00007f005707c090 R08: 0000000000000000 R09: 0000000000000000 [ 140.571411][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.571425][ T6657] R13: 00007f0056416128 R14: 00007f0056416090 R15: 00007fff40cfc978 [ 140.571461][ T6657] [ 140.574069][ T6657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.032567][ T30] audit: type=1800 audit(1778053077.315:14): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.207" name="file0" dev="tmpfs" ino=293 res=0 errno=0 [ 142.257991][ T6689] blktrace: Concurrent blktraces are not allowed on loop2 [ 142.470960][ T6692] [U] [ 142.473967][ T6692] [U] [ 142.476689][ T6692] [U] [ 142.479405][ T6692] [U] [ 142.652312][ T6692] [U] [ 142.655039][ T6692] [U] [ 142.657719][ T6692] [U] [ 142.660404][ T6692] [U] [ 142.850900][ T6692] [U] [ 142.853655][ T6692] [U] [ 142.856340][ T6692] [U] [ 142.859015][ T6692] [U] [ 143.030164][ T6692] [U] [ 143.032935][ T6692] [U] [ 143.035661][ T6692] [U] [ 143.038381][ T6692] [U] [ 143.197848][ T6692] [U] [ 143.200621][ T6692] [U] [ 143.203351][ T6692] [U] [ 143.206072][ T6692] [U] [ 143.322336][ T6692] [U] [ 143.325107][ T6692] [U] [ 143.327838][ T6692] [U] [ 143.330555][ T6692] [U] [ 143.420866][ T6692] [U] [ 143.423641][ T6692] [U] [ 143.426361][ T6692] [U] [ 143.429073][ T6692] [U] [ 143.580057][ T6692] [U] [ 143.582782][ T6692] [U] [ 143.585452][ T6692] [U] [ 143.588121][ T6692] [U] [ 143.652337][ T6706] FAULT_INJECTION: forcing a failure. [ 143.652337][ T6706] name failslab, interval 1, probability 0, space 0, times 0 [ 143.729618][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.3.220 Not tainted syzkaller #0 PREEMPT(full) [ 143.729657][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.729673][ T6706] Call Trace: [ 143.729681][ T6706] [ 143.729692][ T6706] dump_stack_lvl+0x100/0x190 [ 143.729731][ T6706] should_fail_ex.cold+0x5/0xa [ 143.729768][ T6706] should_failslab+0xc2/0x120 [ 143.729801][ T6706] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 143.729854][ T6706] ? __pmd_alloc+0xbf/0x950 [ 143.729897][ T6706] __pmd_alloc+0xbf/0x950 [ 143.729934][ T6706] __handle_mm_fault+0xa9c/0x2a00 [ 143.729976][ T6706] ? mt_find+0x45e/0x8e0 [ 143.730015][ T6706] ? __pfx___handle_mm_fault+0x10/0x10 [ 143.730054][ T6706] ? __pfx_mt_find+0x10/0x10 [ 143.730113][ T6706] ? find_vma+0xbf/0x140 [ 143.730143][ T6706] ? __pfx_find_vma+0x10/0x10 [ 143.730177][ T6706] handle_mm_fault+0x36d/0xa20 [ 143.730226][ T6706] do_user_addr_fault+0x74c/0x12f0 [ 143.730266][ T6706] ? trace_page_fault_kernel+0x7a/0x200 [ 143.730302][ T6706] exc_page_fault+0x6f/0xd0 [ 143.730339][ T6706] asm_exc_page_fault+0x26/0x30 [ 143.730367][ T6706] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 143.730413][ T6706] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 143.730440][ T6706] RSP: 0018:ffffc90004f97da8 EFLAGS: 00050202 [ 143.730462][ T6706] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000018 [ 143.730478][ T6706] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004f97e78 [ 143.730495][ T6706] RBP: 0000000000000018 R08: 0000000000000001 R09: fffff520009f2fd1 [ 143.730512][ T6706] R10: ffffc90004f97e8f R11: 0000000000000000 R12: 0000000000000000 [ 143.730529][ T6706] R13: ffffc90004f97e78 R14: 0000000000000000 R15: 000000000000007e [ 143.730570][ T6706] _copy_from_user+0x98/0xd0 [ 143.730618][ T6706] __do_sys_capset+0x1ec/0x460 [ 143.730653][ T6706] ? __pfx___do_sys_capset+0x10/0x10 [ 143.730689][ T6706] ? __x64_sys_futex+0x358/0x4d0 [ 143.730734][ T6706] ? rcu_is_watching+0x12/0xc0 [ 143.730773][ T6706] do_syscall_64+0x10b/0xf80 [ 143.730807][ T6706] ? clear_bhb_loop+0x40/0x90 [ 143.730850][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.730879][ T6706] RIP: 0033:0x7fa31439cdd9 [ 143.730902][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.730928][ T6706] RSP: 002b:00007fa3151a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 143.730954][ T6706] RAX: ffffffffffffffda RBX: 00007fa314616090 RCX: 00007fa31439cdd9 [ 143.730972][ T6706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 143.730989][ T6706] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000000 [ 143.731005][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.731021][ T6706] R13: 00007fa314616128 R14: 00007fa314616090 R15: 00007ffc0b306948 [ 143.731060][ T6706] [ 143.744733][ T6692] [U] [ 144.034819][ T6692] [U] [ 144.037512][ T6692] [U] [ 144.040202][ T6692] [U] [ 144.153102][ T6708] zswap: compressor not available [ 144.184798][ T6692] [U] [ 144.633079][ T6719] process 'syz.3.222' launched '/dev/fd/7' with NULL argv: empty string added [ 145.732551][ T30] audit: type=1800 audit(1778053082.005:15): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.225" name="file0" dev="tmpfs" ino=331 res=0 errno=0 [ 145.909657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 148.920664][ T5626] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 148.928290][ T5626] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 148.971169][ T808] Process accounting resumed [ 149.159488][ T6781] Process accounting resumed [ 150.158914][ T30] audit: type=1800 audit(1778053086.435:16): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.237" name="file0" dev="tmpfs" ino=329 res=0 errno=0 [ 150.919940][ T6786] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.934315][ T6786] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.958734][ T6786] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.986958][ T6786] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.432268][ T6849] random: crng reseeded on system resumption [ 152.719444][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.959415][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.965532][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.039801][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.108200][ T6858] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.623022][ T30] audit: type=1800 audit(1778053089.905:17): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.249" name="file0" dev="tmpfs" ino=318 res=0 errno=0 [ 155.626613][ T6892] blktrace: Concurrent blktraces are not allowed on loop2 [ 156.515417][ T6903] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 157.213298][ T6909] FAULT_INJECTION: forcing a failure. [ 157.213298][ T6909] name failslab, interval 1, probability 0, space 0, times 0 [ 157.382986][ T6916] netlink: 330 bytes leftover after parsing attributes in process `syz.1.261'. [ 157.400334][ T6909] CPU: 0 UID: 0 PID: 6909 Comm: syz.0.258 Not tainted syzkaller #0 PREEMPT(full) [ 157.400373][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.400390][ T6909] Call Trace: [ 157.400401][ T6909] [ 157.400411][ T6909] dump_stack_lvl+0x100/0x190 [ 157.400449][ T6909] should_fail_ex.cold+0x5/0xa [ 157.400487][ T6909] should_failslab+0xc2/0x120 [ 157.400520][ T6909] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 157.400550][ T6909] ? setup_mq_sysctls+0x5d/0x240 [ 157.400578][ T6909] ? mq_init_ns+0x3b0/0x820 [ 157.400627][ T6909] kmemdup_noprof+0x29/0x60 [ 157.400666][ T6909] setup_mq_sysctls+0x5d/0x240 [ 157.400694][ T6909] ? mq_init_ns+0x4de/0x820 [ 157.400739][ T6909] copy_ipcs+0x524/0x7e0 [ 157.400783][ T6909] create_new_namespaces+0x20a/0xac0 [ 157.400820][ T6909] ? security_capable+0x80/0x260 [ 157.400863][ T6909] copy_namespaces+0x468/0x5e0 [ 157.400899][ T6909] copy_process+0x3531/0x7e00 [ 157.400936][ T6909] ? futex_unqueue+0x133/0x2c0 [ 157.400981][ T6909] ? __pfx_copy_process+0x10/0x10 [ 157.401028][ T6909] ? _copy_from_user+0x59/0xd0 [ 157.401077][ T6909] kernel_clone+0x12e/0x9c0 [ 157.401118][ T6909] ? __pfx_kernel_clone+0x10/0x10 [ 157.401164][ T6909] ? __pfx_futex_wait+0x10/0x10 [ 157.401208][ T6909] __do_sys_clone3+0x214/0x290 [ 157.401246][ T6909] ? __pfx___do_sys_clone3+0x10/0x10 [ 157.401323][ T6909] ? rcu_is_watching+0x12/0xc0 [ 157.401361][ T6909] do_syscall_64+0x10b/0xf80 [ 157.401395][ T6909] ? clear_bhb_loop+0x40/0x90 [ 157.401430][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.401459][ T6909] RIP: 0033:0x7f075019cdd9 [ 157.401483][ T6909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.401509][ T6909] RSP: 002b:00007f0750fc3ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 157.401535][ T6909] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f075019cdd9 [ 157.401553][ T6909] RDX: 00007f0750fc3f10 RSI: 0000000000000058 RDI: 00007f0750fc3f10 [ 157.401570][ T6909] RBP: 00007f0750232d69 R08: 0000000000000000 R09: 0000000000000058 [ 157.401586][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.401602][ T6909] R13: 00007f0750416038 R14: 00007f0750415fa0 R15: 00007ffe8bf93bf8 [ 157.401639][ T6909] [ 158.294932][ T6933] blktrace: Concurrent blktraces are not allowed on loop2 [ 158.761242][ T6937] binder: 6935:6937 ioctl 400c620e 200000000480 returned -22 [ 160.157866][ T6975] FAULT_INJECTION: forcing a failure. [ 160.157866][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 160.198453][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(full) [ 160.198487][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.198500][ T6975] Call Trace: [ 160.198508][ T6975] [ 160.198518][ T6975] dump_stack_lvl+0x100/0x190 [ 160.198552][ T6975] should_fail_ex.cold+0x5/0xa [ 160.198584][ T6975] ? tomoyo_realpath_from_path+0xb6/0x690 [ 160.198616][ T6975] should_failslab+0xc2/0x120 [ 160.198646][ T6975] __kmalloc_noprof+0xe0/0x850 [ 160.198683][ T6975] ? kfree+0x1dd/0x6c0 [ 160.198723][ T6975] tomoyo_realpath_from_path+0xb6/0x690 [ 160.198770][ T6975] tomoyo_path_number_perm+0x23c/0x580 [ 160.198795][ T6975] ? tomoyo_path_number_perm+0x22e/0x580 [ 160.198824][ T6975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.198886][ T6975] ? find_held_lock+0x2b/0x80 [ 160.198919][ T6975] ? __fget_files+0x215/0x3d0 [ 160.198946][ T6975] ? hook_file_ioctl_common+0x149/0x410 [ 160.198972][ T6975] ? __fget_files+0x215/0x3d0 [ 160.199007][ T6975] ? __fget_files+0x21f/0x3d0 [ 160.199043][ T6975] security_file_ioctl+0xd3/0x230 [ 160.199069][ T6975] __x64_sys_ioctl+0xb7/0x210 [ 160.199097][ T6975] do_syscall_64+0x10b/0xf80 [ 160.199129][ T6975] ? clear_bhb_loop+0x40/0x90 [ 160.199161][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.199187][ T6975] RIP: 0033:0x7fdc9259cdd9 [ 160.199209][ T6975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.199231][ T6975] RSP: 002b:00007fdc934d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.199256][ T6975] RAX: ffffffffffffffda RBX: 00007fdc92815fa0 RCX: 00007fdc9259cdd9 [ 160.199272][ T6975] RDX: 0000200000000080 RSI: 0000000080284504 RDI: 0000000000000003 [ 160.199290][ T6975] RBP: 00007fdc934d1090 R08: 0000000000000000 R09: 0000000000000000 [ 160.199302][ T6975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.199315][ T6975] R13: 00007fdc92816038 R14: 00007fdc92815fa0 R15: 00007ffd7a14b6c8 [ 160.199346][ T6975] [ 160.619498][ T6975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.867775][ T6977] blktrace: Concurrent blktraces are not allowed on loop2 [ 161.713441][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.282'. [ 164.076242][ T7031] blktrace: Concurrent blktraces are not allowed on loop2 [ 164.177012][ T7033] FAULT_INJECTION: forcing a failure. [ 164.177012][ T7033] name failslab, interval 1, probability 0, space 0, times 0 [ 164.199488][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.3.291 Not tainted syzkaller #0 PREEMPT(full) [ 164.199523][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.199533][ T7033] Call Trace: [ 164.199539][ T7033] [ 164.199546][ T7033] dump_stack_lvl+0x100/0x190 [ 164.199567][ T7033] should_fail_ex.cold+0x5/0xa [ 164.199587][ T7033] should_failslab+0xc2/0x120 [ 164.199605][ T7033] __kvmalloc_node_noprof+0xfa/0xa00 [ 164.199619][ T7033] ? alloc_fdtable+0x110/0x2d0 [ 164.199640][ T7033] alloc_fdtable+0x110/0x2d0 [ 164.199657][ T7033] dup_fd+0x995/0xd10 [ 164.199676][ T7033] ? apparmor_task_alloc+0x2c1/0x3b0 [ 164.199701][ T7033] copy_process+0x2965/0x7e00 [ 164.199731][ T7033] ? __pfx_copy_process+0x10/0x10 [ 164.199772][ T7033] ? _copy_from_user+0x59/0xd0 [ 164.199804][ T7033] kernel_clone+0x12e/0x9c0 [ 164.199828][ T7033] ? __pfx_kernel_clone+0x10/0x10 [ 164.199848][ T7033] ? futex_private_hash_put+0x107/0x1c0 [ 164.199880][ T7033] ? __pfx_futex_wake+0x10/0x10 [ 164.199902][ T7033] __do_sys_clone3+0x214/0x290 [ 164.199922][ T7033] ? __pfx___do_sys_clone3+0x10/0x10 [ 164.199949][ T7033] ? rcu_read_unlock+0x17/0x60 [ 164.199966][ T7033] ? rcu_read_unlock+0x17/0x60 [ 164.199994][ T7033] ? rcu_is_watching+0x12/0xc0 [ 164.200013][ T7033] do_syscall_64+0x10b/0xf80 [ 164.200032][ T7033] ? clear_bhb_loop+0x40/0x90 [ 164.200050][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.200065][ T7033] RIP: 0033:0x7fa31439cdd9 [ 164.200079][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.200093][ T7033] RSP: 002b:00007fa3151c3ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 164.200108][ T7033] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa31439cdd9 [ 164.200118][ T7033] RDX: 00007fa3151c3f10 RSI: 0000000000000058 RDI: 00007fa3151c3f10 [ 164.200127][ T7033] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000058 [ 164.200136][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.200145][ T7033] R13: 00007fa314616038 R14: 00007fa314615fa0 R15: 00007ffc0b306948 [ 164.200164][ T7033] [ 166.205805][ T30] audit: type=1800 audit(1778053102.485:18): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.297" name="file0" dev="tmpfs" ino=426 res=0 errno=0 [ 166.557099][ T7061] FAULT_INJECTION: forcing a failure. [ 166.557099][ T7061] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 166.576020][ T7061] CPU: 1 UID: 0 PID: 7061 Comm: syz.2.298 Not tainted syzkaller #0 PREEMPT(full) [ 166.576055][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.576069][ T7061] Call Trace: [ 166.576078][ T7061] [ 166.576088][ T7061] dump_stack_lvl+0x100/0x190 [ 166.576122][ T7061] should_fail_ex.cold+0x5/0xa [ 166.576155][ T7061] _copy_from_user+0x2e/0xd0 [ 166.576195][ T7061] evdev_handle_get_keycode_v2+0xb7/0x170 [ 166.576232][ T7061] ? __pfx_evdev_handle_get_keycode_v2+0x10/0x10 [ 166.576265][ T7061] ? rcu_is_watching+0x12/0xc0 [ 166.576295][ T7061] ? trace_contention_end+0x122/0x170 [ 166.576327][ T7061] evdev_do_ioctl+0xc78/0x1b60 [ 166.576356][ T7061] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 166.576377][ T7061] ? __pfx___mutex_lock+0x10/0x10 [ 166.576437][ T7061] evdev_ioctl+0x16f/0x1a0 [ 166.576462][ T7061] ? __pfx_evdev_ioctl+0x10/0x10 [ 166.576491][ T7061] __x64_sys_ioctl+0x18e/0x210 [ 166.576521][ T7061] do_syscall_64+0x10b/0xf80 [ 166.576551][ T7061] ? clear_bhb_loop+0x40/0x90 [ 166.576583][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.576609][ T7061] RIP: 0033:0x7f005619cdd9 [ 166.576631][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.576655][ T7061] RSP: 002b:00007f005709d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.576683][ T7061] RAX: ffffffffffffffda RBX: 00007f0056415fa0 RCX: 00007f005619cdd9 [ 166.576700][ T7061] RDX: 0000200000000080 RSI: 0000000080284504 RDI: 0000000000000003 [ 166.576715][ T7061] RBP: 00007f005709d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.576731][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.576745][ T7061] R13: 00007f0056416038 R14: 00007f0056415fa0 R15: 00007fff40cfc978 [ 166.576782][ T7061] [ 167.227576][ T7072] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 167.891943][ T7083] blktrace: Concurrent blktraces are not allowed on loop2 [ 170.008312][ T6679] syz.0.212 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 170.306213][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: syz.0.212 Not tainted syzkaller #0 PREEMPT(full) [ 170.306234][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.306243][ T6679] Call Trace: [ 170.306248][ T6679] [ 170.306254][ T6679] dump_stack_lvl+0x100/0x190 [ 170.306275][ T6679] dump_header+0xfb/0x606 [ 170.306292][ T6679] oom_kill_process.cold+0xd/0x330 [ 170.306310][ T6679] out_of_memory+0x340/0x14f0 [ 170.306337][ T6679] ? __pfx_out_of_memory+0x10/0x10 [ 170.306364][ T6679] mem_cgroup_out_of_memory+0xc6/0x130 [ 170.306387][ T6679] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 170.306407][ T6679] ? find_held_lock+0x2b/0x80 [ 170.306430][ T6679] ? do_raw_spin_unlock+0x145/0x1e0 [ 170.306447][ T6679] ? _raw_spin_unlock+0x28/0x50 [ 170.306465][ T6679] try_charge_memcg+0x6e5/0xdf0 [ 170.306487][ T6679] ? __pfx_try_charge_memcg+0x10/0x10 [ 170.306502][ T6679] ? find_held_lock+0x2b/0x80 [ 170.306520][ T6679] ? rcu_read_unlock+0x17/0x60 [ 170.306537][ T6679] ? rcu_read_unlock+0x17/0x60 [ 170.306554][ T6679] ? find_held_lock+0x2b/0x80 [ 170.306573][ T6679] ? rcu_read_unlock+0x17/0x60 [ 170.306594][ T6679] charge_memcg+0x19f/0x210 [ 170.306612][ T6679] __mem_cgroup_charge+0x2b/0x1c0 [ 170.306632][ T6679] shmem_alloc_and_add_folio+0x451/0xd40 [ 170.306661][ T6679] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 170.306686][ T6679] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 170.306714][ T6679] shmem_get_folio_gfp+0x6ab/0x1900 [ 170.306742][ T6679] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 170.306767][ T6679] ? timestamp_truncate+0x22e/0x2f0 [ 170.306788][ T6679] shmem_write_begin+0x1a4/0x420 [ 170.306804][ T6679] ? __pfx_shmem_write_begin+0x10/0x10 [ 170.306820][ T6679] ? rcu_is_watching+0x12/0xc0 [ 170.306838][ T6679] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 170.306859][ T6679] generic_perform_write+0x292/0xa40 [ 170.306886][ T6679] ? __pfx_generic_perform_write+0x10/0x10 [ 170.306905][ T6679] ? __mark_inode_dirty+0x55c/0x1720 [ 170.306921][ T6679] ? mnt_put_write_access_file+0x4e/0x100 [ 170.306939][ T6679] ? file_update_time_flags+0x373/0x500 [ 170.306962][ T6679] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 170.306978][ T6679] shmem_file_write_iter+0x10e/0x140 [ 170.306996][ T6679] __kernel_write_iter+0x2ac/0x920 [ 170.307014][ T6679] ? __pfx___kernel_write_iter+0x10/0x10 [ 170.307030][ T6679] ? __up_read+0x2c1/0x6e0 [ 170.307048][ T6679] ? dump_user_range+0x65e/0xad0 [ 170.307078][ T6679] dump_user_range+0x3f9/0xad0 [ 170.307102][ T6679] ? __pfx_dump_user_range+0x10/0x10 [ 170.307129][ T6679] ? __pfx_writenote+0x10/0x10 [ 170.307155][ T6679] elf_core_dump+0x2d5f/0x3d10 [ 170.307188][ T6679] ? __pfx_elf_core_dump+0x10/0x10 [ 170.307210][ T6679] ? kasan_save_stack+0x3f/0x50 [ 170.307223][ T6679] ? kasan_save_stack+0x30/0x50 [ 170.307235][ T6679] ? __kasan_kmalloc+0xaa/0xb0 [ 170.307247][ T6679] ? __kvmalloc_node_noprof+0x360/0xa00 [ 170.307261][ T6679] ? vfs_coredump+0x22db/0x5770 [ 170.307281][ T6679] ? asm_exc_page_fault+0x26/0x30 [ 170.307297][ T6679] ? 0xffffffffff600000 [ 170.307339][ T6679] ? vfs_coredump+0x29a0/0x5770 [ 170.307358][ T6679] vfs_coredump+0x29a0/0x5770 [ 170.307391][ T6679] ? __pfx_vfs_coredump+0x10/0x10 [ 170.307412][ T6679] ? __lock_acquire+0x4a5/0x2630 [ 170.307433][ T6679] ? lock_acquire+0x1b1/0x370 [ 170.307454][ T6679] ? is_bpf_text_address+0x8a/0x1a0 [ 170.307474][ T6679] ? bpf_ksym_find+0x124/0x1c0 [ 170.307493][ T6679] ? __kernel_text_address+0xd/0x30 [ 170.307507][ T6679] ? unwind_get_return_address+0x59/0xa0 [ 170.307527][ T6679] ? arch_stack_walk+0xa6/0xf0 [ 170.307551][ T6679] ? __sigqueue_free+0xbe/0x2a0 [ 170.307574][ T6679] ? stack_trace_save+0x8e/0xc0 [ 170.307594][ T6679] ? __pfx_stack_trace_save+0x10/0x10 [ 170.307627][ T6679] ? stack_depot_save_flags+0x27/0x9d0 [ 170.307655][ T6679] ? __lock_acquire+0x4a5/0x2630 [ 170.307728][ T6679] ? proc_coredump_connector+0x2d3/0x4f0 [ 170.307762][ T6679] ? __pfx_proc_coredump_connector+0x10/0x10 [ 170.307807][ T6679] ? rcu_is_watching+0x12/0xc0 [ 170.307844][ T6679] get_signal+0x1f2a/0x21e0 [ 170.307888][ T6679] ? __pfx_get_signal+0x10/0x10 [ 170.307919][ T6679] ? bad_area_access_error+0xab/0x1d0 [ 170.307948][ T6679] ? fixup_vdso_exception+0x2d1/0x370 [ 170.307989][ T6679] arch_do_signal_or_restart+0x91/0x770 [ 170.308026][ T6679] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 170.308085][ T6679] ? rcu_is_watching+0x12/0xc0 [ 170.308118][ T6679] irqentry_exit+0x403/0x790 [ 170.308155][ T6679] asm_exc_page_fault+0x26/0x30 [ 170.308185][ T6679] RIP: 0033:0x0 [ 170.308202][ T6679] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 170.308214][ T6679] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 170.308233][ T6679] RAX: 0000000000000000 RBX: 00007f0750415fa0 RCX: 00007f075019cdd9 [ 170.308249][ T6679] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 170.308263][ T6679] RBP: 00007f0750232d69 R08: 0000000000000002 R09: 0000000000000000 [ 170.308278][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.308292][ T6679] R13: 00007f0750416038 R14: 00007f0750415fa0 R15: 00007ffe8bf93bf8 [ 170.308329][ T6679] [ 171.142097][ T6679] memory: usage 307200kB, limit 307200kB, failcnt 24562 [ 171.249953][ T6679] memory+swap: usage 431496kB, limit 9007199254740988kB, failcnt 0 [ 171.317501][ T6679] kmem: usage 3324kB, limit 9007199254740988kB, failcnt 0 [ 171.332726][ T6679] Memory cgroup stats for /syz0: [ 171.333207][ T6679] cache 310472704 [ 171.350997][ T6679] rss 176128 [ 171.354365][ T6679] rss_huge 0 [ 171.362394][ T6679] shmem 310468608 [ 171.369443][ T6679] mapped_file 73293824 [ 171.373620][ T6679] dirty 0 [ 171.386632][ T6679] writeback 0 [ 171.390225][ T6679] workingset_refault_anon 541 [ 171.424164][ T6679] workingset_refault_file 1782 [ 171.441986][ T6679] swap 127279104 [ 171.459477][ T6679] swapcached 146653184 [ 171.497189][ T6679] pgpgin 197183 [ 171.512913][ T6679] pgpgout 121214 [ 171.521211][ T6679] pgfault 75835 [ 171.531850][ T6679] pgmajfault 153 [ 171.548102][ T6679] inactive_anon 210722816 [ 171.573948][ T6679] active_anon 100442112 [ 171.584541][ T6679] inactive_file 4096 [ 171.643105][ T6679] active_file 0 [ 171.655263][ T6679] unevictable 0 [ 171.671044][ T6679] hierarchical_memory_limit 314572800 [ 171.693783][ T6679] hierarchical_memsw_limit 9223372036854771712 [ 171.726684][ T6679] total_cache 310472704 [ 171.744487][ T6679] total_rss 176128 [ 171.758891][ T6679] total_rss_huge 0 [ 171.776374][ T6679] total_shmem 310468608 [ 171.793487][ T6679] total_mapped_file 73293824 [ 171.816713][ T6679] total_dirty 0 [ 171.835840][ T6679] total_writeback 0 [ 171.849466][ T6679] total_workingset_refault_anon 541 [ 171.870669][ T6679] total_workingset_refault_file 1782 [ 171.888914][ T6679] total_swap 127279104 [ 171.905518][ T6679] total_swapcached 146653184 [ 171.924221][ T6679] total_pgpgin 197183 [ 171.941109][ T6679] total_pgpgout 121214 [ 171.948410][ T6679] total_pgfault 75835 [ 171.952786][ T6679] total_pgmajfault 153 [ 171.959409][ T6679] total_inactive_anon 210722816 [ 171.964435][ T6679] total_active_anon 100442112 [ 171.975530][ T6679] total_inactive_file 4096 [ 171.983219][ T6679] total_active_file 0 [ 171.990703][ T6679] total_unevictable 0 [ 171.994830][ T6679] anon_cost 0 [ 171.998140][ T6679] file_cost 0 [ 172.002207][ T6679] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.156,pid=6477,uid=0 [ 172.020087][ T6679] Memory cgroup out of memory: Killed process 6477 (syz.0.156) total-vm:296248kB, anon-rss:1324kB, file-rss:53816kB, shmem-rss:59472kB, UID:0 pgtables:348kB oom_score_adj:1000 [ 172.602438][ T6479] syz.0.156 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 172.615372][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) [ 172.615403][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.615416][ T6479] Call Trace: [ 172.615424][ T6479] [ 172.615433][ T6479] dump_stack_lvl+0x100/0x190 [ 172.615469][ T6479] dump_header+0xfb/0x606 [ 172.615497][ T6479] oom_kill_process.cold+0xd/0x330 [ 172.615526][ T6479] out_of_memory+0x340/0x14f0 [ 172.615559][ T6479] ? __pfx_out_of_memory+0x10/0x10 [ 172.615587][ T6479] mem_cgroup_out_of_memory+0xc6/0x130 [ 172.615609][ T6479] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 172.615630][ T6479] ? find_held_lock+0x2b/0x80 [ 172.615658][ T6479] ? do_raw_spin_unlock+0x145/0x1e0 [ 172.615675][ T6479] ? _raw_spin_unlock+0x28/0x50 [ 172.615693][ T6479] try_charge_memcg+0x6e5/0xdf0 [ 172.615714][ T6479] ? __pfx_try_charge_memcg+0x10/0x10 [ 172.615730][ T6479] ? find_held_lock+0x2b/0x80 [ 172.615748][ T6479] ? rcu_read_unlock+0x17/0x60 [ 172.615765][ T6479] ? rcu_read_unlock+0x17/0x60 [ 172.615782][ T6479] ? find_held_lock+0x2b/0x80 [ 172.615801][ T6479] ? rcu_read_unlock+0x17/0x60 [ 172.615822][ T6479] charge_memcg+0x19f/0x210 [ 172.615839][ T6479] __mem_cgroup_charge+0x2b/0x1c0 [ 172.615860][ T6479] shmem_alloc_and_add_folio+0x451/0xd40 [ 172.615889][ T6479] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 172.615917][ T6479] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 172.615945][ T6479] shmem_get_folio_gfp+0x6ab/0x1900 [ 172.615973][ T6479] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 172.615998][ T6479] ? timestamp_truncate+0x22e/0x2f0 [ 172.616019][ T6479] shmem_write_begin+0x1a4/0x420 [ 172.616036][ T6479] ? __pfx_shmem_write_begin+0x10/0x10 [ 172.616048][ T6479] ? rcu_is_watching+0x12/0xc0 [ 172.616066][ T6479] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 172.616088][ T6479] generic_perform_write+0x292/0xa40 [ 172.616116][ T6479] ? __pfx_generic_perform_write+0x10/0x10 [ 172.616135][ T6479] ? __mark_inode_dirty+0x55c/0x1720 [ 172.616151][ T6479] ? mnt_put_write_access_file+0x4e/0x100 [ 172.616168][ T6479] ? file_update_time_flags+0x373/0x500 [ 172.616191][ T6479] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 172.616207][ T6479] shmem_file_write_iter+0x10e/0x140 [ 172.616225][ T6479] __kernel_write_iter+0x2ac/0x920 [ 172.616243][ T6479] ? __pfx___kernel_write_iter+0x10/0x10 [ 172.616259][ T6479] ? __up_read+0x2c1/0x6e0 [ 172.616277][ T6479] ? dump_user_range+0x65e/0xad0 [ 172.616301][ T6479] ? copy_mc_enhanced_fast_string+0x6/0xf [ 172.616328][ T6479] dump_user_range+0x3f9/0xad0 [ 172.616352][ T6479] ? __pfx_dump_user_range+0x10/0x10 [ 172.616379][ T6479] ? __pfx_writenote+0x10/0x10 [ 172.616405][ T6479] elf_core_dump+0x2d5f/0x3d10 [ 172.616438][ T6479] ? __pfx_elf_core_dump+0x10/0x10 [ 172.616459][ T6479] ? kasan_save_stack+0x3f/0x50 [ 172.616473][ T6479] ? kasan_save_stack+0x30/0x50 [ 172.616485][ T6479] ? __kasan_kmalloc+0xaa/0xb0 [ 172.616497][ T6479] ? __kvmalloc_node_noprof+0x360/0xa00 [ 172.616510][ T6479] ? vfs_coredump+0x22db/0x5770 [ 172.616530][ T6479] ? asm_exc_page_fault+0x26/0x30 [ 172.616547][ T6479] ? 0xffffffffff600000 [ 172.616589][ T6479] ? vfs_coredump+0x29a0/0x5770 [ 172.616608][ T6479] vfs_coredump+0x29a0/0x5770 [ 172.616636][ T6479] ? __pfx_vfs_coredump+0x10/0x10 [ 172.616662][ T6479] ? __lock_acquire+0x4a5/0x2630 [ 172.616683][ T6479] ? lock_acquire+0x1b1/0x370 [ 172.616704][ T6479] ? is_bpf_text_address+0x8a/0x1a0 [ 172.616724][ T6479] ? bpf_ksym_find+0x124/0x1c0 [ 172.616746][ T6479] ? __kernel_text_address+0xd/0x30 [ 172.616761][ T6479] ? unwind_get_return_address+0x59/0xa0 [ 172.616780][ T6479] ? arch_stack_walk+0xa6/0xf0 [ 172.616804][ T6479] ? __sigqueue_free+0xbe/0x2a0 [ 172.616830][ T6479] ? stack_trace_save+0x8e/0xc0 [ 172.616860][ T6479] ? __pfx_stack_trace_save+0x10/0x10 [ 172.616884][ T6479] ? stack_depot_save_flags+0x27/0x9d0 [ 172.616902][ T6479] ? __lock_acquire+0x4a5/0x2630 [ 172.616961][ T6479] ? proc_coredump_connector+0x2d3/0x4f0 [ 172.616994][ T6479] ? __pfx_proc_coredump_connector+0x10/0x10 [ 172.617019][ T6479] ? rcu_is_watching+0x12/0xc0 [ 172.617039][ T6479] get_signal+0x1f2a/0x21e0 [ 172.617065][ T6479] ? __pfx_get_signal+0x10/0x10 [ 172.617083][ T6479] ? bad_area_access_error+0xab/0x1d0 [ 172.617099][ T6479] ? fixup_vdso_exception+0x2d1/0x370 [ 172.617124][ T6479] arch_do_signal_or_restart+0x91/0x770 [ 172.617147][ T6479] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 172.617176][ T6479] ? rcu_is_watching+0x12/0xc0 [ 172.617195][ T6479] irqentry_exit+0x403/0x790 [ 172.617215][ T6479] asm_exc_page_fault+0x26/0x30 [ 172.617229][ T6479] RIP: 0033:0x1000 [ 172.617245][ T6479] Code: Unable to access opcode bytes at 0xfd6. [ 172.617251][ T6479] RSP: 002b:0000000000000011 EFLAGS: 00010246 [ 172.617262][ T6479] RAX: 0000000000000000 RBX: 00007f0750416450 RCX: 00007f075019cdd9 [ 172.617271][ T6479] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000000000008 [ 172.617280][ T6479] RBP: 00007f0750232d69 R08: 0000000000000002 R09: 0000000000000000 [ 172.617288][ T6479] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.617296][ T6479] R13: 00007f07504164e8 R14: 00007f0750416450 R15: 00007ffe8bf93bf8 [ 172.617307][ T6479] ? 0xffffffff81000000 [ 172.617324][ T6479] [ 173.329443][ T6479] memory: usage 273644kB, limit 307200kB, failcnt 24644 [ 173.336494][ T6479] memory+swap: usage 363288kB, limit 9007199254740988kB, failcnt 0 [ 173.344634][ T6479] kmem: usage 3288kB, limit 9007199254740988kB, failcnt 0 [ 173.352472][ T6479] Memory cgroup stats for /syz0: [ 173.352672][ T6479] cache 273649664 [ 173.362284][ T6479] rss 86016 [ 173.365409][ T6479] rss_huge 0 [ 173.368608][ T6479] shmem 273645568 [ 173.372323][ T6479] mapped_file 73293824 [ 173.376407][ T6479] dirty 0 [ 173.379412][ T6479] writeback 0 [ 173.382708][ T6479] workingset_refault_anon 541 [ 173.387401][ T6479] workingset_refault_file 1782 [ 173.392249][ T6479] swap 90759168 [ 173.395772][ T6479] swapcached 146534400 [ 173.400002][ T6479] pgpgin 197183 [ 173.403471][ T6479] pgpgout 130218 [ 173.407023][ T6479] pgfault 75835 [ 173.410537][ T6479] pgmajfault 153 [ 173.414120][ T6479] inactive_anon 177774592 [ 173.418452][ T6479] active_anon 96509952 [ 173.422595][ T6479] inactive_file 0 [ 173.426232][ T6479] active_file 4096 [ 173.430017][ T6479] unevictable 0 [ 173.433477][ T6479] hierarchical_memory_limit 314572800 [ 173.438863][ T6479] hierarchical_memsw_limit 9223372036854771712 [ 173.445242][ T6479] total_cache 273649664 [ 173.449553][ T6479] total_rss 86016 [ 173.454217][ T6479] total_rss_huge 0 [ 173.457979][ T6479] total_shmem 273645568 [ 173.462316][ T6479] total_mapped_file 73293824 [ 173.466957][ T6479] total_dirty 0 [ 173.470509][ T6479] total_writeback 0 [ 173.474349][ T6479] total_workingset_refault_anon 541 [ 173.479679][ T6479] total_workingset_refault_file 1782 [ 173.484974][ T6479] total_swap 90759168 [ 173.488960][ T6479] total_swapcached 146534400 [ 173.493605][ T6479] total_pgpgin 197183 [ 173.497645][ T6479] total_pgpgout 130218 [ 173.501789][ T6479] total_pgfault 75835 [ 173.505783][ T6479] total_pgmajfault 153 [ 173.509925][ T6479] total_inactive_anon 177774592 [ 173.514813][ T6479] total_active_anon 96509952 [ 173.519457][ T6479] total_inactive_file 0 [ 173.523613][ T6479] total_active_file 4096 [ 173.527868][ T6479] total_unevictable 0 [ 173.531918][ T6479] anon_cost 0 [ 173.535207][ T6479] file_cost 0 [ 173.538493][ T6479] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.156,pid=6479,uid=0 [ 173.553323][ T6479] Memory cgroup out of memory: Killed process 6479 (syz.0.156) total-vm:296248kB, anon-rss:1236kB, file-rss:53816kB, shmem-rss:59472kB, UID:0 pgtables:344kB oom_score_adj:1000 [ 173.553770][ T6477] syz.0.156 (6477) used greatest stack depth: 19336 bytes left [ 173.769816][ T30] audit: type=1800 audit(1778053110.055:19): pid=7124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.313" name="file0" dev="tmpfs" ino=513 res=0 errno=0 [ 174.336466][ T7141] netlink: 326 bytes leftover after parsing attributes in process `syz.2.316'. [ 176.367934][ T7168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.321'. [ 177.306071][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 178.737492][ T7217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.330'. [ 180.014940][ T7186] Process accounting paused [ 180.196345][ T7238] ucma_write: process 339 (syz.1.337) changed security contexts after opening file descriptor, this is not allowed. [ 181.578441][ T6479] syz.0.156 (6479) used greatest stack depth: 18744 bytes left [ 181.764301][ T7270] blktrace: Concurrent blktraces are not allowed on loop2 [ 183.004298][ T7283] __vm_enough_memory: pid: 7283, comm: syz.3.348, bytes: 4398046511104 not enough memory for the allocation [ 183.380447][ T7293] ptp ptp0: new virtual clock ptp1 [ 183.389666][ T7293] ptp ptp0: guarantee physical clock free running [ 183.405091][ T7295] ptp ptp0: delete virtual clock ptp1 [ 183.481432][ T7293] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 183.521522][ T7295] ptp ptp0: only physical clock in use now [ 184.316069][ T7314] smpboot: CPU 1 is now offline [ 185.830931][ T7337] blktrace: Concurrent blktraces are not allowed on loop2 [ 186.567919][ T6679] syz.0.212 (6679) used greatest stack depth: 17624 bytes left [ 188.836501][ T7403] blktrace: Concurrent blktraces are not allowed on loop2 [ 190.110898][ T30] audit: type=1804 audit(4294967305.670:20): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.373" name="/newroot/96/file0" dev="tmpfs" ino=512 res=1 errno=0 [ 190.225599][ T30] audit: type=1804 audit(4294967305.710:21): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.373" name="/newroot/96/file0" dev="tmpfs" ino=512 res=1 errno=0 [ 191.423490][ T7438] blktrace: Concurrent blktraces are not allowed on loop2 [ 193.120583][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.130187][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.142577][ T7498] blktrace: Concurrent blktraces are not allowed on loop2 [ 193.876270][ T7501] netlink: 13 bytes leftover after parsing attributes in process `syz.0.393'. [ 193.982097][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 194.834587][ T7516] netlink: 25 bytes leftover after parsing attributes in process `syz.1.396'. [ 196.260600][ T7567] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 196.295619][ T7568] blktrace: Concurrent blktraces are not allowed on loop2 [ 196.714145][ T7574] netlink: 146 bytes leftover after parsing attributes in process `syz.3.411'. [ 196.792927][ T7574] FAULT_INJECTION: forcing a failure. [ 196.792927][ T7574] name failslab, interval 1, probability 0, space 0, times 0 [ 196.853897][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.3.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.853924][ T7574] Tainted: [L]=SOFTLOCKUP [ 196.853929][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.853949][ T7574] Call Trace: [ 196.853955][ T7574] [ 196.853961][ T7574] dump_stack_lvl+0x100/0x190 [ 196.853984][ T7574] should_fail_ex.cold+0x5/0xa [ 196.854005][ T7574] should_failslab+0xc2/0x120 [ 196.854024][ T7574] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 196.854047][ T7574] ? proc_alloc_inode+0x25/0x200 [ 196.854064][ T7574] ? d_alloc_parallel+0x864/0x14e0 [ 196.854081][ T7574] ? __pfx_proc_alloc_inode+0x10/0x10 [ 196.854098][ T7574] proc_alloc_inode+0x25/0x200 [ 196.854113][ T7574] alloc_inode+0x68/0x250 [ 196.854139][ T7574] new_inode+0x22/0x1c0 [ 196.854162][ T7574] proc_get_inode+0x1d/0x780 [ 196.854180][ T7574] proc_lookup_de+0x236/0x360 [ 196.854202][ T7574] proc_lookup+0xcf/0x110 [ 196.854220][ T7574] lookup_open.isra.0+0x631/0x11b0 [ 196.854240][ T7574] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 196.854274][ T7574] ? mnt_get_write_access+0x1e9/0x2f0 [ 196.854301][ T7574] path_openat+0xa98/0x31a0 [ 196.854326][ T7574] ? __pfx_path_openat+0x10/0x10 [ 196.854352][ T7574] do_file_open+0x20e/0x430 [ 196.854372][ T7574] ? __pfx_do_file_open+0x10/0x10 [ 196.854404][ T7574] ? alloc_fd+0x476/0x790 [ 196.854423][ T7574] ? do_getname+0x191/0x390 [ 196.854445][ T7574] do_sys_openat2+0x10d/0x1e0 [ 196.854467][ T7574] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.854490][ T7574] ? __fget_files+0x21f/0x3d0 [ 196.854511][ T7574] __x64_sys_openat+0x12d/0x210 [ 196.854533][ T7574] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.854558][ T7574] ? rcu_is_watching+0x12/0xc0 [ 196.854578][ T7574] do_syscall_64+0x10b/0xf80 [ 196.854597][ T7574] ? clear_bhb_loop+0x40/0x90 [ 196.854615][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.854630][ T7574] RIP: 0033:0x7fa31439cdd9 [ 196.854644][ T7574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.854658][ T7574] RSP: 002b:00007fa3151c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.854673][ T7574] RAX: ffffffffffffffda RBX: 00007fa314615fa0 RCX: 00007fa31439cdd9 [ 196.854682][ T7574] RDX: 0000000000000402 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 196.854691][ T7574] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000000 [ 196.854700][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.854709][ T7574] R13: 00007fa314616038 R14: 00007fa314615fa0 R15: 00007ffc0b306948 [ 196.854729][ T7574] [ 199.511974][ T7614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 199.989562][ T7611] binder: 7601:7611 ioctl c00c620f 200000000080 returned -22 [ 201.093746][ T7632] netlink: 11840 bytes leftover after parsing attributes in process `syz.0.424'. [ 201.209115][ T7632] netlink: 10660 bytes leftover after parsing attributes in process `syz.0.424'. [ 201.887930][ T7647] blktrace: Concurrent blktraces are not allowed on loop2 [ 201.913424][ T7642] Console: switching to colour VGA+ 80x25 [ 202.425635][ T7651] QAT: Device 250 not found [ 203.238576][ T7664] FAULT_INJECTION: forcing a failure. [ 203.238576][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 203.298299][ T7664] CPU: 0 UID: 0 PID: 7664 Comm: syz.0.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.298327][ T7664] Tainted: [L]=SOFTLOCKUP [ 203.298332][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.298341][ T7664] Call Trace: [ 203.298347][ T7664] [ 203.298354][ T7664] dump_stack_lvl+0x100/0x190 [ 203.298376][ T7664] should_fail_ex.cold+0x5/0xa [ 203.298396][ T7664] should_failslab+0xc2/0x120 [ 203.298414][ T7664] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 203.298436][ T7664] ? alloc_uid+0x13d/0x4c0 [ 203.298455][ T7664] ? rcu_is_watching+0x12/0xc0 [ 203.298476][ T7664] alloc_uid+0x13d/0x4c0 [ 203.298496][ T7664] ? __pfx_alloc_uid+0x10/0x10 [ 203.298516][ T7664] ? bpf_lsm_cred_prepare+0x9/0x10 [ 203.298539][ T7664] ? security_prepare_creds+0xa8/0x290 [ 203.298563][ T7664] __sys_setresuid+0x4f2/0x1280 [ 203.298585][ T7664] do_syscall_64+0x10b/0xf80 [ 203.298604][ T7664] ? clear_bhb_loop+0x40/0x90 [ 203.298623][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.298639][ T7664] RIP: 0033:0x7f075019cdd9 [ 203.298652][ T7664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.298665][ T7664] RSP: 002b:00007f0750fc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 203.298680][ T7664] RAX: ffffffffffffffda RBX: 00007f0750415fa0 RCX: 00007f075019cdd9 [ 203.298689][ T7664] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 203.298697][ T7664] RBP: 00007f0750232d69 R08: 0000000000000000 R09: 0000000000000000 [ 203.298705][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.298714][ T7664] R13: 00007f0750416038 R14: 00007f0750415fa0 R15: 00007ffe8bf93bf8 [ 203.298732][ T7664] [ 203.781070][ T30] audit: type=1800 audit(4294967319.280:22): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="file0" dev="tmpfs" ino=628 res=0 errno=0 [ 204.004731][ T7674] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 204.100354][ T7675] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 206.250968][ T7708] blktrace: Concurrent blktraces are not allowed on loop2 [ 206.844903][ T7724] random: crng reseeded on system resumption [ 207.143375][ T7731] netlink: 'syz.0.444': attribute type 11 has an invalid length. [ 207.190275][ T7731] netlink: 52 bytes leftover after parsing attributes in process `syz.0.444'. [ 207.256203][ T7731] netlink: 17 bytes leftover after parsing attributes in process `syz.0.444'. [ 208.058685][ T7731] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.620056][ T7731] cougar: G6 mapped to space [ 210.847717][ T7784] Process accounting resumed [ 211.718508][ T7811] blktrace: Concurrent blktraces are not allowed on loop2 [ 212.150077][ T7834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 212.634513][ T7842] netlink: 342 bytes leftover after parsing attributes in process `syz.0.470'. [ 212.971231][ T7852] FAULT_INJECTION: forcing a failure. [ 212.971231][ T7852] name failslab, interval 1, probability 0, space 0, times 0 [ 213.034832][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.3.473 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.034856][ T7852] Tainted: [L]=SOFTLOCKUP [ 213.034861][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.034869][ T7852] Call Trace: [ 213.034874][ T7852] [ 213.034880][ T7852] dump_stack_lvl+0x100/0x190 [ 213.034900][ T7852] should_fail_ex.cold+0x5/0xa [ 213.034919][ T7852] should_failslab+0xc2/0x120 [ 213.034936][ T7852] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 213.034959][ T7852] ? __d_alloc+0x34/0xa40 [ 213.034982][ T7852] __d_alloc+0x34/0xa40 [ 213.035003][ T7852] d_alloc+0x4a/0x1e0 [ 213.035023][ T7852] lookup_one_qstr_excl+0x171/0x250 [ 213.035047][ T7852] start_dirop+0x59/0xb0 [ 213.035063][ T7852] simple_start_creating+0xf9/0x110 [ 213.035081][ T7852] ? __pfx_simple_start_creating+0x10/0x10 [ 213.035098][ T7852] ? mntput+0x70/0xa0 [ 213.035113][ T7852] ? simple_pin_fs+0xa3/0x190 [ 213.035128][ T7852] debugfs_start_creating.part.0+0x82/0x170 [ 213.035151][ T7852] __debugfs_create_file+0xb3/0x4f0 [ 213.035181][ T7852] debugfs_create_file_full+0x41/0x60 [ 213.035204][ T7852] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 213.035223][ T7852] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 213.035239][ T7852] ? ida_alloc_range+0x70d/0x830 [ 213.035277][ T7852] ? lockdep_init_map_type+0x5c/0x250 [ 213.035295][ T7852] preinit_net.part.0+0x252/0x920 [ 213.035313][ T7852] copy_net_ns+0x339/0x7c0 [ 213.035332][ T7852] create_new_namespaces+0x3ea/0xac0 [ 213.035356][ T7852] unshare_nsproxy_namespaces+0xf2/0x220 [ 213.035376][ T7852] ksys_unshare+0x438/0xab0 [ 213.035400][ T7852] ? __pfx_ksys_unshare+0x10/0x10 [ 213.035420][ T7852] ? xfd_validate_state+0x129/0x190 [ 213.035434][ T7852] ? ksys_write+0x1ac/0x250 [ 213.035455][ T7852] __x64_sys_unshare+0x31/0x40 [ 213.035476][ T7852] do_syscall_64+0x10b/0xf80 [ 213.035494][ T7852] ? clear_bhb_loop+0x40/0x90 [ 213.035511][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.035526][ T7852] RIP: 0033:0x7fa31439cdd9 [ 213.035538][ T7852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.035550][ T7852] RSP: 002b:00007fa3151c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 213.035564][ T7852] RAX: ffffffffffffffda RBX: 00007fa314615fa0 RCX: 00007fa31439cdd9 [ 213.035574][ T7852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 213.035581][ T7852] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000000 [ 213.035590][ T7852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.035597][ T7852] R13: 00007fa314616038 R14: 00007fa314615fa0 R15: 00007ffc0b306948 [ 213.035615][ T7852] [ 214.841294][ T7868] blktrace: Concurrent blktraces are not allowed on loop2 [ 215.066862][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.481'. [ 215.670828][ T7895] random: crng reseeded on system resumption [ 217.654933][ T7932] blktrace: Concurrent blktraces are not allowed on loop2 [ 218.589464][ T7924] FAULT_INJECTION: forcing a failure. [ 218.589464][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 218.755687][ T7924] CPU: 0 UID: 0 PID: 7924 Comm: syz.3.491 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.755715][ T7924] Tainted: [L]=SOFTLOCKUP [ 218.755721][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.755730][ T7924] Call Trace: [ 218.755735][ T7924] [ 218.755741][ T7924] dump_stack_lvl+0x100/0x190 [ 218.755763][ T7924] should_fail_ex.cold+0x5/0xa [ 218.755783][ T7924] should_failslab+0xc2/0x120 [ 218.755801][ T7924] __kmalloc_cache_noprof+0x7a/0x6f0 [ 218.755821][ T7924] ? device_add+0xd3a/0x1950 [ 218.755843][ T7924] device_add+0xd3a/0x1950 [ 218.755860][ T7924] ? dev_set_name+0xc7/0x100 [ 218.755880][ T7924] ? __pfx_dev_set_name+0x10/0x10 [ 218.755902][ T7924] ? __pfx_device_add+0x10/0x10 [ 218.755919][ T7924] ? lockdep_init_map_type+0x5c/0x250 [ 218.755935][ T7924] ? __init_waitqueue_head+0xca/0x150 [ 218.755958][ T7924] rfkill_register+0x1ad/0xb30 [ 218.755977][ T7924] nfc_register_device+0x11f/0x3e0 [ 218.755997][ T7924] nci_register_device+0x7f1/0xb80 [ 218.756014][ T7924] ? __pfx_nci_register_device+0x10/0x10 [ 218.756031][ T7924] ? lockdep_init_map_type+0x5c/0x250 [ 218.756049][ T7924] virtual_ncidev_open+0x141/0x220 [ 218.756071][ T7924] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 218.756092][ T7924] misc_open+0x26d/0x450 [ 218.756110][ T7924] ? __pfx_misc_open+0x10/0x10 [ 218.756127][ T7924] chrdev_open+0x234/0x6a0 [ 218.756145][ T7924] ? __pfx_apparmor_file_open+0x10/0x10 [ 218.756167][ T7924] ? __pfx_chrdev_open+0x10/0x10 [ 218.756186][ T7924] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 218.756209][ T7924] do_dentry_open+0x6d8/0x1660 [ 218.756226][ T7924] ? __pfx_chrdev_open+0x10/0x10 [ 218.756249][ T7924] vfs_open+0x82/0x3f0 [ 218.756272][ T7924] path_openat+0x208c/0x31a0 [ 218.756297][ T7924] ? __pfx_path_openat+0x10/0x10 [ 218.756322][ T7924] do_file_open+0x20e/0x430 [ 218.756341][ T7924] ? __pfx_do_file_open+0x10/0x10 [ 218.756373][ T7924] ? alloc_fd+0x476/0x790 [ 218.756392][ T7924] ? do_getname+0x191/0x390 [ 218.756415][ T7924] do_sys_openat2+0x10d/0x1e0 [ 218.756437][ T7924] ? __pfx_do_sys_openat2+0x10/0x10 [ 218.756466][ T7924] __x64_sys_openat+0x12d/0x210 [ 218.756488][ T7924] ? __pfx___x64_sys_openat+0x10/0x10 [ 218.756514][ T7924] ? rcu_is_watching+0x12/0xc0 [ 218.756542][ T7924] do_syscall_64+0x10b/0xf80 [ 218.756562][ T7924] ? clear_bhb_loop+0x40/0x90 [ 218.756581][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.756595][ T7924] RIP: 0033:0x7fa31439cdd9 [ 218.756609][ T7924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.756623][ T7924] RSP: 002b:00007fa3151c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 218.756637][ T7924] RAX: ffffffffffffffda RBX: 00007fa314615fa0 RCX: 00007fa31439cdd9 [ 218.756647][ T7924] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 218.756657][ T7924] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000000 [ 218.756666][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.756675][ T7924] R13: 00007fa314616038 R14: 00007fa314615fa0 R15: 00007ffc0b306948 [ 218.756696][ T7924] [ 220.306648][ T30] audit: type=1800 audit(4294967335.870:23): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.497" name="file0" dev="tmpfs" ino=752 res=0 errno=0 [ 221.241918][ T7973] random: crng reseeded on system resumption [ 222.439092][ T8001] blktrace: Concurrent blktraces are not allowed on loop2 [ 223.931818][ T8014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.507'. [ 226.571418][ T8064] blktrace: Concurrent blktraces are not allowed on loop2 [ 226.826037][ T8067] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.194447][ T8067] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.567791][ T8067] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.689251][ T8067] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.742308][ T8125] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 230.883372][ T8127] kexec: Could not allocate control_code_buffer [ 231.978163][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 232.335765][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 232.587194][ T8194] FAULT_INJECTION: forcing a failure. [ 232.587194][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 232.660394][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.2.545 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.660420][ T8194] Tainted: [L]=SOFTLOCKUP [ 232.660426][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.660435][ T8194] Call Trace: [ 232.660440][ T8194] [ 232.660446][ T8194] dump_stack_lvl+0x100/0x190 [ 232.660470][ T8194] should_fail_ex.cold+0x5/0xa [ 232.660491][ T8194] should_failslab+0xc2/0x120 [ 232.660509][ T8194] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 232.660541][ T8194] ? __kernfs_new_node+0xd2/0x9f0 [ 232.660563][ T8194] __kernfs_new_node+0xd2/0x9f0 [ 232.660579][ T8194] ? kernfs_add_one+0x583/0x850 [ 232.660600][ T8194] ? __pfx___kernfs_new_node+0x10/0x10 [ 232.660621][ T8194] ? find_held_lock+0x2b/0x80 [ 232.660641][ T8194] ? kernfs_root+0xee/0x2a0 [ 232.660655][ T8194] ? kernfs_root+0xee/0x2a0 [ 232.660675][ T8194] kernfs_new_node+0x11b/0x1a0 [ 232.660696][ T8194] __kernfs_create_file+0x53/0x350 [ 232.660720][ T8194] sysfs_add_file_mode_ns+0x207/0x3c0 [ 232.660740][ T8194] sysfs_create_file_ns+0x145/0x1e0 [ 232.660755][ T8194] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 232.660770][ T8194] ? __pfx___up_read+0x10/0x10 [ 232.660786][ T8194] ? acpi_device_notify+0x464/0x500 [ 232.660801][ T8194] ? kobject_put+0xb9/0x640 [ 232.660825][ T8194] device_create_file+0xf2/0x1d0 [ 232.660848][ T8194] device_add+0x2cb/0x1950 [ 232.660866][ T8194] ? __pfx_dev_set_name+0x10/0x10 [ 232.660886][ T8194] ? __pfx_device_add+0x10/0x10 [ 232.660903][ T8194] ? lockdep_init_map_type+0x5c/0x250 [ 232.660918][ T8194] ? __init_waitqueue_head+0xca/0x150 [ 232.660940][ T8194] rfkill_register+0x1ad/0xb30 [ 232.660964][ T8194] nfc_register_device+0x11f/0x3e0 [ 232.660987][ T8194] nci_register_device+0x7f1/0xb80 [ 232.661003][ T8194] ? __pfx_nci_register_device+0x10/0x10 [ 232.661021][ T8194] ? lockdep_init_map_type+0x5c/0x250 [ 232.661040][ T8194] virtual_ncidev_open+0x141/0x220 [ 232.661063][ T8194] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 232.661084][ T8194] misc_open+0x26d/0x450 [ 232.661102][ T8194] ? __pfx_misc_open+0x10/0x10 [ 232.661118][ T8194] chrdev_open+0x234/0x6a0 [ 232.661136][ T8194] ? __pfx_apparmor_file_open+0x10/0x10 [ 232.661159][ T8194] ? __pfx_chrdev_open+0x10/0x10 [ 232.661178][ T8194] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 232.661201][ T8194] do_dentry_open+0x6d8/0x1660 [ 232.661218][ T8194] ? __pfx_chrdev_open+0x10/0x10 [ 232.661241][ T8194] vfs_open+0x82/0x3f0 [ 232.661264][ T8194] path_openat+0x208c/0x31a0 [ 232.661289][ T8194] ? __pfx_path_openat+0x10/0x10 [ 232.661314][ T8194] do_file_open+0x20e/0x430 [ 232.661333][ T8194] ? __pfx_do_file_open+0x10/0x10 [ 232.661365][ T8194] ? alloc_fd+0x476/0x790 [ 232.661384][ T8194] ? do_getname+0x191/0x390 [ 232.661406][ T8194] do_sys_openat2+0x10d/0x1e0 [ 232.661428][ T8194] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.661457][ T8194] __x64_sys_openat+0x12d/0x210 [ 232.661479][ T8194] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.661504][ T8194] ? rcu_is_watching+0x12/0xc0 [ 232.661524][ T8194] do_syscall_64+0x10b/0xf80 [ 232.661550][ T8194] ? clear_bhb_loop+0x40/0x90 [ 232.661570][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.661586][ T8194] RIP: 0033:0x7f005619cdd9 [ 232.661600][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.661615][ T8194] RSP: 002b:00007f005707c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.661630][ T8194] RAX: ffffffffffffffda RBX: 00007f0056416090 RCX: 00007f005619cdd9 [ 232.661639][ T8194] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 232.661648][ T8194] RBP: 00007f0056232d69 R08: 0000000000000000 R09: 0000000000000000 [ 232.661657][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.661667][ T8194] R13: 00007f0056416128 R14: 00007f0056416090 R15: 00007fff40cfc978 [ 232.661687][ T8194] [ 233.245234][ T8205] blktrace: Concurrent blktraces are not allowed on loop2 [ 234.594262][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 234.641421][ T8240] netlink: 25 bytes leftover after parsing attributes in process `syz.0.556'. [ 237.364019][ T8293] i2c i2c-0: new_device: Invalid device name [ 237.400952][ T8295] i2c i2c-0: new_device: Invalid device name [ 238.947695][ T8317] FAULT_INJECTION: forcing a failure. [ 238.947695][ T8317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.041189][ T8317] CPU: 0 UID: 0 PID: 8317 Comm: syz.3.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.041217][ T8317] Tainted: [L]=SOFTLOCKUP [ 239.041222][ T8317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.041231][ T8317] Call Trace: [ 239.041236][ T8317] [ 239.041242][ T8317] dump_stack_lvl+0x100/0x190 [ 239.041264][ T8317] should_fail_ex.cold+0x5/0xa [ 239.041284][ T8317] _copy_to_iter+0x1f3/0x1720 [ 239.041312][ T8317] ? __pfx__copy_to_iter+0x10/0x10 [ 239.041337][ T8317] ? _copy_to_iter+0x2bd/0x1720 [ 239.041361][ T8317] ? __pfx___lock_sock+0x10/0x10 [ 239.041385][ T8317] simple_copy_to_iter+0x46/0x90 [ 239.041416][ T8317] __skb_datagram_iter+0x129/0x900 [ 239.041438][ T8317] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 239.041460][ T8317] ? __local_bh_enable_ip+0x9e/0x120 [ 239.041485][ T8317] __skb_datagram_iter+0x749/0x900 [ 239.041506][ T8317] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 239.041528][ T8317] ? __pfx_autoremove_wake_function+0x10/0x10 [ 239.041555][ T8317] skb_copy_datagram_iter+0xa5/0x270 [ 239.041580][ T8317] sctp_recvmsg+0x253/0xe10 [ 239.041599][ T8317] ? __pfx_aa_sk_perm+0x10/0x10 [ 239.041616][ T8317] ? __pfx_sctp_recvmsg+0x10/0x10 [ 239.041638][ T8317] ? __pfx_sctp_recvmsg+0x10/0x10 [ 239.041655][ T8317] inet_recvmsg+0x455/0x4c0 [ 239.041677][ T8317] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 239.041698][ T8317] ? __pfx_inet_recvmsg+0x10/0x10 [ 239.041720][ T8317] sock_recvmsg+0x187/0x1f0 [ 239.041740][ T8317] sock_read_iter+0x2c6/0x3c0 [ 239.041759][ T8317] ? __pfx_sock_read_iter+0x10/0x10 [ 239.041787][ T8317] ? bpf_lsm_file_permission+0x9/0x10 [ 239.041800][ T8317] ? security_file_permission+0x76/0x210 [ 239.041817][ T8317] ? rw_verify_area+0xce/0x6d0 [ 239.041831][ T8317] ? __pfx_sock_read_iter+0x10/0x10 [ 239.041850][ T8317] vfs_read+0x957/0xb30 [ 239.041869][ T8317] ? __pfx_vfs_read+0x10/0x10 [ 239.041884][ T8317] ? find_held_lock+0x2b/0x80 [ 239.041914][ T8317] ksys_read+0x1f8/0x250 [ 239.041930][ T8317] ? __pfx_ksys_read+0x10/0x10 [ 239.041947][ T8317] ? rcu_is_watching+0x12/0xc0 [ 239.041967][ T8317] do_syscall_64+0x10b/0xf80 [ 239.041985][ T8317] ? clear_bhb_loop+0x40/0x90 [ 239.042003][ T8317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.042018][ T8317] RIP: 0033:0x7fa31439cdd9 [ 239.042031][ T8317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.042045][ T8317] RSP: 002b:00007fa3151a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.042059][ T8317] RAX: ffffffffffffffda RBX: 00007fa314616090 RCX: 00007fa31439cdd9 [ 239.042069][ T8317] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000003 [ 239.042078][ T8317] RBP: 00007fa314432d69 R08: 0000000000000000 R09: 0000000000000000 [ 239.042087][ T8317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.042096][ T8317] R13: 00007fa314616128 R14: 00007fa314616090 R15: 00007ffc0b306948 [ 239.042116][ T8317] [ 240.346998][ T8337] blktrace: Concurrent blktraces are not allowed on loop2 [ 241.072208][ T8351] FAULT_INJECTION: forcing a failure. [ 241.072208][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 241.129144][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.0.581 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.129169][ T8351] Tainted: [L]=SOFTLOCKUP [ 241.129174][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.129182][ T8351] Call Trace: [ 241.129187][ T8351] [ 241.129196][ T8351] dump_stack_lvl+0x100/0x190 [ 241.129216][ T8351] should_fail_ex.cold+0x5/0xa [ 241.129236][ T8351] ? tomoyo_encode2+0xfb/0x3c0 [ 241.129252][ T8351] should_failslab+0xc2/0x120 [ 241.129269][ T8351] __kmalloc_noprof+0xe0/0x850 [ 241.129291][ T8351] ? d_absolute_path+0x136/0x1b0 [ 241.129308][ T8351] tomoyo_encode2+0xfb/0x3c0 [ 241.129328][ T8351] tomoyo_encode+0x29/0x50 [ 241.129344][ T8351] tomoyo_realpath_from_path+0x18c/0x690 [ 241.129366][ T8351] tomoyo_path_number_perm+0x23c/0x580 [ 241.129379][ T8351] ? tomoyo_path_number_perm+0x22e/0x580 [ 241.129394][ T8351] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 241.129415][ T8351] ? do_raw_spin_lock+0x128/0x260 [ 241.129441][ T8351] ? find_held_lock+0x2b/0x80 [ 241.129458][ T8351] ? current_check_access_path+0x269/0x430 [ 241.129477][ T8351] ? __pfx_current_check_access_path+0x10/0x10 [ 241.129493][ T8351] ? do_raw_spin_unlock+0x145/0x1e0 [ 241.129511][ T8351] ? simple_lookup+0x105/0x1d0 [ 241.129531][ T8351] tomoyo_path_mknod+0x164/0x190 [ 241.129551][ T8351] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 241.129572][ T8351] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 241.129596][ T8351] security_path_mknod+0x161/0x300 [ 241.129615][ T8351] filename_mknodat+0x241/0x7f0 [ 241.129637][ T8351] ? __pfx_filename_mknodat+0x10/0x10 [ 241.129655][ T8351] ? strncpy_from_user+0x19d/0x2d0 [ 241.129672][ T8351] ? do_getname+0x191/0x390 [ 241.129694][ T8351] __x64_sys_mknod+0x8f/0xc0 [ 241.129713][ T8351] do_syscall_64+0x10b/0xf80 [ 241.129732][ T8351] ? clear_bhb_loop+0x40/0x90 [ 241.129749][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.129763][ T8351] RIP: 0033:0x7f075019cdd9 [ 241.129775][ T8351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.129788][ T8351] RSP: 002b:00007f0750fc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 241.129802][ T8351] RAX: ffffffffffffffda RBX: 00007f0750415fa0 RCX: 00007f075019cdd9 [ 241.129811][ T8351] RDX: 0000000000000044 RSI: 0000000000001001 RDI: 0000200000000040 [ 241.129819][ T8351] RBP: 00007f0750232d69 R08: 0000000000000000 R09: 0000000000000000 [ 241.129827][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.129834][ T8351] R13: 00007f0750416038 R14: 00007f0750415fa0 R15: 00007ffe8bf93bf8 [ 241.129853][ T8351] [ 242.109012][ T8358] tc_dump_action: action bad kind [ 242.385070][ T8358] zswap: compressor not available [ 242.433303][ T8351] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.580256][ T8376] ================================================================== [ 242.580272][ T8376] BUG: KASAN: slab-out-of-bounds in do_con_write+0x3a8d/0x4a10 [ 242.580302][ T8376] Write of size 2 at addr ffff8880560d9a60 by task syz.0.585/8376 [ 242.580314][ T8376] [ 242.580324][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.0.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.580344][ T8376] Tainted: [L]=SOFTLOCKUP [ 242.580349][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.580361][ T8376] Call Trace: [ 242.580366][ T8376] [ 242.580372][ T8376] dump_stack_lvl+0x100/0x190 [ 242.580388][ T8376] print_report+0x13d/0x4b0 [ 242.580410][ T8376] ? __virt_addr_valid+0x239/0x430 [ 242.580434][ T8376] ? do_con_write+0x3a8d/0x4a10 [ 242.580454][ T8376] kasan_report+0xdf/0x1d0 [ 242.580470][ T8376] ? do_con_write+0x3a8d/0x4a10 [ 242.580493][ T8376] do_con_write+0x3a8d/0x4a10 [ 242.580514][ T8376] ? trace_contention_end+0x122/0x170 [ 242.580533][ T8376] ? __pfx_do_con_write+0x10/0x10 [ 242.580557][ T8376] con_write+0x23/0xb0 [ 242.580578][ T8376] n_tty_write+0x431/0x11c0 [ 242.580596][ T8376] ? __pfx_n_tty_write+0x10/0x10 [ 242.580610][ T8376] ? trace_kmalloc+0xe3/0x110 [ 242.580626][ T8376] ? __pfx_woken_wake_function+0x10/0x10 [ 242.580644][ T8376] ? rcu_is_watching+0x12/0xc0 [ 242.580660][ T8376] ? file_tty_write.isra.0+0x694/0x890 [ 242.580683][ T8376] ? kfree+0x1dd/0x6c0 [ 242.580702][ T8376] ? __pfx_n_tty_write+0x10/0x10 [ 242.580717][ T8376] file_tty_write.isra.0+0x4d2/0x890 [ 242.580739][ T8376] redirected_tty_write+0xd4/0x120 [ 242.580759][ T8376] vfs_write+0x6ac/0x1070 [ 242.580775][ T8376] ? __pfx_redirected_tty_write+0x10/0x10 [ 242.580797][ T8376] ? __pfx_vfs_write+0x10/0x10 [ 242.580811][ T8376] ? find_held_lock+0x2b/0x80 [ 242.580834][ T8376] ksys_write+0x12a/0x250 [ 242.580850][ T8376] ? __pfx_ksys_write+0x10/0x10 [ 242.580866][ T8376] ? rcu_is_watching+0x12/0xc0 [ 242.580883][ T8376] do_syscall_64+0x10b/0xf80 [ 242.580901][ T8376] ? clear_bhb_loop+0x40/0x90 [ 242.580918][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.580932][ T8376] RIP: 0033:0x7f075019cdd9 [ 242.580945][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.580959][ T8376] RSP: 002b:00007f0750fc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.580976][ T8376] RAX: ffffffffffffffda RBX: 00007f0750415fa0 RCX: 00007f075019cdd9 [ 242.580987][ T8376] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 242.580996][ T8376] RBP: 00007f0750232d69 R08: 0000000000000000 R09: 0000000000000000 [ 242.581005][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.581014][ T8376] R13: 00007f0750416038 R14: 00007f0750415fa0 R15: 00007ffe8bf93bf8 [ 242.581028][ T8376] [ 242.581033][ T8376] [ 242.581036][ T8376] Allocated by task 4992: [ 242.581046][ T8376] kasan_save_stack+0x30/0x50 [ 242.581060][ T8376] kasan_save_track+0x14/0x30 [ 242.581072][ T8376] __kasan_kmalloc+0xaa/0xb0 [ 242.581091][ T8376] __kmalloc_noprof+0x301/0x850 [ 242.581113][ T8376] tomoyo_realpath_from_path+0xb6/0x690 [ 242.581131][ T8376] tomoyo_path_perm+0x276/0x460 [ 242.581144][ T8376] security_inode_getattr+0x116/0x280 [ 242.581158][ T8376] vfs_fstat+0x4b/0xe0 [ 242.581175][ T8376] __do_sys_newfstat+0x8b/0x110 [ 242.581193][ T8376] do_syscall_64+0x10b/0xf80 [ 242.581210][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.581224][ T8376] [ 242.581228][ T8376] Freed by task 4992: [ 242.581234][ T8376] kasan_save_stack+0x30/0x50 [ 242.581247][ T8376] kasan_save_track+0x14/0x30 [ 242.581260][ T8376] kasan_save_free_info+0x3b/0x70 [ 242.581278][ T8376] __kasan_slab_free+0x5f/0x80 [ 242.581290][ T8376] kfree+0x223/0x6c0 [ 242.581308][ T8376] tomoyo_realpath_from_path+0x19c/0x690 [ 242.581324][ T8376] tomoyo_path_perm+0x276/0x460 [ 242.581336][ T8376] security_inode_getattr+0x116/0x280 [ 242.581349][ T8376] vfs_fstat+0x4b/0xe0 [ 242.581366][ T8376] __do_sys_newfstat+0x8b/0x110 [ 242.581384][ T8376] do_syscall_64+0x10b/0xf80 [ 242.581401][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.581414][ T8376] [ 242.581417][ T8376] The buggy address belongs to the object at ffff8880560d8000 [ 242.581417][ T8376] which belongs to the cache kmalloc-4k of size 4096 [ 242.581429][ T8376] The buggy address is located 2656 bytes to the right of [ 242.581429][ T8376] allocated 4096-byte region [ffff8880560d8000, ffff8880560d9000) [ 242.581443][ T8376] [ 242.581450][ T8376] The buggy address belongs to the physical page: [ 242.581456][ T8376] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x560d8 [ 242.581472][ T8376] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 242.581484][ T8376] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 242.581499][ T8376] page_type: f5(slab) [ 242.581513][ T8376] raw: 00fff00000000040 ffff88813fe2f140 dead000000000100 dead000000000122 [ 242.581529][ T8376] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 242.581542][ T8376] head: 00fff00000000040 ffff88813fe2f140 dead000000000100 dead000000000122 [ 242.581554][ T8376] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 242.581567][ T8376] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 242.581580][ T8376] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 242.581587][ T8376] page dumped because: kasan: bad access detected [ 242.581600][ T8376] page_owner tracks the page as allocated [ 242.581605][ T8376] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 36, tgid 36 (kworker/u8:2), ts 169630731316, free_ts 169561923157 [ 242.581630][ T8376] post_alloc_hook+0x153/0x170 [ 242.581651][ T8376] get_page_from_freelist+0x11a6/0x33b0 [ 242.581673][ T8376] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 242.581695][ T8376] new_slab+0xa6/0x6c0 [ 242.581713][ T8376] refill_objects+0x277/0x420 [ 242.581732][ T8376] __pcs_replace_empty_main+0x375/0x650 [ 242.581753][ T8376] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 242.581767][ T8376] kmalloc_reserve+0xe8/0x350 [ 242.581785][ T8376] __alloc_skb+0x185/0x710 [ 242.581796][ T8376] nsim_dev_trap_report_work+0x2af/0xd20 [ 242.581818][ T8376] process_one_work+0xa0e/0x1980 [ 242.581831][ T8376] worker_thread+0x5ef/0xe50 [ 242.581844][ T8376] kthread+0x370/0x450 [ 242.581855][ T8376] ret_from_fork+0x72b/0xd50 [ 242.581869][ T8376] ret_from_fork_asm+0x1a/0x30 [ 242.581887][ T8376] page last free pid 0 tgid 0 stack trace: [ 242.581894][ T8376] __free_frozen_pages+0x747/0x1040 [ 242.581912][ T8376] __folio_put+0x3b4/0x5f0 [ 242.581935][ T8376] skb_release_data+0x649/0x8e0 [ 242.581947][ T8376] __kfree_skb+0x4f/0x70 [ 242.581960][ T8376] tcp_ack+0x2086/0x7670 [ 242.581979][ T8376] tcp_rcv_established+0x7f6/0x3910 [ 242.581999][ T8376] tcp_v4_do_rcv+0xbb8/0x1200 [ 242.582019][ T8376] tcp_v4_rcv+0x2e26/0x4720 [ 242.582030][ T8376] ip_protocol_deliver_rcu+0xba/0x4d0 [ 242.582044][ T8376] ip_local_deliver_finish+0x3f2/0x6e0 [ 242.582059][ T8376] ip_local_deliver+0x19a/0x1f0 [ 242.582072][ T8376] ip_list_rcv_finish+0xa14/0xce0 [ 242.582092][ T8376] ip_list_rcv+0x338/0x450 [ 242.582106][ T8376] __netif_receive_skb_list_core+0x74c/0x940 [ 242.582127][ T8376] netif_receive_skb_list_internal+0x722/0xd40 [ 242.582149][ T8376] napi_complete_done+0x221/0x940 [ 242.582170][ T8376] [ 242.582173][ T8376] Memory state around the buggy address: [ 242.582181][ T8376] ffff8880560d9900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.582191][ T8376] ffff8880560d9980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.582201][ T8376] >ffff8880560d9a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.582208][ T8376] ^ [ 242.582216][ T8376] ffff8880560d9a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.582226][ T8376] ffff8880560d9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 242.582233][ T8376] ================================================================== [ 242.584901][ T8376] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 242.584918][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.0.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.584940][ T8376] Tainted: [L]=SOFTLOCKUP [ 242.584946][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.584955][ T8376] Call Trace: [ 242.584961][ T8376] [ 242.584967][ T8376] dump_stack_lvl+0x100/0x190 [ 242.584986][ T8376] vpanic+0x552/0x970 [ 242.585001][ T8376] ? __pfx_vpanic+0x10/0x10 [ 242.585017][ T8376] ? do_con_write+0x3a8d/0x4a10 [ 242.585039][ T8376] panic+0xd1/0xe0 [ 242.585052][ T8376] ? __pfx_panic+0x10/0x10 [ 242.585066][ T8376] ? do_con_write+0x3a8d/0x4a10 [ 242.585094][ T8376] ? preempt_schedule_common+0x42/0xc0 [ 242.585115][ T8376] check_panic_on_warn.cold+0x19/0x34 [ 242.585131][ T8376] end_report.part.0+0x3a/0x90 [ 242.585151][ T8376] kasan_report.cold+0xe/0x18 [ 242.585173][ T8376] ? do_con_write+0x3a8d/0x4a10 [ 242.585196][ T8376] do_con_write+0x3a8d/0x4a10 [ 242.585216][ T8376] ? trace_contention_end+0x122/0x170 [ 242.585236][ T8376] ? __pfx_do_con_write+0x10/0x10 [ 242.585261][ T8376] con_write+0x23/0xb0 [ 242.585281][ T8376] n_tty_write+0x431/0x11c0 [ 242.585300][ T8376] ? __pfx_n_tty_write+0x10/0x10 [ 242.585314][ T8376] ? trace_kmalloc+0xe3/0x110 [ 242.585331][ T8376] ? __pfx_woken_wake_function+0x10/0x10 [ 242.585349][ T8376] ? rcu_is_watching+0x12/0xc0 [ 242.585366][ T8376] ? file_tty_write.isra.0+0x694/0x890 [ 242.585386][ T8376] ? kfree+0x1dd/0x6c0 [ 242.585405][ T8376] ? __pfx_n_tty_write+0x10/0x10 [ 242.585423][ T8376] file_tty_write.isra.0+0x4d2/0x890 [ 242.585445][ T8376] redirected_tty_write+0xd4/0x120 [ 242.585466][ T8376] vfs_write+0x6ac/0x1070 [ 242.585482][ T8376] ? __pfx_redirected_tty_write+0x10/0x10 [ 242.585504][ T8376] ? __pfx_vfs_write+0x10/0x10 [ 242.585519][ T8376] ? find_held_lock+0x2b/0x80 [ 242.585542][ T8376] ksys_write+0x12a/0x250 [ 242.585557][ T8376] ? __pfx_ksys_write+0x10/0x10 [ 242.585573][ T8376] ? rcu_is_watching+0x12/0xc0 [ 242.585591][ T8376] do_syscall_64+0x10b/0xf80 [ 242.585609][ T8376] ? clear_bhb_loop+0x40/0x90 [ 242.585625][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.585640][ T8376] RIP: 0033:0x7f075019cdd9 [ 242.585652][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.585667][ T8376] RSP: 002b:00007f0750fc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.585682][ T8376] RAX: ffffffffffffffda RBX: 00007f0750415fa0 RCX: 00007f075019cdd9 [ 242.585692][ T8376] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000003 [ 242.585701][ T8376] RBP: 00007f0750232d69 R08: 0000000000000000 R09: 0000000000000000 [ 242.585710][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.585719][ T8376] R13: 00007f0750416038 R14: 00007f0750415fa0 R15: 00007ffe8bf93bf8 [ 242.585733][ T8376] [ 242.585792][ T8376] Kernel Offset: disabled