last executing test programs: 42.365328297s ago: executing program 0 (id=2389): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0x41f, r0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.unix.gid/content\x00', 0x28102, 0x0) mmap$auto(0x0, 0x20006, 0x6, 0xab1, 0x401, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r2 = open(&(0x7f0000000100)='./cgroup\x00', 0x105040, 0x0) open_by_handle_at$auto(r2, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x1, 0xffffffffffffffff, 0x10000009, 0x7) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x1, 0x16, 0xfffffffffffffffa, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) close_range$auto(0x2, 0x8, 0x0) creat$auto(&(0x7f0000000040)='./file0\x00', 0x3) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) socket(0xa, 0x801, 0x84) connect$auto(r1, 0x0, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x110) write$auto(0xffffffffffffffff, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) 38.435678758s ago: executing program 0 (id=2395): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) ioperm$auto(0x98c, 0x5ace, 0x8) modify_ldt$auto(0x1, 0x0, 0x805) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0xa, 0x10000) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000080)=0x8) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) prctl$auto(0x7, 0x4800008, r2, 0x7, 0xa65) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) write$auto(r3, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip_vs_conn\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) unshare$auto(0x40000080) ioperm$auto(0x1, 0x1e, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) 32.721496213s ago: executing program 0 (id=2406): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) (fail_nth: 3) 31.914799471s ago: executing program 0 (id=2409): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) statmount$auto(0x0, &(0x7f0000000180)={0x81, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x6, 0x3, 0xb, 0x9, 0x80003, 0x4, 0x80000001, 0x8, 0x9, 0x3, 0x10006, 0x400007f, 0x7, 0x2, 0xe, 0x22000, 0x200, 0x3, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x4, [0x0, 0x0, 0x0, 0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x20000000000000]}, 0x9, 0xd) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) socket(0xa, 0x1, 0x100) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401870cb, r2) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0x0, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8004550f, 0xf15) r3 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$auto_RNDADDENTROPY2(r3, 0x40085203, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000380)={[0x1ff, 0x7, 0xd, 0x8fd2, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x2, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x6, 0x8000001f, 0x9, 0x6d3e, 0x300, 0x2, 0x6]}, 0x0) 30.235930881s ago: executing program 0 (id=2411): socket(0x2b, 0x4, 0x10) mmap$auto(0x0, 0x20009, 0xdc, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon35\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) socket(0x1e, 0x3, 0x4) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) shmctl$auto_IPC_STAT(0x4, 0x2, 0x0) sendmsg$auto_OVS_METER_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) mlockall$auto(0x7) mmap$auto(0x8, 0x70, 0x9, 0x44eb2, 0x10006, 0x300000000000) mremap$auto(0x0, 0x4, 0x4, 0x3, 0x100000000) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup$auto(0x0, &(0x7f0000000000)) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto(0xffffffffffffffff, 0x80045503, 0xffffffffffffffff) shmctl$auto_SHM_UNLOCK(0x46c0, 0xc, &(0x7f0000000500)={{0x6, 0x0, 0x0, 0xb89, 0x10, 0xa0f, 0x3ff}, 0x5, 0x2510000, 0x7fff, 0x8000000000000000, @raw=0x3, @raw=0x5, 0x9, 0x0, &(0x7f0000000400)="535939f4da5835", &(0x7f0000000440)="abf9b221a4cc744247c2571a7f9698f96146bc8be4e225ffa1414564c41dfa39d9d705cc7f63ce62ba536507984533cba3e4ce8aca6241135841b29c8f1b836613a104620ce0cb00b34332fe9d17c54f5e85c8a705e751aa2c6849e2936d035714cffebcdf011876d686f0694eff1d10fdc806b544717aedced6fa887c84c6a7a691a95ac8abb881e658f0c7587d59f87a952a0c868677764e3dac2965f8ab284aa691c4a77c62f507f6466195c385d0d078c988e2c3b6b77308bfe793fb"}) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) r3 = accept$auto(r0, &(0x7f0000000040)=@xdp={0x2c, 0xe, 0x0, 0x3b}, &(0x7f0000000180)=0xb) sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000207007000ffdbdf25040000000c0005008000058b8e8d0001a6c71b5f856cad1c349107800e2a"], 0x20}}, 0x48d4) poll$auto(0x0, 0x3, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x8000000000040, 0x9, 0x3, 0x40ebf, 0xffffffffffffffff, 0x67) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/035/001\x00', 0xa000, 0x0) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xa}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0x11, 0x0, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) r4 = getpid() sendmsg$auto_TIPC_NL_MEDIA_SET(r2, &(0x7f0000003040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003000)={&(0x7f0000000100)={0x2ee4, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1004, 0x4, 0x0, 0x1, [@generic="64e84c5fe26c6566f97e73397980cf6b40f3d54221e6bd0a4aa1516899d327c2a90119551cf6d9258807bc97be3cf68f85e8f763b587ccb42c08e0ce2ab36a577effb6b5e0178a4934f4833ac7ac41f491131a01f7ce44dda826a8cd13ecc4f72f078d9e1c3b685847b2a8de1581705553a872566f415ab368d6a08ab3279a1f89e819c69c6974e76899257024e0846c46db43c9a7d33a5403a94ef8223f7dca460f0208f00106611589966c146cec47d08e6be5f5a141da7a7824e54d859aa339efce8b58c5491d3f6c23ae16447030204b5d4413cb7851cb03b168ebfb35b6f4b98d18dc4c29aecd47f19d5707acb7b7b5878413a2d2c00c9b79d54559ea44b3970245ac84e6e3faf8d4e1fd6e68360960cd03e000afd7cb24da904efd371e93d1e94a5de80f2fd9ebb2b452acc5e40934c02312f27870232e9dd9462b8d8f921e8cb87d3a7cdaebb405f30b8dba399c81e6b81d613e33cd830dc0b962a90f34172e16f68f74610dba954b72926fbb95e2f392d20eb7ec07b61e103137e16562026429c46ecb12782f2d4e2339845a34e1e94a3976228ff6e1b7e8f894a240a252eb56db63bdb3e78b01da916e30a290a5591d166a26717ef2c19f1f5fa7e492ba0021b828c24685dff78d5c41851a341ebb8fd11c42505017e8bbae4c651fec9bfd553df326168b3643da4ad414a6fbdc8871aea68b1198c596ca0affe7d669015f17356b1b5c6b7ed96d7c5a48fb86d397244442f063d7d120c757924b93a85aa18724509bf6a8a99c7caa5b8fa2420fc6ff0eef31a4d4f3f37a9b8f126ef532e197bcec071b66b7fb74ae6b18e307f72dcdfddaf166170f624f9a378f1e21e9e0c92482c737b140bc864088ceea03095a4ffcb499be035f222f1e995519bdaf380f89ab343ff3c44ddc4d28c7664d5a6519b09022f81b59fe58018d910359ea96c962c4bf57837a1b7f9439883354bc54e224204065da8f5814c6566660a91d4475587ec26d2427d0d62090b5fa8c0411706213db2b1d2669abb4f6610f034ee557f94604aae975880c9b32b8acfa3065a52877472ac0da2f661ac89e5ab6fee57873b508a19b2e32ab37f746b864d4e755b8774596d58f6427f316fd81ea555ef0e98e602fcffa80370cc7c36bdf059fb5539ca167fa5a128778e012845bcf28a24c379efeecc5914a824847c9247cb6f5398fad13b7df8d41ce99b0cb7b093cd951e3bdeb5fecf15fbd026e997eefecc1c9d45a935b8bd10a8477a762bced53b7380be372aab61375dce47d5f4d7ed24a02011c576d919d9408dab85a85d912e3542d6b0dac204c09e6bcc62e8440a2b42ba0f78cda903ad5e23e49bd4b82d24b7199824d2070dbcba73611fb429cb016830f6aca244238020e02f518fdf02ed5de2d26545a4b748de4395195f1ec991fcd1bd5fa8ba15e80a03e735affe5864108e62a2fb5c2b4c1d54b6a2e000f1cfbe3992686935ccd510bdfdcd87264f5a07d7bbdca75cd1dc169793132a0a6e4300d2bdeb147b8b52f8372e7b007dc5adca879b22d9e3e355c5b8c860e61e341d749d74936c483909b4a691eb0ca8393ec6055eb1892914d099b1694369e132d811c424795bd7fb449f2099616f32076101165cb023cf8087c66141ae97282ec62a669b0b8669d31ae04ee5272912f158e37091d820f69054bff20bebf51b2a710bd4594821d0f70e74176dae8176509c736f3d7a9cd96177b5eb1294cc7a5d2ceff0b5785ad429ff964fc4fcfaa7bac39c2b74f5d8e721f852bd5684372630adf66012641ae58a3761b763caa8087b6fbe48d725875a720f3ba2972c81754c8ab61484c04bf0ed67b173bab144c44847479a5074bad6433eee2c0d968dd84d557b359a6dbf1df78d2b8ca88358086fedd7611d6c826d0c551623b1ee1e06c828253f0a47307cda44f25fae73d0c465cb48c5179e465f62ec79390218284b1d94c63a6ecc0a8f6b8412099987e8bfd03160f7d7216903eb6c010b574751c92d5c9acb3ccc55c4f80805c789875b99b25389945679d7df7e8b3f64bb776ee47254f1de41cd5629caad3e4afeb3ac98e8cf9f47b31f36e0f6e2de9af0f59d70326d39c908633359ea09bf30513e53a1b5d0adae27e023bc1b77bdde25b9d4d7dc5ae3bde0fbdef2c062760e430ee1d85465e0cd10fd362fb628932e2a4c1eb233be29bdb194ce9af7c033103e7bd4aea9f3a44e3966c759ada7eb22937eeb0fc5a0784e3702b8de56741f0d7d9d7590b5ab485daae0126656c5d0b095f7a2119a5ccf84b0b61698450668fd6961ec666ae8b687e1f5935bc8e7a9b8f29e74c28413f4eb3d70d41334839a66f6994e67a5156c72171618ec6b821ba52cb3825702d1042ee2ebacf456d3933f8657c52766f7e435fe06a0392abdc0de386f959fb726e10e37b2b200d93321d14fb82fa823385a508fdae66b0a646ea78e58a4df70fa93b3b10ef73225861377fc5037a4e1337386793c32b3d1a07b00def8668267d03738b9ae4a06c6fbc6a3055edcc630bfcb759611e26f57705471fa381a1c49503a3a0542de2d2e2a3ff0dcabb26f4ea72d57385e6e2002bdab45b50ae631db99e459c6944ae14943e7a01f8e2695c361cbfd341fe9dac6b9217591a4b3b63eac0b5ab1c5c5ac9db88d348b4df01d71589596ba481098a770b8f019ead728f110fd4b483df680c37a6b546a3752cd09dbbe555fe857175212afa80d84618bcd105b06efc6241069870eb43874cbf234da32118b7558a9497cf7551d946e9d4f9c26ee7d2e738a8e1d1d6f4209340b5b0fec08ac8e1224ed527c33e968034d3cf962c91c9a5a51ef1c6df82f77187500d1f27ae52a02d29e36917abf5e1965017c0ea052cf012abbe777f4883a8218e5f1748db2818dc8920660721a64434f2b328e1d32ec4bad1c95cb433596d102dbd897ed594c33c5000cc530f66a2be4cc786035ca7bb85839c1ee0c8418ac9c0279481c49fa50566907221d69e455f2e0b72fbcf91312ba4d3cc76474737d181c1f792c57e7e57bd530e6a77099f023db9b06573b88d30858ea90e77bfe89711c956f36b20f87a428aeacfed34547287d8229f55818b6ad9b61202d4583151737057e05e7022c8ad63a47a4bbda86564f046ef2d7a21dadbfa27a50b70a0ac976062408e4108a3c7227d61ffdc6dbc81f5feb297970a146a887b972cd37dfa862a97b79df3586c5d40ac19aabb1de1b561500e566821e69a6316617d28475805ce5b20ca6f3082be87cb5b0642dca494fd6ffbc40748266fbc3d7b03a3a0c668775831de8294756017b3d59abea66420d7f9c58fc407e694b2374c1813e0f0d28400ee971fd2f8a08a4c2ccf4ea9b147c49b1f1ca93f117522faa276c36ba96b2bc2cb5dedb726a3a91beb1ac9e9fc67856597e7f261513a60531b34322f94edb08f24eb599b8e5b6042055f25230651b00ff25dafcf0c0e8105ebc7d09db1a8a398f6e0541f38d66bce6b1c2093953c332603fcbbcaeca43636ec2e2bbf807bee49b193ae83ab52e68a2944b9e22fbea73417c46eaa14db6dd8c30574093d593cda54b01d097f359583fc6f72ec39cc8bda05b4ff345e04cd2cf0a0f67a412f588368c5abf2b57d6ad8683ac3111c52c83d42f3b2a8d9648f5ec07c9a83925493bdf9c3a52997fb967f7c1183d77495ffa4eafb8427b36727f636cd0c45f77240fea7172ff131c9fec9e341faa93108936e051b87327eb7180a95af787038105e0d76483485c932dc2a1c49baf85d5c930d96f921a888efff5e4f4488d916baf1043a2caa2fb25206b36282d7f17b5b74b4ebcba6df1e2b7a400b46eaefe32de531d39102b5369d81a2db8a0d30ccbc1a9f6787127fc30ca2e215b354f1145633c6ec827b128740b2a0aef5ce2efd3a2b54bd6a20df0939fcf501e82c51f4f9149a9f37bce8ed9ec53dc6f859e790167cdc30d53c88e23648975754a1c45faa236c3875d6c7e2c2a94778ae495cdf317547b0e3e786ceb0a410e4d8da6fa87cb409cb84fb556ffce1f05d9de956048752455491cdba9420772dac4f8f7e5d9e2cb741dd53f084f31440a1f1eaeefa58c24f541038158c94e05f460c8953afff63b339744c0af006827311d88c1c04358059d17d915af5856f572dbfe98160d5b4c5ec188e96099fa2d5f90debecfaeeb3b693ff3390c4648a53cc7663c7c3005c624b0b9d9f7fa978a6105af09b36a8c8044d7cd1142b599723199ff6b69bf77fe6fc553f38226c288efddf9c51589abccbaddee3cd4de893cdd5e025621baeca4f401605af3b6a7c0154260b32a2a40807f84f07c9f76ea3b10496950b8f33ae72bd85f4745e4e04b3b477e7360093d12668f340c36c18f99576a36ecad7ce7b27da5f6692d8b43ace549dbb0a2e50b0cbcd392e0f31ddd5a5f5d2a627b04162a6f5719b4df02aa3739d1e3bc94ae978326b4111b1f5522004e1986c2c1d53db2b150002ee93f76d4999091da5a5783ca6a6ec1d256e806442f0ab5b1e7097f27a1d77a728568b05eb69b1975e175f799ec0703f41fd3196d9a20553e25f3aec5bcdc2f0645ac22d6e94c72094cf566e617dd33d1c5697b40e5688ca28ac95b53f4d82029b460784b46cd39854132f0415e01efdc72822ca77d385b9b30b499ef7f7580e951f539cf64facd1a0be9062b51ae6f524dab6aa88483f16ef6087d5dc99fa043e6678117f3b12c662c8aad315facf05b78001301a670869fc8c335abda8e406c8031eb8a78b44d16c0503233891fb3f70ccd5a93bb781efaf0343ea4f038a221badf71a9b9d4fb9363d2c1d937c31f97d8338c1fbc83ee29b746e55b1a84209f3749e9a98b32af54c5e939a8c0efc86d09f380752217479c6215982082ba1428c225071c2dfd90160a5c3dc460beb323c48ceb9b13bf930f5fc4417bb7c1361c435127138cb8df34e3b2289406b06d87df93a21737a1d1acf94330aa8d6c9dd2d23d80ac5e6e2a4ce5d2cef87bcdeddf720b65eb1745654f929c8f4f02d6eb40767caf8c385be72b3a1bf0031f62ae8d2f9aaa7696cb27495a01af3aec0b88675cd535dbae238da4d97298c23596a0e2f97fe9b2b1f31c9625a4791cf6a39072824a88f2df9035ac19649fe079b8cb153b096ec8e88b0a6ed1acf53634f96ab7bda49d7fe62c3b491540c4be39f0b53198a51a81f32335b496aec9fda1870a658cc87eb7672af74e22e4595bea5e805750b6d34103c22f5cd1ad9ba75ec758e5f85d9065cf0dd7ea716d1244f4259b0736af7f567958601b1a20869d2b8a7382266ec4157d077c27bde757682fc8dc55717551753d037ba11a1164d9e416ef56b746783bb7c98c3bf48d0dab094f3ef4cad881bfb70410015664fa60dff6406338325a2c8630bb46b59a367b5616dafb238fea49bc9d8a1d1ed8e1acdf4e78f429426193b308c4744eb0f7b7181fed5dc0c8161b343ac6086e24d68d9a55b0554371cb208feb885dc915f5c71ed68012f4aef2062b3b2b7650b3440f65faa21d1a74c8d3c3b5951657e7c856e4a45ba863185d11f3e79b2151929e8e4dda349b9929cd1e431f99523f43d0299aa1d282759fca1537fdbac011688023ea2acb00893c415bf540e8efad03e124c712be55b342f15bddddf8d82eb012128d965755e6a849392b64fbc3fdebf9ce504b224bb5a28e70a95b21236e934261ec406803af6b1eeca7dc58418a43ca35c9ac73f94a37bbaa52ff65fe419cad90552d680119c1f4afbd471a2a6d84296b2f831a04f013dd7ddc19301b0"]}, @TIPC_NLA_BEARER={0xf2, 0x1, 0x0, 0x1, [@typed={0x4, 0x3c}, @typed={0x8, 0xbf, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x1b, 0x0, 0x0, @pid=r4}, @generic="265e53b1afa486508adfa26f69fa43b3a520256558240b663720487c1a7b4eb5faefafeef27f712a4627d0ba88d98e3fb35718c64a3ea54d414fecd3e1b82dc7f116fb5bef6a860c6dd3b2464cd0e82a9b57d99d424a15909eca53ff619f80529d70fbfca8c924a162e31da7c0a40c2e78809271e18e36e4c0332d7e00b013a3c6c51199272b7d9ab456aa0bf143469e5ab90a95407c7ff3cc07c97b8ba72ac12aed72929ef15fb28fd12927c46ea9d8aa82ae9d75b63e1a1c5f034aea099286e081d62344af42154f593153063b", @typed={0xc, 0x101, 0x0, 0x0, @u64=0x725}]}, @TIPC_NLA_NAME_TABLE={0x283, 0x8, 0x0, 0x1, [@nested={0x10, 0x50, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x138}]}, @typed={0x8, 0x1f, 0x0, 0x0, @fd=r1}, @generic="de7c7ec2f653e63ed95a1fb08a1141948ae68736f3da02fbe2ab44fcadc70a3b418360b79fa997a77ef29d55400afd6a36c6a99cd8ed4ec6f7fad5d4e1903cf04ade4d0e3ea8778b0bf048eb25a7ad2dbc8df6c1617a254e92eca79ea3d845762b6cf133a78a0b771bc2647de7109d82f7d5bf5b348d642d1744d27ed264eee5991d36650babc97ebd9578b7d20f50bdea16387c6d63dd04ac24bbb7845cf4", @generic="8a0f318977d766f481d562b56e9c253c2f3e1501044b2819017eedae2e234d295a66baf8144c44b762f0c911fa29a67bcc2afb7305969db0d7345edb54aba5a10d8b01246f8558f924c53c48f8cbcce7282b3dd625a20cd8042a0db813238a1fc533c46e7ab2ef05752a7519539d0e063aa59eeacbb5c5ae26833a07c8db28e431e3116bd0ba4c1d0a70f563df5182d76bdc74537b6ccc3675f07c4ba1cb9194195a4b7d739e51d79c453edcd4ef966b03b36762b4de", @generic="c506a0f66327ab3de5b3e0eb5095b9bd62267d66852a8285b77de52f58b96aae385e9f3e65730dd01b4a9f13719bebf618cba24c1880f0f6", @generic="c0591c87e97718728fa35a5a12352436877f668f416278296822fbe748fbf1bfbf5c989a2100d612c81263eb4ec865417f9e007ec40c6f30f5cd7d0733efa7377708184c80de7c713bbc5494ee5fc9ecd3b7266fd9fe", @generic="2d552850aa01b7638aa2b7fc6eaf45da7eac4ebd4c6fec183af26609583149fba7cbdea3d413ea946c0f5f949074b0f550a4b5e9096d912be1c5b9785e5c2b073af254013c89bdbe77079248b64a7634f1080c6e69be81ad5a3f56f42bc6c8f8fffdc3a8d8659f89af504967f1eea57bb26c142dfa074ea18d38e2dcc3d74835804aaee1"]}, @TIPC_NLA_MON={0x139c, 0x9, 0x0, 0x1, [@nested={0x1193, 0x130, 0x0, 0x1, [@typed={0x8, 0x128, 0x0, 0x0, @ipv4=@local}, @generic="a80899650b6c70c0d8a9089397f7ceff347c20e2cb4965730e1fc69f4c30511c73af4a85196b0e2ee43bbda0938eec1aef86fc36da1efd1708107395c0e722468356ca6e97e3d3fd96715d168feab46d3f9b70b5359d900353edcd2e26d38d105bc2a7f180dbe2275e5bec50ece3df388134788fca7e238d5e241ee200bbdb8dd34e73384053f3e4f607606d49d125455ecd2837d92371505ea16fda9ccc71dfe47d7328c8919deed6", @generic="addcffdf0260f84316702c5785fe434101d93137ac3fe324b932448101e3daec831fc3f76c46df5278b4c673dc0b41438ab9a6bacbe5d204673b5f6616ca9f245e657b92f29c917028ec0749aace09823b807467ae78dc8159e4bf473b3be4289b094578f5267c37b6e308b6feb57df72902fb81669731fea6f7812a7aaf152ac7f76e36cf549b9a1ad329715561a142ca1613a498d5b654ef45cd3576a74fd809ceb83e91226a3c0982daecc939be76967fe08816965cc9d2bd87081cc67d708980e6c23592492657101d449f88c30f4cd32bdb2941", @nested={0x4, 0xff}, @generic="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", @nested={0x4, 0x129}]}, @generic="094310716635e76ccfa800a6fe783383df4df0c8f034b630d17b30719b67a2ba27bf32c30ec945d530f929132b9b063c6e0556615439cee2f62da7db3e6d654eccedbf62e98dbe592abc1982ee6c5daca83f462fb26102df68c448fffba80e5ed4753fe47c685acc315155a43d", @nested={0x73, 0x4d, 0x0, 0x1, [@nested={0x4, 0xb4}, @typed={0xb, 0xc4, 0x0, 0x0, @str='{.(#[\\\x00'}, @nested={0x4, 0x110}, @generic="6f0f7a", @generic="d729a6cfca799a153ce9bbb0e8dfaa822fdbb8a76d9d57cd3f041ee64ef64738507cf3c2bf1d32d6c264193ccee6ff3439384235a8b206a84a96eb89b82c62e8854e92860a6bc9c4f90e30059db860ddbdea5b9cf8270d98"]}, @generic="e7a17179809398568bb9d64e1fb98b44876995480be00cd51d7b5cc8bc0d4cc9d4b5db1ba4cc36ebd2d9e4274af985", @nested={0xf3, 0x14a, 0x0, 0x1, [@nested={0x4, 0x12a}, @nested={0x4, 0x27}, @nested={0x4, 0x47}, @generic="460ce4dc02f92944792a54bfee52dc18acc64dbc2c4e0430368bbb5d71ec408848d7ade34cdfdbcd52a159320e633570e4429f75047d62d6ca381930900df3b395b211f5b3933ff2fff013f2366da97bcee53db9212adbb6aaea3889ad81564fb75bac453c9779aa85642cb6cf9c908afe1dbf623a308f2cbb216c347074781d74f9838b8aca95a0934c700981d0bcfe440346680cbe50e700b67774e75c76dc083313d237b26e0f1dd07ab4926cdb3625025effc4a3aa84f63f875c297ace7b38fe7d8c213bc7bb44363b6bef4be6059a5c700404a735c3fc817f55706c34cdf26657"]}]}, @TIPC_NLA_MEDIA={0x2f4, 0x5, 0x0, 0x1, [@typed={0xf2, 0x7c, 0x0, 0x0, @binary="f0758a5c968af73b8d9660650b9298886d32b43f2b0d55b360edcaa379cff2a648cf5a3da23e805bf58f4b1d0228a2f5fa31fa5ede66f9cad73a0c76073996700a38058a6c24479e6b0fdeb02a7152d7065ccb9a133814d99e6cc829d5968e5d0e607144559450f3fc6df0828f5c314ea689fe39114504e01ac2f31f430205d4820193c63569ee50c789df42e1d9c608a231585f5f0d059c6ec19367f8cfdc660da5369953ec1c7d843fcb7831439f4036651fb279518db0d01827c4e7dd9501136a167cba2847f3978bc2851c4a975041976c4414715e1f8e940a491efeb2c55a7dfd64f73ce4b6863670bec6bf"}, @generic="674b444e7f9c396babc7345b03e2fbd180937037c254f738a74a4bc967710922b32144ce89ac4febaa93fb2ed07812c1144889b17c1dfb176d4e85cec1ec9c9128751764834088d0d43e7fa20eae3698e709c22ec80b8d4567c0439f2bbfcee9832f7e5a1f832ba7597e2753baca5767545ef7487c82b3d40eb199888752d99c991583a3d01419b7d04c888053d7c08af46eb6f021a30acacd274ee4af5053352067775186386e21e256dd446b78fc9178909d139022574579ed8270a500a526ad45228a27000eb0b6ea65c91bec", @generic="03fe0e071fd082702c1a2d7bbdf07aa871f8e383218adf457e84c7df6d528eb048e2d297ab0804ccaa887d5bfa114ad401bdb472857a73042ecc17da3a3a7246dc32a0c45ba46c7e7dffe7c91200cc4b3425dc13f979f997a60fee73ec6848a90f4bbe9c04e44e6836b437f68cbd49fd8038d49881b7588871522c0385e91d107de584985033ef2772570601e607bc6f70913ed0d082f1eebfaf3314b51b64737a6a0cf17fe9363af20794856f098275aa12583647252ca40058e157e2907cdb197079321b321cdf724282b14e359ef1ed398d2b2e1912036498591db5dbc05a6805e36164e99992342e", @typed={0x8, 0xbd, 0x0, 0x0, @u32=0xcf}, @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x29, 0x1b, 0x0, 0x1, [@generic="e496c2bf6d62646bb80b8727f938cdb19bb6e550942a1200d3a910962391946436f17e42f3"]}, @typed={0x6, 0x23, 0x0, 0x0, @binary="b9eb"}]}, @TIPC_NLA_UNSPEC={0x92, 0x0, "baf49327bc67d57e95432ef65185e0317cba082fd953a74d034d1bfc0eb5f3f0b585e136be0a083f7e18e0fca567be54516855cc6420d2bbdeb75ccd5be9fdb7884fdfa85392c708293c3a8817a51dd7cf86b848f4b8416a93c93620d70d98301ecafe5b8e75315f927a29ce1acef473b9f1f37ef3babbeb065b5f155031e8e61ca8b41b0198b87381d34603c319"}, @TIPC_NLA_MON={0x35d, 0x9, 0x0, 0x1, [@nested={0x4, 0x94}, @generic, @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0xf, 0x0, 0x0, @str='-^*\x00'}, @generic="8c5ce848f8dc8346c1964ff2a0f5ca454239c97573eb708cee5519b696c8b741aa597ba54202eeb4961d6c8aef8c04d7b7c1e294228a6e91b86441fad0435a372cec76aadef1b5c314c8f6d6bfd86fe1c59cdac6855cab1aadd5985709c63ec5b64395a844857c43ace4f8d6e0a1309b2d9af591bfc53f395bb644976de9c903bc75bcbb4c0cc19fd04c28fc040d6581dfd176e5f99d90d3ca7e6d1663cbe12e9e02d2f40f", @generic="04cd56d2a0b7118437d6771644edab1378b365173739a4558d39f2ecd21aaa6241827a1778354f13d95ae5b4a44fc346351f4f0d58b97a131180190b2de35fd15b3656e7b473268ff781b9d424652daec52d1719db18b19607c9920b33d5eec970d42e7766c842a00d923f49ade276157af07bf029b30494d2ac7549cebf174c9439e6eacedbc4723fe47873bcc5a0fb9cd029bfa415ae53c69bdab390619ef307b9016f0a54683fceeeace40d425c6dcf9bf0ef0e8c8a0b97aaec6ff1985c7fc4be6cbbe89d2b75b7348689e6423134e61be774d1cc56f46eba9daf7ddf51894ddac89677fca4", @generic="322390cba205cec79daedc358a1f8a0eabca8c47a0ddeec68d220a5480670fd4c1ddfd4eaba2c80073bd90f4097ad9033a97e8ffcb6270460e4f14efc1f435368d85b4da44e69cc99920345004d6cb224e9ef50fe38c7c56f75da589d744116d0e8f3d8d76dafb2a5124db282c17827575738f106b890ddb7e4901c1355a4a23cb2ac4a757c2107497476205263279d0b7a6d6b9258ed002d82ae8c71b7255a792337cfb1af6c1240bc99382bad5b1e1eeab848b188b91045d0cd2492f3e59a6a19690556ddac76169eef14ff9f59bb637a5c191891e041f8e90e4d8d2cc4461205f5a61", @generic="dd750384a0dfd6ce33dac98bd5f7c75153a5d701d6a30eb5504fbf39eb700aee8fd598d9d133d0ab0d8f1015458fb7cdc49d5c874b174fbc64d5302638614eb3871e96e9481937aba47d056279915787c0d7535fc18f3614cf94fa5d28392718b4dd7b38def37e69f1f1da92767a1533c5c69d2e9ad2e3a74207473b85e2ad0bea6c5b2886b77647e3621dbcc7747aa852fcf1dbedac63edf98cb9603b24e43c73f3b682a617c3933d109e456e0998448b8b107cb218ff8c5f855cf699005aae1f0f31e362da2df26fb2c017dccd752d170bc03cb9"]}, @TIPC_NLA_NET={0xce, 0x7, 0x0, 0x1, [@generic="39deb8a91d392583df3608ebb1d56c7e1edeaef5d8d0b634ef0788db00e48737a7040e7f10b744e96da478b9aaee1f72aeb884bbc743de48121ebb47a6978e2bd193987a124aecaf2a6aaa9004df21d8de77c4f0ffdfed421102bf57f19c5372b35f53bdb4ace91257aff9a8d4c6c883b8250c1f42073415bdd06b312e644893ae78736f34a81fb6b5fef1b27e12daafb28701e14b5478dc9c89629b1582a5357b48dcd074a2d3b8ba5cf1530c948edb63d1", @typed={0x8, 0x4a, 0x0, 0x0, @pid}, @generic="8de6e5678566289075b92b9d942b4bc2"]}]}, 0x2ee4}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) 20.87469052s ago: executing program 2 (id=2426): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x8000) (fail_nth: 2) 15.440909193s ago: executing program 3 (id=2439): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/bdi/1:15/stats\x00', 0x20802, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x9, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = prctl$auto(0x59616d61, 0x7, 0x1, 0x8, 0xfffffffffffffffb) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r4) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x218000, 0x0) sendfile$auto(0x1, r2, 0x0, 0x10) r6 = clone3$auto(&(0x7f0000000180)={0x2, 0x9, 0x1, 0x8001, 0x8000000000000001, 0x6, 0x0, 0xb0, 0x5, 0x3, 0x50}, 0x8000000000000000) ptrace$auto(0x9, r6, 0x3, 0x5) sendmsg$auto_TIPC_NL_MEDIA_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r5, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x4000000000008, 0xfffffffffffffffe, 0x5, 0xfffffffffffffbfe) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/cdl_enable\x00', 0x127102, 0x0) write$auto(r7, &(0x7f0000000040)='\\\x00', 0x2) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) 12.376098207s ago: executing program 32 (id=2415): r0 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy3/fragmentation_threshold\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x20eb1, r0, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0x3) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r2, 0x0, 0xc08) write$auto(0x3, 0x0, 0x5c8) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x5955870886bfc622, 0x0) ioctl$auto_PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000140)={0x7, 0x6}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) close_range$auto(0x2, 0x8, 0x0) unlink$auto(&(0x7f0000000040)='./bus\x00') ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) 11.877886725s ago: executing program 3 (id=2444): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x181280, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) socket(0x23, 0x80805, 0x0) r0 = epoll_create$auto(0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) 11.168537743s ago: executing program 3 (id=2445): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)="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", 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0x8}, 0xa785}, 0x7, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000004) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x2, 0x2020009, 0x6, 0x14, 0xfffffffffffffffa, 0x408000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, r1, 0x100) socket(0xa, 0x3, 0x103) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x228040, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r2 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r2, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x4, 0x0, 0x8000000000000011, r2, 0x8000) syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x18, 0x2, 0x7) bind$auto(r5, &(0x7f0000000080)=@generic={0x2c, "d673107fab139218c3a6e4e19205"}, 0x6b) 6.492227398s ago: executing program 3 (id=2450): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x2000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r3, 0x11c, 0x2, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r4, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) readahead$auto(0xffffffffffffffff, 0xcc7f, 0x6) 4.231282637s ago: executing program 2 (id=2429): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xeae22, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0x7ff, r0, 0x7ffc) setresuid$auto(0x2, 0x7, 0x8080) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x200007, 0x8) 4.128689458s ago: executing program 1 (id=2452): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr2/name_assign_type\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20402, 0x0) socket(0x26, 0x800, 0x0) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000080)=@link_detach={r1}, 0x1) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001dc0)=""/195, 0xc3) 3.884193853s ago: executing program 1 (id=2453): close_range$auto(0x2, 0x8, 0x0) 3.601585441s ago: executing program 1 (id=2454): socket(0x15, 0x5, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0x1e, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af23, r1) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) write$auto(0x3, 0x0, 0x2a9) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040400) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r6, 0x0, 0x1, 0x0, 0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r7) sendmsg$auto_NBD_CMD_STATUS(r7, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002000)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0xb, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 2.965070599s ago: executing program 3 (id=2455): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0xeae22, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0x7ff, r0, 0x7ffc) setresuid$auto(0x2, 0x7, 0x8080) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0x200007, 0x8) open$dir(0x0, 0xb41, 0x1) open(0x0, 0x200, 0x1c7) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{&(0x7f0000000040), 0xb5, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x1, 0x800a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) read$auto(r1, 0x0, 0x1000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r4, 0x80045430, 0xffffffffffffffff) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 2.527040196s ago: executing program 1 (id=2456): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.208658659s ago: executing program 2 (id=2457): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r0, 0x41f, r0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.unix.gid/content\x00', 0x28102, 0x0) mmap$auto(0x0, 0x20006, 0x6, 0xab1, 0x401, 0x3) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r2 = open(&(0x7f0000000100)='./cgroup\x00', 0x105040, 0x0) open_by_handle_at$auto(r2, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x1, 0xffffffffffffffff, 0x10000009, 0x7) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) close_range$auto(0x2, 0x8, 0x0) creat$auto(&(0x7f0000000040)='./file0\x00', 0x3) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) socket(0xa, 0x801, 0x84) connect$auto(r1, 0x0, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x110) write$auto(0xffffffffffffffff, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) 1.864040861s ago: executing program 2 (id=2458): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IMDELTIMER(r4, 0x80044941, 0x0) ioctl$auto(r2, 0x541c, r3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4042300, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r5, 0x11c, 0x2, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r6, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 1.355196278s ago: executing program 1 (id=2459): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x10b080, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"6a29f03f", 0x8, 0x6, 0x0, 0x3, 0x5, "4bb6aebbc8841b8b079a8e505682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "9247fb7c3200", "ea334f1f1e5e27a1320d6edb"]}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xfffffffffffffffb, 0x40000000000a5, 0x20e) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x3, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0x4, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x7]}, 0x0, 0x0) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) bind$auto(0xffffffffffffffff, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x2, 0x2}, 0x800003) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) socketpair$auto(0x1, 0x3, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4, 0xfffffffffffffff9, 0x5, 0x4000000000001, 0x9487, 0xda, 0x95f4da06, 0xfeffffffffffffff, 0x3, 0x67, 0x1000, 0x7, 0x6d3f, 0x4, 0x20000001, 0xfffffffffffffffe]}, 0x0) socket(0x10, 0x1, 0x6) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) 597.341811ms ago: executing program 2 (id=2460): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)=ANY=[@ANYBLOB='T\x00 \x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d00000010001a80080001008703000004000480"], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x1}, @HWSIM_ATTR_PMSR_SUPPORT={0x6c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0xce}, @NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x1}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x54, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x85}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xd7}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_PREAMBLES={0x8, 0x5, 0x8637}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0xb}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_LCI={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_NON_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_ATTR_REPORT_AP_TSF={0x4}]}, @HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0xc, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x8001}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x14}, 0x50840) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) shmdt$auto(0x0) unshare$auto(0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x0) listen$auto(0x3, 0x81) getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r2) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01092700000000000000000000ffff7f00000114000c00fe80000000000000000000001100000e00"/54], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 202.988251ms ago: executing program 1 (id=2461): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x18, 0x6, 0x3c) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/ip6gre0/statistics/tx_heartbeat_errors\x00', 0x800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x10000000000eb1, 0x401, 0x8000) read$auto(r0, 0x0, 0x1) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x3, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000140)='/dev/audio1\x00', 0x100100a3d8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xa, 0x7) kexec_load$auto(0x5, 0x2, 0x0, 0x4) mmap$auto(0x0, 0x20004, 0x203, 0xeb1, 0x8000000000000024, 0x8000) r4 = socketpair$auto(0x1e, 0x3, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x4) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x88, 0xac1, 0x2, 0x36242398, 0x7ff, 0x8, 0xc, 0xfffe, 0x1, 0x81, 0x68198}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYRES64, @ANYRES32=r4, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) readv$auto(r5, &(0x7f0000000080)={&(0x7f0000000300)="2476312e846d32eaeabaddf54e156aa06b083851180a5af71f0fc0e8652e6d5ea5c1357b2f543882aa3ec49667334ae32a4502d282a34dd8eb66183fe06534e095dc02144c9718ec286de39ce2b7ea13663564cbbe460e74421a5bfb73ed1f174f37ec4019f15fb57cbda32f03d66d0b25fab0b5262d14eb068b0a772c0c1426792c4cd5a32be03f9dd139ee177a911c9db044470da6092fe2883f5c89fd17f69acc70600707e21a12f24dafd9761cb49deb3ef4c682fd317af92a8e0610cc65ec", 0x2}, 0x8) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 0s ago: executing program 3 (id=2462): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x1f) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)) kernel console output (not intermixed with test programs): x40 [ 747.453083][T14888] do_syscall_64+0xcd/0x490 [ 747.453124][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.453149][T14888] RIP: 0033:0x7f1f16b8eb69 [ 747.453167][T14888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.453191][T14888] RSP: 002b:00007f1f1793a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 747.453213][T14888] RAX: ffffffffffffffda RBX: 00007f1f16db6160 RCX: 00007f1f16b8eb69 [ 747.453229][T14888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 747.453243][T14888] RBP: 00007f1f16c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 747.453257][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.453271][T14888] R13: 0000000000000000 R14: 00007f1f16db6160 R15: 00007fff99d56dd8 [ 747.453302][T14888] [ 749.774958][T14906] FAULT_INJECTION: forcing a failure. [ 749.774958][T14906] name failslab, interval 1, probability 0, space 0, times 0 [ 749.962823][T14906] CPU: 0 UID: 0 PID: 14906 Comm: syz.2.1910 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 749.962866][T14906] Tainted: [U]=USER [ 749.962874][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 749.962889][T14906] Call Trace: [ 749.962896][T14906] [ 749.962905][T14906] dump_stack_lvl+0x16c/0x1f0 [ 749.962948][T14906] should_fail_ex+0x512/0x640 [ 749.962972][T14906] ? fs_reclaim_acquire+0xae/0x150 [ 749.963013][T14906] ? tomoyo_encode2+0x100/0x3e0 [ 749.963042][T14906] should_failslab+0xc2/0x120 [ 749.963075][T14906] __kmalloc_noprof+0xd2/0x510 [ 749.963102][T14906] ? d_absolute_path+0x136/0x1a0 [ 749.963142][T14906] tomoyo_encode2+0x100/0x3e0 [ 749.963177][T14906] tomoyo_encode+0x29/0x50 [ 749.963218][T14906] tomoyo_realpath_from_path+0x18f/0x6e0 [ 749.963257][T14906] tomoyo_path_number_perm+0x245/0x580 [ 749.963280][T14906] ? tomoyo_path_number_perm+0x237/0x580 [ 749.963308][T14906] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 749.963334][T14906] ? __lock_acquire+0xb97/0x1ce0 [ 749.963501][T14906] ? _raw_spin_unlock+0x28/0x50 [ 749.963543][T14906] ? current_check_access_path+0x33c/0x460 [ 749.963573][T14906] ? __pfx_current_check_access_path+0x10/0x10 [ 749.963601][T14906] ? simple_lookup+0x105/0x1d0 [ 749.963628][T14906] ? lookup_one_qstr_excl+0xb3/0x250 [ 749.963670][T14906] tomoyo_path_mkdir+0x9b/0xe0 [ 749.963706][T14906] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 749.963751][T14906] security_path_mkdir+0x154/0x2f0 [ 749.963778][T14906] do_mkdirat+0x175/0x3e0 [ 749.963809][T14906] ? __pfx_do_mkdirat+0x10/0x10 [ 749.963841][T14906] ? getname_flags.part.0+0x1c5/0x550 [ 749.963899][T14906] __x64_sys_mkdir+0xef/0x140 [ 749.963931][T14906] do_syscall_64+0xcd/0x490 [ 749.963972][T14906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.963997][T14906] RIP: 0033:0x7fa5ebd8eb69 [ 749.964018][T14906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.964042][T14906] RSP: 002b:00007fa5e9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 749.964066][T14906] RAX: ffffffffffffffda RBX: 00007fa5ebfb5fa0 RCX: 00007fa5ebd8eb69 [ 749.964082][T14906] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000100 [ 749.964096][T14906] RBP: 00007fa5ebe11df1 R08: 0000000000000000 R09: 0000000000000000 [ 749.964110][T14906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.964125][T14906] R13: 0000000000000000 R14: 00007fa5ebfb5fa0 R15: 00007fff28612258 [ 749.964164][T14906] [ 749.964194][T14906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 750.629818][T14914] kexec: Could not allocate control_code_buffer [ 752.063435][T14929] FAULT_INJECTION: forcing a failure. [ 752.063435][T14929] name fail_futex, interval 1, probability 0, space 0, times 0 [ 752.126272][T14929] CPU: 0 UID: 0 PID: 14929 Comm: syz.3.1917 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 752.126314][T14929] Tainted: [U]=USER [ 752.126321][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.126334][T14929] Call Trace: [ 752.126342][T14929] [ 752.126350][T14929] dump_stack_lvl+0x16c/0x1f0 [ 752.126489][T14929] should_fail_ex+0x512/0x640 [ 752.126533][T14929] get_futex_key+0x1d0/0x1560 [ 752.126566][T14929] ? __pfx_get_futex_key+0x10/0x10 [ 752.126595][T14929] ? __mutex_trylock_common+0xe9/0x250 [ 752.126637][T14929] futex_wake+0xea/0x530 [ 752.126676][T14929] ? __pfx_futex_wake+0x10/0x10 [ 752.126724][T14929] do_futex+0x1e3/0x350 [ 752.126755][T14929] ? __pfx_do_futex+0x10/0x10 [ 752.126782][T14929] ? __might_fault+0xe3/0x190 [ 752.126819][T14929] mm_release+0x24e/0x300 [ 752.126849][T14929] do_exit+0x68e/0x2bf0 [ 752.126889][T14929] ? __pfx_do_exit+0x10/0x10 [ 752.126922][T14929] ? do_raw_spin_lock+0x12c/0x2b0 [ 752.126959][T14929] ? find_held_lock+0x2b/0x80 [ 752.126987][T14929] do_group_exit+0xd3/0x2a0 [ 752.127024][T14929] get_signal+0x2673/0x26d0 [ 752.127116][T14929] ? __pfx_get_signal+0x10/0x10 [ 752.127143][T14929] ? do_futex+0x122/0x350 [ 752.127173][T14929] ? __pfx_do_futex+0x10/0x10 [ 752.127206][T14929] arch_do_signal_or_restart+0x8f/0x790 [ 752.127241][T14929] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 752.127284][T14929] ? __sys_setsockopt+0x140/0x1a0 [ 752.127327][T14929] exit_to_user_mode_loop+0x84/0x110 [ 752.127365][T14929] do_syscall_64+0x3f6/0x490 [ 752.127407][T14929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.127432][T14929] RIP: 0033:0x7fb92e38eb69 [ 752.127453][T14929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.127476][T14929] RSP: 002b:00007fb92f2190e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 752.127499][T14929] RAX: fffffffffffffe00 RBX: 00007fb92e5b5fa8 RCX: 00007fb92e38eb69 [ 752.127515][T14929] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb92e5b5fa8 [ 752.127530][T14929] RBP: 00007fb92e5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 752.127544][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb92e5b5fac [ 752.127559][T14929] R13: 0000000000000000 R14: 00007fff1cbc05f0 R15: 00007fff1cbc06d8 [ 752.127589][T14929] [ 752.974420][T14921] FAULT_INJECTION: forcing a failure. [ 752.974420][T14921] name failslab, interval 1, probability 0, space 0, times 0 [ 753.010560][T14921] CPU: 0 UID: 0 PID: 14921 Comm: syz.2.1910 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 753.010603][T14921] Tainted: [U]=USER [ 753.010612][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 753.010627][T14921] Call Trace: [ 753.010635][T14921] [ 753.010645][T14921] dump_stack_lvl+0x16c/0x1f0 [ 753.010689][T14921] should_fail_ex+0x512/0x640 [ 753.010724][T14921] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 753.010759][T14921] should_failslab+0xc2/0x120 [ 753.010791][T14921] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 753.010822][T14921] ? __d_alloc+0x32/0xae0 [ 753.010856][T14921] __d_alloc+0x32/0xae0 [ 753.010888][T14921] d_alloc_parallel+0x111/0x1480 [ 753.010934][T14921] ? find_held_lock+0x2b/0x80 [ 753.010961][T14921] ? __pfx_d_alloc_parallel+0x10/0x10 [ 753.011003][T14921] ? __d_lookup+0x266/0x4a0 [ 753.011089][T14921] lookup_open.isra.0+0x665/0x1580 [ 753.011121][T14921] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 753.011163][T14921] ? lookup_fast+0x156/0x610 [ 753.011191][T14921] path_openat+0x893/0x2cb0 [ 753.011229][T14921] ? __pfx_path_openat+0x10/0x10 [ 753.011265][T14921] do_filp_open+0x20b/0x470 [ 753.011295][T14921] ? __pfx_do_filp_open+0x10/0x10 [ 753.011345][T14921] ? alloc_fd+0x471/0x7d0 [ 753.011378][T14921] do_sys_openat2+0x11b/0x1d0 [ 753.011415][T14921] ? __pfx_do_sys_openat2+0x10/0x10 [ 753.011464][T14921] __x64_sys_openat+0x174/0x210 [ 753.011503][T14921] ? __pfx___x64_sys_openat+0x10/0x10 [ 753.011553][T14921] do_syscall_64+0xcd/0x490 [ 753.011594][T14921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.011620][T14921] RIP: 0033:0x7fa5ebd8eb69 [ 753.011639][T14921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.011664][T14921] RSP: 002b:00007fa5e9bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.011688][T14921] RAX: ffffffffffffffda RBX: 00007fa5ebfb6160 RCX: 00007fa5ebd8eb69 [ 753.011704][T14921] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 753.011719][T14921] RBP: 00007fa5ebe11df1 R08: 0000000000000000 R09: 0000000000000000 [ 753.011733][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.011748][T14921] R13: 0000000000000000 R14: 00007fa5ebfb6160 R15: 00007fff28612258 [ 753.011778][T14921] [ 755.692538][T14962] zswap: compressor not available [ 757.146262][T14980] FAULT_INJECTION: forcing a failure. [ 757.146262][T14980] name failslab, interval 1, probability 0, space 0, times 0 [ 757.214283][T14980] CPU: 0 UID: 0 PID: 14980 Comm: syz.1.1927 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 757.214333][T14980] Tainted: [U]=USER [ 757.214342][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.214358][T14980] Call Trace: [ 757.214367][T14980] [ 757.214378][T14980] dump_stack_lvl+0x16c/0x1f0 [ 757.214424][T14980] should_fail_ex+0x512/0x640 [ 757.214457][T14980] ? __kvmalloc_node_noprof+0x124/0x620 [ 757.214489][T14980] should_failslab+0xc2/0x120 [ 757.214523][T14980] __kvmalloc_node_noprof+0x137/0x620 [ 757.214552][T14980] ? __lock_acquire+0xb97/0x1ce0 [ 757.214584][T14980] ? seq_read_iter+0x826/0x12c0 [ 757.214614][T14980] ? seq_read_iter+0x826/0x12c0 [ 757.214634][T14980] seq_read_iter+0x826/0x12c0 [ 757.214671][T14980] ? __mutex_trylock_common+0xe9/0x250 [ 757.214715][T14980] kernfs_fop_read_iter+0x40f/0x5a0 [ 757.214755][T14980] ? rw_verify_area+0xcf/0x6c0 [ 757.214781][T14980] vfs_read+0x8bf/0xc60 [ 757.214813][T14980] ? __pfx___mutex_lock+0x10/0x10 [ 757.214853][T14980] ? __pfx_vfs_read+0x10/0x10 [ 757.214899][T14980] ksys_read+0x12a/0x250 [ 757.214927][T14980] ? __pfx_ksys_read+0x10/0x10 [ 757.214963][T14980] do_syscall_64+0xcd/0x490 [ 757.215004][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.215030][T14980] RIP: 0033:0x7f1f16b8eb69 [ 757.215050][T14980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.215074][T14980] RSP: 002b:00007f1f1797c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 757.215097][T14980] RAX: ffffffffffffffda RBX: 00007f1f16db5fa0 RCX: 00007f1f16b8eb69 [ 757.215113][T14980] RDX: 0000000000001000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 757.215129][T14980] RBP: 00007f1f16c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 757.215144][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.215158][T14980] R13: 0000000000000000 R14: 00007f1f16db5fa0 R15: 00007fff99d56dd8 [ 757.215188][T14980] [ 757.831422][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.838064][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.121187][T14988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1928'. [ 759.683594][T14991] ubi0: attaching mtd0 [ 759.736325][T14991] ubi0: scanning is finished [ 759.806864][T14991] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 760.062058][T14988] team_slave_1 (unregistering): left promiscuous mode [ 760.069375][T14988] team_slave_1 (unregistering): left allmulticast mode [ 760.249883][T14991] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 760.391573][T14988] team0: Port device team_slave_1 removed [ 763.798708][T15040] kexec: Could not allocate control_code_buffer [ 764.562519][T15050] FAULT_INJECTION: forcing a failure. [ 764.562519][T15050] name failslab, interval 1, probability 0, space 0, times 0 [ 764.686515][T15050] CPU: 0 UID: 0 PID: 15050 Comm: syz.1.1947 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 764.686557][T15050] Tainted: [U]=USER [ 764.686565][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 764.686581][T15050] Call Trace: [ 764.686589][T15050] [ 764.686599][T15050] dump_stack_lvl+0x16c/0x1f0 [ 764.686642][T15050] should_fail_ex+0x512/0x640 [ 764.686666][T15050] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 764.686729][T15050] should_failslab+0xc2/0x120 [ 764.686762][T15050] __kmalloc_cache_noprof+0x6a/0x3e0 [ 764.686788][T15050] ? sctp_auth_init_hmacs+0xf2/0x440 [ 764.686837][T15050] sctp_auth_init_hmacs+0xf2/0x440 [ 764.686874][T15050] ? kasan_save_track+0x14/0x30 [ 764.686905][T15050] sctp_auth_init+0x90/0x570 [ 764.686946][T15050] sctp_setsockopt+0xa371/0xb870 [ 764.686977][T15050] ? __pfx_sctp_setsockopt+0x10/0x10 [ 764.687002][T15050] ? __pfx_aa_sk_perm+0x10/0x10 [ 764.687027][T15050] ? __fget_files+0x204/0x3c0 [ 764.687056][T15050] ? sock_common_setsockopt+0x2e/0xf0 [ 764.687082][T15050] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 764.687111][T15050] do_sock_setsockopt+0xf3/0x1d0 [ 764.687140][T15050] __sys_setsockopt+0x120/0x1a0 [ 764.687180][T15050] __x64_sys_setsockopt+0xbd/0x160 [ 764.687215][T15050] ? do_syscall_64+0x91/0x490 [ 764.687252][T15050] ? lockdep_hardirqs_on+0x7c/0x110 [ 764.687288][T15050] do_syscall_64+0xcd/0x490 [ 764.687328][T15050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.687353][T15050] RIP: 0033:0x7f1f16b8eb69 [ 764.687372][T15050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.687396][T15050] RSP: 002b:00007f1f1797c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 764.687418][T15050] RAX: ffffffffffffffda RBX: 00007f1f16db5fa0 RCX: 00007f1f16b8eb69 [ 764.687434][T15050] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 764.687449][T15050] RBP: 00007f1f16c11df1 R08: 0000000000000008 R09: 0000000000000000 [ 764.687464][T15050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.687478][T15050] R13: 0000000000000000 R14: 00007f1f16db5fa0 R15: 00007fff99d56dd8 [ 764.687508][T15050] [ 765.729057][T15061] random: crng reseeded on system resumption [ 765.915405][T15057] FAULT_INJECTION: forcing a failure. [ 765.915405][T15057] name failslab, interval 1, probability 0, space 0, times 0 [ 766.030567][T15057] CPU: 0 UID: 0 PID: 15057 Comm: syz.3.1948 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 766.030609][T15057] Tainted: [U]=USER [ 766.030617][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 766.030632][T15057] Call Trace: [ 766.030641][T15057] [ 766.030650][T15057] dump_stack_lvl+0x16c/0x1f0 [ 766.030693][T15057] should_fail_ex+0x512/0x640 [ 766.030717][T15057] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 766.030746][T15057] should_failslab+0xc2/0x120 [ 766.030779][T15057] __kmalloc_cache_noprof+0x6a/0x3e0 [ 766.030805][T15057] ? sctp_auth_init_hmacs+0xf2/0x440 [ 766.030846][T15057] sctp_auth_init_hmacs+0xf2/0x440 [ 766.030883][T15057] ? kasan_save_track+0x14/0x30 [ 766.030924][T15057] sctp_auth_init+0x90/0x570 [ 766.030965][T15057] sctp_setsockopt+0xa371/0xb870 [ 766.031000][T15057] ? __pfx_sctp_setsockopt+0x10/0x10 [ 766.031025][T15057] ? __pfx_aa_sk_perm+0x10/0x10 [ 766.031051][T15057] ? __fget_files+0x204/0x3c0 [ 766.031078][T15057] ? sock_common_setsockopt+0x2e/0xf0 [ 766.031104][T15057] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 766.031133][T15057] do_sock_setsockopt+0xf3/0x1d0 [ 766.031162][T15057] __sys_setsockopt+0x120/0x1a0 [ 766.031204][T15057] __x64_sys_setsockopt+0xbd/0x160 [ 766.031238][T15057] ? do_syscall_64+0x91/0x490 [ 766.031276][T15057] ? lockdep_hardirqs_on+0x7c/0x110 [ 766.031312][T15057] do_syscall_64+0xcd/0x490 [ 766.031352][T15057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.031377][T15057] RIP: 0033:0x7fb92e38eb69 [ 766.031396][T15057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.031420][T15057] RSP: 002b:00007fb92f219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 766.031443][T15057] RAX: ffffffffffffffda RBX: 00007fb92e5b5fa0 RCX: 00007fb92e38eb69 [ 766.031459][T15057] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 766.031475][T15057] RBP: 00007fb92e411df1 R08: 0000000000000008 R09: 0000000000000000 [ 766.031490][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.031504][T15057] R13: 0000000000000000 R14: 00007fb92e5b5fa0 R15: 00007fff1cbc06d8 [ 766.031534][T15057] [ 769.658661][T15085] FAULT_INJECTION: forcing a failure. [ 769.658661][T15085] name failslab, interval 1, probability 0, space 0, times 0 [ 769.723091][T15085] CPU: 0 UID: 0 PID: 15085 Comm: syz.2.1956 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 769.723133][T15085] Tainted: [U]=USER [ 769.723142][T15085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.723157][T15085] Call Trace: [ 769.723165][T15085] [ 769.723175][T15085] dump_stack_lvl+0x16c/0x1f0 [ 769.723219][T15085] should_fail_ex+0x512/0x640 [ 769.723244][T15085] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 769.723272][T15085] should_failslab+0xc2/0x120 [ 769.723306][T15085] __kmalloc_cache_noprof+0x6a/0x3e0 [ 769.723331][T15085] ? sctp_auth_init_hmacs+0xf2/0x440 [ 769.723374][T15085] sctp_auth_init_hmacs+0xf2/0x440 [ 769.723412][T15085] ? kasan_save_track+0x14/0x30 [ 769.723443][T15085] sctp_auth_init+0x90/0x570 [ 769.723484][T15085] sctp_setsockopt+0xa371/0xb870 [ 769.723525][T15085] ? __pfx_sctp_setsockopt+0x10/0x10 [ 769.723552][T15085] ? __pfx_aa_sk_perm+0x10/0x10 [ 769.723578][T15085] ? __fget_files+0x204/0x3c0 [ 769.723607][T15085] ? sock_common_setsockopt+0x2e/0xf0 [ 769.723634][T15085] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 769.723664][T15085] do_sock_setsockopt+0xf3/0x1d0 [ 769.723693][T15085] __sys_setsockopt+0x120/0x1a0 [ 769.723735][T15085] __x64_sys_setsockopt+0xbd/0x160 [ 769.723770][T15085] ? do_syscall_64+0x91/0x490 [ 769.723808][T15085] ? lockdep_hardirqs_on+0x7c/0x110 [ 769.723844][T15085] do_syscall_64+0xcd/0x490 [ 769.723885][T15085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.723910][T15085] RIP: 0033:0x7fa5ebd8eb69 [ 769.723930][T15085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.723953][T15085] RSP: 002b:00007fa5e9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 769.723976][T15085] RAX: ffffffffffffffda RBX: 00007fa5ebfb5fa0 RCX: 00007fa5ebd8eb69 [ 769.723992][T15085] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 769.724007][T15085] RBP: 00007fa5ebe11df1 R08: 0000000000000008 R09: 0000000000000000 [ 769.724022][T15085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.724036][T15085] R13: 0000000000000000 R14: 00007fa5ebfb5fa0 R15: 00007fff28612258 [ 769.724066][T15085] [ 770.819901][T15094] FAULT_INJECTION: forcing a failure. [ 770.819901][T15094] name failslab, interval 1, probability 0, space 0, times 0 [ 770.879791][T15094] CPU: 0 UID: 0 PID: 15094 Comm: syz.2.1957 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 770.879833][T15094] Tainted: [U]=USER [ 770.879841][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 770.879856][T15094] Call Trace: [ 770.879864][T15094] [ 770.879873][T15094] dump_stack_lvl+0x16c/0x1f0 [ 770.879920][T15094] should_fail_ex+0x512/0x640 [ 770.879945][T15094] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 770.879974][T15094] should_failslab+0xc2/0x120 [ 770.880007][T15094] __kmalloc_cache_noprof+0x6a/0x3e0 [ 770.880033][T15094] ? sctp_auth_init_hmacs+0xf2/0x440 [ 770.880079][T15094] sctp_auth_init_hmacs+0xf2/0x440 [ 770.880116][T15094] ? kasan_save_track+0x14/0x30 [ 770.880147][T15094] sctp_auth_init+0x90/0x570 [ 770.880188][T15094] sctp_setsockopt+0xa371/0xb870 [ 770.880220][T15094] ? __pfx_sctp_setsockopt+0x10/0x10 [ 770.880245][T15094] ? __pfx_aa_sk_perm+0x10/0x10 [ 770.880271][T15094] ? __fget_files+0x204/0x3c0 [ 770.880300][T15094] ? sock_common_setsockopt+0x2e/0xf0 [ 770.880327][T15094] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 770.880357][T15094] do_sock_setsockopt+0xf3/0x1d0 [ 770.880386][T15094] __sys_setsockopt+0x120/0x1a0 [ 770.880435][T15094] __x64_sys_setsockopt+0xbd/0x160 [ 770.880470][T15094] ? do_syscall_64+0x91/0x490 [ 770.880508][T15094] ? lockdep_hardirqs_on+0x7c/0x110 [ 770.880545][T15094] do_syscall_64+0xcd/0x490 [ 770.880585][T15094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.880610][T15094] RIP: 0033:0x7fa5ebd8eb69 [ 770.880629][T15094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.880653][T15094] RSP: 002b:00007fa5e9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 770.880695][T15094] RAX: ffffffffffffffda RBX: 00007fa5ebfb5fa0 RCX: 00007fa5ebd8eb69 [ 770.880712][T15094] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 770.880727][T15094] RBP: 00007fa5ebe11df1 R08: 0000000000000008 R09: 0000000000000000 [ 770.880741][T15094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.880755][T15094] R13: 0000000000000000 R14: 00007fa5ebfb5fa0 R15: 00007fff28612258 [ 770.880785][T15094] [ 772.882825][T15123] usb usb36: usbfs: process 15123 (syz.1.1965) did not claim interface 0 before use [ 773.126153][T15118] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 774.133988][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1970'. [ 774.406764][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 775.481673][T15162] can0: slcan on ttyS2. [ 775.701422][T15163] can0 (unregistered): slcan off ttyS2. [ 775.845255][T15167] FAULT_INJECTION: forcing a failure. [ 775.845255][T15167] name failslab, interval 1, probability 0, space 0, times 0 [ 776.049654][T15167] CPU: 0 UID: 0 PID: 15167 Comm: syz.1.1977 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 776.049695][T15167] Tainted: [U]=USER [ 776.049703][T15167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.049718][T15167] Call Trace: [ 776.049726][T15167] [ 776.049736][T15167] dump_stack_lvl+0x16c/0x1f0 [ 776.049779][T15167] should_fail_ex+0x512/0x640 [ 776.049802][T15167] ? __kmalloc_noprof+0xbf/0x510 [ 776.049834][T15167] ? xfrm_hash_alloc+0xd1/0x100 [ 776.049871][T15167] should_failslab+0xc2/0x120 [ 776.049904][T15167] __kmalloc_noprof+0xd2/0x510 [ 776.049942][T15167] ? xfrm_nat_keepalive_net_fini+0x21/0x30 [ 776.049977][T15167] xfrm_hash_alloc+0xd1/0x100 [ 776.050014][T15167] xfrm_state_init+0x11e/0x630 [ 776.050056][T15167] ? __pfx_xfrm_net_init+0x10/0x10 [ 776.050087][T15167] xfrm_net_init+0x210/0xcc0 [ 776.050115][T15167] ? __pfx_xfrm_net_init+0x10/0x10 [ 776.050138][T15167] ops_init+0x1df/0x5f0 [ 776.050164][T15167] setup_net+0x10f/0x380 [ 776.050183][T15167] ? lockdep_init_map_type+0x5c/0x280 [ 776.050218][T15167] ? __pfx_setup_net+0x10/0x10 [ 776.050241][T15167] ? debug_mutex_init+0x37/0x70 [ 776.050268][T15167] copy_net_ns+0x2a6/0x5f0 [ 776.050296][T15167] create_new_namespaces+0x3ea/0xa90 [ 776.050335][T15167] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 776.050366][T15167] ksys_unshare+0x45b/0xa40 [ 776.050401][T15167] ? __pfx_ksys_unshare+0x10/0x10 [ 776.050436][T15167] ? xfd_validate_state+0x61/0x180 [ 776.050482][T15167] __x64_sys_unshare+0x31/0x40 [ 776.050515][T15167] do_syscall_64+0xcd/0x490 [ 776.050555][T15167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.050580][T15167] RIP: 0033:0x7f1f16b8eb69 [ 776.050599][T15167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.050624][T15167] RSP: 002b:00007f1f1797c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 776.050648][T15167] RAX: ffffffffffffffda RBX: 00007f1f16db5fa0 RCX: 00007f1f16b8eb69 [ 776.050664][T15167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 776.050679][T15167] RBP: 00007f1f16c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 776.050694][T15167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.050708][T15167] R13: 0000000000000000 R14: 00007f1f16db5fa0 R15: 00007fff99d56dd8 [ 776.050738][T15167] [ 777.013701][T15187] serio: Serial port pty238 [ 778.729294][T15225] FAULT_INJECTION: forcing a failure. [ 778.729294][T15225] name failslab, interval 1, probability 0, space 0, times 0 [ 778.854895][T15225] CPU: 0 UID: 0 PID: 15225 Comm: syz.1.1985 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 778.854939][T15225] Tainted: [U]=USER [ 778.854947][T15225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 778.854962][T15225] Call Trace: [ 778.854971][T15225] [ 778.854980][T15225] dump_stack_lvl+0x16c/0x1f0 [ 778.855024][T15225] should_fail_ex+0x512/0x640 [ 778.855049][T15225] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 778.855078][T15225] should_failslab+0xc2/0x120 [ 778.855112][T15225] __kmalloc_cache_noprof+0x6a/0x3e0 [ 778.855138][T15225] ? sctp_auth_init_hmacs+0xf2/0x440 [ 778.855180][T15225] sctp_auth_init_hmacs+0xf2/0x440 [ 778.855218][T15225] ? kasan_save_track+0x14/0x30 [ 778.855249][T15225] sctp_auth_init+0x90/0x570 [ 778.855290][T15225] sctp_setsockopt+0xa371/0xb870 [ 778.855323][T15225] ? __pfx_sctp_setsockopt+0x10/0x10 [ 778.855349][T15225] ? __pfx_aa_sk_perm+0x10/0x10 [ 778.855374][T15225] ? __fget_files+0x204/0x3c0 [ 778.855414][T15225] ? sock_common_setsockopt+0x2e/0xf0 [ 778.855441][T15225] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 778.855472][T15225] do_sock_setsockopt+0xf3/0x1d0 [ 778.855502][T15225] __sys_setsockopt+0x120/0x1a0 [ 778.855544][T15225] __x64_sys_setsockopt+0xbd/0x160 [ 778.855579][T15225] ? do_syscall_64+0x91/0x490 [ 778.855617][T15225] ? lockdep_hardirqs_on+0x7c/0x110 [ 778.855655][T15225] do_syscall_64+0xcd/0x490 [ 778.855695][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.855720][T15225] RIP: 0033:0x7f1f16b8eb69 [ 778.855740][T15225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.855763][T15225] RSP: 002b:00007f1f1795b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 778.855785][T15225] RAX: ffffffffffffffda RBX: 00007f1f16db6080 RCX: 00007f1f16b8eb69 [ 778.855801][T15225] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 778.855816][T15225] RBP: 00007f1f16c11df1 R08: 0000000000000008 R09: 0000000000000000 [ 778.855831][T15225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.855846][T15225] R13: 0000000000000000 R14: 00007f1f16db6080 R15: 00007fff99d56dd8 [ 778.855877][T15225] [ 783.557484][T15295] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1996'. [ 785.653579][T15334] netlink: 'syz.2.2001': attribute type 1 has an invalid length. [ 785.688447][T15334] netlink: 322 bytes leftover after parsing attributes in process `syz.2.2001'. [ 785.987665][T15333] FAULT_INJECTION: forcing a failure. [ 785.987665][T15333] name failslab, interval 1, probability 0, space 0, times 0 [ 786.187034][T15333] CPU: 0 UID: 0 PID: 15333 Comm: syz.3.2000 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 786.187075][T15333] Tainted: [U]=USER [ 786.187084][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.187098][T15333] Call Trace: [ 786.187106][T15333] [ 786.187115][T15333] dump_stack_lvl+0x16c/0x1f0 [ 786.187157][T15333] should_fail_ex+0x512/0x640 [ 786.187181][T15333] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 786.187214][T15333] should_failslab+0xc2/0x120 [ 786.187246][T15333] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 786.187274][T15333] ? __pfx_gid_cmp+0x10/0x10 [ 786.187304][T15333] ? prepare_creds+0x2c/0x7d0 [ 786.187345][T15333] prepare_creds+0x2c/0x7d0 [ 786.187383][T15333] set_current_groups+0x15/0xd0 [ 786.187416][T15333] __do_sys_setgroups+0x3db/0x4e0 [ 786.187456][T15333] do_syscall_64+0xcd/0x490 [ 786.187497][T15333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.187522][T15333] RIP: 0033:0x7fb92e38eb69 [ 786.187542][T15333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.187566][T15333] RSP: 002b:00007fb92f1f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 786.187590][T15333] RAX: ffffffffffffffda RBX: 00007fb92e5b6080 RCX: 00007fb92e38eb69 [ 786.187606][T15333] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000e32 [ 786.187621][T15333] RBP: 00007fb92f1f8090 R08: 0000000000000000 R09: 0000000000000000 [ 786.187636][T15333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.187651][T15333] R13: 0000000000000000 R14: 00007fb92e5b6080 R15: 00007fff1cbc06d8 [ 786.187682][T15333] [ 786.956169][T11666] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 786.956211][T11666] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 786.975644][T11666] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 786.975707][T11666] Bluetooth: hci0: adv larger than maximum supported [ 786.986226][T11666] Bluetooth: hci0: adv larger than maximum supported [ 787.020422][T11666] Bluetooth: hci0: Malformed LE Event: 0x0d [ 787.210378][T11666] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 787.210411][T11666] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 787.225630][T11666] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 787.225659][T11666] Bluetooth: hci0: adv larger than maximum supported [ 787.235402][T11666] Bluetooth: hci0: adv larger than maximum supported [ 787.242865][T11666] Bluetooth: hci0: Malformed LE Event: 0x0d [ 791.627866][T15404] can0: slcan on ttyS2. [ 793.192577][T15401] can0 (unregistered): slcan off ttyS2. @[ 795.372660][T15474] zswap: compressor not available [ 795.400580][T15482] Setting dangerous option i915.mitigations - tainting kernel [ 796.630081][T15495] FAULT_INJECTION: forcing a failure. [ 796.630081][T15495] name failslab, interval 1, probability 0, space 0, times 0 [ 796.708082][T15495] CPU: 0 UID: 0 PID: 15495 Comm: syz.3.2025 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 796.708125][T15495] Tainted: [U]=USER [ 796.708134][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 796.708150][T15495] Call Trace: [ 796.708159][T15495] [ 796.708168][T15495] dump_stack_lvl+0x16c/0x1f0 [ 796.708212][T15495] should_fail_ex+0x512/0x640 [ 796.708238][T15495] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 796.708267][T15495] should_failslab+0xc2/0x120 [ 796.708301][T15495] __kmalloc_cache_noprof+0x6a/0x3e0 [ 796.708326][T15495] ? sctp_auth_init_hmacs+0xf2/0x440 [ 796.708367][T15495] sctp_auth_init_hmacs+0xf2/0x440 [ 796.708405][T15495] ? kasan_save_track+0x14/0x30 [ 796.708435][T15495] sctp_auth_init+0x90/0x570 [ 796.708476][T15495] sctp_setsockopt+0xa371/0xb870 [ 796.708507][T15495] ? __pfx_sctp_setsockopt+0x10/0x10 [ 796.708532][T15495] ? __pfx_aa_sk_perm+0x10/0x10 [ 796.708557][T15495] ? __fget_files+0x204/0x3c0 [ 796.708586][T15495] ? sock_common_setsockopt+0x2e/0xf0 [ 796.708612][T15495] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 796.708641][T15495] do_sock_setsockopt+0xf3/0x1d0 [ 796.708670][T15495] __sys_setsockopt+0x120/0x1a0 [ 796.708712][T15495] __x64_sys_setsockopt+0xbd/0x160 [ 796.708747][T15495] ? do_syscall_64+0x91/0x490 [ 796.708785][T15495] ? lockdep_hardirqs_on+0x7c/0x110 [ 796.708821][T15495] do_syscall_64+0xcd/0x490 [ 796.708861][T15495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.708904][T15495] RIP: 0033:0x7fb92e38eb69 [ 796.708923][T15495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.708955][T15495] RSP: 002b:00007fb92f219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 796.708979][T15495] RAX: ffffffffffffffda RBX: 00007fb92e5b5fa0 RCX: 00007fb92e38eb69 [ 796.708995][T15495] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 796.709010][T15495] RBP: 00007fb92e411df1 R08: 0000000000000008 R09: 0000000000000000 [ 796.709026][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.709041][T15495] R13: 0000000000000000 R14: 00007fb92e5b5fa0 R15: 00007fff1cbc06d8 [ 796.709072][T15495] [ 799.875126][T15542] mkiss: ax0: crc mode is auto. [ 800.267742][T15534] kexec: Could not allocate control_code_buffer [ 806.486308][T15573] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 808.334261][T15630] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 810.879839][T15666] input: f¬ as /devices/virtual/input/input16 [ 811.380799][T15672] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 811.901218][T15677] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 812.953783][T15697] FAULT_INJECTION: forcing a failure. [ 812.953783][T15697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.038004][T15697] CPU: 0 UID: 0 PID: 15697 Comm: syz.1.2074 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 813.038052][T15697] Tainted: [U]=USER [ 813.038062][T15697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.038077][T15697] Call Trace: [ 813.038085][T15697] [ 813.038094][T15697] dump_stack_lvl+0x16c/0x1f0 [ 813.038135][T15697] should_fail_ex+0x512/0x640 [ 813.038163][T15697] _copy_from_user+0x2e/0xd0 [ 813.038191][T15697] copy_msghdr_from_user+0x98/0x160 [ 813.038228][T15697] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 813.038268][T15697] ? kfree+0x24f/0x4d0 [ 813.038291][T15697] ? find_held_lock+0x2b/0x80 [ 813.038320][T15697] ___sys_recvmsg+0xdb/0x1a0 [ 813.038354][T15697] ? __pfx____sys_recvmsg+0x10/0x10 [ 813.038405][T15697] ? __pfx___might_resched+0x10/0x10 [ 813.038442][T15697] do_recvmmsg+0x2fe/0x750 [ 813.038483][T15697] ? __pfx_do_recvmmsg+0x10/0x10 [ 813.038516][T15697] ? vfs_write+0x15d/0x1150 [ 813.038550][T15697] ? __pfx_vfs_write+0x10/0x10 [ 813.038593][T15697] __x64_sys_recvmmsg+0x22a/0x280 [ 813.038632][T15697] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 813.038679][T15697] do_syscall_64+0xcd/0x490 [ 813.038718][T15697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.038742][T15697] RIP: 0033:0x7f1f16b8eb69 [ 813.038760][T15697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.038784][T15697] RSP: 002b:00007f1f1797c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 813.038807][T15697] RAX: ffffffffffffffda RBX: 00007f1f16db5fa0 RCX: 00007f1f16b8eb69 [ 813.038823][T15697] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000000 [ 813.038837][T15697] RBP: 00007f1f1797c090 R08: 0000000000000000 R09: 0000000000000000 [ 813.038852][T15697] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 813.038866][T15697] R13: 0000000000000000 R14: 00007f1f16db5fa0 R15: 00007fff99d56dd8 [ 813.038896][T15697] [ 813.774492][T15710] FAULT_INJECTION: forcing a failure. [ 813.774492][T15710] name fail_futex, interval 1, probability 0, space 0, times 0 [ 813.835704][T15710] CPU: 0 UID: 0 PID: 15710 Comm: syz.0.2079 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 813.835747][T15710] Tainted: [U]=USER [ 813.835755][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.835770][T15710] Call Trace: [ 813.835779][T15710] [ 813.835789][T15710] dump_stack_lvl+0x16c/0x1f0 [ 813.835832][T15710] should_fail_ex+0x512/0x640 [ 813.835863][T15710] get_futex_key+0x1d0/0x1560 [ 813.835898][T15710] ? __pfx_get_futex_key+0x10/0x10 [ 813.835933][T15710] ? trace_pid_list_is_set+0xfb/0x150 [ 813.835968][T15710] ? do_raw_spin_unlock+0x172/0x230 [ 813.836013][T15710] futex_wait_setup+0x9d/0x550 [ 813.836060][T15710] __futex_wait+0x194/0x2f0 [ 813.836099][T15710] ? __pfx___futex_wait+0x10/0x10 [ 813.836135][T15710] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 813.836170][T15710] ? lockdep_hardirqs_on+0x7c/0x110 [ 813.836216][T15710] ? __pfx_futex_wake_mark+0x10/0x10 [ 813.836258][T15710] ? futex_private_hash_put+0x176/0x300 [ 813.836292][T15710] ? futex_private_hash_put+0x18a/0x300 [ 813.836324][T15710] futex_wait+0xe8/0x380 [ 813.836367][T15710] ? __pfx_futex_wait+0x10/0x10 [ 813.836427][T15710] do_futex+0x229/0x350 [ 813.836460][T15710] ? __pfx_do_futex+0x10/0x10 [ 813.836493][T15710] ? __pfx___do_sys_clone+0x10/0x10 [ 813.836533][T15710] __x64_sys_futex+0x1e0/0x4c0 [ 813.836570][T15710] ? __pfx___x64_sys_futex+0x10/0x10 [ 813.836602][T15710] ? xfd_validate_state+0x61/0x180 [ 813.836640][T15710] ? __pfx_do_writev+0x10/0x10 [ 813.836679][T15710] do_syscall_64+0xcd/0x490 [ 813.836727][T15710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.836753][T15710] RIP: 0033:0x7f418ef8eb69 [ 813.836774][T15710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.836799][T15710] RSP: 002b:00007f418fd2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 813.836823][T15710] RAX: ffffffffffffffda RBX: 00007f418f1b5fa8 RCX: 00007f418ef8eb69 [ 813.836839][T15710] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f418f1b5fa8 [ 813.836854][T15710] RBP: 00007f418f1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 813.836870][T15710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f418f1b5fac [ 813.836885][T15710] R13: 0000000000000000 R14: 00007fff58befa80 R15: 00007fff58befb68 [ 813.836921][T15710] [ 814.928935][T15735] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 818.649447][T15798] input: f¬ as /devices/virtual/input/input17 [ 819.114611][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.121798][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.894534][T15819] FAULT_INJECTION: forcing a failure. [ 819.894534][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 819.991450][T15819] CPU: 0 UID: 0 PID: 15819 Comm: syz.0.2096 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 819.991492][T15819] Tainted: [U]=USER [ 819.991500][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 819.991514][T15819] Call Trace: [ 819.991523][T15819] [ 819.991532][T15819] dump_stack_lvl+0x16c/0x1f0 [ 819.991575][T15819] should_fail_ex+0x512/0x640 [ 819.991600][T15819] ? __kvmalloc_node_noprof+0x124/0x620 [ 819.991631][T15819] should_failslab+0xc2/0x120 [ 819.991664][T15819] __kvmalloc_node_noprof+0x137/0x620 [ 819.991692][T15819] ? __lock_acquire+0xb97/0x1ce0 [ 819.991724][T15819] ? seq_read_iter+0x826/0x12c0 [ 819.991753][T15819] ? seq_read_iter+0x826/0x12c0 [ 819.991781][T15819] seq_read_iter+0x826/0x12c0 [ 819.991806][T15819] ? __mutex_trylock_common+0xe9/0x250 [ 819.991850][T15819] kernfs_fop_read_iter+0x40f/0x5a0 [ 819.991890][T15819] ? rw_verify_area+0xcf/0x6c0 [ 819.991918][T15819] vfs_read+0x8bf/0xc60 [ 819.991948][T15819] ? __pfx___mutex_lock+0x10/0x10 [ 819.991986][T15819] ? __pfx_vfs_read+0x10/0x10 [ 819.992032][T15819] ksys_read+0x12a/0x250 [ 819.992059][T15819] ? __pfx_ksys_read+0x10/0x10 [ 819.992095][T15819] do_syscall_64+0xcd/0x490 [ 819.992135][T15819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.992160][T15819] RIP: 0033:0x7f418ef8eb69 [ 819.992179][T15819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.992202][T15819] RSP: 002b:00007f418fd2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 819.992227][T15819] RAX: ffffffffffffffda RBX: 00007f418f1b5fa0 RCX: 00007f418ef8eb69 [ 819.992246][T15819] RDX: 0000000000001000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 819.992261][T15819] RBP: 00007f418f011df1 R08: 0000000000000000 R09: 0000000000000000 [ 819.992276][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.992290][T15819] R13: 0000000000000000 R14: 00007f418f1b5fa0 R15: 00007fff58befb68 [ 819.992320][T15819] [ 820.265820][T15810] Line length is too long: Should be less than 4094 [ 822.097071][T15834] kexec: Could not allocate control_code_buffer [ 823.501054][T15857] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 823.601922][T15857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2106'. [ 826.871734][T15906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2116'. [ 826.980506][T15906] hsr0: entered allmulticast mode [ 827.042328][T15906] hsr_slave_0: entered allmulticast mode [ 827.107005][T15906] hsr_slave_1: entered allmulticast mode [ 828.221641][T15923] FAULT_INJECTION: forcing a failure. [ 828.221641][T15923] name failslab, interval 1, probability 0, space 0, times 0 [ 828.410763][T15923] CPU: 0 UID: 0 PID: 15923 Comm: syz.1.2121 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 828.410807][T15923] Tainted: [U]=USER [ 828.410815][T15923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 828.410831][T15923] Call Trace: [ 828.410839][T15923] [ 828.410848][T15923] dump_stack_lvl+0x16c/0x1f0 [ 828.410891][T15923] should_fail_ex+0x512/0x640 [ 828.410916][T15923] ? __kmalloc_node_noprof+0xc5/0x500 [ 828.410950][T15923] should_failslab+0xc2/0x120 [ 828.410986][T15923] __kmalloc_node_noprof+0xd8/0x500 [ 828.411016][T15923] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 828.411061][T15923] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 828.411092][T15923] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 828.411135][T15923] crypto_create_tfm_node+0x85/0x350 [ 828.411162][T15923] crypto_alloc_tfm_node+0x102/0x260 [ 828.411185][T15923] ? kasan_save_track+0x14/0x30 [ 828.411216][T15923] sctp_auth_init_hmacs+0x1e1/0x440 [ 828.411253][T15923] ? kasan_save_track+0x14/0x30 [ 828.411284][T15923] sctp_auth_init+0x90/0x570 [ 828.411324][T15923] sctp_setsockopt+0xa371/0xb870 [ 828.411355][T15923] ? __pfx_sctp_setsockopt+0x10/0x10 [ 828.411380][T15923] ? __pfx_aa_sk_perm+0x10/0x10 [ 828.411404][T15923] ? __fget_files+0x204/0x3c0 [ 828.411432][T15923] ? sock_common_setsockopt+0x2e/0xf0 [ 828.411458][T15923] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 828.411487][T15923] do_sock_setsockopt+0xf3/0x1d0 [ 828.411516][T15923] __sys_setsockopt+0x120/0x1a0 [ 828.411557][T15923] __x64_sys_setsockopt+0xbd/0x160 [ 828.411592][T15923] ? do_syscall_64+0x91/0x490 [ 828.411629][T15923] ? lockdep_hardirqs_on+0x7c/0x110 [ 828.411665][T15923] do_syscall_64+0xcd/0x490 [ 828.411705][T15923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.411741][T15923] RIP: 0033:0x7f1f16b8eb69 [ 828.411760][T15923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.411784][T15923] RSP: 002b:00007f1f1795b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 828.411807][T15923] RAX: ffffffffffffffda RBX: 00007f1f16db6080 RCX: 00007f1f16b8eb69 [ 828.411823][T15923] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 828.411838][T15923] RBP: 00007f1f16c11df1 R08: 0000000000000008 R09: 0000000000000000 [ 828.411853][T15923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.411868][T15923] R13: 0000000000000000 R14: 00007f1f16db6080 R15: 00007fff99d56dd8 [ 828.411897][T15923] [ 828.670803][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.144204][T15928] kexec: Could not allocate control_code_buffer [ 831.885440][T15979] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 831.930471][T15979] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2135'. [ 833.937820][T16023] FAULT_INJECTION: forcing a failure. [ 833.937820][T16023] name failslab, interval 1, probability 0, space 0, times 0 [ 834.053191][T16023] CPU: 0 UID: 0 PID: 16023 Comm: syz.2.2146 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 834.053232][T16023] Tainted: [U]=USER [ 834.053240][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 834.053255][T16023] Call Trace: [ 834.053263][T16023] [ 834.053273][T16023] dump_stack_lvl+0x16c/0x1f0 [ 834.053316][T16023] should_fail_ex+0x512/0x640 [ 834.053341][T16023] ? __kmalloc_noprof+0xbf/0x510 [ 834.053372][T16023] ? __netlink_kernel_create+0x17f/0x750 [ 834.053410][T16023] should_failslab+0xc2/0x120 [ 834.053445][T16023] __kmalloc_noprof+0xd2/0x510 [ 834.053475][T16023] ? __netlink_create+0x208/0x2c0 [ 834.053509][T16023] __netlink_kernel_create+0x17f/0x750 [ 834.053550][T16023] ? __pfx___netlink_kernel_create+0x10/0x10 [ 834.053589][T16023] ? fib4_semantics_init+0x25/0x100 [ 834.053631][T16023] fib_net_init+0x26d/0x3f0 [ 834.053652][T16023] ? __pfx___register_sysctl_table+0x10/0x10 [ 834.053691][T16023] ? __pfx_fib_net_init+0x10/0x10 [ 834.053713][T16023] ? lockdep_init_map_type+0x5c/0x280 [ 834.053748][T16023] ? __pfx_nl_fib_input+0x10/0x10 [ 834.053776][T16023] ? devinet_init_net+0x5c2/0x910 [ 834.053804][T16023] ? __pfx_fib_net_init+0x10/0x10 [ 834.053826][T16023] ops_init+0x1df/0x5f0 [ 834.053851][T16023] setup_net+0x10f/0x380 [ 834.053871][T16023] ? lockdep_init_map_type+0x5c/0x280 [ 834.053905][T16023] ? __pfx_setup_net+0x10/0x10 [ 834.053929][T16023] ? debug_mutex_init+0x37/0x70 [ 834.053956][T16023] copy_net_ns+0x2a6/0x5f0 [ 834.053985][T16023] create_new_namespaces+0x3ea/0xa90 [ 834.054020][T16023] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 834.054052][T16023] ksys_unshare+0x45b/0xa40 [ 834.054087][T16023] ? __pfx_ksys_unshare+0x10/0x10 [ 834.054122][T16023] ? xfd_validate_state+0x61/0x180 [ 834.054176][T16023] __x64_sys_unshare+0x31/0x40 [ 834.054209][T16023] do_syscall_64+0xcd/0x490 [ 834.054250][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.054275][T16023] RIP: 0033:0x7fa5ebd8eb69 [ 834.054294][T16023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.054318][T16023] RSP: 002b:00007fa5e9bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 834.054340][T16023] RAX: ffffffffffffffda RBX: 00007fa5ebfb6160 RCX: 00007fa5ebd8eb69 [ 834.054357][T16023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 834.054371][T16023] RBP: 00007fa5ebe11df1 R08: 0000000000000000 R09: 0000000000000000 [ 834.054386][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.054401][T16023] R13: 0000000000000000 R14: 00007fa5ebfb6160 R15: 00007fff28612258 [ 834.054431][T16023] [ 837.859280][T16077] input: f¬ as /devices/virtual/input/input19 [ 839.099170][T16101] FAULT_INJECTION: forcing a failure. [ 839.099170][T16101] name failslab, interval 1, probability 0, space 0, times 0 [ 839.186522][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.1.2164 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 839.186563][T16101] Tainted: [U]=USER [ 839.186572][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 839.186587][T16101] Call Trace: [ 839.186596][T16101] [ 839.186605][T16101] dump_stack_lvl+0x16c/0x1f0 [ 839.186650][T16101] should_fail_ex+0x512/0x640 [ 839.186675][T16101] ? __kvmalloc_node_noprof+0x124/0x620 [ 839.186807][T16101] should_failslab+0xc2/0x120 [ 839.186845][T16101] __kvmalloc_node_noprof+0x137/0x620 [ 839.186873][T16101] ? __lock_acquire+0xb97/0x1ce0 [ 839.186904][T16101] ? seq_read_iter+0x826/0x12c0 [ 839.186932][T16101] ? seq_read_iter+0x826/0x12c0 [ 839.186951][T16101] seq_read_iter+0x826/0x12c0 [ 839.186983][T16101] ? __mutex_trylock_common+0xe9/0x250 [ 839.187026][T16101] kernfs_fop_read_iter+0x40f/0x5a0 [ 839.187065][T16101] ? rw_verify_area+0xcf/0x6c0 [ 839.187091][T16101] vfs_read+0x8bf/0xc60 [ 839.187121][T16101] ? __pfx___mutex_lock+0x10/0x10 [ 839.187160][T16101] ? __pfx_vfs_read+0x10/0x10 [ 839.187205][T16101] ksys_read+0x12a/0x250 [ 839.187231][T16101] ? __pfx_ksys_read+0x10/0x10 [ 839.187266][T16101] do_syscall_64+0xcd/0x490 [ 839.187308][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.187334][T16101] RIP: 0033:0x7f1f16b8eb69 [ 839.187356][T16101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.187379][T16101] RSP: 002b:00007f1f1797c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 839.187402][T16101] RAX: ffffffffffffffda RBX: 00007f1f16db5fa0 RCX: 00007f1f16b8eb69 [ 839.187418][T16101] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000003 [ 839.187432][T16101] RBP: 00007f1f1797c090 R08: 0000000000000000 R09: 0000000000000000 [ 839.187446][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.187461][T16101] R13: 0000000000000000 R14: 00007f1f16db5fa0 R15: 00007fff99d56dd8 [ 839.187491][T16101] [ 840.664198][T16124] input: f¬ as /devices/virtual/input/input20 [ 840.980490][T16119] can: request_module (can-proto-3) failed. [ 843.232958][T16171] FAULT_INJECTION: forcing a failure. [ 843.232958][T16171] name failslab, interval 1, probability 0, space 0, times 0 [ 843.297756][T16171] CPU: 0 UID: 0 PID: 16171 Comm: syz.2.2182 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 843.297801][T16171] Tainted: [U]=USER [ 843.297811][T16171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 843.297829][T16171] Call Trace: [ 843.297838][T16171] [ 843.297850][T16171] dump_stack_lvl+0x16c/0x1f0 [ 843.297898][T16171] should_fail_ex+0x512/0x640 [ 843.297925][T16171] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 843.297963][T16171] should_failslab+0xc2/0x120 [ 843.298000][T16171] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 843.298035][T16171] ? shmem_alloc_inode+0x25/0x50 [ 843.298081][T16171] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 843.298119][T16171] shmem_alloc_inode+0x25/0x50 [ 843.298271][T16171] alloc_inode+0x61/0x240 [ 843.298311][T16171] new_inode+0x22/0x1c0 [ 843.298343][T16171] ? trace_cap_capable+0x18d/0x200 [ 843.298439][T16171] shmem_get_inode+0x19a/0xfb0 [ 843.298480][T16171] ? __vm_enough_memory+0x184/0x3f0 [ 843.298518][T16171] __shmem_file_setup+0x279/0x330 [ 843.298546][T16171] shmem_zero_setup+0x93/0x1a0 [ 843.298577][T16171] __mmap_region+0x2081/0x27b0 [ 843.298610][T16171] ? lock_acquire+0x179/0x350 [ 843.298647][T16171] ? __pfx___mmap_region+0x10/0x10 [ 843.298684][T16171] ? lockdep_hardirqs_on+0x7c/0x110 [ 843.298721][T16171] ? finish_task_switch.isra.0+0x221/0xc10 [ 843.298749][T16171] ? rcu_is_watching+0x12/0xc0 [ 843.298773][T16171] ? trace_sched_exit_tp+0xd1/0x120 [ 843.298814][T16171] ? __schedule+0x11a3/0x5de0 [ 843.298896][T16171] ? trace_cap_capable+0x18d/0x200 [ 843.298945][T16171] mmap_region+0x1ab/0x3f0 [ 843.298974][T16171] ? __get_unmapped_area+0x267/0x440 [ 843.299015][T16171] do_mmap+0xa3e/0x1210 [ 843.299058][T16171] ? __pfx_do_mmap+0x10/0x10 [ 843.299095][T16171] ? __pfx_down_write_killable+0x10/0x10 [ 843.299126][T16171] vm_mmap_pgoff+0x29e/0x470 [ 843.299167][T16171] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 843.299211][T16171] ? __x64_sys_futex+0x1e0/0x4c0 [ 843.299243][T16171] ? __x64_sys_futex+0x1e9/0x4c0 [ 843.299297][T16171] ksys_mmap_pgoff+0x7d/0x5c0 [ 843.299332][T16171] ? xfd_validate_state+0x61/0x180 [ 843.299378][T16171] ? __pfx_ksys_write+0x10/0x10 [ 843.299411][T16171] __x64_sys_mmap+0x125/0x190 [ 843.299456][T16171] do_syscall_64+0xcd/0x490 [ 843.299499][T16171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.299525][T16171] RIP: 0033:0x7fa5ebd8eb69 [ 843.299546][T16171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.299570][T16171] RSP: 002b:00007fa5e9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 843.299593][T16171] RAX: ffffffffffffffda RBX: 00007fa5ebfb5fa0 RCX: 00007fa5ebd8eb69 [ 843.299612][T16171] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 843.299628][T16171] RBP: 00007fa5ebe11df1 R08: 0000000000000401 R09: 0000000000008000 [ 843.299644][T16171] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 843.299659][T16171] R13: 0000000000000000 R14: 00007fa5ebfb5fa0 R15: 00007fff28612258 [ 843.299691][T16171] [ 844.936838][T16183] FAULT_INJECTION: forcing a failure. [ 844.936838][T16183] name failslab, interval 1, probability 0, space 0, times 0 [ 844.989019][T16183] CPU: 0 UID: 0 PID: 16183 Comm: syz.1.2184 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 844.989062][T16183] Tainted: [U]=USER [ 844.989070][T16183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 844.989085][T16183] Call Trace: [ 844.989093][T16183] [ 844.989104][T16183] dump_stack_lvl+0x16c/0x1f0 [ 844.989155][T16183] should_fail_ex+0x512/0x640 [ 844.989180][T16183] ? __kmalloc_node_noprof+0xc5/0x500 [ 844.989214][T16183] should_failslab+0xc2/0x120 [ 844.989247][T16183] __kmalloc_node_noprof+0xd8/0x500 [ 844.989278][T16183] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 844.989322][T16183] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 844.989354][T16183] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 844.989398][T16183] crypto_create_tfm_node+0x85/0x350 [ 844.989426][T16183] crypto_alloc_tfm_node+0x102/0x260 [ 844.989451][T16183] ? kasan_save_track+0x14/0x30 [ 844.989482][T16183] sctp_auth_init_hmacs+0x1e1/0x440 [ 844.989521][T16183] ? kasan_save_track+0x14/0x30 [ 844.989552][T16183] sctp_auth_init+0x90/0x570 [ 844.989593][T16183] sctp_setsockopt+0xa371/0xb870 [ 844.989625][T16183] ? __pfx_sctp_setsockopt+0x10/0x10 [ 844.989650][T16183] ? __pfx_aa_sk_perm+0x10/0x10 [ 844.989676][T16183] ? __fget_files+0x204/0x3c0 [ 844.989705][T16183] ? sock_common_setsockopt+0x2e/0xf0 [ 844.989731][T16183] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 844.989761][T16183] do_sock_setsockopt+0xf3/0x1d0 [ 844.989791][T16183] __sys_setsockopt+0x120/0x1a0 [ 844.989832][T16183] __x64_sys_setsockopt+0xbd/0x160 [ 844.989867][T16183] ? do_syscall_64+0x91/0x490 [ 844.989905][T16183] ? lockdep_hardirqs_on+0x7c/0x110 [ 844.989942][T16183] do_syscall_64+0xcd/0x490 [ 844.989983][T16183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.990009][T16183] RIP: 0033:0x7f1f16b8eb69 [ 844.990028][T16183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.990057][T16183] RSP: 002b:00007f1f1795b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 844.990080][T16183] RAX: ffffffffffffffda RBX: 00007f1f16db6080 RCX: 00007f1f16b8eb69 [ 844.990095][T16183] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 844.990110][T16183] RBP: 00007f1f16c11df1 R08: 0000000000000008 R09: 0000000000000000 [ 844.990132][T16183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.990146][T16183] R13: 0000000000000000 R14: 00007f1f16db6080 R15: 00007fff99d56dd8 [ 844.990177][T16183] [ 846.083261][T16192] random: crng reseeded on system resumption [ 848.451645][T16222] zswap: compressor not available [ 850.102501][T16250] FAULT_INJECTION: forcing a failure. [ 850.102501][T16250] name failslab, interval 1, probability 0, space 0, times 0 [ 850.170721][T16250] CPU: 0 UID: 0 PID: 16250 Comm: syz.2.2196 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 850.170761][T16250] Tainted: [U]=USER [ 850.170769][T16250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 850.170783][T16250] Call Trace: [ 850.170791][T16250] [ 850.170800][T16250] dump_stack_lvl+0x16c/0x1f0 [ 850.170841][T16250] should_fail_ex+0x512/0x640 [ 850.170865][T16250] ? fs_reclaim_acquire+0xae/0x150 [ 850.170903][T16250] ? tomoyo_encode2+0x100/0x3e0 [ 850.170930][T16250] should_failslab+0xc2/0x120 [ 850.170962][T16250] __kmalloc_noprof+0xd2/0x510 [ 850.170997][T16250] tomoyo_encode2+0x100/0x3e0 [ 850.171029][T16250] tomoyo_encode+0x29/0x50 [ 850.171056][T16250] tomoyo_realpath_from_path+0x18f/0x6e0 [ 850.171089][T16250] ? tomoyo_profile+0x47/0x60 [ 850.171125][T16250] tomoyo_path_number_perm+0x245/0x580 [ 850.171148][T16250] ? tomoyo_path_number_perm+0x237/0x580 [ 850.171175][T16250] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 850.171201][T16250] ? find_held_lock+0x2b/0x80 [ 850.171247][T16250] ? find_held_lock+0x2b/0x80 [ 850.171270][T16250] ? handle_mm_fault+0x2ab/0xd10 [ 850.171292][T16250] ? hook_file_ioctl_common+0x145/0x410 [ 850.171332][T16250] ? find_held_lock+0x2b/0x80 [ 850.171363][T16250] security_file_ioctl+0x9b/0x240 [ 850.171389][T16250] __x64_sys_ioctl+0xb7/0x210 [ 850.171428][T16250] do_syscall_64+0xcd/0x490 [ 850.171467][T16250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.171490][T16250] RIP: 0033:0x7fa5ebd8eb69 [ 850.171508][T16250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.171531][T16250] RSP: 002b:00007fa5e9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 850.171553][T16250] RAX: ffffffffffffffda RBX: 00007fa5ebfb5fa0 RCX: 00007fa5ebd8eb69 [ 850.171569][T16250] RDX: 0000000000000004 RSI: 000000004010ae67 RDI: 0000000000000003 [ 850.171584][T16250] RBP: 00007fa5e9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 850.171598][T16250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.171612][T16250] R13: 0000000000000000 R14: 00007fa5ebfb5fa0 R15: 00007fff28612258 [ 850.171641][T16250] [ 850.171662][T16250] ERROR: Out of memory at tomoyo_realpath_from_path. [ 853.994728][T16299] kexec: Could not allocate control_code_buffer [ 855.181429][T16324] input: f¬ as /devices/virtual/input/input21 [ 857.196567][T16356] usb usb2: usbfs: process 16356 (syz.0.2220) did not claim interface 0 before use [ 862.324021][T16427] FAULT_INJECTION: forcing a failure. [ 862.324021][T16427] name failslab, interval 1, probability 0, space 0, times 0 [ 862.404109][T16427] CPU: 0 UID: 0 PID: 16427 Comm: syz.3.2233 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 862.404151][T16427] Tainted: [U]=USER [ 862.404160][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 862.404175][T16427] Call Trace: [ 862.404183][T16427] [ 862.404193][T16427] dump_stack_lvl+0x16c/0x1f0 [ 862.404238][T16427] should_fail_ex+0x512/0x640 [ 862.404263][T16427] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 862.404297][T16427] should_failslab+0xc2/0x120 [ 862.404331][T16427] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 862.404362][T16427] ? __d_alloc+0x32/0xae0 [ 862.404396][T16427] __d_alloc+0x32/0xae0 [ 862.404429][T16427] d_alloc_pseudo+0x1c/0xc0 [ 862.404467][T16427] alloc_file_pseudo+0xcf/0x230 [ 862.404506][T16427] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 862.404564][T16427] __shmem_file_setup+0x1a3/0x330 [ 862.404592][T16427] shmem_zero_setup+0x93/0x1a0 [ 862.404624][T16427] __mmap_region+0x2081/0x27b0 [ 862.404655][T16427] ? finish_task_switch.isra.0+0x21c/0xc10 [ 862.404681][T16427] ? __pfx___mmap_region+0x10/0x10 [ 862.404708][T16427] ? rcu_is_watching+0x12/0xc0 [ 862.404738][T16427] ? rcu_is_watching+0x12/0xc0 [ 862.404762][T16427] ? trace_sched_exit_tp+0xd1/0x120 [ 862.404800][T16427] ? __schedule+0x11a3/0x5de0 [ 862.404832][T16427] ? __lock_acquire+0x62e/0x1ce0 [ 862.404880][T16427] ? __pfx___schedule+0x10/0x10 [ 862.404947][T16427] ? trace_cap_capable+0x18d/0x200 [ 862.404995][T16427] mmap_region+0x1ab/0x3f0 [ 862.405023][T16427] ? __get_unmapped_area+0x267/0x440 [ 862.405061][T16427] do_mmap+0xa3e/0x1210 [ 862.405101][T16427] ? __pfx_do_mmap+0x10/0x10 [ 862.405137][T16427] ? __pfx_down_write_killable+0x10/0x10 [ 862.405167][T16427] vm_mmap_pgoff+0x29e/0x470 [ 862.405207][T16427] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 862.405248][T16427] ? __x64_sys_futex+0x1e0/0x4c0 [ 862.405278][T16427] ? __x64_sys_futex+0x1e9/0x4c0 [ 862.405312][T16427] ksys_mmap_pgoff+0x7d/0x5c0 [ 862.405345][T16427] ? xfd_validate_state+0x61/0x180 [ 862.405381][T16427] ? __pfx_ksys_write+0x10/0x10 [ 862.405411][T16427] __x64_sys_mmap+0x125/0x190 [ 862.405453][T16427] do_syscall_64+0xcd/0x490 [ 862.405493][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.405518][T16427] RIP: 0033:0x7fb92e38eb69 [ 862.405543][T16427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.405567][T16427] RSP: 002b:00007fb92f219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 862.405590][T16427] RAX: ffffffffffffffda RBX: 00007fb92e5b5fa0 RCX: 00007fb92e38eb69 [ 862.405606][T16427] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 862.405621][T16427] RBP: 00007fb92e411df1 R08: 0000000000000401 R09: 0000000000008000 [ 862.405636][T16427] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 862.405651][T16427] R13: 0000000000000000 R14: 00007fb92e5b5fa0 R15: 00007fff1cbc06d8 [ 862.405687][T16427] [ 862.709613][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.858070][T16448] FAULT_INJECTION: forcing a failure. [ 863.858070][T16448] name failslab, interval 1, probability 0, space 0, times 0 [ 864.028225][T16459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2239'. [ 864.050494][T16448] CPU: 0 UID: 0 PID: 16448 Comm: syz.2.2237 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 864.050536][T16448] Tainted: [U]=USER [ 864.050544][T16448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 864.050559][T16448] Call Trace: [ 864.050567][T16448] [ 864.050576][T16448] dump_stack_lvl+0x16c/0x1f0 [ 864.050618][T16448] should_fail_ex+0x512/0x640 [ 864.050689][T16448] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 864.050722][T16448] should_failslab+0xc2/0x120 [ 864.050755][T16448] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 864.050784][T16448] ? mas_alloc_nodes+0x18b/0x8b0 [ 864.050822][T16448] mas_alloc_nodes+0x18b/0x8b0 [ 864.050861][T16448] mas_node_count_gfp+0x105/0x130 [ 864.050897][T16448] mas_preallocate+0x7e0/0xde0 [ 864.050920][T16448] ? __memcg_slab_post_alloc_hook+0x482/0x960 [ 864.050959][T16448] ? __pfx_mas_preallocate+0x10/0x10 [ 864.050992][T16448] ? anon_vma_name+0x81/0x2f0 [ 864.051032][T16448] __split_vma+0x34a/0x1070 [ 864.051062][T16448] ? __pfx___split_vma+0x10/0x10 [ 864.051094][T16448] ? __lock_acquire+0x62e/0x1ce0 [ 864.051134][T16448] vma_modify+0x16dc/0x2030 [ 864.051165][T16448] ? find_held_lock+0x2b/0x80 [ 864.051188][T16448] ? __pfx_vma_modify+0x10/0x10 [ 864.051222][T16448] vma_modify_flags+0x212/0x2d0 [ 864.051249][T16448] ? __pfx_vma_modify_flags+0x10/0x10 [ 864.051297][T16448] mlock_fixup+0x27c/0xe50 [ 864.051324][T16448] ? mas_find+0x156/0x6d0 [ 864.051348][T16448] apply_vma_lock_flags+0x261/0x390 [ 864.051379][T16448] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 864.051407][T16448] ? __pfx___might_resched+0x10/0x10 [ 864.051440][T16448] ? __pfx_down_write_killable+0x10/0x10 [ 864.051466][T16448] ? do_futex+0x122/0x350 [ 864.051500][T16448] do_mlock+0x2ac/0x810 [ 864.051526][T16448] ? __pfx___might_resched+0x10/0x10 [ 864.051559][T16448] ? __pfx_do_mlock+0x10/0x10 [ 864.051584][T16448] ? __x64_sys_futex+0x1e0/0x4c0 [ 864.051613][T16448] ? __x64_sys_futex+0x1e9/0x4c0 [ 864.051650][T16448] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 864.051691][T16448] ? xfd_validate_state+0x61/0x180 [ 864.051727][T16448] ? __pfx_do_writev+0x10/0x10 [ 864.051760][T16448] __x64_sys_mlock+0x59/0x80 [ 864.051787][T16448] do_syscall_64+0xcd/0x490 [ 864.051827][T16448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.051852][T16448] RIP: 0033:0x7fa5ebd8eb69 [ 864.051871][T16448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.051895][T16448] RSP: 002b:00007fa5e9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 864.051918][T16448] RAX: ffffffffffffffda RBX: 00007fa5ebfb5fa0 RCX: 00007fa5ebd8eb69 [ 864.051935][T16448] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000fbe8 [ 864.051949][T16448] RBP: 00007fa5ebe11df1 R08: 0000000000000000 R09: 0000000000000000 [ 864.051965][T16448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.051979][T16448] R13: 0000000000000000 R14: 00007fa5ebfb5fa0 R15: 00007fff28612258 [ 864.052010][T16448] [ 864.364810][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.817903][T16465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2239'. [ 864.920938][T16465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2239'. [ 865.230646][T16472] input: f¬ as /devices/virtual/input/input22 [ 865.355250][T16414] kexec: Could not allocate control_code_buffer [ 865.936276][T16482] FAULT_INJECTION: forcing a failure. [ 865.936276][T16482] name failslab, interval 1, probability 0, space 0, times 0 [ 866.030520][T16482] CPU: 0 UID: 0 PID: 16482 Comm: syz.1.2246 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 866.030561][T16482] Tainted: [U]=USER [ 866.030570][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 866.030585][T16482] Call Trace: [ 866.030593][T16482] [ 866.030602][T16482] dump_stack_lvl+0x16c/0x1f0 [ 866.030645][T16482] should_fail_ex+0x512/0x640 [ 866.030669][T16482] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 866.030703][T16482] should_failslab+0xc2/0x120 [ 866.030736][T16482] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 866.030765][T16482] ? mark_held_locks+0x49/0x80 [ 866.030797][T16482] ? key_alloc+0x3e0/0x1330 [ 866.030828][T16482] key_alloc+0x3e0/0x1330 [ 866.030866][T16482] ? __pfx_key_alloc+0x10/0x10 [ 866.030893][T16482] ? __pfx_key_default_cmp+0x10/0x10 [ 866.030926][T16482] ? __pfx_keyring_search_iterator+0x10/0x10 [ 866.030962][T16482] keyring_alloc+0x44/0xc0 [ 866.030996][T16482] look_up_user_keyrings+0x510/0x760 [ 866.031025][T16482] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 866.031060][T16482] lookup_user_key+0x1a3/0x1300 [ 866.031088][T16482] ? __pfx_lookup_user_key+0x10/0x10 [ 866.031111][T16482] ? do_futex+0x122/0x350 [ 866.031149][T16482] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 866.031180][T16482] ? fput+0x9b/0xd0 [ 866.031219][T16482] keyctl_keyring_clear+0x24/0x1a0 [ 866.031266][T16482] __do_sys_keyctl+0x355/0x590 [ 866.031307][T16482] do_syscall_64+0xcd/0x490 [ 866.031348][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.031377][T16482] RIP: 0033:0x7f1f16b8eb69 [ 866.031396][T16482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.031420][T16482] RSP: 002b:00007f1f1797c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 866.031443][T16482] RAX: ffffffffffffffda RBX: 00007f1f16db5fa0 RCX: 00007f1f16b8eb69 [ 866.031459][T16482] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 866.031474][T16482] RBP: 00007f1f16c11df1 R08: 0000000000000008 R09: 0000000000000000 [ 866.031488][T16482] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 866.031503][T16482] R13: 0000000000000000 R14: 00007f1f16db5fa0 R15: 00007fff99d56dd8 [ 866.031534][T16482] [ 866.270904][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.791062][T16495] FAULT_INJECTION: forcing a failure. [ 866.791062][T16495] name failslab, interval 1, probability 0, space 0, times 0 [ 866.890537][T16495] CPU: 0 UID: 0 PID: 16495 Comm: syz.2.2249 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 866.890579][T16495] Tainted: [U]=USER [ 866.890587][T16495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 866.890603][T16495] Call Trace: [ 866.890610][T16495] [ 866.890620][T16495] dump_stack_lvl+0x16c/0x1f0 [ 866.890664][T16495] should_fail_ex+0x512/0x640 [ 866.890688][T16495] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 866.890717][T16495] should_failslab+0xc2/0x120 [ 866.890750][T16495] __kmalloc_cache_noprof+0x6a/0x3e0 [ 866.890776][T16495] ? sctp_auth_shkey_create+0x9e/0x210 [ 866.890818][T16495] sctp_auth_shkey_create+0x9e/0x210 [ 866.890857][T16495] sctp_endpoint_new+0x562/0xcd0 [ 866.890898][T16495] sctp_init_sock+0xe2d/0x1330 [ 866.890932][T16495] ? sock_init_data_uid+0x7f6/0xa00 [ 866.890964][T16495] ? __pfx_sctp_init_sock+0x10/0x10 [ 866.890999][T16495] inet_create+0x936/0x1040 [ 866.891038][T16495] ? inet_create+0x93/0x1040 [ 866.891072][T16495] __sock_create+0x338/0x8d0 [ 866.891106][T16495] __sys_socket+0x14d/0x260 [ 866.891136][T16495] ? __pfx___sys_socket+0x10/0x10 [ 866.891167][T16495] ? xfd_validate_state+0x61/0x180 [ 866.891202][T16495] ? __pfx_do_writev+0x10/0x10 [ 866.891233][T16495] __x64_sys_socket+0x72/0xb0 [ 866.891261][T16495] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.891298][T16495] do_syscall_64+0xcd/0x490 [ 866.891338][T16495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.891363][T16495] RIP: 0033:0x7fa5ebd8eb69 [ 866.891382][T16495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.891407][T16495] RSP: 002b:00007fa5e9bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 866.891429][T16495] RAX: ffffffffffffffda RBX: 00007fa5ebfb6080 RCX: 00007fa5ebd8eb69 [ 866.891445][T16495] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 866.891459][T16495] RBP: 00007fa5ebe11df1 R08: 0000000000000000 R09: 0000000000000000 [ 866.891473][T16495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.891488][T16495] R13: 0000000000000000 R14: 00007fa5ebfb6080 R15: 00007fff28612258 [ 866.891517][T16495] [ 867.122479][ C0] vkms_vblank_simulate: vblank timer overrun [ 870.858043][T16582] input: f¬ as /devices/virtual/input/input23 [ 871.801914][T16596] bridge0: port 4(vlan1) entered blocking state [ 871.865514][T16596] bridge0: port 4(vlan1) entered disabled state [ 871.903542][T16596] vlan1: entered allmulticast mode [ 871.934034][T16596] vlan1: entered promiscuous mode [ 871.968516][T16596] bridge0: port 4(vlan1) entered blocking state [ 871.975046][T16596] bridge0: port 4(vlan1) entered forwarding state [ 873.204615][T16627] FAULT_INJECTION: forcing a failure. [ 873.204615][T16627] name fail_futex, interval 1, probability 0, space 0, times 0 [ 873.264509][T16627] CPU: 0 UID: 0 PID: 16627 Comm: syz.0.2268 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 873.264614][T16627] Tainted: [U]=USER [ 873.264623][T16627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 873.264637][T16627] Call Trace: [ 873.264646][T16627] [ 873.264655][T16627] dump_stack_lvl+0x16c/0x1f0 [ 873.264699][T16627] should_fail_ex+0x512/0x640 [ 873.264723][T16627] ? unwind_get_return_address+0x59/0xa0 [ 873.264752][T16627] get_futex_key+0x1d0/0x1560 [ 873.264785][T16627] ? __pfx_get_futex_key+0x10/0x10 [ 873.264814][T16627] ? stack_trace_save+0x8e/0xc0 [ 873.264841][T16627] ? __pfx_stack_trace_save+0x10/0x10 [ 873.264868][T16627] ? stack_depot_save_flags+0x28/0xa40 [ 873.264897][T16627] futex_wait_setup+0x9d/0x550 [ 873.264942][T16627] __futex_wait+0x194/0x2f0 [ 873.264980][T16627] ? __pfx___futex_wait+0x10/0x10 [ 873.265020][T16627] ? __pfx_futex_wake_mark+0x10/0x10 [ 873.265061][T16627] ? futex_private_hash_put+0x176/0x300 [ 873.265093][T16627] ? futex_private_hash_put+0x18a/0x300 [ 873.265124][T16627] futex_wait+0xe8/0x380 [ 873.265160][T16627] ? __pfx_futex_wait+0x10/0x10 [ 873.265202][T16627] ? kmem_cache_free+0x2d1/0x4d0 [ 873.265228][T16627] ? fd_install+0x225/0x750 [ 873.265251][T16627] ? putname+0x154/0x1a0 [ 873.265288][T16627] do_futex+0x229/0x350 [ 873.265319][T16627] ? __pfx_do_futex+0x10/0x10 [ 873.265358][T16627] __x64_sys_futex+0x1e0/0x4c0 [ 873.265390][T16627] ? __x64_sys_openat+0x174/0x210 [ 873.265429][T16627] ? __pfx___x64_sys_futex+0x10/0x10 [ 873.265471][T16627] do_syscall_64+0xcd/0x490 [ 873.265511][T16627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.265546][T16627] RIP: 0033:0x7f418ef8eb69 [ 873.265566][T16627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.265589][T16627] RSP: 002b:00007f418fd2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 873.265613][T16627] RAX: ffffffffffffffda RBX: 00007f418f1b5fa8 RCX: 00007f418ef8eb69 [ 873.265629][T16627] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f418f1b5fa8 [ 873.265644][T16627] RBP: 00007f418f1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 873.265658][T16627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f418f1b5fac [ 873.265673][T16627] R13: 0000000000000000 R14: 00007fff58befa80 R15: 00007fff58befb68 [ 873.265703][T16627] [ 873.509819][ C0] vkms_vblank_simulate: vblank timer overrun [ 876.323241][T16671] FAULT_INJECTION: forcing a failure. [ 876.323241][T16671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.487115][T16671] CPU: 0 UID: 0 PID: 16671 Comm: syz.3.2277 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 876.487155][T16671] Tainted: [U]=USER [ 876.487163][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 876.487178][T16671] Call Trace: [ 876.487186][T16671] [ 876.487195][T16671] dump_stack_lvl+0x16c/0x1f0 [ 876.487244][T16671] should_fail_ex+0x512/0x640 [ 876.487272][T16671] _copy_from_user+0x2e/0xd0 [ 876.487301][T16671] copy_msghdr_from_user+0x98/0x160 [ 876.487339][T16671] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 876.487381][T16671] ? __pfx__kstrtoull+0x10/0x10 [ 876.487422][T16671] ___sys_sendmsg+0xfe/0x1d0 [ 876.487459][T16671] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.487509][T16671] ? find_held_lock+0x2b/0x80 [ 876.487551][T16671] __sys_sendmmsg+0x200/0x420 [ 876.487591][T16671] ? __pfx___sys_sendmmsg+0x10/0x10 [ 876.487641][T16671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 876.487690][T16671] ? fput+0x9b/0xd0 [ 876.487723][T16671] ? ksys_write+0x1ac/0x250 [ 876.487750][T16671] ? __pfx_ksys_write+0x10/0x10 [ 876.487782][T16671] __x64_sys_sendmmsg+0x9c/0x100 [ 876.487817][T16671] ? lockdep_hardirqs_on+0x7c/0x110 [ 876.487852][T16671] do_syscall_64+0xcd/0x490 [ 876.487891][T16671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.487915][T16671] RIP: 0033:0x7fb92e38eb69 [ 876.487933][T16671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.487957][T16671] RSP: 002b:00007fb92f1d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 876.487979][T16671] RAX: ffffffffffffffda RBX: 00007fb92e5b6160 RCX: 00007fb92e38eb69 [ 876.487995][T16671] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 876.488010][T16671] RBP: 00007fb92f1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 876.488024][T16671] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000001 [ 876.488039][T16671] R13: 0000000000000000 R14: 00007fb92e5b6160 R15: 00007fff1cbc06d8 [ 876.488068][T16671] [ 876.773426][T16680] random: crng reseeded on system resumption [ 876.868332][T16685] input: f¬ as /devices/virtual/input/input24 [ 880.557302][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.565616][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.803937][T16750] input: f¬ as /devices/virtual/input/input25 [ 884.518736][T16810] input: f¬ as /devices/virtual/input/input26 [ 884.944890][T16785] kexec: Could not allocate control_code_buffer [ 885.285354][T16819] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 887.746138][T16850] kexec: Could not allocate control_code_buffer [ 887.807656][T16832] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 888.631398][T16863] input: f¬ as /devices/virtual/input/input28 [ 889.750966][T16872] input: f¬ as /devices/virtual/input/input29 [ 891.260360][T16899] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 891.372630][T16899] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 891.540409][T16899] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 891.771858][T16906] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 893.171558][T16925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 893.183303][T16925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 893.193107][T16925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 893.203666][T16925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 893.217140][T16925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 893.482773][T13681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.776669][T13681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.941991][T13681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.239209][T13681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.015485][T13681] vlan1: left allmulticast mode [ 895.050524][T13681] vlan1: left promiscuous mode [ 895.056944][T13681] bridge0: port 4(vlan1) entered disabled state [ 895.142101][T13681] team0: left allmulticast mode [ 895.169771][T13681] team_slave_0: left allmulticast mode [ 895.196287][T13681] team0: left promiscuous mode [ 895.227971][T13681] team_slave_0: left promiscuous mode [ 895.273099][T16925] Bluetooth: hci0: command tx timeout [ 895.281503][T13681] bridge0: port 3(team0) entered disabled state [ 895.496736][T13681] bridge_slave_1: left allmulticast mode [ 895.560669][T13681] bridge_slave_1: left promiscuous mode [ 895.590955][T13681] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.675469][T13681] bridge_slave_0: left allmulticast mode [ 895.704366][T13681] bridge_slave_0: left promiscuous mode [ 895.763444][T16953] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2336'. [ 895.772958][T13681] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.943665][T16976] FAULT_INJECTION: forcing a failure. [ 896.943665][T16976] name failslab, interval 1, probability 0, space 0, times 0 [ 896.956442][T16976] CPU: 0 UID: 0 PID: 16976 Comm: syz.3.2340 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 896.956482][T16976] Tainted: [U]=USER [ 896.956491][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 896.956508][T16976] Call Trace: [ 896.956519][T16976] [ 896.956529][T16976] dump_stack_lvl+0x16c/0x1f0 [ 896.956573][T16976] should_fail_ex+0x512/0x640 [ 896.956603][T16976] should_failslab+0xc2/0x120 [ 896.956636][T16976] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 896.956668][T16976] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 896.956707][T16976] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 896.956747][T16976] idr_get_free+0x528/0xa30 [ 896.956793][T16976] idr_alloc_u32+0x190/0x2f0 [ 896.956830][T16976] ? __pfx_idr_alloc_u32+0x10/0x10 [ 896.956868][T16976] ? lock_acquire+0x179/0x350 [ 896.956914][T16976] idr_alloc_cyclic+0x10b/0x230 [ 896.956956][T16976] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 896.956990][T16976] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 896.957035][T16976] map_create+0xae3/0x1f80 [ 896.957080][T16976] ? __pfx_map_create+0x10/0x10 [ 896.957112][T16976] ? __might_fault+0xe3/0x190 [ 896.957139][T16976] ? __might_fault+0xe3/0x190 [ 896.957164][T16976] ? __might_fault+0x13b/0x190 [ 896.957203][T16976] __sys_bpf+0x44d2/0x4de0 [ 896.957256][T16976] ? __pfx___sys_bpf+0x10/0x10 [ 896.957293][T16976] ? ksys_write+0x190/0x250 [ 896.957326][T16976] ? do_futex+0x122/0x350 [ 896.957359][T16976] ? __pfx_do_futex+0x10/0x10 [ 896.957401][T16976] ? fput+0x9b/0xd0 [ 896.957435][T16976] ? xfd_validate_state+0x61/0x180 [ 896.957471][T16976] ? __pfx_ksys_write+0x10/0x10 [ 896.957503][T16976] __x64_sys_bpf+0x78/0xc0 [ 896.957541][T16976] ? lockdep_hardirqs_on+0x7c/0x110 [ 896.957577][T16976] do_syscall_64+0xcd/0x490 [ 896.957619][T16976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.957645][T16976] RIP: 0033:0x7fb92e38eb69 [ 896.957664][T16976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.957689][T16976] RSP: 002b:00007fb92f219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 896.957712][T16976] RAX: ffffffffffffffda RBX: 00007fb92e5b5fa0 RCX: 00007fb92e38eb69 [ 896.957728][T16976] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 896.957743][T16976] RBP: 00007fb92e411df1 R08: 0000000000000000 R09: 0000000000000000 [ 896.957758][T16976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.957773][T16976] R13: 0000000000000000 R14: 00007fb92e5b5fa0 R15: 00007fff1cbc06d8 [ 896.957804][T16976] [ 897.605946][T16925] Bluetooth: hci0: command tx timeout [ 898.676767][T13681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.729432][T13681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.764632][T13681] bond0 (unregistering): Released all slaves [ 899.335125][T16924] chnl_net:caif_netlink_parms(): no params data found [ 899.675165][T16925] Bluetooth: hci0: command tx timeout [ 899.958269][T13681] hsr_slave_0: left promiscuous mode [ 900.019212][T13681] hsr_slave_1: left promiscuous mode [ 900.041424][T17010] FAULT_INJECTION: forcing a failure. [ 900.041424][T17010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.057773][T13681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.095692][T13681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.255745][T17010] CPU: 0 UID: 0 PID: 17010 Comm: syz.2.2346 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 900.255785][T17010] Tainted: [U]=USER [ 900.255792][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 900.255807][T17010] Call Trace: [ 900.255814][T17010] [ 900.255823][T17010] dump_stack_lvl+0x16c/0x1f0 [ 900.255864][T17010] should_fail_ex+0x512/0x640 [ 900.255895][T17010] _copy_from_user+0x2e/0xd0 [ 900.255929][T17010] copy_msghdr_from_user+0x98/0x160 [ 900.255967][T17010] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 900.256015][T17010] ? kfree+0x24f/0x4d0 [ 900.256035][T17010] ? __pfx__kstrtoull+0x10/0x10 [ 900.256075][T17010] ___sys_sendmsg+0xfe/0x1d0 [ 900.256113][T17010] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.256175][T17010] ? __pfx___might_resched+0x10/0x10 [ 900.256205][T17010] __sys_sendmmsg+0x200/0x420 [ 900.256245][T17010] ? __pfx___sys_sendmmsg+0x10/0x10 [ 900.256291][T17010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 900.256340][T17010] ? fput+0x9b/0xd0 [ 900.256372][T17010] ? ksys_write+0x1ac/0x250 [ 900.256399][T17010] ? __pfx_ksys_write+0x10/0x10 [ 900.256430][T17010] __x64_sys_sendmmsg+0x9c/0x100 [ 900.256466][T17010] ? lockdep_hardirqs_on+0x7c/0x110 [ 900.256501][T17010] do_syscall_64+0xcd/0x490 [ 900.256539][T17010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.256563][T17010] RIP: 0033:0x7fa5ebd8eb69 [ 900.256582][T17010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.256604][T17010] RSP: 002b:00007fa5e9bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 900.256632][T17010] RAX: ffffffffffffffda RBX: 00007fa5ebfb6160 RCX: 00007fa5ebd8eb69 [ 900.256648][T17010] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 900.256662][T17010] RBP: 00007fa5e9bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 900.256677][T17010] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000002 [ 900.256691][T17010] R13: 0000000000000000 R14: 00007fa5ebfb6160 R15: 00007fff28612258 [ 900.256721][T17010] [ 900.801112][T13681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.832474][T13681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.170704][T13681] veth1_macvtap: left promiscuous mode [ 901.176273][T13681] veth0_macvtap: left promiscuous mode [ 901.230590][T13681] veth1_vlan: left promiscuous mode [ 901.275037][T13681] veth0_vlan: left promiscuous mode [ 901.753830][T16925] Bluetooth: hci0: command tx timeout [ 903.175959][T17034] kexec: Could not allocate control_code_buffer [ 903.281285][T13681] team0 (unregistering): Port device team_slave_0 removed [ 905.147690][T16924] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.173468][T16924] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.200842][T16924] bridge_slave_0: entered allmulticast mode [ 905.217525][T16924] bridge_slave_0: entered promiscuous mode [ 905.294196][T16924] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.331155][T16924] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.363152][T16924] bridge_slave_1: entered allmulticast mode [ 905.397973][T16924] bridge_slave_1: entered promiscuous mode [ 905.609355][T16924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.744983][T16924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.827900][T17082] kexec: Could not allocate control_code_buffer [ 906.143800][T16924] team0: Port device team_slave_0 added [ 906.179808][T16924] team0: Port device team_slave_1 added [ 906.309843][T16924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.350784][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.461073][T16924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.518579][T16924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.560179][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.663973][T16924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.931812][T16924] hsr_slave_0: entered promiscuous mode [ 906.974543][T16924] hsr_slave_1: entered promiscuous mode [ 907.004902][T16924] debugfs: 'hsr0' already exists in 'hsr' [ 907.035005][T16924] Cannot create hsr debugfs directory [ 907.464612][T17122] FAULT_INJECTION: forcing a failure. [ 907.464612][T17122] name failslab, interval 1, probability 0, space 0, times 0 [ 907.533530][T17122] CPU: 0 UID: 0 PID: 17122 Comm: syz.3.2363 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 907.533570][T17122] Tainted: [U]=USER [ 907.533578][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 907.533593][T17122] Call Trace: [ 907.533601][T17122] [ 907.533610][T17122] dump_stack_lvl+0x16c/0x1f0 [ 907.533652][T17122] should_fail_ex+0x512/0x640 [ 907.533676][T17122] ? fs_reclaim_acquire+0xae/0x150 [ 907.533714][T17122] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 907.533744][T17122] should_failslab+0xc2/0x120 [ 907.533776][T17122] __kmalloc_noprof+0xd2/0x510 [ 907.533811][T17122] tomoyo_realpath_from_path+0xc2/0x6e0 [ 907.533844][T17122] ? tomoyo_profile+0x47/0x60 [ 907.533880][T17122] tomoyo_path_number_perm+0x245/0x580 [ 907.533904][T17122] ? tomoyo_path_number_perm+0x237/0x580 [ 907.533930][T17122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 907.533957][T17122] ? find_held_lock+0x2b/0x80 [ 907.534006][T17122] ? find_held_lock+0x2b/0x80 [ 907.534028][T17122] ? hook_file_ioctl_common+0x145/0x410 [ 907.534074][T17122] ? __fget_files+0x20e/0x3c0 [ 907.534105][T17122] security_file_ioctl+0x9b/0x240 [ 907.534133][T17122] __x64_sys_ioctl+0xb7/0x210 [ 907.534173][T17122] do_syscall_64+0xcd/0x490 [ 907.534213][T17122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.534238][T17122] RIP: 0033:0x7fb92e38eb69 [ 907.534256][T17122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.534279][T17122] RSP: 002b:00007fb92f219038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.534308][T17122] RAX: ffffffffffffffda RBX: 00007fb92e5b5fa0 RCX: 00007fb92e38eb69 [ 907.534324][T17122] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 907.534338][T17122] RBP: 00007fb92f219090 R08: 0000000000000000 R09: 0000000000000000 [ 907.534353][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.534367][T17122] R13: 0000000000000000 R14: 00007fb92e5b5fa0 R15: 00007fff1cbc06d8 [ 907.534396][T17122] [ 907.534406][T17122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 909.764802][T16924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 909.823229][T16924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 909.962605][T16924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 910.001278][T16924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 910.390167][T16924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.487922][T16924] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.553400][T13673] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.560606][T13673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.588158][T17149] kexec: Could not allocate control_code_buffer [ 910.694522][T13672] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.702239][T13672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.542710][T17197] FAULT_INJECTION: forcing a failure. [ 911.542710][T17197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.640798][T17197] CPU: 0 UID: 0 PID: 17197 Comm: syz.2.2377 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 911.640838][T17197] Tainted: [U]=USER [ 911.640845][T17197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 911.640860][T17197] Call Trace: [ 911.640868][T17197] [ 911.640876][T17197] dump_stack_lvl+0x16c/0x1f0 [ 911.640918][T17197] should_fail_ex+0x512/0x640 [ 911.640946][T17197] _copy_from_user+0x2e/0xd0 [ 911.640975][T17197] copy_msghdr_from_user+0x98/0x160 [ 911.641012][T17197] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 911.641054][T17197] ? kfree+0x24f/0x4d0 [ 911.641074][T17197] ? find_held_lock+0x2b/0x80 [ 911.641103][T17197] ___sys_recvmsg+0xdb/0x1a0 [ 911.641145][T17197] ? __pfx____sys_recvmsg+0x10/0x10 [ 911.641197][T17197] ? __pfx___might_resched+0x10/0x10 [ 911.641227][T17197] do_recvmmsg+0x2fe/0x750 [ 911.641267][T17197] ? __pfx_do_recvmmsg+0x10/0x10 [ 911.641301][T17197] ? vfs_write+0x15d/0x1150 [ 911.641334][T17197] ? __pfx_vfs_write+0x10/0x10 [ 911.641377][T17197] __x64_sys_recvmmsg+0x22a/0x280 [ 911.641417][T17197] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 911.641464][T17197] do_syscall_64+0xcd/0x490 [ 911.641503][T17197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.641527][T17197] RIP: 0033:0x7fa5ebd8eb69 [ 911.641545][T17197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.641569][T17197] RSP: 002b:00007fa5e9bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 911.641591][T17197] RAX: ffffffffffffffda RBX: 00007fa5ebfb5fa0 RCX: 00007fa5ebd8eb69 [ 911.641607][T17197] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000000 [ 911.641621][T17197] RBP: 00007fa5e9bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 911.641635][T17197] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 911.641649][T17197] R13: 0000000000000000 R14: 00007fa5ebfb5fa0 R15: 00007fff28612258 [ 911.641678][T17197] [ 912.204662][T16924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.396965][T16924] veth0_vlan: entered promiscuous mode [ 912.503400][T16924] veth1_vlan: entered promiscuous mode [ 912.655391][T16924] veth0_macvtap: entered promiscuous mode [ 912.747405][T16924] veth1_macvtap: entered promiscuous mode [ 912.892157][T16924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.959390][T16924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.119964][T13690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.220568][T13690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.291828][T13690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.493806][T13690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.210657][T13690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.270619][T13690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.512596][T17228] mkiss: ax0: crc mode is auto. [ 914.529973][T13672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.576153][T13672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.797102][T17277] kexec: Could not allocate control_code_buffer [ 918.317319][T11666] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 918.327580][T11666] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 918.337209][T11666] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 918.345530][T11666] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 918.393178][T11666] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 919.648314][T17294] chnl_net:caif_netlink_parms(): no params data found [ 920.127838][T17317] sd 0:0:1:0: PR command failed: 1026 [ 920.172338][T17317] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 920.222438][T13677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.250825][T17317] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 920.470959][T11666] Bluetooth: hci4: command tx timeout [ 920.534430][T13677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.831807][T13677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.377351][T13677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.481116][T17294] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.533163][T17294] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.630617][T17294] bridge_slave_0: entered allmulticast mode [ 921.651857][T17294] bridge_slave_0: entered promiscuous mode [ 921.714192][T17294] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.760795][T17294] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.768132][T17294] bridge_slave_1: entered allmulticast mode [ 921.861935][T17294] bridge_slave_1: entered promiscuous mode [ 922.115252][T17294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.181658][T17294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.531220][T17294] team0: Port device team_slave_0 added [ 922.553943][T11666] Bluetooth: hci4: command tx timeout [ 922.647457][T17294] team0: Port device team_slave_1 added [ 923.014355][T17294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.042840][T17294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.149784][T17294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.183809][T17294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.230629][T17294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.310559][T17294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.500553][T13677] bridge_slave_0: left allmulticast mode [ 923.518832][T13677] bridge_slave_0: left promiscuous mode [ 923.548394][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.659382][T17371] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 924.633847][T11666] Bluetooth: hci4: command tx timeout [ 924.736873][T17398] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 924.750596][T17398] netlink: 322 bytes leftover after parsing attributes in process `syz.1.2401'. [ 925.651136][T13677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.701737][T13677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.756638][T13677] bond0 (unregistering): Released all slaves [ 926.097428][T17294] hsr_slave_0: entered promiscuous mode [ 926.116964][T17294] hsr_slave_1: entered promiscuous mode [ 926.143307][T17294] debugfs: 'hsr0' already exists in 'hsr' [ 926.170828][T17294] Cannot create hsr debugfs directory [ 926.520189][T17409] FAULT_INJECTION: forcing a failure. [ 926.520189][T17409] name failslab, interval 1, probability 0, space 0, times 0 [ 926.563023][T13677] hsr_slave_0: left promiscuous mode [ 926.591260][T17409] CPU: 0 UID: 0 PID: 17409 Comm: syz.1.2405 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 926.591301][T17409] Tainted: [U]=USER [ 926.591309][T17409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 926.591323][T17409] Call Trace: [ 926.591331][T17409] [ 926.591340][T17409] dump_stack_lvl+0x16c/0x1f0 [ 926.591382][T17409] should_fail_ex+0x512/0x640 [ 926.591430][T17409] ? __kvmalloc_node_noprof+0x124/0x620 [ 926.591460][T17409] should_failslab+0xc2/0x120 [ 926.591491][T17409] __kvmalloc_node_noprof+0x137/0x620 [ 926.591518][T17409] ? __lock_acquire+0xb97/0x1ce0 [ 926.591548][T17409] ? seq_read_iter+0x826/0x12c0 [ 926.591575][T17409] ? seq_read_iter+0x826/0x12c0 [ 926.591595][T17409] seq_read_iter+0x826/0x12c0 [ 926.591618][T17409] ? __mutex_trylock_common+0xe9/0x250 [ 926.591660][T17409] kernfs_fop_read_iter+0x40f/0x5a0 [ 926.591699][T17409] ? rw_verify_area+0xcf/0x6c0 [ 926.591725][T17409] vfs_read+0x8bf/0xc60 [ 926.591754][T17409] ? __pfx___mutex_lock+0x10/0x10 [ 926.591792][T17409] ? __pfx_vfs_read+0x10/0x10 [ 926.591850][T17409] ksys_read+0x12a/0x250 [ 926.591876][T17409] ? __pfx_ksys_read+0x10/0x10 [ 926.591911][T17409] do_syscall_64+0xcd/0x490 [ 926.591956][T17409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.591985][T17409] RIP: 0033:0x7f1f16b8eb69 [ 926.592003][T17409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.592026][T17409] RSP: 002b:00007f1f1797c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 926.592048][T17409] RAX: ffffffffffffffda RBX: 00007f1f16db5fa0 RCX: 00007f1f16b8eb69 [ 926.592064][T17409] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000003 [ 926.592078][T17409] RBP: 00007f1f1797c090 R08: 0000000000000000 R09: 0000000000000000 [ 926.592092][T17409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.592106][T17409] R13: 0000000000000000 R14: 00007f1f16db5fa0 R15: 00007fff99d56dd8 [ 926.592136][T17409] [ 927.080029][T11666] Bluetooth: hci4: command tx timeout [ 927.129399][T17416] FAULT_INJECTION: forcing a failure. [ 927.129399][T17416] name failslab, interval 1, probability 0, space 0, times 0 [ 927.170488][T17416] CPU: 0 UID: 0 PID: 17416 Comm: syz.0.2406 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 927.170529][T17416] Tainted: [U]=USER [ 927.170537][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 927.170554][T17416] Call Trace: [ 927.170563][T17416] [ 927.170572][T17416] dump_stack_lvl+0x16c/0x1f0 [ 927.170613][T17416] should_fail_ex+0x512/0x640 [ 927.170637][T17416] ? __kvmalloc_node_noprof+0x124/0x620 [ 927.170667][T17416] should_failslab+0xc2/0x120 [ 927.170699][T17416] __kvmalloc_node_noprof+0x137/0x620 [ 927.170726][T17416] ? io_uring_setup+0x377/0x2080 [ 927.170769][T17416] ? io_uring_setup+0x377/0x2080 [ 927.170803][T17416] io_uring_setup+0x377/0x2080 [ 927.170843][T17416] ? __pfx_io_uring_setup+0x10/0x10 [ 927.170883][T17416] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 927.170928][T17416] ? __fget_files+0x20e/0x3c0 [ 927.170963][T17416] ? ksys_write+0x1ac/0x250 [ 927.170989][T17416] ? __pfx_ksys_write+0x10/0x10 [ 927.171022][T17416] __x64_sys_io_uring_setup+0xc2/0x170 [ 927.171061][T17416] do_syscall_64+0xcd/0x490 [ 927.171100][T17416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.171124][T17416] RIP: 0033:0x7f55f478eb69 [ 927.171143][T17416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.171167][T17416] RSP: 002b:00007f55f5622038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 927.171189][T17416] RAX: ffffffffffffffda RBX: 00007f55f49b5fa0 RCX: 00007f55f478eb69 [ 927.171206][T17416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 927.171220][T17416] RBP: 00007f55f5622090 R08: 0000000000000000 R09: 0000000000000000 [ 927.171234][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.171248][T17416] R13: 0000000000000000 R14: 00007f55f49b5fa0 R15: 00007ffd5a22bd58 [ 927.171277][T17416] [ 927.660721][T13677] hsr_slave_1: left promiscuous mode [ 927.669862][T13677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.710429][T13677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.802987][T13677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.841357][T13677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.968368][T13677] veth1_macvtap: left promiscuous mode [ 927.998348][T13677] veth0_macvtap: left promiscuous mode [ 928.026888][T13677] veth1_vlan: left promiscuous mode [ 928.053029][T17434] sd 0:0:1:0: PR command failed: 1026 [ 928.062108][T13677] veth0_vlan: left promiscuous mode [ 928.076622][T17434] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 928.113150][T17434] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 930.073629][T13677] team0 (unregistering): Port device team_slave_1 removed [ 930.163623][T13677] team0 (unregistering): Port device team_slave_0 removed [ 932.514841][T17294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 932.576290][T17476] FAULT_INJECTION: forcing a failure. [ 932.576290][T17476] name failslab, interval 1, probability 0, space 0, times 0 [ 932.629607][T17294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 932.660441][T17476] CPU: 0 UID: 0 PID: 17476 Comm: syz.2.2414 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 932.660491][T17476] Tainted: [U]=USER [ 932.660500][T17476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 932.660515][T17476] Call Trace: [ 932.660524][T17476] [ 932.660534][T17476] dump_stack_lvl+0x16c/0x1f0 [ 932.660576][T17476] should_fail_ex+0x512/0x640 [ 932.660601][T17476] ? __kmalloc_node_noprof+0xc5/0x500 [ 932.660635][T17476] should_failslab+0xc2/0x120 [ 932.660671][T17476] __kmalloc_node_noprof+0xd8/0x500 [ 932.660710][T17476] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 932.660755][T17476] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 932.660786][T17476] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 932.660830][T17476] crypto_create_tfm_node+0x85/0x350 [ 932.660865][T17476] crypto_alloc_tfm_node+0x102/0x260 [ 932.660889][T17476] ? kasan_save_track+0x14/0x30 [ 932.660921][T17476] sctp_auth_init_hmacs+0x1e1/0x440 [ 932.660959][T17476] ? kasan_save_track+0x14/0x30 [ 932.660999][T17476] sctp_auth_init+0x90/0x570 [ 932.661041][T17476] sctp_setsockopt+0xa371/0xb870 [ 932.661074][T17476] ? __pfx_sctp_setsockopt+0x10/0x10 [ 932.661100][T17476] ? __pfx_aa_sk_perm+0x10/0x10 [ 932.661126][T17476] ? __fget_files+0x204/0x3c0 [ 932.661155][T17476] ? sock_common_setsockopt+0x2e/0xf0 [ 932.661182][T17476] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 932.661212][T17476] do_sock_setsockopt+0xf3/0x1d0 [ 932.661247][T17476] __sys_setsockopt+0x120/0x1a0 [ 932.661289][T17476] __x64_sys_setsockopt+0xbd/0x160 [ 932.661325][T17476] ? do_syscall_64+0x91/0x490 [ 932.661364][T17476] ? lockdep_hardirqs_on+0x7c/0x110 [ 932.661400][T17476] do_syscall_64+0xcd/0x490 [ 932.661441][T17476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.661467][T17476] RIP: 0033:0x7fa5ebd8eb69 [ 932.661487][T17476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.661512][T17476] RSP: 002b:00007fa5e9bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 932.661536][T17476] RAX: ffffffffffffffda RBX: 00007fa5ebfb6080 RCX: 00007fa5ebd8eb69 [ 932.661552][T17476] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 932.661568][T17476] RBP: 00007fa5ebe11df1 R08: 0000000000000008 R09: 0000000000000000 [ 932.661583][T17476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.661598][T17476] R13: 0000000000000000 R14: 00007fa5ebfb6080 R15: 00007fff28612258 [ 932.661629][T17476] [ 932.917715][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.632534][T17485] FAULT_INJECTION: forcing a failure. [ 933.632534][T17485] name failslab, interval 1, probability 0, space 0, times 0 [ 933.669182][T17485] CPU: 0 UID: 0 PID: 17485 Comm: syz.1.2416 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 933.669220][T17485] Tainted: [U]=USER [ 933.669228][T17485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 933.669243][T17485] Call Trace: [ 933.669251][T17485] [ 933.669260][T17485] dump_stack_lvl+0x16c/0x1f0 [ 933.669300][T17485] should_fail_ex+0x512/0x640 [ 933.669323][T17485] ? fs_reclaim_acquire+0xae/0x150 [ 933.669360][T17485] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 933.669390][T17485] should_failslab+0xc2/0x120 [ 933.669421][T17485] __kmalloc_noprof+0xd2/0x510 [ 933.669455][T17485] tomoyo_realpath_from_path+0xc2/0x6e0 [ 933.669493][T17485] tomoyo_check_open_permission+0x2ab/0x3c0 [ 933.669519][T17485] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 933.669576][T17485] ? find_held_lock+0x2b/0x80 [ 933.669607][T17485] tomoyo_file_open+0x6b/0x90 [ 933.669642][T17485] security_file_open+0x84/0x1e0 [ 933.669670][T17485] do_dentry_open+0x596/0x1530 [ 933.669709][T17485] vfs_open+0x82/0x3f0 [ 933.669747][T17485] path_openat+0x1de4/0x2cb0 [ 933.669784][T17485] ? __pfx_path_openat+0x10/0x10 [ 933.669827][T17485] do_filp_open+0x20b/0x470 [ 933.669855][T17485] ? __pfx_do_filp_open+0x10/0x10 [ 933.669893][T17485] ? __pfx_kfree_link+0x10/0x10 [ 933.669939][T17485] ? alloc_fd+0x471/0x7d0 [ 933.669971][T17485] do_sys_openat2+0x11b/0x1d0 [ 933.670007][T17485] ? __pfx_do_sys_openat2+0x10/0x10 [ 933.670054][T17485] __x64_sys_openat+0x174/0x210 [ 933.670091][T17485] ? __pfx___x64_sys_openat+0x10/0x10 [ 933.670143][T17485] do_syscall_64+0xcd/0x490 [ 933.670183][T17485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.670207][T17485] RIP: 0033:0x7f1f16b8d4d0 [ 933.670226][T17485] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 933.670254][T17485] RSP: 002b:00007f1f1797bfe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 933.670277][T17485] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1f16b8d4d0 [ 933.670293][T17485] RDX: 0000000000000002 RSI: 00007f1f16c120d6 RDI: 00000000ffffff9c [ 933.670308][T17485] RBP: 00007f1f16c120d6 R08: 0000000000000000 R09: 00007f1f1797d000 [ 933.670323][T17485] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 933.670337][T17485] R13: 0000000000000000 R14: 00007f1f16db5fa0 R15: 00007fff99d56dd8 [ 933.670368][T17485] [ 934.200362][T17294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 934.311158][T17294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 934.714658][T17485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 934.898224][T17294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.006927][T17294] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.072096][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.079293][T13677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.159665][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.159813][T13677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.624214][T17294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.165773][T17294] veth0_vlan: entered promiscuous mode [ 937.218654][T17294] veth1_vlan: entered promiscuous mode [ 937.609303][T17294] veth0_macvtap: entered promiscuous mode [ 937.688385][T17294] veth1_macvtap: entered promiscuous mode [ 937.928176][T17294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.970167][T17294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.073095][T13673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.109804][T13673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.256652][T13673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.323217][T13673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.578030][T13690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.626844][T13690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.766409][T13690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.811013][T13690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.191367][T17567] FAULT_INJECTION: forcing a failure. [ 939.191367][T17567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.280820][T17567] CPU: 0 UID: 0 PID: 17567 Comm: syz.2.2426 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 939.280859][T17567] Tainted: [U]=USER [ 939.280867][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 939.280882][T17567] Call Trace: [ 939.280890][T17567] [ 939.280899][T17567] dump_stack_lvl+0x16c/0x1f0 [ 939.280941][T17567] should_fail_ex+0x512/0x640 [ 939.280969][T17567] _copy_to_iter+0x29f/0x16f0 [ 939.280999][T17567] ? __mutex_unlock_slowpath+0x163/0x800 [ 939.281041][T17567] ? __pfx__copy_to_iter+0x10/0x10 [ 939.281070][T17567] ? kernfs_seq_stop+0xcd/0x120 [ 939.281097][T17567] ? kernfs_put_active+0x86/0xe0 [ 939.281133][T17567] seq_read_iter+0xcf8/0x12c0 [ 939.281167][T17567] kernfs_fop_read_iter+0x40f/0x5a0 [ 939.281204][T17567] ? rw_verify_area+0xcf/0x6c0 [ 939.281231][T17567] vfs_read+0x8bf/0xc60 [ 939.281260][T17567] ? __pfx___mutex_lock+0x10/0x10 [ 939.281306][T17567] ? __pfx_vfs_read+0x10/0x10 [ 939.281351][T17567] ksys_read+0x12a/0x250 [ 939.281377][T17567] ? __pfx_ksys_read+0x10/0x10 [ 939.281412][T17567] do_syscall_64+0xcd/0x490 [ 939.281452][T17567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.281476][T17567] RIP: 0033:0x7fa5ebd8eb69 [ 939.281494][T17567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.281516][T17567] RSP: 002b:00007fa5e9bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 939.281539][T17567] RAX: ffffffffffffffda RBX: 00007fa5ebfb6080 RCX: 00007fa5ebd8eb69 [ 939.281555][T17567] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000003 [ 939.281569][T17567] RBP: 00007fa5e9bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 939.281583][T17567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.281597][T17567] R13: 0000000000000000 R14: 00007fa5ebfb6080 R15: 00007fff28612258 [ 939.281627][T17567] [ 939.481668][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.023736][T16925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.039694][T16925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.048387][T16925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.056690][T16925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.064643][T16925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 942.023000][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.029373][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.127464][T17591] chnl_net:caif_netlink_parms(): no params data found [ 942.641462][T17591] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.659265][T17591] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.689589][T17591] bridge_slave_0: entered allmulticast mode [ 942.711191][T17591] bridge_slave_0: entered promiscuous mode [ 942.775445][T17591] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.800611][T17591] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.830749][T17591] bridge_slave_1: entered allmulticast mode [ 942.857982][T17591] bridge_slave_1: entered promiscuous mode [ 943.111414][T16925] Bluetooth: hci2: command tx timeout [ 943.199468][T17591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.251726][T17591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.439844][T17591] team0: Port device team_slave_0 added [ 943.516810][T17591] team0: Port device team_slave_1 added [ 943.644241][T17591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.742106][T17591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.952804][T17591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.037673][T17591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.090341][T17591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.181430][T16925] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 944.253310][T17591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.805648][T17591] hsr_slave_0: entered promiscuous mode [ 944.851364][T17591] hsr_slave_1: entered promiscuous mode [ 944.861440][T17591] debugfs: 'hsr0' already exists in 'hsr' [ 944.887723][T17591] Cannot create hsr debugfs directory [ 945.191404][T16925] Bluetooth: hci2: command tx timeout [ 945.525912][T17645] FAULT_INJECTION: forcing a failure. [ 945.525912][T17645] name failslab, interval 1, probability 0, space 0, times 0 [ 945.680356][T17645] CPU: 0 UID: 0 PID: 17645 Comm: syz.3.2439 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 945.680398][T17645] Tainted: [U]=USER [ 945.680406][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.680420][T17645] Call Trace: [ 945.680428][T17645] [ 945.680439][T17645] dump_stack_lvl+0x16c/0x1f0 [ 945.680480][T17645] should_fail_ex+0x512/0x640 [ 945.680505][T17645] ? fs_reclaim_acquire+0xae/0x150 [ 945.680545][T17645] should_failslab+0xc2/0x120 [ 945.680578][T17645] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 945.680608][T17645] ? security_inode_alloc+0x3b/0x2b0 [ 945.680661][T17645] security_inode_alloc+0x3b/0x2b0 [ 945.680702][T17645] inode_init_always_gfp+0xce4/0x1030 [ 945.680735][T17645] alloc_inode+0x86/0x240 [ 945.680770][T17645] sock_alloc+0x40/0x280 [ 945.680794][T17645] __sock_create+0xc1/0x8d0 [ 945.680828][T17645] __sys_socketpair+0x25c/0x5a0 [ 945.680860][T17645] ? __pfx___sys_socketpair+0x10/0x10 [ 945.680890][T17645] ? fput+0x9b/0xd0 [ 945.680925][T17645] ? xfd_validate_state+0x61/0x180 [ 945.680961][T17645] ? __pfx_ksys_write+0x10/0x10 [ 945.680996][T17645] __x64_sys_socketpair+0x96/0x100 [ 945.681027][T17645] ? lockdep_hardirqs_on+0x7c/0x110 [ 945.681062][T17645] do_syscall_64+0xcd/0x490 [ 945.681103][T17645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.681127][T17645] RIP: 0033:0x7f4209d8eb69 [ 945.681146][T17645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.681170][T17645] RSP: 002b:00007f420ac69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 945.681193][T17645] RAX: ffffffffffffffda RBX: 00007f4209fb6080 RCX: 00007f4209d8eb69 [ 945.681210][T17645] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 945.681225][T17645] RBP: 00007f4209e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 945.681240][T17645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.681254][T17645] R13: 0000000000000000 R14: 00007f4209fb6080 R15: 00007ffec78f13d8 [ 945.681284][T17645] [ 945.681312][T17645] socket: no more sockets [ 946.136806][T17591] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.395937][T17591] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.652050][T17591] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.822225][T17591] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.270727][T16925] Bluetooth: hci2: command tx timeout [ 947.302624][T17591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 947.440817][T17591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 947.512711][T17591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 947.586444][T17591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 948.024196][T17591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.134707][T17591] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.261835][T13672] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.269561][T13672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.333766][T13672] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.342072][T13672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.495489][T17591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 948.719247][T11666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 948.732475][T11666] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 948.743370][T11666] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 948.761088][T11666] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 948.769112][T11666] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 949.350540][T11666] Bluetooth: hci2: command tx timeout [ 949.610632][T17591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.836779][T17679] chnl_net:caif_netlink_parms(): no params data found [ 949.936741][T17591] veth0_vlan: entered promiscuous mode [ 950.119777][T17591] veth1_vlan: entered promiscuous mode [ 950.519595][T17679] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.570557][T17679] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.590640][T17679] bridge_slave_0: entered allmulticast mode [ 950.631102][T17679] bridge_slave_0: entered promiscuous mode [ 950.671370][T17679] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.678554][T17679] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.731413][T17679] bridge_slave_1: entered allmulticast mode [ 950.766684][T17679] bridge_slave_1: entered promiscuous mode [ 950.807368][T17591] veth0_macvtap: entered promiscuous mode [ 950.870700][T11666] Bluetooth: hci3: command tx timeout [ 951.168823][T17591] veth1_macvtap: entered promiscuous mode [ 951.214876][T17679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.256969][T17679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.924003][T17591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.525373][T17679] team0: Port device team_slave_0 added [ 952.587441][T17591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.636955][T17679] team0: Port device team_slave_1 added [ 952.954524][T11666] Bluetooth: hci3: command tx timeout [ 953.051076][T13673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.061341][T13690] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.233077][T17679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.255322][T17679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.452006][T17679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.512969][T13690] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.582645][T13690] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.635855][T17679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.680370][T17679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.812478][T17679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.147105][T17679] hsr_slave_0: entered promiscuous mode [ 954.174509][T17679] hsr_slave_1: entered promiscuous mode [ 954.196566][T17679] debugfs: 'hsr0' already exists in 'hsr' [ 954.217999][T17679] Cannot create hsr debugfs directory [ 954.715268][T13681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.752852][T13681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.030516][T11666] Bluetooth: hci3: command tx timeout [ 955.320951][T13681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.339301][T13681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.843945][T17679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 955.910746][T17679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 956.000612][T17679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 956.054293][T17679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 956.518122][T17679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 956.625324][T17679] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.689029][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.696256][T13677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.794850][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.802087][T13677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.110616][T11666] Bluetooth: hci3: command tx timeout [ 957.947973][T17679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.704545][T17478] ------------[ cut here ]------------ [ 959.710115][T17478] ODEBUG: free active (active state 0) object: ffff88807dff1358 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 959.830503][T17478] WARNING: CPU: 0 PID: 17478 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 959.840681][T17478] Modules linked in: [ 959.844615][T17478] CPU: 0 UID: 0 PID: 17478 Comm: syz.0.2415 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 959.858436][T17478] Tainted: [U]=USER [ 959.862739][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 959.874159][T17478] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 959.881124][T17478] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 f5 15 8c 4c 89 e6 48 c7 c7 e0 e9 15 8c e8 2f c0 93 fc 90 <0f> 0b 90 90 58 83 05 36 df c4 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 959.900980][T17478] RSP: 0018:ffffc9000398f768 EFLAGS: 00010286 [ 959.907069][T17478] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8179ffd8 [ 959.916457][T17478] RDX: ffff888079ca3c00 RSI: ffffffff8179ffe5 RDI: 0000000000000001 [ 959.924865][T17478] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 959.932968][T17478] R10: 0000000000000001 R11: fffffffffffdd9e0 R12: ffffffff8c15f080 [ 959.941056][T17478] R13: ffffffff8bafea60 R14: ffffffff8a987050 R15: ffffc9000398f868 [ 959.949085][T17478] FS: 0000000000000000(0000) GS:ffff8881246d6000(0000) knlGS:0000000000000000 [ 959.958158][T17478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.965026][T17478] CR2: 000020000000d000 CR3: 0000000031e5c000 CR4: 00000000003526f0 [ 959.974110][T17478] Call Trace: [ 959.977407][T17478] [ 959.981241][T17478] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 959.986733][T17478] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 959.992852][T17478] debug_check_no_obj_freed+0x4b7/0x600 [ 959.998459][T17478] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 960.004672][T17478] ? rcu_is_watching+0x12/0xc0 [ 960.009473][T17478] ? kmem_cache_free+0x2d1/0x4d0 [ 960.014641][T17478] kfree+0x28f/0x4d0 [ 960.018668][T17478] ? hci_release_dev+0x4ef/0x610 [ 960.023938][T17478] hci_release_dev+0x4ef/0x610 [ 960.028768][T17478] ? __pfx_hci_release_dev+0x10/0x10 [ 960.034206][T17478] ? rcu_is_watching+0x12/0xc0 [ 960.039030][T17478] ? kfree+0x24f/0x4d0 [ 960.043234][T17478] bt_host_release+0x6a/0xb0 [ 960.047858][T17478] ? __pfx_bt_host_release+0x10/0x10 [ 960.053239][T17478] device_release+0xa1/0x240 [ 960.057860][T17478] kobject_put+0x1e7/0x5a0 [ 960.062395][T17478] ? __pfx_vhci_release+0x10/0x10 [ 960.067544][T17478] put_device+0x1f/0x30 [ 960.071877][T17478] vhci_release+0x81/0xf0 [ 960.077245][T17478] __fput+0x3ff/0xb70 [ 960.082183][T17478] task_work_run+0x14d/0x240 [ 960.086967][T17478] ? __pfx_task_work_run+0x10/0x10 [ 960.092171][T17478] do_exit+0x86f/0x2bf0 [ 960.096356][T17478] ? __pfx___might_resched+0x10/0x10 [ 960.101750][T17478] ? __pfx_do_exit+0x10/0x10 [ 960.106384][T17478] ? do_raw_spin_lock+0x12c/0x2b0 [ 960.111509][T17478] ? find_held_lock+0x2b/0x80 [ 960.116318][T17478] do_group_exit+0xd3/0x2a0 [ 960.121035][T17478] get_signal+0x2673/0x26d0 [ 960.125731][T17478] ? __mmput+0x374/0x410 [ 960.130014][T17478] ? kernel_move_pages+0xcda/0x1380 [ 960.135346][T17478] ? __pfx_get_signal+0x10/0x10 [ 960.140367][T17478] ? do_futex+0x122/0x350 [ 960.144744][T17478] ? __pfx_do_futex+0x10/0x10 [ 960.149615][T17478] arch_do_signal_or_restart+0x8f/0x790 [ 960.159949][T17478] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 960.166237][T17478] ? xfd_validate_state+0x61/0x180 [ 960.171497][T17478] exit_to_user_mode_loop+0x84/0x110 [ 960.176845][T17478] do_syscall_64+0x3f6/0x490 [ 960.182757][T17478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.189567][T17478] RIP: 0033:0x7f55f478eb69 [ 960.194089][T17478] Code: Unable to access opcode bytes at 0x7f55f478eb3f. [ 960.201170][T17478] RSP: 002b:00007f55f5622038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 960.209619][T17478] RAX: fffffffffffffff2 RBX: 00007f55f49b5fa0 RCX: 00007f55f478eb69 [ 960.217707][T17478] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 960.225903][T17478] RBP: 00007f55f4811df1 R08: 0000000000000000 R09: 8000400000000000 [ 960.234737][T17478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.242799][T17478] R13: 0000000000000000 R14: 00007f55f49b5fa0 R15: 00007ffd5a22bd58 [ 960.250914][T17478] [ 960.253974][T17478] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 960.261282][T17478] CPU: 0 UID: 0 PID: 17478 Comm: syz.0.2415 Tainted: G U 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 960.274851][T17478] Tainted: [U]=USER [ 960.278666][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 960.288987][T17478] Call Trace: [ 960.292558][T17478] [ 960.295521][T17478] dump_stack_lvl+0x3d/0x1f0 [ 960.300171][T17478] vpanic+0x6a3/0x780 [ 960.304210][T17478] ? __pfx_vpanic+0x10/0x10 [ 960.308764][T17478] ? debug_print_object+0x1a2/0x2b0 [ 960.314072][T17478] panic+0xca/0xd0 [ 960.317829][T17478] ? __pfx_panic+0x10/0x10 [ 960.322282][T17478] ? check_panic_on_warn+0x1f/0xb0 [ 960.327458][T17478] check_panic_on_warn+0xab/0xb0 [ 960.332456][T17478] __warn+0xf6/0x3c0 [ 960.336410][T17478] ? debug_print_object+0x1a2/0x2b0 [ 960.341653][T17478] report_bug+0x3c3/0x580 [ 960.346019][T17478] ? debug_print_object+0x1a2/0x2b0 [ 960.351259][T17478] handle_bug+0x184/0x210 [ 960.355626][T17478] exc_invalid_op+0x17/0x50 [ 960.360143][T17478] asm_exc_invalid_op+0x1a/0x20 [ 960.365010][T17478] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 960.370923][T17478] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 60 f5 15 8c 4c 89 e6 48 c7 c7 e0 e9 15 8c e8 2f c0 93 fc 90 <0f> 0b 90 90 58 83 05 36 df c4 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 960.390566][T17478] RSP: 0018:ffffc9000398f768 EFLAGS: 00010286 [ 960.396734][T17478] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff8179ffd8 [ 960.404723][T17478] RDX: ffff888079ca3c00 RSI: ffffffff8179ffe5 RDI: 0000000000000001 [ 960.412704][T17478] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 960.420702][T17478] R10: 0000000000000001 R11: fffffffffffdd9e0 R12: ffffffff8c15f080 [ 960.428770][T17478] R13: ffffffff8bafea60 R14: ffffffff8a987050 R15: ffffc9000398f868 [ 960.436756][T17478] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 960.442240][T17478] ? __warn_printk+0x198/0x350 [ 960.447031][T17478] ? __warn_printk+0x1a5/0x350 [ 960.451820][T17478] ? debug_print_object+0x1a1/0x2b0 [ 960.457066][T17478] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 960.462585][T17478] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 960.468707][T17478] debug_check_no_obj_freed+0x4b7/0x600 [ 960.474795][T17478] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 960.480996][T17478] ? rcu_is_watching+0x12/0xc0 [ 960.485880][T17478] ? kmem_cache_free+0x2d1/0x4d0 [ 960.490953][T17478] kfree+0x28f/0x4d0 [ 960.494960][T17478] ? hci_release_dev+0x4ef/0x610 [ 960.500143][T17478] hci_release_dev+0x4ef/0x610 [ 960.504974][T17478] ? __pfx_hci_release_dev+0x10/0x10 [ 960.510475][T17478] ? rcu_is_watching+0x12/0xc0 [ 960.515279][T17478] ? kfree+0x24f/0x4d0 [ 960.519377][T17478] bt_host_release+0x6a/0xb0 [ 960.523993][T17478] ? __pfx_bt_host_release+0x10/0x10 [ 960.529304][T17478] device_release+0xa1/0x240 [ 960.533924][T17478] kobject_put+0x1e7/0x5a0 [ 960.538399][T17478] ? __pfx_vhci_release+0x10/0x10 [ 960.543486][T17478] put_device+0x1f/0x30 [ 960.547672][T17478] vhci_release+0x81/0xf0 [ 960.552028][T17478] __fput+0x3ff/0xb70 [ 960.556136][T17478] task_work_run+0x14d/0x240 [ 960.560761][T17478] ? __pfx_task_work_run+0x10/0x10 [ 960.565911][T17478] do_exit+0x86f/0x2bf0 [ 960.570096][T17478] ? __pfx___might_resched+0x10/0x10 [ 960.575505][T17478] ? __pfx_do_exit+0x10/0x10 [ 960.580156][T17478] ? do_raw_spin_lock+0x12c/0x2b0 [ 960.585288][T17478] ? find_held_lock+0x2b/0x80 [ 960.590007][T17478] do_group_exit+0xd3/0x2a0 [ 960.594764][T17478] get_signal+0x2673/0x26d0 [ 960.599318][T17478] ? __mmput+0x374/0x410 [ 960.603647][T17478] ? kernel_move_pages+0xcda/0x1380 [ 960.608900][T17478] ? __pfx_get_signal+0x10/0x10 [ 960.613778][T17478] ? do_futex+0x122/0x350 [ 960.618188][T17478] ? __pfx_do_futex+0x10/0x10 [ 960.622893][T17478] arch_do_signal_or_restart+0x8f/0x790 [ 960.628464][T17478] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 960.634675][T17478] ? xfd_validate_state+0x61/0x180 [ 960.639826][T17478] exit_to_user_mode_loop+0x84/0x110 [ 960.645141][T17478] do_syscall_64+0x3f6/0x490 [ 960.649762][T17478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.655679][T17478] RIP: 0033:0x7f55f478eb69 [ 960.660193][T17478] Code: Unable to access opcode bytes at 0x7f55f478eb3f. [ 960.667361][T17478] RSP: 002b:00007f55f5622038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 960.675828][T17478] RAX: fffffffffffffff2 RBX: 00007f55f49b5fa0 RCX: 00007f55f478eb69 [ 960.683950][T17478] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 960.691976][T17478] RBP: 00007f55f4811df1 R08: 0000000000000000 R09: 8000400000000000 [ 960.699981][T17478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.708053][T17478] R13: 0000000000000000 R14: 00007f55f49b5fa0 R15: 00007ffd5a22bd58 [ 960.716080][T17478] [ 960.719444][T17478] Kernel Offset: disabled [ 960.723788][T17478] Rebooting in 86400 seconds..