last executing test programs: 16.885443994s ago: executing program 0 (id=2242): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(r1, 0xae44, r0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x5, 0x802}, 0xee) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0x400df, 0x9b72, 0x2, 0x8000) r3 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) preadv$auto(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x7fffffff}, 0x1, 0x8, 0x6) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, 0x0, 0x8001) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="00042cbd7000fb3d89cb81"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) 13.726775874s ago: executing program 0 (id=2247): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0x5865, r1, 0x10}, 0x22) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) select$auto(0x6, &(0x7f0000000380)={[0x0, 0xfff, 0x18d, 0x4, 0x26b2b8c5, 0x9, 0x0, 0x8, 0xfff, 0x5, 0x100000001, 0x7, 0x4b, 0x100]}, &(0x7f0000000480)={[0x1, 0x7d, 0x0, 0x8, 0x6, 0xd2aa, 0xfffffffffffffe01, 0x200, 0x500, 0x6, 0x5, 0x1, 0x9, 0x4, 0x4, 0x158a]}, &(0x7f0000000500)={[0x6, 0x3ff, 0x0, 0x22e, 0xfc07, 0x1, 0x929d, 0xc, 0x10, 0x4, 0xbf, 0x6f32, 0x5, 0xe, 0x4, 0x7]}, &(0x7f0000000580)={0xd2, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB='\b\x00\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x100000001}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r3, r3, &(0x7f0000000040)=0x2, 0x7) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r2) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0x\x113\a\xc7\x91\x92@\xb2P', 0xf) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00 ', @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250400000005001300710000000c00100007000000000000000500050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) futex$auto(0x0, 0x5, 0x7, 0x0, &(0x7f0000001d80)=0x3ff, 0x401) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x14000, 0x0) sysfs$auto(0x2, 0x3b, 0x0) 13.230730683s ago: executing program 3 (id=2249): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(0x0, 0x0, 0x57e) mmap$auto(0x0, 0x400008, 0x5f, 0x9b73, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000440)='\x13Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$j\x94\xc3_4\x16>\xff\x1f\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4tU\x14w\xb4\x14\xf3\xf6\x00\x00\x00\x00\x00\x00.O\xab\"4\x8a\xbbY8@Z5`\xa4\x0f\xffb\x1f;\x7f\xea\x0e*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbb\xc7\x15\xbe\x01\x98\x02\x1d\xff\xff\x00\x00)}\xfaK\xdf>f\xb8&\x979-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\x86~\x86\xd6\xe3\xb5\x99\x1ey\xae,\x95\b8\x83\xcf\xc5D\xcc\xbd7\xe2\xd4\xf9\x84~\a\x10G\xc1\xe7\xed\xef`x\xcf\xee\xa83\xee)\xba\x06\x81\x8b]\r\xe4\xa8\xf0\xd0\x12\xd7\xdd\xd8\xe2{U\x98\xfeq\xe5XB+P\xcdCci\'@\x83\x11\xd8\x1e\xb3\xd3p\xb1\xa6^\x03\x98\xc5\xdf\xab\xdaj[\xe1\xa7#\x9b\xf4@y\x8f\xdf\xbd\x85\\i\x1f\xc8\x1d\xc88\xa5v\x1b\x00r\a\xa8M\xc7\xe0:\x18\x1b\xedb\xe9\xc1v\x83W\x9c\xcafV\x820\x00\x00\x00\x00\"\xad\x13\x85\xd9\xbb\x06b-\xc7\xdd\x14\xc8\xf5r\x1e\x18\xcd\x0e\xb5\xefJ\x05ss\xb7\xeb\'H\x91y\xdc\x02\xa3\xb8\xd8v\x90Pe\xac9:5\x8f\xb5\r\x8b\xc3E\xa7,LIy\x06\xcf\xbaxuYU\xaeBE', 0x100000a3d5) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x1, 0x106) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x1a74}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x20000044) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r1, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) swapon$auto(&(0x7f0000000080)='[##\\}[\x00', 0x3) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x8001, 0x0) write$auto(r2, 0x0, 0x5) 11.237170823s ago: executing program 1 (id=2250): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x8001) unshare$auto(0x6) unshare$auto(0xffffffffdf52e579) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) futex_waitv$auto(0x0, 0x1000005, 0x1000a64, 0x0, 0x2a5fe50b) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) setuid$auto(0xe) r0 = bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_1={0xffffffffffffffff, 0x9, @value=0x209, 0x200000000}, 0x2) mbind$auto(0x5, 0x8, 0x3, &(0x7f0000000080)=0x1, 0xe, 0x7) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ppoll$auto(&(0x7f0000000100)={r0, 0x1000, 0x1ff}, 0xa637, &(0x7f0000000140), &(0x7f00000001c0)={0x1}, 0x8) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x7, 0xffffffffffffffff, @relative_id=0x80000000, 0x200}, 0x7) socketpair$auto(0xe86, 0x4, 0x200000, 0x0) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x1, 0x1, 0x0, 0x2, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) write$auto_cachefiles_daemon_fops_internal(r1, &(0x7f0000000140)="3d318794973caa5692e22d9025ec9a5656a33a7734086dcd95a39fa15dcb5c0853a4146d19f71e420ee82337ce986e04bd6501000ade74d35d7bf49234b57605fe9ef5a30ceb5bd1efec7ca482afbb", 0x4f) open(0x0, 0x22240, 0x55) 10.495804866s ago: executing program 0 (id=2252): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(0x0, 0x0, 0x57e) mmap$auto(0x0, 0x400008, 0x5f, 0x9b73, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r0 = fanotify_init$auto(0x2, 0x3) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffd) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto_uinput_fops_uinput(r2, 0x0, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 10.350236335s ago: executing program 2 (id=2253): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, r5, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) pread64$auto(r8, 0x0, 0x8, 0x75e8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r9 = epoll_create$auto(0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r10, 0x0) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r10, 0x0) epoll_wait$auto(r9, 0x0, 0xe007, 0x1) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="20002cbd7000fbdbdf250d00000028000180080003000300000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e31000000000000000000000074000180140002006d6163766c616e3100000000000000001400020073797a00000000250008000300ffff00000800010000000000000000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800030005000000"], 0xb0}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r11 = socket(0xa, 0x3, 0xff) connect$auto(r11, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 9.94591739s ago: executing program 3 (id=2254): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB='\b\x00a\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x100001f, &(0x7f0000000400)={@_si_pad}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x130}, 0x1, 0x0, 0x0, 0x400}, 0x4) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0x400df, 0x9b72, 0x2, 0x8000) r3 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) preadv$auto(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x7fffffff}, 0x1, 0x8, 0x6) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, 0x0, 0x8001) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="00042cbd7000fb3d89cb81"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) 8.082582821s ago: executing program 1 (id=2256): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, r5, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) pread64$auto(r8, 0x0, 0x8, 0x75e8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r9 = epoll_create$auto(0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r10, 0x0) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r10, 0x0) epoll_wait$auto(r9, 0x0, 0xe007, 0x1) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="20002cbd7000fbdbdf250d00000028000180080003000300000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e31000000000000000000000074000180140002006d6163766c616e3100000000000000001400020073797a00000000250008000300ffff00000800010000000000000000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800030005000000"], 0xb0}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r11 = socket(0xa, 0x3, 0xff) connect$auto(r11, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 7.636390262s ago: executing program 1 (id=2257): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r2, @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x100001f, &(0x7f0000000400)={@_si_pad}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3001", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400d1009fd11b05273cbbf1135e93990dcc62b0cbbbd9b55e8243e21046e504cbd8d2b8efef7bc0d9a1b6bf27717523099f1b2d3f1a4ea9b5494d29125dfb89a3e128eb3b3e986f9d66dfb691a9a8960600000000000000076b1b5194eec8bbf7a2ca5c2c04ec5fd3d97a84d89275b7ee387326afadabc393a9c556d478940fef48093ad49d6007ec300e7b6efdf77b7eaaa28ef400a7"], 0x130}, 0x1, 0x0, 0x0, 0x400}, 0x4) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rBBJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x99\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb3\x9c2\xa2\xacyl\xb8\x00Y\xc8\'\xb6S(\xf2\xc2\xf2\x9dP\b\x88J\xae8\xf9>\xb6\xed\xb5/\xc9\xaa\xd8\xc4\xba\x94\xe6jv\x12Bp+\xb8\x16\x19kw\xbc\xbb5-i\xf0\xb9\xac\x9f&6\x89g\x9bh\x83D\xb3\x9fxe\x13\xd1\xb9\xe4\x7f|a\xf2\xdd\xa0\xfb\xfau-7\x94\x13\xa8\xec\xf6~\xacV\xa2S)\xc2\xce\x9b{+\x9ct2>\x98D\t\xc5HP\xc4\xb7\x84\xda*\x82)\x01\xd1\f\x1e\xd4\x8d0K\xa8\xd6\xa1\xa7\xd8VP\xfd\x19\x1cd\x84\xe7\xc6#\x9c\xdd\x88\xf9\x128\x0e\xe2\n\xd3\xd33\x01\xda\x83]\xd6\xd5U\xb0^\xaf\x12\x91\x85\x86\xfd\x95\'0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r2, @ANYBLOB="080004"], 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 6.721768742s ago: executing program 3 (id=2260): socket(0x15, 0x80000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x6) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x9, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/004/001\x00', 0x8101, 0x0) ioctl$auto_USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000080)=0x8ae) mmap$auto(0x0, 0x8c, 0x5d, 0x14, r2, 0xf91) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x7) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x19\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, 0x0, 0x68182, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) socket(0xa, 0x800, 0x6) clock_nanosleep$auto(0x9, 0x1000000, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.972957943s ago: executing program 2 (id=2261): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e0240, 0x0) read$auto(r1, 0x0, 0x85) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) r2 = socket(0xa, 0xa, 0x3) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x30, 0x0, 0x8f) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/geneve0/drop_unicast_in_l2_multicast\x00', 0xc1e13b61f74943c7, 0x0) sendfile$auto(r3, r3, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000006400)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r5, 0x0, 0xfffffdef) mseal$auto(0x0, 0x7dda, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(r4, &(0x7f000000ac80)='\x00', 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/rx-12/rps_flow_cnt\x00', 0xc0082, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000002e, 0x0) fsopen$auto(0x0, 0x1) 4.771617453s ago: executing program 1 (id=2262): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(0x0, 0x0, 0x57e) mmap$auto(0x0, 0x400008, 0x5f, 0x9b73, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000440)='\x13Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$j\x94\xc3_4\x16>\xff\x1f\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4tU\x14w\xb4\x14\xf3\xf6\x00\x00\x00\x00\x00\x00.O\xab\"4\x8a\xbbY8@Z5`\xa4\x0f\xffb\x1f;\x7f\xea\x0e*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbb\xc7\x15\xbe\x01\x98\x02\x1d\xff\xff\x00\x00)}\xfaK\xdf>f\xb8&\x979-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\x86~\x86\xd6\xe3\xb5\x99\x1ey\xae,\x95\b8\x83\xcf\xc5D\xcc\xbd7\xe2\xd4\xf9\x84~\a\x10G\xc1\xe7\xed\xef`x\xcf\xee\xa83\xee)\xba\x06\x81\x8b]\r\xe4\xa8\xf0\xd0\x12\xd7\xdd\xd8\xe2{U\x98\xfeq\xe5XB+P\xcdCci\'@\x83\x11\xd8\x1e\xb3\xd3p\xb1\xa6^\x03\x98\xc5\xdf\xab\xdaj[\xe1\xa7#\x9b\xf4@y\x8f\xdf\xbd\x85\\i\x1f\xc8\x1d\xc88\xa5v\x1b\x00r\a\xa8M\xc7\xe0:\x18\x1b\xedb\xe9\xc1v\x83W\x9c\xcafV\x820\x00\x00\x00\x00\"\xad\x13\x85\xd9\xbb\x06b-\xc7\xdd\x14\xc8\xf5r\x1e\x18\xcd\x0e\xb5\xefJ\x05ss\xb7\xeb\'H\x91y\xdc\x02\xa3\xb8\xd8v\x90Pe\xac9:5\x8f\xb5\r\x8b\xc3E\xa7,LIy\x06\xcf\xbaxuYU\xaeBE', 0x100000a3d5) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x1, 0x106) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x1a74}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x20000044) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r1, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) swapon$auto(&(0x7f0000000080)='[##\\}[\x00', 0x3) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r2, 0x0, 0x5) 4.340083367s ago: executing program 0 (id=2263): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000300"/17, 0x11) timer_create$auto(0x76, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x0, 0x5, 0x0) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci0/force_wakeup\x00', 0x8742, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/icmp\x00', 0x181800, 0x0) pread64$auto(r1, &(0x7f0000000240)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\xde\xb3&\x84n\x95:\x06\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7 \xc5\xd3\x9e,Q\xd8\x16\x989l\x03\a\xd8;\xa3\xbd\xa7\\\x84LR0lY>\x9067\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57', 0x100003e7, 0x200000000000009) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) write$auto(r2, 0x0, 0xe) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), r3) r4 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000100)=0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.311372616s ago: executing program 3 (id=2264): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0xe, 0x802b95}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x8001) unshare$auto(0x6) unshare$auto(0xffffffffdf52e579) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) futex_waitv$auto(0x0, 0x1000005, 0x1000a64, 0x0, 0x2a5fe50b) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) setuid$auto(0xe) r0 = bpf$auto(0x5, &(0x7f0000001100)=@bpf_attr_1={0xffffffffffffffff, 0x9, @value=0x209, 0x200000000}, 0x2) mbind$auto(0x5, 0x8, 0x3, &(0x7f0000000080)=0x1, 0xe, 0x7) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ppoll$auto(&(0x7f0000000100)={r0, 0x1000, 0x1ff}, 0xa637, &(0x7f0000000140), &(0x7f00000001c0)={0x1}, 0x8) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x7, 0xffffffffffffffff, @relative_id=0x80000000, 0x200}, 0x7) socketpair$auto(0xe86, 0x4, 0x200000, 0x0) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x1, 0x1, 0x0, 0x2, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8000) write$auto_cachefiles_daemon_fops_internal(r1, &(0x7f0000000140)="3d318794973caa5692e22d9025ec9a5656a33a7734086dcd95a39fa15dcb5c0853a4146d19f71e420ee82337ce986e04bd6501000ade74d35d7bf49234b57605fe9ef5a30ceb5bd1efec7ca482afbb", 0x4f) open(0x0, 0x22240, 0x55) 4.077641852s ago: executing program 2 (id=2265): mmap$auto(0x0, 0x4009, 0xb, 0x11, 0x401, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5d2a}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xce}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0xce1e, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff0737010005"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.809311471s ago: executing program 2 (id=2266): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, r5, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) pread64$auto(r8, 0x0, 0x8, 0x75e8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r9 = epoll_create$auto(0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r10, 0x0) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r10, 0x0) epoll_wait$auto(r9, 0x0, 0xe007, 0x1) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="20002cbd7000fbdbdf250d00000028000180080003000300000008000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e31000000000000000000000074000180140002006d6163766c616e3100000000000000001400020073797a00000000250008000300ffff00000800010000000000000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0800030005000000"], 0xb0}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r11 = socket(0xa, 0x3, 0xff) connect$auto(r11, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 3.159994166s ago: executing program 2 (id=2267): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(0x0, 0x0, 0x57e) mmap$auto(0x0, 0x400008, 0x5f, 0x9b73, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000440)='\x13Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$j\x94\xc3_4\x16>\xff\x1f\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4tU\x14w\xb4\x14\xf3\xf6\x00\x00\x00\x00\x00\x00.O\xab\"4\x8a\xbbY8@Z5`\xa4\x0f\xffb\x1f;\x7f\xea\x0e*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbb\xc7\x15\xbe\x01\x98\x02\x1d\xff\xff\x00\x00)}\xfaK\xdf>f\xb8&\x979-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\x86~\x86\xd6\xe3\xb5\x99\x1ey\xae,\x95\b8\x83\xcf\xc5D\xcc\xbd7\xe2\xd4\xf9\x84~\a\x10G\xc1\xe7\xed\xef`x\xcf\xee\xa83\xee)\xba\x06\x81\x8b]\r\xe4\xa8\xf0\xd0\x12\xd7\xdd\xd8\xe2{U\x98\xfeq\xe5XB+P\xcdCci\'@\x83\x11\xd8\x1e\xb3\xd3p\xb1\xa6^\x03\x98\xc5\xdf\xab\xdaj[\xe1\xa7#\x9b\xf4@y\x8f\xdf\xbd\x85\\i\x1f\xc8\x1d\xc88\xa5v\x1b\x00r\a\xa8M\xc7\xe0:\x18\x1b\xedb\xe9\xc1v\x83W\x9c\xcafV\x820\x00\x00\x00\x00\"\xad\x13\x85\xd9\xbb\x06b-\xc7\xdd\x14\xc8\xf5r\x1e\x18\xcd\x0e\xb5\xefJ\x05ss\xb7\xeb\'H\x91y\xdc\x02\xa3\xb8\xd8v\x90Pe\xac9:5\x8f\xb5\r\x8b\xc3E\xa7,LIy\x06\xcf\xbaxuYU\xaeBE', 0x100000a3d5) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x2, 0x1, 0x106) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x1a74}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x20000044) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r1, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) swapon$auto(&(0x7f0000000080)='[##\\}[\x00', 0x3) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r2, 0x0, 0x5) 1.793147391s ago: executing program 1 (id=2268): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x8}, @BATADV_ATTR_TT_FLAGS={0x8, 0x15, 0xb8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x40088c0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x80000, 0x9}, 0x7}, 0x1a000000, 0x800) 1.617431666s ago: executing program 1 (id=2269): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000, 0x1) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) open(0x0, 0x0, 0x57e) mmap$auto(0x0, 0x400008, 0x5f, 0x9b73, 0x2, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000440)='\x13Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$j\x94\xc3_4\x16>\xff\x1f\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4tU\x14w\xb4\x14\xf3\xf6\x00\x00\x00\x00\x00\x00.O\xab\"4\x8a\xbbY8@Z5`\xa4\x0f\xffb\x1f;\x7f\xea\x0e*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbb\xc7\x15\xbe\x01\x98\x02\x1d\xff\xff\x00\x00)}\xfaK\xdf>f\xb8&\x979-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\x86~\x86\xd6\xe3\xb5\x99\x1ey\xae,\x95\b8\x83\xcf\xc5D\xcc\xbd7\xe2\xd4\xf9\x84~\a\x10G\xc1\xe7\xed\xef`x\xcf\xee\xa83\xee)\xba\x06\x81\x8b]\r\xe4\xa8\xf0\xd0\x12\xd7\xdd\xd8\xe2{U\x98\xfeq\xe5XB+P\xcdCci\'@\x83\x11\xd8\x1e\xb3\xd3p\xb1\xa6^\x03\x98\xc5\xdf\xab\xdaj[\xe1\xa7#\x9b\xf4@y\x8f\xdf\xbd\x85\\i\x1f\xc8\x1d\xc88\xa5v\x1b\x00r\a\xa8M\xc7\xe0:\x18\x1b\xedb\xe9\xc1v\x83W\x9c\xcafV\x820\x00\x00\x00\x00\"\xad\x13\x85\xd9\xbb\x06b-\xc7\xdd\x14\xc8\xf5r\x1e\x18\xcd\x0e\xb5\xefJ\x05ss\xb7\xeb\'H\x91y\xdc\x02\xa3\xb8\xd8v\x90Pe\xac9:5\x8f\xb5\r\x8b\xc3E\xa7,LIy\x06\xcf\xbaxuYU\xaeBE', 0x100000a3d5) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.010322906s ago: executing program 3 (id=2270): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) r1 = socketcall$auto(0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x8000000000000000, 0x3edc2ecf, 0x9b72, 0x2, 0x8000) socket(0x27, 0x800, 0x84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000640)={0x0, 0x1a, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7b, 0x0, 0x5, 0xfffffffffffffffd}, {0x100, 0x20001, 0x52, 0x85, 0x2, 0x0, 0x2072c2, 0xc, 0x100000000}}) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) msync$auto(0x200000, 0x2000000005, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x3, 0x6) 0s ago: executing program 0 (id=2271): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) sysfs$auto(0x2, 0x49, 0x0) sysfs$auto(0x1000, 0x100000000, 0x5) fsopen$auto(0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) socket(0x2, 0x1, 0x106) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) kernel console output (not intermixed with test programs): 85740209.788:7): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.445" name="lu_gp_id" dev="configfs" ino=37243 res=0 errno=0 [ 352.815879][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.067925][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 353.086956][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 353.099494][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 353.108073][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 353.118510][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.278543][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.649428][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.905444][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.133676][ T5640] Bluetooth: hci2: command tx timeout [ 355.431657][ T49] bridge_slave_1: left allmulticast mode [ 355.445961][ T49] bridge_slave_1: left promiscuous mode [ 355.469073][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.511423][ T49] bridge_slave_0: left allmulticast mode [ 355.526778][ T49] bridge_slave_0: left promiscuous mode [ 355.541832][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.772881][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.787768][ T49] bond0 (unregistering): Released all slaves [ 356.782292][ T8970] random: crng reseeded on system resumption [ 357.051395][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.452'. [ 357.214563][ T5640] Bluetooth: hci2: command tx timeout [ 357.355497][ T49] hsr_slave_0: left promiscuous mode [ 357.387946][ T49] hsr_slave_1: left promiscuous mode [ 357.422160][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.490417][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.546074][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.596512][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.730604][ T49] veth1_macvtap: left promiscuous mode [ 357.768992][ T49] veth0_macvtap: left promiscuous mode [ 357.798247][ T49] veth1_vlan: left promiscuous mode [ 357.824595][ T49] veth0_vlan: left promiscuous mode [ 358.741042][ T49] team0 (unregistering): Port device team_slave_1 removed [ 358.761455][ T49] team0 (unregistering): Port device team_slave_0 removed [ 358.911443][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 358.995019][ T8992] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 359.137711][ T8992] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 359.177992][ T8992] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 359.300757][ T5640] Bluetooth: hci2: command tx timeout [ 360.470879][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 360.564847][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.597213][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.618186][ T8926] bridge_slave_0: entered allmulticast mode [ 360.635700][ T8926] bridge_slave_0: entered promiscuous mode [ 360.729563][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.767279][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.791848][ T8926] bridge_slave_1: entered allmulticast mode [ 360.821449][ T8926] bridge_slave_1: entered promiscuous mode [ 361.146631][ T8926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.255509][ T8926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.373532][ T5640] Bluetooth: hci2: command tx timeout [ 361.574182][ T8926] team0: Port device team_slave_0 added [ 361.612414][ T8926] team0: Port device team_slave_1 added [ 362.360063][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.395314][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.458741][ T8926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.634564][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.665384][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.768254][ T8926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.249811][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 363.608350][ T8926] hsr_slave_0: entered promiscuous mode [ 363.615231][ T8926] hsr_slave_1: entered promiscuous mode [ 363.621679][ T8926] debugfs: 'hsr0' already exists in 'hsr' [ 363.635230][ T8926] Cannot create hsr debugfs directory [ 363.917945][ T9072] random: crng reseeded on system resumption [ 364.324099][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.463'. [ 368.678330][ T8926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 368.800701][ T8926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.092753][ T8926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.139747][ T8926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.274219][ T8926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.330721][ T8926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.611624][ T8926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 369.648482][ T8926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.841752][ T8926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.105115][ T8926] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.210850][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.218381][ T6888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.918164][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.925403][ T6889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.724648][ T9259] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 377.363755][ T8926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.899871][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.908989][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.307876][ T8926] veth0_vlan: entered promiscuous mode [ 379.542214][ T8926] veth1_vlan: entered promiscuous mode [ 380.955810][ T8926] veth0_macvtap: entered promiscuous mode [ 381.151578][ T8926] veth1_macvtap: entered promiscuous mode [ 381.227549][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.652670][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.205142][ T6888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.020747][ T9334] sd 0:0:1:0: PR command failed: 1026 [ 383.042649][ T9334] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 383.067175][ T9334] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 383.383605][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.579522][ T6888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.610158][ T6888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.685287][ T6888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.753375][ T6886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.568528][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.609740][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.104182][ T9353] random: crng reseeded on system resumption [ 385.432327][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.448'. [ 386.033947][ T9353] bond0: (slave bond_slave_0): Releasing backup interface [ 388.425370][ T9390] kAFS: unparsable volume name [ 388.531100][ T9393] random: crng reseeded on system resumption [ 390.790351][ T30] audit: type=1806 audit(1785740248.568:8): xattr="." res=0 [ 397.675856][ T9458] random: crng reseeded on system resumption [ 398.825389][ T9487] __vm_enough_memory: pid: 9487, comm: syz.0.514, bytes: 4398046457856 not enough memory for the allocation [ 398.905615][ T9488] usb usb3: usbfs: process 9488 (syz.2.512) did not claim interface 0 before use [ 398.940222][ T30] audit: type=1800 audit(1785740256.718:9): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.514" name="members" dev="configfs" ino=42166 res=0 errno=0 [ 404.364601][ T9536] FAULT_INJECTION: forcing a failure. [ 404.364601][ T9536] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 404.420831][ T9536] CPU: 0 UID: 0 PID: 9536 Comm: syz.3.520 Not tainted syzkaller #0 PREEMPT(full) [ 404.420862][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 404.420876][ T9536] Call Trace: [ 404.420956][ T9536] [ 404.420964][ T9536] dump_stack_lvl+0x100/0x190 [ 404.421112][ T9536] should_fail_ex.cold+0x5/0xa [ 404.421153][ T9536] _copy_to_user+0x32/0xd0 [ 404.421262][ T9536] simple_read_from_buffer+0xcb/0x170 [ 404.421364][ T9536] proc_fail_nth_read+0x1af/0x230 [ 404.421422][ T9536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.421456][ T9536] ? rw_verify_area+0xce/0x6d0 [ 404.421497][ T9536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.421530][ T9536] vfs_read+0x1e4/0xb40 [ 404.421555][ T9536] ? __pfx_vfs_read+0x10/0x10 [ 404.421576][ T9536] ? __fget_files+0x215/0x3d0 [ 404.421604][ T9536] ? __fget_files+0x21f/0x3d0 [ 404.421633][ T9536] ksys_read+0x12a/0x250 [ 404.421654][ T9536] ? __pfx_ksys_read+0x10/0x10 [ 404.421683][ T9536] do_syscall_64+0x115/0x840 [ 404.421781][ T9536] ? clear_bhb_loop+0x40/0x90 [ 404.421818][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.421842][ T9536] RIP: 0033:0x7f354fb5e84e [ 404.421861][ T9536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 404.421883][ T9536] RSP: 002b:00007f3550a7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.421924][ T9536] RAX: ffffffffffffffda RBX: 00007f3550a7b6c0 RCX: 00007f354fb5e84e [ 404.421939][ T9536] RDX: 000000000000000f RSI: 00007f3550a7b0a0 RDI: 0000000000000004 [ 404.421953][ T9536] RBP: 00007f3550a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 404.421967][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.421980][ T9536] R13: 00007f354fe26038 R14: 00007f354fe25fa0 R15: 00007ffdbb051868 [ 404.422010][ T9536] [ 405.585672][ T9546] random: crng reseeded on system resumption [ 411.430911][ T9623] random: crng reseeded on system resumption [ 412.000765][ T9628] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 412.541938][ T9647] sd 0:0:1:0: PR command failed: 1026 [ 412.601868][ T9647] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 412.680552][ T9647] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 415.873973][ T9669] random: crng reseeded on system resumption [ 416.720575][ T9673] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 422.167461][ T9754] random: crng reseeded on system resumption [ 422.904809][ T9760] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 426.127788][ T9804] random: crng reseeded on system resumption [ 426.807338][ T9810] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 429.941823][ T9862] random: crng reseeded on system resumption [ 435.504830][ T9931] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 438.737481][ T9967] usb usb3: usbfs: process 9967 (syz.1.591) did not claim interface 0 before use [ 440.337563][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.346845][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.545067][T10020] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 451.964512][T10112] random: crng reseeded on system resumption [ 452.696741][T10129] binder: 10125:10129 ioctl c018620c 9 returned -1 [ 457.868019][T10187] random: crng reseeded on system resumption [ 458.641815][T10197] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 459.570536][T10206] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 463.545916][T10247] random: crng reseeded on system resumption [ 465.261461][T10268] device-mapper: ioctl: Invalid ioctl structure: uuid H, name , dev 1000000000000 [ 466.093045][T10268] kexec: Could not allocate control_code_buffer [ 468.067086][T10309] random: crng reseeded on system resumption [ 468.448708][T10310] FAULT_INJECTION: forcing a failure. [ 468.448708][T10310] name failslab, interval 1, probability 0, space 0, times 0 [ 468.486442][T10310] CPU: 0 UID: 0 PID: 10310 Comm: syz.3.641 Not tainted syzkaller #0 PREEMPT(full) [ 468.486475][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 468.486490][T10310] Call Trace: [ 468.486497][T10310] [ 468.486506][T10310] dump_stack_lvl+0x100/0x190 [ 468.486541][T10310] should_fail_ex.cold+0x5/0xa [ 468.486570][T10310] should_failslab+0xc2/0x120 [ 468.486647][T10310] kmem_cache_alloc_noprof+0x91/0x6a0 [ 468.486682][T10310] ? rcu_is_watching+0x12/0xc0 [ 468.486731][T10310] ? anon_vma_clone+0x2ba/0xcd0 [ 468.486775][T10310] anon_vma_clone+0x2ba/0xcd0 [ 468.486821][T10310] copy_vma+0x6ed/0xac0 [ 468.486853][T10310] ? __pfx_copy_vma+0x10/0x10 [ 468.486913][T10310] copy_vma_and_data+0x1cf/0x7c0 [ 468.486944][T10310] ? __pfx_copy_vma_and_data+0x10/0x10 [ 468.486984][T10310] ? __vma_start_write+0x17f/0x280 [ 468.487032][T10310] ? __pfx___vma_start_write+0x10/0x10 [ 468.487080][T10310] move_vma+0x574/0x1920 [ 468.487111][T10310] ? __pfx_move_vma+0x10/0x10 [ 468.487141][T10310] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 468.487178][T10310] ? cap_mmap_addr+0x4b/0x120 [ 468.487272][T10310] ? bpf_lsm_mmap_addr+0x9/0x30 [ 468.487310][T10310] ? security_mmap_addr+0x71/0x1e0 [ 468.487378][T10310] ? __get_unmapped_area+0x255/0x3e0 [ 468.487417][T10310] ? vrm_set_new_addr+0x204/0x290 [ 468.487446][T10310] mremap_to+0x234/0x4c0 [ 468.487471][T10310] ? mas_walk+0x6ef/0x9b0 [ 468.487547][T10310] ? __pfx_mremap_to+0x10/0x10 [ 468.487573][T10310] ? check_prep_vma+0x912/0xe60 [ 468.487605][T10310] __do_sys_mremap+0x88c/0x1850 [ 468.487642][T10310] ? __pfx___do_sys_mremap+0x10/0x10 [ 468.487678][T10310] ? __pfx_do_futex+0x10/0x10 [ 468.487726][T10310] ? __x64_sys_futex+0x34f/0x4d0 [ 468.487770][T10310] do_syscall_64+0x115/0x840 [ 468.487802][T10310] ? clear_bhb_loop+0x40/0x90 [ 468.487832][T10310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.487858][T10310] RIP: 0033:0x7f354fb9e019 [ 468.487878][T10310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.487901][T10310] RSP: 002b:00007f35509d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 468.487924][T10310] RAX: ffffffffffffffda RBX: 00007f354fe26450 RCX: 00007f354fb9e019 [ 468.487940][T10310] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 468.487955][T10310] RBP: 00007f354fc3500c R08: 0000000100000000 R09: 0000000000000000 [ 468.487970][T10310] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 468.487984][T10310] R13: 00007f354fe264e8 R14: 00007f354fe26450 R15: 00007ffdbb051868 [ 468.488014][T10310] [ 470.052656][T10316] futex_wake_op: syz.0.645 tries to shift op by -2048; fix this program [ 470.082753][T10316] futex_wake_op: syz.0.645 tries to shift op by -2048; fix this program [ 470.145148][T10316] 0x000000000001-0x000000020000 : "" [ 470.199565][T10316] ftl_cs: FTL header corrupt! [ 471.161520][T10330] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 478.258934][T10391] Bluetooth: hci2: command 0x0406 tx timeout [ 480.859261][T10445] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 484.301262][ T5640] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 486.216648][T10508] vhci_hcd: not connected 4 [ 486.334530][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 488.413293][T10391] Bluetooth: hci2: command 0x0406 tx timeout [ 492.586253][T10589] random: crng reseeded on system resumption [ 496.540357][T10654] random: crng reseeded on system resumption [ 497.737147][T10671] netlink: 330 bytes leftover after parsing attributes in process `syz.0.706'. [ 499.939276][T10707] random: crng reseeded on system resumption [ 501.774618][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.783443][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.790284][T10737] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 502.679708][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.956655][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.266699][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.425634][T10391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.439305][T10391] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 503.452737][T10391] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 503.468567][T10391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 503.481103][T10391] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 503.690643][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.940091][ T58] bridge_slave_1: left allmulticast mode [ 504.956743][ T58] bridge_slave_1: left promiscuous mode [ 504.969921][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.993978][ T58] bridge_slave_0: left allmulticast mode [ 505.013672][ T58] bridge_slave_0: left promiscuous mode [ 505.029773][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.460363][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.472105][ T58] bond0 (unregistering): Released all slaves [ 505.534646][T10391] Bluetooth: hci1: command tx timeout [ 505.811371][T10779] random: crng reseeded on system resumption [ 507.613387][T10391] Bluetooth: hci1: command tx timeout [ 507.775620][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 508.909031][ T58] hsr_slave_0: left promiscuous mode [ 508.944795][ T58] hsr_slave_1: left promiscuous mode [ 508.968353][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.019492][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.066950][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.118269][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.214850][ T58] veth1_macvtap: left promiscuous mode [ 509.255357][ T58] veth0_macvtap: left promiscuous mode [ 509.282784][ T58] veth1_vlan: left promiscuous mode [ 509.318401][ T58] veth0_vlan: left promiscuous mode [ 509.695112][T10391] Bluetooth: hci1: command tx timeout [ 510.328290][T10836] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [52] [ 510.675764][ T58] team0 (unregistering): Port device team_slave_1 removed [ 510.762691][ T58] team0 (unregistering): Port device team_slave_0 removed [ 511.137096][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 511.773576][T10391] Bluetooth: hci1: command tx timeout [ 512.191207][T10751] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.220980][T10751] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.243474][T10751] bridge_slave_0: entered allmulticast mode [ 512.263597][T10751] bridge_slave_0: entered promiscuous mode [ 512.284721][T10751] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.299669][T10751] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.314608][T10751] bridge_slave_1: entered allmulticast mode [ 512.330541][T10751] bridge_slave_1: entered promiscuous mode [ 512.500471][T10751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.562167][T10751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.759922][T10751] team0: Port device team_slave_0 added [ 512.818289][T10751] team0: Port device team_slave_1 added [ 513.092596][T10751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.125574][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.248488][T10751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.308918][T10751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.342972][T10751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.457576][T10751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.591488][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 514.256163][T10881] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 514.636205][T10751] hsr_slave_0: entered promiscuous mode [ 514.662873][T10751] hsr_slave_1: entered promiscuous mode [ 514.682097][T10751] debugfs: 'hsr0' already exists in 'hsr' [ 514.703125][T10751] Cannot create hsr debugfs directory [ 516.629331][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 516.960118][T10913] nbd: socks must be embedded in a SOCK_ITEM attr [ 517.707476][T10913] block nbd0: shutting down sockets [ 522.265368][T10981] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 522.751991][T10751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.824594][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.868699][T10751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.942677][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.470675][T10751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 523.549903][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.878693][T10751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 523.908749][T10751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.040001][T10751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.208240][T10751] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.286158][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.293894][T10766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.390426][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.397667][T10766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.650721][T11042] netlink: 'syz.2.744': attribute type 14 has an invalid length. [ 525.708245][T11042] netlink: 330 bytes leftover after parsing attributes in process `syz.2.744'. [ 528.131128][T11087] mmap: syz.0.748 (11087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 528.299061][T11091] phram: not enough arguments [ 528.769742][T11087] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 528.942806][T10751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.760935][T10751] veth0_vlan: entered promiscuous mode [ 531.037505][T10751] veth1_vlan: entered promiscuous mode [ 531.478078][T10751] veth0_macvtap: entered promiscuous mode [ 531.690887][T11145] ======================================================= [ 531.690887][T11145] WARNING: The mand mount option has been deprecated and [ 531.690887][T11145] and is ignored by this kernel. Remove the mand [ 531.690887][T11145] option from the mount to silence this warning. [ 531.690887][T11145] ======================================================= [ 531.788981][T10751] veth1_macvtap: entered promiscuous mode [ 532.198169][T11145] zswap: compressor not available [ 532.683395][T11151] netlink: 10792 bytes leftover after parsing attributes in process `syz.2.754'. [ 532.884589][T10751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.001961][T10751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.163822][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.235793][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.290057][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.605729][ T6892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.162565][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.190044][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.161932][ T6889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.199519][ T6889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.716973][T11188] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 537.633841][T11209] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 541.398583][T11250] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 545.664320][T11292] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 547.210190][T11302] random: crng reseeded on system resumption [ 548.259815][T11319] random: crng reseeded on system resumption [ 553.395363][T11363] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 554.749317][T11365] netlink: 346 bytes leftover after parsing attributes in process `syz.2.786'. [ 557.133970][T11408] random: crng reseeded on system resumption [ 560.882201][T11448] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 563.215620][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.223829][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.082191][T11515] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 574.868213][T11536] hub 1-0:1.0: USB hub found [ 575.116674][T11536] hub 1-0:1.0: 1 port detected [ 575.271485][T11531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.741217][T11531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.951241][T11531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.278301][T11531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.050447][T11601] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 580.274308][T11621] random: crng reseeded on system resumption [ 581.922828][T11641] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 583.122504][T11650] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.172068][T11650] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.199475][T11650] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 583.266606][T11650] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 583.678306][T11650] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 583.804893][T11650] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 583.942331][T11650] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 585.053165][T10391] Bluetooth: hci3: command 0x0c1a tx timeout [ 585.214722][T10391] Bluetooth: hci2: command 0x0406 tx timeout [ 585.220967][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 585.693251][T10391] Bluetooth: hci1: command 0x0c1a tx timeout [ 587.293757][T10391] Bluetooth: hci2: command 0x0406 tx timeout [ 587.773266][T10391] Bluetooth: hci1: command 0x0c1a tx timeout [ 589.239379][T11702] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 589.853634][T10391] Bluetooth: hci1: command 0x0c1a tx timeout [ 591.842225][T11716] random: crng reseeded on system resumption [ 591.849409][T11717] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 598.317055][T11790] random: crng reseeded on system resumption [ 601.086137][T11824] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 603.246911][T11847] zswap: compressor not available [ 603.456605][T11856] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 605.740311][T11876] zswap: compressor not available [ 606.631768][T11895] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 608.798277][T11928] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 610.015954][T10391] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 614.009105][T11982] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 614.183707][T11988] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 614.702606][T11995] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 616.646018][T12007] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 624.655555][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.667995][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.842322][T12062] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 627.321573][T12088] random: crng reseeded on system resumption [ 628.035602][T12099] random: crng reseeded on system resumption [ 631.728037][T12143] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 632.388105][T12150] random: crng reseeded on system resumption [ 632.580107][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.907'. [ 633.792361][T12170] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 637.877016][T12211] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 638.278247][T12209] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 639.773818][T12219] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 645.122576][T12257] random: crng reseeded on system resumption [ 645.492906][T12257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.923'. [ 647.016862][T12288] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 647.442381][T12289] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 649.847928][T12307] zswap: compressor not available [ 651.029862][T12325] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 653.575693][T12363] random: crng reseeded on system resumption [ 653.915302][T12363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 657.257810][T12401] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 662.267664][T12448] random: crng reseeded on system resumption [ 662.832031][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.953'. [ 664.440312][T12474] zswap: compressor not available [ 666.740548][T12495] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 668.626068][T12513] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 669.000092][T12518] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 674.590404][T12574] random: crng reseeded on system resumption [ 674.923449][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.972'. [ 677.940538][T12610] zswap: compressor not available [ 679.600076][T12627] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 680.021088][T12633] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 680.476615][T12642] random: crng reseeded on system resumption [ 680.806933][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.982'. [ 681.719642][T12654] netlink: 10792 bytes leftover after parsing attributes in process `syz.1.984'. [ 682.552938][T12655] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 683.613355][T12677] random: crng reseeded on system resumption [ 683.884967][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 684.746510][T12683] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 685.811143][T12694] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 686.097335][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.109811][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.027319][T12730] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 691.645595][T12759] zswap: compressor not available [ 692.181395][T12768] zswap: compressor not available [ 692.546566][T12778] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 695.367029][T12807] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 696.171508][T12815] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 698.895007][T12843] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 702.048280][T12869] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 704.838221][T12896] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 705.606050][T12904] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 712.616559][T12961] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 714.327027][T12975] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 715.054244][T12982] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 720.445846][T13035] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 721.555546][T13042] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 723.585940][T13055] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 726.927052][T13093] random: crng reseeded on system resumption [ 727.333533][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1048'. [ 728.047079][T13108] random: crng reseeded on system resumption [ 728.460024][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1050'. [ 734.233267][T13187] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 735.751862][T13198] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 737.723093][T13228] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 740.016266][T13252] zswap: compressor not available [ 741.070334][T13261] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 741.533362][T13267] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 743.041633][T13274] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 747.074024][T13330] zswap: compressor not available [ 747.537813][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.547434][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.247389][T13337] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 750.818121][T13375] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 753.858116][T13419] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 755.474983][T13440] zswap: compressor not available [ 755.990353][T13448] zswap: compressor not available [ 757.601631][T13471] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 758.905748][T13492] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 760.101797][T13506] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 765.143933][T13555] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 767.056007][T13578] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 768.010477][T13588] netlink: 10792 bytes leftover after parsing attributes in process `syz.1.1130'. [ 769.506304][T13601] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 776.640316][T13657] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 784.156747][T13734] zswap: compressor not available [ 784.474421][T13749] netlink: 10792 bytes leftover after parsing attributes in process `syz.3.1155'. [ 793.100304][T13820] zswap: compressor not available [ 795.160263][T13835] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 797.800861][T13859] FAULT_INJECTION: forcing a failure. [ 797.800861][T13859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.848778][T13859] CPU: 0 UID: 0 PID: 13859 Comm: syz.3.1170 Not tainted syzkaller #0 PREEMPT(full) [ 797.848810][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 797.848828][T13859] Call Trace: [ 797.848836][T13859] [ 797.848844][T13859] dump_stack_lvl+0x100/0x190 [ 797.848879][T13859] should_fail_ex.cold+0x5/0xa [ 797.848907][T13859] _copy_from_iter+0x1f4/0x1690 [ 797.849006][T13859] ? __asan_memset+0x23/0x50 [ 797.849034][T13859] ? __pfx__copy_from_iter+0x10/0x10 [ 797.849071][T13859] ? __pfx___alloc_skb+0x10/0x10 [ 797.849153][T13859] netlink_sendmsg+0x808/0xda0 [ 797.849236][T13859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.849267][T13859] ? apparmor_socket_sendmsg+0x15b/0x270 [ 797.849341][T13859] ____sys_sendmsg+0xa4d/0xbe0 [ 797.849383][T13859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.849413][T13859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.849443][T13859] ? __pfx__kstrtoull+0x10/0x10 [ 797.849476][T13859] ___sys_sendmsg+0x190/0x1e0 [ 797.849504][T13859] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.849544][T13859] ? find_held_lock+0x2b/0x80 [ 797.849597][T13859] __sys_sendmmsg+0x20c/0x440 [ 797.849667][T13859] ? __pfx___sys_sendmmsg+0x10/0x10 [ 797.849703][T13859] ? ksys_write+0x190/0x250 [ 797.849746][T13859] ? fput+0x79/0x100 [ 797.849772][T13859] ? ksys_write+0x1ac/0x250 [ 797.849793][T13859] ? __pfx_ksys_write+0x10/0x10 [ 797.849820][T13859] __x64_sys_sendmmsg+0x9c/0x100 [ 797.849854][T13859] ? lockdep_hardirqs_on+0x78/0x100 [ 797.849956][T13859] do_syscall_64+0x115/0x840 [ 797.849986][T13859] ? clear_bhb_loop+0x40/0x90 [ 797.850015][T13859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.850039][T13859] RIP: 0033:0x7f354fb9e019 [ 797.850059][T13859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.850081][T13859] RSP: 002b:00007f3550a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 797.850107][T13859] RAX: ffffffffffffffda RBX: 00007f354fe25fa0 RCX: 00007f354fb9e019 [ 797.850122][T13859] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 797.850136][T13859] RBP: 00007f3550a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 797.850150][T13859] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 797.850163][T13859] R13: 00007f354fe26038 R14: 00007f354fe25fa0 R15: 00007ffdbb051868 [ 797.850192][T13859] [ 803.370043][T13919] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 808.981081][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.994929][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.010222][T13994] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 812.142156][T14002] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1191'. [ 817.047088][T14061] random: crng reseeded on system resumption [ 817.066962][T14059] capability: warning: `syz.3.1198' uses 32-bit capabilities (legacy support in use) [ 817.097802][T14063] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 817.329844][T14061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1202'. [ 820.907127][T14106] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 826.046949][T14155] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 826.690700][T14178] FAULT_INJECTION: forcing a failure. [ 826.690700][T14178] name failslab, interval 1, probability 0, space 0, times 0 [ 826.740177][T14178] CPU: 0 UID: 0 PID: 14178 Comm: syz.2.1217 Not tainted syzkaller #0 PREEMPT(full) [ 826.740214][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 826.740230][T14178] Call Trace: [ 826.740238][T14178] [ 826.740246][T14178] dump_stack_lvl+0x100/0x190 [ 826.740277][T14178] should_fail_ex.cold+0x5/0xa [ 826.740308][T14178] should_failslab+0xc2/0x120 [ 826.740341][T14178] __kmalloc_noprof+0xfc/0x820 [ 826.740372][T14178] ? copy_splice_read+0x1a3/0xbb0 [ 826.740467][T14178] copy_splice_read+0x1a3/0xbb0 [ 826.740497][T14178] ? __pfx_copy_splice_read+0x10/0x10 [ 826.740525][T14178] ? look_up_lock_class+0x64/0x120 [ 826.740563][T14178] ? lockdep_init_map_type+0x5c/0x250 [ 826.740588][T14178] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 826.740628][T14178] ? __pfx_copy_splice_read+0x10/0x10 [ 826.740652][T14178] do_splice_read+0x285/0x370 [ 826.740679][T14178] splice_direct_to_actor+0x2a1/0xa30 [ 826.740712][T14178] ? __pfx_direct_splice_actor+0x10/0x10 [ 826.740742][T14178] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 826.740775][T14178] do_splice_direct+0x174/0x240 [ 826.740801][T14178] ? __pfx_do_splice_direct+0x10/0x10 [ 826.740827][T14178] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 826.740855][T14178] ? rw_verify_area+0xce/0x6d0 [ 826.740892][T14178] do_sendfile+0xadc/0xe20 [ 826.740934][T14178] ? __pfx_do_sendfile+0x10/0x10 [ 826.740969][T14178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 826.741030][T14178] ? __fget_files+0x21f/0x3d0 [ 826.741058][T14178] __x64_sys_sendfile64+0x1d8/0x220 [ 826.741085][T14178] ? ksys_write+0x1ac/0x250 [ 826.741105][T14178] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 826.741141][T14178] do_syscall_64+0x115/0x840 [ 826.741171][T14178] ? clear_bhb_loop+0x40/0x90 [ 826.741200][T14178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.741223][T14178] RIP: 0033:0x7f76fd39e019 [ 826.741243][T14178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.741264][T14178] RSP: 002b:00007f76fb572028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 826.741285][T14178] RAX: ffffffffffffffda RBX: 00007f76fd626360 RCX: 00007f76fd39e019 [ 826.741300][T14178] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008 [ 826.741313][T14178] RBP: 00007f76fb572090 R08: 0000000000000000 R09: 0000000000000000 [ 826.741327][T14178] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 826.741340][T14178] R13: 00007f76fd6263f8 R14: 00007f76fd626360 R15: 00007ffdf084b1a8 [ 826.741369][T14178] [ 828.210803][T14189] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 829.350171][T14211] FAULT_INJECTION: forcing a failure. [ 829.350171][T14211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.445062][T14211] CPU: 0 UID: 0 PID: 14211 Comm: syz.3.1220 Not tainted syzkaller #0 PREEMPT(full) [ 829.445094][T14211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 829.445107][T14211] Call Trace: [ 829.445115][T14211] [ 829.445123][T14211] dump_stack_lvl+0x100/0x190 [ 829.445155][T14211] should_fail_ex.cold+0x5/0xa [ 829.445182][T14211] _copy_to_user+0x32/0xd0 [ 829.445222][T14211] simple_read_from_buffer+0xcb/0x170 [ 829.445264][T14211] proc_fail_nth_read+0x1af/0x230 [ 829.445298][T14211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 829.445332][T14211] ? rw_verify_area+0xce/0x6d0 [ 829.445367][T14211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 829.445399][T14211] vfs_read+0x1e4/0xb40 [ 829.445424][T14211] ? __pfx_vfs_read+0x10/0x10 [ 829.445444][T14211] ? __fget_files+0x215/0x3d0 [ 829.445472][T14211] ? __fget_files+0x21f/0x3d0 [ 829.445509][T14211] ksys_read+0x12a/0x250 [ 829.445530][T14211] ? __pfx_ksys_read+0x10/0x10 [ 829.445560][T14211] do_syscall_64+0x115/0x840 [ 829.445591][T14211] ? clear_bhb_loop+0x40/0x90 [ 829.445620][T14211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.445644][T14211] RIP: 0033:0x7f354fb5e84e [ 829.445662][T14211] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 829.445684][T14211] RSP: 002b:00007f35509f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 829.445705][T14211] RAX: ffffffffffffffda RBX: 00007f35509f76c0 RCX: 00007f354fb5e84e [ 829.445721][T14211] RDX: 000000000000000f RSI: 00007f35509f70a0 RDI: 0000000000000009 [ 829.445735][T14211] RBP: 00007f35509f7090 R08: 0000000000000000 R09: 0000000000000000 [ 829.445748][T14211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.445762][T14211] R13: 00007f354fe263f8 R14: 00007f354fe26360 R15: 00007ffdbb051868 [ 829.445791][T14211] [ 834.291006][T14254] random: crng reseeded on system resumption [ 834.749410][T14254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1228'. [ 834.909137][T14264] random: crng reseeded on system resumption [ 835.451784][T14264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1231'. [ 836.809643][T14282] zswap: compressor not available [ 844.510354][T14383] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 845.587300][T14385] zswap: compressor not available [ 848.006273][T14422] netlink: 10792 bytes leftover after parsing attributes in process `syz.0.1254'. [ 849.901878][T14447] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 850.406578][T14467] zswap: compressor not available [ 851.461909][T14484] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 854.570601][T14522] random: crng reseeded on system resumption [ 854.833936][T14522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1267'. [ 856.782684][T14547] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 856.871280][T14559] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 858.392098][T14573] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 862.715098][T14615] zswap: compressor not available [ 862.750792][T14629] nbd: must specify a device to reconfigure [ 863.665130][T14643] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 867.607174][T14689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1292'. [ 867.812630][ T5640] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 868.645825][T14703] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 869.853220][T14699] Bluetooth: hci0: command 0x0c1a tx timeout [ 869.897458][T14699] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 869.928465][T14718] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 870.346284][T14719] HfR: entered promiscuous mode [ 870.415967][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.427757][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.467647][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 870.625240][T14719] HfR: left promiscuous mode [ 871.937667][T14699] Bluetooth: hci3: command 0x0c1a tx timeout [ 871.943958][T14718] Bluetooth: hci0: command 0x0c1a tx timeout [ 872.274220][T14750] FAULT_INJECTION: forcing a failure. [ 872.274220][T14750] name failslab, interval 1, probability 0, space 0, times 0 [ 872.313067][T14750] CPU: 0 UID: 0 PID: 14750 Comm: syz.0.1303 Not tainted syzkaller #0 PREEMPT(full) [ 872.313102][T14750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 872.313116][T14750] Call Trace: [ 872.313124][T14750] [ 872.313132][T14750] dump_stack_lvl+0x100/0x190 [ 872.313164][T14750] should_fail_ex.cold+0x5/0xa [ 872.313190][T14750] should_failslab+0xc2/0x120 [ 872.313224][T14750] kmem_cache_alloc_noprof+0x91/0x6a0 [ 872.313252][T14750] ? d_instantiate+0x8a/0xb0 [ 872.313279][T14750] ? d_instantiate+0x8a/0xb0 [ 872.313305][T14750] ? alloc_empty_file+0x5b/0x1c0 [ 872.313340][T14750] alloc_empty_file+0x5b/0x1c0 [ 872.313378][T14750] alloc_file_pseudo+0x183/0x290 [ 872.313410][T14750] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 872.313442][T14750] ? _raw_spin_unlock+0x28/0x50 [ 872.313469][T14750] ? alloc_fd+0x471/0x7a0 [ 872.313494][T14750] __anon_inode_getfile+0xe8/0x280 [ 872.313600][T14750] __anon_inode_getfd+0x5c/0xe0 [ 872.313634][T14750] __x64_sys_fsopen+0x190/0x220 [ 872.313668][T14750] do_syscall_64+0x115/0x840 [ 872.313700][T14750] ? clear_bhb_loop+0x40/0x90 [ 872.313728][T14750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.313752][T14750] RIP: 0033:0x7fab4879e019 [ 872.313772][T14750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.313793][T14750] RSP: 002b:00007fab469f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 872.313815][T14750] RAX: ffffffffffffffda RBX: 00007fab48a25fa0 RCX: 00007fab4879e019 [ 872.313830][T14750] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 872.313843][T14750] RBP: 00007fab469f6090 R08: 0000000000000000 R09: 0000000000000000 [ 872.313856][T14750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.313869][T14750] R13: 00007fab48a26038 R14: 00007fab48a25fa0 R15: 00007ffc47925048 [ 872.313898][T14750] [ 873.351524][T14755] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 874.013172][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout [ 874.311496][T14774] FAULT_INJECTION: forcing a failure. [ 874.311496][T14774] name failslab, interval 1, probability 0, space 0, times 0 [ 874.373437][T14774] CPU: 0 UID: 0 PID: 14774 Comm: syz.0.1305 Not tainted syzkaller #0 PREEMPT(full) [ 874.373469][T14774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 874.373482][T14774] Call Trace: [ 874.373490][T14774] [ 874.373498][T14774] dump_stack_lvl+0x100/0x190 [ 874.373529][T14774] should_fail_ex.cold+0x5/0xa [ 874.373555][T14774] should_failslab+0xc2/0x120 [ 874.373589][T14774] __kvmalloc_node_noprof+0x116/0x970 [ 874.373623][T14774] ? proc_sys_call_handler+0x2c7/0x5a0 [ 874.373721][T14774] proc_sys_call_handler+0x2c7/0x5a0 [ 874.373747][T14774] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 874.373772][T14774] ? splice_from_pipe_next+0x1ec/0x5a0 [ 874.373804][T14774] iter_file_splice_write+0x830/0x10b0 [ 874.373842][T14774] ? copy_splice_read+0x739/0xbb0 [ 874.373866][T14774] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.373897][T14774] ? __pfx_copy_splice_read+0x10/0x10 [ 874.373936][T14774] ? __pfx_iter_file_splice_write+0x10/0x10 [ 874.373964][T14774] direct_splice_actor+0x192/0x690 [ 874.373992][T14774] splice_direct_to_actor+0x345/0xa30 [ 874.374019][T14774] ? __pfx_direct_splice_actor+0x10/0x10 [ 874.374050][T14774] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 874.374091][T14774] do_splice_direct+0x174/0x240 [ 874.374118][T14774] ? __pfx_do_splice_direct+0x10/0x10 [ 874.374145][T14774] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 874.374174][T14774] ? rw_verify_area+0xce/0x6d0 [ 874.374211][T14774] do_sendfile+0xadc/0xe20 [ 874.374254][T14774] ? __pfx_do_sendfile+0x10/0x10 [ 874.374289][T14774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 874.374325][T14774] ? __fget_files+0x21f/0x3d0 [ 874.374355][T14774] __x64_sys_sendfile64+0x1d8/0x220 [ 874.374382][T14774] ? ksys_write+0x1ac/0x250 [ 874.374403][T14774] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 874.374447][T14774] do_syscall_64+0x115/0x840 [ 874.374479][T14774] ? clear_bhb_loop+0x40/0x90 [ 874.374508][T14774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.374532][T14774] RIP: 0033:0x7fab4879e019 [ 874.374551][T14774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.374573][T14774] RSP: 002b:00007fab46972028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 874.374595][T14774] RAX: ffffffffffffffda RBX: 00007fab48a26360 RCX: 00007fab4879e019 [ 874.374611][T14774] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008 [ 874.374624][T14774] RBP: 00007fab46972090 R08: 0000000000000000 R09: 0000000000000000 [ 874.374639][T14774] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 874.374653][T14774] R13: 00007fab48a263f8 R14: 00007fab48a26360 R15: 00007ffc47925048 [ 874.374683][T14774] [ 876.540741][T14792] Invalid ELF header magic: != ELF [ 876.550233][T14797] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1309'. [ 879.234628][T14845] FAULT_INJECTION: forcing a failure. [ 879.234628][T14845] name failslab, interval 1, probability 0, space 0, times 0 [ 879.297286][T14845] CPU: 0 UID: 0 PID: 14845 Comm: syz.3.1319 Not tainted syzkaller #0 PREEMPT(full) [ 879.297319][T14845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 879.297334][T14845] Call Trace: [ 879.297341][T14845] [ 879.297350][T14845] dump_stack_lvl+0x100/0x190 [ 879.297381][T14845] should_fail_ex.cold+0x5/0xa [ 879.297407][T14845] should_failslab+0xc2/0x120 [ 879.297442][T14845] kmem_cache_alloc_noprof+0x91/0x6a0 [ 879.297479][T14845] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 879.297520][T14845] ? ptlock_alloc+0x1f/0x70 [ 879.297547][T14845] ptlock_alloc+0x1f/0x70 [ 879.297569][T14845] pte_alloc_one+0x82/0x3d0 [ 879.297640][T14845] do_fault+0x86c/0x1750 [ 879.297674][T14845] ? __pmd_alloc+0x3fb/0x950 [ 879.297711][T14845] __handle_mm_fault+0x187d/0x2a00 [ 879.297741][T14845] ? mt_find+0x45e/0x8e0 [ 879.297785][T14845] ? __pfx___handle_mm_fault+0x10/0x10 [ 879.297808][T14845] ? __pfx_mt_find+0x10/0x10 [ 879.297859][T14845] ? find_vma+0xbf/0x140 [ 879.297888][T14845] ? __pfx_find_vma+0x10/0x10 [ 879.297922][T14845] handle_mm_fault+0x37b/0xa30 [ 879.297952][T14845] do_user_addr_fault+0x74c/0x12f0 [ 879.297994][T14845] exc_page_fault+0x6f/0xd0 [ 879.298025][T14845] asm_exc_page_fault+0x26/0x30 [ 879.298049][T14845] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 879.298074][T14845] Code: 9e 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 9e 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 879.298097][T14845] RSP: 0018:ffffc90005acf7b8 EFLAGS: 00050206 [ 879.298115][T14845] RAX: 0000000000000001 RBX: ffff888057aec680 RCX: 00000000000000c4 [ 879.298131][T14845] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888057aec680 [ 879.298145][T14845] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100af5d8e8 [ 879.298159][T14845] R10: ffff888057aec743 R11: 0000000000000000 R12: ffffc90005acfd50 [ 879.298177][T14845] R13: 0000000000000000 R14: 00000000000000c4 R15: 0000000000000000 [ 879.298205][T14845] _copy_from_iter+0x355/0x1690 [ 879.298248][T14845] ? __asan_memset+0x23/0x50 [ 879.298274][T14845] ? __pfx__copy_from_iter+0x10/0x10 [ 879.298311][T14845] ? __pfx___alloc_skb+0x10/0x10 [ 879.298356][T14845] netlink_sendmsg+0x808/0xda0 [ 879.298390][T14845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.298422][T14845] ? apparmor_socket_sendmsg+0x15b/0x270 [ 879.298454][T14845] ____sys_sendmsg+0xa4d/0xbe0 [ 879.298478][T14845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 879.298508][T14845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 879.298538][T14845] ? __pfx__kstrtoull+0x10/0x10 [ 879.298571][T14845] ___sys_sendmsg+0x190/0x1e0 [ 879.298601][T14845] ? __pfx____sys_sendmsg+0x10/0x10 [ 879.298641][T14845] ? find_held_lock+0x2b/0x80 [ 879.298689][T14845] __sys_sendmmsg+0x20c/0x440 [ 879.298728][T14845] ? __pfx___sys_sendmmsg+0x10/0x10 [ 879.298763][T14845] ? ksys_write+0x190/0x250 [ 879.298812][T14845] ? fput+0x79/0x100 [ 879.298839][T14845] ? ksys_write+0x1ac/0x250 [ 879.298861][T14845] ? __pfx_ksys_write+0x10/0x10 [ 879.298888][T14845] __x64_sys_sendmmsg+0x9c/0x100 [ 879.298923][T14845] ? lockdep_hardirqs_on+0x78/0x100 [ 879.298953][T14845] do_syscall_64+0x115/0x840 [ 879.298984][T14845] ? clear_bhb_loop+0x40/0x90 [ 879.299013][T14845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.299036][T14845] RIP: 0033:0x7f354fb9e019 [ 879.299055][T14845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.299076][T14845] RSP: 002b:00007f3550a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 879.299097][T14845] RAX: ffffffffffffffda RBX: 00007f354fe25fa0 RCX: 00007f354fb9e019 [ 879.299113][T14845] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 879.299127][T14845] RBP: 00007f3550a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 879.299142][T14845] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 879.299155][T14845] R13: 00007f354fe26038 R14: 00007f354fe25fa0 R15: 00007ffdbb051868 [ 879.299185][T14845] [ 879.831699][T14851] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 880.460369][T14867] FAULT_INJECTION: forcing a failure. [ 880.460369][T14867] name failslab, interval 1, probability 0, space 0, times 0 [ 880.520265][T14867] CPU: 0 UID: 0 PID: 14867 Comm: syz.3.1320 Not tainted syzkaller #0 PREEMPT(full) [ 880.520298][T14867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 880.520312][T14867] Call Trace: [ 880.520320][T14867] [ 880.520329][T14867] dump_stack_lvl+0x100/0x190 [ 880.520361][T14867] should_fail_ex.cold+0x5/0xa [ 880.520387][T14867] should_failslab+0xc2/0x120 [ 880.520421][T14867] __kvmalloc_node_noprof+0x116/0x970 [ 880.520456][T14867] ? proc_sys_call_handler+0x2c7/0x5a0 [ 880.520486][T14867] proc_sys_call_handler+0x2c7/0x5a0 [ 880.520512][T14867] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 880.520537][T14867] ? splice_from_pipe_next+0x1ec/0x5a0 [ 880.520579][T14867] iter_file_splice_write+0x830/0x10b0 [ 880.520618][T14867] ? copy_splice_read+0x739/0xbb0 [ 880.520644][T14867] ? __pfx_iter_file_splice_write+0x10/0x10 [ 880.520682][T14867] ? __pfx_copy_splice_read+0x10/0x10 [ 880.520722][T14867] ? __pfx_iter_file_splice_write+0x10/0x10 [ 880.520750][T14867] direct_splice_actor+0x192/0x690 [ 880.520778][T14867] splice_direct_to_actor+0x345/0xa30 [ 880.520805][T14867] ? __pfx_direct_splice_actor+0x10/0x10 [ 880.520836][T14867] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 880.520870][T14867] do_splice_direct+0x174/0x240 [ 880.520896][T14867] ? __pfx_do_splice_direct+0x10/0x10 [ 880.520922][T14867] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 880.520951][T14867] ? rw_verify_area+0xce/0x6d0 [ 880.520990][T14867] do_sendfile+0xadc/0xe20 [ 880.521032][T14867] ? __pfx_do_sendfile+0x10/0x10 [ 880.521068][T14867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 880.521103][T14867] ? __fget_files+0x21f/0x3d0 [ 880.521133][T14867] __x64_sys_sendfile64+0x1d8/0x220 [ 880.521160][T14867] ? ksys_write+0x1ac/0x250 [ 880.521181][T14867] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 880.521218][T14867] do_syscall_64+0x115/0x840 [ 880.521249][T14867] ? clear_bhb_loop+0x40/0x90 [ 880.521278][T14867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.521302][T14867] RIP: 0033:0x7f354fb9e019 [ 880.521320][T14867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.521343][T14867] RSP: 002b:00007f35509f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 880.521365][T14867] RAX: ffffffffffffffda RBX: 00007f354fe26360 RCX: 00007f354fb9e019 [ 880.521381][T14867] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008 [ 880.521395][T14867] RBP: 00007f35509f7090 R08: 0000000000000000 R09: 0000000000000000 [ 880.521409][T14867] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 880.521424][T14867] R13: 00007f354fe263f8 R14: 00007f354fe26360 R15: 00007ffdbb051868 [ 880.521453][T14867] [ 881.230266][T14839] kexec: Could not allocate control_code_buffer [ 886.383347][T14908] random: crng reseeded on system resumption [ 886.608797][T14908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1328'. [ 889.528952][T14955] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.2171966850), cmd(2) [ 890.241648][T14964] random: crng reseeded on system resumption [ 890.578287][T14964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1337'. [ 892.516035][T14997] random: crng reseeded on system resumption [ 892.869460][T14997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1343'. [ 894.228474][T15026] FAULT_INJECTION: forcing a failure. [ 894.228474][T15026] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 894.343047][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.1.1345 Not tainted syzkaller #0 PREEMPT(full) [ 894.343079][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 894.343093][T15026] Call Trace: [ 894.343101][T15026] [ 894.343110][T15026] dump_stack_lvl+0x100/0x190 [ 894.343141][T15026] should_fail_ex.cold+0x5/0xa [ 894.343219][T15026] ? prepare_alloc_pages+0x16d/0x5f0 [ 894.343282][T15026] should_fail_alloc_page+0xeb/0x140 [ 894.343319][T15026] prepare_alloc_pages+0x1f0/0x5f0 [ 894.343359][T15026] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 894.343401][T15026] ? stack_trace_save+0x8e/0xc0 [ 894.343437][T15026] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 894.343466][T15026] ? splice_direct_to_actor+0x345/0xa30 [ 894.343491][T15026] ? do_sendfile+0xadc/0xe20 [ 894.343527][T15026] ? __x64_sys_sendfile64+0x1d8/0x220 [ 894.343557][T15026] ? kasan_save_stack+0x3f/0x50 [ 894.343587][T15026] ? kasan_save_stack+0x30/0x50 [ 894.343615][T15026] ? kasan_save_track+0x14/0x30 [ 894.343646][T15026] ? __kasan_kmalloc+0xaa/0xb0 [ 894.343673][T15026] ? __kmalloc_noprof+0x322/0x820 [ 894.343701][T15026] ? copy_splice_read+0x1a3/0xbb0 [ 894.343723][T15026] ? do_splice_read+0x285/0x370 [ 894.343745][T15026] ? splice_direct_to_actor+0x2a1/0xa30 [ 894.343769][T15026] ? do_splice_direct+0x174/0x240 [ 894.343792][T15026] ? do_sendfile+0xadc/0xe20 [ 894.343827][T15026] ? __x64_sys_sendfile64+0x1d8/0x220 [ 894.343872][T15026] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 894.343911][T15026] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 894.343939][T15026] ? rcu_is_watching+0x12/0xc0 [ 894.343969][T15026] ? trace_kmalloc+0xeb/0x110 [ 894.344001][T15026] ? __kasan_kmalloc+0xaa/0xb0 [ 894.344034][T15026] ? copy_splice_read+0x1a3/0xbb0 [ 894.344063][T15026] copy_splice_read+0x1e1/0xbb0 [ 894.344094][T15026] ? __pfx_copy_splice_read+0x10/0x10 [ 894.344128][T15026] ? find_held_lock+0x2b/0x80 [ 894.344169][T15026] ? __pfx_copy_splice_read+0x10/0x10 [ 894.344194][T15026] do_splice_read+0x285/0x370 [ 894.344221][T15026] splice_direct_to_actor+0x2a1/0xa30 [ 894.344249][T15026] ? __pfx_direct_splice_actor+0x10/0x10 [ 894.344279][T15026] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 894.344313][T15026] do_splice_direct+0x174/0x240 [ 894.344339][T15026] ? __pfx_do_splice_direct+0x10/0x10 [ 894.344365][T15026] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 894.344394][T15026] ? rw_verify_area+0xce/0x6d0 [ 894.344431][T15026] do_sendfile+0xadc/0xe20 [ 894.344474][T15026] ? __pfx_do_sendfile+0x10/0x10 [ 894.344509][T15026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 894.344545][T15026] ? __fget_files+0x21f/0x3d0 [ 894.344574][T15026] __x64_sys_sendfile64+0x1d8/0x220 [ 894.344601][T15026] ? ksys_write+0x1ac/0x250 [ 894.344622][T15026] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 894.344659][T15026] do_syscall_64+0x115/0x840 [ 894.344690][T15026] ? clear_bhb_loop+0x40/0x90 [ 894.344718][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.344743][T15026] RIP: 0033:0x7fbb3659e019 [ 894.344762][T15026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.344785][T15026] RSP: 002b:00007fbb37470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 894.344807][T15026] RAX: ffffffffffffffda RBX: 00007fbb36826360 RCX: 00007fbb3659e019 [ 894.344823][T15026] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000008 [ 894.344836][T15026] RBP: 00007fbb37470090 R08: 0000000000000000 R09: 0000000000000000 [ 894.344851][T15026] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000002 [ 894.344865][T15026] R13: 00007fbb368263f8 R14: 00007fbb36826360 R15: 00007ffd61fbcdf8 [ 894.344895][T15026] [ 899.811273][T15056] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 903.000612][T15083] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 906.554344][T15120] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 908.049954][T15126] random: crng reseeded on system resumption [ 908.292542][T15126] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1361'. [ 908.479814][T15126] bond0: (slave bond_slave_0): Releasing backup interface [ 909.641877][T15152] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 909.720717][T15152] vhci_hcd vhci_hcd.3: invalid port number 0 [ 910.186880][T15155] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 913.442230][T15184] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 916.794198][T15213] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 921.365350][ T30] audit: type=1800 audit(1785740779.138:10): pid=15253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1381" name="dbroot" dev="configfs" ino=95407 res=0 errno=0 [ 922.437016][T15279] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1386'. [ 922.659458][T15282] FAULT_INJECTION: forcing a failure. [ 922.659458][T15282] name failslab, interval 1, probability 0, space 0, times 0 [ 922.750103][T15282] CPU: 0 UID: 0 PID: 15282 Comm: syz.2.1385 Not tainted syzkaller #0 PREEMPT(full) [ 922.750137][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 922.750152][T15282] Call Trace: [ 922.750160][T15282] [ 922.750168][T15282] dump_stack_lvl+0x100/0x190 [ 922.750202][T15282] should_fail_ex.cold+0x5/0xa [ 922.750232][T15282] should_failslab+0xc2/0x120 [ 922.750267][T15282] kmem_cache_alloc_noprof+0x91/0x6a0 [ 922.750299][T15282] ? __pfx_vma_merge_new_range+0x10/0x10 [ 922.750325][T15282] ? vm_area_dup+0x27/0x8e0 [ 922.750354][T15282] vm_area_dup+0x27/0x8e0 [ 922.750379][T15282] copy_vma+0x643/0xac0 [ 922.750409][T15282] ? __pfx_copy_vma+0x10/0x10 [ 922.750470][T15282] copy_vma_and_data+0x1cf/0x7c0 [ 922.750500][T15282] ? __pfx_copy_vma_and_data+0x10/0x10 [ 922.750541][T15282] ? __vma_start_write+0x17f/0x280 [ 922.750587][T15282] ? __pfx___vma_start_write+0x10/0x10 [ 922.750641][T15282] move_vma+0x574/0x1920 [ 922.750673][T15282] ? __pfx_move_vma+0x10/0x10 [ 922.750703][T15282] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 922.750741][T15282] ? cap_mmap_addr+0x4b/0x120 [ 922.750769][T15282] ? bpf_lsm_mmap_addr+0x9/0x30 [ 922.750792][T15282] ? security_mmap_addr+0x71/0x1e0 [ 922.750828][T15282] ? __get_unmapped_area+0x255/0x3e0 [ 922.750868][T15282] ? vrm_set_new_addr+0x204/0x290 [ 922.750897][T15282] mremap_to+0x234/0x4c0 [ 922.750921][T15282] ? mas_walk+0x6ef/0x9b0 [ 922.750956][T15282] ? __pfx_mremap_to+0x10/0x10 [ 922.750982][T15282] ? check_prep_vma+0x912/0xe60 [ 922.751014][T15282] __do_sys_mremap+0x88c/0x1850 [ 922.751051][T15282] ? __pfx___do_sys_mremap+0x10/0x10 [ 922.751086][T15282] ? __pfx_do_futex+0x10/0x10 [ 922.751122][T15282] ? __x64_sys_futex+0x34f/0x4d0 [ 922.751166][T15282] do_syscall_64+0x115/0x840 [ 922.751198][T15282] ? clear_bhb_loop+0x40/0x90 [ 922.751229][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.751255][T15282] RIP: 0033:0x7f76fd39e019 [ 922.751275][T15282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.751299][T15282] RSP: 002b:00007f76fad6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 922.751323][T15282] RAX: ffffffffffffffda RBX: 00007f76fd626360 RCX: 00007f76fd39e019 [ 922.751339][T15282] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 922.751354][T15282] RBP: 00007f76fd43500c R08: 0000000100000000 R09: 0000000000000000 [ 922.751369][T15282] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 922.751383][T15282] R13: 00007f76fd6263f8 R14: 00007f76fd626360 R15: 00007ffdf084b1a8 [ 922.751414][T15282] [ 925.627852][T15309] random: crng reseeded on system resumption [ 927.260344][T15323] random: crng reseeded on system resumption [ 927.487410][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1393'. [ 929.807031][T15358] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 931.854930][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.866445][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.360163][ T30] audit: type=1800 audit(1785740790.138:11): pid=15395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1401" name="version" dev="configfs" ino=96771 res=0 errno=0 [ 932.617912][T15396] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 934.923675][ T30] audit: type=1800 audit(1785740792.698:12): pid=15426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1408" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 935.585684][T15429] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 937.643294][T15461] random: crng reseeded on system resumption [ 940.767793][T15487] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 942.778750][ T30] audit: type=1800 audit(1785740800.558:13): pid=15508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1421" name="dbroot" dev="configfs" ino=97989 res=0 errno=0 [ 942.864385][T15505] usbcore.quirks: string doesn't fit in 127 chars. [ 943.230084][T15503] syz.3.1421 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 945.631806][T15554] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 947.239647][T15563] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 948.767164][T15589] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 950.790375][T15612] random: crng reseeded on system resumption [ 951.130602][T15612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1438'. [ 951.690664][T15627] netlink: 10792 bytes leftover after parsing attributes in process `syz.2.1441'. [ 952.230938][T15637] futex_wake_op: syz.2.1442 tries to shift op by -2048; fix this program [ 952.317361][T15637] futex_wake_op: syz.2.1442 tries to shift op by -2048; fix this program [ 954.148560][T15657] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 957.092240][T15680] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 957.900879][T15686] zswap: compressor not available [ 958.705474][T15694] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 960.198531][T15713] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 961.677420][T15724] zswap: compressor not available [ 961.904768][T15734] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 962.026935][T15738] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 963.378893][T15753] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 967.382988][T15800] netlink: 10792 bytes leftover after parsing attributes in process `syz.3.1469'. [ 972.391543][T15860] binder: 15857:15860 ioctl c018620c 9 returned -14 [ 974.639629][T15872] random: crng reseeded on system resumption [ 974.854157][T15878] netlink: 10792 bytes leftover after parsing attributes in process `syz.0.1484'. [ 975.220386][T15872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1482'. [ 976.598827][T15904] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 979.760821][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 979.866883][T15937] syz.2.1493 uses obsolete (PF_INET,SOCK_PACKET) [ 979.890700][T14718] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 981.010780][T15945] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 981.355281][T15953] FAULT_INJECTION: forcing a failure. [ 981.355281][T15953] name failslab, interval 1, probability 0, space 0, times 0 [ 981.415227][T15953] CPU: 0 UID: 0 PID: 15953 Comm: syz.2.1496 Not tainted syzkaller #0 PREEMPT(full) [ 981.415260][T15953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 981.415275][T15953] Call Trace: [ 981.415283][T15953] [ 981.415292][T15953] dump_stack_lvl+0x100/0x190 [ 981.415324][T15953] should_fail_ex.cold+0x5/0xa [ 981.415347][T15953] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 981.415466][T15953] should_failslab+0xc2/0x120 [ 981.415502][T15953] kmem_cache_alloc_noprof+0x91/0x6a0 [ 981.415534][T15953] ? skb_clone+0x190/0x400 [ 981.415576][T15953] skb_clone+0x190/0x400 [ 981.415611][T15953] netlink_deliver_tap+0xaed/0xcc0 [ 981.415646][T15953] netlink_unicast+0x62b/0x850 [ 981.415677][T15953] ? __pfx_netlink_unicast+0x10/0x10 [ 981.415703][T15953] ? __build_skb_around+0x278/0x390 [ 981.415733][T15953] ? is_vmalloc_addr+0x86/0xa0 [ 981.415761][T15953] netlink_sendmsg+0x8b0/0xda0 [ 981.415793][T15953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.415825][T15953] ? apparmor_socket_sendmsg+0x15b/0x270 [ 981.415857][T15953] ____sys_sendmsg+0xa4d/0xbe0 [ 981.415888][T15953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.415918][T15953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.415956][T15953] ___sys_sendmsg+0x190/0x1e0 [ 981.415985][T15953] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.416011][T15953] ? __lock_acquire+0x49f/0x1a40 [ 981.416050][T15953] ? get_pid_task+0x106/0x250 [ 981.416117][T15953] __sys_sendmsg+0x160/0x210 [ 981.416153][T15953] ? __pfx___sys_sendmsg+0x10/0x10 [ 981.416203][T15953] do_syscall_64+0x115/0x840 [ 981.416236][T15953] ? clear_bhb_loop+0x40/0x90 [ 981.416265][T15953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.416289][T15953] RIP: 0033:0x7f76fd39e019 [ 981.416309][T15953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.416332][T15953] RSP: 002b:00007f76fb5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.416354][T15953] RAX: ffffffffffffffda RBX: 00007f76fd625fa0 RCX: 00007f76fd39e019 [ 981.416370][T15953] RDX: 0000000000004000 RSI: 0000200000000400 RDI: 0000000000000003 [ 981.416384][T15953] RBP: 00007f76fb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 981.416398][T15953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.416412][T15953] R13: 00007f76fd626038 R14: 00007f76fd625fa0 R15: 00007ffdf084b1a8 [ 981.416442][T15953] [ 981.892763][T15952] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 982.007380][T15953] netlink: 10792 bytes leftover after parsing attributes in process `syz.2.1496'. [ 984.932065][T15991] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 990.028617][T16049] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 992.650126][T16076] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 992.949441][T16087] random: crng reseeded on system resumption [ 993.294747][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.305024][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.502153][T16094] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 995.190252][T16102] random: crng reseeded on system resumption [ 995.785641][T16102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1519'. [ 997.693719][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 1003.371459][T16195] random: crng reseeded on system resumption [ 1003.755136][T16195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1533'. [ 1004.588257][T16212] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1005.573464][T16240] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1010.327678][T16293] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1012.286296][T14475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.671186][T14475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.917793][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1012.930675][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1012.942144][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1012.954474][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1012.963490][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1013.270453][T14475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.764889][T14475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.053254][ T5640] Bluetooth: hci2: command tx timeout [ 1015.776522][T16336] zswap: compressor not available [ 1016.098023][T14475] bridge_slave_1: left allmulticast mode [ 1016.136267][T14475] bridge_slave_1: left promiscuous mode [ 1016.177896][T14475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.236530][T14475] bridge_slave_0: left allmulticast mode [ 1016.274151][T14475] bridge_slave_0: left promiscuous mode [ 1016.302296][T14475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.134847][ T5640] Bluetooth: hci2: command tx timeout [ 1017.206469][T14475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.253710][T14475] bond0 (unregistering): Released all slaves [ 1017.686304][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1019.216085][ T5640] Bluetooth: hci2: command tx timeout [ 1020.595596][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1021.050621][T16311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.082348][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.118556][T16311] bridge_slave_0: entered allmulticast mode [ 1021.155136][T16311] bridge_slave_0: entered promiscuous mode [ 1021.204519][T16422] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1021.294171][ T5640] Bluetooth: hci2: command tx timeout [ 1021.743448][T16311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.780327][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.811664][T16311] bridge_slave_1: entered allmulticast mode [ 1021.850820][T16311] bridge_slave_1: entered promiscuous mode [ 1022.416110][T16311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.757876][T16311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.147459][T16311] team0: Port device team_slave_0 added [ 1023.523431][T16311] team0: Port device team_slave_1 added [ 1023.827063][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1023.921830][T14475] hsr_slave_0: left promiscuous mode [ 1023.952081][T14475] hsr_slave_1: left promiscuous mode [ 1023.976718][T14475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.009958][T14475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.050356][T14475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.097599][T14475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.192384][T14475] veth1_macvtap: left promiscuous mode [ 1024.216797][T14475] veth0_macvtap: left promiscuous mode [ 1024.239712][T14475] veth1_vlan: left promiscuous mode [ 1024.263233][T14475] veth0_vlan: left promiscuous mode [ 1025.264153][T14475] team0 (unregistering): Port device team_slave_1 removed [ 1025.325722][T14475] team0 (unregistering): Port device team_slave_0 removed [ 1025.768131][T16311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.785379][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.844449][T16311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.880825][T16311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.903312][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.960709][T16311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.000788][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1026.485287][T16311] hsr_slave_0: entered promiscuous mode [ 1026.516596][T16311] hsr_slave_1: entered promiscuous mode [ 1026.538890][T16311] debugfs: 'hsr0' already exists in 'hsr' [ 1026.567975][T16311] Cannot create hsr debugfs directory [ 1027.641851][T16485] netlink: 10792 bytes leftover after parsing attributes in process `syz.2.1565'. [ 1033.520366][T16311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1033.575197][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1033.649225][T16311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1033.712403][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1033.756138][T16311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1033.808588][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1033.856710][T16311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1033.926070][T16311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1035.946855][T16311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.068464][T16311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.160689][T14473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.167915][T14473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.217723][T16628] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1036.287296][T14473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.294523][T14473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.889982][T16697] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1039.985497][T16685] zswap: compressor not available [ 1041.400702][T16311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.346714][T16747] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1043.392093][T16311] veth0_vlan: entered promiscuous mode [ 1043.888401][T16311] veth1_vlan: entered promiscuous mode [ 1044.534980][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 1044.593033][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 1046.022270][T16311] veth0_macvtap: entered promiscuous mode [ 1046.162541][T16311] veth1_macvtap: entered promiscuous mode [ 1046.596136][T16311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.669603][T16311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.784398][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.863048][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.935476][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.075783][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.097417][T16795] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1047.243925][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.293893][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.930970][T14473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.960255][T14473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.506238][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 1050.550643][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 1051.036882][T16838] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1054.143729][T16863] binder: 16862:16863 ioctl c018620c 200000000040 returned -22 [ 1054.738904][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.749824][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.564460][T16881] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1058.950133][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 1058.986143][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 1059.172457][T16913] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1059.844681][T16919] netlink: 10792 bytes leftover after parsing attributes in process `syz.2.1612'. [ 1060.535099][T16922] netlink: 10792 bytes leftover after parsing attributes in process `syz.0.1613'. [ 1061.120436][T16947] : Can't lookup blockdev [ 1063.318698][T16972] zswap: compressor 000 not available [ 1063.755761][T16975] zswap: compressor not available [ 1065.662554][T17008] netlink: 10792 bytes leftover after parsing attributes in process `syz.1.1627'. [ 1065.806805][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 1066.279647][T17027] : Can't lookup blockdev [ 1070.820709][T17069] netlink: 10792 bytes leftover after parsing attributes in process `syz.0.1637'. [ 1072.249134][T17093] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1074.840667][T17131] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1076.711229][T17134] netlink: 10792 bytes leftover after parsing attributes in process `syz.3.1646'. [ 1080.894395][T17193] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1082.315856][T17207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1659'. [ 1084.251778][T17249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1666'. [ 1084.449759][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.549833][T17249] bridge_slave_0 (unregistering): left allmulticast mode [ 1084.605354][T17249] bridge_slave_0 (unregistering): left promiscuous mode [ 1084.648818][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.530841][T17289] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 1088.204786][T17298] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1089.508122][T17309] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1089.617892][T17311] zswap: compressor not available [ 1092.766342][T17358] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 1094.705468][T17383] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 1099.441444][T17439] zswap: compressor not available [ 1101.199922][T17461] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1106.638684][T17487] kexec: Could not allocate control_code_buffer [ 1107.129891][T17520] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1110.409242][T17549] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1110.548527][T17556] FAULT_INJECTION: forcing a failure. [ 1110.548527][T17556] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1110.641068][T17556] CPU: 0 UID: 0 PID: 17556 Comm: syz.3.1708 Not tainted syzkaller #0 PREEMPT(full) [ 1110.641101][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1110.641117][T17556] Call Trace: [ 1110.641124][T17556] [ 1110.641133][T17556] dump_stack_lvl+0x100/0x190 [ 1110.641178][T17556] should_fail_ex.cold+0x5/0xa [ 1110.641206][T17556] get_futex_key+0x1d2/0x14f0 [ 1110.641235][T17556] ? __pfx_get_futex_key+0x10/0x10 [ 1110.641270][T17556] futex_wake+0xf4/0x5e0 [ 1110.641305][T17556] ? __pfx_futex_wake+0x10/0x10 [ 1110.641335][T17556] ? kasan_quarantine_put+0x104/0x240 [ 1110.641381][T17556] ? putname+0xb1/0x110 [ 1110.641407][T17556] ? kmem_cache_free+0x127/0x6b0 [ 1110.641439][T17556] do_futex+0x2b2/0x440 [ 1110.641467][T17556] ? __pfx_do_futex+0x10/0x10 [ 1110.641492][T17556] ? __pfx_do_sys_openat2+0x10/0x10 [ 1110.641528][T17556] ? __fget_files+0x21f/0x3d0 [ 1110.641553][T17556] __x64_sys_futex+0x34f/0x4d0 [ 1110.641583][T17556] ? __x64_sys_openat+0x12d/0x210 [ 1110.641617][T17556] ? __pfx___x64_sys_futex+0x10/0x10 [ 1110.641656][T17556] do_syscall_64+0x115/0x840 [ 1110.641691][T17556] ? clear_bhb_loop+0x40/0x90 [ 1110.641721][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.641750][T17556] RIP: 0033:0x7f354fb9e019 [ 1110.641770][T17556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.641795][T17556] RSP: 002b:00007f3550a5a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1110.641818][T17556] RAX: ffffffffffffffda RBX: 00007f354fe26098 RCX: 00007f354fb9e019 [ 1110.641834][T17556] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f354fe2609c [ 1110.641849][T17556] RBP: 00007f354fe26090 R08: 0000000000000001 R09: 0000000000000000 [ 1110.641864][T17556] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1110.641879][T17556] R13: 00007f354fe26128 R14: 00007ffdbb051780 R15: 00007ffdbb051868 [ 1110.641909][T17556] [ 1114.841861][T17616] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1114.909566][T17610] zswap: compressor not available [ 1116.111383][T17643] FAULT_INJECTION: forcing a failure. [ 1116.111383][T17643] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.174949][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.184074][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.205673][T17640] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1116.294361][T17643] CPU: 0 UID: 0 PID: 17643 Comm: syz.0.1723 Not tainted syzkaller #0 PREEMPT(full) [ 1116.294395][T17643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1116.294409][T17643] Call Trace: [ 1116.294417][T17643] [ 1116.294426][T17643] dump_stack_lvl+0x100/0x190 [ 1116.294459][T17643] should_fail_ex.cold+0x5/0xa [ 1116.294486][T17643] should_failslab+0xc2/0x120 [ 1116.294548][T17643] __kmalloc_noprof+0xfc/0x820 [ 1116.294576][T17643] ? rcu_is_watching+0x12/0xc0 [ 1116.294606][T17643] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1116.294747][T17643] tomoyo_realpath_from_path+0xb6/0x690 [ 1116.294791][T17643] tomoyo_path_number_perm+0x23c/0x580 [ 1116.294824][T17643] ? tomoyo_path_number_perm+0x22e/0x580 [ 1116.294860][T17643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1116.294920][T17643] ? find_held_lock+0x2b/0x80 [ 1116.294948][T17643] ? __fget_files+0x215/0x3d0 [ 1116.294969][T17643] ? hook_file_ioctl_common+0x140/0x440 [ 1116.295038][T17643] ? __fget_files+0x215/0x3d0 [ 1116.295064][T17643] ? __fget_files+0x21f/0x3d0 [ 1116.295091][T17643] security_file_ioctl+0xd3/0x230 [ 1116.295123][T17643] __x64_sys_ioctl+0xb7/0x210 [ 1116.295160][T17643] do_syscall_64+0x115/0x840 [ 1116.295191][T17643] ? clear_bhb_loop+0x40/0x90 [ 1116.295220][T17643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.295244][T17643] RIP: 0033:0x7f3ca219e019 [ 1116.295263][T17643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.295286][T17643] RSP: 002b:00007f3ca3010028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1116.295308][T17643] RAX: ffffffffffffffda RBX: 00007f3ca2426360 RCX: 00007f3ca219e019 [ 1116.295323][T17643] RDX: 00002000000002c0 RSI: 0000000080605414 RDI: 0000000000000003 [ 1116.295338][T17643] RBP: 00007f3ca3010090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.295352][T17643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.295365][T17643] R13: 00007f3ca24263f8 R14: 00007f3ca2426360 R15: 00007fff606e1278 [ 1116.295395][T17643] [ 1116.510597][T17643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1116.589642][T17647] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1120.036131][T17681] zswap: compressor not available [ 1120.238423][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 1125.261129][T17739] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1126.517718][T17750] ubi0: attaching mtd0 [ 1126.709388][T17750] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 1126.864235][T17750] eraseblock attaching information dump: [ 1126.881212][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 1126.966702][T17750] ec 1 [ 1127.030213][T17750] pnum 0 [ 1127.112747][T17750] lnum 0 [ 1127.221050][T17750] scrub 0 [ 1127.301195][T17750] sqnum 1 [ 1127.357267][T17750] Volume identifier header dump: [ 1127.440736][T17750] magic 55424921 [ 1127.509095][T17750] version 1 [ 1127.538028][T17750] vol_type 1 [ 1127.581666][T17750] copy_flag 0 [ 1127.622765][T17750] compat 5 [ 1127.665706][T17750] vol_id 2147479551 [ 1127.731472][T17750] lnum 0 [ 1127.778022][T17750] data_size 0 [ 1127.828031][T17750] used_ebs 0 [ 1127.865525][T17750] data_pad 0 [ 1127.895861][T17750] sqnum 1 [ 1127.932337][T17750] hdr_crc 65b3bd2d [ 1127.983151][T17750] Volume identifier header hexdump: [ 1128.329905][T17750] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1132.429139][T17815] FAULT_INJECTION: forcing a failure. [ 1132.429139][T17815] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.475328][T17815] CPU: 0 UID: 0 PID: 17815 Comm: syz.3.1749 Not tainted syzkaller #0 PREEMPT(full) [ 1132.475361][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1132.475376][T17815] Call Trace: [ 1132.475383][T17815] [ 1132.475392][T17815] dump_stack_lvl+0x100/0x190 [ 1132.475425][T17815] should_fail_ex.cold+0x5/0xa [ 1132.475453][T17815] should_failslab+0xc2/0x120 [ 1132.475488][T17815] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1132.475520][T17815] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 1132.475580][T17815] ? sp_alloc+0x27/0x160 [ 1132.475607][T17815] sp_alloc+0x27/0x160 [ 1132.475630][T17815] mpol_set_shared_policy+0xa5/0x890 [ 1132.475661][T17815] ? __pfx_shmem_set_policy+0x10/0x10 [ 1132.475695][T17815] mbind_range+0x339/0x550 [ 1132.475722][T17815] do_mbind+0x7dc/0xfd0 [ 1132.475754][T17815] ? __pfx_do_mbind+0x10/0x10 [ 1132.475778][T17815] ? find_held_lock+0x2b/0x80 [ 1132.475809][T17815] ? ksys_write+0x190/0x250 [ 1132.475843][T17815] ? __pfx_get_nodes+0x10/0x10 [ 1132.475883][T17815] kernel_mbind+0x1b7/0x200 [ 1132.475909][T17815] ? __pfx_kernel_mbind+0x10/0x10 [ 1132.475942][T17815] do_syscall_64+0x115/0x840 [ 1132.475976][T17815] ? clear_bhb_loop+0x40/0x90 [ 1132.476012][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.476038][T17815] RIP: 0033:0x7f354fb9e019 [ 1132.476058][T17815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.476081][T17815] RSP: 002b:00007f3550a39028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1132.476104][T17815] RAX: ffffffffffffffda RBX: 00007f354fe26180 RCX: 00007f354fb9e019 [ 1132.476121][T17815] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 1132.476135][T17815] RBP: 00007f354fc3500c R08: 0000000000000006 R09: 0000000000000002 [ 1132.476150][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.476164][T17815] R13: 00007f354fe26218 R14: 00007f354fe26180 R15: 00007ffdbb051868 [ 1132.476195][T17815] [ 1134.306818][T17818] FAULT_INJECTION: forcing a failure. [ 1134.306818][T17818] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.367023][T17818] CPU: 0 UID: 0 PID: 17818 Comm: syz.3.1750 Not tainted syzkaller #0 PREEMPT(full) [ 1134.367057][T17818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1134.367072][T17818] Call Trace: [ 1134.367081][T17818] [ 1134.367090][T17818] dump_stack_lvl+0x100/0x190 [ 1134.367122][T17818] should_fail_ex.cold+0x5/0xa [ 1134.367150][T17818] should_failslab+0xc2/0x120 [ 1134.367187][T17818] __kmalloc_cache_noprof+0x91/0x6c0 [ 1134.367214][T17818] ? lockdep_init_map_type+0x5c/0x250 [ 1134.367244][T17818] ? kvm_create_lapic+0xa9/0x440 [ 1134.367325][T17818] kvm_create_lapic+0xa9/0x440 [ 1134.367364][T17818] kvm_arch_vcpu_create+0x273/0xab0 [ 1134.367405][T17818] kvm_vm_ioctl+0x752/0x4180 [ 1134.367444][T17818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.367481][T17818] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1134.367536][T17818] ? kasan_quarantine_put+0x104/0x240 [ 1134.367566][T17818] ? lockdep_hardirqs_on+0x78/0x100 [ 1134.367600][T17818] ? find_held_lock+0x2b/0x80 [ 1134.367630][T17818] ? tomoyo_path_number_perm+0x28f/0x580 [ 1134.367664][T17818] ? tomoyo_path_number_perm+0x28f/0x580 [ 1134.367702][T17818] ? tomoyo_path_number_perm+0x188/0x580 [ 1134.367737][T17818] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1134.367775][T17818] ? __pfx_futex_wait+0x10/0x10 [ 1134.367814][T17818] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1134.367853][T17818] ? do_vfs_ioctl+0x226/0x13e0 [ 1134.367889][T17818] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1134.367932][T17818] ? find_held_lock+0x2b/0x80 [ 1134.367962][T17818] ? __fget_files+0x215/0x3d0 [ 1134.367983][T17818] ? hook_file_ioctl_common+0x140/0x440 [ 1134.368023][T17818] ? __fget_files+0x21f/0x3d0 [ 1134.368049][T17818] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1134.368085][T17818] __x64_sys_ioctl+0x18e/0x210 [ 1134.368123][T17818] do_syscall_64+0x115/0x840 [ 1134.368155][T17818] ? clear_bhb_loop+0x40/0x90 [ 1134.368185][T17818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.368210][T17818] RIP: 0033:0x7f354fb9e019 [ 1134.368230][T17818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.368259][T17818] RSP: 002b:00007f3550a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1134.368282][T17818] RAX: ffffffffffffffda RBX: 00007f354fe25fa0 RCX: 00007f354fb9e019 [ 1134.368298][T17818] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000003 [ 1134.368313][T17818] RBP: 00007f354fc3500c R08: 0000000000000000 R09: 0000000000000000 [ 1134.368328][T17818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.368342][T17818] R13: 00007f354fe26038 R14: 00007f354fe25fa0 R15: 00007ffdbb051868 [ 1134.368373][T17818] [ 1138.739814][T14718] Bluetooth: hci2: command 0x0406 tx timeout [ 1141.519442][T17877] netlink: NAT attribute has 5 unknown bytes [ 1142.833928][T17886] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1144.244145][T17900] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1145.448942][T17909] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1149.435658][T17950] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1152.049536][T17984] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1152.449609][T17994] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1158.629263][T18053] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 1161.767230][T18110] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1162.971888][T18119] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1163.025348][T18122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1799'. [ 1164.386711][T18148] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 1165.669424][T18166] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1166.535178][T18174] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 1171.905981][T18237] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1173.682524][T18245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1817'. [ 1176.276457][T18283] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1176.324780][T18285] netlink: 246 bytes leftover after parsing attributes in process `syz.2.1825'. [ 1177.619874][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.629457][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.713356][T18302] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1181.308015][T18350] kfence: disabled [ 1181.383696][T18350] kfence: re-enabled [ 1183.442371][T18364] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1183.621160][ T5640] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1185.694992][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 1187.772957][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout [ 1187.808002][T18421] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1187.875858][T18404] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1191.145615][T18457] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 1191.757350][T18461] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1193.059366][T18470] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1199.116889][T18547] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1206.999876][T18637] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1211.934851][T18695] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1217.125455][T18751] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1217.259528][T18753] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1221.971248][T18799] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1224.311022][T18821] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1226.836641][T18849] netlink: 246 bytes leftover after parsing attributes in process `syz.1.1905'. [ 1230.960647][T18889] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1235.968214][T18945] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [139] [ 1239.059775][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.068076][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.824015][T18984] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1241.902710][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 1241.949925][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 1246.382128][T19082] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1247.550262][T19087] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1249.039105][T19111] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1252.224472][T19142] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [217] [ 1255.045178][T19176] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1258.063135][T19208] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1262.956143][T19258] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1272.170289][T19340] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 1280.479784][T19399] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1281.814516][ T30] audit: type=1804 audit(1843104757.190:14): pid=19403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1991" name="/newroot/508/file0" dev="tmpfs" ino=2630 res=1 errno=0 [ 1285.547348][T19427] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 1288.661994][T19479] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1290.747680][T19494] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1294.982710][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.376269][T18374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1295.392545][T18374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1295.402999][T18374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1295.413579][T18374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1295.426203][T18374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1295.677408][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.022436][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.530479][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.454206][T18374] Bluetooth: hci3: command tx timeout [ 1298.511123][T19597] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1299.531132][ T49] bridge_slave_1: left allmulticast mode [ 1299.540558][T18374] Bluetooth: hci3: command tx timeout [ 1299.557319][ T49] bridge_slave_1: left promiscuous mode [ 1299.571194][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.996124][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.023823][ T49] bond0 (unregistering): Released all slaves [ 1300.215505][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1300.500535][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.508679][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.830180][T19623] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1301.613297][T18374] Bluetooth: hci3: command tx timeout [ 1302.927115][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1303.693191][T18374] Bluetooth: hci3: command tx timeout [ 1304.309584][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.352468][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.395082][T19561] bridge_slave_0: entered allmulticast mode [ 1304.426867][T19561] bridge_slave_0: entered promiscuous mode [ 1304.470367][T19561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.510434][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.548710][T19561] bridge_slave_1: entered allmulticast mode [ 1304.587635][T19561] bridge_slave_1: entered promiscuous mode [ 1305.318454][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1305.374293][T19561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.501313][T19561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.850286][T19561] team0: Port device team_slave_0 added [ 1305.883804][T19561] team0: Port device team_slave_1 added [ 1305.990226][T19696] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2025'. [ 1306.472877][T19561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.499412][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.586211][T19561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.941976][T19561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.988118][T19561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.110255][T19561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.551335][ T49] hsr_slave_0: left promiscuous mode [ 1307.570620][ T49] hsr_slave_1: left promiscuous mode [ 1307.593098][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.621772][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.651777][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.676157][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.708569][ T49] veth1_macvtap: left promiscuous mode [ 1307.726107][ T49] veth0_macvtap: left promiscuous mode [ 1307.741003][ T49] veth1_vlan: left promiscuous mode [ 1307.756886][ T49] veth0_vlan: left promiscuous mode [ 1308.179311][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1308.200993][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1308.425698][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1308.526705][T19561] hsr_slave_0: entered promiscuous mode [ 1308.535834][T19561] hsr_slave_1: entered promiscuous mode [ 1309.931742][T19745] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1310.836715][T19746] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [217] [ 1313.817087][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 1313.908226][T19790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 1314.761364][T19561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1314.801223][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1315.228020][T19561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1315.272363][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1315.695342][T19561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1315.747076][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1315.980890][T19561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1316.011965][T19561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1319.388191][T19561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.968376][T19561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.860286][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.867525][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.486378][T14471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.493649][T14471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.022901][T19883] hub 1-0:1.0: USB hub found [ 1322.091462][T19883] hub 1-0:1.0: 1 port detected [ 1324.264765][T19933] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2042'. [ 1325.005446][T19561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1328.248609][T19561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.542202][T19561] veth0_vlan: entered promiscuous mode [ 1329.663364][T19561] veth1_vlan: entered promiscuous mode [ 1330.197170][T19561] veth0_macvtap: entered promiscuous mode [ 1330.256610][T19561] veth1_macvtap: entered promiscuous mode [ 1331.046493][T19561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.487986][T19561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.843593][T14474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.063257][T14474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.143180][T14473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.168552][T14473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1333.899753][ T6892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1333.942254][ T6892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.060191][T20048] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1335.398594][T14473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.421748][T14473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.717796][T20055] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1342.364956][T20105] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4:1:0:20:0, load rds_tcp or rds_rdma? [ 1348.640057][T20161] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1350.977542][T20185] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1353.540143][T20208] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1355.548677][T20225] netlink: 314 bytes leftover after parsing attributes in process `syz.3.2080'. [ 1360.108585][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 1360.533288][T20286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1361.936663][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.949426][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.441883][T20310] FAULT_INJECTION: forcing a failure. [ 1362.441883][T20310] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.510962][T20310] CPU: 0 UID: 0 PID: 20310 Comm: syz.2.2095 Not tainted syzkaller #0 PREEMPT(full) [ 1362.510994][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1362.511009][T20310] Call Trace: [ 1362.511016][T20310] [ 1362.511025][T20310] dump_stack_lvl+0x100/0x190 [ 1362.511058][T20310] should_fail_ex.cold+0x5/0xa [ 1362.511081][T20310] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1362.511111][T20310] should_failslab+0xc2/0x120 [ 1362.511145][T20310] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1362.511184][T20310] ? skb_clone+0x190/0x400 [ 1362.511225][T20310] skb_clone+0x190/0x400 [ 1362.511260][T20310] netlink_deliver_tap+0xaed/0xcc0 [ 1362.511294][T20310] netlink_unicast+0x62b/0x850 [ 1362.511326][T20310] ? __pfx_netlink_unicast+0x10/0x10 [ 1362.511361][T20310] netlink_sendmsg+0x8b0/0xda0 [ 1362.511393][T20310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1362.511425][T20310] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1362.511458][T20310] ____sys_sendmsg+0xa4d/0xbe0 [ 1362.511482][T20310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1362.511512][T20310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1362.511550][T20310] ___sys_sendmsg+0x190/0x1e0 [ 1362.511579][T20310] ? __pfx____sys_sendmsg+0x10/0x10 [ 1362.511604][T20310] ? __lock_acquire+0x49f/0x1a40 [ 1362.511644][T20310] ? get_pid_task+0x106/0x250 [ 1362.511706][T20310] __sys_sendmsg+0x160/0x210 [ 1362.511742][T20310] ? __pfx___sys_sendmsg+0x10/0x10 [ 1362.511793][T20310] do_syscall_64+0x115/0x840 [ 1362.511826][T20310] ? clear_bhb_loop+0x40/0x90 [ 1362.511856][T20310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.511880][T20310] RIP: 0033:0x7f76fd39e019 [ 1362.511899][T20310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.511922][T20310] RSP: 002b:00007f76fb5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1362.511944][T20310] RAX: ffffffffffffffda RBX: 00007f76fd626090 RCX: 00007f76fd39e019 [ 1362.511960][T20310] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 1362.511974][T20310] RBP: 00007f76fb5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.511992][T20310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.512006][T20310] R13: 00007f76fd626128 R14: 00007f76fd626090 R15: 00007ffdf084b1a8 [ 1362.512036][T20310] [ 1364.759323][T20327] netlink: 314 bytes leftover after parsing attributes in process `syz.1.2098'. [ 1365.553412][T20340] program syz.1.2099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1366.447120][T20356] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1374.029447][T20420] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 1376.554815][T20437] netlink: 314 bytes leftover after parsing attributes in process `syz.2.2116'. [ 1378.013843][T20461] FAULT_INJECTION: forcing a failure. [ 1378.013843][T20461] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.067151][T20461] CPU: 0 UID: 0 PID: 20461 Comm: syz.0.2120 Not tainted syzkaller #0 PREEMPT(full) [ 1378.067184][T20461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1378.067199][T20461] Call Trace: [ 1378.067207][T20461] [ 1378.067216][T20461] dump_stack_lvl+0x100/0x190 [ 1378.067246][T20461] should_fail_ex.cold+0x5/0xa [ 1378.067274][T20461] should_failslab+0xc2/0x120 [ 1378.067308][T20461] __kmalloc_noprof+0xfc/0x820 [ 1378.067338][T20461] ? ethnl_default_set_doit+0x178/0x1050 [ 1378.067466][T20461] ethnl_default_set_doit+0x178/0x1050 [ 1378.067498][T20461] genl_family_rcv_msg_doit+0x214/0x300 [ 1378.067534][T20461] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1378.067566][T20461] ? genl_get_cmd+0x3e7/0x760 [ 1378.067601][T20461] ? bpf_lsm_capable+0x9/0x10 [ 1378.067628][T20461] ? security_capable+0x80/0x260 [ 1378.067656][T20461] ? ns_capable+0xd2/0xf0 [ 1378.067684][T20461] genl_rcv_msg+0x560/0x800 [ 1378.067719][T20461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1378.067750][T20461] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1378.067788][T20461] netlink_rcv_skb+0x159/0x420 [ 1378.067822][T20461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1378.067855][T20461] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1378.067894][T20461] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1378.067924][T20461] genl_rcv+0x28/0x40 [ 1378.067952][T20461] netlink_unicast+0x585/0x850 [ 1378.067983][T20461] ? __pfx_netlink_unicast+0x10/0x10 [ 1378.068022][T20461] netlink_sendmsg+0x8b0/0xda0 [ 1378.068054][T20461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1378.068086][T20461] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1378.068117][T20461] ____sys_sendmsg+0xa4d/0xbe0 [ 1378.068141][T20461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1378.068171][T20461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1378.068209][T20461] ___sys_sendmsg+0x190/0x1e0 [ 1378.068239][T20461] ? __pfx____sys_sendmsg+0x10/0x10 [ 1378.068263][T20461] ? __lock_acquire+0x49f/0x1a40 [ 1378.068302][T20461] ? get_pid_task+0x106/0x250 [ 1378.068364][T20461] __sys_sendmsg+0x160/0x210 [ 1378.068400][T20461] ? __pfx___sys_sendmsg+0x10/0x10 [ 1378.068450][T20461] do_syscall_64+0x115/0x840 [ 1378.068483][T20461] ? clear_bhb_loop+0x40/0x90 [ 1378.068513][T20461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.068538][T20461] RIP: 0033:0x7f3ca219e019 [ 1378.068557][T20461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.068579][T20461] RSP: 002b:00007f3ca3094028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1378.068602][T20461] RAX: ffffffffffffffda RBX: 00007f3ca2425fa0 RCX: 00007f3ca219e019 [ 1378.068618][T20461] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 1378.068632][T20461] RBP: 00007f3ca3094090 R08: 0000000000000000 R09: 0000000000000000 [ 1378.068647][T20461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.068661][T20461] R13: 00007f3ca2426038 R14: 00007f3ca2425fa0 R15: 00007fff606e1278 [ 1378.068691][T20461] [ 1387.192617][T20561] netlink: 314 bytes leftover after parsing attributes in process `syz.2.2134'. [ 1389.170646][T20574] hub 1-0:1.0: USB hub found [ 1389.201492][T20574] hub 1-0:1.0: 1 port detected [ 1392.050192][T20620] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1395.150466][T20645] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1397.478116][T20659] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1399.548366][T20653] hub 1-0:1.0: USB hub found [ 1399.626460][T20653] hub 1-0:1.0: 1 port detected [ 1404.733688][T18374] Bluetooth: hci0: command 0x0c1a tx timeout [ 1404.751049][T20694] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1405.147402][T20694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1405.206212][T20694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1405.249612][T20694] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1405.375417][T20694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1405.400132][T20694] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1405.431746][T20694] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1406.893107][T18374] Bluetooth: hci1: command 0x0c1a tx timeout [ 1407.213991][T18374] Bluetooth: hci2: command 0x0406 tx timeout [ 1407.453039][T18374] Bluetooth: hci3: command 0x0c1a tx timeout [ 1408.786192][T20751] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1409.292963][T18374] Bluetooth: hci2: command 0x0406 tx timeout [ 1409.533162][T18374] Bluetooth: hci3: command 0x0c1a tx timeout [ 1409.548195][T20734] hub 1-0:1.0: USB hub found [ 1409.603664][T20734] hub 1-0:1.0: 1 port detected [ 1411.613943][T18374] Bluetooth: hci3: command 0x0c1a tx timeout [ 1411.631259][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 1411.708871][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 1413.546405][T20771] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [2] [ 1418.722463][T20841] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1422.517767][T20893] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 1422.660128][T20898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2186'. [ 1423.374253][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.381416][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.955685][T20885] hub 1-0:1.0: USB hub found [ 1424.008434][T20885] hub 1-0:1.0: 1 port detected [ 1426.420479][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'. [ 1426.706399][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2190'. [ 1435.040704][T20987] hub 1-0:1.0: USB hub found [ 1435.130517][T20987] hub 1-0:1.0: 1 port detected [ 1438.972545][T21028] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1442.616867][T21055] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1447.032355][T21096] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1451.380399][T21102] hub 1-0:1.0: USB hub found [ 1451.446901][T21102] hub 1-0:1.0: 1 port detected [ 1455.674234][T21141] hub 1-0:1.0: USB hub found [ 1455.743080][T21141] hub 1-0:1.0: 1 port detected [ 1458.387627][T21178] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [102] [ 1472.291378][T21324] netlink: 314 bytes leftover after parsing attributes in process `syz.2.2251'. [ 1476.148976][ T30] audit: type=1800 audit(1843104617.990:15): pid=21378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2260" name="trace_marker" dev="tracefs" ino=909 res=0 errno=0 [ 1478.827642][T21420] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2265'. [ 1480.187960][T21404] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [5] [ 1483.386189][ T5628] ------------[ cut here ]------------ [ 1483.391749][ T5628] ODEBUG: free active (active state 0) object: ffff88807beb9438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1483.405094][ T5628] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#0: syz-executor/5628 [ 1483.415809][ T5628] Modules linked in: [ 1483.419737][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1483.430572][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1483.441581][ T5628] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 1483.447797][ T5628] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 88 09 09 0c 41 56 48 8b 14 ed 40 1c 40 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 a2 0e fe 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1483.467902][ T5628] RSP: 0000:ffffc90003ac7948 EFLAGS: 00010246 [ 1483.474071][ T5628] RAX: dffffc0000000000 RBX: ffffc90003ac7a30 RCX: 0000000000000000 [ 1483.482195][ T5628] RDX: ffffffff8c401b80 RSI: ffffffff8c401720 RDI: ffffffff912dde60 [ 1483.490253][ T5628] RBP: 0000000000000003 R08: ffff88807beb9438 R09: ffffffff8bd2e220 [ 1483.498576][ T5628] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c401720 [ 1483.506788][ T5628] R13: ffffffff8bd2e260 R14: ffffffff8ac0d6a0 R15: ffffc90003ac7a48 [ 1483.514917][ T5628] FS: 0000000000000000(0000) GS:ffff888123ddf000(0000) knlGS:0000000000000000 [ 1483.523948][ T5628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1483.530594][ T5628] CR2: 0000200000b29000 CR3: 000000007ff9c000 CR4: 00000000003526f0 [ 1483.540381][ T5628] Call Trace: [ 1483.544619][ T5628] [ 1483.547620][ T5628] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1483.553190][ T5628] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1483.559070][ T5628] debug_check_no_obj_freed+0x4da/0x630 [ 1483.564845][ T5628] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1483.570955][ T5628] ? find_held_lock+0x2b/0x80 [ 1483.575758][ T5628] ? __page_table_check_zero+0x27f/0x410 [ 1483.581547][ T5628] ? __page_table_check_zero+0x284/0x410 [ 1483.587317][ T5628] __free_frozen_pages+0x409/0x1090 [ 1483.592711][ T5628] hci_release_dev+0x4ef/0x630 [ 1483.597611][ T5628] ? __pfx_hci_release_dev+0x10/0x10 [ 1483.603012][ T5628] ? device_release+0x97/0x270 [ 1483.607907][ T5628] ? rcu_is_watching+0x12/0xc0 [ 1483.613404][ T5628] ? device_release+0x97/0x270 [ 1483.618216][ T5628] bt_host_release+0x6b/0xb0 [ 1483.623084][ T5628] ? __pfx_bt_host_release+0x10/0x10 [ 1483.628450][ T5628] device_release+0xd2/0x270 [ 1483.633132][ T5628] kobject_put+0x1f7/0x640 [ 1483.638977][ T5628] put_device+0x1f/0x30 [ 1483.644089][ T5628] vhci_release+0x185/0x230 [ 1483.648749][ T5628] ? __pfx_vhci_release+0x10/0x10 [ 1483.653861][ T5628] __fput+0x3ff/0xb50 [ 1483.657889][ T5628] task_work_run+0x150/0x240 [ 1483.662557][ T5628] ? __pfx_task_work_run+0x10/0x10 [ 1483.667887][ T5628] do_exit+0x951/0x2ae0 [ 1483.672114][ T5628] ? do_raw_spin_lock+0x128/0x260 [ 1483.677240][ T5628] ? __pfx_do_exit+0x10/0x10 [ 1483.681897][ T5628] ? do_group_exit+0x1bd/0x2a0 [ 1483.686868][ T5628] ? rcu_is_watching+0x12/0xc0 [ 1483.692067][ T5628] do_group_exit+0xd5/0x2a0 [ 1483.696758][ T5628] __x64_sys_exit_group+0x3e/0x50 [ 1483.701842][ T5628] x64_sys_call+0x102c/0x1530 [ 1483.706650][ T5628] do_syscall_64+0x115/0x840 [ 1483.711325][ T5628] ? clear_bhb_loop+0x40/0x90 [ 1483.716146][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.722068][ T5628] RIP: 0033:0x7f76fd39e019 [ 1483.726581][ T5628] Code: Unable to access opcode bytes at 0x7f76fd39dfef. [ 1483.733688][ T5628] RSP: 002b:00007ffdf084b3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1483.743580][ T5628] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f76fd39e019 [ 1483.751597][ T5628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1483.760518][ T5628] RBP: 00007f76fd43606f R08: 0000000000000000 R09: 000055557c4faa00 [ 1483.768581][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.776854][ T5628] R13: 000055557c4faa00 R14: 000000000016976c R15: 00007ffdf084b5a0 [ 1483.784937][ T5628] [ 1483.788007][ T5628] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1483.795309][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1483.804785][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1483.814857][ T5628] Call Trace: [ 1483.818150][ T5628] [ 1483.821096][ T5628] dump_stack_lvl+0x100/0x190 [ 1483.825817][ T5628] vpanic+0x552/0x970 [ 1483.829812][ T5628] ? __pfx_vpanic+0x10/0x10 [ 1483.834346][ T5628] panic+0xd1/0xe0 [ 1483.838088][ T5628] ? __pfx_panic+0x10/0x10 [ 1483.842538][ T5628] ? check_panic_on_warn+0x1f/0x90 [ 1483.847685][ T5628] check_panic_on_warn.cold+0x19/0x34 [ 1483.853075][ T5628] ? debug_print_object+0x198/0x2b0 [ 1483.858301][ T5628] __warn.cold+0x191/0x318 [ 1483.862739][ T5628] __report_bug+0x30f/0x440 [ 1483.867336][ T5628] ? debug_print_object+0x198/0x2b0 [ 1483.872590][ T5628] ? __pfx___report_bug+0x10/0x10 [ 1483.877647][ T5628] ? irqentry_exit+0x24d/0xa00 [ 1483.882439][ T5628] ? debug_print_object+0x1a5/0x2b0 [ 1483.887692][ T5628] report_bug_entry+0xe1/0x290 [ 1483.892481][ T5628] ? debug_print_object+0x1a5/0x2b0 [ 1483.897708][ T5628] handle_bug+0x1cd/0x2a0 [ 1483.902088][ T5628] exc_invalid_op+0x17/0x50 [ 1483.906645][ T5628] asm_exc_invalid_op+0x1a/0x20 [ 1483.911522][ T5628] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 1483.917370][ T5628] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 88 09 09 0c 41 56 48 8b 14 ed 40 1c 40 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 a2 0e fe 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1483.937268][ T5628] RSP: 0000:ffffc90003ac7948 EFLAGS: 00010246 [ 1483.943346][ T5628] RAX: dffffc0000000000 RBX: ffffc90003ac7a30 RCX: 0000000000000000 [ 1483.951413][ T5628] RDX: ffffffff8c401b80 RSI: ffffffff8c401720 RDI: ffffffff912dde60 [ 1483.959394][ T5628] RBP: 0000000000000003 R08: ffff88807beb9438 R09: ffffffff8bd2e220 [ 1483.967375][ T5628] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c401720 [ 1483.975539][ T5628] R13: ffffffff8bd2e260 R14: ffffffff8ac0d6a0 R15: ffffc90003ac7a48 [ 1483.983536][ T5628] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1483.989061][ T5628] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1483.994546][ T5628] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1484.000382][ T5628] debug_check_no_obj_freed+0x4da/0x630 [ 1484.005996][ T5628] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1484.012213][ T5628] ? find_held_lock+0x2b/0x80 [ 1484.016954][ T5628] ? __page_table_check_zero+0x27f/0x410 [ 1484.022648][ T5628] ? __page_table_check_zero+0x284/0x410 [ 1484.028358][ T5628] __free_frozen_pages+0x409/0x1090 [ 1484.033630][ T5628] hci_release_dev+0x4ef/0x630 [ 1484.038456][ T5628] ? __pfx_hci_release_dev+0x10/0x10 [ 1484.043807][ T5628] ? device_release+0x97/0x270 [ 1484.048628][ T5628] ? rcu_is_watching+0x12/0xc0 [ 1484.053430][ T5628] ? device_release+0x97/0x270 [ 1484.058263][ T5628] bt_host_release+0x6b/0xb0 [ 1484.062897][ T5628] ? __pfx_bt_host_release+0x10/0x10 [ 1484.068227][ T5628] device_release+0xd2/0x270 [ 1484.072873][ T5628] kobject_put+0x1f7/0x640 [ 1484.077436][ T5628] put_device+0x1f/0x30 [ 1484.081653][ T5628] vhci_release+0x185/0x230 [ 1484.086244][ T5628] ? __pfx_vhci_release+0x10/0x10 [ 1484.091305][ T5628] __fput+0x3ff/0xb50 [ 1484.095336][ T5628] task_work_run+0x150/0x240 [ 1484.100083][ T5628] ? __pfx_task_work_run+0x10/0x10 [ 1484.105243][ T5628] do_exit+0x951/0x2ae0 [ 1484.109437][ T5628] ? do_raw_spin_lock+0x128/0x260 [ 1484.114601][ T5628] ? __pfx_do_exit+0x10/0x10 [ 1484.119237][ T5628] ? do_group_exit+0x1bd/0x2a0 [ 1484.124046][ T5628] ? rcu_is_watching+0x12/0xc0 [ 1484.128870][ T5628] do_group_exit+0xd5/0x2a0 [ 1484.133438][ T5628] __x64_sys_exit_group+0x3e/0x50 [ 1484.138495][ T5628] x64_sys_call+0x102c/0x1530 [ 1484.143200][ T5628] do_syscall_64+0x115/0x840 [ 1484.147820][ T5628] ? clear_bhb_loop+0x40/0x90 [ 1484.152610][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.158523][ T5628] RIP: 0033:0x7f76fd39e019 [ 1484.162958][ T5628] Code: Unable to access opcode bytes at 0x7f76fd39dfef. [ 1484.170003][ T5628] RSP: 002b:00007ffdf084b3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1484.178534][ T5628] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f76fd39e019 [ 1484.186527][ T5628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1484.194542][ T5628] RBP: 00007f76fd43606f R08: 0000000000000000 R09: 000055557c4faa00 [ 1484.202551][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1484.210551][ T5628] R13: 000055557c4faa00 R14: 000000000016976c R15: 00007ffdf084b5a0 [ 1484.218561][ T5628] [ 1484.221671][ T5628] Kernel Offset: disabled [ 1484.226025][ T5628] Rebooting in 86400 seconds..