last executing test programs: 11.658881965s ago: executing program 3 (id=2416): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x50101000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000580), {0x1a}, &(0x7f00000005c0)=""/146, 0x92, &(0x7f0000000340)=""/158, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) r2 = fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mmap$auto(0x0, 0x2000e, 0x1630, 0xeb1, 0x40000000000a5, 0x7ffc) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000280), 0x7) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000180), 0x44101, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cuse\x00', 0x6cad41, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, &(0x7f0000000440)="0500000bb2cea2", 0x7) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x0, 0x0) 9.472038434s ago: executing program 3 (id=2420): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xf, 0x3, 0x2) getpeername$auto(0x3, 0x0, 0x0) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) ptrace$auto(0x4, 0xffffffffffffffff, 0x8000000000000000, 0xfff) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, 0x0, 0x6b) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') setns(r1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x8, 0x0, &(0x7f0000000240)={[0x7, 0x0, 0x772e, 0x8000000000000001, 0x0, 0x9c1c, 0x6, 0xfffffffffffffffa, 0xffffffffffff7fff, 0x8, 0x100, 0x8000000000000000, 0x4, 0x7, 0x2]}, &(0x7f00000002c0)={[0xffffffffffffff8a, 0x8, 0x6, 0x3, 0x6, 0x1, 0x3, 0xfff, 0x7fff, 0x8, 0x5, 0x1, 0x8, 0x5, 0x860, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.431747245s ago: executing program 0 (id=2422): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x94400, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0xf92c, 0x285, 0xf8, r0, 0x6) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) ioctl$auto(0x3, 0xae47, 0x38) mmap$auto(0x3, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) socket(0x23, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) ptrace$auto_PTRACE_DETACH(0x11, 0x0, 0x6, 0x1) sysfs$auto(0x2, 0x44, 0x6) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0xfe, 0xfffffffffffffffc) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) r3 = socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x7, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.5/usb20/20-0:1.0/usb20-port1/usb3_lpm_permit\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) close_range$auto(r0, r1, 0x7f) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) 8.461864966s ago: executing program 0 (id=2423): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2202, 0x0) write$auto(r2, &(0x7f00000001c0)='7p\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3dec) madvise$auto(0x6, 0x4, 0x7) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0xc54748b24ee604b7, 0x0) mq_timedsend$auto(r1, 0x0, 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/conf/veth0_vlan/arp_evict_nocarrier\x00', 0x202, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000300)="b40c25fb561d", 0x6) sysfs$auto(0x2, 0x3b, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) ioctl$auto_UI_SET_PROPBIT(r1, 0x4004556e, &(0x7f00000001c0)=0x6) read$auto(r3, 0x0, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.889020429s ago: executing program 1 (id=2424): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r0, 0x0, 0x1) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="17000000", @ANYBLOB='x\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) open_tree$auto(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(0x0, 0x0, 0x57e) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b73, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r1, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.510651019s ago: executing program 3 (id=2425): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) r0 = socket(0x2, 0x80002, 0x73) bind$auto(r0, 0x0, 0x6b) writev$auto(r0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x33) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x400c891) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x17, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x29) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x82}, 0x1, 0x0, 0x0, 0x623d) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000400)={{&(0x7f0000000180)="5eee240e9ab90aaceb7ec1c8feaf9360020e13c7ce6d0e15f3bd3995435eb534e31b8f4fd7a440423beb15a5a1b78873aae58d7134525a833036063fd530673d1e4631e093a61ee122f9a78da8a078c4ebd0b6f01669eab6c7ed99c9b9b83b65", 0x800000, &(0x7f0000000380)={&(0x7f00000002c0)="cccecf96691effca4f77c0e01c9344799ebfd1c5ddf8ee6bd429fa4a70cdefcb67c461f6030e85303ebcae57372802821b0770daabd305cd232bfb28c0ca02c18ab9c8b478e387aac69a4160d933b2e429390a991525a5c1ce37a6c16b0f1630f2bddc92d0a113241de6eda54e3e00b27c3ef3e2f35793be41b352f3f0b3dd351968ac98046e3088ab438f29562bbd41b49662aec22aa6bfd08175a1eb85d4577ce5922527efe0", 0x8}, 0x10000, &(0x7f00000003c0), 0x0, 0xffffffff}, 0x10001}, 0x80000001, 0x8, &(0x7f0000000440)={0x663, 0x8}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x248042, 0x0) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) r2 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/gid_map\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000480)={0x0, 0x2}, 0x2, 0x2, 0x3) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) read$auto_vhost_vsock_fops_vsock(r1, &(0x7f00000004c0)=""/157, 0x9d) 6.776433907s ago: executing program 0 (id=2427): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x4, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x800, 0x0) r3 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4006, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) 5.240678046s ago: executing program 1 (id=2429): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x0, 0x6, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x1, 0x7) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x20, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f0000000180)="5deadfef1cceee8abd0363d6b7984a06a1b2aa112fffef2a9af744f4060a949707bc0e5559fda3a2a1a4e7c603bf17674d6ac5b9689108178a4e7b09f557f403dd5595517682074e0338e930e7e2d73d6b269cdf", 0x40a2, &(0x7f0000000380)={&(0x7f0000000280)="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", 0x1}, 0x6, &(0x7f00000003c0)="28404004d752ae338a310b54b5d866923857c8348679a564ee0b7d64f3861be2a1da936b7fa05ce25615c758dc92f7a7f3c00aca55152e188f506ec02ccbf30b8124bad57771c6e26a976e7d3d91a6ebfffbe2341ea0e957f78e16ad119995c37aac0a8b33117344b3a24ea39603f611793fb7f8468e49f97e05453f8cc55e0b066952225556cb139df6f5fe320d27512ce1724f2bb9144004c52c990d18", 0xc, 0x6}, 0x6}, 0x9, 0x7fff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000140)={0x0, 0xc3}, 0x6, 0x0, 0x0, 0x504}, 0x1}, 0x2, 0x0) 5.228188949s ago: executing program 3 (id=2430): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) ioctl$auto_TIOCMSET2(r1, 0x5418, &(0x7f00000001c0)="fbbb5ed7041d634c6f21ebe234a385de375bb3a7634423893a2fd26fff38ca934105e4eb17b3a2c6b978b19bd843ff6ed9c160f472038b82702ea70d5af15cdc") ioctl$auto_UI_SET_PROPBIT(r1, 0x4004556e, &(0x7f0000000380)=0x9) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f00000001c0)={0x80000001}) r2 = io_uring_setup$auto(0x1, 0x0) r3 = pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x800, 0xc, 0x0) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r4, 0x0, 0x5) futimesat$auto(r2, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x8, 0xa8d7}) r5 = setfsgid$auto(0xffffffffffffffff) statx$auto(r3, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x8, 0xc, 0xb476, 0x0, 0x0, r5, 0xffff, 0xb9, 0x3, 0x0, 0x0, 0x80, {0x7, 0x10000}, {0x1, 0x9}, {0x1ff, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x6, 0x401, 0x400000000006, 0x7, 0x6, 0x3, 0x40, 0x6, 0x0, 0x9, [0x3, 0x10, 0x7fffffffffffffff, 0x81, 0xd, 0x7ffd, 0x6, 0x200000000000003, 0x9]}) statx$auto(r2, &(0x7f00000000c0)='./cgroup\x00', 0x7ff, 0x2, &(0x7f0000000200)={0x5, 0x9, 0x80, 0x5, 0xee00, r5, 0xa267, 0xf801, 0x3, 0x4, 0x401, 0x0, {0x4, 0x400}, {0x5, 0xefd7}, {0x5, 0x8}, {0x1, 0x49}, 0x30000, 0xff, 0x80000000, 0x8000, 0x5, 0x8, 0xffff, 0x7, 0x2, 0x2, 0x1, 0x6, [0x6, 0x1, 0x9, 0xffffffff, 0x8, 0x10000, 0x100, 0x10, 0x2]}) keyctl$auto(0x1f, 0x1, 0x6, r5, 0x3ff) unshare$auto(0x40000080) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.064062526s ago: executing program 2 (id=2431): mmap$auto(0x0, 0x400008, 0xa, 0x9b72, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = fsopen$auto(0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @local}, 0x7) r1 = fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(r1, 0xffffffffffffffff, 0x530) r2 = socket(0xa, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000100)=0x1000c0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x25, &(0x7f0000000280), 0x1) socketpair$auto(0x100000, 0xffffffbf, 0x9, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x6, 0x0) process_vm_writev$auto(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0xb4}, 0x1008000000000009, 0x0, 0x3ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x300) write$auto(0x3, 0x0, 0xfdef) ptrace$auto(0x4206, 0x1, 0x0, 0x0) 5.037688666s ago: executing program 0 (id=2432): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x2) socket(0x2d, 0x2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) ioctl$auto_TIOCMSET2(r2, 0x5418, &(0x7f00000001c0)="fbbb5ed7041d634c6f21ebe234a385de375bb3a7634423893a2fd26fff38ca934105e4eb17b3a2c6b978b19bd843ff6ed9c160f472038b82702ea70d5af15c") ioctl$auto_UI_SET_PROPBIT(r2, 0x4004556e, &(0x7f0000000380)=0x9) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f00000001c0)={0x80000001}) r3 = io_uring_setup$auto(0x1, 0x0) r4 = pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) r6 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r6, 0x0, 0x5) futimesat$auto(r3, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x8, 0xa8d7}) r7 = setfsgid$auto(0xffffffffffffffff) statx$auto(r4, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x8, 0xc, 0xb476, 0x0, r5, r7, 0xffff, 0xb9, 0x3, 0x0, 0x0, 0x80, {0x7, 0x10000}, {0x1, 0x9}, {0x1ff, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x6, 0x401, 0x400000000006, 0x7, 0x6, 0x3, 0x40, 0x6, 0x0, 0x9, [0x3, 0x10, 0x7fffffffffffffff, 0x81, 0xd, 0x7ffd, 0x6, 0x200000000000003, 0x9]}) statx$auto(r3, &(0x7f00000000c0)='./cgroup\x00', 0x7ff, 0x2, &(0x7f0000000200)={0x5, 0x9, 0x80, 0x5, 0xee00, r7, 0xa267, 0xf801, 0x3, 0x4, 0x401, 0x0, {0x4, 0x400}, {0x5, 0xefd7}, {0x5, 0x8}, {0x1, 0x49}, 0x30000, 0xff, 0x80000000, 0x8000, 0x5, 0x8, 0xffff, 0x7, 0x2, 0x2, 0x1, 0x6, [0x6, 0x1, 0x9, 0xffffffff, 0x8, 0x10000, 0x100, 0x10, 0x2]}) keyctl$auto(0x1f, 0x1, 0x6, r7, 0x3ff) unshare$auto(0x40000080) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.84845107s ago: executing program 1 (id=2433): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) socket(0x2, 0x3, 0xa) bind$auto(0x3, &(0x7f0000000080)=@sco, 0xfffffffb) unshare$auto(0x40000080) r1 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x400000, 0x0) ioctl$auto_FS_IOC_REMOVE_ENCRYPTION_KEY2(r1, 0xc0406618, &(0x7f0000000180)={{0x1000}, 0x81}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0x0) bind$auto(0x3, &(0x7f0000000080)=@nfc={0x27, r6, 0x1, 0x2}, 0x6b) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.519409278s ago: executing program 2 (id=2434): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='&&\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0x28000000) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f0000000140)='&&\x00', 0x0, 0x1000000000003, 0x0) 4.177520249s ago: executing program 2 (id=2435): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyw0\x00', 0x103e81, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x80800, 0x0) r0 = pidfd_open$auto(0x0, 0x2) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) pread64$auto(r0, 0x0, 0x1008, 0x2000000000037) unshare$auto(0x40000080) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44048844}, 0x4000001) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/midiC2D2\x00', 0x84041, 0x0) write$auto(r1, 0x0, 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40040080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0x29, 0x1, 0x84) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x22b02, 0x0) write$auto(r2, 0x0, 0x1000000007e) rt_sigqueueinfo$auto(0x0, 0x7e, 0x0) unshare$auto(0xfffffffffffffffc) r3 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r3, &(0x7f00000001c0)={{0x0, 0x5ac, &(0x7f0000000100)={0x0, 0xfffffffffffffffa}, 0x5, 0x0, 0x5, 0x6}, 0x9}, 0x2, 0x100) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.379884796s ago: executing program 0 (id=2436): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='G\xe3\x00\xe90\x87\xb8\xa6-v\x02\x00udio\xff\x00\x02\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\xdd\xa7\xee$\x8d\xc4\xe9d\x03\x1dF\xec\x98\x00\x00\x00\x00~&F\xf2?\x00\x00\x00)\xcf\aOk\xc3J-A\xb4\xfb\\n\x89C:\x84D\x1du\xb4U\x95\xb6c3\xaeO\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7VD\xa7\xb7?\"o\xc3\xe8)\xb8&\x95\x88\xa2\xba\x811:5\xb2\x00\x00\x00\x00\b\xd36\xe8\xcb?(\xfaI\xebM\x00\x00kx\x83\xcf\xc5D\xcc*\x96g_zX>\xe6sC\xa8\xea\xee>\xd7k\xa8\xefC\x141\xdc\x03\xff=\xd1\vE-\xb1\xd9a\xf1\x18\x06C\xdb\xc5\x9az\xc4\x1a\x1e\xd7\x1bp\x9b\x11U#\xa6\xb0-\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0xe0801, 0x0) write$auto(r1, &(0x7f00000027c0)='0#dL\xff\x15\x01\x00\x00\x00\x00\x00\x00\x00\xff\v\xb5^w/[\x00', 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x6b) setns(0xffffffffffffffff, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x181081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f00000001c0)="853632c0d3cfd0d691a83a66ece86459c4a843b9e9874896f27234787ff21efa4738c3738bdff1422ac1a62c", 0x2c) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r5 = socket(0x2, 0x1, 0x106) setsockopt$auto(r5, 0x4, 0x8, 0x0, 0x4) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.271799221s ago: executing program 3 (id=2437): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/tty41\x00', 0x109401, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0xfffffffffffffff7, 0xdf, 0x1a, 0x2, 0x800000000008000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) close_range$auto(0x2, 0x8, 0x8020000) msgctl$auto_MSG_INFO(0xfe0, 0xc, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x80000001, 0xfffffffffffffffc, 0x1ee, 0xeb5, 0xffffffffffffffff, 0xfffffffffffffc01) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(r2, &(0x7f0000000380)='1Eer/aud\xe9o1\x00/\xa66\x10\xabVI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec@\xd3\x9ce\xffGP\x97)\xcf\a\xfb\xdf\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x01\x00\x00\x00\x00\x00\x00\x003.O\xab\"4\x8a\xbbY8@Z\xa6!\xe8 \xf6$7\xa0\xdcF\xb95`\xa4m\xffb\x17\xbb\x7f\xea4.\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xd4\a\x18n\x8d\xf0\xfe\xceL\xbe8\xdc\xb9\xb6\'\xc4~\x18\xc4\x9e\x05=4\xdc\x96\x0e\xb1\x9bL\x918\x8f\x1by\x94C\x933`\x1a\x17\xe9', 0xa) ioctl$auto_SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x402c542b, &(0x7f0000000440)) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) madvise$auto_MADV_HUGEPAGE(0x0, 0x8, 0xe) ioctl$auto(r0, 0x5600, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ADD(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001880)={0x1430, r4, 0x1, 0x70bd28, 0xa5dfdbfc, {}, [@TIPC_NLA_BEARER={0x141c, 0x1, 0x0, 0x1, [@nested={0x1416, 0x1, 0x0, 0x1, [@typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x1050, 0x115, 0x0, 0x1, [@generic="db22105ebd317386d16945f74d1722c90ec024e4720a6d9007ba513ac53c00475b3807fc48be2b0e5f580b83acce2c09", @typed={0x8, 0x15f, 0x0, 0x0, @uid}, @generic="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", @typed={0xc, 0x142, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x8e, 0x0, 0x0, @pid}]}, @nested={0x43, 0x2f, 0x0, 0x1, [@generic="ec8613687416dd14ac28aa45ce315f59b2df9e6de9948549a10b7ae7f66f66ee14d66571de46e33b08570404ad752e9da365a1c95d373af03ef2e22bccbacf"]}, @typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r1}, @generic="65d3", @nested={0x154, 0x0, 0x0, 0x1, [@nested={0x31, 0x12, 0x0, 0x1, [@generic="47fe7cd50bee24ef2cdae23534", @nested={0x4, 0x9b}, @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x10c, 0xc5, 0x0, 0x1, [@nested={0x4, 0x9d}, @typed={0x8, 0x159, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0xb8}, @generic="658d94a03821c3a561140bcf9330f2585c3cb2f86bcb716534bc8387eee8aaeb54f908c58997545fd450a040b15da179cc7ea83eadea06ed4510e835f6de372a3ac3bd32ae3258886ef5d5e9071919e25ad846c040e18f3eb9c31b687f5dccea10807cd1c66cce4799c5ec1002d6656d50cb91b981772f181c4fd8c9aee1b57e374b461b9a63a277d628634186b6c33df3e15bfa0a15d4ff97a1a8a661cc2a53607159f29e0d0d425d21acef00bce13cd0471d3e6205a589701d8be7ebac62d8e49b565c112fb99369d8e2c41b6ca8a9527b6ddd1c3801b9a0cb63b2d4a1a4e40c59933d439d5b0702bbd13bf3c398b40b737b6c527585fc"]}, @typed={0x7, 0xb0, 0x0, 0x0, @str='$:\x00'}, @typed={0x8, 0x155, 0x0, 0x0, @pid}]}, @typed={0x8, 0x97, 0x0, 0x0, @fd=r3}, @nested={0x1f0, 0x20, 0x0, 0x1, [@generic="2f431594bec8e0853fe813fb7b1274e4e2802538f66eadaa6145344a76bf6998f05f9e38cdb55bd0009bf11b60cba44d9a24d96d79cef426253f4198847c439d4ebaa0c6852d7c2d019a6ae066cab45ff43311a0d48d2f717febb1672f538313fbf007a00921e1cf9680132e7546f838bb7c22b0c55ef532dfffb6c665b3ccf09e978f33cf19a85fdffeb18490303b5e52b27334b46b8aae5aea521d2562ac8b1558b896f9f2b5824a20c1f568147ee69c3a09413266edd39e6baa529399a5b6355d3109088a189869856a8a61f0ffec8d6465739f94ada20e7d9a8984767adf5f75e086a0e2a16b92e1a1217eed8f", @generic, @nested={0x4c, 0x7b, 0x0, 0x1, [@generic="2feb626bf301721554a015e4301be682929513ddf1a8302f404cc98473b678aab481a398f5257ca2e4f0b8b1940b6722ad85d957cd8bd89b", @nested={0x4, 0x102}, @generic="639bd8ba7d5b913f99be95c8"]}, @generic="4c0ce5032285e082809525c9727525db69fc009111f84fe212d1e43e13155200589d07ddca269e012dd084eb90bbd49a32c029bf0a384c88a57bcd8973fb5295b0a5afa837f32d6c08e0b350612bf58f63ff966b8b33afb29f01a0876ec6697bcd63f557aa59fa6906a191a292105919c32a62740381bc2b31ae5196da1344eac528e18de4623e6594bd110b5f47b81948b6", @generic="fe298866cddf6fadd0c3a098b32f248ce48be343da6a3b", @typed={0x8, 0x12e, 0x0, 0x0, @pid}]}]}]}]}, 0x1430}, 0x1, 0x0, 0x0, 0x20000000}, 0x240009c0) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)={{0x0, 0xee00, 0xee00, 0x7, 0x9, 0x4, 0x6}, 0x800, 0x1, 0x1fc, 0xffff, @raw=0x3, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000000), &(0x7f0000000040)="a3b90b83f874d5c7c618ea6d996c6e6a7b4a89ca06b060d9bbc2"}) r6 = setfsgid$auto(0x0) quotactl_fd$auto(0xffffffffffffffff, 0x7, r6, &(0x7f00000033c0)="c6e7ceafec467c07a9371614b896f9d1797dd49271f66699e24deaac5fcfe05cd1977860304976aafe7b369144b0b80eb948e6ac09a2f4cc54b7b707c95d92d9d642330363cd2c63b172de9bd00ab739f094a3b8e686d9663d37307a951d16fd4db1c9d5ccec9f52dacd5d4e85f580adde21957096bc72a1ce161ab279e027ac4065208f8e4a5b3003b627103a0b3168e1922b9cd44b4ab6344e35f338a7c24d562e0b185a3fed2e30ec113808c413bfd4b70a6bd3871a1215b217b9") shmctl$auto_SHM_STAT(0x200, 0xd, &(0x7f00000004c0)={{0x8, 0x0, r6, 0x2, 0x2, 0x0, 0x800}, 0x9, 0x80, 0xffffffffffffff81, 0x8d, @raw=0xfffffffa, @inferred=0xffffffffffffffff, 0x3ff, 0x0, &(0x7f0000000200)="cd3a0a40a6dd04a5a0810178f04eff5ef749150af724a6cd32f416d5bbf1fe4d94e0bc8ce27a34f6ad74f4865df0ec261e537f11fd92204280573be09d592b1ce8af2db95cda6e558e76b94c3ee9c07d4e1a3cf2f00c23a251e9651d223703f73794b0c5e5f0e0fdf8eabc0783d5a7a33bc417d5c47e83878cdf7f8fdf3ef8231cea7597baefe1c13936decb5e73b0035235919bff8902fd928cfacfcac55af6beb77ff991754affcac9d400305e4f0c13002ae925518a170325a6063ee76924ee229127a788986a1784d3479520267833593785fb88d8c3300a1d3225b8dba8bc8bd9068935c84e782dcd", &(0x7f00000003c0)="ed9e9e8ad0e37dd698e54db2d1594df8edc66d89e207ec03ff1072d2908876f34e6cc7158d47e0916052f2f037b4f0fc760ba21c3e88079a5ad2815d06e97672ca129018c645eca8e98fe4b66812f97a471237e87027f30995c9fa409b2b8957ae21559e2aa82e2959fce6bcce56c5f800afd2bcb2183135f8bf6f73f9f115acd14ed72266405a0b0e096e2bd1545a616c3f3f8fdafd0e80ed8e47d02ac19fa2d7ea0c77515bce2cc12291c19383449010093d9a3215ab813416c349d1"}) setregid$auto(r5, r6) 2.103988071s ago: executing program 1 (id=2438): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) madvise$auto(0x3f, 0x400053, 0x9) futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x2240, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) open(0x0, 0x80400, 0x42) setsockopt$auto(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) 1.99630767s ago: executing program 2 (id=2439): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0ro\x00', 0x80000, 0x0) ioctl$auto_MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f0000000040)=0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r1, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x202, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x7ffff000) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, 0x0, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x0, 0x300, 0x70bd29, 0x25dfdbf9}, 0xfffffffffffffee4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES16, @ANYBLOB="000125bd7000ffdbdf250f00000008000d007f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '/dev/mtd0ro\x00'}, @NFC_ATTR_SE_APDU={0x29, 0x19, "60c3eba9b6783d6fa552fc5faca5da96b90d17ea6220e7a6bdd9eff4ddcdcf10e97efa3c47"}, @NFC_ATTR_VENDOR_DATA={0xc, 0x1f, "9f7108a55fbe188b"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xc61d}, @NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff42}, @NFC_ATTR_TM_PROTOCOLS={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x41) sysfs$auto(0x2, 0x3b, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 1.782675934s ago: executing program 1 (id=2440): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4006, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) 311.910064ms ago: executing program 3 (id=2441): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0x4, 0x3, 0x3b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x800, 0x0) r3 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000580)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffffffffffffff, [0x3, 0x0, 0xb0ed, 0x7f, 0x4, 0x9ad]}) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x5, 0x202000c, 0x5, 0x8000000000000011, 0xfffffffffffffffa, 0x7ffc) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xdd\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83\x16\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/221, 0x8fe8, 0x6) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4ed40, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) semget$auto(0x2, 0x1, 0x4) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f0000000680)={{0x8, 0x0, 0x0, 0x7f, 0x7, 0x5, 0xf}, &(0x7f0000000180)=0xd6, &(0x7f0000000500)=0xaf, 0x2, 0xfffffffffffffff7, 0x0, 0x3, 0x4, 0x7, 0x0, 0x1, @inferred=0xffffffffffffffff, @raw=0x42}) keyctl$auto(0x1f, r4, 0x6, r5, 0x4cb6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) 0s ago: executing program 2 (id=2444): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) r1 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x100000008}, 0x6f4) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x7fff) io_getevents$auto(0x6, 0x8, 0x2, &(0x7f0000000000)={0xfc8, 0x5, 0x101, 0x8}, &(0x7f00000000c0)={0xb0e, 0x4}) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000004c0), r0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x148, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NET_SHAPER_A_LEAVES={0x90, 0xa, 0x0, 0x1, [@NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x7}, @NET_SHAPER_A_HANDLE={0x3c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x401}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x9}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xfffffffa}]}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x4c}, @NET_SHAPER_A_HANDLE={0x34, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x670}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x5}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x101}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x8001}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xfff}]}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0xff}, @NET_SHAPER_A_HANDLE={0x4}]}, @NET_SHAPER_A_BURST={0xc, 0x5, 0x1}, @NET_SHAPER_A_BW_MAX={0xc, 0x4, 0x82ac}, @NET_SHAPER_A_LEAVES={0x60, 0xa, 0x0, 0x1, [@NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x5}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x800}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x3}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x7}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x4}, @NET_SHAPER_A_HANDLE={0x1c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x3}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x5}]}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0xa03d}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x7ff}, @NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x9}]}, @NET_SHAPER_A_BURST={0xc, 0x5, 0x3}, @NET_SHAPER_A_PARENT={0x14, 0x9, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x3}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}]}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x6}]}, 0x148}, 0x1, 0x0, 0x0, 0x4008000}, 0xc090) socket(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x8) fanotify_mark$auto(r5, 0x1, 0x3, r1, &(0x7f0000000080)='./file0\x00') socket(0xa, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x6) prctl$auto_PR_SCHED_CORE_GET(0x1, 0x0, r2, 0xffffffffffffff81, 0xffffffffffff5ce3) r6 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f00000003c0)=@iter_create={r6, 0x800}, 0x8) select$auto(0x4, 0x0, &(0x7f0000000240)={[0x9, 0x6, 0xc, 0xffffffffffffff8e, 0xd3, 0x600, 0xc, 0x6, 0x2, 0x3, 0xffffffffffffffff, 0x1000, 0x9, 0x9, 0x9, 0x4]}, 0x0, &(0x7f0000000340)={0x9, 0x5}) sysfs$auto(0x2, 0x3b, 0x0) kernel console output (not intermixed with test programs): 0x10/0x10 [ 411.634985][T11954] ? rw_verify_area+0xce/0x6d0 [ 411.635021][T11954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.635055][T11954] vfs_read+0x1e4/0xb40 [ 411.635082][T11954] ? __pfx_vfs_read+0x10/0x10 [ 411.635105][T11954] ? __fget_files+0x215/0x3d0 [ 411.635135][T11954] ? __fget_files+0x21f/0x3d0 [ 411.635168][T11954] ksys_read+0x12a/0x250 [ 411.635190][T11954] ? __pfx_ksys_read+0x10/0x10 [ 411.635223][T11954] do_syscall_64+0x115/0x840 [ 411.635258][T11954] ? clear_bhb_loop+0x40/0x90 [ 411.635290][T11954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.635315][T11954] RIP: 0033:0x7f36e555e84e [ 411.635336][T11954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 411.635359][T11954] RSP: 002b:00007f36e6420fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.635383][T11954] RAX: ffffffffffffffda RBX: 00007f36e64216c0 RCX: 00007f36e555e84e [ 411.635400][T11954] RDX: 000000000000000f RSI: 00007f36e64210a0 RDI: 0000000000000009 [ 411.635415][T11954] RBP: 00007f36e6421090 R08: 0000000000000000 R09: 0000000000000000 [ 411.635431][T11954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.635451][T11954] R13: 00007f36e5826038 R14: 00007f36e5825fa0 R15: 00007ffea06c6778 [ 411.635485][T11954] [ 412.984283][T11989] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 412.994031][T11990] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 415.736811][T12054] usbip-vudc usbip-vudc.0: gadget not bound [ 417.230144][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 418.943953][T12101] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [192] [ 419.893480][ T29] audit: type=1800 audit(4294967302.870:3): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.923" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 421.034998][T12140] serial 00:02: in use; can't configure [ 427.631116][T12258] vcan0: tx drop: invalid da for name 0x000000000000003f [ 438.589702][T12464] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 440.085203][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.092915][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.663058][T12525] serial 00:02: in use; can't configure [ 450.869877][T12694] serial 00:02: in use; can't configure [ 451.185102][T12702] usbip-vudc usbip-vudc.0: gadget not bound [ 466.030623][T12951] serial 00:02: in use; can't configure [ 468.364001][T12988] usbip-vudc usbip-vudc.0: gadget not bound [ 469.934801][T13022] serial 00:02: in use; can't configure [ 472.058527][T13072] usbip-vudc usbip-vudc.0: gadget not bound [ 477.245009][T13160] usbip-vudc usbip-vudc.0: gadget not bound [ 487.815635][T13337] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 494.842324][T13448] serial 00:02: in use; can't configure [ 496.792789][T13482] FAULT_INJECTION: forcing a failure. [ 496.792789][T13482] name fail_futex, interval 1, probability 0, space 0, times 0 [ 496.805751][T13482] CPU: 0 UID: 0 PID: 13482 Comm: syz.3.1115 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.805794][T13482] Tainted: [L]=SOFTLOCKUP [ 496.805803][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.805824][T13482] Call Trace: [ 496.805834][T13482] [ 496.805844][T13482] dump_stack_lvl+0x100/0x190 [ 496.805890][T13482] should_fail_ex.cold+0x5/0xa [ 496.805923][T13482] should_fail_futex+0x4c/0x60 [ 496.805953][T13482] futex_lock_pi_atomic+0x12d/0xaf0 [ 496.805998][T13482] futex_lock_pi+0x278/0x7f0 [ 496.806037][T13482] ? __pfx_futex_lock_pi+0x10/0x10 [ 496.806067][T13482] ? try_to_wake_up+0x70a/0x1c90 [ 496.806101][T13482] ? __pfx_try_to_wake_up+0x10/0x10 [ 496.806140][T13482] ? plist_check_list+0x1b8/0x280 [ 496.806182][T13482] ? futex_private_hash_put+0x115/0x1c0 [ 496.806217][T13482] ? __pfx_futex_wake_mark+0x10/0x10 [ 496.806265][T13482] ? rcu_read_lock_any_held+0x6a/0xa0 [ 496.806333][T13482] ? find_held_lock+0x2b/0x80 [ 496.806367][T13482] ? ksys_write+0x190/0x250 [ 496.806401][T13482] do_futex+0x371/0x440 [ 496.806434][T13482] ? __pfx_do_futex+0x10/0x10 [ 496.806468][T13482] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.806601][T13482] __x64_sys_futex+0x34f/0x4d0 [ 496.806640][T13482] ? __pfx___x64_sys_futex+0x10/0x10 [ 496.806690][T13482] do_syscall_64+0x115/0x840 [ 496.806726][T13482] ? clear_bhb_loop+0x40/0x90 [ 496.806759][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.806789][T13482] RIP: 0033:0x7fec81f9e019 [ 496.806814][T13482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.806840][T13482] RSP: 002b:00007fec801f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 496.806875][T13482] RAX: ffffffffffffffda RBX: 00007fec82225fa0 RCX: 00007fec81f9e019 [ 496.806894][T13482] RDX: 000000000000001f RSI: 0000000000000006 RDI: 0000000000000000 [ 496.806912][T13482] RBP: 00007fec8203500c R08: 0000000000000000 R09: 000000008000fff5 [ 496.806928][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.806945][T13482] R13: 00007fec82226038 R14: 00007fec82225fa0 R15: 00007ffd850b5428 [ 496.806984][T13482] [ 497.268866][T13499] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 501.525289][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.531722][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.251056][T13608] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 506.739478][T13638] serial 00:02: in use; can't configure [ 513.898006][T13771] FAULT_INJECTION: forcing a failure. [ 513.898006][T13771] name failslab, interval 1, probability 0, space 0, times 0 [ 513.915878][T13771] CPU: 1 UID: 0 PID: 13771 Comm: syz.0.1156 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.915919][T13771] Tainted: [L]=SOFTLOCKUP [ 513.915928][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.915943][T13771] Call Trace: [ 513.915951][T13771] [ 513.915961][T13771] dump_stack_lvl+0x100/0x190 [ 513.915997][T13771] should_fail_ex.cold+0x5/0xa [ 513.916027][T13771] should_failslab+0xc2/0x120 [ 513.916065][T13771] __kmalloc_cache_noprof+0x91/0x6c0 [ 513.916095][T13771] ? binderfs_init_fs_context+0x43/0x140 [ 513.916225][T13771] binderfs_init_fs_context+0x43/0x140 [ 513.916257][T13771] finish_clean_context+0xbb/0x190 [ 513.916360][T13771] __do_sys_fsconfig+0x504/0xcb0 [ 513.916398][T13771] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 513.916453][T13771] do_syscall_64+0x115/0x840 [ 513.916488][T13771] ? clear_bhb_loop+0x40/0x90 [ 513.916522][T13771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.916549][T13771] RIP: 0033:0x7fbb0419e019 [ 513.916572][T13771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.916597][T13771] RSP: 002b:00007fbb05017028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 513.916622][T13771] RAX: ffffffffffffffda RBX: 00007fbb04425fa0 RCX: 00007fbb0419e019 [ 513.916640][T13771] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 513.916655][T13771] RBP: 00007fbb05017090 R08: 0000000000000000 R09: 0000000000000000 [ 513.916671][T13771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.916686][T13771] R13: 00007fbb04426038 R14: 00007fbb04425fa0 R15: 00007ffe85349438 [ 513.916723][T13771] [ 515.612648][T13806] FAULT_INJECTION: forcing a failure. [ 515.612648][T13806] name failslab, interval 1, probability 0, space 0, times 0 [ 515.625847][T13806] CPU: 0 UID: 0 PID: 13806 Comm: syz.0.1162 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.625888][T13806] Tainted: [L]=SOFTLOCKUP [ 515.625897][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.625912][T13806] Call Trace: [ 515.625920][T13806] [ 515.625929][T13806] dump_stack_lvl+0x100/0x190 [ 515.625964][T13806] should_fail_ex.cold+0x5/0xa [ 515.625994][T13806] should_failslab+0xc2/0x120 [ 515.626039][T13806] kmem_cache_alloc_noprof+0x91/0x6a0 [ 515.626071][T13806] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 515.626115][T13806] ? ptlock_alloc+0x1f/0x70 [ 515.626147][T13806] ptlock_alloc+0x1f/0x70 [ 515.626173][T13806] pte_alloc_one+0x82/0x3d0 [ 515.626251][T13806] do_fault+0x86c/0x1750 [ 515.626290][T13806] ? __pmd_alloc+0x3fb/0x950 [ 515.626332][T13806] __handle_mm_fault+0x187d/0x2a00 [ 515.626367][T13806] ? mt_find+0x45e/0x8e0 [ 515.626411][T13806] ? __pfx___handle_mm_fault+0x10/0x10 [ 515.626436][T13806] ? __pfx_mt_find+0x10/0x10 [ 515.626496][T13806] ? find_vma+0xbf/0x140 [ 515.626529][T13806] ? __pfx_find_vma+0x10/0x10 [ 515.626567][T13806] handle_mm_fault+0x37b/0xa30 [ 515.626602][T13806] do_user_addr_fault+0x74c/0x12f0 [ 515.626650][T13806] exc_page_fault+0x6f/0xd0 [ 515.626691][T13806] asm_exc_page_fault+0x26/0x30 [ 515.626717][T13806] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 515.626747][T13806] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 [ 515.626771][T13806] RSP: 0018:ffffc90006547bd0 EFLAGS: 00050202 [ 515.626793][T13806] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 515.626812][T13806] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90006547cf0 [ 515.626828][T13806] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000ca8f9e [ 515.626844][T13806] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 515.626859][T13806] R13: ffffc90006547cf0 R14: 0000000000000000 R15: 0000000000000006 [ 515.626893][T13806] _copy_from_user+0x98/0xd0 [ 515.626938][T13806] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 515.627049][T13806] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 515.627096][T13806] do_sock_getsockopt+0x530/0x6e0 [ 515.627128][T13806] ? __lock_acquire+0x49f/0x1a40 [ 515.627178][T13806] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 515.627211][T13806] ? rcu_read_lock_any_held+0x6a/0xa0 [ 515.627256][T13806] ? find_held_lock+0x2b/0x80 [ 515.627299][T13806] ? __fget_files+0x21f/0x3d0 [ 515.627332][T13806] __sys_getsockopt+0x133/0x1d0 [ 515.627401][T13806] ? __pfx_ksys_write+0x10/0x10 [ 515.627432][T13806] ? __x64_sys_getsockopt+0xbd/0x160 [ 515.627467][T13806] __x64_sys_getsockopt+0xbd/0x160 [ 515.627503][T13806] ? do_syscall_64+0x90/0x840 [ 515.627538][T13806] ? lockdep_hardirqs_on+0x78/0x100 [ 515.627572][T13806] do_syscall_64+0x115/0x840 [ 515.627606][T13806] ? clear_bhb_loop+0x40/0x90 [ 515.627640][T13806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.627672][T13806] RIP: 0033:0x7fbb0419e019 [ 515.627694][T13806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.627719][T13806] RSP: 002b:00007fbb05017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 515.627744][T13806] RAX: ffffffffffffffda RBX: 00007fbb04425fa0 RCX: 00007fbb0419e019 [ 515.627761][T13806] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 515.627776][T13806] RBP: 00007fbb05017090 R08: 0000000000000000 R09: 0000000000000000 [ 515.627793][T13806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.627808][T13806] R13: 00007fbb04426038 R14: 00007fbb04425fa0 R15: 00007ffe85349438 [ 515.627845][T13806] [ 521.151167][T13898] serial 00:02: in use; can't configure [ 523.506812][T13952] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 524.150581][T13943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 524.161612][T13943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 524.173105][T13943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 524.201328][T13943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 525.241496][T13973] serial 00:02: in use; can't configure [ 525.277851][T13971] FAULT_INJECTION: forcing a failure. [ 525.277851][T13971] name failslab, interval 1, probability 0, space 0, times 0 [ 525.295269][T13971] CPU: 1 UID: 0 PID: 13971 Comm: syz.1.1185 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.295314][T13971] Tainted: [L]=SOFTLOCKUP [ 525.295323][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.295338][T13971] Call Trace: [ 525.295345][T13971] [ 525.295354][T13971] dump_stack_lvl+0x100/0x190 [ 525.295392][T13971] should_fail_ex.cold+0x5/0xa [ 525.295423][T13971] should_failslab+0xc2/0x120 [ 525.295465][T13971] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 525.295508][T13971] ? fib_rules_register+0x30/0x500 [ 525.295627][T13971] kmemdup_noprof+0x29/0x60 [ 525.295663][T13971] fib_rules_register+0x30/0x500 [ 525.295692][T13971] ? fib_net_init+0x1a4/0x440 [ 525.295778][T13971] fib4_rules_init+0x1f/0x1c0 [ 525.295850][T13971] fib_net_init+0x1dc/0x440 [ 525.295883][T13971] ? is_module_address+0x69/0xf0 [ 525.295912][T13971] ? __pfx_fib_net_init+0x10/0x10 [ 525.295946][T13971] ? timer_init_key+0x150/0x310 [ 525.295994][T13971] ? devinet_init_net+0x56c/0x8d0 [ 525.296064][T13971] ? __pfx_fib_net_init+0x10/0x10 [ 525.296096][T13971] ops_init+0x1e2/0x5f0 [ 525.296196][T13971] setup_net+0x118/0x3a0 [ 525.296249][T13971] ? __pfx_setup_net+0x10/0x10 [ 525.296294][T13971] ? mutex_init_lockdep+0xf1/0x120 [ 525.296330][T13971] copy_net_ns+0x46f/0x7c0 [ 525.296361][T13971] create_new_namespaces+0x3ea/0xac0 [ 525.296410][T13971] unshare_nsproxy_namespaces+0xf2/0x220 [ 525.296446][T13971] ksys_unshare+0x438/0xab0 [ 525.296485][T13971] ? __pfx_ksys_unshare+0x10/0x10 [ 525.296537][T13971] __x64_sys_unshare+0x31/0x40 [ 525.296573][T13971] do_syscall_64+0x115/0x840 [ 525.296614][T13971] ? clear_bhb_loop+0x40/0x90 [ 525.296650][T13971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.296680][T13971] RIP: 0033:0x7f36e559e019 [ 525.296704][T13971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.296731][T13971] RSP: 002b:00007f36e6400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 525.296758][T13971] RAX: ffffffffffffffda RBX: 00007f36e5826090 RCX: 00007f36e559e019 [ 525.296777][T13971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 525.296794][T13971] RBP: 00007f36e563500c R08: 0000000000000000 R09: 0000000000000000 [ 525.296811][T13971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.296827][T13971] R13: 00007f36e5826128 R14: 00007f36e5826090 R15: 00007ffea06c6778 [ 525.296866][T13971] [ 525.573733][ T5643] Bluetooth: hci1: command 0x0406 tx timeout [ 526.245163][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 526.251247][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 526.257882][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 528.331497][T14035] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 529.428388][T14051] random: crng reseeded on system resumption [ 535.385532][T14165] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [215] [ 538.655047][T14215] serial 00:02: in use; can't configure [ 540.136843][T14246] serial 00:02: in use; can't configure [ 541.995959][T14284] serial 00:02: in use; can't configure [ 545.744895][T14356] serial 00:02: in use; can't configure [ 553.733234][T14511] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [137] [ 555.112642][T14528] serial 00:02: in use; can't configure [ 559.064245][T14606] serial 00:02: in use; can't configure [ 559.269921][T14611] FAULT_INJECTION: forcing a failure. [ 559.269921][T14611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.313414][T14611] CPU: 1 UID: 0 PID: 14611 Comm: syz.2.1275 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.313456][T14611] Tainted: [L]=SOFTLOCKUP [ 559.313465][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 559.313479][T14611] Call Trace: [ 559.313488][T14611] [ 559.313498][T14611] dump_stack_lvl+0x100/0x190 [ 559.313534][T14611] should_fail_ex.cold+0x5/0xa [ 559.313565][T14611] _copy_to_user+0x32/0xd0 [ 559.313613][T14611] fs_name+0x25e/0x4a0 [ 559.313738][T14611] __x64_sys_sysfs+0xe6/0x120 [ 559.313773][T14611] do_syscall_64+0x115/0x840 [ 559.313810][T14611] ? clear_bhb_loop+0x40/0x90 [ 559.313844][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.313872][T14611] RIP: 0033:0x7f4e2c79e019 [ 559.313895][T14611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.313920][T14611] RSP: 002b:00007f4e2d5ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 559.313947][T14611] RAX: ffffffffffffffda RBX: 00007f4e2ca26360 RCX: 00007f4e2c79e019 [ 559.313965][T14611] RDX: 0000000000000000 RSI: 000000000000003b RDI: 0000000000000002 [ 559.313981][T14611] RBP: 00007f4e2d5ec090 R08: 0000000000000000 R09: 0000000000000000 [ 559.313996][T14611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.314010][T14611] R13: 00007f4e2ca263f8 R14: 00007f4e2ca26360 R15: 00007ffe1631e318 [ 559.314048][T14611] [ 562.969941][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.977195][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.271281][T14681] serial 00:02: in use; can't configure [ 570.968918][T14820] serial 00:02: in use; can't configure [ 575.518520][T14900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'. [ 575.571586][T14898] bond0: invalid ARP target specified [ 575.910655][T14900] team0 (unregistering): Port device team_slave_0 removed [ 575.926179][T14900] team0 (unregistering): Port device team_slave_1 removed [ 576.382462][T14908] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 577.285144][T14911] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 579.487253][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.496630][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.506701][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.514851][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.527833][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 579.652946][ T3373] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.903118][ T3373] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.119611][ T3373] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.221984][ T3373] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.234478][ T3373] bridge_slave_1: left allmulticast mode [ 581.252798][ T3373] bridge_slave_1: left promiscuous mode [ 581.276849][ T3373] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.314501][ T3373] bridge_slave_0: left allmulticast mode [ 581.330535][ T3373] bridge_slave_0: left promiscuous mode [ 581.339860][ T3373] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.604706][ T5639] Bluetooth: hci3: command tx timeout [ 581.631863][ T3373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.644946][ T3373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.658130][ T3373] bond0 (unregistering): Released all slaves [ 581.842194][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 581.886559][ T3373] ovs_: left promiscuous mode [ 582.187089][T14961] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.196319][T14961] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.204680][T14961] bridge_slave_0: entered allmulticast mode [ 582.212723][T14961] bridge_slave_0: entered promiscuous mode [ 582.237183][T14961] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.249897][T14961] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.257601][T14961] bridge_slave_1: entered allmulticast mode [ 582.265642][T14961] bridge_slave_1: entered promiscuous mode [ 582.376347][T14961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.526730][T15021] serial 00:02: in use; can't configure [ 582.551891][T14961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.012571][ T3373] hsr_slave_0: left promiscuous mode [ 583.065438][ T3373] hsr_slave_1: left promiscuous mode [ 583.091794][ T3373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.130918][ T3373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.178621][ T3373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.214024][ T3373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.294297][ T3373] veth1_macvtap: left promiscuous mode [ 583.304673][ T3373] veth0_macvtap: left promiscuous mode [ 583.316014][ T3373] veth1_vlan: left promiscuous mode [ 583.328832][ T3373] veth0_vlan: left promiscuous mode [ 583.647116][ T3373] team0 (unregistering): Port device team_slave_1 removed [ 583.661874][ T3373] team0 (unregistering): Port device team_slave_0 removed [ 583.683704][ T5639] Bluetooth: hci3: command tx timeout [ 583.769697][T14961] team0: Port device team_slave_0 added [ 583.825291][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 583.864426][T14961] team0: Port device team_slave_1 added [ 583.968013][T14961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.975077][T14961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.001604][T14961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.117569][T14961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.124750][T14961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.151574][T14961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.628886][T14961] hsr_slave_0: entered promiscuous mode [ 584.640268][T14961] hsr_slave_1: entered promiscuous mode [ 584.648053][T14961] debugfs: 'hsr0' already exists in 'hsr' [ 584.654643][T14961] Cannot create hsr debugfs directory [ 585.592824][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 585.763458][ T5639] Bluetooth: hci3: command tx timeout [ 586.885454][T14961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 586.931478][T14961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.962565][T14961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 587.004046][T14961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 587.027140][T14961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 587.056023][T14961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 587.066581][T14961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 587.089998][T14961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 587.844326][ T5639] Bluetooth: hci3: command tx timeout [ 588.545249][T14961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.597519][T14961] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.624796][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.632043][ T581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.699223][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.706453][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.637666][T14961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.592182][T14961] veth0_vlan: entered promiscuous mode [ 591.663181][T14961] veth1_vlan: entered promiscuous mode [ 592.337451][T14961] veth0_macvtap: entered promiscuous mode [ 592.668243][T14961] veth1_macvtap: entered promiscuous mode [ 593.280771][T14961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.333909][T14961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.435327][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.444661][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.505034][ T578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.561670][ T578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.652369][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.669528][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.715689][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.725293][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.867526][T13996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.879308][T13996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.889629][T13996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.898867][T13996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.907295][T13996] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.220799][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.439242][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.571627][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.714289][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.013426][ T5639] Bluetooth: hci2: command tx timeout [ 598.448894][ T36] bridge_slave_1: left allmulticast mode [ 598.454895][ T36] bridge_slave_1: left promiscuous mode [ 598.461210][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.472389][ T36] bridge_slave_0: left allmulticast mode [ 598.478872][ T36] bridge_slave_0: left promiscuous mode [ 598.485086][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.625760][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.636784][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.648737][ T36] bond0 (unregistering): Released all slaves [ 599.082337][T15313] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.106773][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.114594][T15313] bridge_slave_0: entered allmulticast mode [ 599.122530][T15313] bridge_slave_0: entered promiscuous mode [ 599.158755][T15313] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.200856][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.239404][T15313] bridge_slave_1: entered allmulticast mode [ 599.274816][T15313] bridge_slave_1: entered promiscuous mode [ 599.598455][ T36] hsr_slave_0: left promiscuous mode [ 599.619561][ T36] hsr_slave_1: left promiscuous mode [ 599.631338][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.639136][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.648263][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.668633][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.707333][ T36] veth1_macvtap: left promiscuous mode [ 599.729959][ T36] veth0_macvtap: left promiscuous mode [ 599.738436][ T36] veth1_vlan: left promiscuous mode [ 599.744495][ T36] veth0_vlan: left promiscuous mode [ 600.093366][ T5639] Bluetooth: hci2: command tx timeout [ 600.203937][ T36] team0 (unregistering): Port device team_slave_1 removed [ 600.226341][ T36] team0 (unregistering): Port device team_slave_0 removed [ 600.389888][T15313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.407701][T15313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.437763][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 600.573469][T15313] team0: Port device team_slave_0 added [ 600.582043][T15313] team0: Port device team_slave_1 added [ 600.763992][T15313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.771483][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.798219][T15313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.829966][T15313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.839874][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.870631][T15313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.019846][T15313] hsr_slave_0: entered promiscuous mode [ 601.046560][T15313] hsr_slave_1: entered promiscuous mode [ 601.127377][T15397] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 602.000661][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 602.163698][ T5639] Bluetooth: hci2: command tx timeout [ 603.514306][T15313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 603.538416][T15313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.730462][T15313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 603.744203][T15313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 603.958020][T15313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 603.981175][T15313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.093002][T15313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 604.110464][T15313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.243996][ T5639] Bluetooth: hci2: command tx timeout [ 604.783113][T15313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.841977][T15313] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.011972][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.019117][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.353539][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.360753][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.498757][T15517] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 607.393151][T15566] serial 00:02: in use; can't configure [ 608.469827][T15606] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 609.041641][T15313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.531971][T15313] veth0_vlan: entered promiscuous mode [ 609.637263][T15313] veth1_vlan: entered promiscuous mode [ 609.734778][T15313] veth0_macvtap: entered promiscuous mode [ 609.808676][T15313] veth1_macvtap: entered promiscuous mode [ 609.882422][T15313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.910588][T15313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.026113][ T3373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.037140][ T3373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.151639][T15628] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 610.413386][ T3373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.422581][ T3373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.245911][ T581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.254061][ T581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.487193][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.497309][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.928456][T15657] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 613.722056][T15700] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 613.820313][T15689] hub 1-0:1.0: USB hub found [ 613.839654][T15689] hub 1-0:1.0: 1 port detected [ 619.140384][T15796] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 624.405700][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.412212][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.656783][T15966] serial 00:02: in use; can't configure [ 635.378849][T16076] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 637.365955][T16095] serial 00:02: in use; can't configure [ 637.878040][T16096] FAULT_INJECTION: forcing a failure. [ 637.878040][T16096] name fail_futex, interval 1, probability 0, space 0, times 0 [ 637.919986][T16096] CPU: 0 UID: 0 PID: 16096 Comm: syz.1.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.920032][T16096] Tainted: [L]=SOFTLOCKUP [ 637.920043][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.920060][T16096] Call Trace: [ 637.920069][T16096] [ 637.920080][T16096] dump_stack_lvl+0x100/0x190 [ 637.920120][T16096] should_fail_ex.cold+0x5/0xa [ 637.920152][T16096] get_futex_key+0x1d2/0x14f0 [ 637.920187][T16096] ? __pfx_get_futex_key+0x10/0x10 [ 637.920229][T16096] futex_wake+0xf4/0x5e0 [ 637.920272][T16096] ? __pfx_futex_wake+0x10/0x10 [ 637.920311][T16096] ? __lock_acquire+0x49f/0x1a40 [ 637.920356][T16096] ? percpu_counter_add_batch+0xb9/0x230 [ 637.920526][T16096] ? errseq_sample+0x51/0x70 [ 637.920577][T16096] do_futex+0x2b2/0x440 [ 637.920612][T16096] ? __pfx_do_futex+0x10/0x10 [ 637.920652][T16096] ? fd_install+0x223/0x580 [ 637.920687][T16096] __x64_sys_futex+0x34f/0x4d0 [ 637.920722][T16096] ? __sys_socket+0xac/0x260 [ 637.920758][T16096] ? __pfx___x64_sys_futex+0x10/0x10 [ 637.920804][T16096] do_syscall_64+0x115/0x840 [ 637.920843][T16096] ? clear_bhb_loop+0x40/0x90 [ 637.920878][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.920910][T16096] RIP: 0033:0x7fabab19e019 [ 637.920935][T16096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.920962][T16096] RSP: 002b:00007fabac01e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 637.920989][T16096] RAX: ffffffffffffffda RBX: 00007fabab425fa8 RCX: 00007fabab19e019 [ 637.921008][T16096] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fabab425fac [ 637.921026][T16096] RBP: 00007fabab425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 637.921042][T16096] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 637.921059][T16096] R13: 00007fabab426038 R14: 00007fff03a08110 R15: 00007fff03a081f8 [ 637.921097][T16096] [ 641.257047][T16149] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 643.007411][T16193] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 646.979666][T16266] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 648.806761][T16272] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 651.946731][T16340] serial 00:02: in use; can't configure [ 658.796399][T16464] serial 00:02: in use; can't configure [ 659.364736][T16478] serial 00:02: in use; can't configure [ 663.179793][T16558] serial 00:02: in use; can't configure [ 669.173571][T16646] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 672.742525][T16726] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 679.092045][T16838] ceph: Failed to parse sending metrics switch value 'P^' [ 680.702077][T16870] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 683.871751][T16912] serial 00:02: in use; can't configure [ 685.858894][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.867841][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.831754][T17014] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 693.765695][T17090] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 695.127794][T17098] serial 00:02: in use; can't configure [ 695.500363][T17121] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 698.916837][T17173] x_tables: duplicate underflow at hook 4 [ 703.294706][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 713.503554][T17409] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 715.164660][T17462] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 716.860553][T17485] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 718.310699][T17500] serial 00:02: in use; can't configure [ 718.644237][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 720.600826][T17556] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 722.036542][T17571] serial 00:02: in use; can't configure [ 722.335138][T17584] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 726.125737][T17637] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [236] [ 729.141744][T17690] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 731.402910][T17723] serial 00:02: in use; can't configure [ 734.964935][T17797] serial 00:02: in use; can't configure [ 738.891232][T17866] serial 00:02: in use; can't configure [ 747.286960][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.293760][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.328993][T18024] serial 00:02: in use; can't configure [ 770.616937][T18443] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 772.225108][T18465] ubi0: attaching mtd0 [ 772.318618][T18465] ubi0: scanning is finished [ 772.341063][T18465] ubi0: empty MTD device detected [ 772.549958][T18480] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 772.989239][T18465] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 773.001761][T18465] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 773.015613][T18465] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 773.025882][T18465] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 773.071213][T18465] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 773.104813][T18465] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 773.167678][T18465] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2959106514 [ 773.196898][T18465] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 773.232842][T18488] ubi0: background thread "ubi_bgt0d" started, PID 18488 [ 773.247907][T18472] ubi0: detaching mtd0 [ 773.330208][T18472] ubi0: mtd0 is detached [ 776.029373][T18523] FAULT_INJECTION: forcing a failure. [ 776.029373][T18523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.676717][T18523] CPU: 1 UID: 0 PID: 18523 Comm: syz.3.1783 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.676761][T18523] Tainted: [L]=SOFTLOCKUP [ 776.676771][T18523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 776.676786][T18523] Call Trace: [ 776.676796][T18523] [ 776.676806][T18523] dump_stack_lvl+0x100/0x190 [ 776.676845][T18523] should_fail_ex.cold+0x5/0xa [ 776.676878][T18523] _copy_to_user+0x32/0xd0 [ 776.676923][T18523] snd_pcm_info_user+0x74/0xe0 [ 776.676958][T18523] snd_pcm_control_ioctl+0x37f/0x670 [ 776.676994][T18523] snd_ctl_ioctl+0x6a4/0x11b0 [ 776.677035][T18523] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 776.677081][T18523] ? find_held_lock+0x2b/0x80 [ 776.677114][T18523] ? __fget_files+0x215/0x3d0 [ 776.677139][T18523] ? hook_file_ioctl_common+0x140/0x440 [ 776.677184][T18523] ? __fget_files+0x21f/0x3d0 [ 776.677213][T18523] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 776.677260][T18523] __x64_sys_ioctl+0x18e/0x210 [ 776.677304][T18523] do_syscall_64+0x115/0x840 [ 776.677342][T18523] ? clear_bhb_loop+0x40/0x90 [ 776.677376][T18523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.677404][T18523] RIP: 0033:0x7ff452b9e019 [ 776.677427][T18523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.677452][T18523] RSP: 002b:00007ff453ab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.677479][T18523] RAX: ffffffffffffffda RBX: 00007ff452e26180 RCX: 00007ff452b9e019 [ 776.677497][T18523] RDX: 0000000000000038 RSI: 00000000c1205531 RDI: 0000000000000003 [ 776.677514][T18523] RBP: 00007ff453ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 776.677530][T18523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.677546][T18523] R13: 00007ff452e26218 R14: 00007ff452e26180 R15: 00007ffd1fdf5e78 [ 776.677584][T18523] [ 779.155750][T18567] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 784.502439][T18659] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 786.217412][T18689] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 788.013533][T18699] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 797.474312][T18895] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 799.328254][T18928] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [3] [ 802.779702][T18986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1850'. [ 802.797633][T18986] vlan1: entered allmulticast mode [ 802.803011][T18986] veth0_vlan: entered allmulticast mode [ 804.889700][T19029] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 805.187527][T19024] FAULT_INJECTION: forcing a failure. [ 805.187527][T19024] name fail_futex, interval 1, probability 0, space 0, times 0 [ 805.201216][T19024] CPU: 0 UID: 0 PID: 19024 Comm: syz.1.1855 Tainted: G L syzkaller #0 PREEMPT(full) [ 805.201241][T19024] Tainted: [L]=SOFTLOCKUP [ 805.201247][T19024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.201256][T19024] Call Trace: [ 805.201261][T19024] [ 805.201267][T19024] dump_stack_lvl+0x100/0x190 [ 805.201291][T19024] should_fail_ex.cold+0x5/0xa [ 805.201308][T19024] get_futex_key+0x1d2/0x14f0 [ 805.201327][T19024] ? __pfx_get_futex_key+0x10/0x10 [ 805.201344][T19024] ? blk_finish_plug+0x83/0xa0 [ 805.201431][T19024] futex_wake+0xf4/0x5e0 [ 805.201449][T19024] ? __up_read+0x333/0x980 [ 805.201467][T19024] ? __pfx___up_read+0x10/0x10 [ 805.201483][T19024] ? __pfx_futex_wake+0x10/0x10 [ 805.201505][T19024] ? madvise_unlock+0xa9/0x220 [ 805.201530][T19024] do_futex+0x2b2/0x440 [ 805.201547][T19024] ? __pfx_do_futex+0x10/0x10 [ 805.201571][T19024] ? __sys_accept4+0x1cb/0x200 [ 805.201597][T19024] __x64_sys_futex+0x34f/0x4d0 [ 805.201616][T19024] ? __pfx___x64_sys_futex+0x10/0x10 [ 805.201640][T19024] do_syscall_64+0x115/0x840 [ 805.201660][T19024] ? clear_bhb_loop+0x40/0x90 [ 805.201678][T19024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.201693][T19024] RIP: 0033:0x7fabab19e019 [ 805.201706][T19024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.201720][T19024] RSP: 002b:00007fababfdc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 805.201736][T19024] RAX: ffffffffffffffda RBX: 00007fabab426188 RCX: 00007fabab19e019 [ 805.201746][T19024] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fabab42618c [ 805.201754][T19024] RBP: 00007fabab426180 R08: 0000000000000001 R09: 0000000000000000 [ 805.201763][T19024] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 805.201773][T19024] R13: 00007fabab426218 R14: 00007fff03a08110 R15: 00007fff03a081f8 [ 805.201792][T19024] [ 808.715992][T19089] mmap: syz.1.1865 (19089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 808.733596][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.740017][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.491556][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 810.731234][T19126] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 811.039984][T19112] capability: warning: `syz.2.1868' uses 32-bit capabilities (legacy support in use) [ 812.882467][T19164] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 817.040163][T19242] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 823.427085][T19332] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 825.087477][T19377] process 'syz.3.1902' launched ':,' with NULL argv: empty string added [ 826.640437][T19405] Zero length message leads to an empty skb [ 837.861098][T19607] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 839.802014][T19634] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [3] [ 844.895988][T19719] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [3] [ 850.220222][T19810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1966'. [ 853.988606][ T29] audit: type=1800 audit(4294967299.980:4): pid=19881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1977" name="features" dev="configfs" ino=163922 res=0 errno=0 [ 858.102352][T19958] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 859.740879][T19971] futex_wake_op: syz.1.1990 tries to shift op by -2048; fix this program [ 863.159793][T20039] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 866.072167][T20084] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [3] [ 868.061822][T20133] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [4] [ 870.166544][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.174483][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.821913][T20180] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 874.703099][T20215] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 876.350025][T20251] FAULT_INJECTION: forcing a failure. [ 876.350025][T20251] name failslab, interval 1, probability 0, space 0, times 0 [ 876.393678][T20251] CPU: 0 UID: 0 PID: 20251 Comm: syz.0.2030 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.393730][T20251] Tainted: [L]=SOFTLOCKUP [ 876.393739][T20251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.393754][T20251] Call Trace: [ 876.393762][T20251] [ 876.393772][T20251] dump_stack_lvl+0x100/0x190 [ 876.393807][T20251] should_fail_ex.cold+0x5/0xa [ 876.393835][T20251] should_failslab+0xc2/0x120 [ 876.393872][T20251] __kmalloc_noprof+0xfc/0x820 [ 876.393903][T20251] ? rcu_is_watching+0x12/0xc0 [ 876.393936][T20251] ? tomoyo_realpath_from_path+0xb6/0x690 [ 876.394075][T20251] tomoyo_realpath_from_path+0xb6/0x690 [ 876.394118][T20251] tomoyo_check_open_permission+0x2af/0x3c0 [ 876.394154][T20251] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 876.394193][T20251] ? hook_file_open+0x24f/0x8f0 [ 876.394240][T20251] ? lock_acquire+0x1b9/0x370 [ 876.394280][T20251] tomoyo_file_open+0x6b/0x90 [ 876.394303][T20251] security_file_open+0xb5/0x1e0 [ 876.394333][T20251] do_dentry_open+0x588/0x14d0 [ 876.394365][T20251] vfs_open+0x82/0x3f0 [ 876.394394][T20251] path_openat+0x2873/0x4280 [ 876.394430][T20251] ? __pfx_path_openat+0x10/0x10 [ 876.394462][T20251] do_file_open+0x20e/0x430 [ 876.394489][T20251] ? __pfx_do_file_open+0x10/0x10 [ 876.394542][T20251] ? __pfx_kfree_link+0x10/0x10 [ 876.394592][T20251] ? alloc_fd+0x471/0x7a0 [ 876.394622][T20251] ? do_getname+0x191/0x390 [ 876.394659][T20251] do_sys_openat2+0x10f/0x1e0 [ 876.394695][T20251] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.394762][T20251] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 876.394814][T20251] __x64_sys_openat+0x12d/0x210 [ 876.394852][T20251] ? __pfx___x64_sys_openat+0x10/0x10 [ 876.394904][T20251] do_syscall_64+0x115/0x840 [ 876.394940][T20251] ? clear_bhb_loop+0x40/0x90 [ 876.394973][T20251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.395001][T20251] RIP: 0033:0x7fbb0415e84e [ 876.395024][T20251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 876.395048][T20251] RSP: 002b:00007fbb05016f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 876.395074][T20251] RAX: ffffffffffffffda RBX: 00007fbb050176c0 RCX: 00007fbb0415e84e [ 876.395092][T20251] RDX: 0000000000000002 RSI: 00007fbb04234913 RDI: ffffffffffffff9c [ 876.395109][T20251] RBP: 00007fbb0423500c R08: 0000000000000000 R09: 0000000000000000 [ 876.395125][T20251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 876.395141][T20251] R13: 00007fbb04426038 R14: 00007fbb04425fa0 R15: 00007ffe85349438 [ 876.395178][T20251] [ 876.395711][T20251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 876.825122][T20251] FAULT_INJECTION: forcing a failure. [ 876.825122][T20251] name fail_futex, interval 1, probability 0, space 0, times 0 [ 876.838118][T20251] CPU: 0 UID: 0 PID: 20251 Comm: syz.0.2030 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.838142][T20251] Tainted: [L]=SOFTLOCKUP [ 876.838147][T20251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.838156][T20251] Call Trace: [ 876.838162][T20251] [ 876.838167][T20251] dump_stack_lvl+0x100/0x190 [ 876.838189][T20251] should_fail_ex.cold+0x5/0xa [ 876.838206][T20251] should_fail_futex+0x4c/0x60 [ 876.838222][T20251] futex_lock_pi_atomic+0xe7/0xaf0 [ 876.838245][T20251] futex_lock_pi+0x278/0x7f0 [ 876.838267][T20251] ? __pfx_futex_lock_pi+0x10/0x10 [ 876.838304][T20251] ? __pfx_futex_wake_mark+0x10/0x10 [ 876.838328][T20251] ? rcu_read_lock_any_held+0x6a/0xa0 [ 876.838347][T20251] ? find_held_lock+0x2b/0x80 [ 876.838364][T20251] ? ksys_write+0x190/0x250 [ 876.838390][T20251] do_futex+0x371/0x440 [ 876.838420][T20251] ? __pfx_do_futex+0x10/0x10 [ 876.838450][T20251] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 876.838479][T20251] __x64_sys_futex+0x34f/0x4d0 [ 876.838496][T20251] ? fput+0x79/0x100 [ 876.838512][T20251] ? __pfx___x64_sys_futex+0x10/0x10 [ 876.838527][T20251] ? ksys_write+0x1ac/0x250 [ 876.838547][T20251] ? __pfx_ksys_write+0x10/0x10 [ 876.838566][T20251] do_syscall_64+0x115/0x840 [ 876.838585][T20251] ? clear_bhb_loop+0x40/0x90 [ 876.838603][T20251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.838618][T20251] RIP: 0033:0x7fbb0419e019 [ 876.838631][T20251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.838645][T20251] RSP: 002b:00007fbb05017028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 876.838659][T20251] RAX: ffffffffffffffda RBX: 00007fbb04425fa0 RCX: 00007fbb0419e019 [ 876.838669][T20251] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 876.838677][T20251] RBP: 00007fbb05017090 R08: 0000000000000000 R09: 000000008000fff5 [ 876.838686][T20251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.838694][T20251] R13: 00007fbb04426038 R14: 00007fbb04425fa0 R15: 00007ffe85349438 [ 876.838712][T20251] [ 882.047444][T20373] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 883.731826][T20403] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 888.751743][T20445] Process accounting resumed [ 898.962854][T20666] FAULT_INJECTION: forcing a failure. [ 898.962854][T20666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 898.977141][T20666] CPU: 0 UID: 0 PID: 20666 Comm: syz.2.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.977183][T20666] Tainted: [L]=SOFTLOCKUP [ 898.977193][T20666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.977208][T20666] Call Trace: [ 898.977216][T20666] [ 898.977227][T20666] dump_stack_lvl+0x100/0x190 [ 898.977264][T20666] should_fail_ex.cold+0x5/0xa [ 898.977290][T20666] ? prepare_alloc_pages+0x16d/0x5f0 [ 898.977333][T20666] should_fail_alloc_page+0xeb/0x140 [ 898.977374][T20666] prepare_alloc_pages+0x1f0/0x5f0 [ 898.977419][T20666] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 898.977461][T20666] ? __update_page_owner_handle+0x390/0x530 [ 898.977509][T20666] ? __lock_acquire+0x49f/0x1a40 [ 898.977546][T20666] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 898.977585][T20666] ? __lock_acquire+0x49f/0x1a40 [ 898.977644][T20666] ? find_held_lock+0x2b/0x80 [ 898.977686][T20666] ? is_bpf_text_address+0x8a/0x1a0 [ 898.977756][T20666] ? is_bpf_text_address+0x8a/0x1a0 [ 898.977796][T20666] ? bpf_ksym_find+0x124/0x1c0 [ 898.977826][T20666] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 898.977868][T20666] ? policy_nodemask+0xed/0x4f0 [ 898.977917][T20666] alloc_pages_mpol+0x1fb/0x540 [ 898.977958][T20666] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 898.978008][T20666] folio_alloc_mpol_noprof+0x36/0x260 [ 898.978056][T20666] shmem_alloc_folio+0x135/0x160 [ 898.978101][T20666] shmem_alloc_and_add_folio+0x371/0xd40 [ 898.978141][T20666] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 898.978175][T20666] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 898.978214][T20666] shmem_get_folio_gfp+0x6ad/0x1910 [ 898.978250][T20666] ? filemap_map_pages+0x112d/0x1fe0 [ 898.978287][T20666] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 898.978319][T20666] ? __pfx_filemap_map_pages+0x10/0x10 [ 898.978348][T20666] ? filemap_map_pages+0x1137/0x1fe0 [ 898.978381][T20666] shmem_fault+0x1f9/0xa20 [ 898.978411][T20666] ? __lock_acquire+0x49f/0x1a40 [ 898.978455][T20666] ? __pfx_shmem_fault+0x10/0x10 [ 898.978492][T20666] ? __pfx_filemap_map_pages+0x10/0x10 [ 898.978525][T20666] ? find_held_lock+0x2b/0x80 [ 898.978564][T20666] __do_fault+0x10b/0x440 [ 898.978601][T20666] do_fault+0xa99/0x1750 [ 898.978640][T20666] ? __pmd_alloc+0x3fb/0x950 [ 898.978684][T20666] __handle_mm_fault+0x187d/0x2a00 [ 898.978720][T20666] ? mt_find+0x45e/0x8e0 [ 898.978765][T20666] ? __pfx___handle_mm_fault+0x10/0x10 [ 898.978792][T20666] ? __pfx_mt_find+0x10/0x10 [ 898.978853][T20666] ? find_vma+0xbf/0x140 [ 898.978894][T20666] ? __pfx_find_vma+0x10/0x10 [ 898.978934][T20666] handle_mm_fault+0x37b/0xa30 [ 898.978969][T20666] do_user_addr_fault+0x74c/0x12f0 [ 898.979019][T20666] exc_page_fault+0x6f/0xd0 [ 898.979056][T20666] asm_exc_page_fault+0x26/0x30 [ 898.979085][T20666] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 898.979115][T20666] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 9e 04 00 66 66 [ 898.979142][T20666] RSP: 0018:ffffc9000e227bd0 EFLAGS: 00050202 [ 898.979165][T20666] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 898.979182][T20666] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000e227cf0 [ 898.979200][T20666] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52001c44f9e [ 898.979218][T20666] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 898.979235][T20666] R13: ffffc9000e227cf0 R14: 0000000000000000 R15: 0000000000000006 [ 898.979271][T20666] _copy_from_user+0x98/0xd0 [ 898.979319][T20666] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 898.979356][T20666] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 898.979399][T20666] do_sock_getsockopt+0x530/0x6e0 [ 898.979427][T20666] ? __lock_acquire+0x49f/0x1a40 [ 898.979473][T20666] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 898.979504][T20666] ? rcu_read_lock_any_held+0x6a/0xa0 [ 898.979550][T20666] ? find_held_lock+0x2b/0x80 [ 898.979594][T20666] ? __fget_files+0x21f/0x3d0 [ 898.979632][T20666] __sys_getsockopt+0x133/0x1d0 [ 898.979674][T20666] ? __pfx_ksys_write+0x10/0x10 [ 898.979706][T20666] ? __x64_sys_getsockopt+0xbd/0x160 [ 898.979744][T20666] __x64_sys_getsockopt+0xbd/0x160 [ 898.979782][T20666] ? do_syscall_64+0x90/0x840 [ 898.979817][T20666] ? lockdep_hardirqs_on+0x78/0x100 [ 898.979853][T20666] do_syscall_64+0x115/0x840 [ 898.979894][T20666] ? clear_bhb_loop+0x40/0x90 [ 898.979928][T20666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.979956][T20666] RIP: 0033:0x7f4e2c79e019 [ 898.979979][T20666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.980005][T20666] RSP: 002b:00007f4e2d670028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 898.980031][T20666] RAX: ffffffffffffffda RBX: 00007f4e2ca25fa0 RCX: 00007f4e2c79e019 [ 898.980050][T20666] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000003 [ 898.980067][T20666] RBP: 00007f4e2d670090 R08: 0000000000000000 R09: 0000000000000000 [ 898.980084][T20666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.980101][T20666] R13: 00007f4e2ca26038 R14: 00007f4e2ca25fa0 R15: 00007ffe1631e318 [ 898.980138][T20666] [ 902.691049][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2101'. [ 906.101425][T20780] FAULT_INJECTION: forcing a failure. [ 906.101425][T20780] name failslab, interval 1, probability 0, space 0, times 0 [ 906.121071][T20780] CPU: 1 UID: 0 PID: 20780 Comm: syz.2.2109 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.121109][T20780] Tainted: [L]=SOFTLOCKUP [ 906.121118][T20780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.121132][T20780] Call Trace: [ 906.121140][T20780] [ 906.121150][T20780] dump_stack_lvl+0x100/0x190 [ 906.121185][T20780] should_fail_ex.cold+0x5/0xa [ 906.121217][T20780] should_failslab+0xc2/0x120 [ 906.121256][T20780] __kmalloc_noprof+0xfc/0x820 [ 906.121291][T20780] ? copy_splice_read+0x1a3/0xbb0 [ 906.121328][T20780] copy_splice_read+0x1a3/0xbb0 [ 906.121379][T20780] ? __pfx_copy_splice_read+0x10/0x10 [ 906.121408][T20780] ? look_up_lock_class+0x55/0x120 [ 906.121447][T20780] ? lockdep_init_map_type+0x5c/0x250 [ 906.121476][T20780] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 906.121520][T20780] ? __pfx_copy_splice_read+0x10/0x10 [ 906.121549][T20780] do_splice_read+0x285/0x370 [ 906.121582][T20780] splice_direct_to_actor+0x2a1/0xa30 [ 906.121615][T20780] ? __pfx_direct_splice_actor+0x10/0x10 [ 906.121650][T20780] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 906.121723][T20780] do_splice_direct+0x174/0x240 [ 906.121753][T20780] ? __pfx_do_splice_direct+0x10/0x10 [ 906.121782][T20780] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 906.121815][T20780] ? rw_verify_area+0xce/0x6d0 [ 906.121859][T20780] do_sendfile+0xadc/0xe20 [ 906.121906][T20780] ? __pfx_do_sendfile+0x10/0x10 [ 906.121948][T20780] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 906.121988][T20780] ? __fget_files+0x21f/0x3d0 [ 906.122024][T20780] __x64_sys_sendfile64+0x1d8/0x220 [ 906.122055][T20780] ? ksys_write+0x1ac/0x250 [ 906.122080][T20780] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 906.122123][T20780] do_syscall_64+0x115/0x840 [ 906.122158][T20780] ? clear_bhb_loop+0x40/0x90 [ 906.122191][T20780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.122219][T20780] RIP: 0033:0x7f4e2c79e019 [ 906.122243][T20780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.122269][T20780] RSP: 002b:00007f4e2d62e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 906.122295][T20780] RAX: ffffffffffffffda RBX: 00007f4e2ca26180 RCX: 00007f4e2c79e019 [ 906.122313][T20780] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 906.122329][T20780] RBP: 00007f4e2d62e090 R08: 0000000000000000 R09: 0000000000000000 [ 906.122345][T20780] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 906.122362][T20780] R13: 00007f4e2ca26218 R14: 00007f4e2ca26180 R15: 00007ffe1631e318 [ 906.122406][T20780] [ 906.491421][T20788] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [6] [ 908.428988][T20815] FAULT_INJECTION: forcing a failure. [ 908.428988][T20815] name fail_futex, interval 1, probability 0, space 0, times 0 [ 908.442707][T20815] CPU: 0 UID: 0 PID: 20815 Comm: syz.0.2114 Tainted: G L syzkaller #0 PREEMPT(full) [ 908.442751][T20815] Tainted: [L]=SOFTLOCKUP [ 908.442760][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 908.442776][T20815] Call Trace: [ 908.442785][T20815] [ 908.442795][T20815] dump_stack_lvl+0x100/0x190 [ 908.442832][T20815] should_fail_ex.cold+0x5/0xa [ 908.442863][T20815] should_fail_futex+0x4c/0x60 [ 908.442891][T20815] futex_lock_pi_atomic+0x12d/0xaf0 [ 908.442932][T20815] futex_lock_pi+0x278/0x7f0 [ 908.442975][T20815] ? __pfx_futex_lock_pi+0x10/0x10 [ 908.443009][T20815] ? try_to_wake_up+0x70a/0x1c90 [ 908.443044][T20815] ? __pfx_try_to_wake_up+0x10/0x10 [ 908.443100][T20815] ? futex_private_hash_put+0x115/0x1c0 [ 908.443135][T20815] ? __pfx_futex_wake_mark+0x10/0x10 [ 908.443177][T20815] ? rcu_read_lock_any_held+0x6a/0xa0 [ 908.443245][T20815] ? find_held_lock+0x2b/0x80 [ 908.443280][T20815] ? ksys_write+0x190/0x250 [ 908.443311][T20815] do_futex+0x371/0x440 [ 908.443344][T20815] ? __pfx_do_futex+0x10/0x10 [ 908.443376][T20815] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 908.443422][T20815] __x64_sys_futex+0x34f/0x4d0 [ 908.443458][T20815] ? __pfx___x64_sys_futex+0x10/0x10 [ 908.443503][T20815] do_syscall_64+0x115/0x840 [ 908.443540][T20815] ? clear_bhb_loop+0x40/0x90 [ 908.443574][T20815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.443603][T20815] RIP: 0033:0x7fbb0419e019 [ 908.443627][T20815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.443653][T20815] RSP: 002b:00007fbb04ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 908.443680][T20815] RAX: ffffffffffffffda RBX: 00007fbb04426090 RCX: 00007fbb0419e019 [ 908.443697][T20815] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 908.443713][T20815] RBP: 00007fbb0423500c R08: 0000000000000000 R09: 000000008000fff5 [ 908.443731][T20815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.443747][T20815] R13: 00007fbb04426128 R14: 00007fbb04426090 R15: 00007ffe85349438 [ 908.443785][T20815] [ 909.700921][T20834] FAULT_INJECTION: forcing a failure. [ 909.700921][T20834] name failslab, interval 1, probability 0, space 0, times 0 [ 909.747811][T20834] CPU: 0 UID: 0 PID: 20834 Comm: syz.3.2117 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.747855][T20834] Tainted: [L]=SOFTLOCKUP [ 909.747864][T20834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 909.747879][T20834] Call Trace: [ 909.747888][T20834] [ 909.747898][T20834] dump_stack_lvl+0x100/0x190 [ 909.747934][T20834] should_fail_ex.cold+0x5/0xa [ 909.747967][T20834] should_failslab+0xc2/0x120 [ 909.748006][T20834] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 909.748043][T20834] ? __alloc_skb+0x140/0x710 [ 909.748087][T20834] __alloc_skb+0x140/0x710 [ 909.748121][T20834] ? __alloc_skb+0x5b7/0x710 [ 909.748164][T20834] ? __pfx___alloc_skb+0x10/0x10 [ 909.748203][T20834] ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110 [ 909.748342][T20834] ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110 [ 909.748391][T20834] __ip6_append_data+0x34f0/0x4bd0 [ 909.748438][T20834] ? __pfx_raw6_getfrag+0x10/0x10 [ 909.748541][T20834] ? __pfx___ip6_append_data+0x10/0x10 [ 909.748580][T20834] ? __pfx_ip6_mtu+0x10/0x10 [ 909.748637][T20834] ? ip6_setup_cork+0x5be/0x14c0 [ 909.748679][T20834] ip6_append_data+0x10b/0x410 [ 909.748717][T20834] ? __pfx_raw6_getfrag+0x10/0x10 [ 909.748752][T20834] rawv6_sendmsg+0x169c/0x4420 [ 909.748801][T20834] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 909.748832][T20834] ? __lock_acquire+0x49f/0x1a40 [ 909.748891][T20834] ? __pfx___might_resched+0x10/0x10 [ 909.748939][T20834] ? aa_sk_perm+0x309/0xaa0 [ 909.749032][T20834] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 909.749090][T20834] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 909.749124][T20834] ? inet_sendmsg+0x11c/0x140 [ 909.749169][T20834] inet_sendmsg+0x11c/0x140 [ 909.749210][T20834] ____sys_sendmsg+0x9c9/0xbe0 [ 909.749238][T20834] ? __pfx_inet_sendmsg+0x10/0x10 [ 909.749281][T20834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 909.749316][T20834] ? rcu_is_watching+0x12/0xc0 [ 909.749348][T20834] ? ___sys_sendmsg+0x19d/0x1e0 [ 909.749375][T20834] ? kfree+0x1e5/0x6c0 [ 909.749407][T20834] ___sys_sendmsg+0x190/0x1e0 [ 909.749441][T20834] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.749504][T20834] ? __pfx___might_resched+0x10/0x10 [ 909.749554][T20834] __sys_sendmmsg+0x20c/0x440 [ 909.749605][T20834] ? __pfx___sys_sendmmsg+0x10/0x10 [ 909.749644][T20834] ? ksys_write+0x190/0x250 [ 909.749700][T20834] ? fput+0x79/0x100 [ 909.749732][T20834] ? ksys_write+0x1ac/0x250 [ 909.749757][T20834] ? __pfx_ksys_write+0x10/0x10 [ 909.749791][T20834] __x64_sys_sendmmsg+0x9c/0x100 [ 909.749831][T20834] ? lockdep_hardirqs_on+0x78/0x100 [ 909.749869][T20834] do_syscall_64+0x115/0x840 [ 909.749904][T20834] ? clear_bhb_loop+0x40/0x90 [ 909.749939][T20834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.749968][T20834] RIP: 0033:0x7ff452b9e019 [ 909.749991][T20834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.750017][T20834] RSP: 002b:00007ff453afb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 909.750044][T20834] RAX: ffffffffffffffda RBX: 00007ff452e25fa0 RCX: 00007ff452b9e019 [ 909.750063][T20834] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 909.750080][T20834] RBP: 00007ff453afb090 R08: 0000000000000000 R09: 0000000000000000 [ 909.750097][T20834] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000002 [ 909.750114][T20834] R13: 00007ff452e26038 R14: 00007ff452e25fa0 R15: 00007ffd1fdf5e78 [ 909.750158][T20834] [ 915.628917][T20934] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 915.660185][T20934] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 915.674394][T20934] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 915.687369][T20934] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 915.708920][T20934] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 915.724290][T20934] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 917.525018][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 917.683343][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 917.689462][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 917.782328][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 918.522960][T20994] syz.1.2142 uses obsolete (PF_INET,SOCK_PACKET) [ 919.151879][T20983] Process accounting paused [ 919.765766][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 919.847775][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 926.135249][T21139] FAULT_INJECTION: forcing a failure. [ 926.135249][T21139] name failslab, interval 1, probability 0, space 0, times 0 [ 926.161299][T21139] CPU: 1 UID: 0 PID: 21139 Comm: syz.3.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 926.161349][T21139] Tainted: [L]=SOFTLOCKUP [ 926.161358][T21139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 926.161374][T21139] Call Trace: [ 926.161382][T21139] [ 926.161392][T21139] dump_stack_lvl+0x100/0x190 [ 926.161425][T21139] should_fail_ex.cold+0x5/0xa [ 926.161457][T21139] should_failslab+0xc2/0x120 [ 926.161493][T21139] kmem_cache_alloc_noprof+0x91/0x6a0 [ 926.161522][T21139] ? __pfx_map_id_range_down+0x10/0x10 [ 926.161558][T21139] ? security_inode_alloc+0x3b/0x2c0 [ 926.161591][T21139] security_inode_alloc+0x3b/0x2c0 [ 926.161621][T21139] inode_init_always_gfp+0xc77/0xfb0 [ 926.161653][T21139] alloc_inode+0x8e/0x250 [ 926.161687][T21139] sock_alloc+0x44/0x280 [ 926.161797][T21139] ? security_socket_create+0x7f/0x250 [ 926.161832][T21139] __sock_create+0xc2/0x860 [ 926.161868][T21139] __sys_socket+0x14d/0x260 [ 926.161894][T21139] ? exc_page_fault+0x6f/0xd0 [ 926.161929][T21139] ? __pfx___sys_socket+0x10/0x10 [ 926.161973][T21139] __x64_sys_socket+0x72/0xb0 [ 926.162005][T21139] ? lockdep_hardirqs_on+0x78/0x100 [ 926.162042][T21139] do_syscall_64+0x115/0x840 [ 926.162079][T21139] ? clear_bhb_loop+0x40/0x90 [ 926.162114][T21139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.162143][T21139] RIP: 0033:0x7ff452b9f887 [ 926.162167][T21139] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.162191][T21139] RSP: 002b:00007ff453af9f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 926.162217][T21139] RAX: ffffffffffffffda RBX: 00007ff452e25fa0 RCX: 00007ff452b9f887 [ 926.162235][T21139] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 926.162251][T21139] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 926.162264][T21139] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 926.162278][T21139] R13: 00007ff452e26038 R14: 00007ff452e25fa0 R15: 00007ffd1fdf5e78 [ 926.162318][T21139] [ 926.162605][T21139] socket: no more sockets [ 926.854921][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2167'. [ 928.321970][T21180] random: crng reseeded on system resumption [ 928.592347][T21180] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2174: iget: checksum invalid [ 928.665520][T21180] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 928.721868][T21180] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2174: iget: checksum invalid [ 928.734203][T21180] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 928.755134][T21180] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2174: iget: checksum invalid [ 928.770499][T21180] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 928.781886][T21180] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.2174: iget: checksum invalid [ 928.794094][T21180] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 928.804716][T21180] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 928.822926][T21180] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 930.560041][T21230] capability: warning: `syz.1.2182' uses deprecated v2 capabilities in a way that may be insecure [ 931.609625][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.616190][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.406349][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 934.505362][T21274] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 934.537919][T21274] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 934.556925][T21274] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 934.630794][T21275] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 934.688646][T21276] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 2: bad block bitmap checksum [ 934.832981][ T581] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.016367][ T581] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.129023][ T581] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.309707][ T581] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.444813][T20974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 935.459332][T20974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 935.472415][T20974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 935.483021][T20974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 935.496219][T20974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 935.586672][T21291] capability: warning: `syz.1.2191' uses 32-bit capabilities (legacy support in use) [ 935.902884][ T581] bridge_slave_1: left allmulticast mode [ 935.916573][ T581] bridge_slave_1: left promiscuous mode [ 935.925602][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.939133][ T581] bridge_slave_0: left allmulticast mode [ 935.945090][ T581] bridge_slave_0: left promiscuous mode [ 935.951071][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.222033][ T581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.233014][ T581] bond0 (unregistering): Released all slaves [ 937.102449][ T581] hsr_slave_0: left promiscuous mode [ 937.120920][ T581] hsr_slave_1: left promiscuous mode [ 937.132096][ T581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.157243][ T581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.166579][ T581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.186561][ T581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.221054][ T581] veth1_macvtap: left promiscuous mode [ 937.236831][ T581] veth0_macvtap: left promiscuous mode [ 937.248464][ T581] veth1_vlan: left promiscuous mode [ 937.259856][ T581] veth0_vlan: left promiscuous mode [ 937.603625][T20974] Bluetooth: hci0: command tx timeout [ 937.677666][ T581] team0 (unregistering): Port device team_slave_1 removed [ 937.717888][ T581] team0 (unregistering): Port device team_slave_0 removed [ 937.908513][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 939.460282][T21284] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.486936][T21284] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.506983][T21284] bridge_slave_0: entered allmulticast mode [ 939.525571][T21284] bridge_slave_0: entered promiscuous mode [ 939.565213][T21284] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.593979][T21284] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.606507][T21284] bridge_slave_1: entered allmulticast mode [ 939.618760][T21284] bridge_slave_1: entered promiscuous mode [ 939.672281][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 939.684115][T20974] Bluetooth: hci0: command tx timeout [ 939.841499][T21284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.855190][T21284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.268092][T21284] team0: Port device team_slave_0 added [ 940.437520][T21284] team0: Port device team_slave_1 added [ 940.891743][T21284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.902090][T21284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.928459][T21284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.942671][T21284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.950013][T21284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.983779][T21284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.092460][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 941.146348][T21284] hsr_slave_0: entered promiscuous mode [ 941.152618][T21284] hsr_slave_1: entered promiscuous mode [ 941.159367][T21284] debugfs: 'hsr0' already exists in 'hsr' [ 941.165149][T21284] Cannot create hsr debugfs directory [ 941.763271][T20974] Bluetooth: hci0: command tx timeout [ 943.667730][T21284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 943.710595][T21284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 943.732445][T21284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 943.749396][T21284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.777862][T21284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 943.824020][T21284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.843205][T20974] Bluetooth: hci0: command tx timeout [ 943.949616][T21284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 943.963836][T21284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 945.998418][T21284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.065802][T21284] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.106876][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.114138][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.180620][T18980] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.187869][T18980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.650054][T21284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.327586][T21284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.425807][T21569] Process accounting resumed [ 949.665729][T21591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 949.843372][T21603] syz.1.2216 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 950.752298][T21284] veth0_vlan: entered promiscuous mode [ 951.070715][T21284] veth1_vlan: entered promiscuous mode [ 952.145782][T21643] FAULT_INJECTION: forcing a failure. [ 952.145782][T21643] name failslab, interval 1, probability 0, space 0, times 0 [ 952.159444][T21643] CPU: 0 UID: 0 PID: 21643 Comm: syz.3.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.159490][T21643] Tainted: [L]=SOFTLOCKUP [ 952.159501][T21643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.159518][T21643] Call Trace: [ 952.159527][T21643] [ 952.159537][T21643] dump_stack_lvl+0x100/0x190 [ 952.159574][T21643] should_fail_ex.cold+0x5/0xa [ 952.159604][T21643] should_failslab+0xc2/0x120 [ 952.159644][T21643] __kvmalloc_node_noprof+0x116/0x970 [ 952.159682][T21643] ? do_raw_spin_lock+0x128/0x260 [ 952.159712][T21643] ? alloc_fdtable+0x110/0x2d0 [ 952.159761][T21643] alloc_fdtable+0x110/0x2d0 [ 952.159804][T21643] dup_fd+0x995/0xd10 [ 952.159836][T21643] ? __fget_files+0x21f/0x3d0 [ 952.159865][T21643] ksys_unshare+0x802/0xab0 [ 952.159907][T21643] ? __pfx_ksys_unshare+0x10/0x10 [ 952.159955][T21643] __x64_sys_unshare+0x31/0x40 [ 952.159991][T21643] do_syscall_64+0x115/0x840 [ 952.160039][T21643] ? clear_bhb_loop+0x40/0x90 [ 952.160074][T21643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.160103][T21643] RIP: 0033:0x7ff452b9e019 [ 952.160128][T21643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.160155][T21643] RSP: 002b:00007ff453afb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 952.160183][T21643] RAX: ffffffffffffffda RBX: 00007ff452e25fa0 RCX: 00007ff452b9e019 [ 952.160202][T21643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 952.160220][T21643] RBP: 00007ff452c3500c R08: 0000000000000000 R09: 0000000000000000 [ 952.160238][T21643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.160255][T21643] R13: 00007ff452e26038 R14: 00007ff452e25fa0 R15: 00007ffd1fdf5e78 [ 952.160294][T21643] [ 952.195765][T21284] veth0_macvtap: entered promiscuous mode [ 952.467729][T21284] veth1_macvtap: entered promiscuous mode [ 952.527834][T21284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.551936][T21284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.644785][T18976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.699198][T18976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.902876][T21652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 952.990011][T18980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.008355][T18980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.136211][T18979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.253345][T18979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.261345][T18980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.272380][T18979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.569600][T21284] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 953.885355][T21667] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[14961] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[21667] [ 958.626803][T21759] smpboot: CPU 1 is now offline [ 958.852609][T21774] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 968.711840][T18980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.070815][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 969.080316][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 969.093486][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 969.103563][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 969.112423][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 969.235711][T18980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.630243][T18980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.012292][T18980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.205256][ T5639] Bluetooth: hci3: command tx timeout [ 971.557102][T18980] bridge_slave_1: left allmulticast mode [ 971.573789][T18980] bridge_slave_1: left promiscuous mode [ 971.596768][T18980] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.630963][T18980] bridge_slave_0: left allmulticast mode [ 971.652461][T18980] bridge_slave_0: left promiscuous mode [ 971.676712][T18980] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.202343][T18980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.254328][T18980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.288527][T18980] bond0 (unregistering): Released all slaves [ 972.735045][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 973.283338][ T5639] Bluetooth: hci3: command tx timeout [ 974.768966][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 975.015618][T18980] hsr_slave_0: left promiscuous mode [ 975.021616][T18980] hsr_slave_1: left promiscuous mode [ 975.029501][T18980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.037598][T18980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.045871][T18980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.053702][T18980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.065017][T18980] veth1_macvtap: left promiscuous mode [ 975.070558][T18980] veth0_macvtap: left promiscuous mode [ 975.076807][T18980] veth1_vlan: left promiscuous mode [ 975.082062][T18980] veth0_vlan: left promiscuous mode [ 975.264255][T18980] team0 (unregistering): Port device team_slave_1 removed [ 975.281012][T18980] team0 (unregistering): Port device team_slave_0 removed [ 975.363566][ T5639] Bluetooth: hci3: command tx timeout [ 975.799370][T21927] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.833213][T21927] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.856918][T21927] bridge_slave_0: entered allmulticast mode [ 975.886640][T21927] bridge_slave_0: entered promiscuous mode [ 976.039245][T21927] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.069122][T21927] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.092741][T21927] bridge_slave_1: entered allmulticast mode [ 976.115019][T21927] bridge_slave_1: entered promiscuous mode [ 976.215468][T21927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.297100][T21927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.886353][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 977.342320][T21927] team0: Port device team_slave_0 added [ 977.446354][ T5639] Bluetooth: hci3: command tx timeout [ 977.491661][T21927] team0: Port device team_slave_1 added [ 979.841799][T21927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.857653][T21927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.911571][T21927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.078437][T21927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.103203][T21927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.183313][T21927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.760337][T21927] hsr_slave_0: entered promiscuous mode [ 980.774758][T21927] hsr_slave_1: entered promiscuous mode [ 980.787081][T21927] debugfs: 'hsr0' already exists in 'hsr' [ 980.799446][T21927] Cannot create hsr debugfs directory [ 980.869962][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 982.042502][T22088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 982.072432][T22088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 982.102467][T22088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 982.137186][T22088] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 982.208660][T22088] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 982.258525][T22088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 982.281479][T22088] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 982.308446][T22088] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 983.364820][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 984.084683][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 984.163205][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 984.265312][T21927] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 984.311831][T21927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 984.323751][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 984.360475][T21927] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 984.416623][T21927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 984.559442][T21927] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 984.621425][T21927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 984.656412][T21927] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 984.703345][T21927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.243872][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 986.403313][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 988.036462][T21927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.310337][T21927] 8021q: adding VLAN 0 to HW filter on device team0 [ 988.323516][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 988.483369][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 988.624568][T18976] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.631731][T18976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.872611][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.879836][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.342702][T22279] nbd: nbd4129 already in use [ 992.330100][T21927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.044524][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.054956][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.317747][T21927] veth0_vlan: entered promiscuous mode [ 993.672083][T22333] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [143] [ 993.706630][T21927] veth1_vlan: entered promiscuous mode [ 993.895180][T18976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.095236][T20974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 994.106954][T20974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 994.115073][T20974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 994.126265][T20974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 994.137160][T20974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 994.277146][T18976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.540555][T18976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.556273][T22343] FAULT_INJECTION: forcing a failure. [ 994.556273][T22343] name fail_futex, interval 1, probability 0, space 0, times 0 [ 994.584447][T22343] CPU: 0 UID: 0 PID: 22343 Comm: syz.3.2296 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.584473][T22343] Tainted: [L]=SOFTLOCKUP [ 994.584479][T22343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 994.584489][T22343] Call Trace: [ 994.584494][T22343] [ 994.584500][T22343] dump_stack_lvl+0x100/0x190 [ 994.584523][T22343] should_fail_ex.cold+0x5/0xa [ 994.584542][T22343] get_futex_key+0x1d2/0x14f0 [ 994.584560][T22343] ? __pfx_get_futex_key+0x10/0x10 [ 994.584590][T22343] futex_wait_setup+0x91/0x540 [ 994.584616][T22343] __futex_wait+0x19f/0x300 [ 994.584637][T22343] ? __pfx___futex_wait+0x10/0x10 [ 994.584658][T22343] ? futex_hash+0x311/0x400 [ 994.584674][T22343] ? __pfx_futex_wake_mark+0x10/0x10 [ 994.584697][T22343] ? __pfx_futex_hash+0x10/0x10 [ 994.584718][T22343] futex_wait+0xe6/0x370 [ 994.584736][T22343] ? __pfx_futex_wait+0x10/0x10 [ 994.584761][T22343] ? vfs_read+0x243/0xb40 [ 994.584778][T22343] do_futex+0x265/0x440 [ 994.584794][T22343] ? __pfx_do_futex+0x10/0x10 [ 994.584811][T22343] ? cap_task_prctl+0x104/0xa50 [ 994.584831][T22343] __x64_sys_futex+0x34f/0x4d0 [ 994.584850][T22343] ? __pfx___x64_sys_futex+0x10/0x10 [ 994.584869][T22343] ? __pfx___do_sys_prctl+0x10/0x10 [ 994.584925][T22343] do_syscall_64+0x115/0x840 [ 994.584946][T22343] ? clear_bhb_loop+0x40/0x90 [ 994.584963][T22343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.584979][T22343] RIP: 0033:0x7ff452b9e019 [ 994.584993][T22343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.585007][T22343] RSP: 002b:00007ff453afb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 994.585022][T22343] RAX: ffffffffffffffda RBX: 00007ff452e25fa8 RCX: 00007ff452b9e019 [ 994.585032][T22343] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff452e25fa8 [ 994.585041][T22343] RBP: 00007ff452e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 994.585050][T22343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.585059][T22343] R13: 00007ff452e26038 R14: 00007ffd1fdf5d90 R15: 00007ffd1fdf5e78 [ 994.585077][T22343] [ 995.218071][T18976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.409718][T21927] veth0_macvtap: entered promiscuous mode [ 995.477742][T21927] veth1_macvtap: entered promiscuous mode [ 995.715714][T21927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.752515][T21927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.989987][T18976] bridge_slave_1: left allmulticast mode [ 996.007699][T18976] bridge_slave_1: left promiscuous mode [ 996.031670][T18976] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.062623][T18976] bridge_slave_0: left allmulticast mode [ 996.075023][T18976] bridge_slave_0: left promiscuous mode [ 996.099584][T18976] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.167120][T20974] Bluetooth: hci0: command tx timeout [ 996.478124][T18976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.507420][T18976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.528899][T18976] bond0 (unregistering): Released all slaves [ 996.801418][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 996.874675][T18979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.207925][T18976] hsr_slave_0: left promiscuous mode [ 997.222523][T18976] hsr_slave_1: left promiscuous mode [ 997.236512][T18976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 997.259711][T18976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.279666][T18976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 997.293931][T18976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.347793][T18976] veth1_macvtap: left promiscuous mode [ 997.363328][T18976] veth0_macvtap: left promiscuous mode [ 997.369217][T18976] veth1_vlan: left promiscuous mode [ 997.380922][T18976] veth0_vlan: left promiscuous mode [ 997.777328][T18976] team0 (unregistering): Port device team_slave_1 removed [ 997.798425][T18976] team0 (unregistering): Port device team_slave_0 removed [ 997.965307][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 998.004640][T18979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.094966][T18979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.245327][T20974] Bluetooth: hci0: command tx timeout [ 998.287616][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.304116][T18979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.351126][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.562915][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.605741][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.208776][T22336] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.238908][T22336] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.273490][T22336] bridge_slave_0: entered allmulticast mode [ 999.311894][T22336] bridge_slave_0: entered promiscuous mode [ 999.506257][T22336] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.536246][T22336] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.561516][T22336] bridge_slave_1: entered allmulticast mode [ 999.602494][T22336] bridge_slave_1: entered promiscuous mode [ 999.876353][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1000.132400][T22336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.171660][T22336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.325579][T20974] Bluetooth: hci0: command tx timeout [ 1001.032104][T22336] team0: Port device team_slave_0 added [ 1001.051594][T22336] team0: Port device team_slave_1 added [ 1002.403212][T20974] Bluetooth: hci0: command tx timeout [ 1002.660681][T22336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.830167][T22336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.465511][T22336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.715675][T22336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.722680][T22336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1003.750521][T22336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.801139][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1003.985747][T22336] hsr_slave_0: entered promiscuous mode [ 1004.017386][T22336] hsr_slave_1: entered promiscuous mode [ 1004.043976][T22336] debugfs: 'hsr0' already exists in 'hsr' [ 1004.065233][T22336] Cannot create hsr debugfs directory [ 1009.101439][T22336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1009.131448][T22336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1009.150748][T22336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1009.170907][T22336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1009.322734][T22336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1009.356753][T22336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1009.376599][T22336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1009.398252][T22336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1009.867872][T22336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.977530][T22336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.080764][T18976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.087962][T18976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.214673][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.221848][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.690284][T22336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.252287][T22336] veth0_vlan: entered promiscuous mode [ 1014.522610][T22336] veth1_vlan: entered promiscuous mode [ 1015.806199][T22336] veth0_macvtap: entered promiscuous mode [ 1015.850441][T22336] veth1_macvtap: entered promiscuous mode [ 1015.956608][T22336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.993754][T22744] FAULT_INJECTION: forcing a failure. [ 1015.993754][T22744] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.044296][T22336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.069008][T22744] CPU: 0 UID: 0 PID: 22744 Comm: syz.1.2325 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.069058][T22744] Tainted: [L]=SOFTLOCKUP [ 1016.069069][T22744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1016.069079][T22744] Call Trace: [ 1016.069085][T22744] [ 1016.069091][T22744] dump_stack_lvl+0x100/0x190 [ 1016.069121][T22744] should_fail_ex.cold+0x5/0xa [ 1016.069140][T22744] should_failslab+0xc2/0x120 [ 1016.069164][T22744] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1016.069184][T22744] ? do_getname+0x35/0x390 [ 1016.069206][T22744] do_getname+0x35/0x390 [ 1016.069226][T22744] do_sys_openat2+0xc7/0x1e0 [ 1016.069245][T22744] ? __pfx_do_sys_openat2+0x10/0x10 [ 1016.069265][T22744] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1016.069294][T22744] __x64_sys_openat+0x12d/0x210 [ 1016.069317][T22744] ? __pfx___x64_sys_openat+0x10/0x10 [ 1016.069344][T22744] do_syscall_64+0x115/0x840 [ 1016.069364][T22744] ? clear_bhb_loop+0x40/0x90 [ 1016.069382][T22744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.069397][T22744] RIP: 0033:0x7f49ee19e019 [ 1016.069410][T22744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.069425][T22744] RSP: 002b:00007f49ef113028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1016.069439][T22744] RAX: ffffffffffffffda RBX: 00007f49ee425fa0 RCX: 00007f49ee19e019 [ 1016.069449][T22744] RDX: 0000000000103342 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1016.069458][T22744] RBP: 00007f49ee23500c R08: 0000000000000000 R09: 0000000000000000 [ 1016.069467][T22744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.069475][T22744] R13: 00007f49ee426038 R14: 00007f49ee425fa0 R15: 00007ffc4c38cc58 [ 1016.069495][T22744] [ 1016.289284][T22744] mmap: syz.1.2325 (22744) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1016.714812][ T578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.752315][T18979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.807057][ T578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.879747][ T578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.160280][ T578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.190773][ T578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.021801][ T578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.046003][ T578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.334138][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1019.346981][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1019.356987][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1019.368309][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1019.377741][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1020.241293][ T578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.556203][ T578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.754344][ T578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.986322][ T578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.443420][ T5639] Bluetooth: hci4: command tx timeout [ 1022.756805][ T578] bridge_slave_1: left allmulticast mode [ 1022.785598][ T578] bridge_slave_1: left promiscuous mode [ 1022.802156][ T578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.831457][ T578] bridge_slave_0: left allmulticast mode [ 1022.866538][ T578] bridge_slave_0: left promiscuous mode [ 1022.895812][ T578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.172268][ T578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.187860][ T578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.198061][ T578] bond0 (unregistering): Released all slaves [ 1023.298894][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1023.366371][ T578] .^: left promiscuous mode [ 1023.535326][ T5639] Bluetooth: hci4: command tx timeout [ 1024.443922][T22797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.470922][T22797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.498693][T22797] bridge_slave_0: entered allmulticast mode [ 1024.519109][T22797] bridge_slave_0: entered promiscuous mode [ 1024.540798][ T578] hsr_slave_0: left promiscuous mode [ 1024.584217][ T578] hsr_slave_1: left promiscuous mode [ 1024.612385][ T578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.644555][ T578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.676687][ T578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.705676][ T578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.741332][ T578] veth1_macvtap: left promiscuous mode [ 1024.765078][ T578] veth0_macvtap: left promiscuous mode [ 1024.791131][ T578] veth1_vlan: left promiscuous mode [ 1024.812800][ T578] veth0_vlan: left promiscuous mode [ 1025.442253][T22797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.482232][T22797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.491652][T22797] bridge_slave_1: entered allmulticast mode [ 1025.498994][T22797] bridge_slave_1: entered promiscuous mode [ 1025.530634][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1025.605069][ T5639] Bluetooth: hci4: command tx timeout [ 1025.700832][T22797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.722378][T22797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.050982][T22797] team0: Port device team_slave_0 added [ 1026.185975][T22797] team0: Port device team_slave_1 added [ 1026.493284][T22797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.544684][T22797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.688286][T22797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.776891][T22797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.822119][T22797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.951345][T22797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.274596][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1027.299977][T22797] hsr_slave_0: entered promiscuous mode [ 1027.334955][T22797] hsr_slave_1: entered promiscuous mode [ 1027.367752][T22797] debugfs: 'hsr0' already exists in 'hsr' [ 1027.396047][T22797] Cannot create hsr debugfs directory [ 1027.683185][ T5639] Bluetooth: hci4: command tx timeout [ 1029.112764][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1029.548979][T22970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2348'. [ 1032.516984][T22797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1032.582809][T22797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1032.763000][T22797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1032.791658][T22797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1033.147876][T22797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1033.188935][T22797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1033.423184][T22797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1033.462150][T22797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1034.486983][T22797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.593672][T22797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.649932][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.657132][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.676349][T23088] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1034.747815][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.755027][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.338323][ T578] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.377025][T20974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1037.389133][T20974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1037.397505][T20974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1037.407447][T20974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1037.417255][T20974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1037.839410][ T578] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.950910][T22797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1038.030468][ T578] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.240273][ T578] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.345780][T22797] veth0_vlan: entered promiscuous mode [ 1038.719301][T22797] veth1_vlan: entered promiscuous mode [ 1039.523590][T20974] Bluetooth: hci1: command tx timeout [ 1039.547856][T22797] veth0_macvtap: entered promiscuous mode [ 1039.626109][ T578] bridge_slave_1: left allmulticast mode [ 1039.637421][ T578] bridge_slave_1: left promiscuous mode [ 1039.653374][ T578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.668862][ T578] bridge_slave_0: left allmulticast mode [ 1039.685837][ T578] bridge_slave_0: left promiscuous mode [ 1039.695875][ T578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.995533][ T578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.020722][ T578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.041068][ T578] bond0 (unregistering): Released all slaves [ 1040.095254][T22797] veth1_macvtap: entered promiscuous mode [ 1040.415856][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1040.485665][T22797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.599097][T22797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.615489][ T578] hsr_slave_0: left promiscuous mode [ 1040.615992][ T578] hsr_slave_1: left promiscuous mode [ 1040.616413][ T578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.616429][ T578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.619862][ T578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.619879][ T578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.653398][ T578] veth1_macvtap: left promiscuous mode [ 1040.653441][ T578] veth0_macvtap: left promiscuous mode [ 1040.653503][ T578] veth1_vlan: left promiscuous mode [ 1040.653546][ T578] veth0_vlan: left promiscuous mode [ 1041.287778][ T578] team0 (unregistering): Port device team_slave_1 removed [ 1041.317907][ T578] team0 (unregistering): Port device team_slave_0 removed [ 1041.603337][T20974] Bluetooth: hci1: command tx timeout [ 1042.096878][T23152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.120654][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.138584][T23152] bridge_slave_0: entered allmulticast mode [ 1042.154462][T23152] bridge_slave_0: entered promiscuous mode [ 1042.226040][T23152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.248103][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.269340][T23152] bridge_slave_1: entered allmulticast mode [ 1042.291323][T23152] bridge_slave_1: entered promiscuous mode [ 1042.373743][T18976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.601149][T23152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.642228][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1042.653234][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.670929][T23152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.705028][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.728659][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.815742][T23152] team0: Port device team_slave_0 added [ 1042.833434][ T578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.848467][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.860394][T23152] team0: Port device team_slave_1 added [ 1042.875617][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.924605][ T578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.997689][T23152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.038844][T23152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.152804][T23252] FAULT_INJECTION: forcing a failure. [ 1043.152804][T23252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1043.172598][T23152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.196198][T23252] CPU: 0 UID: 0 PID: 23252 Comm: syz.0.2331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.196224][T23252] Tainted: [L]=SOFTLOCKUP [ 1043.196229][T23252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1043.196238][T23252] Call Trace: [ 1043.196243][T23252] [ 1043.196248][T23252] dump_stack_lvl+0x100/0x190 [ 1043.196270][T23252] should_fail_ex.cold+0x5/0xa [ 1043.196288][T23252] _copy_to_user+0x32/0xd0 [ 1043.196315][T23252] simple_read_from_buffer+0xcb/0x170 [ 1043.196342][T23252] proc_fail_nth_read+0x1af/0x230 [ 1043.196364][T23252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1043.196385][T23252] ? rw_verify_area+0xce/0x6d0 [ 1043.196406][T23252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1043.196426][T23252] vfs_read+0x1e4/0xb40 [ 1043.196442][T23252] ? __pfx_vfs_read+0x10/0x10 [ 1043.196455][T23252] ? __fget_files+0x215/0x3d0 [ 1043.196473][T23252] ? __fget_files+0x21f/0x3d0 [ 1043.196492][T23252] ksys_read+0x12a/0x250 [ 1043.196506][T23252] ? __pfx_ksys_read+0x10/0x10 [ 1043.196524][T23252] do_syscall_64+0x115/0x840 [ 1043.196544][T23252] ? clear_bhb_loop+0x40/0x90 [ 1043.196563][T23252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.196578][T23252] RIP: 0033:0x7fb3b995e84e [ 1043.196591][T23252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1043.196605][T23252] RSP: 002b:00007fb3ba843fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1043.196620][T23252] RAX: ffffffffffffffda RBX: 00007fb3ba8446c0 RCX: 00007fb3b995e84e [ 1043.196630][T23252] RDX: 000000000000000f RSI: 00007fb3ba8440a0 RDI: 0000000000000004 [ 1043.196639][T23252] RBP: 00007fb3ba844090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.196648][T23252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1043.196657][T23252] R13: 00007fb3b9c26038 R14: 00007fb3b9c25fa0 R15: 00007fffdf6b2f28 [ 1043.196676][T23252] [ 1043.396104][T23152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.404093][T23152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.430033][T23152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.465991][T23152] hsr_slave_0: entered promiscuous mode [ 1043.472198][T23152] hsr_slave_1: entered promiscuous mode [ 1043.478210][T23152] debugfs: 'hsr0' already exists in 'hsr' [ 1043.483962][T23152] Cannot create hsr debugfs directory [ 1043.686811][T20974] Bluetooth: hci1: command tx timeout [ 1045.763229][T20974] Bluetooth: hci1: command tx timeout [ 1045.871415][T23152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1045.918556][T23152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.072092][T23152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1046.109534][T23152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.129800][T23299] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1046.144523][T23152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1046.172727][T23152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.280509][T23152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1046.335738][T23152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.957655][T23356] FAULT_INJECTION: forcing a failure. [ 1047.957655][T23356] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.023347][T23356] CPU: 0 UID: 0 PID: 23356 Comm: syz.0.2376 Tainted: G L syzkaller #0 PREEMPT(full) [ 1048.023373][T23356] Tainted: [L]=SOFTLOCKUP [ 1048.023378][T23356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.023387][T23356] Call Trace: [ 1048.023392][T23356] [ 1048.023398][T23356] dump_stack_lvl+0x100/0x190 [ 1048.023422][T23356] should_fail_ex.cold+0x5/0xa [ 1048.023440][T23356] should_failslab+0xc2/0x120 [ 1048.023461][T23356] __kvmalloc_node_noprof+0x116/0x970 [ 1048.023483][T23356] ? traverse.part.0.constprop.0+0x397/0x650 [ 1048.023511][T23356] traverse.part.0.constprop.0+0x397/0x650 [ 1048.023534][T23356] ? aa_file_perm+0x7e4/0x14d0 [ 1048.023558][T23356] ? aa_file_perm+0x7e4/0x14d0 [ 1048.023590][T23356] seq_read_iter+0x93f/0x1270 [ 1048.023620][T23356] seq_read+0x344/0x4d0 [ 1048.023643][T23356] ? __pfx_seq_read+0x10/0x10 [ 1048.023663][T23356] ? __pfx___might_resched+0x10/0x10 [ 1048.023699][T23356] ? rw_verify_area+0xce/0x6d0 [ 1048.023721][T23356] ? __pfx_seq_read+0x10/0x10 [ 1048.023743][T23356] vfs_read+0x1e4/0xb40 [ 1048.023759][T23356] ? __pfx_vfs_read+0x10/0x10 [ 1048.023772][T23356] ? find_held_lock+0x2b/0x80 [ 1048.023789][T23356] ? __fget_files+0x215/0x3d0 [ 1048.023802][T23356] ? __fget_files+0x215/0x3d0 [ 1048.023819][T23356] ? __fget_files+0x21f/0x3d0 [ 1048.023838][T23356] __x64_sys_pread64+0x1eb/0x250 [ 1048.023854][T23356] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1048.023874][T23356] do_syscall_64+0x115/0x840 [ 1048.023894][T23356] ? clear_bhb_loop+0x40/0x90 [ 1048.023913][T23356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.023928][T23356] RIP: 0033:0x7fb3b999e019 [ 1048.023940][T23356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.023955][T23356] RSP: 002b:00007fb3ba844028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1048.023970][T23356] RAX: ffffffffffffffda RBX: 00007fb3b9c25fa0 RCX: 00007fb3b999e019 [ 1048.023979][T23356] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1048.023988][T23356] RBP: 00007fb3ba844090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.023997][T23356] R10: 0000000000001003 R11: 0000000000000246 R12: 0000000000000001 [ 1048.024005][T23356] R13: 00007fb3b9c26038 R14: 00007fb3b9c25fa0 R15: 00007fffdf6b2f28 [ 1048.024025][T23356] [ 1049.591948][T23152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.323720][T23152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.712399][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.719610][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.016998][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.024169][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.544960][T23152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.761783][T23152] veth0_vlan: entered promiscuous mode [ 1053.841177][T23152] veth1_vlan: entered promiscuous mode [ 1054.487172][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.495174][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.063008][T23152] veth0_macvtap: entered promiscuous mode [ 1055.181738][T23152] veth1_macvtap: entered promiscuous mode [ 1055.240823][T23152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.291027][T23152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.332601][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.368107][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.412773][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.462065][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.706104][ T578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.733517][ T578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.119764][ T581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.139290][ T581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.610619][T23520] usbip-vudc usbip-vudc.0: gadget not bound [ 1058.665554][T23520] FAULT_INJECTION: forcing a failure. [ 1058.665554][T23520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.727334][T23520] CPU: 0 UID: 0 PID: 23520 Comm: syz.2.2394 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.727360][T23520] Tainted: [L]=SOFTLOCKUP [ 1058.727365][T23520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1058.727374][T23520] Call Trace: [ 1058.727379][T23520] [ 1058.727385][T23520] dump_stack_lvl+0x100/0x190 [ 1058.727407][T23520] should_fail_ex.cold+0x5/0xa [ 1058.727425][T23520] _copy_to_user+0x32/0xd0 [ 1058.727450][T23520] simple_read_from_buffer+0xcb/0x170 [ 1058.727476][T23520] proc_fail_nth_read+0x1af/0x230 [ 1058.727498][T23520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.727519][T23520] ? rw_verify_area+0xce/0x6d0 [ 1058.727539][T23520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.727559][T23520] vfs_read+0x1e4/0xb40 [ 1058.727575][T23520] ? __pfx_vfs_read+0x10/0x10 [ 1058.727594][T23520] ? find_held_lock+0x2b/0x80 [ 1058.727612][T23520] ? __might_fault+0xc5/0x140 [ 1058.727628][T23520] ? __might_fault+0xc5/0x140 [ 1058.727645][T23520] ksys_read+0x12a/0x250 [ 1058.727660][T23520] ? __pfx_ksys_read+0x10/0x10 [ 1058.727681][T23520] do_syscall_64+0x115/0x840 [ 1058.727709][T23520] ? clear_bhb_loop+0x40/0x90 [ 1058.727727][T23520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.727743][T23520] RIP: 0033:0x7f8f20f5e84e [ 1058.727755][T23520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1058.727770][T23520] RSP: 002b:00007f8f1f1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1058.727785][T23520] RAX: ffffffffffffffda RBX: 00007f8f1f1f66c0 RCX: 00007f8f20f5e84e [ 1058.727795][T23520] RDX: 000000000000000f RSI: 00007f8f1f1f60a0 RDI: 0000000000000007 [ 1058.727804][T23520] RBP: 00007f8f1f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.727812][T23520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.727821][T23520] R13: 00007f8f212263f8 R14: 00007f8f21226360 R15: 00007ffc194a1488 [ 1058.727841][T23520] [ 1067.486337][T23651] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[15313] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[23651] [ 1071.587313][T23714] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2424'. [ 1072.189827][T23728] FAULT_INJECTION: forcing a failure. [ 1072.189827][T23728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.317626][T23728] CPU: 0 UID: 0 PID: 23728 Comm: syz.2.2426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.317651][T23728] Tainted: [L]=SOFTLOCKUP [ 1072.317664][T23728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1072.317673][T23728] Call Trace: [ 1072.317678][T23728] [ 1072.317683][T23728] dump_stack_lvl+0x100/0x190 [ 1072.317706][T23728] should_fail_ex.cold+0x5/0xa [ 1072.317724][T23728] _copy_to_user+0x32/0xd0 [ 1072.317749][T23728] simple_read_from_buffer+0xcb/0x170 [ 1072.317782][T23728] proc_fail_nth_read+0x1af/0x230 [ 1072.317803][T23728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1072.317825][T23728] ? rw_verify_area+0xce/0x6d0 [ 1072.317846][T23728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1072.317866][T23728] vfs_read+0x1e4/0xb40 [ 1072.317882][T23728] ? __pfx_vfs_read+0x10/0x10 [ 1072.317895][T23728] ? __fget_files+0x215/0x3d0 [ 1072.317914][T23728] ? __fget_files+0x21f/0x3d0 [ 1072.317933][T23728] ksys_read+0x12a/0x250 [ 1072.317946][T23728] ? __pfx_ksys_read+0x10/0x10 [ 1072.317965][T23728] do_syscall_64+0x115/0x840 [ 1072.317986][T23728] ? clear_bhb_loop+0x40/0x90 [ 1072.318004][T23728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.318020][T23728] RIP: 0033:0x7f8f20f5e84e [ 1072.318033][T23728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1072.318047][T23728] RSP: 002b:00007f8f21dc7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1072.318062][T23728] RAX: ffffffffffffffda RBX: 00007f8f21dc86c0 RCX: 00007f8f20f5e84e [ 1072.318072][T23728] RDX: 000000000000000f RSI: 00007f8f21dc80a0 RDI: 0000000000000004 [ 1072.318081][T23728] RBP: 00007f8f21dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.318090][T23728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.318098][T23728] R13: 00007f8f21226128 R14: 00007f8f21226090 R15: 00007ffc194a1488 [ 1072.318117][T23728] [ 1074.588737][T23763] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[22336] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[23763] [ 1079.765223][T23853] BUG: unable to handle page fault for address: ffffc90011eb4fe8 [ 1079.772963][T23853] #PF: supervisor write access in kernel mode [ 1079.779010][T23853] #PF: error_code(0x0002) - not-present page [ 1079.785007][T23853] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 71123067 PTE 0 [ 1079.792479][T23853] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1079.797934][T23853] CPU: 0 UID: 0 PID: 23853 Comm: syz.1.2443 Tainted: G L syzkaller #0 PREEMPT(full) [ 1079.808858][T23853] Tainted: [L]=SOFTLOCKUP [ 1079.813164][T23853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1079.823206][T23853] RIP: 0010:write_comp_data+0x75/0x90 [ 1079.828574][T23853] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1079.848182][T23853] RSP: 0018:ffffc900053d7e78 EFLAGS: 00050257 [ 1079.854244][T23853] RAX: ffffc90011eb5000 RBX: 0000000000000000 RCX: ffffffff82458db5 [ 1079.862227][T23853] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1079.870184][T23853] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1079.878145][T23853] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1079.886108][T23853] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1079.894083][T23853] FS: 00007f528b3b46c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1079.903019][T23853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1079.909589][T23853] CR2: ffffc90011eb4fe8 CR3: 0000000073eac000 CR4: 00000000003526f0 [ 1079.917544][T23853] Call Trace: [ 1079.920805][T23853] [ 1079.923718][T23853] rseq_register+0x115/0x350 [ 1079.928304][T23853] __x64_sys_rseq+0x1b8/0x2e0 [ 1079.932964][T23853] do_syscall_64+0x115/0x840 [ 1079.937542][T23853] ? clear_bhb_loop+0x40/0x90 [ 1079.942202][T23853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.948076][T23853] RIP: 0033:0x7f528a59e019 [ 1079.952477][T23853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.972151][T23853] RSP: 002b:00007f528b3b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1079.980648][T23853] RAX: ffffffffffffffda RBX: 00007f528a826450 RCX: 00007f528a59e019 [ 1079.988601][T23853] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1079.996555][T23853] RBP: 00007f528a63500c R08: 0000000000000000 R09: 0000000000000000 [ 1080.004510][T23853] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1080.012470][T23853] R13: 00007f528a8264e8 R14: 00007f528a826450 R15: 00007fff80c90c58 [ 1080.020437][T23853] [ 1080.023477][T23853] Modules linked in: [ 1080.027357][T23853] CR2: ffffc90011eb4fe8 [ 1080.031500][T23853] ---[ end trace 0000000000000000 ]--- [ 1080.036944][T23853] RIP: 0010:write_comp_data+0x75/0x90 [ 1080.042310][T23853] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 1080.061900][T23853] RSP: 0018:ffffc900053d7e78 EFLAGS: 00050257 [ 1080.067956][T23853] RAX: ffffc90011eb5000 RBX: 0000000000000000 RCX: ffffffff82458db5 [ 1080.075923][T23853] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1080.083878][T23853] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1080.091830][T23853] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1080.099781][T23853] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1080.107734][T23853] FS: 00007f528b3b46c0(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1080.116651][T23853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1080.123226][T23853] CR2: ffffc90011eb4fe8 CR3: 0000000073eac000 CR4: 00000000003526f0 [ 1080.131193][T23853] Kernel panic - not syncing: Fatal exception [ 1080.137289][T23853] Kernel Offset: disabled [ 1080.141595][T23853] Rebooting in 86400 seconds..