last executing test programs: 8.932850148s ago: executing program 1 (id=635): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xfffffff7, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/rawdata_compression_level\x00', 0x80, 0x0) read$auto(r1, 0x0, 0x9) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x20000000000000e2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) ioctl$auto(0xc8, 0x800454d2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_selected\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/151, 0x97) setsockopt$auto(0x3, 0x0, 0x22, 0x0, 0x10001) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xffffffffffffffff, 0x8004) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000008640)='/sys/devices/platform/vidtv.0/i2c-0/i2c-dev/i2c-0/name\x00', 0x5a5480, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000008680)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf251f0000000800010049f40000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r5, 0x4004743d, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1248}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x80000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x9) openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/fail_make_request/space\x00', 0x2, 0x0) writev$auto(r3, &(0x7f0000000000)={0x0, 0xc}, 0x3) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="08010040", @ANYRES16=0x0, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 8.159688242s ago: executing program 1 (id=639): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x4) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2?', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) socket(0x7, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) set_mempolicy$auto(0x6, 0x0, 0x21) unshare$auto(0x40000080) chdir$auto(0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) waitid$auto_P_PID(0x1, 0x0, 0x0, 0xf, &(0x7f0000000440)={{0x7, 0x24}, {0x929a, 0x1ff}, 0x9, 0x3, 0x4032, 0xfffffffffffffff4, 0x4df, 0x0, 0x8, 0x8fb000, 0x0, 0x100, 0x4, 0x3, 0xd, 0x1}) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) socket(0x1d, 0x4, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x9, 0x7, 0x8, 0x4, 0x9, 0x100, 0x1ff, 0xfffffffc, 0xfffffffe}) 6.237276657s ago: executing program 1 (id=645): sync_file_range$auto(0xffffffffffffffff, 0x1, 0xa31e, 0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) timer_create$auto(0x9, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0x100082) 5.654862799s ago: executing program 2 (id=648): statmount$auto(0x0, &(0x7f0000000180)={0x80000006, 0x1, 0x1000000000000000, 0x7, 0x7, 0x8, 0x5, 0xffffffff, 0x2000000000210404, 0x0, 0x7, 0x5, 0x2, 0x7, 0xb2, 0x6, 0x8, 0x3, 0xa, 0x7, 0xbd, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x100000, 0x0, [0x99, 0x2, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xcd1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xfffffffffffffff5, 0x4, 0x0, 0xfdffffffffffff81, 0x7, 0x4, 0x0, 0x0, 0x200000000000000, 0x1d6, 0x200, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_VDPA_CMD_DEV_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x5}, @VDPA_ATTR_MGMTDEV_BUS_NAME={0x5, 0x1, '\x00'}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0xf, 0xa, "f10fe4f799d918e7701981"}, @VDPA_ATTR_DEV_NAME={0x14, 0x4, 'virt_wifi0\x00'}, @VDPA_ATTR_DEV_NET_CFG_MACADDR={0x4}, @VDPA_ATTR_DEV_NET_CFG_MAX_VQP={0x6, 0xc, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0xc000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x5fffffd, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000380), 0x9, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) 5.625975427s ago: executing program 1 (id=649): mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00'}) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x1, 0x0) (async) open(0x0, 0x22240, 0x155) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) clone$auto(0x1, 0x8, 0x0, 0x0, 0x9) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0x20499d, 0x9) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x22240, 0x154) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0xa, 0x2, 0x73) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvfrom$auto(r1, 0x0, 0x8, 0xdcf5, 0x0, 0x0) socket(0x29, 0x2, 0x0) (async) mmap$auto(0x0, 0x100, 0x0, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) (async) ioprio_set$auto(0x3, 0x0, 0x4b34) 4.779717947s ago: executing program 2 (id=652): openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000c9edd8fa6574a16208000300", @ANYRES32=r2], 0x2c}}, 0x4000000) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) lseek$auto(r3, 0x9, 0x0) getdents$auto(r3, &(0x7f00000004c0)={0x100, 0xa, 0x4}, 0x62d4) read$auto_hwsim_fops_ps_(r3, 0x0, 0xfffffffffffffea8) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) 4.4324103s ago: executing program 2 (id=655): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x55) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x80000000, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) epoll_create1$auto(0x0) 4.290548643s ago: executing program 3 (id=656): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyc1\x00', 0x0, 0x0) r0 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/kvm/irq_exits\x00', 0xaa042, 0x0) read$auto(0x3, 0x0, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) setresuid$auto(0x0, 0x8, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/erspan0/statistics/rx_over_errors\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/44, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) r4 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000180), r1) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="00042dbd7000fddbdf2508000000080001000608000408000100070000000800010000000000e400028008001900", @ANYRES32=r5, @ANYBLOB="9b71f5f9ea9e74dac08d0bc45a1ea3e84a49223668af211867baf099334976efbd9909145a26df38e91ecd5c33f4d7b9d47f7ae9d63abee4055f0e16cd428bce9c4412c8673619a8a7f834d3e926c6af767c95549eabefd71b7e36c812658c7706ca5fe06105c4f93c49d4fe95e2de005569de85876b3ec36b0437fa570eddeb95d430ea83e6207a4f09c0b1406e07ef72798170ad73e62f3ec4fa5cce522b0928b33deade813961fa0f7aa2cd29d821babf71f51e08e2658e12c2871c0012800800f300640101000c00290005000000000000000400ec00"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x40) write$auto(0x3, 0x0, 0x3f00) set_mempolicy$auto(0xfffffff7, &(0x7f0000000040)=0x2, 0xfffffffffffffffd) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x9, 0x0, &(0x7f0000000000)=0x3) timer_delete$auto(0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) read$auto(r0, &(0x7f00000000c0)='*#%]]:-}}#*}!\x00', 0x7fffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) connect$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}, 0x2}}, 0x3) 3.927292637s ago: executing program 1 (id=657): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x3ff, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) r2 = open(0x0, 0x1239c3, 0x86) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897071b", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r2, 0x5382, &(0x7f0000000380)="c68084ba6f3a3e556ef20ee318bf609f5b663b60731fa0b91283198b52852fa65cf0c231ad042150e87b256b0d70bbad1582d45778388c083e8c55d986063c73c9d7408794f9413dec87b63b21142783c60a6f1a58fb50152f503f3ecb754a72b3879b2eda0bff1752e356425dc5ffe0bf58fa126bfbca9809f650599db63966ac5d55b1b0fc4dd119cbb5616418317b1159659883fe98ca1397e5599a14ee62f6e3c326de01f1f16e5b540ea9f8fe92d71ac7ee119df70d7eabe207a113c278becee50010e9c285b49a133f175a") r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0xaafc, &(0x7f00000002c0)=@bpf_attr_4={0xfffffffffffffffd, r4, 0x105, r1}, 0x401) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x60140, 0x0) 3.625286222s ago: executing program 0 (id=658): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x9, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000300)="dc") mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) openat2$auto(0xffffffffffffff9c, 0x0, 0x0, 0xf6) r1 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_general\x00', 0x40aa2, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0xc) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b71, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x81, 0x0, 0x14) write$auto(0x3, 0x0, 0xfffffdef) 3.343505825s ago: executing program 1 (id=659): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2cd2cc3aa9633c3668b1128be76976577ef8b494eb27dd7c5c3009036684e6ce3fba9b6c44624a383a1a8daaf2a07cdc3efb51136711a3d8b8d74233b4c4ecce84f9d2a5ca501114d56c1a0499ae8acb22ed5caafa45df6d315664bd5e8188ad7fe06a284669d94a69dc6fb65b3fed2d93b01461860e9360cb1674e2869745a587809f441d6c6e3b306ec365b787e5b9b57f29", 0xb4) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) madvise$auto(0x7, 0x338d, 0x6) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x737201, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) 3.190159387s ago: executing program 3 (id=660): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) kill$auto(0x0, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(0x1, 0x5421, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000040)={0x1c, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x15, 0x5, 0x0) r4 = getsockopt$auto(r3, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r4) statmount$auto(&(0x7f0000000000)={0x81, @inferred, 0x5, 0xffffffff, 0xfffffffffffffff2}, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5}, 0x800, 0x0) r6 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) write$auto_media_devnode_fops_mc_devnode(r6, 0x0, 0x0) r7 = getpid() r8 = gettid() rt_tgsigqueueinfo$auto(r7, r8, 0x21, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d0, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_MASK={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @pid=r7}]}, @OVS_FLOW_ATTR_ACTIONS={0x19c, 0x2, 0x0, 0x1, [@generic="c147ddf87ef472c11162f52381a55d60d40538408003dc8c471d40b4fb79dbeeeb43d26c84fa41a90cb211d0ba3726", @generic="3479247d40898500d78c61eea1bcdcc3f5caa7dbb6a7331e8c6457b437ed25d8a8fdc2973437e35e82b32e4bf91a4b7d66b4789e3eb403fceb66d03d8700f45bac6b00ed1c6e9530c792b33a11c252a73488abd557e8154f5c5e748aca", @nested={0x10b, 0x27, 0x0, 0x1, [@nested={0x4, 0x2e}, @typed={0xc, 0x124, 0x0, 0x0, @u64=0x95e6}, @generic="c82f9f7754f6573ec2f4736af38480720a0334cabc7856ed2f016ac11ab52f7e282a8c70c1f86c9ec56a961d0d8344a20e85141a0d5b7d709fdac55ec6a74aef9a9e6d62e012ca44d6d2d179d17bf8d37f87439442333523e1e75e5240af0bcc845360e1beb5308f6e1e885b12af740f06e1d4ffbf9551fc80c3caac7bcbbd483af3479cae9b0180af9d439234e8515ec87ea72d223d3d93bf9e2880b338b457dad7584b2b2001832f2f531c2cce5a155dbd36647032995cbf7860a75c8301dcb5fe3528e605c58dc8b21a9e720b1d6087c37eabbd1e12c485efef5b94bae711ddca773010123e9b1c5596cc2b6c05b85ec78c", @nested={0x4, 0x2}]}]}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x43}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1d0}}, 0x1) prctl$auto_PR_SET_MM_ENV_END(0x300, 0xb, r7, 0x1, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="250427bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = socket(0xa, 0x1, 0x84) getsockopt$auto(r9, 0x0, 0x34, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote\x00', 0x1, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) open_tree$auto(0xffffffffffffffff, 0x0, 0xc369) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 3.115763846s ago: executing program 0 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x101101, 0x0) writev$auto(r3, &(0x7f0000007240)={0x0, 0x9dc}, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000ffdbdf250100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYRES8=r6, @ANYRES16=r2, @ANYBLOB="00012bbd7076a1df25a36e16efc1736819dd2c4661f3be7be78c3ffb762838bffe87574c6e346366663cd3812a1dd69de001526483827a9fbd5019a1c50f70d74b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24014005) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)='y%', 0xffffffff}, 0x4, 0x0) syz_clone(0x800, &(0x7f0000000300)="8d2672ffb65e6de48ad550d120854078982e625596b038bd23fd7e63b9e5062dc52cd2540d887ab0df1858f3402bbb0604e7cd83e4c4e172d469cc1370c5fe07c33a81688ba4be8fe66c2520410fc1d2d1980537f0d0b5ce483ca104beaf4ed60786568e9d6b0e736d7f9942f9379374dbdff2468e2083fca6059dd63472620d4b04e283d0eb0e1b25fe59dce4f0f22b86c3018f41a4f3936c589e858b2088d417b6064bf46a1b91b3fc7f0a01906b4f9d6731c377467b27397bccd4a4181f6574c49dbf5cf0ab71373b8cd6940bb189aa75985bb4f8a110e413597c332fddb02d", 0xe1, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200)="16ca9d9024a20db5d471d46a334ebc2764ffac7042b9d5d7451c65106512a0c1b5a06594d8fc93bc9f5aeb1c5ac5e008d5004f841415031f05c46f3aec79bb1af32fa0513367544ac53fd89132eb2988ff0093fa5628363d4984cf5ab482c98d9102f79dbbcc4a") r7 = socket(0x2, 0x801, 0x106) setsockopt$auto(r7, 0x6, 0x3, 0x0, 0xa1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r8, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="000327bd7000fbdbdf25010017da6ca6bec9b1ee434f1bfd1aa7b09436b60008000000000000fe"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$auto_TIPC_NL_MON_SET(r9, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x1fc}, 0x1, 0x0, 0x0, 0x44080}, 0x4080) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec1\x00', 0x101901, 0x0) read$auto(r0, &(0x7f00000004c0)=':)%-\x00', 0x1) 2.952367922s ago: executing program 3 (id=662): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r0, 0x7003, 0x4) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2?', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) socket(0x7, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) set_mempolicy$auto(0x6, 0x0, 0x21) unshare$auto(0x40000080) chdir$auto(&(0x7f0000000340)='./file1\x00') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) waitid$auto_P_PID(0x1, 0x0, 0x0, 0xf, &(0x7f0000000440)={{0x7, 0x24}, {0x929a, 0x1ff}, 0x9, 0x3, 0x4032, 0xfffffffffffffff4, 0x4df, 0x0, 0x8, 0x8fb000, 0x0, 0x100, 0x4, 0x3, 0xd, 0x1}) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) socket(0x1d, 0x4, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) ioctl$auto_RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000180)={0x9, 0x7, 0x8, 0x4, 0x9, 0x100, 0x1ff, 0xfffffffc, 0xfffffffe}) 2.44988809s ago: executing program 0 (id=663): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/bus/mdio_bus/drivers/Microchip LAN937x TX/bind\x00', 0x4a000, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x26, 0x5, 0x8c68) (async) ioperm$auto(0x4, 0x100000001, 0x4000005) futex_waitv$auto(&(0x7f0000000040)={0x9, 0xffffffffffffffff, 0xc}, 0x7ff, 0x8, &(0x7f00000000c0)={0x1000000004, 0x10}, 0x4) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/tty56\x00', 0x74c40, 0x0) (async) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) sysfs$auto(0x2, 0x7, 0x0) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41005}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0xfffffffffffffd2d, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_TTLM_ULINK={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [@typed={0xc, 0x69, 0x0, 0x0, @u64=0x9}]}, @NL80211_ATTR_AUTH_DATA={0x1d, 0x9c, "157b88938687cadf8f2c8f54c1aa1f8548e1fbf1c0b93ba8f7"}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x7}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28040000}, 0x0) (async) r3 = ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)={0x7, 0x3e, 0x80, @raw=0x9}}) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r3, 0x6, &(0x7f00000001c0)="46a03e98c00d5dd3b483d34ba198d5e2a0677bf40564840c4f26027c") (async) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) (async) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) (async) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r5, 0x0, 0xb4d3) (async) unshare$auto(0x40000080) (async) setsockopt$auto(0xffffffffffffffff, 0xd0, 0x800000e4, 0x0, 0x569) 1.736910202s ago: executing program 2 (id=664): close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) writev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000140)="6f0652c6086ae0a2fe7ab4fa6240270adb45e1a618e291796886fc09ad6a0f5e589370cb94080bbef19b1e212655c621c94ee58d38b93391ee04cf580d3228d761076197a69792f3c9d55ba8aa142016aa036adb69e8f87b", 0x7}, 0x3) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/filesystems\x00', 0x2, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000280)=""/144, 0x90) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) (async) eventfd2$auto(0x7f, 0xfffffffc) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0x9, "74a517f574545f6e56dd0a76e95f7ebe732ad2c90cf711c0bb363ed3997e3e14", @raw=0x6}) (async) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) (async) read$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000) (async) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socketpair$auto(0x1000, 0x4, 0xffffffff, 0x0) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/rxrpc/calls\x00', 0x40280, 0x0) pread64$auto(r2, &(0x7f0000000140)='ve\xc8)\xb2\x8e\xc1Ph\x93D\a[\x99\xf7\xa0\xb1#\xa1\x97\x05\x9b\xd9', 0x200000000004, 0x101) (async) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x6, 0x44f, 0xa, 0x2, 0x1007181, 0x8a0d, 0x4, 0x10007, 0x7, 0x89, 0x29, 0x4, 0x200000000000, 0xfffffffffffff340, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x3, 0x3fd, 0x22000, 0xc2fc, 0xfffffffc, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x70de, 0x0, 0xe573, 0xb7, 0x0, 0x0, 0x5, 0xd40c, 0xd, 0x100000, 0xffff, 0x84, 0x7, 0x1fe, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x49, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x400000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe, 0x3, 0x3, 0x0, 0xa43, 0xfffffffffffffffd, 0x7fffffffffffffff]}, 0xff, 0xd) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) ioctl$auto(r3, 0x5457, 0x38) (async) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd04, &(0x7f00000001c0)) (async) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 1.010977885s ago: executing program 2 (id=665): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/irq/11/effective_affinity\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x7) (async) bind$auto(0x3, 0x0, 0x6a) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) (async) r0 = socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) (async, rerun: 32) socket(0x2, 0x1, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2a, 0xa, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) (async) io_uring_setup$auto(0x1, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) fcntl$auto(0x3, 0x4000ea, 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$auto_TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001400)=ANY=[@ANYBLOB="0002", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (rerun: 64) r5 = semctl$auto(0x0, 0x14, 0x9, 0x2) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x154, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x98, 0x7, 0x0, 0x1, [@generic="0ae9e5f72cdc078486738b03ec441a7a8a934aa1bfbf18b1a127effc1d3a8d1932c9a3d136c62252425ed13fa1fee45a60beb2af0ef0a869bd2a29330a53b01ba6dc9577609d9571ff8613643c4d5242aed3068e0bc524d346196bf3", @typed={0x8, 0x3b, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x96, 0x0, 0x0, @uid}, @typed={0x8, 0x105, 0x0, 0x0, @u32=0x5}, @typed={0x15, 0x9b, 0x0, 0x0, @binary="5688be0561bdae9738a4858a3ed24b53fd"}, @typed={0x8, 0xdc, 0x0, 0x0, @pid=r5}]}, @TIPC_NLA_MEDIA={0xa6, 0x5, 0x0, 0x1, [@generic="fed9e44fe1e75ab8d91a27cf1bff14dbdc1bd9faf074c427ebca1c9cc7009507e2a42756f69fe189b081205a04bbc825e75ab5bc82e51bfa7eaf1002ede88aab79e8e76789ef3b514a9952f6de71c47416bdfcd9937e2282215ab9a12075f3de145184dd1e1542061d326f8ccdf3c8dd015ec75b455a4c465eafec84c42cce2c460be742f6be1a559646d0530f75b2bda4b80f909ee469ab4ab8", @typed={0x8, 0x149, 0x0, 0x0, @uid}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8085}, 0x4000094) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) (async, rerun: 32) r6 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0xa800, 0x0) (async, rerun: 32) r7 = set_tid_address$auto(&(0x7f0000000080)=0x8001) ioctl$auto_LOOP_CTL_GET_FREE(r6, 0x4c82, r7) read$auto_uprobe_events_ops_trace_uprobe(r3, &(0x7f0000000040), 0x0) 1.010648622s ago: executing program 0 (id=666): prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x3, 0x52e, 0x5, 0x3) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x80000001, 0x2, 0x5d44, 0x1) (async) prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x80000001, 0x2, 0x5d44, 0x1) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="99cb9d0ac5e7ca3d"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) 671.110462ms ago: executing program 3 (id=667): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x20001, 0x0) write$auto(r2, &(0x7f0000009fc0)=']/\\,^-.),:\x00', 0x81a) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20008040) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf2503000000040008000c0001800800100004"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000081}, 0x801) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x6}, 0x3, 0x0) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) timer_delete$auto(0x0) write$auto(r4, &(0x7f0000000000)='\x00', 0x9) 548.469159ms ago: executing program 0 (id=668): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x3ff, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) r2 = open(0x0, 0x1239c3, 0x86) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{0x0, 0xf2cf, 0x1ff, 0x4}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) r3 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a32457895897071b", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) ioctl$auto_SCSI_IOCTL_GET_IDLUN2(r2, 0x5382, &(0x7f0000000380)="c68084ba6f3a3e556ef20ee318bf609f5b663b60731fa0b91283198b52852fa65cf0c231ad042150e87b256b0d70bbad1582d45778388c083e8c55d986063c73c9d7408794f9413dec87b63b21142783c60a6f1a58fb50152f503f3ecb754a72b3879b2eda0bff1752e356425dc5ffe0bf58fa126bfbca9809f650599db63966ac5d55b1b0fc4dd119cbb5616418317b1159659883fe98ca1397e5599a14ee62f6e3c326de01f1f16e5b540ea9f8fe92d71ac7ee119df70d7eabe207a113c278becee50010e9c285b49a133f175a") r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0xaafc, &(0x7f00000002c0)=@bpf_attr_4={0xfffffffffffffffd, r4, 0x105, r1}, 0x401) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x60140, 0x0) 291.583407ms ago: executing program 3 (id=669): pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/224, 0xfdef, 0x3) 185.410171ms ago: executing program 0 (id=670): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/026/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x63384e20) (async) ioctl$auto_USBDEVFS_RESET(r0, 0x5514, 0x0) (async) mmap$auto(0x0, 0x400005, 0x6, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (async) prctl$auto(0x77, 0x1, 0x0, 0x5, 0xc7d) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/minimum_io_size\x00', 0x40480, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x88042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x500) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffffb) (async) prctl$auto(0x3e, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) socket(0x2, 0x1, 0x106) (async) epoll_pwait2$auto(0xffffffffffffffff, 0xfffffffffffffffc, 0x1000, 0x0, 0x0, 0x8) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) (async) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r3, 0x5420, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) ioprio_set$auto(0x3, 0x0, 0x4b34) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) (async) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) 102.433349ms ago: executing program 3 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000006380), 0x101101, 0x0) writev$auto(r3, &(0x7f0000007240)={0x0, 0x9dc}, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010300000000ffdbdf250100000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYRES8=r6, @ANYRES16=r2, @ANYBLOB="00012bbd7076a1df25a36e16efc1736819dd2c4661f3be7be78c3ffb762838bffe87574c6e346366663cd3812a1dd69de001526483827a9fbd5019a1c50f70d74b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24014005) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)='y%', 0xffffffff}, 0x4, 0x0) syz_clone(0x800, &(0x7f0000000300)="8d2672ffb65e6de48ad550d120854078982e625596b038bd23fd7e63b9e5062dc52cd2540d887ab0df1858f3402bbb0604e7cd83e4c4e172d469cc1370c5fe07c33a81688ba4be8fe66c2520410fc1d2d1980537f0d0b5ce483ca104beaf4ed60786568e9d6b0e736d7f9942f9379374dbdff2468e2083fca6059dd63472620d4b04e283d0eb0e1b25fe59dce4f0f22b86c3018f41a4f3936c589e858b2088d417b6064bf46a1b91b3fc7f0a01906b4f9d6731c377467b27397bccd4a4181f6574c49dbf5cf0ab71373b8cd6940bb189aa75985bb4f8a110e413597c332fddb02d", 0xe1, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200)="16ca9d9024a20db5d471d46a334ebc2764ffac7042b9d5d7451c65106512a0c1b5a06594d8fc93bc9f5aeb1c5ac5e008d5004f841415031f05c46f3aec79bb1af32fa0513367544ac53fd89132eb2988ff0093fa5628363d4984cf5ab482c98d9102f79dbbcc4a") r7 = socket(0x2, 0x801, 0x106) setsockopt$auto(r7, 0x6, 0x3, 0x0, 0xa1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'rose0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r8, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="000327bd7000fbdbdf25010017da6ca6bec9b1ee434f1bfd1aa7b09436b60008000000000000fe"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$auto_TIPC_NL_MON_SET(r9, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x1fc}, 0x1, 0x0, 0x0, 0x44080}, 0x4080) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec1\x00', 0x101901, 0x0) read$auto(r0, &(0x7f00000004c0)=':)%-\x00', 0x1) 0s ago: executing program 2 (id=672): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x4, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyra\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. [ 69.824206][ T5809] cgroup: Unknown subsys name 'net' [ 69.939319][ T5809] cgroup: Unknown subsys name 'cpuset' [ 69.948947][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.381092][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.387915][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.441328][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.306551][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.317296][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.319784][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.325261][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.334930][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.340336][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.348219][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.356870][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.363162][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.368477][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.375766][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.382307][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.390763][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.404289][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.406430][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.411897][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.422965][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.432873][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.453733][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.471447][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.864632][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 74.118053][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.126047][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.133557][ T5821] bridge_slave_0: entered allmulticast mode [ 74.142167][ T5821] bridge_slave_0: entered promiscuous mode [ 74.159954][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 74.175215][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 74.191500][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 74.202495][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.209698][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.216917][ T5821] bridge_slave_1: entered allmulticast mode [ 74.223932][ T5821] bridge_slave_1: entered promiscuous mode [ 74.301330][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.344013][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.439832][ T5821] team0: Port device team_slave_0 added [ 74.483071][ T5821] team0: Port device team_slave_1 added [ 74.499589][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.507326][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.514479][ T5820] bridge_slave_0: entered allmulticast mode [ 74.521787][ T5820] bridge_slave_0: entered promiscuous mode [ 74.528868][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.536344][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.543503][ T5828] bridge_slave_0: entered allmulticast mode [ 74.550683][ T5828] bridge_slave_0: entered promiscuous mode [ 74.578590][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.585819][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.593090][ T5820] bridge_slave_1: entered allmulticast mode [ 74.600622][ T5820] bridge_slave_1: entered promiscuous mode [ 74.607853][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.615326][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.623273][ T5828] bridge_slave_1: entered allmulticast mode [ 74.630397][ T5828] bridge_slave_1: entered promiscuous mode [ 74.648105][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.655278][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.663077][ T5822] bridge_slave_0: entered allmulticast mode [ 74.670614][ T5822] bridge_slave_0: entered promiscuous mode [ 74.699238][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.706646][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.732858][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.745135][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.752588][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.759959][ T5822] bridge_slave_1: entered allmulticast mode [ 74.767229][ T5822] bridge_slave_1: entered promiscuous mode [ 74.799260][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.806419][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.832526][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.857123][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.868974][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.902589][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.914225][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.936162][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.978156][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.009613][ T5828] team0: Port device team_slave_0 added [ 75.022290][ T5821] hsr_slave_0: entered promiscuous mode [ 75.028688][ T5821] hsr_slave_1: entered promiscuous mode [ 75.049638][ T5820] team0: Port device team_slave_0 added [ 75.070627][ T5828] team0: Port device team_slave_1 added [ 75.079845][ T5820] team0: Port device team_slave_1 added [ 75.087900][ T5822] team0: Port device team_slave_0 added [ 75.124034][ T5822] team0: Port device team_slave_1 added [ 75.148860][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.155910][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.182449][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.225774][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.232753][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.259382][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.271076][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.278369][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.305026][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.317835][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.325045][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.351401][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.397136][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.404102][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.430638][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.442728][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.450086][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.476879][ T5825] Bluetooth: hci0: command tx timeout [ 75.476943][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.536458][ T5836] Bluetooth: hci2: command tx timeout [ 75.536461][ T5831] Bluetooth: hci1: command tx timeout [ 75.536832][ T5825] Bluetooth: hci3: command tx timeout [ 75.558948][ T5828] hsr_slave_0: entered promiscuous mode [ 75.565235][ T5828] hsr_slave_1: entered promiscuous mode [ 75.571719][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 75.577584][ T5828] Cannot create hsr debugfs directory [ 75.622742][ T5822] hsr_slave_0: entered promiscuous mode [ 75.629547][ T5822] hsr_slave_1: entered promiscuous mode [ 75.636141][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 75.641881][ T5822] Cannot create hsr debugfs directory [ 75.732558][ T5820] hsr_slave_0: entered promiscuous mode [ 75.738961][ T5820] hsr_slave_1: entered promiscuous mode [ 75.745037][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 75.750982][ T5820] Cannot create hsr debugfs directory [ 76.130593][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.151233][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.162186][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.180196][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.228475][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.241837][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.255034][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.266326][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.362709][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.373352][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.387906][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.409105][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.486771][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.498970][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.523932][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.537310][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.631646][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.681301][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.702608][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.709880][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.734550][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.743799][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.750949][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.831724][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.856545][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.879213][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.898871][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.906194][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.931303][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.938518][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.953205][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.033054][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.055113][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.062327][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.073150][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.080361][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.115243][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.123384][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.151244][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.158503][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.257732][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.458700][ T5821] veth0_vlan: entered promiscuous mode [ 77.491544][ T5821] veth1_vlan: entered promiscuous mode [ 77.537896][ T5825] Bluetooth: hci0: command tx timeout [ 77.581736][ T5821] veth0_macvtap: entered promiscuous mode [ 77.615828][ T5825] Bluetooth: hci3: command tx timeout [ 77.616025][ T5831] Bluetooth: hci2: command tx timeout [ 77.621275][ T5825] Bluetooth: hci1: command tx timeout [ 77.638989][ T5821] veth1_macvtap: entered promiscuous mode [ 77.704257][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.718881][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.742674][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.753026][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.787851][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.799142][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.818454][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.828562][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.842596][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.896550][ T5828] veth0_vlan: entered promiscuous mode [ 77.908955][ T5828] veth1_vlan: entered promiscuous mode [ 78.004480][ T5822] veth0_vlan: entered promiscuous mode [ 78.019509][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.033663][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.074571][ T5822] veth1_vlan: entered promiscuous mode [ 78.092480][ T5828] veth0_macvtap: entered promiscuous mode [ 78.109060][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.118684][ T5820] veth0_vlan: entered promiscuous mode [ 78.127100][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.147078][ T5828] veth1_macvtap: entered promiscuous mode [ 78.170343][ T5820] veth1_vlan: entered promiscuous mode [ 78.225459][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.243610][ T5822] veth0_macvtap: entered promiscuous mode [ 78.253017][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.267766][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.301926][ T5822] veth1_macvtap: entered promiscuous mode [ 78.309968][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.321857][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.378841][ T5820] veth0_macvtap: entered promiscuous mode [ 78.391785][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.430097][ T5820] veth1_macvtap: entered promiscuous mode [ 78.442291][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.457565][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.492043][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.509151][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.552550][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.567251][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.585743][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.637671][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.656821][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.710446][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.747894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.756074][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.764952][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.777065][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.792506][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.994831][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.004836][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.034569][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.049343][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.143043][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.151720][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.362701][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.382393][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.596771][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.613484][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.623730][ T5836] Bluetooth: hci0: command tx timeout [ 79.680873][ T5920] udc dummy_udc.0: soft-connect without a gadget driver [ 79.700219][ T5836] Bluetooth: hci1: command tx timeout [ 79.700483][ T5825] Bluetooth: hci2: command tx timeout [ 79.705701][ T5831] Bluetooth: hci3: command tx timeout [ 79.706542][ T5924] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 79.971408][ T5920] ptp ptp0: new virtual clock ptp1 [ 80.000481][ T5920] ptp ptp0: new virtual clock ptp2 [ 80.036906][ T5920] ptp ptp0: new virtual clock ptp3 [ 80.066061][ T5920] ptp ptp0: guarantee physical clock free running [ 80.277184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.286735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.345839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 80.354800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 80.546816][ T5916] can: request_module (can-proto-3) failed. [ 80.598761][ T5942] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.610241][ T5942] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.876264][ T5942] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.980273][ T5942] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.987041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.016392][ T5942] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.166069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.225694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.250288][ T5942] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.266274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.275945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 81.444301][ T5942] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.451997][ T5942] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.488916][ T5942] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.516062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.536500][ T5942] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.569082][ T5942] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.759708][ T5942] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.867307][ T5944] can: request_module (can-proto-3) failed. [ 81.969108][ T5959] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 82.046270][ T5961] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 82.304840][ T5961] Zero length message leads to an empty skb [ 82.408731][ T5961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.656809][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.783086][ T5950] zswap: compressor not available [ 82.867279][ T5965] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 83.066008][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 83.466697][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.618345][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.919549][ T5975] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.926555][ T5975] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.934519][ T5975] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.976053][ T5975] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.976328][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.936738][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.942813][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.016959][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.661286][ T6009] hub 1-0:1.0: USB hub found [ 86.667364][ T6009] hub 1-0:1.0: 1 port detected [ 86.741475][ T797] cfg80211: failed to load regulatory.db [ 86.820218][ T6000] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 87.055916][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.591945][ T6020] futex_wake_op: syz.1.19 tries to shift op by -2048; fix this program [ 87.635857][ T6020] futex_wake_op: syz.1.19 tries to shift op by -2048; fix this program [ 87.697520][ T6020] 0x000000000001-0x000000020000 : "" [ 87.751855][ T6020] ftl_cs: FTL header corrupt! [ 88.019827][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.026765][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.095746][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.008105][ T6029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.054888][ T6029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 89.083367][ T6029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 89.094043][ T6029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 90.496337][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.550078][ T6046] syz.0.24 (6046) used greatest stack depth: 17000 bytes left [ 90.929263][ T6075] random: crng reseeded on system resumption [ 91.065689][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.136435][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.142559][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.429930][ T6142] FAULT_INJECTION: forcing a failure. [ 94.429930][ T6142] name failslab, interval 1, probability 0, space 0, times 1 [ 94.448197][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.0.43 Not tainted syzkaller #0 PREEMPT(full) [ 94.448235][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.448259][ T6142] Call Trace: [ 94.448268][ T6142] [ 94.448284][ T6142] dump_stack_lvl+0x100/0x190 [ 94.448339][ T6142] should_fail_ex.cold+0x5/0xa [ 94.448379][ T6142] ? lsm_blob_alloc+0x68/0x90 [ 94.448409][ T6142] should_failslab+0xc2/0x120 [ 94.448437][ T6142] __kmalloc_noprof+0xe0/0x850 [ 94.448483][ T6142] ? trace_kmem_cache_alloc+0xf3/0x120 [ 94.448523][ T6142] lsm_blob_alloc+0x68/0x90 [ 94.448560][ T6142] security_sk_alloc+0x2d/0x290 [ 94.448600][ T6142] sk_prot_alloc+0x1d1/0x2a0 [ 94.448642][ T6142] sk_alloc+0x36/0xe80 [ 94.448670][ T6142] smc_create+0x11a/0x290 [ 94.448725][ T6142] __sock_create+0x339/0x860 [ 94.448786][ T6142] __sys_socket+0x14d/0x260 [ 94.448841][ T6142] ? __pfx___sys_socket+0x10/0x10 [ 94.448896][ T6142] __x64_sys_socket+0x72/0xb0 [ 94.448936][ T6142] ? lockdep_hardirqs_on+0x78/0x100 [ 94.448968][ T6142] do_syscall_64+0x106/0xf80 [ 94.448998][ T6142] ? clear_bhb_loop+0x40/0x90 [ 94.449039][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.449068][ T6142] RIP: 0033:0x7fca4399c799 [ 94.449098][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.449130][ T6142] RSP: 002b:00007fca448c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 94.449164][ T6142] RAX: ffffffffffffffda RBX: 00007fca43c16090 RCX: 00007fca4399c799 [ 94.449187][ T6142] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 94.449204][ T6142] RBP: 00007fca43a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 94.449229][ T6142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.449249][ T6142] R13: 00007fca43c16128 R14: 00007fca43c16090 R15: 00007ffc48a35d88 [ 94.449287][ T6142] [ 95.721573][ T6171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.878124][ T6156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.885477][ T6156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.893090][ T6156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.916535][ T6156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.188858][ T6180] netlink: 318 bytes leftover after parsing attributes in process `syz.3.54'. [ 97.136481][ T6195] Invalid ELF header magic: != ELF [ 97.458212][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.935664][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.943470][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.950399][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.099128][ T6209] can: request_module (can-proto-3) failed. [ 99.704155][ T6133] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.184005][ T29] audit: type=1400 audit(1772287828.638:2): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6235 comm="syz.2.68" [ 100.486323][ T797] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.512052][ T797] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.541960][ T797] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.550615][ T797] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.627034][ T797] rtc rtc0: __rtc_set_alarm: err=-22 “ÇIãjníüú¡9»_UÏ´îVQ8Àñj@:Un M½×%U¬xþ0 [ 101.637880][ T6272] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.868595][ T29] audit: type=1800 audit(1772287831.338:3): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.81" name="members" dev="configfs" ino=9152 res=0 errno=0 [ 102.956601][ T6308] FAULT_INJECTION: forcing a failure. [ 102.956601][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 102.993996][ T6308] CPU: 0 UID: 0 PID: 6308 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 102.994039][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.994054][ T6308] Call Trace: [ 102.994062][ T6308] [ 102.994071][ T6308] dump_stack_lvl+0x100/0x190 [ 102.994123][ T6308] should_fail_ex.cold+0x5/0xa [ 102.994168][ T6308] should_failslab+0xc2/0x120 [ 102.994193][ T6308] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 102.994235][ T6308] ? alloc_empty_file+0x55/0x1c0 [ 102.994271][ T6308] alloc_empty_file+0x55/0x1c0 [ 102.994302][ T6308] alloc_file_pseudo+0x13a/0x230 [ 102.994333][ T6308] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 102.994364][ T6308] ? security_inode_init_security_anon+0x7b/0x230 [ 102.994418][ T6308] __do_sys_memfd_secret+0x11d/0x3d0 [ 102.994457][ T6308] do_syscall_64+0x106/0xf80 [ 102.994483][ T6308] ? clear_bhb_loop+0x40/0x90 [ 102.994520][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.994544][ T6308] RIP: 0033:0x7f671cf9c799 [ 102.994564][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.994588][ T6308] RSP: 002b:00007f671de52028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 102.994619][ T6308] RAX: ffffffffffffffda RBX: 00007f671d215fa0 RCX: 00007f671cf9c799 [ 102.994639][ T6308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.994658][ T6308] RBP: 00007f671d032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 102.994673][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.994688][ T6308] R13: 00007f671d216038 R14: 00007f671d215fa0 R15: 00007ffe4041b468 [ 102.994722][ T6308] [ 103.223896][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 103.319709][ T29] audit: type=1800 audit(1772287831.688:4): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.81" name="dbroot" dev="configfs" ino=9177 res=0 errno=0 [ 103.658092][ T6315] mmap: syz.3.85 (6315) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.595244][ T6345] random: crng reseeded on system resumption [ 105.509379][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.90'. [ 105.972304][ T6374] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 106.115111][ T6353] can: request_module (can-proto-3) failed. [ 106.721971][ T6390] FAULT_INJECTION: forcing a failure. [ 106.721971][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 106.755720][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.1.93 Not tainted syzkaller #0 PREEMPT(full) [ 106.755757][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.755773][ T6390] Call Trace: [ 106.755781][ T6390] [ 106.755791][ T6390] dump_stack_lvl+0x100/0x190 [ 106.755837][ T6390] should_fail_ex.cold+0x5/0xa [ 106.755870][ T6390] should_failslab+0xc2/0x120 [ 106.755897][ T6390] __kmalloc_cache_noprof+0x7a/0x6f0 [ 106.755930][ T6390] ? drm_atomic_state_alloc+0xb8/0x120 [ 106.755981][ T6390] drm_atomic_state_alloc+0xb8/0x120 [ 106.756024][ T6390] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 106.756056][ T6390] ? trace_contention_end+0x140/0x180 [ 106.756105][ T6390] ? __mutex_lock+0x26a/0x1b90 [ 106.756136][ T6390] ? __mutex_lock+0x26a/0x1b90 [ 106.756197][ T6390] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 106.756231][ T6390] ? drm_master_internal_acquire+0x21/0x80 [ 106.756292][ T6390] drm_client_modeset_commit_locked+0x14d/0x580 [ 106.756330][ T6390] drm_client_modeset_commit+0x4f/0x80 [ 106.756353][ T6390] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 106.756372][ T6390] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 106.756391][ T6390] drm_fbdev_client_restore+0x1b/0x30 [ 106.756413][ T6390] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 106.756434][ T6390] drm_client_dev_restore+0x205/0x2a0 [ 106.756454][ T6390] drm_release+0x2c6/0x360 [ 106.756469][ T6390] ? __pfx_drm_release+0x10/0x10 [ 106.756483][ T6390] __fput+0x3ff/0xb40 [ 106.756504][ T6390] task_work_run+0x150/0x240 [ 106.756525][ T6390] ? __pfx_task_work_run+0x10/0x10 [ 106.756551][ T6390] exit_to_user_mode_loop+0x100/0x4a0 [ 106.756572][ T6390] do_syscall_64+0x668/0xf80 [ 106.756593][ T6390] ? clear_bhb_loop+0x40/0x90 [ 106.756611][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.756626][ T6390] RIP: 0033:0x7ffacb99c799 [ 106.756670][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.756688][ T6390] RSP: 002b:00007ffacc8e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.756703][ T6390] RAX: 0000000000000000 RBX: 00007ffacbc15fa0 RCX: 00007ffacb99c799 [ 106.756713][ T6390] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 106.756722][ T6390] RBP: 00007ffacba32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 106.756731][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.756750][ T6390] R13: 00007ffacbc16038 R14: 00007ffacbc15fa0 R15: 00007ffc3d402008 [ 106.756775][ T6390] [ 107.167223][ T6358] can: request_module (can-proto-3) failed. [ 107.177903][ T5825] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 107.185470][ T5825] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 108.503083][ T6417] zero sized request [ 109.546066][ T6436] syz.2.103 uses obsolete (PF_INET,SOCK_PACKET) [ 110.384716][ T6452] batman_adv: Routing algorithm '7' is not supported [ 111.156107][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 111.564880][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 112.049729][ T5825] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 112.477035][ T6488] Invalid ELF header magic: != ELF [ 113.574685][ T6526] [U]  [ 113.577717][ T6526] [U] [ 113.581230][ T6526] [U] [ 113.584017][ T6526] [U] [ 113.657432][ T6526] [U] [ 113.660181][ T6526] [U] [ 113.662862][ T6526] [U] [ 113.665535][ T6526] [U] [ 113.716229][ T6526] [U] [ 113.718974][ T6526] [U] [ 113.721650][ T6526] [U] [ 113.724319][ T6526] [U] [ 113.757420][ T6526] [U] [ 113.760188][ T6526] [U] [ 113.762902][ T6526] [U] [ 113.765700][ T6526] [U] [ 113.780708][ T6526] [U] [ 113.783422][ T6526] [U] [ 113.786097][ T6526] [U] [ 113.788770][ T6526] [U] [ 113.815836][ T6526] [U] [ 113.818604][ T6526] [U] [ 113.821328][ T6526] [U] [ 113.824049][ T6526] [U] [ 113.894113][ T5825] Bluetooth: hci2: unexpected subevent 0x01 length: 3 < 18 [ 113.902774][ T6526] [U] [ 113.905608][ T6526] [U] [ 113.908319][ T6526] [U] [ 113.911058][ T6526] [U] [ 113.946002][ T6526] [U] [ 113.948727][ T6526] [U] [ 113.951419][ T6526] [U] [ 113.954096][ T6526] [U] [ 113.957228][ T6526] [U] [ 113.959945][ T6526] [U] [ 113.962645][ T6526] [U] [ 113.965339][ T6526] [U] [ 113.975800][ T6526] [U] [ 113.978508][ T6526] [U] [ 113.981185][ T6526] [U] [ 113.983865][ T6526] [U] [ 114.032633][ T6526] [U] [ 114.035439][ T6526] [U] [ 114.038161][ T6526] [U] [ 114.040889][ T6526] [U] [ 114.094320][ T6526] [U] [ 114.097079][ T6526] [U] [ 114.099804][ T6526] [U] [ 114.102532][ T6526] [U] [ 114.172412][ T6526] [U] [ 114.175201][ T6526] [U] [ 114.177921][ T6526] [U] [ 114.180649][ T6526] [U] [ 114.242102][ T6526] [U] [ 115.146473][ T6565] netlink: 342 bytes leftover after parsing attributes in process `syz.2.132'. [ 115.155508][ T6565] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.986057][ T6635] QAT: Invalid ioctl -2147174648 [ 119.275183][ T6638] can: request_module (can-proto-3) failed. [ 119.380285][ T6642] can: request_module (can-proto-3) failed. [ 119.697908][ T6658] zero sized request [ 119.713066][ T6658] MTRR 1 not used [ 119.980953][ T6668] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 120.173574][ T6673] netlink: 350 bytes leftover after parsing attributes in process `syz.0.152'. [ 120.651482][ T6681] Console: switching to colour VGA+ 80x25 [ 121.807237][ T6729] random: crng reseeded on system resumption [ 121.874728][ T6729] netlink: 334 bytes leftover after parsing attributes in process `syz.0.160'. [ 122.247321][ T6735] can: request_module (can-proto-3) failed. [ 122.396822][ T6741] __vm_enough_memory: pid: 6741, comm: syz.3.163, bytes: 4398046511104 not enough memory for the allocation [ 123.438732][ T6763] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.475344][ T6775] FAULT_INJECTION: forcing a failure. [ 123.475344][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 123.496508][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.3.170 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.496532][ T6775] Tainted: [L]=SOFTLOCKUP [ 123.496536][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.496545][ T6775] Call Trace: [ 123.496550][ T6775] [ 123.496556][ T6775] dump_stack_lvl+0x100/0x190 [ 123.496591][ T6775] should_fail_ex.cold+0x5/0xa [ 123.496609][ T6775] should_failslab+0xc2/0x120 [ 123.496622][ T6775] __kmalloc_cache_noprof+0x7a/0x6f0 [ 123.496640][ T6775] ? wakeup_source_register+0x4c/0x3e0 [ 123.496662][ T6775] wakeup_source_register+0x4c/0x3e0 [ 123.496681][ T6775] ep_create_wakeup_source+0x1df/0x2e0 [ 123.496704][ T6775] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 123.496728][ T6775] ? do_epoll_ctl+0x1012/0x36a0 [ 123.496741][ T6775] ? do_epoll_ctl+0x1012/0x36a0 [ 123.496758][ T6775] do_epoll_ctl+0x1eee/0x36a0 [ 123.496779][ T6775] ? __pfx_do_epoll_ctl+0x10/0x10 [ 123.496791][ T6775] ? find_held_lock+0x2b/0x80 [ 123.496803][ T6775] ? __might_fault+0xc5/0x140 [ 123.496822][ T6775] ? __might_fault+0xc5/0x140 [ 123.496846][ T6775] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 123.496859][ T6775] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 123.496873][ T6775] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 123.496892][ T6775] do_syscall_64+0x106/0xf80 [ 123.496907][ T6775] ? clear_bhb_loop+0x40/0x90 [ 123.496925][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.496939][ T6775] RIP: 0033:0x7f671cf9c799 [ 123.496955][ T6775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.496968][ T6775] RSP: 002b:00007f671de52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 123.496982][ T6775] RAX: ffffffffffffffda RBX: 00007f671d215fa0 RCX: 00007f671cf9c799 [ 123.496991][ T6775] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 123.496999][ T6775] RBP: 00007f671d032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 123.497007][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.497015][ T6775] R13: 00007f671d216038 R14: 00007f671d215fa0 R15: 00007ffe4041b468 [ 123.497033][ T6775] [ 123.847762][ T6763] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.853868][ T6763] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.909341][ T6763] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.915504][ T6763] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.827729][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.201837][ T6821] process 'syz.1.179' launched './file0' with NULL argv: empty string added [ 125.637704][ T6837] random: crng reseeded on system resumption [ 125.947421][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.947665][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.953461][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.671128][ T6833] can: request_module (can-proto-3) failed. [ 127.793533][ T6887] random: crng reseeded on system resumption [ 127.941669][ T6887] dyndbg: bad flag-op p, at start of print-parent [ 127.956874][ T6887] dyndbg: flags parse failed [ 127.969465][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 127.970503][ T6887] dyndbg: bad flag-op n, at start of nosym-o [ 127.996577][ T6887] dyndbg: flags parse failed [ 128.016646][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.610566][ T6906] netlink: 3 bytes leftover after parsing attributes in process `syz.2.194'. [ 128.886046][ T29] audit: type=1800 audit(1772287857.348:5): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.197" name="dbroot" dev="configfs" ino=12772 res=0 errno=0 [ 130.265247][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 130.282864][ T6929] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 130.342221][ T6929] netlink: 51505 bytes leftover after parsing attributes in process `syz.2.200'. [ 130.980564][ T6933] can: request_module (can-proto-3) failed. [ 131.964077][ T6979] random: crng reseeded on system resumption [ 132.191477][ T6987] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 132.823977][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830407][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145245][ T7016] FAULT_INJECTION: forcing a failure. [ 133.145245][ T7016] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 133.171151][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.171197][ T7016] Tainted: [L]=SOFTLOCKUP [ 133.171208][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 133.171224][ T7016] Call Trace: [ 133.171234][ T7016] [ 133.171246][ T7016] dump_stack_lvl+0x100/0x190 [ 133.171303][ T7016] should_fail_ex.cold+0x5/0xa [ 133.171331][ T7016] ? prepare_alloc_pages+0x16d/0x5f0 [ 133.171364][ T7016] should_fail_alloc_page+0xeb/0x140 [ 133.171394][ T7016] prepare_alloc_pages+0x1f0/0x5f0 [ 133.171430][ T7016] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 133.171480][ T7016] ? stack_trace_save+0x8e/0xc0 [ 133.171506][ T7016] ? __pfx_stack_trace_save+0x10/0x10 [ 133.171534][ T7016] ? stack_depot_save_flags+0x27/0x9d0 [ 133.171578][ T7016] ? is_bpf_text_address+0x8a/0x1a0 [ 133.171618][ T7016] ? is_bpf_text_address+0x8a/0x1a0 [ 133.171659][ T7016] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 133.171698][ T7016] ? kasan_save_stack+0x3f/0x50 [ 133.171737][ T7016] ? kasan_save_track+0x14/0x30 [ 133.171775][ T7016] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 133.171812][ T7016] ? alloc_vmap_area+0x640/0x2bd0 [ 133.171853][ T7016] ? __get_vm_area_node+0x1ca/0x330 [ 133.171880][ T7016] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 133.171911][ T7016] ? __vmalloc_node_noprof+0xad/0xf0 [ 133.171940][ T7016] ? copy_process+0x5ec/0x7a10 [ 133.171969][ T7016] ? kernel_clone+0xfc/0x9a0 [ 133.171997][ T7016] ? __do_sys_clone3+0x214/0x290 [ 133.172027][ T7016] ? do_syscall_64+0x106/0xf80 [ 133.172072][ T7016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 133.172118][ T7016] ? policy_nodemask+0xed/0x4f0 [ 133.172148][ T7016] alloc_pages_mpol+0x1fb/0x550 [ 133.172178][ T7016] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 133.172215][ T7016] alloc_pages_noprof+0x131/0x390 [ 133.172245][ T7016] get_free_pages_noprof+0x10/0xb0 [ 133.172293][ T7016] __kasan_populate_vmalloc+0xa0/0x210 [ 133.172341][ T7016] alloc_vmap_area+0x95d/0x2bd0 [ 133.172401][ T7016] ? __pfx_alloc_vmap_area+0x10/0x10 [ 133.172455][ T7016] __get_vm_area_node+0x1ca/0x330 [ 133.172491][ T7016] __vmalloc_node_range_noprof+0x213/0x1530 [ 133.172525][ T7016] ? kernel_clone+0xfc/0x9a0 [ 133.172553][ T7016] ? local_lock_release+0x99/0x130 [ 133.172591][ T7016] ? kernel_clone+0xfc/0x9a0 [ 133.172621][ T7016] ? find_held_lock+0x2b/0x80 [ 133.172646][ T7016] ? rcu_read_unlock+0x17/0x60 [ 133.172673][ T7016] ? rcu_read_unlock+0x17/0x60 [ 133.172701][ T7016] ? obj_cgroup_charge_account+0x46d/0x640 [ 133.172730][ T7016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.172766][ T7016] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 133.172800][ T7016] ? rcu_is_watching+0x12/0xc0 [ 133.172841][ T7016] ? trace_kmem_cache_alloc+0xf3/0x120 [ 133.172871][ T7016] ? kernel_clone+0xfc/0x9a0 [ 133.172900][ T7016] __vmalloc_node_noprof+0xad/0xf0 [ 133.172932][ T7016] ? kernel_clone+0xfc/0x9a0 [ 133.172966][ T7016] copy_process+0x5ec/0x7a10 [ 133.172995][ T7016] ? futex_unqueue+0x133/0x2c0 [ 133.173044][ T7016] ? __pfx_copy_process+0x10/0x10 [ 133.173085][ T7016] ? _copy_from_user+0x59/0xd0 [ 133.173132][ T7016] kernel_clone+0xfc/0x9a0 [ 133.173167][ T7016] ? __pfx_kernel_clone+0x10/0x10 [ 133.173206][ T7016] ? __pfx_futex_wait+0x10/0x10 [ 133.173256][ T7016] __do_sys_clone3+0x214/0x290 [ 133.173295][ T7016] ? __pfx___do_sys_clone3+0x10/0x10 [ 133.173376][ T7016] do_syscall_64+0x106/0xf80 [ 133.173407][ T7016] ? clear_bhb_loop+0x40/0x90 [ 133.173441][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.173470][ T7016] RIP: 0033:0x7fca4399c799 [ 133.173494][ T7016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.173521][ T7016] RSP: 002b:00007fca448e1ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 133.173547][ T7016] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fca4399c799 [ 133.173569][ T7016] RDX: 00007fca448e1f10 RSI: 0000000000000058 RDI: 00007fca448e1f10 [ 133.173586][ T7016] RBP: 00007fca43a32bd9 R08: 0000000000000000 R09: 0000000000000058 [ 133.173604][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.173620][ T7016] R13: 00007fca43c16038 R14: 00007fca43c15fa0 R15: 00007ffc48a35d88 [ 133.173658][ T7016] [ 133.765986][ T7016] syz.0.218: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 134.105805][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.105849][ T7016] Tainted: [L]=SOFTLOCKUP [ 134.105859][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.105876][ T7016] Call Trace: [ 134.105884][ T7016] [ 134.105894][ T7016] dump_stack_lvl+0x100/0x190 [ 134.105941][ T7016] warn_alloc.cold+0x95/0x1c1 [ 134.105987][ T7016] ? __pfx_warn_alloc+0x10/0x10 [ 134.106022][ T7016] ? lockdep_hardirqs_on+0x78/0x100 [ 134.106057][ T7016] ? __get_vm_area_node+0x2c5/0x330 [ 134.106094][ T7016] ? __get_vm_area_node+0x208/0x330 [ 134.106131][ T7016] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 134.106163][ T7016] ? local_lock_release+0x99/0x130 [ 134.106209][ T7016] ? kernel_clone+0xfc/0x9a0 [ 134.106242][ T7016] ? find_held_lock+0x2b/0x80 [ 134.106267][ T7016] ? rcu_read_unlock+0x17/0x60 [ 134.106292][ T7016] ? rcu_read_unlock+0x17/0x60 [ 134.106315][ T7016] ? obj_cgroup_charge_account+0x46d/0x640 [ 134.106343][ T7016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.106378][ T7016] ? __memcg_slab_post_alloc_hook+0x51e/0x9a0 [ 134.106410][ T7016] ? rcu_is_watching+0x12/0xc0 [ 134.106447][ T7016] ? trace_kmem_cache_alloc+0xf3/0x120 [ 134.106476][ T7016] ? kernel_clone+0xfc/0x9a0 [ 134.106502][ T7016] __vmalloc_node_noprof+0xad/0xf0 [ 134.106531][ T7016] ? kernel_clone+0xfc/0x9a0 [ 134.106564][ T7016] copy_process+0x5ec/0x7a10 [ 134.106592][ T7016] ? futex_unqueue+0x133/0x2c0 [ 134.106641][ T7016] ? __pfx_copy_process+0x10/0x10 [ 134.106680][ T7016] ? _copy_from_user+0x59/0xd0 [ 134.106726][ T7016] kernel_clone+0xfc/0x9a0 [ 134.106760][ T7016] ? __pfx_kernel_clone+0x10/0x10 [ 134.106801][ T7016] ? __pfx_futex_wait+0x10/0x10 [ 134.106848][ T7016] __do_sys_clone3+0x214/0x290 [ 134.106879][ T7016] ? __pfx___do_sys_clone3+0x10/0x10 [ 134.106955][ T7016] do_syscall_64+0x106/0xf80 [ 134.106985][ T7016] ? clear_bhb_loop+0x40/0x90 [ 134.107022][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.107050][ T7016] RIP: 0033:0x7fca4399c799 [ 134.107074][ T7016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.107100][ T7016] RSP: 002b:00007fca448e1ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 134.107127][ T7016] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fca4399c799 [ 134.107145][ T7016] RDX: 00007fca448e1f10 RSI: 0000000000000058 RDI: 00007fca448e1f10 [ 134.107163][ T7016] RBP: 00007fca43a32bd9 R08: 0000000000000000 R09: 0000000000000058 [ 134.107187][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.107204][ T7016] R13: 00007fca43c16038 R14: 00007fca43c15fa0 R15: 00007ffc48a35d88 [ 134.107241][ T7016] [ 134.107268][ T7016] Mem-Info: [ 134.390657][ T7016] active_anon:55718 inactive_anon:0 isolated_anon:0 [ 134.390657][ T7016] active_file:16891 inactive_file:43104 isolated_file:0 [ 134.390657][ T7016] unevictable:768 dirty:3361 writeback:0 [ 134.390657][ T7016] slab_reclaimable:11862 slab_unreclaimable:91179 [ 134.390657][ T7016] mapped:40016 shmem:41819 pagetables:1430 [ 134.390657][ T7016] sec_pagetables:0 bounce:0 [ 134.390657][ T7016] kernel_misc_reclaimable:0 [ 134.390657][ T7016] free:1263707 free_pcp:23733 free_cma:0 [ 134.800609][ T7016] Node 0 active_anon:228272kB inactive_anon:0kB active_file:67564kB inactive_file:174264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165360kB dirty:15588kB writeback:0kB shmem:165640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12748kB pagetables:5584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.979908][ T7016] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.043596][ T7016] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.123734][ T7016] lowmem_reserve[]: 0 2477 2479 2479 2479 [ 135.255658][ T7016] Node 0 DMA32 free:1137952kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:226900kB inactive_anon:0kB active_file:67564kB inactive_file:174264kB unevictable:1536kB writepending:15620kB zspages:0kB present:3129332kB managed:2537440kB mlocked:0kB bounce:0kB free_pcp:45748kB local_pcp:19540kB free_cma:0kB [ 135.341351][ T7016] lowmem_reserve[]: 0 0 1 1 1 [ 135.427022][ T7016] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 135.665654][ T7016] lowmem_reserve[]: 0 0 0 0 0 [ 135.670468][ T7016] Node 1 Normal free:3894060kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:48520kB local_pcp:31472kB free_cma:0kB [ 135.843206][ T7016] lowmem_reserve[]: 0 0 0 0 0 [ 135.869311][ T7016] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 135.873142][ T7037] random: crng reseeded on system resumption [ 135.962438][ T7016] Node 0 DMA32: 1834*4kB (UE) 1132*8kB (UM) 566*16kB (UME) 43*32kB (UME) 95*64kB (UE) 38*128kB (UM) 23*256kB (UM) 13*512kB (UE) 9*1024kB (UE) 2*2048kB (ME) 262*4096kB (M) = 1136776kB [ 136.112940][ T7016] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 136.157761][ T7022] can: request_module (can-proto-3) failed. [ 136.232405][ T7016] Node 1 Normal: 5*4kB (UME) 3*8kB (E) 1*16kB (E) 1*32kB (E) 2*64kB (UM) 3*128kB (UME) 2*256kB (U) 2*512kB (UE) 1*1024kB (U) 4*2048kB (UME) 948*4096kB (UM) = 3894364kB [ 136.376241][ T7016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.424420][ T7016] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.472244][ T7016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.537223][ T29] audit: type=1804 audit(1772287864.988:6): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.224" name="/newroot/55/file0" dev="tmpfs" ino=302 res=1 errno=0 [ 136.562353][ T7016] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.602185][ T7016] 105012 total pagecache pages [ 136.621812][ T7016] 27 pages in swap cache [ 136.637181][ T7016] Free swap = 118692kB [ 136.676425][ T7016] Total swap = 124996kB [ 136.685895][ T7016] 2097051 pages RAM [ 136.701459][ T7016] 0 pages HighMem/MovableOnly [ 136.715941][ T7016] 430811 pages reserved [ 136.726898][ T7016] 0 pages cma reserved [ 140.221353][ T7104] random: crng reseeded on system resumption [ 141.634883][ T7130] HfR: entered promiscuous mode [ 141.980920][ T7139] FAULT_INJECTION: forcing a failure. [ 141.980920][ T7139] name failslab, interval 1, probability 0, space 0, times 0 [ 142.049747][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.2.242 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.049791][ T7139] Tainted: [L]=SOFTLOCKUP [ 142.049800][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 142.049815][ T7139] Call Trace: [ 142.049824][ T7139] [ 142.049834][ T7139] dump_stack_lvl+0x100/0x190 [ 142.049878][ T7139] should_fail_ex.cold+0x5/0xa [ 142.049911][ T7139] should_failslab+0xc2/0x120 [ 142.049938][ T7139] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 142.049977][ T7139] ? __d_alloc+0x34/0xa80 [ 142.050020][ T7139] __d_alloc+0x34/0xa80 [ 142.050045][ T7139] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 142.050078][ T7139] ? security_inode_alloc+0x3b/0x2c0 [ 142.050115][ T7139] d_alloc_pseudo+0x1c/0xc0 [ 142.050150][ T7139] alloc_file_pseudo+0xcf/0x230 [ 142.050181][ T7139] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 142.050210][ T7139] ? inode_init_always_gfp+0xd0e/0x1040 [ 142.050275][ T7139] sock_alloc_file+0x50/0x210 [ 142.050311][ T7139] do_accept+0x242/0x530 [ 142.050351][ T7139] ? 0xffffffff81000000 [ 142.050373][ T7139] ? do_raw_spin_lock+0x128/0x260 [ 142.050410][ T7139] ? __pfx_do_accept+0x10/0x10 [ 142.050469][ T7139] ? 0xffffffff81000000 [ 142.050488][ T7139] __sys_accept4+0x108/0x200 [ 142.050529][ T7139] ? __pfx___sys_accept4+0x10/0x10 [ 142.050580][ T7139] __x64_sys_accept+0x74/0xb0 [ 142.050605][ T7139] ? lockdep_hardirqs_on+0x78/0x100 [ 142.050636][ T7139] do_syscall_64+0x106/0xf80 [ 142.050665][ T7139] ? clear_bhb_loop+0x40/0x90 [ 142.050699][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.050727][ T7139] RIP: 0033:0x7f7dc0b9c799 [ 142.050749][ T7139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.050773][ T7139] RSP: 002b:00007f7dc19d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 142.050799][ T7139] RAX: ffffffffffffffda RBX: 00007f7dc0e15fa0 RCX: 00007f7dc0b9c799 [ 142.050817][ T7139] RDX: ffffffff81000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 142.050834][ T7139] RBP: 00007f7dc0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 142.050851][ T7139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.050867][ T7139] R13: 00007f7dc0e16038 R14: 00007f7dc0e15fa0 R15: 00007fff378af7d8 [ 142.050895][ T7139] ? 0xffffffff81000000 [ 142.050933][ T7139] [ 142.713361][ T7131] can: request_module (can-proto-3) failed. [ 143.212643][ T7161] FAULT_INJECTION: forcing a failure. [ 143.212643][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 143.225688][ T7161] CPU: 1 UID: 0 PID: 7161 Comm: syz.0.247 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.225734][ T7161] Tainted: [L]=SOFTLOCKUP [ 143.225744][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 143.225761][ T7161] Call Trace: [ 143.225771][ T7161] [ 143.225783][ T7161] dump_stack_lvl+0x100/0x190 [ 143.225830][ T7161] should_fail_ex.cold+0x5/0xa [ 143.225864][ T7161] should_failslab+0xc2/0x120 [ 143.225892][ T7161] __kmalloc_cache_noprof+0x7a/0x6f0 [ 143.225926][ T7161] ? tipc_service_create+0xb1/0x340 [ 143.225969][ T7161] tipc_service_create+0xb1/0x340 [ 143.226001][ T7161] ? tipc_service_find+0x161/0x1c0 [ 143.226036][ T7161] tipc_nametbl_insert_publ+0xeca/0x1570 [ 143.226082][ T7161] tipc_nametbl_publish+0x137/0x260 [ 143.226121][ T7161] tipc_sk_publish+0x1d8/0x430 [ 143.226159][ T7161] ? __pfx_tipc_sk_publish+0x10/0x10 [ 143.226197][ T7161] ? __local_bh_enable_ip+0x9e/0x120 [ 143.226232][ T7161] tipc_sk_bind+0x16f/0x380 [ 143.226270][ T7161] tipc_bind+0x18d/0x280 [ 143.226309][ T7161] __sys_bind+0x1a9/0x260 [ 143.226354][ T7161] ? __pfx___sys_bind+0x10/0x10 [ 143.226428][ T7161] __x64_sys_bind+0x72/0xb0 [ 143.226469][ T7161] ? lockdep_hardirqs_on+0x78/0x100 [ 143.226502][ T7161] do_syscall_64+0x106/0xf80 [ 143.226534][ T7161] ? clear_bhb_loop+0x40/0x90 [ 143.226569][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.226598][ T7161] RIP: 0033:0x7fca4399c799 [ 143.226622][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.226648][ T7161] RSP: 002b:00007fca448e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 143.226676][ T7161] RAX: ffffffffffffffda RBX: 00007fca43c15fa0 RCX: 00007fca4399c799 [ 143.226694][ T7161] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000008 [ 143.226711][ T7161] RBP: 00007fca43a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 143.226727][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.226743][ T7161] R13: 00007fca43c16038 R14: 00007fca43c15fa0 R15: 00007ffc48a35d88 [ 143.226782][ T7161] [ 143.226804][ T7161] tipc: Service creation failed, no memory [ 143.574580][ T7169] random: crng reseeded on system resumption [ 144.524165][ T7197] ima: policy update failed [ 144.578790][ T7183] openvswitch: netlink: Multiple metadata blocks provided [ 144.595622][ T29] audit: type=1802 audit(1772287873.028:7): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.254" res=0 errno=0 [ 144.809570][ T7211] can: request_module (can-proto-0) failed. [ 145.143501][ T29] audit: type=1804 audit(1772287873.608:8): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.261" name="/newroot/sys/kernel/tracing/timestamp_mode" dev="tracefs" ino=3651 res=1 errno=0 [ 145.237154][ T7227] FAULT_INJECTION: forcing a failure. [ 145.237154][ T7227] name failslab, interval 1, probability 0, space 0, times 0 [ 145.277251][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.0.259 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.277302][ T7227] Tainted: [L]=SOFTLOCKUP [ 145.277311][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.277327][ T7227] Call Trace: [ 145.277335][ T7227] [ 145.277345][ T7227] dump_stack_lvl+0x100/0x190 [ 145.277392][ T7227] should_fail_ex.cold+0x5/0xa [ 145.277422][ T7227] should_failslab+0xc2/0x120 [ 145.277450][ T7227] __kmalloc_cache_noprof+0x7a/0x6f0 [ 145.277483][ T7227] ? refill_pi_state_cache+0x91/0x260 [ 145.277532][ T7227] refill_pi_state_cache+0x91/0x260 [ 145.277573][ T7227] futex_lock_pi+0x177/0x7b0 [ 145.277617][ T7227] ? __pfx_futex_lock_pi+0x10/0x10 [ 145.277657][ T7227] ? __pfx___futex_wait+0x10/0x10 [ 145.277726][ T7227] ? __pfx_futex_wake_mark+0x10/0x10 [ 145.277773][ T7227] ? __get_user_nocheck_8+0x20/0x20 [ 145.277812][ T7227] ? do_vfs_ioctl+0x226/0x13e0 [ 145.277850][ T7227] do_futex+0x18a/0x350 [ 145.277884][ T7227] ? __pfx_do_futex+0x10/0x10 [ 145.277918][ T7227] ? find_held_lock+0x2b/0x80 [ 145.277948][ T7227] __x64_sys_futex+0x34f/0x4d0 [ 145.277991][ T7227] ? __pfx___x64_sys_futex+0x10/0x10 [ 145.278039][ T7227] do_syscall_64+0x106/0xf80 [ 145.278068][ T7227] ? clear_bhb_loop+0x40/0x90 [ 145.278103][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.278132][ T7227] RIP: 0033:0x7fca4399c799 [ 145.278154][ T7227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.278180][ T7227] RSP: 002b:00007fca448c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 145.278209][ T7227] RAX: ffffffffffffffda RBX: 00007fca43c16090 RCX: 00007fca4399c799 [ 145.278227][ T7227] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 145.278242][ T7227] RBP: 00007fca43a32bd9 R08: 0000000000000000 R09: 000000008000fff5 [ 145.278259][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.278282][ T7227] R13: 00007fca43c16128 R14: 00007fca43c16090 R15: 00007ffc48a35d88 [ 145.278317][ T7227] [ 145.944323][ T7238] tc_dump_action: action bad kind [ 146.119215][ T7244] random: crng reseeded on system resumption [ 146.373586][ T7234] can: request_module (can-proto-3) failed. [ 146.493498][ T7246] Unrecognized hibernate image header format! [ 146.501646][ T7246] PM: hibernation: Image mismatch: architecture specific data [ 147.160523][ T7260] ima: policy update failed [ 147.170656][ T29] audit: type=1807 audit(1772287875.628:9): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 147.224334][ T29] audit: type=1802 audit(1772287875.628:10): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.267" res=0 errno=0 [ 147.264835][ T29] audit: type=1802 audit(1772287875.628:11): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.267" res=0 errno=0 [ 147.880003][ T7267] FAULT_INJECTION: forcing a failure. [ 147.880003][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 147.915771][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.3.269 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.915815][ T7267] Tainted: [L]=SOFTLOCKUP [ 147.915824][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.915839][ T7267] Call Trace: [ 147.915847][ T7267] [ 147.915857][ T7267] dump_stack_lvl+0x100/0x190 [ 147.915903][ T7267] should_fail_ex.cold+0x5/0xa [ 147.915935][ T7267] should_failslab+0xc2/0x120 [ 147.915964][ T7267] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 147.916004][ T7267] ? __mpol_dup+0x74/0x370 [ 147.916041][ T7267] __mpol_dup+0x74/0x370 [ 147.916071][ T7267] ? __pfx___mpol_dup+0x10/0x10 [ 147.916113][ T7267] mbind_range+0x2ad/0x550 [ 147.916148][ T7267] do_mbind+0x7de/0xfd0 [ 147.916187][ T7267] ? __might_fault+0xc5/0x140 [ 147.916223][ T7267] ? __pfx_do_mbind+0x10/0x10 [ 147.916263][ T7267] ? _copy_from_user+0x59/0xd0 [ 147.916313][ T7267] ? __pfx_get_nodes+0x10/0x10 [ 147.916364][ T7267] kernel_mbind+0x1b7/0x200 [ 147.916399][ T7267] ? __pfx_kernel_mbind+0x10/0x10 [ 147.916442][ T7267] do_syscall_64+0x106/0xf80 [ 147.916482][ T7267] ? clear_bhb_loop+0x40/0x90 [ 147.916518][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.916547][ T7267] RIP: 0033:0x7f671cf9c799 [ 147.916571][ T7267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.916597][ T7267] RSP: 002b:00007f671de52028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 147.916625][ T7267] RAX: ffffffffffffffda RBX: 00007f671d215fa0 RCX: 00007f671cf9c799 [ 147.916643][ T7267] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 147.916659][ T7267] RBP: 00007f671d032bd9 R08: 0000000000000003 R09: 0000000000000003 [ 147.916676][ T7267] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 147.916692][ T7267] R13: 00007f671d216038 R14: 00007f671d215fa0 R15: 00007ffe4041b468 [ 147.916730][ T7267] [ 148.748323][ T29] audit: type=1800 audit(1772287877.218:12): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.271" name="dbroot" dev="configfs" ino=14837 res=0 errno=0 [ 149.106383][ T7289] random: crng reseeded on system resumption [ 151.431310][ T7325] can: request_module (can-proto-3) failed. [ 152.221465][ T7355] random: crng reseeded on system resumption [ 152.834483][ T7371] ERROR: Out of memory at tomoyo_memory_ok. [ 154.259218][ T7396] zswap: compressor û not available [ 155.024779][ T7430] syz.0.306 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 155.282533][ T7424] Invalid ELF header magic: != ELF [ 155.299858][ T7403] can: request_module (can-proto-3) failed. [ 155.562663][ T7445] random: crng reseeded on system resumption [ 156.006087][ T7460] FAULT_INJECTION: forcing a failure. [ 156.006087][ T7460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.022534][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.3.310 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.022580][ T7460] Tainted: [L]=SOFTLOCKUP [ 156.022591][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.022608][ T7460] Call Trace: [ 156.022617][ T7460] [ 156.022628][ T7460] dump_stack_lvl+0x100/0x190 [ 156.022676][ T7460] should_fail_ex.cold+0x5/0xa [ 156.022703][ T7460] ? prepare_alloc_pages+0x16d/0x5f0 [ 156.022737][ T7460] should_fail_alloc_page+0xeb/0x140 [ 156.022767][ T7460] prepare_alloc_pages+0x1f0/0x5f0 [ 156.022803][ T7460] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 156.022846][ T7460] ? mark_held_locks+0x40/0x70 [ 156.022879][ T7460] ? finish_task_switch.isra.0+0x205/0xb80 [ 156.022909][ T7460] ? lockdep_hardirqs_on+0x78/0x100 [ 156.022941][ T7460] ? finish_task_switch.isra.0+0x205/0xb80 [ 156.022972][ T7460] ? rcu_is_watching+0x12/0xc0 [ 156.023013][ T7460] ? trace_sched_exit_tp+0x13a/0x180 [ 156.023049][ T7460] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.023101][ T7460] ? mark_held_locks+0x40/0x70 [ 156.023140][ T7460] ? lock_acquire+0x1cf/0x380 [ 156.023175][ T7460] ? find_held_lock+0x2b/0x80 [ 156.023199][ T7460] ? page_table_check_set+0x49a/0xa10 [ 156.023241][ T7460] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 156.023287][ T7460] ? policy_nodemask+0xed/0x4f0 [ 156.023324][ T7460] alloc_pages_mpol+0x1fb/0x550 [ 156.023354][ T7460] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 156.023393][ T7460] folio_alloc_mpol_noprof+0x36/0x340 [ 156.023426][ T7460] vma_alloc_folio_noprof+0xed/0x1d0 [ 156.023458][ T7460] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 156.023501][ T7460] do_anonymous_page+0xb3a/0x1fb0 [ 156.023550][ T7460] __handle_mm_fault+0x1d42/0x2b60 [ 156.023590][ T7460] ? __pfx___handle_mm_fault+0x10/0x10 [ 156.023610][ T7460] ? pte_offset_map_lock+0x174/0x320 [ 156.023634][ T7460] ? find_held_lock+0x2b/0x80 [ 156.023655][ T7460] ? follow_page_pte+0x5b3/0x1400 [ 156.023675][ T7460] handle_mm_fault+0x36d/0xa20 [ 156.023697][ T7460] __get_user_pages+0xf9c/0x34d0 [ 156.023718][ T7460] ? __pfx___get_user_pages+0x10/0x10 [ 156.023739][ T7460] populate_vma_page_range+0x267/0x3f0 [ 156.023756][ T7460] ? __pfx_populate_vma_page_range+0x10/0x10 [ 156.023771][ T7460] ? __pfx_find_vma_intersection+0x10/0x10 [ 156.023795][ T7460] ? do_mmap+0x93f/0x12f0 [ 156.023814][ T7460] __mm_populate+0x107/0x3a0 [ 156.023831][ T7460] ? __pfx___mm_populate+0x10/0x10 [ 156.023848][ T7460] ? up_write+0x290/0x4f0 [ 156.023870][ T7460] vm_mmap_pgoff+0x37f/0x470 [ 156.023887][ T7460] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 156.023903][ T7460] ? do_futex+0x192/0x350 [ 156.023922][ T7460] ? __pfx_do_futex+0x10/0x10 [ 156.023943][ T7460] ksys_mmap_pgoff+0xe1/0x650 [ 156.023957][ T7460] ? __x64_sys_futex+0x34f/0x4d0 [ 156.023974][ T7460] ? __x64_sys_futex+0x358/0x4d0 [ 156.023992][ T7460] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 156.024006][ T7460] ? xfd_validate_state+0x129/0x190 [ 156.024030][ T7460] __x64_sys_mmap+0x125/0x190 [ 156.024053][ T7460] do_syscall_64+0x106/0xf80 [ 156.024069][ T7460] ? clear_bhb_loop+0x40/0x90 [ 156.024086][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.024101][ T7460] RIP: 0033:0x7f671cf9c799 [ 156.024115][ T7460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.024128][ T7460] RSP: 002b:00007f671de52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 156.024142][ T7460] RAX: ffffffffffffffda RBX: 00007f671d215fa0 RCX: 00007f671cf9c799 [ 156.024152][ T7460] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 156.024161][ T7460] RBP: 00007f671d032bd9 R08: 0000000000000002 R09: 0000000000008000 [ 156.024170][ T7460] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 156.024178][ T7460] R13: 00007f671d216038 R14: 00007f671d215fa0 R15: 00007ffe4041b468 [ 156.024198][ T7460] [ 156.993809][ T7460] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.770681][ T7494] block nbd8: shutting down sockets [ 158.291875][ T7495] random: crng reseeded on system resumption [ 158.958897][ T7507] FAULT_INJECTION: forcing a failure. [ 158.958897][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 158.972727][ T7507] CPU: 1 UID: 0 PID: 7507 Comm: syz.3.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.972773][ T7507] Tainted: [L]=SOFTLOCKUP [ 158.972782][ T7507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.972798][ T7507] Call Trace: [ 158.972808][ T7507] [ 158.972818][ T7507] dump_stack_lvl+0x100/0x190 [ 158.972862][ T7507] should_fail_ex.cold+0x5/0xa [ 158.972890][ T7507] ? tomoyo_realpath_from_path+0xb6/0x690 [ 158.972916][ T7507] should_failslab+0xc2/0x120 [ 158.972941][ T7507] __kmalloc_noprof+0xe0/0x850 [ 158.972983][ T7507] tomoyo_realpath_from_path+0xb6/0x690 [ 158.973028][ T7507] tomoyo_check_open_permission+0x2af/0x3c0 [ 158.973070][ T7507] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 158.973149][ T7507] ? do_raw_spin_lock+0x128/0x260 [ 158.973191][ T7507] ? path_get+0x61/0x80 [ 158.973224][ T7507] tomoyo_file_open+0x6b/0x90 [ 158.973261][ T7507] security_file_open+0xb5/0x1e0 [ 158.973288][ T7507] do_dentry_open+0x5aa/0x1660 [ 158.973332][ T7507] ? security_inode_permission+0xbf/0x250 [ 158.973379][ T7507] vfs_open+0x82/0x3f0 [ 158.973415][ T7507] path_openat+0x208c/0x31a0 [ 158.973454][ T7507] ? __pfx_path_openat+0x10/0x10 [ 158.973495][ T7507] do_file_open+0x20e/0x430 [ 158.973523][ T7507] ? __pfx_do_file_open+0x10/0x10 [ 158.973577][ T7507] ? alloc_fd+0x476/0x790 [ 158.973622][ T7507] ? do_getname+0x191/0x390 [ 158.973657][ T7507] do_sys_openat2+0x10d/0x1e0 [ 158.973690][ T7507] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.973738][ T7507] __x64_sys_openat+0x12d/0x210 [ 158.973771][ T7507] ? __pfx___x64_sys_openat+0x10/0x10 [ 158.973821][ T7507] do_syscall_64+0x106/0xf80 [ 158.973851][ T7507] ? clear_bhb_loop+0x40/0x90 [ 158.973885][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.973913][ T7507] RIP: 0033:0x7f671cf9c799 [ 158.973937][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.973963][ T7507] RSP: 002b:00007f671de31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.973990][ T7507] RAX: ffffffffffffffda RBX: 00007f671d216090 RCX: 00007f671cf9c799 [ 158.974017][ T7507] RDX: 0000000000000200 RSI: 0000200000001d80 RDI: ffffffffffffff9c [ 158.974034][ T7507] RBP: 00007f671d032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 158.974051][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.974067][ T7507] R13: 00007f671d216128 R14: 00007f671d216090 R15: 00007ffe4041b468 [ 158.974105][ T7507] [ 158.974118][ T7507] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.583297][ T7505] can: request_module (can-proto-3) failed. [ 159.636979][ T7520] random: crng reseeded on system resumption [ 159.864837][ T7525] netlink: 'syz.0.319': attribute type 23 has an invalid length. [ 161.785632][ T7579] random: crng reseeded on system resumption [ 163.281472][ T7629] ubi0: attaching mtd1 [ 163.304924][ T7629] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 163.354994][ T7630] ubi0: attaching mtd1 [ 163.378198][ T7630] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 163.403743][ T7601] can: request_module (can-proto-3) failed. [ 164.270608][ T7659] random: crng reseeded on system resumption [ 166.801885][ T29] audit: type=1800 audit(1772287895.268:13): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.361" name="dbroot" dev="configfs" ino=16824 res=0 errno=0 [ 167.019740][ T7703] can: request_module (can-proto-3) failed. [ 167.031910][ T7736] random: crng reseeded on system resumption [ 167.274042][ T7729] hub 1-0:1.0: USB hub found [ 167.295769][ T7729] hub 1-0:1.0: 1 port detected [ 168.210373][ T7755] FAULT_INJECTION: forcing a failure. [ 168.210373][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 168.227045][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.1.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.227090][ T7755] Tainted: [L]=SOFTLOCKUP [ 168.227100][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.227117][ T7755] Call Trace: [ 168.227125][ T7755] [ 168.227135][ T7755] dump_stack_lvl+0x100/0x190 [ 168.227182][ T7755] should_fail_ex.cold+0x5/0xa [ 168.227216][ T7755] should_failslab+0xc2/0x120 [ 168.227243][ T7755] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 168.227281][ T7755] ? __proc_create+0x2cb/0x8c0 [ 168.227328][ T7755] __proc_create+0x2cb/0x8c0 [ 168.227368][ T7755] ? __pfx___proc_create+0x10/0x10 [ 168.227415][ T7755] ? _raw_write_unlock+0x28/0x50 [ 168.227445][ T7755] ? proc_register+0x559/0x8a0 [ 168.227491][ T7755] proc_create_reg+0x75/0x170 [ 168.227537][ T7755] proc_create_data+0x86/0x110 [ 168.227581][ T7755] ? __pfx_proc_create_data+0x10/0x10 [ 168.227624][ T7755] ? cache_register_net+0x137/0x5e0 [ 168.227659][ T7755] ? cache_register_net+0x137/0x5e0 [ 168.227701][ T7755] cache_register_net+0x25a/0x5e0 [ 168.227740][ T7755] nfsd_idmap_init+0x16e/0x250 [ 168.227771][ T7755] ? __pfx_nfsd_net_init+0x10/0x10 [ 168.227819][ T7755] nfsd_net_init+0x69/0x3d0 [ 168.227861][ T7755] ? __pfx_nfsd_net_init+0x10/0x10 [ 168.227901][ T7755] ops_init+0x1e2/0x5f0 [ 168.227939][ T7755] setup_net+0x118/0x3a0 [ 168.227986][ T7755] ? __pfx_setup_net+0x10/0x10 [ 168.228018][ T7755] ? lockdep_init_map_type+0x5c/0x250 [ 168.228056][ T7755] ? mutex_init_lockep+0x110/0x150 [ 168.228103][ T7755] copy_net_ns+0x46f/0x7c0 [ 168.228143][ T7755] create_new_namespaces+0x3ea/0xac0 [ 168.228182][ T7755] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 168.228215][ T7755] ksys_unshare+0x473/0xad0 [ 168.228252][ T7755] ? __pfx_ksys_unshare+0x10/0x10 [ 168.228302][ T7755] __x64_sys_unshare+0x31/0x40 [ 168.228336][ T7755] do_syscall_64+0x106/0xf80 [ 168.228366][ T7755] ? clear_bhb_loop+0x40/0x90 [ 168.228400][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.228428][ T7755] RIP: 0033:0x7ffacb99c799 [ 168.228452][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.228480][ T7755] RSP: 002b:00007ffacc8c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 168.228507][ T7755] RAX: ffffffffffffffda RBX: 00007ffacbc16090 RCX: 00007ffacb99c799 [ 168.228526][ T7755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 168.228543][ T7755] RBP: 00007ffacba32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 168.228561][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.228578][ T7755] R13: 00007ffacbc16128 R14: 00007ffacbc16090 R15: 00007ffc3d402008 [ 168.228617][ T7755] [ 169.329467][ T7784] random: crng reseeded on system resumption [ 169.931371][ T7795] netlink: Setting conntrack mark requires 'commit' flag. [ 170.487013][ T7814] netlink: 54 bytes leftover after parsing attributes in process `syz.0.377'. [ 170.740756][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 171.021585][ T7830] netlink: 330 bytes leftover after parsing attributes in process `syz.3.382'. [ 171.117454][ T7840] random: crng reseeded on system resumption [ 171.491018][ T7850] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 171.672764][ T7833] can: request_module (can-proto-3) failed. [ 174.181005][ T7908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.187144][ T7908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.196705][ T5831] Bluetooth: hci0: unexpected event 0x14 length: 16 > 6 [ 174.198417][ T7908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.234349][ T7908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 176.269749][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.275927][ T5825] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.285650][ T7929] can: request_module (can-proto-3) failed. [ 176.292441][ T5825] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.299626][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.931856][ T8044] can: request_module (can-proto-3) failed. [ 181.151976][ T8069] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.169750][ T8069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.186177][ T8069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.202955][ T8069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.887550][ T8104] NFSD: Failed to start, no listeners configured. [ 183.222898][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.222917][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.222951][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.228989][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.832637][ T8138] FAULT_INJECTION: forcing a failure. [ 183.832637][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 183.866428][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.0.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.866477][ T8138] Tainted: [L]=SOFTLOCKUP [ 183.866487][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 183.866508][ T8138] Call Trace: [ 183.866517][ T8138] [ 183.866531][ T8138] dump_stack_lvl+0x100/0x190 [ 183.866579][ T8138] should_fail_ex.cold+0x5/0xa [ 183.866631][ T8138] should_failslab+0xc2/0x120 [ 183.866658][ T8138] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 183.866698][ T8138] ? ptlock_alloc+0x1f/0x70 [ 183.866741][ T8138] ? __pfx_filemap_map_pages+0x10/0x10 [ 183.866778][ T8138] ptlock_alloc+0x1f/0x70 [ 183.866811][ T8138] pte_alloc_one+0x84/0x3e0 [ 183.866843][ T8138] __do_fault+0x359/0x550 [ 183.866887][ T8138] ? __pfx_filemap_map_pages+0x10/0x10 [ 183.866924][ T8138] do_fault+0x2db/0x1950 [ 183.866952][ T8138] ? __pmd_alloc+0x6aa/0x9c0 [ 183.866985][ T8138] __handle_mm_fault+0x180f/0x2b60 [ 183.867032][ T8138] ? __pfx___handle_mm_fault+0x10/0x10 [ 183.867071][ T8138] ? find_held_lock+0x2b/0x80 [ 183.867098][ T8138] ? mtree_load+0x311/0xa40 [ 183.867127][ T8138] ? mtree_load+0x311/0xa40 [ 183.867181][ T8138] handle_mm_fault+0x36d/0xa20 [ 183.867222][ T8138] __get_user_pages+0xf9c/0x34d0 [ 183.867265][ T8138] ? __pfx___get_user_pages+0x10/0x10 [ 183.867302][ T8138] faultin_page_range+0x1f1/0x9e0 [ 183.867340][ T8138] madvise_do_behavior+0x354/0x510 [ 183.867375][ T8138] ? __pfx_madvise_do_behavior+0x10/0x10 [ 183.867426][ T8138] do_madvise+0x195/0x240 [ 183.867455][ T8138] ? __pfx_do_madvise+0x10/0x10 [ 183.867485][ T8138] ? do_futex+0x192/0x350 [ 183.867552][ T8138] __x64_sys_madvise+0xa9/0x110 [ 183.867583][ T8138] ? lockdep_hardirqs_on+0x78/0x100 [ 183.867613][ T8138] do_syscall_64+0x106/0xf80 [ 183.867643][ T8138] ? clear_bhb_loop+0x40/0x90 [ 183.867677][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.867706][ T8138] RIP: 0033:0x7fca4399c799 [ 183.867730][ T8138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.867757][ T8138] RSP: 002b:00007fca448e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 183.867785][ T8138] RAX: ffffffffffffffda RBX: 00007fca43c15fa0 RCX: 00007fca4399c799 [ 183.867803][ T8138] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 183.867821][ T8138] RBP: 00007fca43a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 183.867838][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.867855][ T8138] R13: 00007fca43c16038 R14: 00007fca43c15fa0 R15: 00007ffc48a35d88 [ 183.867895][ T8138] [ 184.130437][ T8141] FAULT_INJECTION: forcing a failure. [ 184.130437][ T8141] name failslab, interval 1, probability 0, space 0, times 0 [ 184.143549][ T8141] CPU: 1 UID: 0 PID: 8141 Comm: syz.1.450 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.143593][ T8141] Tainted: [L]=SOFTLOCKUP [ 184.143602][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.143616][ T8141] Call Trace: [ 184.143625][ T8141] [ 184.143635][ T8141] dump_stack_lvl+0x100/0x190 [ 184.143678][ T8141] should_fail_ex.cold+0x5/0xa [ 184.143707][ T8141] should_failslab+0xc2/0x120 [ 184.143731][ T8141] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 184.143764][ T8141] ? sctp_get_port_local+0x828/0x1630 [ 184.143798][ T8141] sctp_get_port_local+0x828/0x1630 [ 184.143833][ T8141] ? __pfx_sctp_get_port_local+0x10/0x10 [ 184.143866][ T8141] ? sctp_bind_addr_match+0x19d/0x300 [ 184.143894][ T8141] sctp_do_bind+0x2b9/0x760 [ 184.143933][ T8141] sctp_connect_new_asoc+0x5e7/0x770 [ 184.143970][ T8141] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 184.144008][ T8141] ? __ipv6_addr_type+0xe8/0x2e0 [ 184.144040][ T8141] ? __ipv6_addr_type+0xe8/0x2e0 [ 184.144079][ T8141] __sctp_connect+0x3e7/0xc70 [ 184.144119][ T8141] ? __pfx___sctp_connect+0x10/0x10 [ 184.144153][ T8141] ? __pfx_sctp_inet_connect+0x10/0x10 [ 184.144187][ T8141] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.144228][ T8141] ? __pfx_sctp_inet_connect+0x10/0x10 [ 184.144259][ T8141] sctp_inet_connect+0x15f/0x220 [ 184.144294][ T8141] __sys_connect_file+0x141/0x1a0 [ 184.144322][ T8141] __sys_connect+0x141/0x170 [ 184.144344][ T8141] ? __pfx___sys_connect+0x10/0x10 [ 184.144392][ T8141] __x64_sys_connect+0x72/0xb0 [ 184.144413][ T8141] ? lockdep_hardirqs_on+0x78/0x100 [ 184.144441][ T8141] do_syscall_64+0x106/0xf80 [ 184.144468][ T8141] ? clear_bhb_loop+0x40/0x90 [ 184.144497][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.144527][ T8141] RIP: 0033:0x7ffacb99c799 [ 184.144548][ T8141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.144572][ T8141] RSP: 002b:00007ffacc8e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 184.144596][ T8141] RAX: ffffffffffffffda RBX: 00007ffacbc15fa0 RCX: 00007ffacb99c799 [ 184.144613][ T8141] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000005 [ 184.144627][ T8141] RBP: 00007ffacba32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 184.144643][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.144657][ T8141] R13: 00007ffacbc16038 R14: 00007ffacbc15fa0 R15: 00007ffc3d402008 [ 184.144690][ T8141] [ 184.997275][ T8139] can: request_module (can-proto-3) failed. [ 185.103785][ T8163] zswap: compressor not available [ 185.583395][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 185.934759][ T8176] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 187.628730][ T29] audit: type=1326 audit(1772288939.086:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.0.469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca4399c799 code=0x0 [ 188.063840][ T8217] can: request_module (can-proto-3) failed. [ 188.609703][ T8227] kexec: Could not allocate control_code_buffer [ 190.186869][ T8269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.476'. [ 190.286258][ T8269] hsr_slave_0: left promiscuous mode [ 190.324205][ T8269] hsr_slave_1: left promiscuous mode [ 191.516092][ T8292] can: request_module (can-proto-3) failed. [ 191.882924][ T8314] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 193.166311][ T29] audit: type=1800 audit(1772288944.613:15): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.492" name="dbroot" dev="configfs" ino=19286 res=0 errno=0 [ 193.204679][ T8335] db_root: not a directory: /dev/audio1 [ 193.794758][ T8343] bridge0: port 3(dummy0) entered blocking state [ 193.812633][ T8346] netlink: 338 bytes leftover after parsing attributes in process `syz.2.494'. [ 193.816533][ T8343] bridge0: port 3(dummy0) entered disabled state [ 193.841854][ T8343] dummy0: entered allmulticast mode [ 193.859700][ T8343] dummy0: entered promiscuous mode [ 193.867520][ T8343] bridge0: port 3(dummy0) entered blocking state [ 193.874183][ T8343] bridge0: port 3(dummy0) entered forwarding state [ 194.291203][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.297527][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.034182][ T8353] can: request_module (can-proto-3) failed. [ 196.075477][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.503'. [ 196.500923][ T8402] netlink: 342 bytes leftover after parsing attributes in process `syz.3.507'. [ 197.354139][ T8432] hub 1-0:1.0: USB hub found [ 197.371240][ T8432] hub 1-0:1.0: 1 port detected [ 197.619305][ T8430] can: request_module (can-proto-3) failed. [ 199.141211][ T8482] XFS: Clearing xfsstats [ 199.152664][ T8483] ======================================================= [ 199.152664][ T8483] WARNING: The mand mount option has been deprecated and [ 199.152664][ T8483] and is ignored by this kernel. Remove the mand [ 199.152664][ T8483] option from the mount to silence this warning. [ 199.152664][ T8483] ======================================================= [ 199.662427][ T8485] FAULT_INJECTION: forcing a failure. [ 199.662427][ T8485] name failslab, interval 1, probability 0, space 0, times 0 [ 199.734822][ T8485] CPU: 1 UID: 0 PID: 8485 Comm: syz.1.523 Tainted: G L syzkaller #0 PREEMPT(full) [ 199.734867][ T8485] Tainted: [L]=SOFTLOCKUP [ 199.734877][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.734893][ T8485] Call Trace: [ 199.734901][ T8485] [ 199.734911][ T8485] dump_stack_lvl+0x100/0x190 [ 199.734958][ T8485] should_fail_ex.cold+0x5/0xa [ 199.734991][ T8485] should_failslab+0xc2/0x120 [ 199.735030][ T8485] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 199.735069][ T8485] ? __d_alloc+0x34/0xa80 [ 199.735105][ T8485] __d_alloc+0x34/0xa80 [ 199.735137][ T8485] d_alloc_pseudo+0x1c/0xc0 [ 199.735173][ T8485] alloc_file_pseudo+0xcf/0x230 [ 199.735207][ T8485] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 199.735248][ T8485] __anon_inode_getfile+0xe8/0x280 [ 199.735277][ T8485] ? kasan_save_track+0x14/0x30 [ 199.735315][ T8485] sync_file_alloc+0x65/0x160 [ 199.735352][ T8485] sync_file_create+0x17/0xf0 [ 199.735391][ T8485] sw_sync_ioctl+0x849/0xf80 [ 199.735435][ T8485] ? find_held_lock+0x2b/0x80 [ 199.735458][ T8485] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 199.735510][ T8485] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 199.735553][ T8485] __x64_sys_ioctl+0x18e/0x210 [ 199.735592][ T8485] do_syscall_64+0x106/0xf80 [ 199.735621][ T8485] ? clear_bhb_loop+0x40/0x90 [ 199.735656][ T8485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.735683][ T8485] RIP: 0033:0x7ffacb99c799 [ 199.735704][ T8485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.735728][ T8485] RSP: 002b:00007ffacc8c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.735755][ T8485] RAX: ffffffffffffffda RBX: 00007ffacbc16090 RCX: 00007ffacb99c799 [ 199.735770][ T8485] RDX: 0000200000000080 RSI: 00000000c0285700 RDI: 000000000000000a [ 199.735784][ T8485] RBP: 00007ffacba32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 199.735799][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.735814][ T8485] R13: 00007ffacbc16128 R14: 00007ffacbc16090 R15: 00007ffc3d402008 [ 199.735846][ T8485] [ 200.333607][ T29] audit: type=1800 audit(1772288951.779:16): pid=8498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.528" name="dbroot" dev="configfs" ino=21527 res=0 errno=0 [ 200.912710][ T8499] can: request_module (can-proto-3) failed. [ 202.039573][ T8536] FAULT_INJECTION: forcing a failure. [ 202.039573][ T8536] name fail_futex, interval 1, probability 0, space 0, times 1 [ 202.122282][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.1.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.122330][ T8536] Tainted: [L]=SOFTLOCKUP [ 202.122339][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.122356][ T8536] Call Trace: [ 202.122365][ T8536] [ 202.122376][ T8536] dump_stack_lvl+0x100/0x190 [ 202.122422][ T8536] should_fail_ex.cold+0x5/0xa [ 202.122455][ T8536] get_futex_key+0x1d2/0x1620 [ 202.122490][ T8536] ? __pfx_get_futex_key+0x10/0x10 [ 202.122526][ T8536] ? update_se+0x94/0x760 [ 202.122565][ T8536] futex_wait_setup+0x81/0x500 [ 202.122610][ T8536] __futex_wait+0x19f/0x300 [ 202.122652][ T8536] ? __pfx___futex_wait+0x10/0x10 [ 202.122689][ T8536] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 202.122717][ T8536] ? lockdep_hardirqs_on+0x78/0x100 [ 202.122751][ T8536] ? __pfx_futex_wake_mark+0x10/0x10 [ 202.122798][ T8536] ? find_held_lock+0x2b/0x80 [ 202.122822][ T8536] ? futex_wake+0x456/0x530 [ 202.122867][ T8536] futex_wait+0xed/0x380 [ 202.122908][ T8536] ? __pfx_futex_wait+0x10/0x10 [ 202.122975][ T8536] do_futex+0x1ef/0x350 [ 202.123012][ T8536] ? __pfx_do_futex+0x10/0x10 [ 202.123047][ T8536] ? __pfx___might_resched+0x10/0x10 [ 202.123085][ T8536] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 202.123123][ T8536] __x64_sys_futex+0x34f/0x4d0 [ 202.123162][ T8536] ? __pfx___x64_sys_futex+0x10/0x10 [ 202.123212][ T8536] do_syscall_64+0x106/0xf80 [ 202.123242][ T8536] ? clear_bhb_loop+0x40/0x90 [ 202.123279][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.123308][ T8536] RIP: 0033:0x7ffacb99c799 [ 202.123331][ T8536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.123359][ T8536] RSP: 002b:00007ffacc8e60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.123408][ T8536] RAX: ffffffffffffffda RBX: 00007ffacbc15fa8 RCX: 00007ffacb99c799 [ 202.123427][ T8536] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffacbc15fa8 [ 202.123443][ T8536] RBP: 00007ffacbc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 202.123460][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.123476][ T8536] R13: 00007ffacbc16038 R14: 00007ffc3d401f20 R15: 00007ffc3d402008 [ 202.123513][ T8536] [ 202.798953][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 202.895845][ T8544] netlink: 130 bytes leftover after parsing attributes in process `syz.3.537'. [ 203.026593][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 204.057005][ T8568] can: request_module (can-proto-3) failed. [ 207.031392][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 211.169623][ T8695] binder: 8694:8695 ioctl c0306201 0 returned -14 [ 211.445416][ T8653] can: request_module (can-proto-3) failed. [ 211.724082][ T8707] can: request_module (can-proto-0) failed. [ 212.282883][ T8707] can: request_module (can-proto-0) failed. [ 212.329787][ T8707] can: request_module (can-proto-0) failed. [ 213.852668][ T8739] delete_channel: no stack [ 214.517717][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 214.542409][ T8748] netlink: 13 bytes leftover after parsing attributes in process `syz.3.574'. [ 216.616979][ T8788] can: request_module (can-proto-3) failed. [ 217.945228][ T8823] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 218.000510][ T8823] CIFS mount error: No usable UNC path provided in device string! [ 218.000510][ T8823] [ 218.026690][ T8823] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 219.428633][ T8840] netlink: 'syz.0.596': attribute type 3 has an invalid length. [ 220.741395][ T8867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 220.765909][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 220.886723][ T8852] can: request_module (can-proto-3) failed. [ 222.984513][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.609'. [ 225.436243][ T8933] can: request_module (can-proto-3) failed. [ 226.453641][ T8975] vhci_hcd vhci_hcd.2: invalid port number 16 [ 226.459953][ T8975] vhci_hcd vhci_hcd.2: invalid port number 16 [ 226.815435][ T8981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 226.884813][ T8981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.283467][ T8981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.369515][ T9010] zswap: compressor not available [ 228.500332][ T9019] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 229.815850][ T9039] can: request_module (can-proto-3) failed. [ 230.769319][ T9064] random: crng reseeded on system resumption [ 230.896437][ T9069] Unrecognized hibernate image header format! [ 230.902557][ T9069] PM: hibernation: Image mismatch: architecture specific data [ 231.419144][ T9086] netlink: 330 bytes leftover after parsing attributes in process `syz.2.648'. [ 232.308513][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 233.289625][ T9123] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 233.335532][ T9123] pci 0000:00:01.3: PCI INT A: no GSI [ 233.477939][ T9126] mkiss: ax0: crc mode is auto. [ 235.189703][ T9152] can: request_module (can-proto-3) failed. [ 236.009819][ T9169] openvswitch: netlink: IP tunnel dst address not specified [ 236.392468][ T9175] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 236.458111][ T9175] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 236.827454][ T9181] usb usb26: usbfs: interface 0 claimed by hub while 'syz.0.670' resets device [ 237.099661][ T9191] FAULT_INJECTION: forcing a failure. [ 237.099661][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 237.112773][ T9191] CPU: 1 UID: 0 PID: 9191 Comm: syz.2.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.112818][ T9191] Tainted: [L]=SOFTLOCKUP [ 237.112827][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.112838][ T9191] Call Trace: [ 237.112844][ T9191] [ 237.112850][ T9191] dump_stack_lvl+0x100/0x190 [ 237.112877][ T9191] should_fail_ex.cold+0x5/0xa [ 237.112903][ T9191] should_failslab+0xc2/0x120 [ 237.112918][ T9191] __kmalloc_cache_noprof+0x7a/0x6f0 [ 237.112936][ T9191] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 237.112952][ T9191] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 237.112969][ T9191] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 237.112986][ T9191] vidtv_channel_si_init+0x1289/0x18d0 [ 237.113009][ T9191] vidtv_mux_init+0x526/0xbf0 [ 237.113029][ T9191] vidtv_start_feed+0x33e/0x4c0 [ 237.113050][ T9191] ? __pfx_vidtv_start_feed+0x10/0x10 [ 237.113072][ T9191] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 237.113097][ T9191] ? mark_held_locks+0x40/0x70 [ 237.113118][ T9191] ? __pfx_vidtv_start_feed+0x10/0x10 [ 237.113138][ T9191] dmx_ts_feed_start_filtering+0xf6/0x220 [ 237.113164][ T9191] dvb_dmxdev_start_feed+0x273/0x3f0 [ 237.113186][ T9191] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 237.113208][ T9191] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 237.113230][ T9191] dvb_demux_do_ioctl+0xe64/0x1200 [ 237.113257][ T9191] dvb_usercopy+0x167/0x340 [ 237.113274][ T9191] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 237.113295][ T9191] ? __pfx_dvb_usercopy+0x10/0x10 [ 237.113321][ T9191] ? __fget_files+0x21f/0x3d0 [ 237.113347][ T9191] dvb_demux_ioctl+0x29/0x40 [ 237.113365][ T9191] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 237.113383][ T9191] __x64_sys_ioctl+0x18e/0x210 [ 237.113410][ T9191] do_syscall_64+0x106/0xf80 [ 237.113439][ T9191] ? clear_bhb_loop+0x40/0x90 [ 237.113474][ T9191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.113502][ T9191] RIP: 0033:0x7f7dc0b9c799 [ 237.113525][ T9191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.113547][ T9191] RSP: 002b:00007f7dc19af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.113563][ T9191] RAX: ffffffffffffffda RBX: 00007f7dc0e16090 RCX: 00007f7dc0b9c799 [ 237.113573][ T9191] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 237.113582][ T9191] RBP: 00007f7dc0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 237.113591][ T9191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.113600][ T9191] R13: 00007f7dc0e16128 R14: 00007f7dc0e16090 R15: 00007fff378af7d8 [ 237.113621][ T9191] [ 237.114682][ T9191] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 237.382543][ T9191] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 237.390960][ T9191] CPU: 1 UID: 0 PID: 9191 Comm: syz.2.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.401729][ T9191] Tainted: [L]=SOFTLOCKUP [ 237.406052][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.416187][ T9191] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 237.422100][ T9191] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 3d 68 dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 19 68 dc f9 4d 85 e4 [ 237.441726][ T9191] RSP: 0018:ffffc90003327a10 EFLAGS: 00010247 [ 237.447798][ T9191] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000e0e3000 [ 237.455763][ T9191] RDX: 0000000000000000 RSI: ffffffff882b9263 RDI: 0000000000000005 [ 237.463729][ T9191] RBP: ffff88807a6b64a0 R08: 0000000000000000 R09: 4453534204050000 [ 237.471702][ T9191] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 237.479671][ T9191] R13: ffff888056dc67c0 R14: ffff888033876dc0 R15: ffff88802a2fe4c0 [ 237.487646][ T9191] FS: 00007f7dc19af6c0(0000) GS:ffff88812444e000(0000) knlGS:0000000000000000 [ 237.496576][ T9191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.503156][ T9191] CR2: 0000001b30a08ff8 CR3: 0000000035234000 CR4: 00000000003526f0 [ 237.511130][ T9191] Call Trace: [ 237.514417][ T9191] [ 237.517338][ T9191] vidtv_channel_si_init+0x12fc/0x18d0 [ 237.522805][ T9191] vidtv_mux_init+0x526/0xbf0 [ 237.527486][ T9191] vidtv_start_feed+0x33e/0x4c0 [ 237.532342][ T9191] ? __pfx_vidtv_start_feed+0x10/0x10 [ 237.537721][ T9191] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 237.544322][ T9191] ? mark_held_locks+0x40/0x70 [ 237.549099][ T9191] ? __pfx_vidtv_start_feed+0x10/0x10 [ 237.554474][ T9191] dmx_ts_feed_start_filtering+0xf6/0x220 [ 237.560205][ T9191] dvb_dmxdev_start_feed+0x273/0x3f0 [ 237.565498][ T9191] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 237.570966][ T9191] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 237.576171][ T9191] dvb_demux_do_ioctl+0xe64/0x1200 [ 237.581301][ T9191] dvb_usercopy+0x167/0x340 [ 237.585809][ T9191] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 237.591362][ T9191] ? __pfx_dvb_usercopy+0x10/0x10 [ 237.596396][ T9191] ? __fget_files+0x21f/0x3d0 [ 237.601098][ T9191] dvb_demux_ioctl+0x29/0x40 [ 237.605699][ T9191] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 237.610994][ T9191] __x64_sys_ioctl+0x18e/0x210 [ 237.615766][ T9191] do_syscall_64+0x106/0xf80 [ 237.620356][ T9191] ? clear_bhb_loop+0x40/0x90 [ 237.625034][ T9191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.630927][ T9191] RIP: 0033:0x7f7dc0b9c799 [ 237.635337][ T9191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.655031][ T9191] RSP: 002b:00007f7dc19af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.663459][ T9191] RAX: ffffffffffffffda RBX: 00007f7dc0e16090 RCX: 00007f7dc0b9c799 [ 237.671425][ T9191] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 237.679597][ T9191] RBP: 00007f7dc0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 237.687562][ T9191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.695525][ T9191] R13: 00007f7dc0e16128 R14: 00007f7dc0e16090 R15: 00007fff378af7d8 [ 237.703499][ T9191] [ 237.706511][ T9191] Modules linked in: [ 237.710896][ T9191] ---[ end trace 0000000000000000 ]--- [ 237.779929][ T9191] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 237.806266][ T9191] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 3d 68 dc f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 19 68 dc f9 4d 85 e4 [ 237.948042][ T9191] RSP: 0018:ffffc90003327a10 EFLAGS: 00010247 [ 237.954466][ T9191] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000e0e3000 [ 237.970373][ T9191] RDX: 0000000000000000 RSI: ffffffff882b9263 RDI: 0000000000000005 [ 237.980170][ T9191] RBP: ffff88807a6b64a0 R08: 0000000000000000 R09: 4453534204050000 [ 237.993211][ T9191] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 238.008002][ T9191] R13: ffff888056dc67c0 R14: ffff888033876dc0 R15: ffff88802a2fe4c0 [ 238.017348][ T9191] FS: 00007f7dc19af6c0(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 238.120153][ T9191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.150032][ T9191] CR2: 00007fca4487f990 CR3: 0000000035234000 CR4: 00000000003526f0 [ 238.185598][ T9191] Kernel panic - not syncing: Fatal exception [ 238.192047][ T9191] Kernel Offset: disabled [ 238.196365][ T9191] Rebooting in 86400 seconds..