last executing test programs: 12.53414587s ago: executing program 3 (id=329): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyt3\x00', 0x1, 0x0) r2 = socket(0x18, 0x3, 0x2) accept$auto(r2, 0x0, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b5d", 0x25) sched_get_priority_min$auto(0x40) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000f5", @ANYRES16=0x0, @ANYBLOB="00042abd7000fddbdf255f000000060051010000000004008700"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f0000002180)=""/211, 0xd3) socket(0x6, 0x2, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x10084) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0xc) setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16) 11.029414212s ago: executing program 3 (id=332): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x1, &(0x7f0000000000)={0x7, 0x8003, 0x36ec}, 0x1, 0x0) 10.89130707s ago: executing program 1 (id=333): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) mmap$auto(0x0, 0x2020009, 0x1000000000007fff, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0, 0xc6}, 0x0, 0x0, 0x0, 0xb}, 0x6}, 0x3, 0x0) getcwd$auto(&(0x7f0000000140)='/proc/sys/net/ipv6/conf/geneve0/mldv2_unsolicited_report_interval\x00', 0x2) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x80400, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) read$auto(0xffffffffffffffff, 0x0, 0x461e) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xfffffffeffffffff) fanotify_init$auto(0x8, 0x2000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/geneve0/mldv2_unsolicited_report_interval\x00', 0x202, 0x0) 10.40250264s ago: executing program 0 (id=335): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x20000, 0x0) read$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000040)=""/12, 0xc) execveat$auto(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=&(0x7f00000000c0)='\xae\x00', &(0x7f0000000180)=&(0x7f0000000140)=',m:\x00', 0x2) mkdir$auto(&(0x7f00000001c0)='./file0/file0\x00', 0x3) fsconfig$auto_FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000200)='\xae\x00', &(0x7f0000000240)="f7d0121fe5ba3522dc920cdb27a34fe9f7c492e5b36cfba46642675cb42f5e765948942437ad569d8fd5983eaccdb9703bc9ffba34e5257c6ab60472d0b4b9efefca967d16dc0df80a7ca3b45dffd476a9bc4a8a07695d8938f7e77da8964ac9a119d3ffed4530ea5027366530e20e3f2ae952cc0c7a7ebf8ab8b7b0a35bdf9b59c74d7ec2fcdbf9b31bbf5129c4234b979580a9c0fcc376d46a89de2b83c4af2f961bca83b5c9ac9cd92d3ba7b227a9f39ebbba957a10fb322660b1b130fec8882920fa8ae8d6b6c037ea9026e54f2565f1c670b27cbd6fce7a02b7c1a52dd333ed", 0x0) r1 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000340)=0x12a2) ioctl$auto_SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000380)="6b1119506db3610cfd57965b4d") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000400), r1) ioctl$auto_XFS_IOC_ALLOCSP64(r1, 0x40305824, &(0x7f0000000440)={0xfff7, 0xffff, 0x7, 0x6, 0x1, 0xffffffffffffffff}) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7f}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r5 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000540), 0x709480, 0x0) r6 = io_uring_setup$auto(0x7, &(0x7f0000000580)={0x8, 0x4, 0x7, 0x80000001, 0x10, 0x6, r5, [0xffffff8e, 0x1, 0xfffffff7], {0x7, 0x200, 0x2, 0x4, 0xd7dd, 0x61fd, 0x4, 0x101, 0x1}, {0x8, 0x7, 0xffff, 0x7f, 0x6, 0x1, 0x6, 0x0, 0x4}}) r8 = open$dir(&(0x7f0000000640)='./file0/file0\x00', 0x40000, 0x80) renameat$auto(r1, &(0x7f0000000600)='./file0\x00', r8, &(0x7f0000000680)='./file0\x00') openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snd/midiC2D0\x00', 0xa00, 0x0) r9 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000740), r1) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r9, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x2}, @IEEE802154_ATTR_SRC_SHORT_ADDR={0x6, 0xb, 0x95e8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40008) select$auto(0xe, &(0x7f0000000880)={[0xd, 0x2, 0xa00000000, 0x8, 0x2, 0x8000000000000000, 0x1, 0xfff, 0x10001, 0x100000000, 0x8000, 0xfdb6, 0x7, 0x0, 0x8001, 0x6]}, &(0x7f0000000900)={[0x5, 0x4, 0x48af, 0xe9, 0x1, 0x14a1, 0xb256, 0x9, 0x9, 0x0, 0x4, 0xccbc, 0x1, 0x1, 0x2, 0xfffffffffffffffc]}, &(0x7f0000000980)={[0x5, 0x400, 0x5, 0x9, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x0, 0x3, 0xd5c9, 0x9, 0x8000000000000001, 0x10001, 0x95e1, 0x4, 0x8000000000000001, 0x5]}, &(0x7f0000000a00)={0x9b86, 0xb}) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000a40), 0x208600, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a80), 0xffffffffffffffff) r10 = getpgid$auto(r4) ioctl$auto_BLKTRACESETUP32(r7, 0xc0401273, &(0x7f0000000ac0)={"06e981e11ea3d7c20c7cec845e55faf7d84ad0abd65b9aa93e08e3858cd2d00a", 0xe, 0x3, 0x5, 0x96, 0x0, r10}) read$auto_hpet_fops_hpet(r7, &(0x7f0000000b40)=""/141, 0x8d) move_mount$auto(r6, &(0x7f0000000c00)='./file0\x00', r6, &(0x7f0000000c40)='./file0/file0\x00', 0xb) socket(0x25, 0x3, 0x7fffffff) r11 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x40, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000cc0)={0x1, r11}) r12 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/bsg/0:0:0:0\x00', 0x404040, 0x0) ioctl$auto_SG_IO(r12, 0x2285, &(0x7f0000000d40)="991c581b658b08511fefe67a1e8970bdf4b527fbc9dd80f5e64e7672161739a802ebc4105c3adfaff5ed088353f4d043ebae4f06393ddc6b76850b47bbe36cae5e839a97b5d10dc5a344c092e58c2b96b14cce9fd129c5b85ba0317a56abb8c5629b35cf042fb717420b33687fd7b369d24a9cf04cb5339eed529dbe428750b089f18d77a6d357f774f8c516f061374a9c487201214ac2fd60003a9d890df6c21e1c810c890cdc6e681f7b1ff24eccf16571d0dac37700366aece2664587a741620a51de80592fc2f5be3374874c") 10.186802825s ago: executing program 0 (id=336): r0 = socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7004feb1df25010000000c000300060000000000000044544c277b851a207336181df9183f916cbcb6e4c5cb7c2faef597a8bdd6403ef8210a1f24a5a75ff6ffb52520c0d3f8079c9fe678120833e7bd456e397c7bd302c4da2174bd9c26050d25b5016f05e2ec1405f9ad6b69fb04792e3c924661244aab28a2866e9903152639ac2102fa46e3362d5a76d849b29ff10c76412461fd2a5ea272f4c222c5942a1bcf684829854047f7b59a9b032b7030a009e749603060b9095fdf3fcd21fed0f2e971bdcbb2faea81d7a9ead382ed1666a5"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/trace_clock\x00', 0x361400, 0x0) readv$auto(0x3, 0x0, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r6 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ptrace$auto(0x4206, r6, 0x0, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x80502, 0x0) ioctl$auto(0x3, 0x5420, r0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) write$auto_rfkill_fops_core(r3, &(0x7f0000000200)="9dea31913cb498217735bbce17f68148281da8acc8b124f8dc04f11f1fa2a9ae7463c4f77ee1feaf711d833ea95c4f433afc6d44d6e591370504369fcc8b786d2db722ab2d5d80df1c7d2ae6eeb0b7cd11d603918ac22abe77711c05c1c11d59bb7c542b966790f31b3d100e436e619db789dd3ae1413d0d9bf34731f5e94f49f389", 0x82) 10.049250715s ago: executing program 3 (id=337): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty25\x00', 0x804c0, 0x0) close_range$auto(r0, 0x8, 0x42) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9372, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r3 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) read$auto_regulator_summary_fops_(r1, &(0x7f0000000200)=""/151, 0x97) bpf$auto(0x40000000, 0x0, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = getsockopt$auto(r3, 0x84, 0x1d, 0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r4, &(0x7f0000000380)=""/149, 0x95) getpid() mincore$auto(0x1000, 0x8001, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 9.728887258s ago: executing program 1 (id=338): r0 = socket(0x26, 0xa, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd4/queue/iosched/front_merges\x00', 0xe0281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) fallocate$auto(r1, 0x1, 0x2, 0x6652) msgctl$auto_IPC_STAT(0xfffffffc, 0x2, &(0x7f0000000540)={{0x11c88, 0x0, 0x0, 0x3, 0x2, 0xffffffff, 0x3}, &(0x7f00000004c0)=0xff, &(0x7f0000000500)=0x1, 0x7, 0x7fffffffffffffff, 0x1, 0xa24, 0xc, 0x1ff, 0x5, 0x2, @raw, @raw=0xad9}) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) memfd_create$auto(&(0x7f00000002c0)='A^^\x02\x00\xef\x97\x8aY\x00\xf3\xd1\x8c\xb05\x03\\\xb2\xbf247{\xdc\t8\f\x00\x00\xee\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb5$-\xba\xa7|\xd4\x9c\xe0\x89\x924dj\t\xd3v\x86\x94\xd0=d\x8f\xbf\xe1\xa5(\x9fC\xe4H\x93\xdb\x93\x86\xb8\xe5\\DB\xfetC\xd3mp,4d\x9d\xfb\xb5\x18\xbek\xfd_ \xfa\xb8\xc5\x98\xb4\x8c\xe2\xee\xca[\xfc+\x02\x00\x00\x00\x00\x00\x00\x00\x0eyp\x91u\xfc\x1b\x89;\xa5\xfbA\xbf\xcb\\p\xd8\xb73\xf1\xee\xb0^\'RnA\xeb\x83{\nK\xb0L\xb9~\xad\f\xd9`\xd2\xaa2pt\x04\x1f\xb9\xe2\n\x89\x1e\x99\ag\xb2nG\xb6\x02\x10\x93\x04\xa9\xa2<\xba\x1d\xe5E]\x1d7\xac\xe5+>\xa2\x1f\xcf\x16(\xfe\x98\x13tA+\xb34yI\x005\xde\x85\xa8\xfd>\x81;\xd3\xf1ss\xc5u\x9em\xa1\xbb\xbba{\xd4\xbba0\x9a\x8e\x1482Q\xf9\x10\x11U\xe4[\x12\x1f\x82^\xf5\xb0\xaa[\x99\x1d\x94w\x87{', 0x45) fallocate$auto(r1, 0x4, 0x11, 0x3fe) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x2, 0x0) bind$auto(r3, &(0x7f0000000080)=@isdn={0x22, 0x7, 0xe, 0xa, 0x7}, 0xa15) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) msgctl$auto(0x7, 0xa3, &(0x7f0000000240)={{0x8, 0xee00, 0xee01, 0x5, 0xe, 0x0, 0xfe01}, 0x0, 0x0, 0x6, 0xa, 0x6, 0xfffffffffffffffd, 0x51c, 0x3, 0x1, 0xb, @inferred=0xffffffffffffffff, @raw=0x8}) 8.244967836s ago: executing program 2 (id=340): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000001, 0x5) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mknod$auto(0x0, 0x63c1, 0x7ff) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x7, 0x0, 0xf) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (fail_nth: 2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) 7.126136049s ago: executing program 3 (id=341): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) nanosleep$auto(0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000428bd7000fddbdf2572000000d5074801df1af0ebe5aff861f90fef1cd29caf556101167b1ccb2741bde9cc96d71b7295da0b178f3145eaa4a00a4fa9fcb281c65c30c1430b48e6f91275f00ee96d06f7e6bd05c1af7b9c0ee013ca8dc3e82a4f7efb413a0b9cd35763b92ded7ee1b9336e0bc7d12d0f26083a168c6a2ee064b2d0f1ae837a4f045fc61d947670f450a56dcff9232275db4c9bdfa9497da2c52e0bf4761f0c22b4a637f951ae926928aa18a8b30cc0c74aecb71862892bac4bf26d65323f9a420a2b0a08b7ae78d2b6c8ab635ddc019192eecf0609683042ca1b7f925fb94234d9a499ac22ca7fb11491478430dfcd6d86fff6598161d76b7688b3af1608daa3de12cffc0dfbfc732073ffd2d967b6a291a471822d0b8c681a370cbb192ac9c7e8f7b2b4119a6549a60dfb08b96f50b9b4143460618f0747ce7330fd6cdc4f79bd47e9420972292f97e72501e07fbf574ddb144caf67a5105d344c669dfa56ee1fd9d0b3c98c72eb8c6c942f9aab5830f2c719947168f101b599369e682da9ba5d3c6019ed6c6c6c376e41e3357455077aa8c321e40f034c6f81eb69767672c53adbfe236c5a49a15ddea8a657a818a8e8ea921fdc11d6034e40ab2afc5e2919de79af646f82d79ca078372f3f1328b25e0718e7f64be83d58a4cbe12ffe3505307434554c96d7095051a6704101a23fb2baf5b81401da72b5213552a7cb54ee801d26f6efb25c3d20c03768e9ffb6b50546735f5d1b553f73d5f8c36a5aa5ab5a5d4e08b910e6f29a52e77d53e27c4827b5bc154c11e8f2625d0c5d8e15a138a0fd72c9458d72bd8be57afa648a003f5d909c0a7aa1062546407f019695df71228ee704c4fe870bca3c4f3d5183aa4f4f19e9bfcf9b282241ee6eabaab6777f72b0b1e52a498464978fa44e2d9a73935efe46b0c3e91fee32949f032740bd3b018c1eb330ce7d0a44553ff12a25f20ed41aefc8b12f4374f1dcdaeae16345ec004ba3bf0d5bf39037bd4b73fb2a6d5022198f3bcf9d623c4f706ae5b3ba632c112424ad5d673f38e3c673c50552731151cb53dd9ec9699d375b451d8f4e2457e5eab34766a66b031dcdcae85e67939edb373588801a5ea82f8d266aa78341c0e1104f2b0dd5ee0c081f3855a06bec389a29645871ea53b10e19e44737951756ecc062dedfccc3fd84aae13d3c5c8328379756f42b1cf8e9453e9491033f2ede522c8daa0577152799451358694c3771169411150f5066a243d6f869671a4a924602cdfa5a35e4cf303cf7271afb702c93a6101275319153d7c88c112b7d1331db47415023ec18b7d558967f82e7970b1616d8cd1bd5deda3f90bcddec801412e8a4ceb854241bcfe0850c7495399338b41ae01528fe5da8296d5cb4a0a5e4ca8c82327da83c0999ab91549f5a08c1ded5d54509bc60b3afbace2fea3c7817aeed4fefc038e86bc77be0029dc5a8f70d41770990583da9b943c9f7c646888171188a9ca40b58b7ff2066bc657dcf369fc8faf74576f61347b0d4016854d5701cacce7eb0ee48f3a302b5892649dad4c910e27976e0ba3f781fb9fc8908904b03455d8d45a6875a18a97da67e91b9f43424c58ceac55ab788fd91097db30ef891cf659dca25f64300f52b544b4be462724803171a0c4328472c3c9a863dbb331029066f55a0e8ef1c3852c3f19c2bbd71c17852bcf22a125ff854592c146258ba99fe1a9dcca3e1a9178ecd0d6096d0642bd1639d547d475dbe4e30b62a0db806e865000b5fac63f537cebc8a4f133843c9d333f566c82a3b2e4a947be01743c36af38975d7396bf804fabf5a102e86ebc9dc18a0f07b5c5ca355cae4000b95f759e53717ec4ccee0778f3cf3f1b3d8a38aa7c56b416d94066f8a4c6f1fe1fc48c4eda755adb52ef60d249a07bac8e7c2e800ac1c7a57e52aff48d219746d31bab3c429e01c4bbd5d46e9a15af19b2f263b7ae60e60052f89a6d0e74e02d27ad64474f19abfb467bfa835e7a9e89f4792bb33bd0eb478a7521ad9728ce1623a4f32aae2f7e7cf41acf10d79d7e2c0e36ba780fa9a7299d1355bcde4c630cb0a0e9e4e2257330751aba40badc2784cd46e4fab142aee3346248010f83527ab291667f9ccbed3394c7799b5764bb29b394c"], 0x7ec}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f", 0xfdef) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x10004010) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd5) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r1, 0x7ff, 0x1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x201, 0x0) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000300)={@siginfo_0_0={0x6, 0x4, 0xc, @_rt={0x0, 0x0, @sival_int=0x6}}}, 0x8, &(0x7f0000000380)={{0x6, 0x2}, {0x8, 0x3a3}, 0x3, 0x1, 0x3ff, 0x101, 0x10000, 0x80, 0x8000000000000001, 0x7, 0x3, 0x5, 0x100, 0x2, 0x5, 0x6}) prctl$auto(0x3e, 0x1, r3, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/194, 0xc2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) 6.694945047s ago: executing program 1 (id=342): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/syscall\x00', 0xc8400, 0x0) (async, rerun: 64) removexattrat$auto(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000006c0)='\xebM\x97\xfcC_G\xc2v\xd4\xa9\xa70\xd7\xc4\xd6\x8d@\x83\xa1\xdb\x01\x00\x00\x80\xba\xa8\xc5\xda\xfa\xa2W\xf0\xf0\xa2\xc6\xe3>Y\xa1\x1c2\xca\x98\x91\xfc_\xef\x81g_\xbe*@g\xa7\x9a\x00\xb3\x0fV\xe5h\x95~\xcaq\x00\x00\x00\x00\x06\x00\x00\x00\xb6\xee\xa4*\x0e\x00\x00 \x00\x00\x00\x00\x00\x00\xfbG\xcbj\x9cL_\xf8*\xa7g\xc5\x99\xdd\x80\xcf\xae\xae\xad\"\x84\xc6x\xc3!|^\x85\xa7`\xf6\x90Tk\xc7U\x13\x8c\x93\xc5\xaa\xf7J\xe6Xs\x1f\xb1\aY\xfbU\x8f\xd8\xb0F\xb5Y\xe9\xda\x84\xb7)kM2\x9cnE(\x05Jd\xd04/\xbb\xb3O\x01\x11\x8db\xb0A\xcf9\x10') (async, rerun: 32) r1 = syz_clone3(&(0x7f0000000640)={0x108000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 32) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_expire_count\x00', 0x80, 0x0) read$auto(r2, &(0x7f0000000ac0)='vlan1\x00', 0x5) (async) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) r4 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_rfkill_fops_core(r4, 0x0, 0x0) (async) kcmp$auto_KCMP_FILES(r1, 0x0, 0x2, 0x3, 0xfffffffffffff0a6) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0xc, r2, 0x4000000000006, 0x7ff}, 0x48) (async) read$auto_proc_single_file_operations_base(r0, 0x0, 0x0) (async) connect$auto(0x3, 0x0, 0x54) (async, rerun: 32) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) (rerun: 32) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, r5, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x7, 0x20e, 0x0, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x80000001}, 0x0, @bytes=@data_ptr=&(0x7f0000000080)='\xae,\x00', "282f68b07e718ed4d99a34617774e3a82f982e0f05e516c24e3ccdb59f22071908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000640), 0x4c4ac3, 0x0) (async) r6 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) (async, rerun: 32) read$auto(0x3, 0x0, 0x80) (async, rerun: 32) r7 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r7, 0x0, 0xc70) (async) pread64$auto(r6, 0x0, 0x7ff, 0x400) 6.627396067s ago: executing program 2 (id=343): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r0, 0x4c07, 0x0) (fail_nth: 2) 6.040675024s ago: executing program 2 (id=344): r0 = socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7004feb1df25010000000c000300060000000000000044544c277b851a207336181df9183f916cbcb6e4c5cb7c2faef597a8bdd6403ef8210a1f24a5a75ff6ffb52520c0d3f8079c9fe678120833e7bd456e397c7bd302c4da2174bd9c26050d25b5016f05e2ec1405f9ad6b69fb04792e3c924661244aab28a2866e9903152639ac2102fa46e3362d5a76d849b29ff10c76412461fd2a5ea272f4c222c5942a1bcf684829854047f7b59a9b032b7030a009e749603060b9095fdf3fcd21fed0f2e971bdcbb2faea81d7a9ead382ed1666a5"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/trace_clock\x00', 0x361400, 0x0) readv$auto(0x3, 0x0, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r6 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ptrace$auto(0x4206, r6, 0x0, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x80502, 0x0) ioctl$auto(0x3, 0x5420, r0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) write$auto_rfkill_fops_core(r3, &(0x7f0000000200)="9dea31913cb498217735bbce17f68148281da8acc8b124f8dc04f11f1fa2a9ae7463c4f77ee1feaf711d833ea95c4f433afc6d44d6e591370504369fcc8b786d2db722ab2d5d80df1c7d2ae6eeb0b7cd11d603918ac22abe77711c05c1c11d59bb7c542b966790f31b3d100e436e619db789dd3ae1413d0d9bf34731f5e94f49f389", 0x82) 5.171650065s ago: executing program 0 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/uid_map\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socketpair$auto(0x8, 0x5, 0xffff0054, 0x0) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000380), 0x88403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, 0x0) close_range$auto(0x2, 0x8, 0x3f000000) lseek$auto(0x3, 0x8, 0x1) 4.948969307s ago: executing program 3 (id=346): r0 = socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/trace_clock\x00', 0x361400, 0x0) readv$auto(0x3, 0x0, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r5 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ptrace$auto(0x4206, r5, 0x0, 0xa) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x80502, 0x0) ioctl$auto(0x3, 0x5420, r0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) write$auto_rfkill_fops_core(r3, &(0x7f0000000200)="9dea31913cb498217735bbce17f68148281da8acc8b124f8dc04f11f1fa2a9ae7463c4f77ee1feaf711d833ea95c4f433afc6d44d6e591370504369fcc8b786d2db722ab2d5d80df1c7d2ae6eeb0b7cd11d603918ac22abe77711c05c1c11d59bb7c542b966790f31b3d100e436e619db789dd3ae1413d0d9bf34731f5e94f49f389", 0x82) 4.76734039s ago: executing program 1 (id=347): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)=ANY=[@ANYBLOB='T\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40008c0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r1, 0x2, 0x0, 0x0, 0x0) pidfd_open$auto(0x0, 0xfffffffe) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="13") 4.651014787s ago: executing program 2 (id=348): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm$auto(0x4, 0x3, 0x7f) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2, 0x2, 0x88) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r2, 0x4008af24, r1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 3.496225699s ago: executing program 1 (id=349): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c000980080001808847338012000100898771f1c19f17790485908208000000040002"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r3, 0x800064be, 0x1e6) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xc, 0x4, 0x4}, 0xa) r4 = bpf$auto(0x1, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x1da12b45, 0x7, @netfilter={0xc28, 0x581, 0x0, 0x5}}, 0x6f3) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000000)={0x158, "c524043f", 0x670b, 0x4, 0x1005, 0x2, "a7ced312122721d9bdc8d527758ddc30"}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/card1/pcm0p/sub5/sw_params\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020011, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r6 = open(0x0, 0xcd1e23e41b02d660, 0x154) execveat$auto(r6, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/memory/memory3/online\x00', 0x2062, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000180)=""/132, 0x84) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x10000, 0x0) r7 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) acct$auto(&(0x7f0000002380)='/sys/kernel/debug/dri/vkms/crtc-0/crc/data\x00') r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000000040001800400018000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 3.494871839s ago: executing program 0 (id=357): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty25\x00', 0x804c0, 0x0) close_range$auto(r0, 0x8, 0x42) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9372, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r4 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) read$auto_regulator_summary_fops_(r1, &(0x7f0000000200)=""/151, 0x97) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r3, 0x81}, 0x96) bpf$auto(0x18, 0x0, 0x92) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = getsockopt$auto(r4, 0x84, 0x1d, 0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000380)=""/149, 0x95) getpid() mincore$auto(0x1000, 0x8001, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 2.295058201s ago: executing program 1 (id=350): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm$auto(0x4, 0x3, 0x7f) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2, 0x2, 0x88) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x1f, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r1, 0x4008af24, 0xffffffffffffffff) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, 0x0, 0x100000002, 0x100000001) 1.821859914s ago: executing program 0 (id=351): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) prctl$auto(0x988e, 0x9, 0x0, 0x2, 0x9) r0 = socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000990}, 0x20000000) r1 = eventfd2$auto(0x6af3, 0x800) readv$auto(r1, &(0x7f0000000580)={0x0, 0x29e4}, 0xe8) read$auto_fops_u8_(r1, &(0x7f0000001e40)=""/109, 0x6d) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x4948b, 0x4, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0xa, 0x6d3e, 0x7, 0xfffffffffffffffe, 0x6]}, 0x0) mmap$auto(0x20000000000, 0x4, 0x3, 0x12, 0xffffffffffffffff, 0x168d) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES16, @ANYBLOB="01002bbd7000fedbdf251600000018000180141b02006e657464657673696d3000000000000005000300000000000500040006000000c327ac8645863f9ee16ef6f16057c21f6a670e643e5028d829", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020}, 0x404c000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram15\x00', 0x14f602, 0x0) mlockall$auto(0x5) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) 1.378929477s ago: executing program 2 (id=352): socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0305615, 0x38) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e80, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x22000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) mmap$auto(0x81, 0xc, 0x9, 0x10, r0, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) setresuid$auto(0x2, 0x7, 0x8080) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x2, 0x9, "4cbd"}, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_CEC_S_MODE(r4, 0x40046109, &(0x7f00000000c0)=0x1) r5 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000001c0), r4) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00ffe186266d80b5f54ec95b4d268fc3c54ebb6615094b56121cd518143e2ed38b774135f3c913b080b0df46a49a484443af88eb92ffb4e86b37d30f625f3a18319f8f0fb472ccb600f900009c2267e7e619dd1884cadacd5e663b393e0509f166af904c8a18738ade402761e9946221096ccf2ffc187fe3b73dfab27b1687bee2c2dda165977d6d2ebe87926fb8d7897d55dd57a0e7643e5de25374b168ddd3d384b403322efbb5305d37ef9070655570bc518251fb61ff5b91d90000000000000000", @ANYRES16=r5, @ANYBLOB="00042abd7000fedbdf2506000000080001000100000008000100bda50000080002804ba8eccf"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040894) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$auto_bm_status_operations_binfmt_misc(r4, &(0x7f0000000080)=""/27, 0x1b) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x2) socket(0x1e, 0x4, 0x0) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="110000000600"/17, 0x11) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) 1.115553071s ago: executing program 3 (id=353): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000600}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, 0x0, 0x8010) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x39, 0x1, 0x0, 0x5, 0xffffffff) mmap$auto(0x0, 0x202000f, 0x2000000000000000, 0x80000000000eb1, 0xfffffffffffffffa, 0x8000) mlock$auto(0x1004, 0x6) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) msync$auto(0x7f, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x6099, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0xfffffffffffffffe, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x2fb) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 469.14121ms ago: executing program 0 (id=354): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x48000, 0x0) mmap$auto(0xfffffffffffffffc, 0x810004, 0xffffffffffff830b, 0x17, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x402001, 0x0) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x6, 0x100000000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x5, 0x759, 0x5, 0x7181, 0x1ffde, 0x7, 0x9, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x600, 0x2, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7, 0x0, 0x40000002, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x10, 0x0, 0x0, 0x100000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd]}, 0x1fa, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd05, &(0x7f00000001c0)) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r2, 0x9, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) semctl$auto_GETPID(0xb3fb, 0x1, 0xb, 0x3fd) msgsnd$auto(0x0, &(0x7f0000000040)={0x5}, 0x1000, 0x4) msgctl$auto(0x0, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) 0s ago: executing program 2 (id=355): sendmsg$auto_L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x28, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x41000) writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x20000}, 0x55) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r0, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0x4020565b, 0x38) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x20800, 0x0) ioctl$auto(r1, 0xb21064a7, 0x20000a) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x400, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. [ 93.996389][ T5816] cgroup: Unknown subsys name 'net' [ 94.192067][ T5816] cgroup: Unknown subsys name 'cpuset' [ 94.202248][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.034584][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.591800][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.599709][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.606755][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.610702][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.623337][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.623668][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.631954][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.645230][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.654144][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.662951][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.671717][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.679865][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.690018][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.692015][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.698969][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.706515][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.713844][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.731832][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.745561][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.755076][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.315832][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 100.517765][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 100.588779][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 100.656909][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.665376][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.673231][ T5825] bridge_slave_0: entered allmulticast mode [ 100.680850][ T5825] bridge_slave_0: entered promiscuous mode [ 100.708620][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 100.721201][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.728474][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.735665][ T5825] bridge_slave_1: entered allmulticast mode [ 100.743483][ T5825] bridge_slave_1: entered promiscuous mode [ 100.900380][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.910051][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.918156][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.925380][ T5828] bridge_slave_0: entered allmulticast mode [ 100.932853][ T5828] bridge_slave_0: entered promiscuous mode [ 100.946150][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.953462][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.960823][ T5826] bridge_slave_0: entered allmulticast mode [ 100.968407][ T5826] bridge_slave_0: entered promiscuous mode [ 100.979021][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.988459][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.995591][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.003326][ T5828] bridge_slave_1: entered allmulticast mode [ 101.010892][ T5828] bridge_slave_1: entered promiscuous mode [ 101.024154][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.031396][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.039333][ T5826] bridge_slave_1: entered allmulticast mode [ 101.046594][ T5826] bridge_slave_1: entered promiscuous mode [ 101.127625][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.139762][ T5825] team0: Port device team_slave_0 added [ 101.168955][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.193822][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.206140][ T5825] team0: Port device team_slave_1 added [ 101.214846][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.297830][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.305113][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.312668][ T5827] bridge_slave_0: entered allmulticast mode [ 101.320405][ T5827] bridge_slave_0: entered promiscuous mode [ 101.353965][ T5828] team0: Port device team_slave_0 added [ 101.362396][ T5828] team0: Port device team_slave_1 added [ 101.382041][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.390013][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.398610][ T5827] bridge_slave_1: entered allmulticast mode [ 101.406064][ T5827] bridge_slave_1: entered promiscuous mode [ 101.414412][ T5826] team0: Port device team_slave_0 added [ 101.421697][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.428784][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.454791][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.483877][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.490961][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.517456][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.543970][ T5826] team0: Port device team_slave_1 added [ 101.572222][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.579327][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.606306][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.619277][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.626248][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.652851][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.704778][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.715747][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.722814][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.749507][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.762739][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.769766][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.796213][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.798849][ T5833] Bluetooth: hci1: command tx timeout [ 101.812760][ T5838] Bluetooth: hci2: command tx timeout [ 101.812797][ T5148] Bluetooth: hci3: command tx timeout [ 101.824057][ T53] Bluetooth: hci0: command tx timeout [ 101.854806][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.892937][ T5825] hsr_slave_0: entered promiscuous mode [ 101.900025][ T5825] hsr_slave_1: entered promiscuous mode [ 101.952091][ T5827] team0: Port device team_slave_0 added [ 101.998952][ T5827] team0: Port device team_slave_1 added [ 102.019049][ T5828] hsr_slave_0: entered promiscuous mode [ 102.025486][ T5828] hsr_slave_1: entered promiscuous mode [ 102.031875][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 102.037738][ T5828] Cannot create hsr debugfs directory [ 102.095725][ T5826] hsr_slave_0: entered promiscuous mode [ 102.103038][ T5826] hsr_slave_1: entered promiscuous mode [ 102.109555][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 102.115317][ T5826] Cannot create hsr debugfs directory [ 102.163459][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.170577][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.197738][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.211476][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.211535][ T24] cfg80211: failed to load regulatory.db [ 102.219974][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.250416][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.427874][ T5827] hsr_slave_0: entered promiscuous mode [ 102.434532][ T5827] hsr_slave_1: entered promiscuous mode [ 102.441092][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 102.446857][ T5827] Cannot create hsr debugfs directory [ 102.723841][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.751496][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.763478][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.791984][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.872470][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.885311][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.914056][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.925056][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.005176][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.018904][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.033005][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.052690][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.166455][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.179769][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.199539][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.212402][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.274081][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.335607][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.373590][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.380908][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.392772][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.399953][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.416350][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.489738][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.501443][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.555190][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.574274][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.585047][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.592225][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.615946][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.623125][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.634857][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.642011][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.656193][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.663491][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.701381][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.738476][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.745692][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.772106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.779289][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.867371][ T5148] Bluetooth: hci3: command tx timeout [ 103.867531][ T5833] Bluetooth: hci1: command tx timeout [ 103.872975][ T5833] Bluetooth: hci2: command tx timeout [ 103.881689][ T53] Bluetooth: hci0: command tx timeout [ 104.147601][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.296652][ T5825] veth0_vlan: entered promiscuous mode [ 104.353270][ T5825] veth1_vlan: entered promiscuous mode [ 104.465233][ T5825] veth0_macvtap: entered promiscuous mode [ 104.476329][ T5825] veth1_macvtap: entered promiscuous mode [ 104.511815][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.538948][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.555882][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.570787][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.604176][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.621896][ T3537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.635795][ T3537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.645188][ T3537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.668580][ T3537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.714875][ T5827] veth0_vlan: entered promiscuous mode [ 104.786577][ T5827] veth1_vlan: entered promiscuous mode [ 104.815687][ T5826] veth0_vlan: entered promiscuous mode [ 104.838950][ T5828] veth0_vlan: entered promiscuous mode [ 104.864368][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.868897][ T5828] veth1_vlan: entered promiscuous mode [ 104.894120][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.906557][ T5826] veth1_vlan: entered promiscuous mode [ 104.953814][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.970450][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.009170][ T5828] veth0_macvtap: entered promiscuous mode [ 105.028513][ T5826] veth0_macvtap: entered promiscuous mode [ 105.041014][ T5828] veth1_macvtap: entered promiscuous mode [ 105.052389][ T5827] veth0_macvtap: entered promiscuous mode [ 105.070952][ T5826] veth1_macvtap: entered promiscuous mode [ 105.072917][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.090645][ T5827] veth1_macvtap: entered promiscuous mode [ 105.111124][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.136628][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.171792][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.196579][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.221690][ T3463] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.249166][ T3537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.263812][ T3537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.275185][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.289504][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.297446][ T3537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.299967][ T5922] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 105.321067][ T3537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.331428][ T3537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.372354][ T3537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.400976][ T3537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.434046][ T3537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.456002][ T3537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.468537][ T3537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.528184][ T3537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.676640][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.685645][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.755878][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.766901][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.839492][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.859917][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.921256][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.937252][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.951229][ T5148] Bluetooth: hci2: command tx timeout [ 105.956741][ T5148] Bluetooth: hci1: command tx timeout [ 105.964695][ T53] Bluetooth: hci3: command tx timeout [ 105.964927][ T5833] Bluetooth: hci0: command tx timeout [ 106.045945][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.065097][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.171523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.209221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.987888][ T5955] mmap: syz.3.4 (5955) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.103121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.212136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.427061][ T5942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.653140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.921462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.922307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.007782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.033606][ T5833] Bluetooth: hci3: command tx timeout [ 108.058597][ T5838] Bluetooth: hci1: command tx timeout [ 108.058601][ T5833] Bluetooth: hci2: command tx timeout [ 108.058765][ T5838] Bluetooth: hci0: command tx timeout [ 108.627610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.636987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 108.637659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 108.646267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 108.655281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 108.974555][ T5983] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.585511][ T6058] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.036805][ T6069] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.490906][ T6139] vivid-003: ================= START STATUS ================= [ 123.507472][ T6139] vivid-003: Radio HW Seek Mode: Bounded [ 123.527312][ T6139] vivid-003: Radio Programmable HW Seek: false [ 123.534499][ T6139] vivid-003: RDS Rx I/O Mode: Block I/O [ 123.540640][ T6139] vivid-003: Generate RBDS Instead of RDS: false [ 123.599668][ T6139] vivid-003: RDS Reception: true [ 123.654521][ T6139] vivid-003: RDS Program Type: 0 inactive [ 123.688425][ T6139] vivid-003: RDS PS Name: inactive [ 123.695440][ T6139] vivid-003: RDS Radio Text: inactive [ 123.708723][ T6139] vivid-003: RDS Traffic Announcement: false inactive [ 123.927197][ T6139] vivid-003: RDS Traffic Program: false inactive [ 123.933603][ T6139] vivid-003: RDS Music: false inactive [ 124.025742][ T6139] vivid-003: ================== END STATUS ================== [ 132.098172][ T6234] FAULT_INJECTION: forcing a failure. [ 132.098172][ T6234] name failslab, interval 1, probability 0, space 0, times 1 [ 132.220642][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.2.36 Not tainted syzkaller #0 PREEMPT(full) [ 132.220682][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.220704][ T6234] Call Trace: [ 132.220714][ T6234] [ 132.220726][ T6234] dump_stack_lvl+0x16c/0x1f0 [ 132.220779][ T6234] should_fail_ex+0x512/0x640 [ 132.220818][ T6234] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 132.220863][ T6234] should_failslab+0xc2/0x120 [ 132.220906][ T6234] kmem_cache_alloc_noprof+0x75/0x6e0 [ 132.220937][ T6234] ? __proc_create+0x2ce/0x8e0 [ 132.220991][ T6234] ? __proc_create+0x2ce/0x8e0 [ 132.221033][ T6234] __proc_create+0x2ce/0x8e0 [ 132.221080][ T6234] ? __pfx___proc_create+0x10/0x10 [ 132.221133][ T6234] ? _raw_write_unlock+0x28/0x50 [ 132.221166][ T6234] ? proc_register+0x559/0x8b0 [ 132.221217][ T6234] proc_create_reg+0x7d/0x180 [ 132.221270][ T6234] proc_create_net_data+0x8e/0x1c0 [ 132.221317][ T6234] ? __pfx_proc_create_net_data+0x10/0x10 [ 132.221366][ T6234] ? __pfx___netlink_kernel_create+0x10/0x10 [ 132.221417][ T6234] fib_proc_init+0xf4/0x1b0 [ 132.221459][ T6234] fib_net_init+0x2af/0x3f0 [ 132.221501][ T6234] ? __pfx___register_sysctl_table+0x10/0x10 [ 132.221550][ T6234] ? __pfx_fib_net_init+0x10/0x10 [ 132.221593][ T6234] ? lockdep_init_map_type+0x5c/0x280 [ 132.221640][ T6234] ? __pfx_nl_fib_input+0x10/0x10 [ 132.221690][ T6234] ? devinet_init_net+0x5c2/0x910 [ 132.221741][ T6234] ? __pfx_fib_net_init+0x10/0x10 [ 132.221783][ T6234] ops_init+0x1df/0x5f0 [ 132.221826][ T6234] setup_net+0x100/0x390 [ 132.221873][ T6234] ? __pfx_setup_net+0x10/0x10 [ 132.221915][ T6234] ? debug_mutex_init+0x37/0x70 [ 132.221954][ T6234] copy_net_ns+0x2f8/0x690 [ 132.222002][ T6234] create_new_namespaces+0x3ea/0xa90 [ 132.222049][ T6234] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 132.222091][ T6234] ksys_unshare+0x45b/0xa40 [ 132.222136][ T6234] ? __pfx_ksys_unshare+0x10/0x10 [ 132.222181][ T6234] ? xfd_validate_state+0x61/0x180 [ 132.222239][ T6234] __x64_sys_unshare+0x31/0x40 [ 132.222282][ T6234] do_syscall_64+0xcd/0xfa0 [ 132.222320][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.222353][ T6234] RIP: 0033:0x7f16faf8eec9 [ 132.222386][ T6234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.222417][ T6234] RSP: 002b:00007f16f91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 132.222447][ T6234] RAX: ffffffffffffffda RBX: 00007f16fb1e5fa0 RCX: 00007f16faf8eec9 [ 132.222469][ T6234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 132.222488][ T6234] RBP: 00007f16fb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 132.222507][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.222526][ T6234] R13: 00007f16fb1e6038 R14: 00007f16fb1e5fa0 R15: 00007fff386540d8 [ 132.222569][ T6234] [ 132.961013][ T6248] random: crng reseeded on system resumption [ 133.451972][ T6251] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 133.858785][ T6251] Zero length message leads to an empty skb [ 133.954607][ T6254] process 'syz.3.38' launched ':,' with NULL argv: empty string added [ 138.187147][ T30] audit: type=1800 audit(1760030290.581:2): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 143.152519][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.167404][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.968760][ T6408] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 147.118355][ T6413] FAULT_INJECTION: forcing a failure. [ 147.118355][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 147.137270][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.0.60 Not tainted syzkaller #0 PREEMPT(full) [ 147.137301][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 147.137315][ T6413] Call Trace: [ 147.137323][ T6413] [ 147.137332][ T6413] dump_stack_lvl+0x16c/0x1f0 [ 147.137363][ T6413] should_fail_ex+0x512/0x640 [ 147.137392][ T6413] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 147.137418][ T6413] should_failslab+0xc2/0x120 [ 147.137450][ T6413] kmem_cache_alloc_noprof+0x75/0x6e0 [ 147.137473][ T6413] ? sk_prot_alloc+0x60/0x2a0 [ 147.137510][ T6413] ? sk_prot_alloc+0x60/0x2a0 [ 147.137543][ T6413] ? find_held_lock+0x2b/0x80 [ 147.137565][ T6413] sk_prot_alloc+0x60/0x2a0 [ 147.137600][ T6413] sk_alloc+0x36/0xc20 [ 147.137625][ T6413] inet6_create+0x381/0x12b0 [ 147.137654][ T6413] ? inet6_create+0x7f/0x12b0 [ 147.137685][ T6413] __sock_create+0x335/0x8d0 [ 147.137725][ T6413] __sys_socket+0x14d/0x260 [ 147.137761][ T6413] ? __pfx___sys_socket+0x10/0x10 [ 147.137808][ T6413] ? xfd_validate_state+0x61/0x180 [ 147.137854][ T6413] ? __pfx___do_sys_prctl+0x10/0x10 [ 147.137915][ T6413] __x64_sys_socket+0x72/0xb0 [ 147.137950][ T6413] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.137975][ T6413] do_syscall_64+0xcd/0xfa0 [ 147.138003][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.138028][ T6413] RIP: 0033:0x7fa78dd8eec9 [ 147.138045][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.138067][ T6413] RSP: 002b:00007fa78ec6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 147.138089][ T6413] RAX: ffffffffffffffda RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 147.138104][ T6413] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 147.138118][ T6413] RBP: 00007fa78de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 147.138132][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.138145][ T6413] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 147.138176][ T6413] [ 147.270450][ T6411] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.575504][ T6402] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 147.575504][ T6402] The task syz.1.58 (6402) triggered the difference, watch for misbehavior. [ 159.932610][ T6548] Process accounting resumed [ 167.256899][ T6648] nvme_fabrics: missing parameter 'transport=%s' [ 167.263459][ T6648] nvme_fabrics: missing parameter 'nqn=%s' [ 167.794262][ T6661] FAULT_INJECTION: forcing a failure. [ 167.794262][ T6661] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.846004][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz.1.100 Not tainted syzkaller #0 PREEMPT(full) [ 167.846050][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.846066][ T6661] Call Trace: [ 167.846076][ T6661] [ 167.846088][ T6661] dump_stack_lvl+0x16c/0x1f0 [ 167.846127][ T6661] should_fail_ex+0x512/0x640 [ 167.846169][ T6661] _copy_from_user+0x2e/0xd0 [ 167.846212][ T6661] core_sys_select+0x35b/0xc20 [ 167.846261][ T6661] ? __pfx_core_sys_select+0x10/0x10 [ 167.846297][ T6661] ? proc_fail_nth_write+0x9f/0x220 [ 167.846360][ T6661] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.846406][ T6661] kern_select+0x15d/0x1e0 [ 167.846434][ T6661] ? __pfx_kern_select+0x10/0x10 [ 167.846467][ T6661] ? __pfx_ksys_write+0x10/0x10 [ 167.846505][ T6661] __x64_sys_select+0xbd/0x160 [ 167.846530][ T6661] ? do_syscall_64+0x91/0xfa0 [ 167.846562][ T6661] ? lockdep_hardirqs_on+0x7c/0x110 [ 167.846594][ T6661] do_syscall_64+0xcd/0xfa0 [ 167.846629][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.846660][ T6661] RIP: 0033:0x7f1701b8eec9 [ 167.846682][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.846709][ T6661] RSP: 002b:00007f1702a89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 167.846754][ T6661] RAX: ffffffffffffffda RBX: 00007f1701de5fa0 RCX: 00007f1701b8eec9 [ 167.846773][ T6661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 167.846792][ T6661] RBP: 00007f1702a89090 R08: 0000000000000000 R09: 0000000000000000 [ 167.846810][ T6661] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 167.846829][ T6661] R13: 00007f1701de6038 R14: 00007f1701de5fa0 R15: 00007fff6be945f8 [ 167.846871][ T6661] [ 169.879480][ T6689] FAULT_INJECTION: forcing a failure. [ 169.879480][ T6689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 169.894956][ T6689] CPU: 1 UID: 0 PID: 6689 Comm: syz.1.106 Not tainted syzkaller #0 PREEMPT(full) [ 169.895000][ T6689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.895020][ T6689] Call Trace: [ 169.895030][ T6689] [ 169.895042][ T6689] dump_stack_lvl+0x16c/0x1f0 [ 169.895084][ T6689] should_fail_ex+0x512/0x640 [ 169.895131][ T6689] should_fail_alloc_page+0xe7/0x130 [ 169.895177][ T6689] prepare_alloc_pages+0x3c2/0x610 [ 169.895222][ T6689] ? rcu_is_watching+0x12/0xc0 [ 169.895264][ T6689] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 169.895298][ T6689] ? kasan_save_stack+0x33/0x60 [ 169.895333][ T6689] ? kasan_save_track+0x14/0x30 [ 169.895381][ T6689] ? __lock_acquire+0x62e/0x1ce0 [ 169.895445][ T6689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 169.895491][ T6689] ? __lock_acquire+0x62e/0x1ce0 [ 169.895550][ T6689] ? __lock_acquire+0x62e/0x1ce0 [ 169.895593][ T6689] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 169.895670][ T6689] ? policy_nodemask+0xea/0x4e0 [ 169.895717][ T6689] alloc_pages_mpol+0x1fb/0x550 [ 169.895764][ T6689] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 169.895810][ T6689] ? __lock_acquire+0x62e/0x1ce0 [ 169.895858][ T6689] folio_alloc_mpol_noprof+0x36/0x2f0 [ 169.895913][ T6689] vma_alloc_folio_noprof+0xed/0x1e0 [ 169.895961][ T6689] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 169.896024][ T6689] do_pte_missing+0x2202/0x3ba0 [ 169.896075][ T6689] ? find_held_lock+0x2b/0x80 [ 169.896119][ T6689] __handle_mm_fault+0x1556/0x2aa0 [ 169.896183][ T6689] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.896234][ T6689] ? __pte_offset_map_lock+0x174/0x310 [ 169.896275][ T6689] ? find_held_lock+0x2b/0x80 [ 169.896320][ T6689] ? follow_page_pte+0x5cf/0x1390 [ 169.896373][ T6689] handle_mm_fault+0x589/0xd10 [ 169.896434][ T6689] __get_user_pages+0x54e/0x3530 [ 169.896499][ T6689] ? __pfx___get_user_pages+0x10/0x10 [ 169.896568][ T6689] populate_vma_page_range+0x267/0x3f0 [ 169.896621][ T6689] ? __pfx_populate_vma_page_range+0x10/0x10 [ 169.896669][ T6689] ? __pfx_find_vma_intersection+0x10/0x10 [ 169.896715][ T6689] ? do_mmap+0x69c/0x1210 [ 169.896761][ T6689] __mm_populate+0x1d8/0x380 [ 169.896812][ T6689] ? __pfx___mm_populate+0x10/0x10 [ 169.896859][ T6689] ? up_write+0x1b2/0x520 [ 169.896913][ T6689] vm_mmap_pgoff+0x37f/0x470 [ 169.896958][ T6689] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 169.897010][ T6689] ? __x64_sys_futex+0x1e0/0x4c0 [ 169.897059][ T6689] ? __x64_sys_futex+0x1e9/0x4c0 [ 169.897108][ T6689] ksys_mmap_pgoff+0x7d/0x5c0 [ 169.897146][ T6689] ? xfd_validate_state+0x61/0x180 [ 169.897190][ T6689] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 169.897238][ T6689] __x64_sys_mmap+0x125/0x190 [ 169.897294][ T6689] do_syscall_64+0xcd/0xfa0 [ 169.897335][ T6689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.897369][ T6689] RIP: 0033:0x7f1701b8eec9 [ 169.897396][ T6689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.897426][ T6689] RSP: 002b:00007f1702a89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 169.897456][ T6689] RAX: ffffffffffffffda RBX: 00007f1701de5fa0 RCX: 00007f1701b8eec9 [ 169.897476][ T6689] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 169.897496][ T6689] RBP: 00007f1701c11f91 R08: 0000000000000002 R09: 0000000000008000 [ 169.897515][ T6689] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 169.897544][ T6689] R13: 00007f1701de6038 R14: 00007f1701de5fa0 R15: 00007fff6be945f8 [ 169.897590][ T6689] [ 173.952124][ T6753] FAULT_INJECTION: forcing a failure. [ 173.952124][ T6753] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.998024][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT(full) [ 173.998064][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.998082][ T6753] Call Trace: [ 173.998093][ T6753] [ 173.998103][ T6753] dump_stack_lvl+0x16c/0x1f0 [ 173.998138][ T6753] should_fail_ex+0x512/0x640 [ 173.998176][ T6753] should_fail_alloc_page+0xe7/0x130 [ 173.998224][ T6753] prepare_alloc_pages+0x3c2/0x610 [ 173.998259][ T6753] ? rcu_is_watching+0x12/0xc0 [ 173.998291][ T6753] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 173.998335][ T6753] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 173.998374][ T6753] ? rcu_is_watching+0x12/0xc0 [ 173.998403][ T6753] ? trace_kmalloc+0x2b/0xd0 [ 173.998434][ T6753] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 173.998469][ T6753] ? __alloc_skb+0x166/0x380 [ 173.998495][ T6753] ? rcu_watching_snap_stopped_since+0xf1/0x110 [ 173.998526][ T6753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 173.998584][ T6753] ? policy_nodemask+0xea/0x4e0 [ 173.998619][ T6753] alloc_pages_mpol+0x1fb/0x550 [ 173.998652][ T6753] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 173.998683][ T6753] ? __pfx___alloc_skb+0x10/0x10 [ 173.998707][ T6753] ? find_held_lock+0x2b/0x80 [ 173.998738][ T6753] alloc_pages_noprof+0x131/0x390 [ 173.998772][ T6753] alloc_skb_with_frags+0x24a/0x860 [ 173.998830][ T6753] sock_alloc_send_pskb+0x7f9/0x980 [ 173.998869][ T6753] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 173.998911][ T6753] tun_get_user+0x7e2/0x3cc0 [ 173.998965][ T6753] ? __pfx_tun_get_user+0x10/0x10 [ 173.999004][ T6753] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 173.999050][ T6753] ? find_held_lock+0x2b/0x80 [ 173.999077][ T6753] ? tun_get+0x191/0x370 [ 173.999118][ T6753] tun_chr_write_iter+0xdc/0x210 [ 173.999159][ T6753] vfs_write+0x7d3/0x11d0 [ 173.999188][ T6753] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 173.999246][ T6753] ? __pfx_vfs_write+0x10/0x10 [ 173.999270][ T6753] ? find_held_lock+0x2b/0x80 [ 173.999316][ T6753] __x64_sys_pwrite64+0x1eb/0x250 [ 173.999346][ T6753] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 173.999405][ T6753] do_syscall_64+0xcd/0xfa0 [ 173.999437][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.999465][ T6753] RIP: 0033:0x7f16faf8eec9 [ 173.999486][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.999510][ T6753] RSP: 002b:00007f16f91d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 173.999535][ T6753] RAX: ffffffffffffffda RBX: 00007f16fb1e6090 RCX: 00007f16faf8eec9 [ 173.999552][ T6753] RDX: 000000000000fdf2 RSI: 0000000000000000 RDI: 00000000000000c8 [ 173.999568][ T6753] RBP: 00007f16fb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.999584][ T6753] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000000 [ 173.999600][ T6753] R13: 00007f16fb1e6128 R14: 00007f16fb1e6090 R15: 00007fff386540d8 [ 173.999635][ T6753] [ 174.798970][ T6756] FAULT_INJECTION: forcing a failure. [ 174.798970][ T6756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.836895][ T6756] CPU: 1 UID: 0 PID: 6756 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) [ 174.836933][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.836946][ T6756] Call Trace: [ 174.836953][ T6756] [ 174.836962][ T6756] dump_stack_lvl+0x16c/0x1f0 [ 174.836990][ T6756] should_fail_ex+0x512/0x640 [ 174.837021][ T6756] should_fail_alloc_page+0xe7/0x130 [ 174.837060][ T6756] prepare_alloc_pages+0x3c2/0x610 [ 174.837098][ T6756] ? rcu_is_watching+0x12/0xc0 [ 174.837136][ T6756] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 174.837159][ T6756] ? kasan_save_stack+0x33/0x60 [ 174.837182][ T6756] ? css_rstat_updated+0x1c2/0x510 [ 174.837208][ T6756] ? __pfx_css_rstat_updated+0x10/0x10 [ 174.837234][ T6756] ? __lock_acquire+0x62e/0x1ce0 [ 174.837269][ T6756] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 174.837301][ T6756] ? __lock_acquire+0x62e/0x1ce0 [ 174.837339][ T6756] ? __lock_acquire+0x62e/0x1ce0 [ 174.837367][ T6756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.837406][ T6756] ? policy_nodemask+0xea/0x4e0 [ 174.837437][ T6756] alloc_pages_mpol+0x1fb/0x550 [ 174.837466][ T6756] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 174.837497][ T6756] ? __lock_acquire+0x62e/0x1ce0 [ 174.837528][ T6756] folio_alloc_mpol_noprof+0x36/0x2f0 [ 174.837562][ T6756] vma_alloc_folio_noprof+0xed/0x1e0 [ 174.837595][ T6756] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 174.837635][ T6756] do_pte_missing+0x2202/0x3ba0 [ 174.837669][ T6756] ? find_held_lock+0x2b/0x80 [ 174.837698][ T6756] __handle_mm_fault+0x1556/0x2aa0 [ 174.837738][ T6756] ? __pfx___handle_mm_fault+0x10/0x10 [ 174.837778][ T6756] ? __pte_offset_map_lock+0x174/0x310 [ 174.837804][ T6756] ? find_held_lock+0x2b/0x80 [ 174.837833][ T6756] ? follow_page_pte+0x5cf/0x1390 [ 174.837866][ T6756] handle_mm_fault+0x589/0xd10 [ 174.837905][ T6756] __get_user_pages+0x54e/0x3530 [ 174.837946][ T6756] ? __pfx___get_user_pages+0x10/0x10 [ 174.837983][ T6756] populate_vma_page_range+0x267/0x3f0 [ 174.838015][ T6756] ? __pfx_populate_vma_page_range+0x10/0x10 [ 174.838045][ T6756] ? __pfx_find_vma_intersection+0x10/0x10 [ 174.838096][ T6756] ? do_mmap+0x69c/0x1210 [ 174.838127][ T6756] __mm_populate+0x1d8/0x380 [ 174.838162][ T6756] ? __pfx___mm_populate+0x10/0x10 [ 174.838196][ T6756] ? up_write+0x1b2/0x520 [ 174.838233][ T6756] vm_mmap_pgoff+0x37f/0x470 [ 174.838264][ T6756] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 174.838299][ T6756] ? __x64_sys_futex+0x1e0/0x4c0 [ 174.838336][ T6756] ? __x64_sys_futex+0x1e9/0x4c0 [ 174.838371][ T6756] ksys_mmap_pgoff+0x7d/0x5c0 [ 174.838398][ T6756] ? xfd_validate_state+0x61/0x180 [ 174.838430][ T6756] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 174.838462][ T6756] __x64_sys_mmap+0x125/0x190 [ 174.838500][ T6756] do_syscall_64+0xcd/0xfa0 [ 174.838527][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.838550][ T6756] RIP: 0033:0x7fa78dd8eec9 [ 174.838569][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.838590][ T6756] RSP: 002b:00007fa78ec6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.838611][ T6756] RAX: ffffffffffffffda RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 174.838626][ T6756] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 174.838639][ T6756] RBP: 00007fa78de11f91 R08: 0000000000000002 R09: 0000000000008000 [ 174.838653][ T6756] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 174.838666][ T6756] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 174.838696][ T6756] [ 176.237864][ T6787] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.929031][ T6811] vivid-007: ================= START STATUS ================= [ 178.950504][ T6811] vivid-007: Generate PTS: true [ 178.955638][ T6811] vivid-007: Generate SCR: true [ 179.017221][ T6811] tpg source WxH: 320x240 (Y'CbCr) [ 179.024733][ T6811] tpg field: 1 [ 179.030541][ T6811] tpg crop: (0,0)/320x240 [ 179.057556][ T6811] tpg compose: (0,0)/320x240 [ 179.067138][ T6811] tpg colorspace: 8 [ 179.075363][ T6811] tpg transfer function: 0/0 [ 179.084546][ T6811] tpg Y'CbCr encoding: 0/0 [ 179.097217][ T6811] tpg quantization: 0/0 [ 179.105819][ T6811] tpg RGB range: 0/2 [ 179.114198][ T6811] vivid-007: ================== END STATUS ================== [ 181.150355][ T6848] XFS: Clearing xfsstats [ 185.871651][ T6932] Debayer A: ================= START STATUS ================= [ 185.897226][ T6932] Debayer A: Debayer Mean Window Size: 3 [ 185.989681][ T6932] Debayer A: ================== END STATUS ================== syzkaller syzkaller login: [ 190.048446][ T6991] FAULT_INJECTION: forcing a failure. [ 190.048446][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 190.090015][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.3.155 Not tainted syzkaller #0 PREEMPT(full) [ 190.090056][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.090074][ T6991] Call Trace: [ 190.090083][ T6991] [ 190.090094][ T6991] dump_stack_lvl+0x16c/0x1f0 [ 190.090133][ T6991] should_fail_ex+0x512/0x640 [ 190.090169][ T6991] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 190.090205][ T6991] should_failslab+0xc2/0x120 [ 190.090246][ T6991] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 190.090280][ T6991] ? shmem_alloc_inode+0x25/0x50 [ 190.090324][ T6991] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 190.090359][ T6991] ? shmem_alloc_inode+0x25/0x50 [ 190.090395][ T6991] shmem_alloc_inode+0x25/0x50 [ 190.090430][ T6991] alloc_inode+0x61/0x240 [ 190.090471][ T6991] new_inode+0x22/0x1c0 [ 190.090508][ T6991] ? alloc_fd+0x471/0x7d0 [ 190.090538][ T6991] shmem_get_inode+0x19a/0xfb0 [ 190.090588][ T6991] __shmem_file_setup+0x107/0x330 [ 190.090638][ T6991] __do_sys_memfd_create+0x40a/0x8a0 [ 190.090687][ T6991] do_syscall_64+0xcd/0xfa0 [ 190.090724][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.090761][ T6991] RIP: 0033:0x7f5e7c58eec9 [ 190.090785][ T6991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.090813][ T6991] RSP: 002b:00007f5e7d388038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 190.090841][ T6991] RAX: ffffffffffffffda RBX: 00007f5e7c7e5fa0 RCX: 00007f5e7c58eec9 [ 190.090861][ T6991] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000080 [ 190.090879][ T6991] RBP: 00007f5e7c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.090898][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.090915][ T6991] R13: 00007f5e7c7e6038 R14: 00007f5e7c7e5fa0 R15: 00007ffca173e158 [ 190.090955][ T6991] [ 190.619976][ T6989] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 192.653338][ T6983] Process accounting paused [ 193.701679][ T7013] bridge0: port 3(hsr0) entered blocking state [ 193.757711][ T7013] bridge0: port 3(hsr0) entered disabled state [ 193.776396][ T7013] hsr0: entered allmulticast mode [ 193.839530][ T7013] hsr_slave_0: entered allmulticast mode [ 193.861149][ T7013] hsr_slave_1: entered allmulticast mode [ 193.872210][ T7013] hsr0: entered promiscuous mode [ 193.878593][ T7013] bridge0: port 3(hsr0) entered blocking state [ 193.885208][ T7013] bridge0: port 3(hsr0) entered forwarding state [ 195.303776][ T7048] FAULT_INJECTION: forcing a failure. [ 195.303776][ T7048] name failslab, interval 1, probability 0, space 0, times 0 [ 195.347434][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.3.166 Not tainted syzkaller #0 PREEMPT(full) [ 195.347470][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.347483][ T7048] Call Trace: [ 195.347490][ T7048] [ 195.347499][ T7048] dump_stack_lvl+0x16c/0x1f0 [ 195.347529][ T7048] should_fail_ex+0x512/0x640 [ 195.347557][ T7048] ? fs_reclaim_acquire+0xae/0x150 [ 195.347589][ T7048] should_failslab+0xc2/0x120 [ 195.347620][ T7048] __kmalloc_noprof+0xdd/0x880 [ 195.347657][ T7048] ? tomoyo_encode2+0x100/0x3e0 [ 195.347685][ T7048] ? tomoyo_encode2+0x100/0x3e0 [ 195.347707][ T7048] tomoyo_encode2+0x100/0x3e0 [ 195.347733][ T7048] tomoyo_encode+0x29/0x50 [ 195.347755][ T7048] tomoyo_realpath_from_path+0x18f/0x6e0 [ 195.347788][ T7048] tomoyo_path_number_perm+0x245/0x580 [ 195.347822][ T7048] ? tomoyo_path_number_perm+0x237/0x580 [ 195.347859][ T7048] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.347896][ T7048] ? find_held_lock+0x2b/0x80 [ 195.347946][ T7048] ? find_held_lock+0x2b/0x80 [ 195.347968][ T7048] ? hook_file_ioctl_common+0x145/0x410 [ 195.348012][ T7048] ? __fget_files+0x20e/0x3c0 [ 195.348039][ T7048] security_file_ioctl+0x9b/0x240 [ 195.348077][ T7048] __x64_sys_ioctl+0xb7/0x210 [ 195.348113][ T7048] do_syscall_64+0xcd/0xfa0 [ 195.348140][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.348164][ T7048] RIP: 0033:0x7f5e7c58eec9 [ 195.348182][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.348203][ T7048] RSP: 002b:00007f5e7d388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.348225][ T7048] RAX: ffffffffffffffda RBX: 00007f5e7c7e5fa0 RCX: 00007f5e7c58eec9 [ 195.348239][ T7048] RDX: 00002000000001c0 RSI: fffffffffffffd02 RDI: 0000000000000003 [ 195.348253][ T7048] RBP: 00007f5e7d388090 R08: 0000000000000000 R09: 0000000000000000 [ 195.348304][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.348330][ T7048] R13: 00007f5e7c7e6038 R14: 00007f5e7c7e5fa0 R15: 00007ffca173e158 [ 195.348360][ T7048] [ 195.348379][ T7048] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.569893][ T7147] size and base must be multiples of 4 kiB [ 202.674085][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT(full) [ 202.674115][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.674128][ T7147] Call Trace: [ 202.674136][ T7147] [ 202.674145][ T7147] dump_stack_lvl+0x16c/0x1f0 [ 202.674175][ T7147] mtrr_add+0xdf/0x110 [ 202.674213][ T7147] mtrr_ioctl+0x7ef/0xcf0 [ 202.674265][ T7147] ? __pfx_mtrr_ioctl+0x10/0x10 [ 202.674304][ T7147] ? find_held_lock+0x2b/0x80 [ 202.674335][ T7147] ? __fget_files+0x20e/0x3c0 [ 202.674359][ T7147] ? __pfx_mtrr_ioctl+0x10/0x10 [ 202.674392][ T7147] proc_reg_unlocked_ioctl+0x229/0x320 [ 202.674423][ T7147] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 202.674458][ T7147] __x64_sys_ioctl+0x18b/0x210 [ 202.674495][ T7147] do_syscall_64+0xcd/0xfa0 [ 202.674522][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.674546][ T7147] RIP: 0033:0x7fa78dd8eec9 [ 202.674565][ T7147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.674587][ T7147] RSP: 002b:00007fa78ec6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.674608][ T7147] RAX: ffffffffffffffda RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 202.674625][ T7147] RDX: 0000000000000005 RSI: 00000000400c4d01 RDI: 0000000000000005 [ 202.674640][ T7147] RBP: 00007fa78de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 202.674653][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.674667][ T7147] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 202.674697][ T7147] [ 204.591350][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.606722][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.379696][ T7189] sp0: Synchronizing with TNC [ 209.413980][ T7250] FAULT_INJECTION: forcing a failure. [ 209.413980][ T7250] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.436430][ T7250] CPU: 0 UID: 0 PID: 7250 Comm: syz.3.202 Not tainted syzkaller #0 PREEMPT(full) [ 209.436470][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.436488][ T7250] Call Trace: [ 209.436497][ T7250] [ 209.436508][ T7250] dump_stack_lvl+0x16c/0x1f0 [ 209.436548][ T7250] should_fail_ex+0x512/0x640 [ 209.436591][ T7250] should_fail_alloc_page+0xe7/0x130 [ 209.436635][ T7250] prepare_alloc_pages+0x3c2/0x610 [ 209.436675][ T7250] ? rcu_is_watching+0x12/0xc0 [ 209.436712][ T7250] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 209.436743][ T7250] ? kasan_save_stack+0x33/0x60 [ 209.436777][ T7250] ? css_rstat_updated+0x1c2/0x510 [ 209.436813][ T7250] ? __pfx_css_rstat_updated+0x10/0x10 [ 209.436871][ T7250] ? __lock_acquire+0x62e/0x1ce0 [ 209.436924][ T7250] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 209.436975][ T7250] ? __lock_acquire+0x62e/0x1ce0 [ 209.437024][ T7250] ? __lock_acquire+0x62e/0x1ce0 [ 209.437070][ T7250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 209.437133][ T7250] ? policy_nodemask+0xea/0x4e0 [ 209.437174][ T7250] alloc_pages_mpol+0x1fb/0x550 [ 209.437215][ T7250] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 209.437259][ T7250] ? __lock_acquire+0x62e/0x1ce0 [ 209.437310][ T7250] folio_alloc_mpol_noprof+0x36/0x2f0 [ 209.437358][ T7250] vma_alloc_folio_noprof+0xed/0x1e0 [ 209.437404][ T7250] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 209.437460][ T7250] do_pte_missing+0x2202/0x3ba0 [ 209.437511][ T7250] ? find_held_lock+0x2b/0x80 [ 209.437552][ T7250] __handle_mm_fault+0x1556/0x2aa0 [ 209.437609][ T7250] ? __pfx___handle_mm_fault+0x10/0x10 [ 209.437655][ T7250] ? __pte_offset_map_lock+0x174/0x310 [ 209.437685][ T7250] ? find_held_lock+0x2b/0x80 [ 209.437719][ T7250] ? follow_page_pte+0x5cf/0x1390 [ 209.437766][ T7250] handle_mm_fault+0x589/0xd10 [ 209.437812][ T7250] __get_user_pages+0x54e/0x3530 [ 209.437859][ T7250] ? __pfx___get_user_pages+0x10/0x10 [ 209.437915][ T7250] populate_vma_page_range+0x267/0x3f0 [ 209.437952][ T7250] ? __pfx_populate_vma_page_range+0x10/0x10 [ 209.437985][ T7250] ? __pfx_find_vma_intersection+0x10/0x10 [ 209.438017][ T7250] ? do_mmap+0x69c/0x1210 [ 209.438050][ T7250] __mm_populate+0x1d8/0x380 [ 209.438083][ T7250] ? __pfx___mm_populate+0x10/0x10 [ 209.438118][ T7250] ? up_write+0x1b2/0x520 [ 209.438156][ T7250] vm_mmap_pgoff+0x37f/0x470 [ 209.438189][ T7250] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 209.438224][ T7250] ? __x64_sys_futex+0x1e0/0x4c0 [ 209.438261][ T7250] ? __x64_sys_futex+0x1e9/0x4c0 [ 209.438302][ T7250] ksys_mmap_pgoff+0x7d/0x5c0 [ 209.438330][ T7250] ? xfd_validate_state+0x61/0x180 [ 209.438367][ T7250] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 209.438401][ T7250] __x64_sys_mmap+0x125/0x190 [ 209.438440][ T7250] do_syscall_64+0xcd/0xfa0 [ 209.438468][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.438491][ T7250] RIP: 0033:0x7f5e7c58eec9 [ 209.438510][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.438532][ T7250] RSP: 002b:00007f5e7d388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 209.438554][ T7250] RAX: ffffffffffffffda RBX: 00007f5e7c7e5fa0 RCX: 00007f5e7c58eec9 [ 209.438570][ T7250] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 209.438583][ T7250] RBP: 00007f5e7c611f91 R08: 0000000000000002 R09: 0000000000008000 [ 209.438598][ T7250] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 209.438612][ T7250] R13: 00007f5e7c7e6038 R14: 00007f5e7c7e5fa0 R15: 00007ffca173e158 [ 209.438643][ T7250] [ 213.669364][ T7326] FAULT_INJECTION: forcing a failure. [ 213.669364][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 213.707165][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.0.215 Not tainted syzkaller #0 PREEMPT(full) [ 213.707206][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.707225][ T7326] Call Trace: [ 213.707235][ T7326] [ 213.707246][ T7326] dump_stack_lvl+0x16c/0x1f0 [ 213.707286][ T7326] should_fail_ex+0x512/0x640 [ 213.707323][ T7326] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 213.707359][ T7326] should_failslab+0xc2/0x120 [ 213.707398][ T7326] kmem_cache_alloc_noprof+0x75/0x6e0 [ 213.707428][ T7326] ? ptlock_alloc+0x1f/0x70 [ 213.707480][ T7326] ? ptlock_alloc+0x1f/0x70 [ 213.707524][ T7326] ptlock_alloc+0x1f/0x70 [ 213.707568][ T7326] pte_alloc_one+0x84/0x350 [ 213.707604][ T7326] copy_huge_pmd+0x1ae/0x3470 [ 213.707657][ T7326] ? do_raw_spin_lock+0x12c/0x2b0 [ 213.707706][ T7326] ? find_held_lock+0x2b/0x80 [ 213.707738][ T7326] ? __pmd_alloc+0x64a/0x8b0 [ 213.707777][ T7326] ? __pfx_copy_huge_pmd+0x10/0x10 [ 213.707823][ T7326] ? do_raw_spin_unlock+0x172/0x230 [ 213.707873][ T7326] ? _raw_spin_unlock+0x28/0x50 [ 213.707914][ T7326] copy_page_range+0x1e25/0x6930 [ 213.707976][ T7326] ? __lock_acquire+0x62e/0x1ce0 [ 213.708049][ T7326] ? __pfx_copy_page_range+0x10/0x10 [ 213.708100][ T7326] ? mas_store+0x860/0x1030 [ 213.708135][ T7326] ? __pfx___might_resched+0x10/0x10 [ 213.708169][ T7326] ? find_held_lock+0x2b/0x80 [ 213.708201][ T7326] ? __pfx_mas_store+0x10/0x10 [ 213.708237][ T7326] ? __vma_enter_locked+0x163/0x3f0 [ 213.708305][ T7326] dup_mmap+0xe80/0x2280 [ 213.708362][ T7326] ? __pfx_dup_mmap+0x10/0x10 [ 213.708431][ T7326] copy_process+0x3f0c/0x76a0 [ 213.708469][ T7326] ? __pfx___futex_wait+0x10/0x10 [ 213.708534][ T7326] ? __pfx_copy_process+0x10/0x10 [ 213.708572][ T7326] ? futex_private_hash_put+0x176/0x300 [ 213.708616][ T7326] ? futex_private_hash_put+0x18a/0x300 [ 213.708664][ T7326] kernel_clone+0xfc/0x930 [ 213.708705][ T7326] ? __pfx_kernel_clone+0x10/0x10 [ 213.708767][ T7326] __do_sys_clone+0xce/0x120 [ 213.708806][ T7326] ? __pfx___do_sys_clone+0x10/0x10 [ 213.708863][ T7326] ? xfd_validate_state+0x61/0x180 [ 213.708915][ T7326] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 213.708967][ T7326] do_syscall_64+0xcd/0xfa0 [ 213.709004][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.709035][ T7326] RIP: 0033:0x7fa78dd8eec9 [ 213.709059][ T7326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.709088][ T7326] RSP: 002b:00007fa78ec6cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 213.709117][ T7326] RAX: ffffffffffffffda RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 213.709137][ T7326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000000 [ 213.709155][ T7326] RBP: 00007fa78de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 213.709173][ T7326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.709190][ T7326] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 213.709233][ T7326] [ 216.948667][ T7364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.222'. [ 217.172540][ T7367] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 219.690035][ T7390] FAULT_INJECTION: forcing a failure. [ 219.690035][ T7390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.707259][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.0.228 Not tainted syzkaller #0 PREEMPT(full) [ 219.707291][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.707305][ T7390] Call Trace: [ 219.707313][ T7390] [ 219.707323][ T7390] dump_stack_lvl+0x16c/0x1f0 [ 219.707354][ T7390] should_fail_ex+0x512/0x640 [ 219.707388][ T7390] should_fail_alloc_page+0xe7/0x130 [ 219.707423][ T7390] prepare_alloc_pages+0x3c2/0x610 [ 219.707453][ T7390] ? rcu_is_watching+0x12/0xc0 [ 219.707482][ T7390] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 219.707522][ T7390] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.707557][ T7390] ? rcu_is_watching+0x12/0xc0 [ 219.707581][ T7390] ? trace_kmalloc+0x2b/0xd0 [ 219.707609][ T7390] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 219.707639][ T7390] ? __alloc_skb+0x166/0x380 [ 219.707661][ T7390] ? rcu_watching_snap_stopped_since+0xf1/0x110 [ 219.707688][ T7390] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.707730][ T7390] ? policy_nodemask+0xea/0x4e0 [ 219.707763][ T7390] alloc_pages_mpol+0x1fb/0x550 [ 219.707796][ T7390] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 219.707825][ T7390] ? __pfx___alloc_skb+0x10/0x10 [ 219.707848][ T7390] ? find_held_lock+0x2b/0x80 [ 219.707878][ T7390] alloc_pages_noprof+0x131/0x390 [ 219.707910][ T7390] alloc_skb_with_frags+0x24a/0x860 [ 219.707949][ T7390] sock_alloc_send_pskb+0x7f9/0x980 [ 219.707983][ T7390] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 219.708020][ T7390] tun_get_user+0x7e2/0x3cc0 [ 219.708068][ T7390] ? __pfx_tun_get_user+0x10/0x10 [ 219.708111][ T7390] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 219.708152][ T7390] ? find_held_lock+0x2b/0x80 [ 219.708177][ T7390] ? tun_get+0x191/0x370 [ 219.708213][ T7390] tun_chr_write_iter+0xdc/0x210 [ 219.708250][ T7390] vfs_write+0x7d3/0x11d0 [ 219.708276][ T7390] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 219.708313][ T7390] ? __pfx_vfs_write+0x10/0x10 [ 219.708336][ T7390] ? find_held_lock+0x2b/0x80 [ 219.708377][ T7390] __x64_sys_pwrite64+0x1eb/0x250 [ 219.708405][ T7390] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 219.708441][ T7390] do_syscall_64+0xcd/0xfa0 [ 219.708469][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.708494][ T7390] RIP: 0033:0x7fa78dd8eec9 [ 219.708513][ T7390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.708535][ T7390] RSP: 002b:00007fa78ec6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 219.708560][ T7390] RAX: ffffffffffffffda RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 219.708576][ T7390] RDX: 000000000000fdf2 RSI: 0000000000000000 RDI: 00000000000000c8 [ 219.708592][ T7390] RBP: 00007fa78de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 219.708608][ T7390] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000000 [ 219.708621][ T7390] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 219.708651][ T7390] [ 220.618100][ T7392] zswap: compressor not available [ 222.347767][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 222.347814][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 222.355643][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 222.360063][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 224.016570][ T7412] Process accounting resumed [ 228.799230][ T7518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.799400][ T7518] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.846960][ T7518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.847179][ T7518] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 229.019226][ T7518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.039002][ T7518] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 229.154550][ T7527] FAULT_INJECTION: forcing a failure. [ 229.154550][ T7527] name failslab, interval 1, probability 0, space 0, times 0 [ 229.154630][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.0.249 Not tainted syzkaller #0 PREEMPT(full) [ 229.154666][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 229.154684][ T7527] Call Trace: [ 229.154694][ T7527] [ 229.154705][ T7527] dump_stack_lvl+0x16c/0x1f0 [ 229.154745][ T7527] should_fail_ex+0x512/0x640 [ 229.154782][ T7527] ? __kmalloc_cache_noprof+0x5f/0x780 [ 229.154837][ T7527] should_failslab+0xc2/0x120 [ 229.154878][ T7527] __kmalloc_cache_noprof+0x72/0x780 [ 229.154930][ T7527] ? ima_calc_file_hash_tfm+0x234/0x350 [ 229.154984][ T7527] ? ima_calc_file_hash_tfm+0x234/0x350 [ 229.155030][ T7527] ima_calc_file_hash_tfm+0x234/0x350 [ 229.155073][ T7527] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 229.155154][ T7527] ? shmem_huge_global_enabled+0x177/0x240 [ 229.155199][ T7527] ? ima_alloc_tfm+0x21a/0x2e0 [ 229.155235][ T7527] ? shmem_getattr+0x397/0x450 [ 229.155279][ T7527] ima_calc_file_hash+0x1ba/0x490 [ 229.155324][ T7527] ima_collect_measurement+0x8a6/0xa50 [ 229.155381][ T7527] ? __pfx_ima_collect_measurement+0x10/0x10 [ 229.155456][ T7527] ? do_raw_read_unlock+0x44/0xe0 [ 229.155493][ T7527] ? vfs_getxattr_alloc+0xec/0x350 [ 229.155540][ T7527] ? ima_get_hash_algo+0x27c/0x400 [ 229.155578][ T7527] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 229.155625][ T7527] ? process_measurement+0x11fa/0x23e0 [ 229.155667][ T7527] process_measurement+0x11fa/0x23e0 [ 229.155723][ T7527] ? __pfx_process_measurement+0x10/0x10 [ 229.155783][ T7527] ? find_held_lock+0x2b/0x80 [ 229.155852][ T7527] ? mtree_load+0x315/0xa30 [ 229.155898][ T7527] ima_file_mmap+0x1b1/0x1d0 [ 229.155940][ T7527] ? __pfx_ima_file_mmap+0x10/0x10 [ 229.155993][ T7527] security_mmap_file+0x88c/0x990 [ 229.156027][ T7527] __do_sys_remap_file_pages+0x2db/0xab0 [ 229.156084][ T7527] ? __fget_files+0x20e/0x3c0 [ 229.156113][ T7527] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 229.156161][ T7527] ? fput+0x9b/0xd0 [ 229.156201][ T7527] ? ksys_write+0x1ac/0x250 [ 229.156233][ T7527] ? __pfx_ksys_write+0x10/0x10 [ 229.156279][ T7527] do_syscall_64+0xcd/0xfa0 [ 229.156317][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.156350][ T7527] RIP: 0033:0x7fa78dd8eec9 [ 229.156375][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.156404][ T7527] RSP: 002b:00007fa78ec4c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 229.156433][ T7527] RAX: ffffffffffffffda RBX: 00007fa78dfe6090 RCX: 00007fa78dd8eec9 [ 229.156453][ T7527] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a27 [ 229.156472][ T7527] RBP: 00007fa78ec4c090 R08: 000000000000066a R09: 0000000000000000 [ 229.156491][ T7527] R10: 0000000000000b74 R11: 0000000000000246 R12: 0000000000000001 [ 229.156516][ T7527] R13: 00007fa78dfe6128 R14: 00007fa78dfe6090 R15: 00007ffee0441f48 [ 229.156559][ T7527] [ 229.169016][ T7518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.213315][ T30] audit: type=1800 audit(1760030381.571:3): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.249" name="dev/zero" dev="tmpfs" ino=1164 res=0 errno=0 [ 229.568692][ T7518] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.829618][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 230.917399][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 231.069481][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 231.227518][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 232.490860][ T7539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.498698][ T7539] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.505221][ T7539] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.512877][ T7539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 233.937629][ T7565] FAULT_INJECTION: forcing a failure. [ 233.937629][ T7565] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.167291][ T7565] CPU: 1 UID: 0 PID: 7565 Comm: syz.3.256 Not tainted syzkaller #0 PREEMPT(full) [ 234.167334][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.167353][ T7565] Call Trace: [ 234.167364][ T7565] [ 234.167377][ T7565] dump_stack_lvl+0x16c/0x1f0 [ 234.167421][ T7565] should_fail_ex+0x512/0x640 [ 234.167469][ T7565] should_fail_alloc_page+0xe7/0x130 [ 234.167517][ T7565] prepare_alloc_pages+0x3c2/0x610 [ 234.167561][ T7565] ? rcu_is_watching+0x12/0xc0 [ 234.167602][ T7565] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 234.167637][ T7565] ? kasan_save_stack+0x33/0x60 [ 234.167672][ T7565] ? css_rstat_updated+0x1c2/0x510 [ 234.167701][ T7565] ? __pfx_css_rstat_updated+0x10/0x10 [ 234.167731][ T7565] ? __lock_acquire+0x62e/0x1ce0 [ 234.167767][ T7565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.167802][ T7565] ? __lock_acquire+0x62e/0x1ce0 [ 234.167837][ T7565] ? __lock_acquire+0x62e/0x1ce0 [ 234.167880][ T7565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.167923][ T7565] ? policy_nodemask+0xea/0x4e0 [ 234.167956][ T7565] alloc_pages_mpol+0x1fb/0x550 [ 234.167989][ T7565] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 234.168023][ T7565] ? __lock_acquire+0x62e/0x1ce0 [ 234.168058][ T7565] folio_alloc_mpol_noprof+0x36/0x2f0 [ 234.168096][ T7565] vma_alloc_folio_noprof+0xed/0x1e0 [ 234.168131][ T7565] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 234.168176][ T7565] do_pte_missing+0x2202/0x3ba0 [ 234.168213][ T7565] ? find_held_lock+0x2b/0x80 [ 234.168245][ T7565] __handle_mm_fault+0x1556/0x2aa0 [ 234.168290][ T7565] ? __pfx___handle_mm_fault+0x10/0x10 [ 234.168328][ T7565] ? __pte_offset_map_lock+0x174/0x310 [ 234.168357][ T7565] ? find_held_lock+0x2b/0x80 [ 234.168390][ T7565] ? follow_page_pte+0x5cf/0x1390 [ 234.168426][ T7565] handle_mm_fault+0x589/0xd10 [ 234.168468][ T7565] __get_user_pages+0x54e/0x3530 [ 234.168513][ T7565] ? __pfx___get_user_pages+0x10/0x10 [ 234.168553][ T7565] populate_vma_page_range+0x267/0x3f0 [ 234.168588][ T7565] ? __pfx_populate_vma_page_range+0x10/0x10 [ 234.168623][ T7565] ? __pfx_find_vma_intersection+0x10/0x10 [ 234.168655][ T7565] ? do_mmap+0x69c/0x1210 [ 234.168687][ T7565] __mm_populate+0x1d8/0x380 [ 234.168721][ T7565] ? __pfx___mm_populate+0x10/0x10 [ 234.168756][ T7565] ? up_write+0x1b2/0x520 [ 234.168795][ T7565] vm_mmap_pgoff+0x37f/0x470 [ 234.168828][ T7565] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 234.168864][ T7565] ? __x64_sys_futex+0x1e0/0x4c0 [ 234.168903][ T7565] ? __x64_sys_futex+0x1e9/0x4c0 [ 234.168940][ T7565] ksys_mmap_pgoff+0x7d/0x5c0 [ 234.168968][ T7565] ? xfd_validate_state+0x61/0x180 [ 234.169002][ T7565] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 234.169036][ T7565] __x64_sys_mmap+0x125/0x190 [ 234.169075][ T7565] do_syscall_64+0xcd/0xfa0 [ 234.169104][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.169128][ T7565] RIP: 0033:0x7f5e7c58eec9 [ 234.169147][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.169169][ T7565] RSP: 002b:00007f5e7d388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 234.169191][ T7565] RAX: ffffffffffffffda RBX: 00007f5e7c7e5fa0 RCX: 00007f5e7c58eec9 [ 234.169206][ T7565] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 234.169221][ T7565] RBP: 00007f5e7c611f91 R08: 0000000000000002 R09: 0000000000008000 [ 234.169235][ T7565] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 234.169248][ T7565] R13: 00007f5e7c7e6038 R14: 00007f5e7c7e5fa0 R15: 00007ffca173e158 [ 234.169280][ T7565] [ 234.588015][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 234.595021][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 234.601898][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 234.602267][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 235.140691][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'. [ 236.437412][ T7586] FAULT_INJECTION: forcing a failure. [ 236.437412][ T7586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.487333][ T7586] CPU: 0 UID: 0 PID: 7586 Comm: syz.0.262 Not tainted syzkaller #0 PREEMPT(full) [ 236.487383][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 236.487403][ T7586] Call Trace: [ 236.487415][ T7586] [ 236.487427][ T7586] dump_stack_lvl+0x16c/0x1f0 [ 236.487470][ T7586] should_fail_ex+0x512/0x640 [ 236.487516][ T7586] should_fail_alloc_page+0xe7/0x130 [ 236.487568][ T7586] prepare_alloc_pages+0x3c2/0x610 [ 236.487613][ T7586] ? rcu_is_watching+0x12/0xc0 [ 236.487654][ T7586] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 236.487689][ T7586] ? css_rstat_updated+0x1c2/0x510 [ 236.487738][ T7586] ? __pfx_css_rstat_updated+0x10/0x10 [ 236.487783][ T7586] ? __lock_acquire+0x62e/0x1ce0 [ 236.487835][ T7586] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.487887][ T7586] ? __lock_acquire+0x62e/0x1ce0 [ 236.487937][ T7586] ? __lock_acquire+0x62e/0x1ce0 [ 236.487980][ T7586] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.488040][ T7586] ? policy_nodemask+0xea/0x4e0 [ 236.488088][ T7586] alloc_pages_mpol+0x1fb/0x550 [ 236.488134][ T7586] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 236.488183][ T7586] ? __lock_acquire+0x62e/0x1ce0 [ 236.488230][ T7586] folio_alloc_mpol_noprof+0x36/0x2f0 [ 236.488283][ T7586] vma_alloc_folio_noprof+0xed/0x1e0 [ 236.488333][ T7586] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 236.488399][ T7586] do_pte_missing+0x2202/0x3ba0 [ 236.488451][ T7586] ? find_held_lock+0x2b/0x80 [ 236.488496][ T7586] __handle_mm_fault+0x1556/0x2aa0 [ 236.488561][ T7586] ? __pfx___handle_mm_fault+0x10/0x10 [ 236.488616][ T7586] ? __pte_offset_map_lock+0x174/0x310 [ 236.488658][ T7586] ? find_held_lock+0x2b/0x80 [ 236.488713][ T7586] ? follow_page_pte+0x5cf/0x1390 [ 236.488766][ T7586] handle_mm_fault+0x589/0xd10 [ 236.488828][ T7586] __get_user_pages+0x54e/0x3530 [ 236.488892][ T7586] ? __pfx___get_user_pages+0x10/0x10 [ 236.488950][ T7586] populate_vma_page_range+0x267/0x3f0 [ 236.489000][ T7586] ? __pfx_populate_vma_page_range+0x10/0x10 [ 236.489044][ T7586] ? __pfx_find_vma_intersection+0x10/0x10 [ 236.489089][ T7586] ? do_mmap+0x69c/0x1210 [ 236.489136][ T7586] __mm_populate+0x1d8/0x380 [ 236.489185][ T7586] ? __pfx___mm_populate+0x10/0x10 [ 236.489233][ T7586] ? up_write+0x1b2/0x520 [ 236.489286][ T7586] vm_mmap_pgoff+0x37f/0x470 [ 236.489333][ T7586] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 236.489384][ T7586] ? __x64_sys_futex+0x1e0/0x4c0 [ 236.489428][ T7586] ? __x64_sys_futex+0x1e9/0x4c0 [ 236.489478][ T7586] ksys_mmap_pgoff+0x7d/0x5c0 [ 236.489517][ T7586] ? xfd_validate_state+0x61/0x180 [ 236.489562][ T7586] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 236.489610][ T7586] __x64_sys_mmap+0x125/0x190 [ 236.489667][ T7586] do_syscall_64+0xcd/0xfa0 [ 236.489717][ T7586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.489751][ T7586] RIP: 0033:0x7fa78dd8eec9 [ 236.489779][ T7586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.489811][ T7586] RSP: 002b:00007fa78ec6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 236.489842][ T7586] RAX: ffffffffffffffda RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 236.489865][ T7586] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 236.489885][ T7586] RBP: 00007fa78de11f91 R08: 0000000000000002 R09: 0000000000008000 [ 236.489905][ T7586] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 236.489925][ T7586] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 236.489970][ T7586] [ 238.757850][ T7602] FAULT_INJECTION: forcing a failure. [ 238.757850][ T7602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.894273][ T7602] CPU: 1 UID: 0 PID: 7602 Comm: syz.3.264 Not tainted syzkaller #0 PREEMPT(full) [ 238.894304][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.894317][ T7602] Call Trace: [ 238.894324][ T7602] [ 238.894333][ T7602] dump_stack_lvl+0x16c/0x1f0 [ 238.894363][ T7602] should_fail_ex+0x512/0x640 [ 238.894395][ T7602] _copy_from_iter+0x463/0x1720 [ 238.894432][ T7602] ? __pfx__copy_from_iter+0x10/0x10 [ 238.894461][ T7602] ? rcu_is_watching+0x12/0xc0 [ 238.894486][ T7602] ? trace_kmalloc+0x2b/0xd0 [ 238.894514][ T7602] ? __kmalloc_noprof+0x34f/0x880 [ 238.894550][ T7602] ? kernfs_fop_write_iter+0x237/0x570 [ 238.894593][ T7602] kernfs_fop_write_iter+0x19a/0x570 [ 238.894634][ T7602] do_iter_readv_writev+0x65f/0x9e0 [ 238.894676][ T7602] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 238.894735][ T7602] vfs_writev+0x35f/0xde0 [ 238.894766][ T7602] ? __pfx_vfs_writev+0x10/0x10 [ 238.894786][ T7602] ? __mutex_lock+0x1c5/0x1060 [ 238.894822][ T7602] ? __pfx___mutex_lock+0x10/0x10 [ 238.894859][ T7602] ? __fget_files+0x20e/0x3c0 [ 238.894879][ T7602] ? __fget_files+0x1b0/0x3c0 [ 238.894908][ T7602] ? do_writev+0x132/0x340 [ 238.894927][ T7602] do_writev+0x132/0x340 [ 238.894953][ T7602] ? __pfx_do_writev+0x10/0x10 [ 238.894984][ T7602] do_syscall_64+0xcd/0xfa0 [ 238.895012][ T7602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.895035][ T7602] RIP: 0033:0x7f5e7c58eec9 [ 238.895053][ T7602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.895074][ T7602] RSP: 002b:00007f5e7d388038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 238.895096][ T7602] RAX: ffffffffffffffda RBX: 00007f5e7c7e5fa0 RCX: 00007f5e7c58eec9 [ 238.895110][ T7602] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000003 [ 238.895124][ T7602] RBP: 00007f5e7d388090 R08: 0000000000000000 R09: 0000000000000000 [ 238.895137][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.895150][ T7602] R13: 00007f5e7c7e6038 R14: 00007f5e7c7e5fa0 R15: 00007ffca173e158 [ 238.895181][ T7602] [ 239.488480][ T7609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.497730][ T7609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.519333][ T7609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.546503][ T7609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.547265][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 241.547295][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 241.557123][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 241.638360][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 242.338877][ T7648] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 242.357005][ T7648] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 246.628169][ T7685] FAULT_INJECTION: forcing a failure. [ 246.628169][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 246.773156][ T7685] CPU: 1 UID: 0 PID: 7685 Comm: syz.2.280 Not tainted syzkaller #0 PREEMPT(full) [ 246.773196][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.773215][ T7685] Call Trace: [ 246.773226][ T7685] [ 246.773237][ T7685] dump_stack_lvl+0x16c/0x1f0 [ 246.773279][ T7685] should_fail_ex+0x512/0x640 [ 246.773317][ T7685] ? __kmalloc_cache_noprof+0x5f/0x780 [ 246.773373][ T7685] should_failslab+0xc2/0x120 [ 246.773416][ T7685] __kmalloc_cache_noprof+0x72/0x780 [ 246.773469][ T7685] ? ring_buffer_read_start+0x149/0x500 [ 246.773520][ T7685] ? __pfx___mutex_lock+0x10/0x10 [ 246.773563][ T7685] ? ring_buffer_read_start+0x149/0x500 [ 246.773611][ T7685] ring_buffer_read_start+0x149/0x500 [ 246.773667][ T7685] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 246.773721][ T7685] ? lockdep_init_map_type+0x5c/0x280 [ 246.773768][ T7685] ? ring_buffer_overruns+0x195/0x1f0 [ 246.773814][ T7685] tracing_open+0xad9/0xdf0 [ 246.773864][ T7685] do_dentry_open+0x982/0x1530 [ 246.773902][ T7685] ? __pfx_tracing_open+0x10/0x10 [ 246.773950][ T7685] vfs_open+0x82/0x3f0 [ 246.774001][ T7685] path_openat+0x1de4/0x2cb0 [ 246.774050][ T7685] ? __pfx_path_openat+0x10/0x10 [ 246.774097][ T7685] do_filp_open+0x20b/0x470 [ 246.774133][ T7685] ? __pfx_do_filp_open+0x10/0x10 [ 246.774199][ T7685] ? alloc_fd+0x471/0x7d0 [ 246.774242][ T7685] do_sys_openat2+0x11b/0x1d0 [ 246.774288][ T7685] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.774344][ T7685] ? __fget_files+0x20e/0x3c0 [ 246.774381][ T7685] __x64_sys_openat+0x174/0x210 [ 246.774427][ T7685] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.774474][ T7685] ? ksys_write+0x1ac/0x250 [ 246.774523][ T7685] do_syscall_64+0xcd/0xfa0 [ 246.774561][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.774595][ T7685] RIP: 0033:0x7f16faf8eec9 [ 246.774620][ T7685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.774650][ T7685] RSP: 002b:00007f16f91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.774681][ T7685] RAX: ffffffffffffffda RBX: 00007f16fb1e5fa0 RCX: 00007f16faf8eec9 [ 246.774709][ T7685] RDX: 1a6b75d63882a712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 246.774731][ T7685] RBP: 00007f16f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.774749][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.774768][ T7685] R13: 00007f16fb1e6038 R14: 00007f16fb1e5fa0 R15: 00007fff386540d8 [ 246.774813][ T7685] [ 250.704937][ T7745] FAULT_INJECTION: forcing a failure. [ 250.704937][ T7745] name fail_futex, interval 1, probability 0, space 0, times 1 [ 250.749499][ T7745] CPU: 0 UID: 0 PID: 7745 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 250.749530][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.749544][ T7745] Call Trace: [ 250.749551][ T7745] [ 250.749559][ T7745] dump_stack_lvl+0x16c/0x1f0 [ 250.749589][ T7745] should_fail_ex+0x512/0x640 [ 250.749622][ T7745] get_futex_key+0x1d0/0x1560 [ 250.749658][ T7745] ? __pfx_get_futex_key+0x10/0x10 [ 250.749687][ T7745] ? __pfx_seq_read+0x10/0x10 [ 250.749732][ T7745] futex_wake+0xea/0x530 [ 250.749772][ T7745] ? __pfx_futex_wake+0x10/0x10 [ 250.749815][ T7745] ? __pfx_seq_read+0x10/0x10 [ 250.749853][ T7745] ? ksys_read+0x190/0x250 [ 250.749882][ T7745] do_futex+0x1e3/0x350 [ 250.749923][ T7745] ? __pfx_do_futex+0x10/0x10 [ 250.749963][ T7745] __x64_sys_futex+0x1e0/0x4c0 [ 250.749998][ T7745] ? fput+0x9b/0xd0 [ 250.750027][ T7745] ? __pfx___x64_sys_futex+0x10/0x10 [ 250.750059][ T7745] ? ksys_read+0x1ac/0x250 [ 250.750083][ T7745] ? __pfx_ksys_read+0x10/0x10 [ 250.750115][ T7745] do_syscall_64+0xcd/0xfa0 [ 250.750143][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.750166][ T7745] RIP: 0033:0x7fa78dd8eec9 [ 250.750184][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.750206][ T7745] RSP: 002b:00007fa78ec6d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 250.750227][ T7745] RAX: ffffffffffffffda RBX: 00007fa78dfe5fa8 RCX: 00007fa78dd8eec9 [ 250.750242][ T7745] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa78dfe5fac [ 250.750256][ T7745] RBP: 00007fa78dfe5fa0 R08: 00007fa78ec6e000 R09: 0000000000000000 [ 250.750271][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.750284][ T7745] R13: 00007fa78dfe6038 R14: 00007ffee0441e60 R15: 00007ffee0441f48 [ 250.750314][ T7745] [ 256.910105][ T7764] Process accounting paused [ 257.593349][ T7802] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81646c1a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 257.609310][ T7802] Call Trace: [ 257.612617][ T7802] [ 257.615555][ T7802] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 257.622271][ T7802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 257.628135][ T7802] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 257.634671][ T7802] mce_cpu_restart+0xd9/0x1f0 [ 257.639385][ T7802] ? __pfx_mce_cpu_restart+0x10/0x10 [ 257.644707][ T7802] smp_call_function_many_cond+0x122a/0x1600 [ 257.650765][ T7802] ? __pfx_mce_cpu_restart+0x10/0x10 [ 257.656119][ T7802] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 257.661950][ T7802] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 257.668316][ T7802] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 257.674371][ T7802] ? __pfx_mce_cpu_restart+0x10/0x10 [ 257.679695][ T7802] on_each_cpu_cond_mask+0x40/0x90 [ 257.684862][ T7802] set_bank+0x240/0x3a0 [ 257.689047][ T7802] ? __pfx_set_bank+0x10/0x10 [ 257.693780][ T7802] ? find_held_lock+0x2b/0x80 [ 257.698485][ T7802] ? __pfx_set_bank+0x10/0x10 [ 257.703198][ T7802] dev_attr_store+0x58/0x80 [ 257.707735][ T7802] ? __pfx_dev_attr_store+0x10/0x10 [ 257.712987][ T7802] sysfs_kf_write+0xf2/0x150 [ 257.717624][ T7802] kernfs_fop_write_iter+0x3af/0x570 [ 257.722969][ T7802] ? __pfx_sysfs_kf_write+0x10/0x10 [ 257.728210][ T7802] vfs_write+0x7d3/0x11d0 [ 257.732665][ T7802] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 257.738524][ T7802] ? __pfx___mutex_lock+0x10/0x10 [ 257.743600][ T7802] ? __pfx_vfs_write+0x10/0x10 [ 257.748416][ T7802] ksys_write+0x12a/0x250 [ 257.752776][ T7802] ? __pfx_ksys_write+0x10/0x10 [ 257.757674][ T7802] do_syscall_64+0xcd/0xfa0 [ 257.762210][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.768131][ T7802] RIP: 0033:0x7f16faf8eec9 [ 257.772568][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.792204][ T7802] RSP: 002b:00007f16f91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.800694][ T7802] RAX: ffffffffffffffda RBX: 00007f16fb1e5fa0 RCX: 00007f16faf8eec9 [ 257.808685][ T7802] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 000000000000000a [ 257.816701][ T7802] RBP: 00007f16fb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 257.824714][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.832709][ T7802] R13: 00007f16fb1e6038 R14: 00007f16fb1e5fa0 R15: 00007fff386540d8 [ 257.840750][ T7802] [ 258.887991][ T7834] random: crng reseeded on system resumption [ 260.540602][ T7850] Console: switching to colour VGA+ 80x25 [ 261.608342][ T7858] netlink: 330 bytes leftover after parsing attributes in process `syz.2.307'. [ 261.623491][ T7858] : renamed from gre0 (while UP) [ 261.729076][ T7858] netlink: 330 bytes leftover after parsing attributes in process `syz.2.307'. [ 261.759108][ T7861] erspan0: entered allmulticast mode [ 261.840329][ T7861] usbip-vudc usbip-vudc.0: gadget not bound [ 263.749941][ T7884] : entered promiscuous mode [ 265.578348][ T7917] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 265.649384][ T7917] nbd: must specify at least one socket [ 266.097522][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.106138][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.054652][ T7931] FAULT_INJECTION: forcing a failure. [ 268.054652][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 268.069023][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.1.327 Not tainted syzkaller #0 PREEMPT(full) [ 268.069073][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.069093][ T7931] Call Trace: [ 268.069103][ T7931] [ 268.069116][ T7931] dump_stack_lvl+0x16c/0x1f0 [ 268.069160][ T7931] should_fail_ex+0x512/0x640 [ 268.069197][ T7931] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 268.069233][ T7931] should_failslab+0xc2/0x120 [ 268.069279][ T7931] kmem_cache_alloc_noprof+0x75/0x6e0 [ 268.069314][ T7931] ? __kernfs_new_node+0xd2/0x8e0 [ 268.069364][ T7931] ? __kernfs_new_node+0xd2/0x8e0 [ 268.069404][ T7931] __kernfs_new_node+0xd2/0x8e0 [ 268.069450][ T7931] ? __pfx___kernfs_new_node+0x10/0x10 [ 268.069503][ T7931] ? find_held_lock+0x2b/0x80 [ 268.069540][ T7931] ? kernfs_root+0xee/0x2a0 [ 268.069591][ T7931] kernfs_new_node+0x13c/0x1e0 [ 268.069646][ T7931] __kernfs_create_file+0x53/0x350 [ 268.069683][ T7931] sysfs_add_file_mode_ns+0x207/0x3c0 [ 268.069733][ T7931] internal_create_group+0x578/0xf30 [ 268.069789][ T7931] ? __pfx_internal_create_group+0x10/0x10 [ 268.069849][ T7931] ? kernfs_create_link+0x1bd/0x240 [ 268.069889][ T7931] internal_create_groups+0x9d/0x150 [ 268.069938][ T7931] device_add+0x6d1/0x1aa0 [ 268.069985][ T7931] ? __pfx_device_add+0x10/0x10 [ 268.070027][ T7931] ? lockdep_init_map_type+0x5c/0x280 [ 268.070085][ T7931] ? __init_waitqueue_head+0xca/0x150 [ 268.070150][ T7931] netdev_register_kobject+0x1a9/0x3d0 [ 268.070205][ T7931] register_netdevice+0x13dc/0x2270 [ 268.070254][ T7931] ? __pfx_register_netdevice+0x10/0x10 [ 268.070296][ T7931] ? dev_addr_mod+0x316/0x540 [ 268.070349][ T7931] __tun_chr_ioctl+0x1eb6/0x4880 [ 268.070386][ T7931] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 268.070431][ T7931] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 268.070472][ T7931] ? hook_file_ioctl_common+0x145/0x410 [ 268.070527][ T7931] ? __fget_files+0x20e/0x3c0 [ 268.070561][ T7931] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 268.070606][ T7931] __x64_sys_ioctl+0x18b/0x210 [ 268.070656][ T7931] do_syscall_64+0xcd/0xfa0 [ 268.070696][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.070731][ T7931] RIP: 0033:0x7f1701b8eec9 [ 268.070754][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.070786][ T7931] RSP: 002b:00007f1702a89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.070817][ T7931] RAX: ffffffffffffffda RBX: 00007f1701de5fa0 RCX: 00007f1701b8eec9 [ 268.070838][ T7931] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 268.070857][ T7931] RBP: 00007f1701c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.070873][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.070886][ T7931] R13: 00007f1701de6038 R14: 00007f1701de5fa0 R15: 00007fff6be945f8 [ 268.070918][ T7931] [ 268.553702][ T7936] FAULT_INJECTION: forcing a failure. [ 268.553702][ T7936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.567246][ T7936] CPU: 0 UID: 0 PID: 7936 Comm: syz.2.320 Not tainted syzkaller #0 PREEMPT(full) [ 268.567282][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.567300][ T7936] Call Trace: [ 268.567310][ T7936] [ 268.567321][ T7936] dump_stack_lvl+0x16c/0x1f0 [ 268.567358][ T7936] should_fail_ex+0x512/0x640 [ 268.567402][ T7936] _copy_to_iter+0x463/0x1710 [ 268.567452][ T7936] ? __pfx__copy_to_iter+0x10/0x10 [ 268.567494][ T7936] ? const_folio_flags+0x5b/0x100 [ 268.567527][ T7936] ? folio_mark_accessed+0xc1/0xc00 [ 268.567565][ T7936] ? __pfx_folio_mark_accessed+0x10/0x10 [ 268.567611][ T7936] copy_page_to_iter+0x12a/0x1e0 [ 268.567661][ T7936] filemap_read+0x6b1/0xe40 [ 268.567713][ T7936] ? __pfx_filemap_read+0x10/0x10 [ 268.567742][ T7936] ? __kernel_text_address+0xd/0x40 [ 268.567797][ T7936] ? __pfx_down_read+0x10/0x10 [ 268.567839][ T7936] ? __pfx__kstrtoull+0x10/0x10 [ 268.567888][ T7936] ? __pfx_aa_file_perm+0x10/0x10 [ 268.567930][ T7936] blkdev_read_iter+0x1ac/0x500 [ 268.567972][ T7936] do_iter_readv_writev+0x743/0x9e0 [ 268.568040][ T7936] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 268.568097][ T7936] ? bpf_lsm_file_permission+0x9/0x10 [ 268.568133][ T7936] ? security_file_permission+0x71/0x210 [ 268.568166][ T7936] ? rw_verify_area+0xcf/0x6c0 [ 268.568222][ T7936] vfs_readv+0x4cb/0x8b0 [ 268.568261][ T7936] ? __pfx_vfs_readv+0x10/0x10 [ 268.568321][ T7936] ? __fget_files+0x20e/0x3c0 [ 268.568361][ T7936] ? do_readv+0x132/0x340 [ 268.568390][ T7936] do_readv+0x132/0x340 [ 268.568420][ T7936] ? __pfx_do_readv+0x10/0x10 [ 268.568462][ T7936] ? ksys_write+0x1ac/0x250 [ 268.568494][ T7936] ? __pfx_ksys_write+0x10/0x10 [ 268.568531][ T7936] __x64_sys_preadv2+0x11f/0x160 [ 268.568572][ T7936] do_syscall_64+0xcd/0xfa0 [ 268.568609][ T7936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.568640][ T7936] RIP: 0033:0x7f16faf8eec9 [ 268.568663][ T7936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.568692][ T7936] RSP: 002b:00007f16f91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 268.568721][ T7936] RAX: ffffffffffffffda RBX: 00007f16fb1e5fa0 RCX: 00007f16faf8eec9 [ 268.568742][ T7936] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 268.568761][ T7936] RBP: 00007f16f91f6090 R08: 0000000000000004 R09: 000000000000002e [ 268.568780][ T7936] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 268.568798][ T7936] R13: 00007f16fb1e6038 R14: 00007f16fb1e5fa0 R15: 00007fff386540d8 [ 268.568842][ T7936] [ 268.886127][ T7940] FAULT_INJECTION: forcing a failure. [ 268.886127][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 268.900134][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.0.321 Not tainted syzkaller #0 PREEMPT(full) [ 268.900178][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.900197][ T7940] Call Trace: [ 268.900207][ T7940] [ 268.900220][ T7940] dump_stack_lvl+0x16c/0x1f0 [ 268.900263][ T7940] should_fail_ex+0x512/0x640 [ 268.900303][ T7940] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 268.900342][ T7940] should_failslab+0xc2/0x120 [ 268.900385][ T7940] kmem_cache_alloc_noprof+0x75/0x6e0 [ 268.900415][ T7940] ? sk_prot_alloc+0x60/0x2a0 [ 268.900469][ T7940] ? sk_prot_alloc+0x60/0x2a0 [ 268.900511][ T7940] ? find_held_lock+0x2b/0x80 [ 268.900543][ T7940] sk_prot_alloc+0x60/0x2a0 [ 268.900591][ T7940] sk_alloc+0x36/0xc20 [ 268.900627][ T7940] inet6_create+0x381/0x12b0 [ 268.900668][ T7940] ? inet6_create+0x7f/0x12b0 [ 268.900723][ T7940] __sock_create+0x335/0x8d0 [ 268.900780][ T7940] __sys_socket+0x14d/0x260 [ 268.900830][ T7940] ? __pfx___sys_socket+0x10/0x10 [ 268.900879][ T7940] ? xfd_validate_state+0x61/0x180 [ 268.900924][ T7940] ? __pfx___do_sys_prctl+0x10/0x10 [ 268.900988][ T7940] __x64_sys_socket+0x72/0xb0 [ 268.901037][ T7940] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.901074][ T7940] do_syscall_64+0xcd/0xfa0 [ 268.901112][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.901145][ T7940] RIP: 0033:0x7fa78dd8eec9 [ 268.901171][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.901201][ T7940] RSP: 002b:00007fa78ec6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 268.901230][ T7940] RAX: ffffffffffffffda RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 268.901251][ T7940] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 268.901268][ T7940] RBP: 00007fa78de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.901286][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.901305][ T7940] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 268.901349][ T7940] [ 271.900904][ T7985] FAULT_INJECTION: forcing a failure. [ 271.900904][ T7985] name failslab, interval 1, probability 0, space 0, times 0 [ 271.939777][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.2.331 Not tainted syzkaller #0 PREEMPT(full) [ 271.939822][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.939841][ T7985] Call Trace: [ 271.939852][ T7985] [ 271.939865][ T7985] dump_stack_lvl+0x16c/0x1f0 [ 271.939910][ T7985] should_fail_ex+0x512/0x640 [ 271.939953][ T7985] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 271.939994][ T7985] should_failslab+0xc2/0x120 [ 271.940040][ T7985] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 271.940074][ T7985] ? d_lookup+0xe7/0x190 [ 271.940121][ T7985] ? alloc_inode+0x61/0x240 [ 271.940172][ T7985] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 271.940223][ T7985] ? alloc_inode+0x61/0x240 [ 271.940266][ T7985] alloc_inode+0x61/0x240 [ 271.940313][ T7985] new_inode+0x22/0x1c0 [ 271.940362][ T7985] __debugfs_create_file+0x11c/0x6b0 [ 271.940424][ T7985] debugfs_create_file_full+0x41/0x60 [ 271.940485][ T7985] kvm_dev_ioctl+0x14ca/0x1a80 [ 271.940590][ T7985] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 271.940659][ T7985] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 271.940716][ T7985] __x64_sys_ioctl+0x18b/0x210 [ 271.940776][ T7985] do_syscall_64+0xcd/0xfa0 [ 271.940818][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.940852][ T7985] RIP: 0033:0x7f16faf8eec9 [ 271.940879][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.940922][ T7985] RSP: 002b:00007f16f91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.940953][ T7985] RAX: ffffffffffffffda RBX: 00007f16fb1e5fa0 RCX: 00007f16faf8eec9 [ 271.940974][ T7985] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 271.940993][ T7985] RBP: 00007f16fb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 271.941013][ T7985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.941033][ T7985] R13: 00007f16fb1e6038 R14: 00007f16fb1e5fa0 R15: 00007fff386540d8 [ 271.941078][ T7985] [ 271.942356][ T7985] debugfs: out of free dentries, can not create file 'mmu_cache_miss' [ 274.133727][ T8019] random: crng reseeded on system resumption [ 275.630206][ T8033] FAULT_INJECTION: forcing a failure. [ 275.630206][ T8033] name failslab, interval 1, probability 0, space 0, times 0 [ 275.648304][ T8033] CPU: 1 UID: 0 PID: 8033 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) [ 275.648333][ T8033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.648345][ T8033] Call Trace: [ 275.648352][ T8033] [ 275.648360][ T8033] dump_stack_lvl+0x16c/0x1f0 [ 275.648398][ T8033] should_fail_ex+0x512/0x640 [ 275.648423][ T8033] ? fs_reclaim_acquire+0xae/0x150 [ 275.648455][ T8033] should_failslab+0xc2/0x120 [ 275.648484][ T8033] __kmalloc_noprof+0xdd/0x880 [ 275.648519][ T8033] ? tomoyo_encode2+0x100/0x3e0 [ 275.648546][ T8033] ? tomoyo_encode2+0x100/0x3e0 [ 275.648567][ T8033] tomoyo_encode2+0x100/0x3e0 [ 275.648593][ T8033] tomoyo_encode+0x29/0x50 [ 275.648613][ T8033] tomoyo_realpath_from_path+0x18f/0x6e0 [ 275.648645][ T8033] tomoyo_path_number_perm+0x245/0x580 [ 275.648678][ T8033] ? tomoyo_path_number_perm+0x237/0x580 [ 275.648714][ T8033] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 275.648750][ T8033] ? find_held_lock+0x2b/0x80 [ 275.648797][ T8033] ? find_held_lock+0x2b/0x80 [ 275.648819][ T8033] ? hook_file_ioctl_common+0x145/0x410 [ 275.648862][ T8033] ? __fget_files+0x20e/0x3c0 [ 275.648888][ T8033] security_file_ioctl+0x9b/0x240 [ 275.648924][ T8033] __x64_sys_ioctl+0xb7/0x210 [ 275.648959][ T8033] do_syscall_64+0xcd/0xfa0 [ 275.648986][ T8033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.649008][ T8033] RIP: 0033:0x7f16faf8eec9 [ 275.649025][ T8033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.649045][ T8033] RSP: 002b:00007f16f91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.649066][ T8033] RAX: ffffffffffffffda RBX: 00007f16fb1e5fa0 RCX: 00007f16faf8eec9 [ 275.649080][ T8033] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 275.649093][ T8033] RBP: 00007f16f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 275.649106][ T8033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.649119][ T8033] R13: 00007f16fb1e6038 R14: 00007f16fb1e5fa0 R15: 00007fff386540d8 [ 275.649148][ T8033] [ 275.649166][ T8033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 276.707158][ T5833] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 277.129938][ T8043] FAULT_INJECTION: forcing a failure. [ 277.129938][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 277.230457][ T8043] CPU: 0 UID: 0 PID: 8043 Comm: syz.2.343 Not tainted syzkaller #0 PREEMPT(full) [ 277.230495][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.230507][ T8043] Call Trace: [ 277.230515][ T8043] [ 277.230523][ T8043] dump_stack_lvl+0x16c/0x1f0 [ 277.230552][ T8043] should_fail_ex+0x512/0x640 [ 277.230579][ T8043] ? fs_reclaim_acquire+0xae/0x150 [ 277.230609][ T8043] should_failslab+0xc2/0x120 [ 277.230639][ T8043] __kmalloc_noprof+0xdd/0x880 [ 277.230675][ T8043] ? tomoyo_encode2+0x100/0x3e0 [ 277.230702][ T8043] ? tomoyo_encode2+0x100/0x3e0 [ 277.230723][ T8043] tomoyo_encode2+0x100/0x3e0 [ 277.230749][ T8043] tomoyo_encode+0x29/0x50 [ 277.230770][ T8043] tomoyo_realpath_from_path+0x18f/0x6e0 [ 277.230801][ T8043] tomoyo_path_number_perm+0x245/0x580 [ 277.230835][ T8043] ? tomoyo_path_number_perm+0x237/0x580 [ 277.230890][ T8043] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.230927][ T8043] ? find_held_lock+0x2b/0x80 [ 277.230978][ T8043] ? find_held_lock+0x2b/0x80 [ 277.231000][ T8043] ? hook_file_ioctl_common+0x145/0x410 [ 277.231045][ T8043] ? __fget_files+0x20e/0x3c0 [ 277.231084][ T8043] security_file_ioctl+0x9b/0x240 [ 277.231120][ T8043] __x64_sys_ioctl+0xb7/0x210 [ 277.231155][ T8043] do_syscall_64+0xcd/0xfa0 [ 277.231182][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.231205][ T8043] RIP: 0033:0x7f16faf8eec9 [ 277.231228][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.231249][ T8043] RSP: 002b:00007f16f91f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.231279][ T8043] RAX: ffffffffffffffda RBX: 00007f16fb1e5fa0 RCX: 00007f16faf8eec9 [ 277.231299][ T8043] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000003 [ 277.231318][ T8043] RBP: 00007f16f91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.231336][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.231354][ T8043] R13: 00007f16fb1e6038 R14: 00007f16fb1e5fa0 R15: 00007fff386540d8 [ 277.231394][ T8043] [ 277.231460][ T8043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.747236][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 283.472179][ T8127] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 283.539171][ T8127] Invalid ELF header magic: != ELF [ 284.302545][ T8127] ------------[ cut here ]------------ [ 284.308429][ T8127] WARNING: CPU: 1 PID: 8127 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 284.318955][ T8127] Modules linked in: [ 284.323133][ T8127] CPU: 1 UID: 0 PID: 8127 Comm: syz.0.354 Not tainted syzkaller #0 PREEMPT(full) [ 284.332473][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.342642][ T8127] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 284.349215][ T8127] Code: 75 46 48 8b 7b 08 e8 d2 96 ff ff 31 ff 89 c3 89 c6 e8 37 4d fb ff 85 db 75 0a 48 83 c4 08 5b e9 e9 51 fb ff e8 e4 51 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 d6 51 fb ff e8 71 d0 62 00 eb 87 e8 9a [ 284.370056][ T8127] RSP: 0018:ffffc9000b1c7980 EFLAGS: 00010293 [ 284.377486][ T8127] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81c08269 [ 284.385534][ T8127] RDX: ffff88801ef03c80 RSI: ffffffff81c0827c RDI: 0000000000000005 [ 284.393794][ T8127] RBP: ffffffff81c081a0 R08: 0000000000000005 R09: 0000000000000000 [ 284.401961][ T8127] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880757097c8 [ 284.409991][ T8127] R13: dffffc0000000000 R14: ffffc9000b1c7a08 R15: 0000000000000000 [ 284.418180][ T8127] FS: 0000000000000000(0000) GS:ffff888124ae7000(0000) knlGS:0000000000000000 [ 284.427266][ T8127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.433862][ T8127] CR2: 000000000086d000 CR3: 000000007ad34000 CR4: 00000000003526f0 [ 284.441907][ T8127] Call Trace: [ 284.445220][ T8127] [ 284.448243][ T8127] remove_vma+0x88/0x160 [ 284.452559][ T8127] exit_mmap+0x50a/0xb90 [ 284.456864][ T8127] ? __pfx_exit_mmap+0x10/0x10 [ 284.462829][ T8127] ? __lock_acquire+0xb97/0x1ce0 [ 284.468862][ T8127] ? arch_uprobe_clear_state+0x16/0x150 [ 284.474542][ T8127] __mmput+0x12a/0x410 [ 284.478750][ T8127] mmput+0x62/0x70 [ 284.482527][ T8127] do_exit+0x7c7/0x2bf0 [ 284.486771][ T8127] ? __pfx___might_resched+0x10/0x10 [ 284.492243][ T8127] ? __pfx_do_exit+0x10/0x10 [ 284.496900][ T8127] ? do_raw_spin_lock+0x12c/0x2b0 [ 284.502126][ T8127] ? find_held_lock+0x2b/0x80 [ 284.506853][ T8127] do_group_exit+0xd3/0x2a0 [ 284.511460][ T8127] get_signal+0x2671/0x26d0 [ 284.516029][ T8127] ? __pfx_get_signal+0x10/0x10 [ 284.520982][ T8127] ? __pfx_do_madvise+0x10/0x10 [ 284.525928][ T8127] ? do_futex+0x122/0x350 [ 284.530359][ T8127] arch_do_signal_or_restart+0x8f/0x790 [ 284.535962][ T8127] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.542233][ T8127] ? xfd_validate_state+0x61/0x180 [ 284.547461][ T8127] exit_to_user_mode_loop+0x85/0x130 [ 284.552811][ T8127] do_syscall_64+0x426/0xfa0 [ 284.557488][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.564533][ T8127] RIP: 0033:0x7fa78dd8eec9 [ 284.569650][ T8127] Code: Unable to access opcode bytes at 0x7fa78dd8ee9f. [ 284.576700][ T8127] RSP: 002b:00007fa78ec6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 284.585166][ T8127] RAX: fffffffffffffffc RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 284.593209][ T8127] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 284.601250][ T8127] RBP: 00007fa78de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 284.609303][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.617351][ T8127] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 284.625370][ T8127] [ 284.628467][ T8127] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.635790][ T8127] CPU: 1 UID: 0 PID: 8127 Comm: syz.0.354 Not tainted syzkaller #0 PREEMPT(full) [ 284.645024][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.655107][ T8127] Call Trace: [ 284.658402][ T8127] [ 284.661376][ T8127] dump_stack_lvl+0x3d/0x1f0 [ 284.665999][ T8127] vpanic+0x640/0x6f0 [ 284.670028][ T8127] ? tracing_buffers_mmap_close+0xdd/0x130 [ 284.675888][ T8127] panic+0xca/0xd0 [ 284.679654][ T8127] ? __pfx_panic+0x10/0x10 [ 284.684123][ T8127] ? check_panic_on_warn+0x1f/0xb0 [ 284.689280][ T8127] check_panic_on_warn+0xab/0xb0 [ 284.694286][ T8127] __warn+0xf6/0x3c0 [ 284.698258][ T8127] ? tracing_buffers_mmap_close+0xdd/0x130 [ 284.704097][ T8127] report_bug+0x3c3/0x580 [ 284.708445][ T8127] ? tracing_buffers_mmap_close+0xdd/0x130 [ 284.714320][ T8127] handle_bug+0x184/0x210 [ 284.718685][ T8127] exc_invalid_op+0x17/0x50 [ 284.723220][ T8127] asm_exc_invalid_op+0x1a/0x20 [ 284.728099][ T8127] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 284.734544][ T8127] Code: 75 46 48 8b 7b 08 e8 d2 96 ff ff 31 ff 89 c3 89 c6 e8 37 4d fb ff 85 db 75 0a 48 83 c4 08 5b e9 e9 51 fb ff e8 e4 51 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 d6 51 fb ff e8 71 d0 62 00 eb 87 e8 9a [ 284.754179][ T8127] RSP: 0018:ffffc9000b1c7980 EFLAGS: 00010293 [ 284.760283][ T8127] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81c08269 [ 284.768292][ T8127] RDX: ffff88801ef03c80 RSI: ffffffff81c0827c RDI: 0000000000000005 [ 284.776292][ T8127] RBP: ffffffff81c081a0 R08: 0000000000000005 R09: 0000000000000000 [ 284.784290][ T8127] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff8880757097c8 [ 284.792287][ T8127] R13: dffffc0000000000 R14: ffffc9000b1c7a08 R15: 0000000000000000 [ 284.800286][ T8127] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 284.806572][ T8127] ? tracing_buffers_mmap_close+0xc9/0x130 [ 284.812411][ T8127] ? tracing_buffers_mmap_close+0xdc/0x130 [ 284.818256][ T8127] remove_vma+0x88/0x160 [ 284.822630][ T8127] exit_mmap+0x50a/0xb90 [ 284.826905][ T8127] ? __pfx_exit_mmap+0x10/0x10 [ 284.831707][ T8127] ? __lock_acquire+0xb97/0x1ce0 [ 284.836688][ T8127] ? arch_uprobe_clear_state+0x16/0x150 [ 284.842281][ T8127] __mmput+0x12a/0x410 [ 284.846389][ T8127] mmput+0x62/0x70 [ 284.850141][ T8127] do_exit+0x7c7/0x2bf0 [ 284.854370][ T8127] ? __pfx___might_resched+0x10/0x10 [ 284.859692][ T8127] ? __pfx_do_exit+0x10/0x10 [ 284.864315][ T8127] ? do_raw_spin_lock+0x12c/0x2b0 [ 284.869390][ T8127] ? find_held_lock+0x2b/0x80 [ 284.874109][ T8127] do_group_exit+0xd3/0x2a0 [ 284.878656][ T8127] get_signal+0x2671/0x26d0 [ 284.883201][ T8127] ? __pfx_get_signal+0x10/0x10 [ 284.888077][ T8127] ? __pfx_do_madvise+0x10/0x10 [ 284.892959][ T8127] ? do_futex+0x122/0x350 [ 284.897326][ T8127] arch_do_signal_or_restart+0x8f/0x790 [ 284.902910][ T8127] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 284.909102][ T8127] ? xfd_validate_state+0x61/0x180 [ 284.914259][ T8127] exit_to_user_mode_loop+0x85/0x130 [ 284.919627][ T8127] do_syscall_64+0x426/0xfa0 [ 284.924266][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.930199][ T8127] RIP: 0033:0x7fa78dd8eec9 [ 284.934631][ T8127] Code: Unable to access opcode bytes at 0x7fa78dd8ee9f. [ 284.941658][ T8127] RSP: 002b:00007fa78ec6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 284.950093][ T8127] RAX: fffffffffffffffc RBX: 00007fa78dfe5fa0 RCX: 00007fa78dd8eec9 [ 284.958091][ T8127] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 284.966088][ T8127] RBP: 00007fa78de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 284.974093][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.982082][ T8127] R13: 00007fa78dfe6038 R14: 00007fa78dfe5fa0 R15: 00007ffee0441f48 [ 284.990091][ T8127] [ 284.993483][ T8127] Kernel Offset: disabled [ 284.997831][ T8127] Rebooting in 86400 seconds..