last executing test programs: 9.005720116s ago: executing program 3 (id=255): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x401, r3, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x8000000000000001, 0x9, 0x5, 0xf870e9c, 0x7, 0x8}, 0x9) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x4}, 0xc) 8.823631434s ago: executing program 3 (id=257): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) getpid() sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffc, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r2, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) 7.214947451s ago: executing program 3 (id=263): socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mprotect$auto(0x0, 0x806121, 0x8) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) 6.744022072s ago: executing program 1 (id=265): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x3, 0x8000) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x6, 0x1ff) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) r2 = open(0x0, 0x161342, 0x130) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xf22, 0x6, 0xfd5, 0x1e, r2, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b74, 0x2, 0x8004) 6.677388001s ago: executing program 0 (id=266): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 6.004146171s ago: executing program 0 (id=267): setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) r0 = io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000340)=""/248, 0xf8) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) 5.771960689s ago: executing program 3 (id=269): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) mmap$auto(0x0, 0xc, 0xe3, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$auto(r1, 0x0, 0x1) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon8\x00', 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r2, 0x0, 0x30) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) kexec_load$auto(0x8134a6c, 0x2, &(0x7f0000000000)={@kbuf=&(0x7f0000000300), 0x10000, 0x81, 0x7}, 0xff) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000080)={0x2, 0x80, 0x10001, 0x5, &(0x7f0000000000), 0x9, 0x3, 0x2, @stream_id=0x2, 0x7, 0x476, 0x0}) ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), r4) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x15c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '-'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '@)[&'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x97}, @NBD_ATTR_SOCKETS={0x118, 0x7, 0x0, 0x1, [@nested={0x30, 0x47, 0x0, 0x1, [@nested={0x4, 0x85}, @typed={0x14, 0xe7, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}]}, @generic="ba9690f7399a3973b73a31d5d9514a3012e9ec3b702fa035e50e2373d1239977b250156adfb7a5bc78aed36b60e27b7a51e31cdcc7c1603d040e094a170a1b60e3219461773082016b7d8343289cc5ce8d102858d8fa245a11", @generic="a5b492f8047be73be12a86cedbb62e20432f6c6607011248bda112cd6a6ab5849a557b5eb0035481648563732a1fa2c59bc23a1d12b07d6ba50f36bf7bd2944b865c342dd0fb98ca0af74016c0393a457d94ed038508ef0de58cde4ee6bf1a4e78a498fd46561363ea62fdb366c3e87020e126b3c5042b6ea9a8ab86530550c21009fb90911c6222ef77ac"]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd46}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb6}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), r0) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004) 5.143425196s ago: executing program 1 (id=272): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycd\x00', 0x200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2242, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x191000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) pwrite64$auto(r0, 0x0, 0x8, 0x400000000000000) 4.878609986s ago: executing program 3 (id=274): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x48200, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy_home_node$auto(0x0, 0x200fffd, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_setup$auto(0x1, 0x0) socket(0x2c, 0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 4.837891136s ago: executing program 0 (id=275): bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20008, 0xfffffffffffffffe, 0x12, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bpq4/statistics/rx_packets\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xc, @empty}, 0x54) recvfrom$auto(0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x99, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto(0x3, 0x541b, 0x7f) 3.510549162s ago: executing program 2 (id=276): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) writev$auto(0xffffffffffffffff, 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendto$auto(0x3, 0x0, 0x8, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x1c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) 3.274984858s ago: executing program 1 (id=277): madvise$auto(0x8, 0x7fffffffffffffff, 0xa) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0x3a, 0x22000, 0x200, 0xff, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd03, &(0x7f00000001c0)) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) listen$auto(r0, 0x6961) unshare$auto(0x8000000) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000440)=""/82, 0x52) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, &(0x7f00000001c0)) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) io_uring_setup$auto(0x1, 0x0) 2.811767761s ago: executing program 0 (id=278): r0 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r0, 0x11b, 0x6, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/flags\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsuid$auto(0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) write$auto(r3, 0x0, 0x4) mkdir$auto(&(0x7f0000000140)='./file0\x00', 0xfffd) mkdir$auto(0x0, 0x54c) 2.626207207s ago: executing program 2 (id=279): r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c1282, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r1, 0x0, 0x7ff, 0xd) ioctl$auto_RTC_PARAM_GET(0xffffffffffffffff, 0x40187013, &(0x7f0000000080)={0x749f1154, @svalue=0x8001, 0x7f}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r0, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) 2.207045417s ago: executing program 2 (id=280): prctl$auto(0x9, 0xffffffff, 0x0, 0x81, 0x80000003) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/anycast6\x00', 0x214280, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x147602, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0xf, 0x1, 0xfff) r1 = prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x1, 0x18, 0xfffffffffffffffa, 0x401) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@isdn={0x22, 0x7, 0x0, 0x3, 0x6}, 0x54) getrandom$auto(0x0, 0x6000000, 0x3) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x8, &(0x7f0000002a40)={0x0, 0x7fffffff}, 0x6, 0x0) listxattrat$auto(r1, 0x0, 0x5, 0x0, 0x15de) kill$auto(0x0, 0x21) 2.050089356s ago: executing program 2 (id=281): r0 = prctl$auto_PR_SYS_DISPATCH_ON(0x7, 0x1, 0x0, 0x9, 0x5) close_range$auto(r0, 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) 1.842429973s ago: executing program 1 (id=282): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) ioctl$auto_EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000003c0)=0x81) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x800, 0x1, 0x0, 0x5, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x8) fanotify_init$auto(0x200024, 0x8001) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D1c\x00', 0x6042, 0x0) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r1, 0x6, &(0x7f00000001c0)='/dev/snd/midiC2D2\x00', &(0x7f0000000340)="06d32ea21fbb10967b9c02bdc761f700f1f4f8d5c99bd776e46d491a07cd65d9e9831dddb76ea7722b53ea29a329033a7cdfdcfb894e982918f24844645b397218b5f59eb712c398c5a82e006c6e6163990f95d6d1b1220e9977c554245cf2deaebae6b7c1c8987fafee8af2dd3e", 0x4) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x5, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(r2, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x1, 0x106) socket(0x2, 0x3, 0x0) setsockopt$auto(r3, 0x6, 0xc, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) 1.230136844s ago: executing program 0 (id=283): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r0, 0x0, 0x20000000001, 0x7fff) socket$nl_generic(0x10, 0x3, 0x10) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2, 0x20009, 0xffffffffffff7f1a, 0x4d982c9e, 0xffffffffffffffff, 0x108000) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)="bdcda609d0dd307ad1695e8740fefb7f2c", 0x11) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) 795.660503ms ago: executing program 1 (id=284): sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4008100) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x400c810) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x167200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/scsi/drivers/st/fixed_buffer_size\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x440c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x100000001, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0xfffe, 0x9, 0x400, 0x7f, 0x7, 0x100004, 0x5, 0x61, 0xff}) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x8658) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) 700.997027ms ago: executing program 2 (id=285): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip6_flowlabel\x00', 0x181800, 0x0) open(0x0, 0x161342, 0x130) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0) lseek$auto(0x3, 0x2, 0x4) setresgid$auto(0xee01, 0x0, 0x0) setresgid$auto(0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x9}, 0x3) mmap$auto(0x0, 0xa00006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x0) fcntl$auto_F_SETFL(0xffffffffffffffff, 0x4, 0x0) ioctl$auto_TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000440)="e371391a16e0eb3ad762bcb6463c5219967fd0923776830ddc2c4816abbf0134ee0f48ffaa7aedb4c1b1fc651ef6c9b246f31e966fdbef98e88cce29e30a4769f12a50f9ef01d76f489d3fb5b501be1808bb1def84489d1d6c0b8f78c945c6d395dabcfd7c07be14ad54600f1f6dea8f4057f738552a6baefbbc0ae3676cdc72127166e8d7987b50a2c772bd7712cc4cdb59980b9b7d052e2c131b") sysfs$auto(0x2, 0x100000000000031, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) 508.863218ms ago: executing program 1 (id=286): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x10000000000eb1, 0xfffffffffffffffa, 0x1000000000008004) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x8, 0x2000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r1) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) unshare$auto(0x8000000) shmget$auto(0x0, 0x200000005, 0x7d) r2 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000340)=0x80000000) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r2, 0x0, 0x4805) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 205.86041ms ago: executing program 3 (id=287): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) socket(0x2, 0x1, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(r0, 0x0, 0x1005, 0x9) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x7f) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r1 = socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) unshare$auto(0x4000007f) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000fffff3ffffffff291d000000000700", 0x3ff, 0x408, 0xffc, 0x400006, 0x10000}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 174.227862ms ago: executing program 0 (id=288): socket(0xa, 0x5, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) mmap$auto(0x0, 0xffffffffffffffc0, 0xffb, 0x90, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/snd_aloop.0/sound/card1/number\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) truncate$auto(0x0, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) sendfile$auto(r2, r2, 0x0, 0x8) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) 0s ago: executing program 2 (id=289): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) socket(0x28, 0x5, 0x4) close_range$auto(0x2, 0x8, 0x0) setresgid$auto(0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r1, r1, 0x0, 0x7dfff001) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x2000, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0) ioctl$auto_tracing_buffers_fops_trace(r2, 0x5220, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 82.030967][ T5813] cgroup: Unknown subsys name 'net' [ 82.159205][ T5813] cgroup: Unknown subsys name 'cpuset' [ 82.168332][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.604827][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.764790][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.774924][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.786206][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.793935][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.795870][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.802221][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.809753][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.825116][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.826085][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.834454][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.841345][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.847281][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.857670][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.866373][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.875084][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.875084][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.876351][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.883987][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.890128][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.899459][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.422919][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 86.494393][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 86.602201][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.640086][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.716217][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.723890][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.731585][ T5826] bridge_slave_0: entered allmulticast mode [ 86.738901][ T5826] bridge_slave_0: entered promiscuous mode [ 86.780594][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.787938][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.795411][ T5826] bridge_slave_1: entered allmulticast mode [ 86.802478][ T5826] bridge_slave_1: entered promiscuous mode [ 86.820176][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.827542][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.834743][ T5824] bridge_slave_0: entered allmulticast mode [ 86.842679][ T5824] bridge_slave_0: entered promiscuous mode [ 86.885703][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.892862][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.900917][ T5824] bridge_slave_1: entered allmulticast mode [ 86.908780][ T5824] bridge_slave_1: entered promiscuous mode [ 86.981966][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.994926][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.062731][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.070556][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.077817][ T5827] bridge_slave_0: entered allmulticast mode [ 87.085838][ T5827] bridge_slave_0: entered promiscuous mode [ 87.098631][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.109680][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.124116][ T5827] bridge_slave_1: entered allmulticast mode [ 87.132340][ T5827] bridge_slave_1: entered promiscuous mode [ 87.158409][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.192981][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.201004][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.208404][ T5825] bridge_slave_0: entered allmulticast mode [ 87.215375][ T5825] bridge_slave_0: entered promiscuous mode [ 87.225744][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.237517][ T5826] team0: Port device team_slave_0 added [ 87.261944][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.269339][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.276915][ T5825] bridge_slave_1: entered allmulticast mode [ 87.283888][ T5825] bridge_slave_1: entered promiscuous mode [ 87.293013][ T5826] team0: Port device team_slave_1 added [ 87.311713][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.350498][ T5824] team0: Port device team_slave_0 added [ 87.369935][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.390926][ T5824] team0: Port device team_slave_1 added [ 87.399124][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.419112][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.428960][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.436606][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.463222][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.511390][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.518783][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.544777][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.556618][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.563572][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.590911][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.603005][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.610385][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.636934][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.651570][ T5827] team0: Port device team_slave_0 added [ 87.698317][ T5827] team0: Port device team_slave_1 added [ 87.706386][ T5825] team0: Port device team_slave_0 added [ 87.729231][ T5826] hsr_slave_0: entered promiscuous mode [ 87.735883][ T5826] hsr_slave_1: entered promiscuous mode [ 87.753515][ T5825] team0: Port device team_slave_1 added [ 87.801005][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.808267][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.834626][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.848036][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.855005][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.881405][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.919465][ T5824] hsr_slave_0: entered promiscuous mode [ 87.926166][ T5824] hsr_slave_1: entered promiscuous mode [ 87.932225][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 87.938464][ T5824] Cannot create hsr debugfs directory [ 87.966317][ T5839] Bluetooth: hci1: command tx timeout [ 87.966421][ T5838] Bluetooth: hci0: command tx timeout [ 87.972036][ T5839] Bluetooth: hci3: command tx timeout [ 87.979022][ T5838] Bluetooth: hci2: command tx timeout [ 87.991580][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.999760][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.025713][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.066204][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.073166][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.099478][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.184931][ T5827] hsr_slave_0: entered promiscuous mode [ 88.191301][ T5827] hsr_slave_1: entered promiscuous mode [ 88.197584][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 88.203318][ T5827] Cannot create hsr debugfs directory [ 88.275979][ T5825] hsr_slave_0: entered promiscuous mode [ 88.282201][ T5825] hsr_slave_1: entered promiscuous mode [ 88.288742][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 88.294489][ T5825] Cannot create hsr debugfs directory [ 88.649217][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.662301][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.673950][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.696443][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.753692][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.768173][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.793123][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.804064][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.887908][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.908423][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.925037][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.960640][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.048147][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.061713][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.082089][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.092913][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.106512][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.163132][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.184477][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.204362][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.211711][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.240001][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.247327][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.282351][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.311591][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.318876][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.336022][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.343173][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.413784][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.482058][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.532178][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.539389][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.575384][ T5061] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.582805][ T5061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.642073][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.721019][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.773889][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.781179][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.793272][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.800437][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.869293][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.044208][ T5824] veth0_vlan: entered promiscuous mode [ 90.052718][ T5838] Bluetooth: hci2: command tx timeout [ 90.052752][ T5833] Bluetooth: hci0: command tx timeout [ 90.058592][ T5838] Bluetooth: hci1: command tx timeout [ 90.073560][ T5839] Bluetooth: hci3: command tx timeout [ 90.111273][ T5824] veth1_vlan: entered promiscuous mode [ 90.168786][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.194019][ T5824] veth0_macvtap: entered promiscuous mode [ 90.220796][ T5824] veth1_macvtap: entered promiscuous mode [ 90.244665][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.319617][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.345804][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.383534][ T138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.394518][ T138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.416690][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.433063][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.442229][ T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.460392][ T5826] veth0_vlan: entered promiscuous mode [ 90.490686][ T5826] veth1_vlan: entered promiscuous mode [ 90.523043][ T5827] veth0_vlan: entered promiscuous mode [ 90.553638][ T5827] veth1_vlan: entered promiscuous mode [ 90.623447][ T5825] veth0_vlan: entered promiscuous mode [ 90.641202][ T5826] veth0_macvtap: entered promiscuous mode [ 90.661721][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.674145][ T5826] veth1_macvtap: entered promiscuous mode [ 90.679348][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.683376][ T5825] veth1_vlan: entered promiscuous mode [ 90.749221][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.764419][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.770501][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.790491][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.809086][ T5827] veth0_macvtap: entered promiscuous mode [ 90.820368][ T5827] veth1_macvtap: entered promiscuous mode [ 90.828882][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.840205][ T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.864511][ T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.888087][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.916837][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.937448][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.953039][ T5825] veth0_macvtap: entered promiscuous mode [ 90.973957][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.014913][ T5825] veth1_macvtap: entered promiscuous mode [ 91.051482][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.057456][ T5920] netlink: 350 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.071277][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.076509][ T5920] Zero length message leads to an empty skb [ 91.108424][ T5920] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.123398][ T5061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.138986][ T5061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.148452][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.158159][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.204985][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.221343][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.249313][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.260227][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.267970][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.292996][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.302081][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.336770][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.397734][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.414375][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.443597][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.573722][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.591932][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.634570][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.673194][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.770854][ T5061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.810142][ T5061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.001093][ T798] cfg80211: failed to load regulatory.db [ 92.131765][ T5839] Bluetooth: hci1: command tx timeout [ 92.136064][ T5833] Bluetooth: hci2: command tx timeout [ 92.138090][ T51] Bluetooth: hci3: command tx timeout [ 92.142940][ T5838] Bluetooth: hci0: command tx timeout [ 92.307206][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.386069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.507097][ T5937] veth1_macvtap: left promiscuous mode [ 93.036145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.202877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.206978][ T5833] Bluetooth: hci2: command tx timeout [ 94.216566][ T5838] Bluetooth: hci0: command tx timeout [ 94.217099][ T5839] Bluetooth: hci1: command tx timeout [ 94.222610][ T5838] Bluetooth: hci3: command tx timeout [ 94.697788][ T5961] netlink: 504 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.714705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.840430][ T5963] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.950461][ T5963] input: jJǸ-9%vJ86 as /devices/virtual/input/input5 [ 95.089061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.193745][ T5967] FAULT_INJECTION: forcing a failure. [ 95.193745][ T5967] name failslab, interval 1, probability 0, space 0, times 1 [ 95.211445][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz.2.14 Not tainted syzkaller #0 PREEMPT(full) [ 95.211485][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 95.211509][ T5967] Call Trace: [ 95.211518][ T5967] [ 95.211530][ T5967] dump_stack_lvl+0x100/0x190 [ 95.211575][ T5967] should_fail_ex.cold+0x5/0xa [ 95.211622][ T5967] should_failslab+0xc2/0x120 [ 95.211661][ T5967] __kmalloc_node_noprof+0xfb/0x9e0 [ 95.211706][ T5967] ? mark_held_locks+0x40/0x70 [ 95.211741][ T5967] ? __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 95.211774][ T5967] ? __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 95.211799][ T5967] __blk_mq_realloc_hw_ctxs+0x579/0x820 [ 95.211832][ T5967] ? lockdep_init_map_type+0x5c/0x250 [ 95.211874][ T5967] blk_mq_init_allocated_queue+0x308/0x1400 [ 95.211915][ T5967] ? blk_alloc_queue+0x627/0x750 [ 95.211941][ T5967] ? blk_alloc_queue+0x1a3/0x750 [ 95.211971][ T5967] blk_mq_alloc_queue+0x1bd/0x290 [ 95.212007][ T5967] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 95.212066][ T5967] ? idr_alloc+0xdd/0x130 [ 95.212096][ T5967] ? __pfx_idr_alloc+0x10/0x10 [ 95.212133][ T5967] __blk_mq_alloc_disk+0x29/0x120 [ 95.212181][ T5967] nbd_dev_add+0x492/0xb10 [ 95.212216][ T5967] ? find_held_lock+0x2b/0x80 [ 95.212243][ T5967] ? __pfx_nbd_dev_add+0x10/0x10 [ 95.212274][ T5967] ? nbd_genl_connect+0x131a/0x1a40 [ 95.212332][ T5967] ? bpf_lsm_capable+0x9/0x10 [ 95.212357][ T5967] ? __radix_tree_lookup+0x217/0x2b0 [ 95.212390][ T5967] nbd_genl_connect+0xb8d/0x1a40 [ 95.212422][ T5967] ? rcu_is_watching+0x12/0xc0 [ 95.212447][ T5967] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 95.212484][ T5967] ? __pfx_nbd_genl_connect+0x10/0x10 [ 95.212521][ T5967] ? __nla_parse+0x40/0x60 [ 95.212556][ T5967] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 95.212586][ T5967] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 95.212624][ T5967] genl_family_rcv_msg_doit+0x214/0x300 [ 95.212658][ T5967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 95.212688][ T5967] ? genl_get_cmd+0x3ef/0x720 [ 95.212726][ T5967] ? __dev_queue_xmit+0x7fd/0x46f0 [ 95.212759][ T5967] ? __radix_tree_lookup+0x217/0x2b0 [ 95.212793][ T5967] genl_rcv_msg+0x560/0x800 [ 95.212825][ T5967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.212854][ T5967] ? __pfx_nbd_genl_connect+0x10/0x10 [ 95.212897][ T5967] netlink_rcv_skb+0x159/0x420 [ 95.212934][ T5967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 95.212960][ T5967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.213015][ T5967] ? netlink_deliver_tap+0x1ae/0xcc0 [ 95.213061][ T5967] genl_rcv+0x28/0x40 [ 95.213083][ T5967] netlink_unicast+0x5aa/0x870 [ 95.213127][ T5967] ? __pfx_netlink_unicast+0x10/0x10 [ 95.213191][ T5967] netlink_sendmsg+0x8b0/0xda0 [ 95.213236][ T5967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.213274][ T5967] ? __import_iovec+0x1d2/0x640 [ 95.213315][ T5967] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 95.213353][ T5967] ____sys_sendmsg+0xa54/0xc30 [ 95.213385][ T5967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.213413][ T5967] ? __pfx___futex_wait+0x10/0x10 [ 95.213444][ T5967] ? __pfx_futex_wake_mark+0x10/0x10 [ 95.213489][ T5967] ___sys_sendmsg+0x190/0x1e0 [ 95.213533][ T5967] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.213581][ T5967] ? find_held_lock+0x2b/0x80 [ 95.213628][ T5967] __sys_sendmsg+0x170/0x220 [ 95.213665][ T5967] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.213702][ T5967] ? __x64_sys_futex+0x34f/0x4d0 [ 95.213754][ T5967] do_syscall_64+0xc9/0xf80 [ 95.213789][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.213816][ T5967] RIP: 0033:0x7f5f9d99acb9 [ 95.213849][ T5967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.213880][ T5967] RSP: 002b:00007f5f9e808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.213905][ T5967] RAX: ffffffffffffffda RBX: 00007f5f9dc15fa0 RCX: 00007f5f9d99acb9 [ 95.213921][ T5967] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000002 [ 95.213937][ T5967] RBP: 00007f5f9da08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 95.213952][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.213966][ T5967] R13: 00007f5f9dc16038 R14: 00007f5f9dc15fa0 R15: 00007ffeb81b8198 [ 95.213995][ T5967] [ 95.907215][ T5967] nbd: failed to add new device [ 96.308567][ T5980] can0: slcan on pty238. [ 96.352990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.363844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.372921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.517467][ T5978] can0 (unregistered): slcan off pty238. [ 96.526196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.788485][ T5839] Bluetooth: hci1: unexpected event 0x31 length: 19 > 6 [ 96.847382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.556549][ T6006] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.678540][ T5839] Bluetooth: hci3: unexpected event 0x09 length: 435 > 3 [ 97.699773][ T6012] mmap: syz.1.21 (6012) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.863714][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 97.863955][ T6022] ipvlan0: entered promiscuous mode [ 97.863972][ T6022] ipvlan0: entered allmulticast mode [ 97.863982][ T6022] veth0_vlan: entered allmulticast mode [ 100.850196][ T6081] __vm_enough_memory: pid: 6081, comm: syz.3.32, bytes: 8589938688 not enough memory for the allocation [ 102.050469][ T6099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.093039][ T6099] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.231546][ T6099] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.282778][ T6099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.312973][ T6099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.382530][ T6099] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.466980][ T6099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.473139][ T6099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.517267][ T6099] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.558975][ T6099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.572394][ T6099] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.611341][ T6099] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.620540][ T6118] process 'syz.1.40' launched ':,' with NULL argv: empty string added [ 103.290877][ T6127] ptrace attach of "./syz-executor exec"[5824] was attempted by ""[6127] [ 104.128849][ T6066] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.287530][ T6066] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.525695][ T6066] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.605241][ T6148] FAULT_INJECTION: forcing a failure. [ 104.605241][ T6148] name failslab, interval 1, probability 0, space 0, times 0 [ 104.605662][ T6066] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.625562][ T6148] CPU: 1 UID: 0 PID: 6148 Comm: syz.3.47 Not tainted syzkaller #0 PREEMPT(full) [ 104.625603][ T6148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 104.625621][ T6148] Call Trace: [ 104.625631][ T6148] [ 104.625642][ T6148] dump_stack_lvl+0x100/0x190 [ 104.625684][ T6148] should_fail_ex.cold+0x5/0xa [ 104.625730][ T6148] should_failslab+0xc2/0x120 [ 104.625769][ T6148] __kmalloc_cache_noprof+0x80/0x810 [ 104.625796][ T6148] ? can_pernet_init+0xb7/0x370 [ 104.625837][ T6148] ? can_pernet_init+0xb7/0x370 [ 104.625869][ T6148] ? __pfx_can_pernet_init+0x10/0x10 [ 104.625899][ T6148] can_pernet_init+0xb7/0x370 [ 104.625933][ T6148] ? __pfx_can_pernet_init+0x10/0x10 [ 104.625963][ T6148] ops_init+0x1e2/0x5f0 [ 104.626007][ T6148] setup_net+0x118/0x3a0 [ 104.626046][ T6148] ? __pfx_setup_net+0x10/0x10 [ 104.626072][ T6148] ? lockdep_init_map_type+0x5c/0x250 [ 104.626094][ T6148] ? mutex_init_lockep+0x110/0x150 [ 104.626116][ T6148] copy_net_ns+0x46f/0x7c0 [ 104.626132][ T6148] create_new_namespaces+0x3ea/0xab0 [ 104.626153][ T6148] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 104.626172][ T6148] ksys_unshare+0x455/0xab0 [ 104.626193][ T6148] ? __pfx_ksys_unshare+0x10/0x10 [ 104.626213][ T6148] ? xfd_validate_state+0x129/0x190 [ 104.626252][ T6148] __x64_sys_unshare+0x31/0x40 [ 104.626272][ T6148] do_syscall_64+0xc9/0xf80 [ 104.626293][ T6148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.626308][ T6148] RIP: 0033:0x7f70af99acb9 [ 104.626321][ T6148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.626336][ T6148] RSP: 002b:00007f70b08d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 104.626350][ T6148] RAX: ffffffffffffffda RBX: 00007f70afc15fa0 RCX: 00007f70af99acb9 [ 104.626360][ T6148] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 104.626369][ T6148] RBP: 00007f70afa08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 104.626377][ T6148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.626386][ T6148] R13: 00007f70afc16038 R14: 00007f70afc15fa0 R15: 00007ffe739cc3f8 [ 104.626405][ T6148] [ 105.859685][ T6167] loop6: detected capacity change from 0 to 8 [ 105.979971][ T6165] sctp: [Deprecated]: syz.2.51 (pid 6165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.979971][ T6165] Use struct sctp_sack_info instead [ 106.205660][ T6066] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.365585][ T6066] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.615490][ T6066] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.659702][ T30] audit: type=1326 audit(1769353236.672:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.50" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ec619acb9 code=0x0 [ 106.705855][ T6066] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.285961][ T6066] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.449370][ T6066] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.460799][ T6185] syz.3.54 (6185) used greatest stack depth: 18984 bytes left [ 108.685635][ T6066] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.765542][ T6066] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.346492][ T6208] netlink: 326 bytes leftover after parsing attributes in process `syz.2.60'. [ 109.463953][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.62'. [ 110.368207][ T6224] netlink: 334 bytes leftover after parsing attributes in process `syz.3.63'. [ 110.566044][ T6226] netlink: zone id is out of range [ 110.608288][ T6226] netlink: zone id is out of range [ 110.949183][ T6226] netlink: set zone limit has 8 unknown bytes [ 111.165815][ T30] audit: type=1800 audit(1769353241.212:3): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.65" name="discovery_nqn" dev="configfs" ino=9116 res=0 errno=0 [ 111.484901][ T6231] zswap: compressor not available [ 111.834608][ T6242] can0: slcan on ttyS2. [ 111.919843][ T6242] can0 (unregistered): slcan off ttyS2. [ 112.007364][ T6215] kexec: Could not allocate control_code_buffer [ 114.400596][ T6285] FAULT_INJECTION: forcing a failure. [ 114.400596][ T6285] name failslab, interval 1, probability 0, space 0, times 0 [ 114.455665][ T6285] CPU: 0 UID: 0 PID: 6285 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 114.455705][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 114.455721][ T6285] Call Trace: [ 114.455730][ T6285] [ 114.455740][ T6285] dump_stack_lvl+0x100/0x190 [ 114.455778][ T6285] should_fail_ex.cold+0x5/0xa [ 114.455815][ T6285] should_failslab+0xc2/0x120 [ 114.455836][ T6285] ? tomoyo_encode2+0xfb/0x3c0 [ 114.455850][ T6285] __kmalloc_noprof+0xf6/0x9c0 [ 114.455871][ T6285] ? tomoyo_encode2+0xfb/0x3c0 [ 114.455883][ T6285] tomoyo_encode2+0xfb/0x3c0 [ 114.455901][ T6285] tomoyo_encode+0x29/0x50 [ 114.455914][ T6285] tomoyo_realpath_from_path+0x18c/0x690 [ 114.455935][ T6285] tomoyo_mkdev_perm+0x231/0x570 [ 114.455955][ T6285] ? tomoyo_mkdev_perm+0x21d/0x570 [ 114.455976][ T6285] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 114.456023][ T6285] ? do_raw_spin_unlock+0x145/0x1e0 [ 114.456056][ T6285] ? __pfx_current_check_access_path+0x10/0x10 [ 114.456081][ T6285] ? simple_lookup+0x105/0x1d0 [ 114.456101][ T6285] tomoyo_path_mknod+0xe2/0x190 [ 114.456118][ T6285] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 114.456136][ T6285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.456155][ T6285] security_path_mknod+0x161/0x300 [ 114.456172][ T6285] do_mknodat+0x247/0x7a0 [ 114.456190][ T6285] ? __pfx_do_mknodat+0x10/0x10 [ 114.456204][ T6285] ? strncpy_from_user+0x19d/0x2d0 [ 114.456226][ T6285] ? getname_flags.part.0+0x1c5/0x540 [ 114.456249][ T6285] __x64_sys_mknod+0x118/0x170 [ 114.456268][ T6285] do_syscall_64+0xc9/0xf80 [ 114.456288][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.456303][ T6285] RIP: 0033:0x7f2ec619acb9 [ 114.456317][ T6285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.456331][ T6285] RSP: 002b:00007f2ec7053028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 114.456346][ T6285] RAX: ffffffffffffffda RBX: 00007f2ec6415fa0 RCX: 00007f2ec619acb9 [ 114.456356][ T6285] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 114.456366][ T6285] RBP: 00007f2ec6208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 114.456375][ T6285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.456384][ T6285] R13: 00007f2ec6416038 R14: 00007f2ec6415fa0 R15: 00007fffcf4daed8 [ 114.456404][ T6285] [ 114.456425][ T6285] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.980136][ T6301] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 116.040248][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 116.080900][ T6304] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 116.091856][ T6304] netlink: 342 bytes leftover after parsing attributes in process `syz.3.81'. [ 116.460130][ T6313] netlink: 25 bytes leftover after parsing attributes in process `syz.3.84'. [ 116.776320][ T6317] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 116.834997][ T6319] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.799086][ T6329] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 118.276208][ T6336] mkiss: ax0: crc mode is auto. [ 118.854358][ T6330] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 120.984753][ T6368] FAULT_INJECTION: forcing a failure. [ 120.984753][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 121.043867][ T30] audit: type=1800 audit(1769371595.127:4): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.95" name="dbroot" dev="configfs" ino=9699 res=0 errno=0 [ 121.064901][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 121.064940][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 121.064957][ T6368] Call Trace: [ 121.064966][ T6368] [ 121.064976][ T6368] dump_stack_lvl+0x100/0x190 [ 121.065039][ T6368] should_fail_ex.cold+0x5/0xa [ 121.065087][ T6368] should_failslab+0xc2/0x120 [ 121.065127][ T6368] kmem_cache_alloc_noprof+0x83/0x780 [ 121.065165][ T6368] ? security_file_alloc+0x34/0x2c0 [ 121.065216][ T6368] ? security_file_alloc+0x34/0x2c0 [ 121.065258][ T6368] security_file_alloc+0x34/0x2c0 [ 121.065303][ T6368] init_file+0x93/0x4c0 [ 121.065343][ T6368] alloc_empty_file+0x73/0x1c0 [ 121.065384][ T6368] dentry_open+0x46/0xd0 [ 121.065427][ T6368] pidfs_alloc_file+0x18f/0x290 [ 121.065455][ T6368] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 121.065497][ T6368] pidfd_prepare+0x129/0x200 [ 121.065546][ T6368] __x64_sys_pidfd_open+0x105/0x1a0 [ 121.065590][ T6368] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 121.065637][ T6368] ? rcu_is_watching+0x12/0xc0 [ 121.065668][ T6368] do_syscall_64+0xc9/0xf80 [ 121.065704][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.065733][ T6368] RIP: 0033:0x7f2ec619acb9 [ 121.065760][ T6368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.065785][ T6368] RSP: 002b:00007f2ec7011028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 121.065809][ T6368] RAX: ffffffffffffffda RBX: 00007f2ec6416180 RCX: 00007f2ec619acb9 [ 121.065827][ T6368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 121.065842][ T6368] RBP: 00007f2ec6208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 121.065858][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.065874][ T6368] R13: 00007f2ec6416218 R14: 00007f2ec6416180 R15: 00007fffcf4daed8 [ 121.065912][ T6368] [ 121.616860][ T6376] zswap: compressor not available [ 123.606674][ T6422] netlink: 93 bytes leftover after parsing attributes in process `syz.2.102'. [ 123.629672][ T6414] netlink: 93 bytes leftover after parsing attributes in process `syz.2.102'. [ 123.719262][ T6414] netlink: 93 bytes leftover after parsing attributes in process `syz.2.102'. [ 123.810254][ T6424] input: jJǸ-9%v as /devices/virtual/input/input8 [ 124.724380][ T6431] netlink: 'syz.3.107': attribute type 4 has an invalid length. [ 124.752559][ T6431] netlink: 314 bytes leftover after parsing attributes in process `syz.3.107'. [ 125.000462][ T6444] syz.2.110 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.608896][ T6467] bond0: option all_slaves_active: invalid value () [ 125.912605][ T6470] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 125.912605][ T6470] The task syz.1.114 (6470) triggered the difference, watch for misbehavior. [ 127.153511][ T30] audit: type=1800 audit(1769371601.233:5): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.120" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 127.726214][ T6066] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 129.123309][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 129.189003][ T6523] netlink: 354 bytes leftover after parsing attributes in process `syz.2.123'. [ 131.343977][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 131.357461][ T6571] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 131.381954][ T6571] netlink: 5 bytes leftover after parsing attributes in process `syz.3.133'. [ 132.393137][ T6588] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 132.656738][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 132.684181][ T6594] netlink: 25 bytes leftover after parsing attributes in process `syz.1.140'. [ 132.968735][ T6597] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79000 [ 133.135561][ T6597] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 133.186109][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 133.197584][ T6597] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 133.212200][ T6605] netlink: 'syz.3.142': attribute type 2 has an invalid length. [ 133.266721][ T6597] page_type: f5(slab) [ 133.280146][ T6605] netlink: 'syz.3.142': attribute type 3 has an invalid length. [ 133.302293][ T6597] raw: 00fff00000000040 ffff88813ff30c80 dead000000000122 0000000000000000 [ 133.332233][ T6605] netlink: 20232 bytes leftover after parsing attributes in process `syz.3.142'. [ 133.385037][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 133.415723][ T6597] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 133.588921][ T6597] head: 00fff00000000040 ffff88813ff30c80 dead000000000122 0000000000000000 [ 133.645666][ T6597] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 133.654855][ T6597] head: 00fff00000000001 ffffea0001e40001 00000000ffffffff 00000000ffffffff [ 133.669725][ T6597] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 133.679105][ T6597] page dumped because: unmovable page [ 133.684625][ T6597] page_owner tracks the page as allocated [ 133.695085][ T6597] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6512, tgid 6512 (dhcpcd-run-hook), ts 129197111790, free_ts 97734257584 [ 133.840387][ T6597] post_alloc_hook+0x1e1/0x250 [ 133.896568][ T6597] get_page_from_freelist+0xe3d/0x2e10 [ 133.902112][ T6597] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 134.016246][ T6597] alloc_pages_mpol+0x1fb/0x550 [ 134.060824][ T6597] new_slab+0x2c4/0x440 [ 134.098842][ T6597] ___slab_alloc+0xda3/0x1ca0 [ 134.143531][ T6597] __kmem_cache_alloc_bulk+0x20f/0x700 [ 134.196866][ T6597] __prefill_sheaf_pfmemalloc+0x42/0x90 [ 134.345521][ T6597] kmem_cache_prefill_sheaf+0x1b7/0x420 [ 134.351150][ T6597] mas_dup_alloc.isra.0+0x7fa/0xb60 [ 134.444097][ T6597] __mt_dup+0x62d/0xc20 [ 134.458476][ T6597] dup_mmap+0x36d/0x1e20 [ 134.526583][ T6597] copy_process+0x7451/0x7890 [ 134.539543][ T6597] kernel_clone+0xfc/0x930 [ 134.554858][ T6597] __do_sys_clone+0xd9/0x120 [ 134.563270][ T6597] do_syscall_64+0xc9/0xf80 [ 134.569656][ T6597] page last free pid 5983 tgid 5983 stack trace: [ 134.576389][ T6597] __free_frozen_pages+0x822/0x1130 [ 134.581777][ T6597] qlist_free_all+0x47/0xe0 [ 134.586591][ T6597] kasan_quarantine_reduce+0x1a0/0x1f0 [ 134.592230][ T6597] __kasan_slab_alloc+0x69/0x90 [ 134.597331][ T6597] kmem_cache_alloc_node_noprof+0x303/0x880 [ 134.603413][ T6597] copy_process+0x48b/0x7890 [ 134.608308][ T6597] kernel_clone+0xfc/0x930 [ 134.612771][ T6597] __do_sys_clone+0xd9/0x120 [ 134.618702][ T6597] do_syscall_64+0xc9/0xf80 [ 134.623350][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.138898][ T6623] FAULT_INJECTION: forcing a failure. [ 135.138898][ T6623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.171665][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.2.146 Not tainted syzkaller #0 PREEMPT(full) [ 135.171706][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 135.171723][ T6623] Call Trace: [ 135.171732][ T6623] [ 135.171743][ T6623] dump_stack_lvl+0x100/0x190 [ 135.171784][ T6623] should_fail_ex.cold+0x5/0xa [ 135.171828][ T6623] ? prepare_alloc_pages+0x16d/0x5f0 [ 135.171875][ T6623] should_fail_alloc_page+0xeb/0x140 [ 135.171920][ T6623] prepare_alloc_pages+0x1f0/0x5f0 [ 135.171963][ T6623] ? rcu_is_watching+0x12/0xc0 [ 135.171996][ T6623] __alloc_frozen_pages_noprof+0x193/0x2410 [ 135.172035][ T6623] ? __lock_acquire+0x4a5/0x2630 [ 135.172087][ T6623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 135.172142][ T6623] ? lru_gen_add_folio+0x20f/0x13e0 [ 135.172189][ T6623] ? lock_acquire+0x17c/0x330 [ 135.172226][ T6623] ? find_held_lock+0x2b/0x80 [ 135.172253][ T6623] ? page_table_check_set+0x49a/0xa10 [ 135.172287][ T6623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.172320][ T6623] ? policy_nodemask+0xed/0x4f0 [ 135.172365][ T6623] alloc_pages_mpol+0x1fb/0x550 [ 135.172415][ T6623] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 135.172454][ T6623] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 135.172501][ T6623] folio_alloc_mpol_noprof+0x36/0x340 [ 135.172550][ T6623] vma_alloc_folio_noprof+0xed/0x1d0 [ 135.172594][ T6623] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 135.172653][ T6623] do_anonymous_page+0xb10/0x1f40 [ 135.172698][ T6623] __handle_mm_fault+0x1d3a/0x2b50 [ 135.172741][ T6623] ? __pfx___handle_mm_fault+0x10/0x10 [ 135.172776][ T6623] ? __pte_offset_map_lock+0x174/0x320 [ 135.172817][ T6623] ? find_held_lock+0x2b/0x80 [ 135.172857][ T6623] ? follow_page_pte+0x5b4/0x1410 [ 135.172907][ T6623] handle_mm_fault+0x36d/0xa20 [ 135.172947][ T6623] __get_user_pages+0xf9c/0x34d0 [ 135.173006][ T6623] ? __pfx___get_user_pages+0x10/0x10 [ 135.173060][ T6623] populate_vma_page_range+0x267/0x3f0 [ 135.173108][ T6623] ? __pfx_populate_vma_page_range+0x10/0x10 [ 135.173153][ T6623] ? __pfx_find_vma_intersection+0x10/0x10 [ 135.173197][ T6623] ? do_mmap+0x93f/0x12f0 [ 135.173243][ T6623] __mm_populate+0x107/0x3a0 [ 135.173290][ T6623] ? __pfx___mm_populate+0x10/0x10 [ 135.173336][ T6623] ? up_write+0x290/0x4f0 [ 135.173376][ T6623] vm_mmap_pgoff+0x37f/0x470 [ 135.173424][ T6623] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 135.173471][ T6623] ? __x64_sys_futex+0x34f/0x4d0 [ 135.173508][ T6623] ? __x64_sys_futex+0x358/0x4d0 [ 135.173553][ T6623] ksys_mmap_pgoff+0x7d/0x5b0 [ 135.173602][ T6623] __x64_sys_mmap+0x125/0x190 [ 135.173634][ T6623] do_syscall_64+0xc9/0xf80 [ 135.173674][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.173704][ T6623] RIP: 0033:0x7f5f9d99acb9 [ 135.173727][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.173754][ T6623] RSP: 002b:00007f5f9e808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 135.173783][ T6623] RAX: ffffffffffffffda RBX: 00007f5f9dc15fa0 RCX: 00007f5f9d99acb9 [ 135.173802][ T6623] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 135.173819][ T6623] RBP: 00007f5f9da08bf7 R08: ffffffffffffffff R09: 0000000000000000 [ 135.173837][ T6623] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 135.173855][ T6623] R13: 00007f5f9dc16038 R14: 00007f5f9dc15fa0 R15: 00007ffeb81b8198 [ 135.173894][ T6623] [ 136.408447][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 136.419520][ T6637] netlink: 354 bytes leftover after parsing attributes in process `syz.2.149'. [ 137.234040][ T6629] syz.3.148 uses obsolete (PF_INET,SOCK_PACKET) [ 137.871079][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 138.064934][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.071595][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.180770][ T30] audit: type=1800 audit(1769371612.243:6): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.154" name="dbroot" dev="configfs" ino=11299 res=0 errno=0 [ 138.355322][ T6655] FAULT_INJECTION: forcing a failure. [ 138.355322][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 138.459860][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.2.152 Not tainted syzkaller #0 PREEMPT(full) [ 138.459899][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 138.459916][ T6655] Call Trace: [ 138.459925][ T6655] [ 138.459936][ T6655] dump_stack_lvl+0x100/0x190 [ 138.459976][ T6655] should_fail_ex.cold+0x5/0xa [ 138.460025][ T6655] should_failslab+0xc2/0x120 [ 138.460073][ T6655] __kmalloc_cache_noprof+0x80/0x810 [ 138.460105][ T6655] ? trace_parse_run_command+0x58/0x3b0 [ 138.460144][ T6655] ? trace_parse_run_command+0x58/0x3b0 [ 138.460174][ T6655] trace_parse_run_command+0x58/0x3b0 [ 138.460203][ T6655] ? __pfx_create_dyn_event+0x10/0x10 [ 138.460245][ T6655] vfs_write+0x2aa/0x1070 [ 138.460278][ T6655] ? __pfx_dyn_event_write+0x10/0x10 [ 138.460317][ T6655] ? __pfx_vfs_write+0x10/0x10 [ 138.460346][ T6655] ? find_held_lock+0x2b/0x80 [ 138.460375][ T6655] ? __fget_files+0x215/0x3d0 [ 138.460411][ T6655] ? __fget_files+0x21f/0x3d0 [ 138.460452][ T6655] ksys_write+0x12a/0x250 [ 138.460484][ T6655] ? __pfx_ksys_write+0x10/0x10 [ 138.460526][ T6655] do_syscall_64+0xc9/0xf80 [ 138.460563][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.460592][ T6655] RIP: 0033:0x7f5f9d99acb9 [ 138.460615][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.460641][ T6655] RSP: 002b:00007f5f9e7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.460668][ T6655] RAX: ffffffffffffffda RBX: 00007f5f9dc16180 RCX: 00007f5f9d99acb9 [ 138.460687][ T6655] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000007 [ 138.460704][ T6655] RBP: 00007f5f9da08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 138.460720][ T6655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.460736][ T6655] R13: 00007f5f9dc16218 R14: 00007f5f9dc16180 R15: 00007ffeb81b8198 [ 138.460771][ T6655] [ 141.648754][ T6696] vhci_hcd vhci_hcd.2: invalid port number 16 [ 141.659997][ T6696] vhci_hcd vhci_hcd.2: invalid port number 16 [ 142.254864][ T6704] FAULT_INJECTION: forcing a failure. [ 142.254864][ T6704] name failslab, interval 1, probability 0, space 0, times 0 [ 142.361011][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.0.161 Not tainted syzkaller #0 PREEMPT(full) [ 142.361050][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 142.361066][ T6704] Call Trace: [ 142.361075][ T6704] [ 142.361085][ T6704] dump_stack_lvl+0x100/0x190 [ 142.361124][ T6704] should_fail_ex.cold+0x5/0xa [ 142.361168][ T6704] should_failslab+0xc2/0x120 [ 142.361205][ T6704] kmem_cache_alloc_noprof+0x83/0x780 [ 142.361243][ T6704] ? alloc_empty_file+0x55/0x1c0 [ 142.361313][ T6704] ? alloc_empty_file+0x55/0x1c0 [ 142.361350][ T6704] alloc_empty_file+0x55/0x1c0 [ 142.361390][ T6704] path_openat+0xe8/0x3120 [ 142.361429][ T6704] ? getname_flags+0x93/0xf0 [ 142.361455][ T6704] ? do_sys_openat2+0xc5/0x220 [ 142.361495][ T6704] ? __x64_sys_openat+0x12d/0x210 [ 142.361533][ T6704] ? do_syscall_64+0xc9/0xf80 [ 142.361563][ T6704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.361598][ T6704] ? __pfx_path_openat+0x10/0x10 [ 142.361650][ T6704] do_filp_open+0x1f7/0x420 [ 142.361685][ T6704] ? __pfx_do_filp_open+0x10/0x10 [ 142.361742][ T6704] ? _raw_spin_unlock+0x28/0x50 [ 142.361770][ T6704] ? alloc_fd+0x476/0x790 [ 142.361811][ T6704] do_sys_openat2+0x12e/0x220 [ 142.361850][ T6704] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.361892][ T6704] ? find_held_lock+0x2b/0x80 [ 142.361929][ T6704] __x64_sys_openat+0x12d/0x210 [ 142.361972][ T6704] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.362014][ T6704] ? xfd_validate_state+0x129/0x190 [ 142.362076][ T6704] do_syscall_64+0xc9/0xf80 [ 142.362112][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.362141][ T6704] RIP: 0033:0x7f2ec619acb9 [ 142.362165][ T6704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.362193][ T6704] RSP: 002b:00007f2ec7032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.362220][ T6704] RAX: ffffffffffffffda RBX: 00007f2ec6416090 RCX: 00007f2ec619acb9 [ 142.362240][ T6704] RDX: 1a6b75d63882a712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 142.362259][ T6704] RBP: 00007f2ec6208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 142.362277][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.362294][ T6704] R13: 00007f2ec6416128 R14: 00007f2ec6416090 R15: 00007fffcf4daed8 [ 142.362333][ T6704] [ 142.367713][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 142.765895][ T6706] netlink: 354 bytes leftover after parsing attributes in process `syz.3.163'. [ 144.883041][ T6732] futex_wake_op: syz.0.169 tries to shift op by -2048; fix this program [ 144.933325][ T6732] futex_wake_op: syz.0.169 tries to shift op by -2048; fix this program [ 144.981197][ T6732] 0x000000000001-0x000000020000 : "" [ 145.035051][ T6732] ftl_cs: FTL header corrupt! [ 145.752893][ T6738] NFSD: Failed to start, no listeners configured. [ 148.270810][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 148.330888][ T6784] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 148.345589][ T6784] netlink: 5 bytes leftover after parsing attributes in process `syz.3.179'. [ 148.556107][ T6790] random: crng reseeded on system resumption [ 149.911385][ T6813] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 149.911385][ T6813] M' is too long [ 149.922415][ T6813] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 149.922415][ T6813] W ' is too long [ 150.696687][ T6831] zswap: compressor not available [ 151.721753][ T6848] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 152.308619][ T6849] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 152.924573][ T6862] FAULT_INJECTION: forcing a failure. [ 152.924573][ T6862] name fail_futex, interval 1, probability 0, space 0, times 1 [ 152.939303][ T6862] CPU: 0 UID: 0 PID: 6862 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(full) [ 152.939325][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 152.939334][ T6862] Call Trace: [ 152.939339][ T6862] [ 152.939345][ T6862] dump_stack_lvl+0x100/0x190 [ 152.939367][ T6862] should_fail_ex.cold+0x5/0xa [ 152.939391][ T6862] get_futex_key+0x295/0x1620 [ 152.939413][ T6862] ? __pfx_get_futex_key+0x10/0x10 [ 152.939437][ T6862] futex_wake+0xea/0x530 [ 152.939461][ T6862] ? __pfx_futex_wake+0x10/0x10 [ 152.939484][ T6862] ? exit_mm_release+0x19/0x30 [ 152.939509][ T6862] do_futex+0x32b/0x350 [ 152.939529][ T6862] ? __pfx_do_futex+0x10/0x10 [ 152.939547][ T6862] ? __might_fault+0xc5/0x140 [ 152.939569][ T6862] mm_release+0x24a/0x2f0 [ 152.939586][ T6862] do_exit+0x675/0x2a30 [ 152.939610][ T6862] ? __pfx_do_exit+0x10/0x10 [ 152.939630][ T6862] ? do_raw_spin_lock+0x128/0x260 [ 152.939652][ T6862] ? find_held_lock+0x2b/0x80 [ 152.939672][ T6862] ? get_signal+0x7e0/0x21e0 [ 152.939691][ T6862] do_group_exit+0xd5/0x2a0 [ 152.939714][ T6862] get_signal+0x1ec7/0x21e0 [ 152.939737][ T6862] ? __pfx_get_signal+0x10/0x10 [ 152.939755][ T6862] ? do_futex+0x192/0x350 [ 152.939776][ T6862] arch_do_signal_or_restart+0x91/0x770 [ 152.939798][ T6862] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 152.939823][ T6862] ? __pfx___x64_sys_futex+0x10/0x10 [ 152.939842][ T6862] ? ksys_write+0x1ac/0x250 [ 152.939862][ T6862] exit_to_user_mode_loop+0x86/0x4b0 [ 152.939883][ T6862] ? rcu_is_watching+0x12/0xc0 [ 152.939898][ T6862] do_syscall_64+0x4ea/0xf80 [ 152.939918][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.939932][ T6862] RIP: 0033:0x7f70af99acb9 [ 152.939944][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.939958][ T6862] RSP: 002b:00007f70b08d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 152.939973][ T6862] RAX: fffffffffffffe00 RBX: 00007f70afc15fa8 RCX: 00007f70af99acb9 [ 152.939983][ T6862] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f70afc15fa8 [ 152.939992][ T6862] RBP: 00007f70afc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 152.940000][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.940008][ T6862] R13: 00007f70afc16038 R14: 00007ffe739cc310 R15: 00007ffe739cc3f8 [ 152.940027][ T6862] [ 153.435253][ T6066] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 156.109830][ T6469] Bluetooth: hci0: unexpected subevent 0x18 length: 123 > 19 [ 156.119990][ T6469] Bluetooth: hci0: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 156.313790][ T6920] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 156.877713][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'. [ 157.650732][ T6066] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.498953][ T6960] zswap: compressor not available [ 158.664648][ T6966] netlink: 'syz.0.219': attribute type 21 has an invalid length. [ 158.672498][ T6966] netlink: 326 bytes leftover after parsing attributes in process `syz.0.219'. [ 160.723362][ T6469] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 161.100254][ T30] audit: type=1800 audit(1769371635.183:7): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.230" name="lu_gp_id" dev="configfs" ino=13445 res=0 errno=0 [ 161.619243][ T7011] zswap: compressor not available [ 161.624544][ T7013] phram: not enough arguments [ 161.834510][ T7019] __vm_enough_memory: pid: 7019, comm: syz.2.233, bytes: 4398046511104 not enough memory for the allocation [ 161.846803][ T7021] netlink: 9 bytes leftover after parsing attributes in process `syz.1.235'. [ 162.144902][ T7025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.156441][ T7025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.182298][ T7025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.204315][ T7025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.435773][ T7043] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 163.540766][ T7057] WARNING! power/level is deprecated; use power/control instead [ 164.125698][ T7066] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 164.205722][ T6066] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.211775][ T6066] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.218413][ T6469] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.224448][ T6469] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.093503][ T7084] FAULT_INJECTION: forcing a failure. [ 165.093503][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 165.192666][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: syz.0.247 Not tainted syzkaller #0 PREEMPT(full) [ 165.192699][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 165.192708][ T7084] Call Trace: [ 165.192714][ T7084] [ 165.192721][ T7084] dump_stack_lvl+0x100/0x190 [ 165.192745][ T7084] should_fail_ex.cold+0x5/0xa [ 165.192771][ T7084] should_failslab+0xc2/0x120 [ 165.192792][ T7084] kmem_cache_alloc_noprof+0x83/0x780 [ 165.192812][ T7084] ? __kernfs_new_node+0xd2/0x960 [ 165.192835][ T7084] ? __kernfs_new_node+0xd2/0x960 [ 165.192853][ T7084] __kernfs_new_node+0xd2/0x960 [ 165.192875][ T7084] ? __pfx___kernfs_new_node+0x10/0x10 [ 165.192899][ T7084] ? find_held_lock+0x2b/0x80 [ 165.192913][ T7084] ? kernfs_root+0xee/0x2a0 [ 165.192931][ T7084] ? kernfs_root+0xee/0x2a0 [ 165.192954][ T7084] kernfs_new_node+0x11b/0x1a0 [ 165.192979][ T7084] __kernfs_create_file+0x53/0x350 [ 165.192997][ T7084] sysfs_add_file_mode_ns+0x207/0x3c0 [ 165.193020][ T7084] internal_create_group+0x593/0xf40 [ 165.193045][ T7084] ? __pfx_internal_create_group+0x10/0x10 [ 165.193068][ T7084] ? kernfs_create_link+0x1bd/0x240 [ 165.193086][ T7084] internal_create_groups+0x9d/0x150 [ 165.193108][ T7084] device_add+0x71a/0x1950 [ 165.193130][ T7084] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.193146][ T7084] ? __pfx_device_add+0x10/0x10 [ 165.193165][ T7084] ? lockdep_init_map_type+0x5c/0x250 [ 165.193185][ T7084] ? __init_waitqueue_head+0xca/0x150 [ 165.193211][ T7084] netdev_register_kobject+0x1a9/0x3d0 [ 165.193230][ T7084] register_netdevice+0x12b3/0x21d0 [ 165.193257][ T7084] ? __pfx_register_netdevice+0x10/0x10 [ 165.193281][ T7084] ? alloc_netdev_mqs+0x1163/0x14f0 [ 165.193303][ T7084] ? __pfx_loopback_net_init+0x10/0x10 [ 165.193318][ T7084] register_netdev+0x34/0x50 [ 165.193348][ T7084] loopback_net_init+0x7a/0x170 [ 165.193364][ T7084] ? __pfx_loopback_net_init+0x10/0x10 [ 165.193377][ T7084] ops_init+0x1e2/0x5f0 [ 165.193402][ T7084] setup_net+0x118/0x3a0 [ 165.193425][ T7084] ? __pfx_setup_net+0x10/0x10 [ 165.193445][ T7084] ? lockdep_init_map_type+0x5c/0x250 [ 165.193465][ T7084] ? mutex_init_lockep+0x110/0x150 [ 165.193488][ T7084] copy_net_ns+0x46f/0x7c0 [ 165.193504][ T7084] create_new_namespaces+0x3ea/0xab0 [ 165.193525][ T7084] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 165.193543][ T7084] ksys_unshare+0x455/0xab0 [ 165.193565][ T7084] ? __pfx_ksys_unshare+0x10/0x10 [ 165.193585][ T7084] ? xfd_validate_state+0x129/0x190 [ 165.193613][ T7084] __x64_sys_unshare+0x31/0x40 [ 165.193633][ T7084] do_syscall_64+0xc9/0xf80 [ 165.193656][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.193671][ T7084] RIP: 0033:0x7f2ec619acb9 [ 165.193685][ T7084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.193699][ T7084] RSP: 002b:00007f2ec7032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 165.193714][ T7084] RAX: ffffffffffffffda RBX: 00007f2ec6416090 RCX: 00007f2ec619acb9 [ 165.193724][ T7084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 165.193733][ T7084] RBP: 00007f2ec6208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 165.193742][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.193751][ T7084] R13: 00007f2ec6416128 R14: 00007f2ec6416090 R15: 00007fffcf4daed8 [ 165.193771][ T7084] [ 166.304953][ T7106] netlink: zone id is out of range [ 166.364751][ T7105] netlink: set zone limit has 8 unknown bytes [ 166.399783][ T7106] netlink: zone id is out of range [ 166.465599][ T7106] netlink: zone id is out of range [ 166.498163][ T7106] netlink: zone id is out of range [ 166.539201][ T7106] netlink: zone id is out of range [ 166.552373][ T7106] netlink: zone id is out of range [ 166.571767][ T7106] netlink: zone id is out of range [ 166.586463][ T7106] netlink: zone id is out of range [ 166.615819][ T7106] netlink: zone id is out of range [ 166.891542][ T7093] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 166.922688][ T7093] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 166.965540][ T7093] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.001512][ T7093] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.125652][ T6469] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.937704][ T6469] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.015918][ T6066] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.025589][ T6469] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.239544][ T30] audit: type=1804 audit(1769371643.323:8): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.264" name="/newroot/65/file0" dev="tmpfs" ino=360 res=1 errno=0 [ 169.655554][ T30] audit: type=1804 audit(1769371643.713:9): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.264" name="/newroot/65/file0" dev="tmpfs" ino=360 res=1 errno=0 [ 170.248032][ T7175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 170.677181][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 170.687885][ T7188] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 170.697027][ T7188] netlink: 13 bytes leftover after parsing attributes in process `syz.2.271'. [ 170.727158][ T7189] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 171.047723][ T7196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.273'. [ 171.122608][ T30] audit: type=1800 audit(1769371645.203:10): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.274" name="lu_gp_id" dev="configfs" ino=13737 res=0 errno=0 [ 173.759549][ T7236] ptrace attach of "./syz-executor exec"[5825] was attempted by "N ˚:EmԺb}Ƨ8yqg;3.f;\x22_XS򖳖tʒLUwrE_& k[Rn]+TG\x07307L '];~ҡ޵Ϟا9h%!MBΪ,tu:\x0dZhU\x5c'\x0d\x0b78lĖvK\x0c1oDl3VQAKiaz\x5c'{.㪊uI5;2j~GRN-|ɒ%9Oem1hm=.>:(hUT\x0b@plRwߵ`\x0bL*#qchŽ2Qxn~MgbIrߘic7sfɭV>q8/l=\x5cvD* s+\x0aB}nF7#ekV(IU8s}`0Y҂y%z\x1b4)ԮP6iS\x0avb&;^\x0blL\x5cPD!yC\x5c%ko8t1q+]=j*37XO\x0d^w,iKR3\x0c%d&WQMaG*{ˇ&]v0\x1b}<=\x09EŢ(xfƠdA\x0d?w\x22g夶L#(Ѽz=IhNo;JìM8\x0cU%}ecG҇1(F5I~7r\x0bZ+Hrĸs 7vܳĈ4{># \x5c`>,r-f&Mze^/\x0bqu#bl>ck\x0b9\x5chF7S\x0cvئE~s3Wj,QIUzv{# [ 174.016944][ T7239] sp0: Synchronizing with TNC [ 174.227004][ T7242] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 175.322799][ T7257] FAULT_INJECTION: forcing a failure. [ 175.322799][ T7257] name failslab, interval 1, probability 0, space 0, times 0 [ 175.348251][ T7257] CPU: 1 UID: 0 PID: 7257 Comm: syz.2.285 Not tainted syzkaller #0 PREEMPT(full) [ 175.348289][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 175.348306][ T7257] Call Trace: [ 175.348315][ T7257] [ 175.348325][ T7257] dump_stack_lvl+0x100/0x190 [ 175.348354][ T7257] should_fail_ex.cold+0x5/0xa [ 175.348379][ T7257] should_failslab+0xc2/0x120 [ 175.348400][ T7257] __kmalloc_cache_noprof+0x80/0x810 [ 175.348416][ T7257] ? hugetlb_vma_lock_alloc+0xc3/0x1e0 [ 175.348438][ T7257] ? hugetlb_vma_lock_alloc+0xc3/0x1e0 [ 175.348456][ T7257] hugetlb_vma_lock_alloc+0xc3/0x1e0 [ 175.348473][ T7257] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 175.348498][ T7257] mmap_action_complete+0x231/0x400 [ 175.348520][ T7257] __mmap_region+0xc7e/0x2820 [ 175.348540][ T7257] ? __pfx___mmap_region+0x10/0x10 [ 175.348571][ T7257] ? kernel_text_address+0x8d/0x100 [ 175.348594][ T7257] ? __kernel_text_address+0xd/0x30 [ 175.348615][ T7257] ? unwind_get_return_address+0x59/0xa0 [ 175.348640][ T7257] ? __pfx_hugetlb_file_mmap_prepare_success+0x10/0x10 [ 175.348665][ T7257] ? stack_trace_save+0x8e/0xc0 [ 175.348706][ T7257] ? rcu_is_watching+0x12/0xc0 [ 175.348725][ T7257] mmap_region+0x30a/0x3e0 [ 175.348747][ T7257] do_mmap+0xc63/0x12f0 [ 175.348772][ T7257] ? __pfx_do_mmap+0x10/0x10 [ 175.348793][ T7257] ? __pfx_down_write_killable+0x10/0x10 [ 175.348816][ T7257] vm_mmap_pgoff+0x29e/0x470 [ 175.348841][ T7257] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 175.348861][ T7257] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 175.348885][ T7257] ? hugetlbfs_get_inode+0x36e/0x6f0 [ 175.348905][ T7257] ksys_mmap_pgoff+0x1c4/0x5b0 [ 175.348929][ T7257] __x64_sys_mmap+0x125/0x190 [ 175.348946][ T7257] do_syscall_64+0xc9/0xf80 [ 175.348965][ T7257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.348980][ T7257] RIP: 0033:0x7f5f9d99acb9 [ 175.348993][ T7257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.349007][ T7257] RSP: 002b:00007f5f9e808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 175.349024][ T7257] RAX: ffffffffffffffda RBX: 00007f5f9dc15fa0 RCX: 00007f5f9d99acb9 [ 175.349040][ T7257] RDX: 0000000000000003 RSI: 0000000000a00006 RDI: 0000000000000000 [ 175.349054][ T7257] RBP: 00007f5f9da08bf7 R08: ffffffffffffffff R09: 0000000000000000 [ 175.349069][ T7257] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 175.349094][ T7257] R13: 00007f5f9dc16038 R14: 00007f5f9dc15fa0 R15: 00007ffeb81b8198 [ 175.349129][ T7257] [ 175.349425][ T7257] HugeTLB: unable to allocate vma specific lock [ 175.561230][ T7260] __vm_enough_memory: pid: 7260, comm: syz.1.286, bytes: 8589938688 not enough memory for the allocation [ 176.027895][ T7272] Invalid ELF header magic: != ELF [ 176.238786][ T7266] blktrace: Concurrent blktraces are not allowed on loop2 [ 176.342246][ T7274] ------------[ cut here ]------------ [ 176.347962][ T7274] !reader [ 176.348036][ T7274] WARNING: kernel/trace/ring_buffer.c:7363 at ring_buffer_map_get_reader+0x659/0x880, CPU#1: syz.2.289/7274 [ 176.362540][ T7274] Modules linked in: [ 176.366973][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.2.289 Not tainted syzkaller #0 PREEMPT(full) [ 176.376297][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 176.386350][ T7274] RIP: 0010:ring_buffer_map_get_reader+0x659/0x880 [ 176.392907][ T7274] Code: ff e8 4b e1 fb ff 48 8d 3d 34 da b0 0e 4c 89 fe 67 48 0f b9 3a e9 e0 fc ff ff 4c 8b 7c 24 58 4c 8b 74 24 60 e8 28 e1 fb ff 90 <0f> 0b 90 e8 1f e1 fb ff 48 89 df 31 db e8 85 13 fe ff 48 8b 74 24 [ 176.412693][ T7274] RSP: 0018:ffffc900040bfd98 EFLAGS: 00010083 [ 176.418766][ T7274] RAX: 000000000000079e RBX: ffff88813fe28800 RCX: ffffc9000d1e0000 [ 176.426745][ T7274] RDX: 0000000000080000 RSI: ffffffff820a6958 RDI: ffff88802fb7db80 [ 176.434739][ T7274] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 176.442728][ T7274] R10: 0000000000000000 R11: ffff88813fe288b0 R12: ffff88813fe288b0 [ 176.450706][ T7274] R13: dffffc0000000000 R14: ffff88813fe28990 R15: ffff88813fe28818 [ 176.458703][ T7274] FS: 00007f5f9e7e76c0(0000) GS:ffff8881246e3000(0000) knlGS:0000000000000000 [ 176.467735][ T7274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.474321][ T7274] CR2: 0000001b30fdaff8 CR3: 000000007fb6e000 CR4: 00000000003526f0 [ 176.482485][ T7274] Call Trace: [ 176.485789][ T7274] [ 176.488744][ T7274] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 176.495098][ T7274] ? __fget_files+0x21f/0x3d0 [ 176.499881][ T7274] tracing_buffers_ioctl+0x30d/0x400 [ 176.505340][ T7274] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 176.511623][ T7274] __x64_sys_ioctl+0x18e/0x210 [ 176.516533][ T7274] do_syscall_64+0xc9/0xf80 [ 176.521087][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.527009][ T7274] RIP: 0033:0x7f5f9d99acb9 [ 176.531450][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.551082][ T7274] RSP: 002b:00007f5f9e7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.559520][ T7274] RAX: ffffffffffffffda RBX: 00007f5f9dc16090 RCX: 00007f5f9d99acb9 [ 176.567505][ T7274] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000005 [ 176.575480][ T7274] RBP: 00007f5f9da08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 176.583457][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.591437][ T7274] R13: 00007f5f9dc16128 R14: 00007f5f9dc16090 R15: 00007ffeb81b8198 [ 176.600143][ T7274] [ 176.603162][ T7274] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.610529][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.2.289 Not tainted syzkaller #0 PREEMPT(full) [ 176.619744][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 176.629811][ T7274] Call Trace: [ 176.633095][ T7274] [ 176.636028][ T7274] dump_stack_lvl+0x100/0x190 [ 176.640724][ T7274] vpanic+0x20d/0x630 [ 176.644718][ T7274] panic+0xd1/0xd1 [ 176.648622][ T7274] ? __pfx_panic+0x10/0x10 [ 176.653058][ T7274] check_panic_on_warn.cold+0x19/0x34 [ 176.658436][ T7274] ? ring_buffer_map_get_reader+0x659/0x880 [ 176.664341][ T7274] __warn.cold+0x191/0x2f8 [ 176.668765][ T7274] __report_bug+0x296/0x3d0 [ 176.673450][ T7274] ? ring_buffer_map_get_reader+0x659/0x880 [ 176.679357][ T7274] ? __pfx___report_bug+0x10/0x10 [ 176.684387][ T7274] ? check_noncircular+0x97/0x160 [ 176.689431][ T7274] ? add_lock_to_list+0x99/0x110 [ 176.694383][ T7274] ? lockdep_unlock+0x5a/0xc0 [ 176.699065][ T7274] ? rb_set_head_page+0x1e6/0x2f0 [ 176.704130][ T7274] ? ring_buffer_map_get_reader+0x659/0x880 [ 176.710147][ T7274] report_bug+0xb2/0x220 [ 176.714416][ T7274] ? ring_buffer_map_get_reader+0x659/0x880 [ 176.720322][ T7274] handle_bug+0x166/0x2a0 [ 176.724672][ T7274] exc_invalid_op+0x17/0x50 [ 176.729541][ T7274] asm_exc_invalid_op+0x1a/0x20 [ 176.734402][ T7274] RIP: 0010:ring_buffer_map_get_reader+0x659/0x880 [ 176.740919][ T7274] Code: ff e8 4b e1 fb ff 48 8d 3d 34 da b0 0e 4c 89 fe 67 48 0f b9 3a e9 e0 fc ff ff 4c 8b 7c 24 58 4c 8b 74 24 60 e8 28 e1 fb ff 90 <0f> 0b 90 e8 1f e1 fb ff 48 89 df 31 db e8 85 13 fe ff 48 8b 74 24 [ 176.760631][ T7274] RSP: 0018:ffffc900040bfd98 EFLAGS: 00010083 [ 176.766803][ T7274] RAX: 000000000000079e RBX: ffff88813fe28800 RCX: ffffc9000d1e0000 [ 176.774781][ T7274] RDX: 0000000000080000 RSI: ffffffff820a6958 RDI: ffff88802fb7db80 [ 176.782930][ T7274] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 176.790902][ T7274] R10: 0000000000000000 R11: ffff88813fe288b0 R12: ffff88813fe288b0 [ 176.798882][ T7274] R13: dffffc0000000000 R14: ffff88813fe28990 R15: ffff88813fe28818 [ 176.806919][ T7274] ? ring_buffer_map_get_reader+0x658/0x880 [ 176.812835][ T7274] ? ring_buffer_map_get_reader+0x658/0x880 [ 176.818845][ T7274] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 176.825098][ T7274] ? __fget_files+0x21f/0x3d0 [ 176.829788][ T7274] tracing_buffers_ioctl+0x30d/0x400 [ 176.835091][ T7274] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 176.840938][ T7274] __x64_sys_ioctl+0x18e/0x210 [ 176.845821][ T7274] do_syscall_64+0xc9/0xf80 [ 176.850345][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.856250][ T7274] RIP: 0033:0x7f5f9d99acb9 [ 176.860677][ T7274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.880407][ T7274] RSP: 002b:00007f5f9e7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.888846][ T7274] RAX: ffffffffffffffda RBX: 00007f5f9dc16090 RCX: 00007f5f9d99acb9 [ 176.896823][ T7274] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000005 [ 176.904796][ T7274] RBP: 00007f5f9da08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 176.912774][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.920842][ T7274] R13: 00007f5f9dc16128 R14: 00007f5f9dc16090 R15: 00007ffeb81b8198 [ 176.928837][ T7274] [ 176.932270][ T7274] Kernel Offset: disabled [ 176.936590][ T7274] Rebooting in 86400 seconds..