last executing test programs: 21.563158161s ago: executing program 3 (id=2676): mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syncfs$auto(r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf25370000001000a6800a005b80063f021039a10000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r6, 0x81085520, r6) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 20.456413906s ago: executing program 3 (id=2677): mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syncfs$auto(r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf25370000001000a6800a005b80063f021039a10000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r6, 0x81085520, r6) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 20.359621409s ago: executing program 1 (id=2678): sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5mS\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket(0x22, 0x80c17, 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) set_mempolicy$auto(0x7f, &(0x7f0000000180)=0x3, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, 0x0, 0x12081, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141041, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/027/001\x00', 0x200, 0x0) ioctl$auto_USBDEVFS_IOCTL32(r3, 0xc00c5512, &(0x7f0000000080)={0x1, 0xd, 0xcc01}) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0xa9, &(0x7f0000000080)={0x80000003, 0xfff, 0x2, 0x6, 0x400085, 0xc, r4, [0x8, 0x4, 0xd], {0xd74c, 0x10000, 0x4, 0xb, 0x2, 0x2, 0x4, 0x406, 0x17c}, {0xff, 0x1, 0x10001, 0x7, 0x5, 0x800, 0x8, 0x400005, 0xa88}}) ioctl$auto_XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000300)={0x101, 0x3, 0x8, 0x8, 0x9}) bpf$auto_BPF_BTF_LOAD(0x12, 0x0, 0x80000000) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), r1) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="080027bd7000fedbdf2502000000f217237023b9b1e05e8ad6c30cb38edb787b631f3dcd949bb37722bb79540a6e0e3272dbf46633d382708facc7cff550118799ae2286f4bedcc3f9206b768a2e640fab56832a83c023610b08a534f6e844871fe1eb46b25a3e1f77568c750db66e57"], 0x14}}, 0x20000040) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x940, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0xffff, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "00ff00", "01000002", "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00f0004000400", "86f6b609a504002200"]}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r6 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x57e) fcntl$auto_F_ADD_SEALS(r6, 0x410, 0x4) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 18.302903751s ago: executing program 3 (id=2682): acct$auto(0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x3) (async) madvise$auto(0x0, 0xffffffffffff0004, 0x3) unshare$auto(0x40000080) r0 = getegid() fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r0) (async) fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, r0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000040)={0x1ff, @raw=0x80, @inferred, 0x5, 0x6, '\x00', {0x5, 0x2, 0x7d, 0xee00, r0, 0x200, 0x8, 0x7, {0x4, 0xa1e}, {0xc0, 0x3}, {0xffffffff00000000, 0xfffffff9}, 0x0, 0x1000, 0x10001, 0x5a, 0x0, 0x8, 0xd, 0x4, 0x443, 0x7ab, '\x00', 0x0, 0xfffffff7, 0x81, 0x18}}) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x20100, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22041, 0x14) sendmsg$auto_IPVS_CMD_SET_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd1) execveat$auto(r3, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) (async) execveat$auto(r3, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r3, 0xffffffff, &(0x7f0000000000)="af02e23ab8e05cdcab002675ea84c4a33413f8aa44009b6b672ffe7c39a8b4e10854a3a046fa338016bdd17b") ioctl$auto(r2, 0x404064c7, r2) (async) ioctl$auto(r2, 0x404064c7, r2) 17.332198098s ago: executing program 1 (id=2683): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x246840100, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000380)=""/147, 0x93, &(0x7f0000000500)=""/159, &(0x7f0000000240)}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x3ff, 0x2, 0x7, 0x12, 0x401, 0x8000) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x80000484, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x2538, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r3, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd3\x00', 0x313442, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 16.888716328s ago: executing program 3 (id=2687): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (fail_nth: 1) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) 14.982845139s ago: executing program 1 (id=2689): mmap$auto(0x0, 0x20009, 0x7f, 0xeb2, 0x8, 0x1008000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1e, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x240500d5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="13"], 0x1ac}}, 0x4004) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x6c, r2, 0x1, 0x70bd2d, 0x25dffbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1025}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [@nested={0x40, 0x14b, 0x0, 0x1, [@nested={0x4, 0x69, 0x0, 0x1, [@generic]}, @nested={0x10, 0x21, 0x0, 0x1, [@typed={0x4, 0x158, 0x0, 0x0, @binary}, @generic, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @typed={0xc, 0x114, 0x0, 0x0, @u64=0x5}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40081}, 0x20040000) bpf$auto(0x4, &(0x7f0000000000)=@iter_create={r1, 0x6}, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x4) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xb507}, 0x8}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x7f, 0xeb2, 0x8, 0x1008000) (async) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1e, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x240500d5) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="13"], 0x1ac}}, 0x4004) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x6c, r2, 0x1, 0x70bd2d, 0x25dffbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1025}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [@nested={0x40, 0x14b, 0x0, 0x1, [@nested={0x4, 0x69, 0x0, 0x1, [@generic]}, @nested={0x10, 0x21, 0x0, 0x1, [@typed={0x4, 0x158, 0x0, 0x0, @binary}, @generic, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@empty}]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @typed={0xc, 0x114, 0x0, 0x0, @u64=0x5}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40081}, 0x20040000) (async) bpf$auto(0x4, &(0x7f0000000000)=@iter_create={r1, 0x6}, 0x9) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) socket(0x10, 0x2, 0x4) (async) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) (async) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xb507}, 0x8}, 0x7, 0x4008) (async) 14.563821058s ago: executing program 3 (id=2691): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) settimeofday$auto(&(0x7f0000000180)={0xffffffff, 0x9}, &(0x7f00000001c0)={0x6, 0x6}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 14.318568911s ago: executing program 1 (id=2692): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) settimeofday$auto(&(0x7f0000000180)={0xffffffff, 0x9}, &(0x7f00000001c0)={0x6, 0x6}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) 13.120731755s ago: executing program 0 (id=2694): socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008aeb0, 0x0) 12.850140426s ago: executing program 0 (id=2695): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1J\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xca\x817\x9cC:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d>\x9cH\x853ku\x1f\xafm\xa9\x05\xa9\xa3\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb5`\xa49\x89\x83\xd3>\xedB\x8a\xce\x82\x1f\x02\x82\x91U\xf0m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959', 0x100000a3d9) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x2, 0x0) fcntl$auto_F_OFD_SETLKW(r0, 0x26, 0x7) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) pipe2$auto(&(0x7f0000000040)=0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r2, 0x0, 0x6) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x1a480, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) settimeofday$auto(&(0x7f0000000180)={0xffffffff, 0x9}, &(0x7f00000001c0)={0x6, 0x6}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 12.371742239s ago: executing program 1 (id=2696): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 12.028508485s ago: executing program 3 (id=2697): mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syncfs$auto(r0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240010", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf25370000001000a6800a005b80063f021039a10000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf251f000000050013000900000008000d000d0000000500080005000000050011000e000000080005000000000005001a0002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x1) ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) mmap$auto(0x87df, 0x400004, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r6, 0x81085520, r6) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 10.345465644s ago: executing program 0 (id=2698): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@nested={0x1b, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0xff}}, @generic="82a4cb"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x1, 0x29f, 0x2, 0x83, 0x4, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000140)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r0, [], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x80000000}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) 10.08180253s ago: executing program 2 (id=2699): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) 10.061212298s ago: executing program 0 (id=2700): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) r2 = mq_open$auto(&(0x7f0000000000)='\\*)A\x00', 0x10007e, 0x9, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x17, r2, 0x300000000000) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x30}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) sendmsg$auto_NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0x30, 0xa, '/sys/devices/virtual/bluetooth/hci1/rfkill6\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xeef}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0xc010) 9.143501913s ago: executing program 1 (id=2701): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x40000000008000) setfsuid$auto(0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0x20400, 0x0) r1 = socket(0x10, 0x2, 0xc) writev$auto(r1, &(0x7f0000000000)={&(0x7f0000000300), 0x6}, 0x6) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_DEV_IFINDEX={0x8, 0x1, r3}, @NETDEV_A_DEV_IFINDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000001) ioctl$auto_BLKPG(r0, 0x1269, 0x0) 6.475230886s ago: executing program 2 (id=2702): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket(0x23, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x1c, r2, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004890) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram12\x00', 0xa100, 0x0) setsockopt$auto_SO_DONTROUTE(r3, 0xff, 0x5, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0xffffffff) recvmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x7, &(0x7f0000000100)={&(0x7f0000000080)="cd2e1b909fc08d5e44bf38ed", 0x1}, 0x4d8, &(0x7f0000000180)="69f56afe5653d37acc622ed2f3beefdfeb9e67408457eb29197dd78ce1bf46630dd2", 0x4, 0x80}, 0x800}, 0xde4, 0x5, &(0x7f0000000200)={0x8, 0x400}) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x44442, 0x155) fcntl$auto_F_GETLEASE(r4, 0x401, 0xf) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000240), 0x82400, 0x0) sendfile$auto(0x3, r3, 0x0, 0x100400000000006) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r5) sendmsg$auto_TASKSTATS_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000ada61df0bb044d5348000000000000230bb5f22fa1b0c755f8742a4c1a2846abaaf40d11446956ac3f11ea74b76231d461b9", @ANYRES16=r6, @ANYBLOB="010a2bbd7000fbdbdf2501000000690004004e10534b535055415453906cad2336ca6b0067eaa130cc17538c661d08a669e61515af66d7fb7c18b3a59b41b7445b27dad1a168a412849723ba9869069aac5fd891ea4db34b390ac452f2789d77462409d682a7d5f216f05c2314cd26a6dced72a8426479000000"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) 6.412070601s ago: executing program 0 (id=2703): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) settimeofday$auto(&(0x7f0000000180)={0xffffffff, 0x9}, &(0x7f00000001c0)={0x6, 0x6}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.789440703s ago: executing program 2 (id=2704): socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008aeb0, 0x0) 4.598676886s ago: executing program 2 (id=2705): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x44020, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x2c200, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x12081, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) gettimeofday$auto(&(0x7f0000000080)={0x1000000, 0x3aa60cc6}, &(0x7f0000000200)={0x7, 0x1}) settimeofday$auto(&(0x7f0000000180)={0xffffffff, 0x9}, &(0x7f00000001c0)={0x6, 0x6}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) 3.822748535s ago: executing program 0 (id=2706): mprotect$auto(0x5, 0x9, 0x6) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) (rerun: 64) write$auto(r0, 0x0, 0x903) ioctl$auto_FIOQSIZE(r0, 0x5460, 0x7ff) (async) mprotect$auto(0x5, 0x7, 0x0) (async) mremap$auto(0x110c231000, 0x0, 0x101, 0x3, 0x0) (async) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x7ffc, 0x0) (async, rerun: 64) semtimedop$auto(0x1, &(0x7f0000000000)={0x4, 0x0, 0x6}, 0x7, &(0x7f0000000040)={0x0, 0x3}) (async, rerun: 64) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) (async) prctl$auto_PR_SCHED_CORE_GET(0x800, 0x0, 0x0, 0x4b85, 0x1) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (rerun: 64) mmap$auto(0x0, 0x40009, 0x1ff, 0x9b72, 0x7, 0x28000) (async) unshare$auto(0x40000080) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) userfaultfd$auto(0x1) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x44000) (async, rerun: 64) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) sysfs$auto(0x2, 0x5, 0x0) (async) ioctl$auto(0x3, 0x40085400, 0x5) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b52, 0x1) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) rename$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00') (async) sendmsg$auto_NFC_CMD_DISABLE_SE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000300)=ANY=[@ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x40008) (async) ioctl$auto_RTC_IRQP_SET(r1, 0x4008700c, 0x0) (async) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a0100, 0x0) 2.743292701s ago: executing program 2 (id=2707): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x2, 0xa, 0xe57a) bpf$auto(0x10, &(0x7f0000001700)=@query={@target_fd=r0, 0x2f, 0x1, 0x9, 0x81, @count=0x9, 0x0, 0x6, 0x8, 0x7, 0x1}, 0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bind$auto(r1, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) r3 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x1ff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80400100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="210028bd7000fedbdf25030000003400058008001e00", @ANYRES32=r1, @ANYBLOB="1d00300002f6fb52dbc946e1e778b206df245c26d2cacd6da6a16481a600000008003100", @ANYRES32=r3, @ANYBLOB="bf040180ceb97c65edd4e12c751ff020f7f7c1ebac5815add7fa6b47527170784c9534dd9c3a4ff1121fb3e5f36932326bc185692f5d585948194e6a57a9b9161885018eb83a8fdf64adcbcb28c7cf3eda779984a60111d0be4152681163e4f895bd59f3ce48b3ac7e848041447314d6452eb9c13299cd22f42991aad31ca0512cc92ff06b0d591cfab1500fc1bf9cdbffcaf7f84b2d5ee954224f92fbb14908460cce21d792d5109a851fb0dadf9a16336bae7c6c37fa5529d0966346c3a557b30fd67f8bee56d40300b3c92bac970058667db38ed2b5e5f0ed140054800400068004004e8008001d00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'], 0x6b4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) prctl$auto(0x29, 0x3, 0x0, 0x0, 0x4) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) r4 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r4, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x5760, 0x10000000000402) 0s ago: executing program 2 (id=2708): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xffffffffffffffff, 0xd22400000) kernel console output (not intermixed with test programs): 64 89 01 48 [ 868.055578][T17738] RSP: 002b:00007f5e2c9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.055601][T17738] RAX: ffffffffffffffda RBX: 00007f5e2be26090 RCX: 00007f5e2bb9de99 [ 868.055617][T17738] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 868.055632][T17738] RBP: 00007f5e2bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 868.055647][T17738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.055663][T17738] R13: 00007f5e2be26128 R14: 00007f5e2be26090 R15: 00007ffc7fc673b8 [ 868.055693][T17738] [ 869.105897][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.112920][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.538357][T17773] FAULT_INJECTION: forcing a failure. [ 870.538357][T17773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.605193][T17773] CPU: 0 UID: 0 PID: 17773 Comm: syz.3.1648 Not tainted syzkaller #0 PREEMPT(full) [ 870.605226][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 870.605249][T17773] Call Trace: [ 870.605257][T17773] [ 870.605266][T17773] dump_stack_lvl+0x100/0x190 [ 870.605301][T17773] should_fail_ex.cold+0x5/0xa [ 870.605329][T17773] _copy_from_iter+0x1f4/0x1690 [ 870.605373][T17773] ? _copy_from_iter+0x270/0x1690 [ 870.605413][T17773] ? __pfx__copy_from_iter+0x10/0x10 [ 870.605458][T17773] ? __pfx__copy_from_iter+0x10/0x10 [ 870.605505][T17773] copy_page_from_iter+0x238/0x300 [ 870.605550][T17773] skb_copy_datagram_from_iter+0x399/0x720 [ 870.605590][T17773] unix_stream_sendmsg+0x536/0x1310 [ 870.605631][T17773] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 870.605672][T17773] ? apparmor_socket_sendmsg+0x15b/0x270 [ 870.605704][T17773] sock_write_iter+0x53a/0x5b0 [ 870.605728][T17773] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 870.605761][T17773] ? __pfx_sock_write_iter+0x10/0x10 [ 870.605794][T17773] ? bpf_lsm_file_permission+0x9/0x10 [ 870.605817][T17773] ? security_file_permission+0x76/0x210 [ 870.605855][T17773] ? rw_verify_area+0xce/0x6d0 [ 870.605895][T17773] vfs_write+0x6ac/0x1050 [ 870.605919][T17773] ? __pfx_sock_write_iter+0x10/0x10 [ 870.605947][T17773] ? __pfx_vfs_write+0x10/0x10 [ 870.605981][T17773] ? __x64_sys_futex+0x34f/0x4d0 [ 870.606008][T17773] ? __x64_sys_futex+0x358/0x4d0 [ 870.606039][T17773] ksys_write+0x1f8/0x250 [ 870.606062][T17773] ? __pfx_ksys_write+0x10/0x10 [ 870.606093][T17773] do_syscall_64+0x115/0x840 [ 870.606124][T17773] ? clear_bhb_loop+0x40/0x90 [ 870.606158][T17773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.606184][T17773] RIP: 0033:0x7f5e2bb9de99 [ 870.606205][T17773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.606235][T17773] RSP: 002b:00007f5e2c9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 870.606259][T17773] RAX: ffffffffffffffda RBX: 00007f5e2be26090 RCX: 00007f5e2bb9de99 [ 870.606276][T17773] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 870.606291][T17773] RBP: 00007f5e2bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 870.606306][T17773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.606321][T17773] R13: 00007f5e2be26128 R14: 00007f5e2be26090 R15: 00007ffc7fc673b8 [ 870.606352][T17773] [ 881.773613][T17932] FAULT_INJECTION: forcing a failure. [ 881.773613][T17932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.820185][T17932] CPU: 0 UID: 0 PID: 17932 Comm: syz.0.1669 Not tainted syzkaller #0 PREEMPT(full) [ 881.820218][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 881.820236][T17932] Call Trace: [ 881.820244][T17932] [ 881.820253][T17932] dump_stack_lvl+0x100/0x190 [ 881.820294][T17932] should_fail_ex.cold+0x5/0xa [ 881.820322][T17932] _copy_from_iter+0x1f4/0x1690 [ 881.820367][T17932] ? _copy_from_iter+0x270/0x1690 [ 881.820407][T17932] ? __pfx__copy_from_iter+0x10/0x10 [ 881.820450][T17932] ? __pfx__copy_from_iter+0x10/0x10 [ 881.820497][T17932] copy_page_from_iter+0x238/0x300 [ 881.820541][T17932] skb_copy_datagram_from_iter+0x399/0x720 [ 881.820581][T17932] unix_stream_sendmsg+0x536/0x1310 [ 881.820623][T17932] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 881.820663][T17932] ? apparmor_socket_sendmsg+0x15b/0x270 [ 881.820695][T17932] sock_write_iter+0x53a/0x5b0 [ 881.820720][T17932] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 881.820753][T17932] ? __pfx_sock_write_iter+0x10/0x10 [ 881.820785][T17932] ? bpf_lsm_file_permission+0x9/0x10 [ 881.820809][T17932] ? security_file_permission+0x76/0x210 [ 881.820846][T17932] ? rw_verify_area+0xce/0x6d0 [ 881.820887][T17932] vfs_write+0x6ac/0x1050 [ 881.820910][T17932] ? __pfx_sock_write_iter+0x10/0x10 [ 881.820938][T17932] ? __pfx_vfs_write+0x10/0x10 [ 881.820964][T17932] ? do_raw_spin_lock+0x128/0x260 [ 881.821007][T17932] ? find_held_lock+0x2b/0x80 [ 881.821044][T17932] ? __x64_sys_futex+0x34f/0x4d0 [ 881.821071][T17932] ? __x64_sys_futex+0x358/0x4d0 [ 881.821102][T17932] ksys_write+0x1f8/0x250 [ 881.821125][T17932] ? __pfx_ksys_write+0x10/0x10 [ 881.821156][T17932] do_syscall_64+0x115/0x840 [ 881.821188][T17932] ? clear_bhb_loop+0x40/0x90 [ 881.821218][T17932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.821244][T17932] RIP: 0033:0x7fa2f199de99 [ 881.821264][T17932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.821304][T17932] RSP: 002b:00007fa2f27bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 881.821327][T17932] RAX: ffffffffffffffda RBX: 00007fa2f1c26090 RCX: 00007fa2f199de99 [ 881.821344][T17932] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 881.821360][T17932] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 881.821375][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.821390][T17932] R13: 00007fa2f1c26128 R14: 00007fa2f1c26090 R15: 00007ffdf46ed298 [ 881.821421][T17932] [ 891.611240][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 893.949993][T18089] FAULT_INJECTION: forcing a failure. [ 893.949993][T18089] name failslab, interval 1, probability 0, space 0, times 0 [ 893.981769][T18089] CPU: 0 UID: 0 PID: 18089 Comm: syz.0.1691 Not tainted syzkaller #0 PREEMPT(full) [ 893.981800][T18089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 893.981815][T18089] Call Trace: [ 893.981823][T18089] [ 893.981831][T18089] dump_stack_lvl+0x100/0x190 [ 893.981862][T18089] should_fail_ex.cold+0x5/0xa [ 893.981889][T18089] should_failslab+0xc2/0x120 [ 893.981941][T18089] kmem_cache_alloc_noprof+0x91/0x6a0 [ 893.981974][T18089] ? __pfx_acct_collect+0x10/0x10 [ 893.982004][T18089] ? taskstats_exit+0x6d3/0xca0 [ 893.982053][T18089] taskstats_exit+0x6d3/0xca0 [ 893.982086][T18089] ? __pfx_acct_update_integrals+0x10/0x10 [ 893.982122][T18089] ? __pfx_taskstats_exit+0x10/0x10 [ 893.982158][T18089] ? rcu_read_lock_any_held+0x6a/0xa0 [ 893.982199][T18089] do_exit+0x65c/0x2ae0 [ 893.982246][T18089] ? __pfx_do_exit+0x10/0x10 [ 893.982279][T18089] ? do_raw_spin_lock+0x128/0x260 [ 893.982305][T18089] ? find_held_lock+0x2b/0x80 [ 893.982334][T18089] ? get_signal+0x7e0/0x21e0 [ 893.982369][T18089] do_group_exit+0xd5/0x2a0 [ 893.982404][T18089] get_signal+0x1ec7/0x21e0 [ 893.982437][T18089] ? putname+0xb1/0x110 [ 893.982464][T18089] ? __pfx_get_signal+0x10/0x10 [ 893.982492][T18089] ? do_futex+0x190/0x440 [ 893.982520][T18089] arch_do_signal_or_restart+0x91/0x7a0 [ 893.982575][T18089] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 893.982622][T18089] ? __x64_sys_openat+0x12d/0x210 [ 893.982662][T18089] exit_to_user_mode_loop+0x139/0x6f0 [ 893.982685][T18089] ? rcu_is_watching+0x12/0xc0 [ 893.982716][T18089] do_syscall_64+0x652/0x840 [ 893.982744][T18089] ? clear_bhb_loop+0x40/0x90 [ 893.982773][T18089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.982798][T18089] RIP: 0033:0x7fa2f199de99 [ 893.982818][T18089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.982841][T18089] RSP: 002b:00007fa2f279e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 893.982863][T18089] RAX: fffffffffffffe00 RBX: 00007fa2f1c26188 RCX: 00007fa2f199de99 [ 893.982878][T18089] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa2f1c26188 [ 893.982893][T18089] RBP: 00007fa2f1c26180 R08: 0000000000000000 R09: 0000000000000000 [ 893.982907][T18089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.982921][T18089] R13: 00007fa2f1c26218 R14: 00007ffdf46ed1b0 R15: 00007ffdf46ed298 [ 893.982950][T18089] [ 905.221434][T18261] FAULT_INJECTION: forcing a failure. [ 905.221434][T18261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.264351][T18261] CPU: 0 UID: 0 PID: 18261 Comm: syz.2.1714 Not tainted syzkaller #0 PREEMPT(full) [ 905.264384][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 905.264400][T18261] Call Trace: [ 905.264407][T18261] [ 905.264416][T18261] dump_stack_lvl+0x100/0x190 [ 905.264449][T18261] should_fail_ex.cold+0x5/0xa [ 905.264477][T18261] _copy_from_user+0x2e/0xd0 [ 905.264523][T18261] copy_msghdr_from_user+0x9f/0x4c0 [ 905.264563][T18261] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 905.264596][T18261] ? rcu_is_watching+0x12/0xc0 [ 905.264626][T18261] ? ___sys_sendmsg+0x19d/0x1e0 [ 905.264650][T18261] ? kfree+0x1e5/0x6c0 [ 905.264678][T18261] ___sys_sendmsg+0x106/0x1e0 [ 905.264706][T18261] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.264733][T18261] ? futex_hash+0x311/0x400 [ 905.264780][T18261] ? __pfx___might_resched+0x10/0x10 [ 905.264827][T18261] __sys_sendmmsg+0x20c/0x440 [ 905.264866][T18261] ? __pfx___sys_sendmmsg+0x10/0x10 [ 905.264910][T18261] ? __pfx_do_futex+0x10/0x10 [ 905.264936][T18261] ? do_raw_spin_lock+0x128/0x260 [ 905.264976][T18261] ? xfd_validate_state+0x129/0x190 [ 905.265017][T18261] __x64_sys_sendmmsg+0x9c/0x100 [ 905.265053][T18261] ? lockdep_hardirqs_on+0x78/0x100 [ 905.265087][T18261] do_syscall_64+0x115/0x840 [ 905.265117][T18261] ? clear_bhb_loop+0x40/0x90 [ 905.265148][T18261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.265174][T18261] RIP: 0033:0x7f8a14b9de99 [ 905.265195][T18261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.265226][T18261] RSP: 002b:00007f8a15a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 905.265250][T18261] RAX: ffffffffffffffda RBX: 00007f8a14e26090 RCX: 00007f8a14b9de99 [ 905.265266][T18261] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000009 [ 905.265282][T18261] RBP: 00007f8a14c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 905.265297][T18261] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 905.265313][T18261] R13: 00007f8a14e26128 R14: 00007f8a14e26090 R15: 00007fff8edee628 [ 905.265343][T18261] [ 923.644600][T18508] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 930.231267][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.237827][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 943.521397][T18787] FAULT_INJECTION: forcing a failure. [ 943.521397][T18787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.573511][T18787] CPU: 0 UID: 0 PID: 18787 Comm: syz.0.1790 Not tainted syzkaller #0 PREEMPT(full) [ 943.573544][T18787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 943.573560][T18787] Call Trace: [ 943.573572][T18787] [ 943.573581][T18787] dump_stack_lvl+0x100/0x190 [ 943.573614][T18787] should_fail_ex.cold+0x5/0xa [ 943.573641][T18787] _copy_from_user+0x2e/0xd0 [ 943.573682][T18787] copy_msghdr_from_user+0x9f/0x4c0 [ 943.573713][T18787] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 943.573746][T18787] ? rcu_is_watching+0x12/0xc0 [ 943.573777][T18787] ? ___sys_sendmsg+0x19d/0x1e0 [ 943.573802][T18787] ? kfree+0x1e5/0x6c0 [ 943.573829][T18787] ___sys_sendmsg+0x106/0x1e0 [ 943.573858][T18787] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.573885][T18787] ? futex_hash+0x311/0x400 [ 943.573931][T18787] ? __pfx___might_resched+0x10/0x10 [ 943.573978][T18787] __sys_sendmmsg+0x20c/0x440 [ 943.574025][T18787] ? __pfx___sys_sendmmsg+0x10/0x10 [ 943.574072][T18787] ? __pfx_do_futex+0x10/0x10 [ 943.574097][T18787] ? __pfx_do_sys_openat2+0x10/0x10 [ 943.574143][T18787] ? __x64_sys_openat+0x12d/0x210 [ 943.574178][T18787] ? xfd_validate_state+0x129/0x190 [ 943.574214][T18787] __x64_sys_sendmmsg+0x9c/0x100 [ 943.574250][T18787] ? lockdep_hardirqs_on+0x78/0x100 [ 943.574283][T18787] do_syscall_64+0x115/0x840 [ 943.574313][T18787] ? clear_bhb_loop+0x40/0x90 [ 943.574343][T18787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.574369][T18787] RIP: 0033:0x7fa2f199de99 [ 943.574389][T18787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.574413][T18787] RSP: 002b:00007fa2f279e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 943.574438][T18787] RAX: ffffffffffffffda RBX: 00007fa2f1c26180 RCX: 00007fa2f199de99 [ 943.574454][T18787] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000009 [ 943.574469][T18787] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 943.574484][T18787] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 943.574499][T18787] R13: 00007fa2f1c26218 R14: 00007fa2f1c26180 R15: 00007ffdf46ed298 [ 943.574530][T18787] [ 950.135116][ T29] audit: type=1800 audit(4294967299.226:41): pid=18888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1806" name="version" dev="configfs" ino=154216 res=0 errno=0 [ 954.829348][T18942] FAULT_INJECTION: forcing a failure. [ 954.829348][T18942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.909659][T18942] CPU: 0 UID: 0 PID: 18942 Comm: syz.0.1814 Not tainted syzkaller #0 PREEMPT(full) [ 954.909693][T18942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 954.909708][T18942] Call Trace: [ 954.909716][T18942] [ 954.909726][T18942] dump_stack_lvl+0x100/0x190 [ 954.909761][T18942] should_fail_ex.cold+0x5/0xa [ 954.909790][T18942] _copy_from_iter+0x1f4/0x1690 [ 954.909836][T18942] ? _copy_from_iter+0x270/0x1690 [ 954.909876][T18942] ? __pfx__copy_from_iter+0x10/0x10 [ 954.909923][T18942] ? __pfx__copy_from_iter+0x10/0x10 [ 954.909969][T18942] copy_page_from_iter+0x238/0x300 [ 954.910020][T18942] skb_copy_datagram_from_iter+0x399/0x720 [ 954.910060][T18942] unix_stream_sendmsg+0x536/0x1310 [ 954.910104][T18942] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 954.910144][T18942] ? apparmor_socket_sendmsg+0x15b/0x270 [ 954.910177][T18942] sock_write_iter+0x53a/0x5b0 [ 954.910202][T18942] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 954.910235][T18942] ? __pfx_sock_write_iter+0x10/0x10 [ 954.910268][T18942] ? bpf_lsm_file_permission+0x9/0x10 [ 954.910293][T18942] ? security_file_permission+0x76/0x210 [ 954.910332][T18942] ? rw_verify_area+0xce/0x6d0 [ 954.910372][T18942] vfs_write+0x6ac/0x1050 [ 954.910396][T18942] ? __pfx_sock_write_iter+0x10/0x10 [ 954.910423][T18942] ? __pfx_vfs_write+0x10/0x10 [ 954.910458][T18942] ? __x64_sys_futex+0x34f/0x4d0 [ 954.910486][T18942] ? __x64_sys_futex+0x358/0x4d0 [ 954.910517][T18942] ksys_write+0x1f8/0x250 [ 954.910540][T18942] ? __pfx_ksys_write+0x10/0x10 [ 954.910571][T18942] do_syscall_64+0x115/0x840 [ 954.910603][T18942] ? clear_bhb_loop+0x40/0x90 [ 954.910633][T18942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.910659][T18942] RIP: 0033:0x7fa2f199de99 [ 954.910680][T18942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.910705][T18942] RSP: 002b:00007fa2f27bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 954.910729][T18942] RAX: ffffffffffffffda RBX: 00007fa2f1c26090 RCX: 00007fa2f199de99 [ 954.910745][T18942] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 954.910760][T18942] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 954.910776][T18942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 954.910791][T18942] R13: 00007fa2f1c26128 R14: 00007fa2f1c26090 R15: 00007ffdf46ed298 [ 954.910822][T18942] [ 967.569070][T19120] FAULT_INJECTION: forcing a failure. [ 967.569070][T19120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.639177][T19120] CPU: 0 UID: 0 PID: 19120 Comm: syz.0.1839 Not tainted syzkaller #0 PREEMPT(full) [ 967.639209][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 967.639223][T19120] Call Trace: [ 967.639230][T19120] [ 967.639239][T19120] dump_stack_lvl+0x100/0x190 [ 967.639271][T19120] should_fail_ex.cold+0x5/0xa [ 967.639298][T19120] _copy_from_iter+0x1f4/0x1690 [ 967.639340][T19120] ? rcu_is_watching+0x12/0xc0 [ 967.639370][T19120] ? __pfx__copy_from_iter+0x10/0x10 [ 967.639406][T19120] ? __kasan_kmalloc+0xaa/0xb0 [ 967.639438][T19120] ? __kvmalloc_node_noprof+0x36d/0x970 [ 967.639469][T19120] ? file_tty_write.isra.0+0x694/0x890 [ 967.639602][T19120] ? rcu_is_watching+0x12/0xc0 [ 967.639631][T19120] ? file_tty_write.isra.0+0x694/0x890 [ 967.639663][T19120] ? kfree+0x1e5/0x6c0 [ 967.639689][T19120] file_tty_write.isra.0+0x45b/0x890 [ 967.639729][T19120] redirected_tty_write+0xd4/0x120 [ 967.639763][T19120] vfs_write+0x6ac/0x1050 [ 967.639786][T19120] ? __pfx_redirected_tty_write+0x10/0x10 [ 967.639822][T19120] ? __pfx_vfs_write+0x10/0x10 [ 967.639842][T19120] ? find_held_lock+0x2b/0x80 [ 967.639890][T19120] ksys_write+0x12a/0x250 [ 967.639912][T19120] ? __pfx_ksys_write+0x10/0x10 [ 967.639943][T19120] do_syscall_64+0x115/0x840 [ 967.639977][T19120] ? clear_bhb_loop+0x40/0x90 [ 967.640006][T19120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.640031][T19120] RIP: 0033:0x7fa2f199de99 [ 967.640050][T19120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.640073][T19120] RSP: 002b:00007fa2f27e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 967.640095][T19120] RAX: ffffffffffffffda RBX: 00007fa2f1c25fa0 RCX: 00007fa2f199de99 [ 967.640111][T19120] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 967.640126][T19120] RBP: 00007fa2f27e0090 R08: 0000000000000000 R09: 0000000000000000 [ 967.640140][T19120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.640154][T19120] R13: 00007fa2f1c26038 R14: 00007fa2f1c25fa0 R15: 00007ffdf46ed298 [ 967.640183][T19120] [ 975.917063][T19229] sysfs_service_op_store: Client not running :-5: [ 988.265809][T19420] FAULT_INJECTION: forcing a failure. [ 988.265809][T19420] name failslab, interval 1, probability 0, space 0, times 0 [ 988.330002][T19420] CPU: 0 UID: 0 PID: 19420 Comm: syz.0.1884 Not tainted syzkaller #0 PREEMPT(full) [ 988.330034][T19420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 988.330049][T19420] Call Trace: [ 988.330057][T19420] [ 988.330066][T19420] dump_stack_lvl+0x100/0x190 [ 988.330097][T19420] should_fail_ex.cold+0x5/0xa [ 988.330124][T19420] should_failslab+0xc2/0x120 [ 988.330158][T19420] __kmalloc_cache_noprof+0x91/0x6c0 [ 988.330191][T19420] ? find_held_lock+0x2b/0x80 [ 988.330221][T19420] ? init_srcu_struct_fields+0xa69/0xfa0 [ 988.330266][T19420] init_srcu_struct_fields+0xa69/0xfa0 [ 988.330310][T19420] blk_mq_alloc_tag_set+0x3cc/0x1330 [ 988.330352][T19420] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 988.330384][T19420] ? idr_alloc+0xdd/0x130 [ 988.330420][T19420] ? __pfx_idr_alloc+0x10/0x10 [ 988.330458][T19420] loop_add+0x3b7/0xb60 [ 988.330496][T19420] ? __pfx_loop_add+0x10/0x10 [ 988.330541][T19420] ? find_held_lock+0x2b/0x80 [ 988.330569][T19420] ? __fget_files+0x215/0x3d0 [ 988.330594][T19420] loop_control_ioctl+0xae/0x620 [ 988.330624][T19420] ? __pfx_loop_control_ioctl+0x10/0x10 [ 988.330656][T19420] ? __pfx_loop_control_ioctl+0x10/0x10 [ 988.330687][T19420] __x64_sys_ioctl+0x18e/0x210 [ 988.330724][T19420] do_syscall_64+0x115/0x840 [ 988.330752][T19420] ? clear_bhb_loop+0x40/0x90 [ 988.330782][T19420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.330806][T19420] RIP: 0033:0x7fa2f199de99 [ 988.330825][T19420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.330849][T19420] RSP: 002b:00007fa2f27e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.330871][T19420] RAX: ffffffffffffffda RBX: 00007fa2f1c25fa0 RCX: 00007fa2f199de99 [ 988.330887][T19420] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 988.330901][T19420] RBP: 00007fa2f27e0090 R08: 0000000000000000 R09: 0000000000000000 [ 988.330916][T19420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.330930][T19420] R13: 00007fa2f1c26038 R14: 00007fa2f1c25fa0 R15: 00007ffdf46ed298 [ 988.330963][T19420] [ 991.314176][ T1178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.357946][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.366021][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.660627][ T1178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.826318][T13154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 991.837771][T13154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 991.846007][T13154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 991.855540][T13154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 991.863442][T13154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.074803][ T1178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.285892][ T1178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.446971][ T1178] veth1: left allmulticast mode [ 993.473323][ T1178] veth1: left promiscuous mode [ 993.498408][ T1178] bridge0: port 3(veth1) entered disabled state [ 993.528309][ T1178] bridge_slave_1: left allmulticast mode [ 993.556136][ T1178] bridge_slave_1: left promiscuous mode [ 993.580215][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.615338][ T1178] bridge_slave_0: left allmulticast mode [ 993.650958][ T1178] bridge_slave_0: left promiscuous mode [ 993.683312][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.902787][T13154] Bluetooth: hci0: command tx timeout [ 994.332062][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.379273][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.416307][ T1178] bond0 (unregistering): Released all slaves [ 995.239653][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 995.971698][T13154] Bluetooth: hci0: command tx timeout [ 997.590827][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 998.041511][T13154] Bluetooth: hci0: command tx timeout [ 998.545380][ T1178] hsr_slave_0: left promiscuous mode [ 998.578974][ T1178] hsr_slave_1: left promiscuous mode [ 998.595154][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.622794][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.647616][ T1178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.677383][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.743233][ T1178] veth1_macvtap: left promiscuous mode [ 998.765480][ T1178] veth0_macvtap: left promiscuous mode [ 998.787239][ T1178] veth1_vlan: left promiscuous mode [ 998.803028][ T1178] veth0_vlan: left promiscuous mode [ 999.283231][T19593] zswap: compressor 000 not available [ 999.556765][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 999.595592][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 999.837259][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1000.112001][T13154] Bluetooth: hci0: command tx timeout [ 1000.136902][T19464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.170214][T19464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.203506][T19464] bridge_slave_0: entered allmulticast mode [ 1000.227104][T19464] bridge_slave_0: entered promiscuous mode [ 1000.308880][T19464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.346852][T19601] FAULT_INJECTION: forcing a failure. [ 1000.346852][T19601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.363500][T19464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.395537][T19464] bridge_slave_1: entered allmulticast mode [ 1000.407461][T19601] CPU: 0 UID: 0 PID: 19601 Comm: syz.1.1900 Not tainted syzkaller #0 PREEMPT(full) [ 1000.407492][T19601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1000.407508][T19601] Call Trace: [ 1000.407515][T19601] [ 1000.407525][T19601] dump_stack_lvl+0x100/0x190 [ 1000.407558][T19601] should_fail_ex.cold+0x5/0xa [ 1000.407586][T19601] _copy_from_iter+0x1f4/0x1690 [ 1000.407631][T19601] ? _copy_from_iter+0x270/0x1690 [ 1000.407671][T19601] ? __pfx__copy_from_iter+0x10/0x10 [ 1000.407714][T19601] ? __pfx__copy_from_iter+0x10/0x10 [ 1000.407762][T19601] copy_page_from_iter+0x238/0x300 [ 1000.407805][T19601] skb_copy_datagram_from_iter+0x399/0x720 [ 1000.407846][T19601] unix_stream_sendmsg+0x536/0x1310 [ 1000.407892][T19601] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1000.407932][T19601] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1000.407966][T19601] sock_write_iter+0x53a/0x5b0 [ 1000.407990][T19601] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1000.408023][T19601] ? __pfx_sock_write_iter+0x10/0x10 [ 1000.408056][T19601] ? bpf_lsm_file_permission+0x9/0x10 [ 1000.408080][T19601] ? security_file_permission+0x76/0x210 [ 1000.408117][T19601] ? rw_verify_area+0xce/0x6d0 [ 1000.408157][T19601] vfs_write+0x6ac/0x1050 [ 1000.408180][T19601] ? __pfx_sock_write_iter+0x10/0x10 [ 1000.408207][T19601] ? __pfx_vfs_write+0x10/0x10 [ 1000.408242][T19601] ? __x64_sys_futex+0x34f/0x4d0 [ 1000.408276][T19601] ? __x64_sys_futex+0x358/0x4d0 [ 1000.408307][T19601] ksys_write+0x1f8/0x250 [ 1000.408331][T19601] ? __pfx_ksys_write+0x10/0x10 [ 1000.408363][T19601] do_syscall_64+0x115/0x840 [ 1000.408394][T19601] ? clear_bhb_loop+0x40/0x90 [ 1000.408425][T19601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.408450][T19601] RIP: 0033:0x7f3b5b79de99 [ 1000.408470][T19601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.408495][T19601] RSP: 002b:00007f3b5c6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1000.408519][T19601] RAX: ffffffffffffffda RBX: 00007f3b5ba26090 RCX: 00007f3b5b79de99 [ 1000.408536][T19601] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1000.408551][T19601] RBP: 00007f3b5b833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1000.408566][T19601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.408581][T19601] R13: 00007f3b5ba26128 R14: 00007f3b5ba26090 R15: 00007ffc6150f978 [ 1000.408612][T19601] [ 1000.675695][T19464] bridge_slave_1: entered promiscuous mode [ 1000.705838][T19464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.717801][T19464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.749682][T19464] team0: Port device team_slave_0 added [ 1000.757806][T19464] team0: Port device team_slave_1 added [ 1000.785176][T19464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.793483][T19464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.819481][T19464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.831685][T19464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.838747][T19464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.864671][T19464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.909436][T19464] hsr_slave_0: entered promiscuous mode [ 1000.915887][T19464] hsr_slave_1: entered promiscuous mode [ 1003.058200][T19643] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1906'. [ 1003.100281][T19643] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1906'. [ 1003.160267][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.169080][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.892295][T19662] FAULT_INJECTION: forcing a failure. [ 1003.892295][T19662] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1003.945496][T19662] CPU: 0 UID: 0 PID: 19662 Comm: syz.1.1908 Not tainted syzkaller #0 PREEMPT(full) [ 1003.945530][T19662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1003.945545][T19662] Call Trace: [ 1003.945553][T19662] [ 1003.945563][T19662] dump_stack_lvl+0x100/0x190 [ 1003.945594][T19662] should_fail_ex.cold+0x5/0xa [ 1003.945619][T19662] ? prepare_alloc_pages+0x16d/0x5f0 [ 1003.945659][T19662] should_fail_alloc_page+0xeb/0x140 [ 1003.945697][T19662] prepare_alloc_pages+0x1f0/0x5f0 [ 1003.945739][T19662] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1003.945780][T19662] ? stack_trace_save+0x8e/0xc0 [ 1003.945815][T19662] ? __pfx_stack_trace_save+0x10/0x10 [ 1003.945856][T19662] ? stack_depot_save_flags+0x27/0x9d0 [ 1003.945971][T19662] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1003.946002][T19662] ? kasan_save_stack+0x30/0x50 [ 1003.946033][T19662] ? __kasan_kmalloc+0xaa/0xb0 [ 1003.946063][T19662] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1003.946088][T19662] ? mon_bin_open+0x1a8/0x470 [ 1003.946157][T19662] ? chrdev_open+0x234/0x6a0 [ 1003.946181][T19662] ? do_dentry_open+0x6ab/0x14d0 [ 1003.946206][T19662] ? vfs_open+0x82/0x3f0 [ 1003.946236][T19662] ? path_openat+0x2873/0x4280 [ 1003.946260][T19662] ? do_file_open+0x20e/0x430 [ 1003.946283][T19662] ? do_sys_openat2+0x10f/0x1e0 [ 1003.946315][T19662] ? __x64_sys_openat+0x12d/0x210 [ 1003.946348][T19662] ? do_syscall_64+0x115/0x840 [ 1003.946378][T19662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.946419][T19662] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1003.946460][T19662] ? policy_nodemask+0xed/0x4f0 [ 1003.946498][T19662] alloc_pages_mpol+0x1fb/0x540 [ 1003.946537][T19662] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1003.946581][T19662] ? kasan_save_track+0x14/0x30 [ 1003.946623][T19662] alloc_pages_noprof+0x1a/0x160 [ 1003.946647][T19662] get_zeroed_page_noprof+0x18/0xb0 [ 1003.946683][T19662] mon_alloc_buff+0xce/0x1b0 [ 1003.946711][T19662] mon_bin_open+0x207/0x470 [ 1003.946738][T19662] ? __pfx_mon_bin_open+0x10/0x10 [ 1003.946763][T19662] chrdev_open+0x234/0x6a0 [ 1003.946790][T19662] ? __pfx_chrdev_open+0x10/0x10 [ 1003.946818][T19662] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1003.946860][T19662] do_dentry_open+0x6ab/0x14d0 [ 1003.946885][T19662] ? __pfx_chrdev_open+0x10/0x10 [ 1003.946917][T19662] vfs_open+0x82/0x3f0 [ 1003.946953][T19662] path_openat+0x2873/0x4280 [ 1003.946991][T19662] ? __pfx_path_openat+0x10/0x10 [ 1003.947025][T19662] do_file_open+0x20e/0x430 [ 1003.947053][T19662] ? __pfx_do_file_open+0x10/0x10 [ 1003.947100][T19662] ? alloc_fd+0x471/0x7a0 [ 1003.947127][T19662] ? do_getname+0x191/0x390 [ 1003.947161][T19662] do_sys_openat2+0x10f/0x1e0 [ 1003.947195][T19662] ? __pfx_do_sys_openat2+0x10/0x10 [ 1003.947240][T19662] __x64_sys_openat+0x12d/0x210 [ 1003.947275][T19662] ? __pfx___x64_sys_openat+0x10/0x10 [ 1003.947322][T19662] do_syscall_64+0x115/0x840 [ 1003.947351][T19662] ? clear_bhb_loop+0x40/0x90 [ 1003.947382][T19662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.947408][T19662] RIP: 0033:0x7f3b5b79de99 [ 1003.947429][T19662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.947454][T19662] RSP: 002b:00007f3b5c6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1003.947478][T19662] RAX: ffffffffffffffda RBX: 00007f3b5ba25fa0 RCX: 00007f3b5b79de99 [ 1003.947494][T19662] RDX: 0000000000000881 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1003.947510][T19662] RBP: 00007f3b5b833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1003.947526][T19662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.947541][T19662] R13: 00007f3b5ba26038 R14: 00007f3b5ba25fa0 R15: 00007ffc6150f978 [ 1003.947572][T19662] [ 1007.295900][T19464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1007.340176][T19464] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.609619][T19464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1007.645854][T19464] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.662670][T19464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1007.687942][T19464] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.767271][T19464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1007.814344][T19464] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.292383][T19716] FAULT_INJECTION: forcing a failure. [ 1008.292383][T19716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.369685][T19716] CPU: 0 UID: 0 PID: 19716 Comm: syz.0.1911 Not tainted syzkaller #0 PREEMPT(full) [ 1008.369719][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1008.369734][T19716] Call Trace: [ 1008.369742][T19716] [ 1008.369751][T19716] dump_stack_lvl+0x100/0x190 [ 1008.369783][T19716] should_fail_ex.cold+0x5/0xa [ 1008.369811][T19716] _copy_from_iter+0x1f4/0x1690 [ 1008.369855][T19716] ? _copy_from_iter+0x270/0x1690 [ 1008.369895][T19716] ? __pfx__copy_from_iter+0x10/0x10 [ 1008.369939][T19716] ? __pfx__copy_from_iter+0x10/0x10 [ 1008.369986][T19716] copy_page_from_iter+0x238/0x300 [ 1008.370030][T19716] skb_copy_datagram_from_iter+0x399/0x720 [ 1008.370070][T19716] unix_stream_sendmsg+0x536/0x1310 [ 1008.370111][T19716] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1008.370152][T19716] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1008.370191][T19716] sock_write_iter+0x53a/0x5b0 [ 1008.370215][T19716] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1008.370249][T19716] ? __pfx_sock_write_iter+0x10/0x10 [ 1008.370281][T19716] ? bpf_lsm_file_permission+0x9/0x10 [ 1008.370309][T19716] ? security_file_permission+0x76/0x210 [ 1008.370347][T19716] ? rw_verify_area+0xce/0x6d0 [ 1008.370388][T19716] vfs_write+0x6ac/0x1050 [ 1008.370411][T19716] ? __pfx_sock_write_iter+0x10/0x10 [ 1008.370438][T19716] ? __pfx_vfs_write+0x10/0x10 [ 1008.370473][T19716] ? __x64_sys_futex+0x34f/0x4d0 [ 1008.370501][T19716] ? __x64_sys_futex+0x358/0x4d0 [ 1008.370532][T19716] ksys_write+0x1f8/0x250 [ 1008.370555][T19716] ? __pfx_ksys_write+0x10/0x10 [ 1008.370586][T19716] do_syscall_64+0x115/0x840 [ 1008.370617][T19716] ? clear_bhb_loop+0x40/0x90 [ 1008.370647][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.370673][T19716] RIP: 0033:0x7fa2f199de99 [ 1008.370694][T19716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.370718][T19716] RSP: 002b:00007fa2f27bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1008.370742][T19716] RAX: ffffffffffffffda RBX: 00007fa2f1c26090 RCX: 00007fa2f199de99 [ 1008.370759][T19716] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1008.370774][T19716] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1008.370790][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.370805][T19716] R13: 00007fa2f1c26128 R14: 00007fa2f1c26090 R15: 00007ffdf46ed298 [ 1008.370835][T19716] [ 1009.337759][T19464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.999507][T19464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.136658][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.143869][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.338710][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.345897][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.278878][T19841] FAULT_INJECTION: forcing a failure. [ 1015.278878][T19841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.320386][T19841] CPU: 0 UID: 0 PID: 19841 Comm: syz.1.1921 Not tainted syzkaller #0 PREEMPT(full) [ 1015.320419][T19841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1015.320435][T19841] Call Trace: [ 1015.320443][T19841] [ 1015.320452][T19841] dump_stack_lvl+0x100/0x190 [ 1015.320484][T19841] should_fail_ex.cold+0x5/0xa [ 1015.320512][T19841] _copy_from_iter+0x1f4/0x1690 [ 1015.320557][T19841] ? _copy_from_iter+0x270/0x1690 [ 1015.320596][T19841] ? __pfx__copy_from_iter+0x10/0x10 [ 1015.320640][T19841] ? __pfx__copy_from_iter+0x10/0x10 [ 1015.320686][T19841] copy_page_from_iter+0x238/0x300 [ 1015.320731][T19841] skb_copy_datagram_from_iter+0x399/0x720 [ 1015.320771][T19841] unix_stream_sendmsg+0x536/0x1310 [ 1015.320813][T19841] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1015.320853][T19841] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1015.320885][T19841] sock_write_iter+0x53a/0x5b0 [ 1015.320910][T19841] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1015.320951][T19841] ? __pfx_sock_write_iter+0x10/0x10 [ 1015.320986][T19841] ? bpf_lsm_file_permission+0x9/0x10 [ 1015.321011][T19841] ? security_file_permission+0x76/0x210 [ 1015.321048][T19841] ? rw_verify_area+0xce/0x6d0 [ 1015.321089][T19841] vfs_write+0x6ac/0x1050 [ 1015.321112][T19841] ? __pfx_sock_write_iter+0x10/0x10 [ 1015.321140][T19841] ? __pfx_vfs_write+0x10/0x10 [ 1015.321174][T19841] ? __x64_sys_futex+0x34f/0x4d0 [ 1015.321201][T19841] ? __x64_sys_futex+0x358/0x4d0 [ 1015.321233][T19841] ksys_write+0x1f8/0x250 [ 1015.321256][T19841] ? __pfx_ksys_write+0x10/0x10 [ 1015.321287][T19841] do_syscall_64+0x115/0x840 [ 1015.321318][T19841] ? clear_bhb_loop+0x40/0x90 [ 1015.321348][T19841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.321374][T19841] RIP: 0033:0x7f3b5b79de99 [ 1015.321394][T19841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.321418][T19841] RSP: 002b:00007f3b5c6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.321442][T19841] RAX: ffffffffffffffda RBX: 00007f3b5ba26090 RCX: 00007f3b5b79de99 [ 1015.321459][T19841] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1015.321474][T19841] RBP: 00007f3b5b833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1015.321489][T19841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.321504][T19841] R13: 00007f3b5ba26128 R14: 00007f3b5ba26090 R15: 00007ffc6150f978 [ 1015.321536][T19841] [ 1015.771405][T19464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.809243][T19464] veth0_vlan: entered promiscuous mode [ 1015.889209][T19464] veth1_vlan: entered promiscuous mode [ 1016.471432][T19464] veth0_macvtap: entered promiscuous mode [ 1016.529473][T19464] veth1_macvtap: entered promiscuous mode [ 1016.688025][T19464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.736798][T19464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.810797][T10471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.846147][T10471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.892140][T10471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.938476][T10471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.763459][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.816482][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.037651][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.069015][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.842480][T19930] sd 0:0:1:0: PR command failed: 1026 [ 1021.873266][T19930] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1021.953268][T19930] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1022.859462][T19949] random: crng reseeded on system resumption [ 1024.747434][T10471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.254635][T10471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.412673][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1025.427891][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1025.436507][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1025.455240][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1025.464644][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1025.790645][T10471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.071347][T10471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.491710][T13154] Bluetooth: hci0: command tx timeout [ 1027.961823][T10471] bridge_slave_1: left allmulticast mode [ 1027.983391][T10471] bridge_slave_1: left promiscuous mode [ 1028.014953][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.061303][T10471] bridge_slave_0: left allmulticast mode [ 1028.080283][T10471] bridge_slave_0: left promiscuous mode [ 1028.107452][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.721049][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.807053][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.872705][T10471] bond0 (unregistering): Released all slaves [ 1029.499247][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1029.561579][T13154] Bluetooth: hci0: command tx timeout [ 1029.935142][T10471] hsr_slave_0: left promiscuous mode [ 1029.956870][T10471] hsr_slave_1: left promiscuous mode [ 1029.969492][T10471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.987735][T10471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.004641][T10471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.013574][T10471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.029698][T10471] veth1_macvtap: left promiscuous mode [ 1030.035395][T10471] veth0_macvtap: left promiscuous mode [ 1030.041805][T10471] veth1_vlan: left promiscuous mode [ 1030.047327][T10471] veth0_vlan: left promiscuous mode [ 1030.340871][T10471] team0 (unregistering): Port device team_slave_1 removed [ 1030.361931][T10471] team0 (unregistering): Port device team_slave_0 removed [ 1031.630269][T13154] Bluetooth: hci0: command tx timeout [ 1032.260140][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1032.644175][T19979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.695135][T19979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.741737][T19979] bridge_slave_0: entered allmulticast mode [ 1032.799260][T19979] bridge_slave_0: entered promiscuous mode [ 1033.057367][T19979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.116568][T19979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.168234][T19979] bridge_slave_1: entered allmulticast mode [ 1033.230556][T19979] bridge_slave_1: entered promiscuous mode [ 1033.526138][T19979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.612662][T19979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.699433][T13154] Bluetooth: hci0: command tx timeout [ 1034.045412][T19979] team0: Port device team_slave_0 added [ 1034.154332][T19979] team0: Port device team_slave_1 added [ 1034.411678][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1034.556580][T19979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.570052][T19979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.598898][T19979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.689864][T19979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.717258][T19979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.784097][T19979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.021112][T20128] FAULT_INJECTION: forcing a failure. [ 1035.021112][T20128] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.054555][T19979] hsr_slave_0: entered promiscuous mode [ 1035.087248][T19979] hsr_slave_1: entered promiscuous mode [ 1035.103283][T20128] CPU: 0 UID: 0 PID: 20128 Comm: syz.3.1954 Not tainted syzkaller #0 PREEMPT(full) [ 1035.103316][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1035.103332][T20128] Call Trace: [ 1035.103340][T20128] [ 1035.103349][T20128] dump_stack_lvl+0x100/0x190 [ 1035.103381][T20128] should_fail_ex.cold+0x5/0xa [ 1035.103413][T20128] should_failslab+0xc2/0x120 [ 1035.103450][T20128] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1035.103484][T20128] ? ext4_alloc_io_end_vec+0x2b/0x1c0 [ 1035.103600][T20128] ext4_alloc_io_end_vec+0x2b/0x1c0 [ 1035.103633][T20128] ext4_do_writepages+0x171c/0x3ed0 [ 1035.103706][T20128] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1035.103738][T20128] ? timerqueue_linked_add+0x260/0x430 [ 1035.103795][T20128] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1035.103848][T20128] ? ext4_writepages+0x347/0x750 [ 1035.103885][T20128] ext4_writepages+0x347/0x750 [ 1035.103924][T20128] ? __pfx_ext4_writepages+0x10/0x10 [ 1035.103971][T20128] ? do_writepages+0x4b5/0x600 [ 1035.104007][T20128] ? do_writepages+0x4b5/0x600 [ 1035.104042][T20128] ? __pfx_ext4_writepages+0x10/0x10 [ 1035.104081][T20128] do_writepages+0x278/0x600 [ 1035.104117][T20128] ? __pfx_do_writepages+0x10/0x10 [ 1035.104148][T20128] ? do_raw_spin_unlock+0x145/0x1e0 [ 1035.104178][T20128] ? _raw_spin_unlock+0x28/0x50 [ 1035.104206][T20128] filemap_writeback+0x22d/0x2e0 [ 1035.104246][T20128] ? __pfx_filemap_writeback+0x10/0x10 [ 1035.104319][T20128] ? mt_find+0x45e/0x8e0 [ 1035.104356][T20128] ? __pfx_mt_find+0x10/0x10 [ 1035.104394][T20128] file_write_and_wait_range+0xcd/0x140 [ 1035.104437][T20128] ext4_sync_file+0x358/0xb60 [ 1035.104493][T20128] ? __pfx_ext4_sync_file+0x10/0x10 [ 1035.104527][T20128] ? __up_read+0x240/0x980 [ 1035.104554][T20128] ? __pfx___up_read+0x10/0x10 [ 1035.104579][T20128] ? __do_sys_msync+0x39b/0x590 [ 1035.104609][T20128] ? __pfx_ext4_sync_file+0x10/0x10 [ 1035.104642][T20128] vfs_fsync_range+0x9b/0x190 [ 1035.104674][T20128] __do_sys_msync+0x3ca/0x590 [ 1035.104708][T20128] do_syscall_64+0x115/0x840 [ 1035.104739][T20128] ? clear_bhb_loop+0x40/0x90 [ 1035.104769][T20128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.104795][T20128] RIP: 0033:0x7f5e2bb9de99 [ 1035.104816][T20128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.104840][T20128] RSP: 002b:00007f5e2ca00028 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 1035.104864][T20128] RAX: ffffffffffffffda RBX: 00007f5e2be25fa0 RCX: 00007f5e2bb9de99 [ 1035.104881][T20128] RDX: 0000000400000004 RSI: 01800000000000fe RDI: 000000001ffff000 [ 1035.104897][T20128] RBP: 00007f5e2bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1035.104912][T20128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.104926][T20128] R13: 00007f5e2be26038 R14: 00007f5e2be25fa0 R15: 00007ffc7fc673b8 [ 1035.104957][T20128] [ 1038.794121][T19979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1038.840380][T19979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1038.985874][T19979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1039.037327][T19979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1039.172728][T19979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1039.205465][T19979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1039.443402][T19979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1039.458814][T19979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1043.011232][T19979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.850692][T19979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.295531][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.302773][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.415349][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.422570][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.248986][T19979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.276846][T20364] FAULT_INJECTION: forcing a failure. [ 1048.276846][T20364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1048.342050][T20364] CPU: 0 UID: 0 PID: 20364 Comm: syz.1.1974 Not tainted syzkaller #0 PREEMPT(full) [ 1048.342083][T20364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1048.342098][T20364] Call Trace: [ 1048.342105][T20364] [ 1048.342114][T20364] dump_stack_lvl+0x100/0x190 [ 1048.342148][T20364] should_fail_ex.cold+0x5/0xa [ 1048.342171][T20364] ? prepare_alloc_pages+0x16d/0x5f0 [ 1048.342219][T20364] should_fail_alloc_page+0xeb/0x140 [ 1048.342258][T20364] prepare_alloc_pages+0x1f0/0x5f0 [ 1048.342304][T20364] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1048.342348][T20364] ? stack_trace_save+0x8e/0xc0 [ 1048.342385][T20364] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1048.342422][T20364] ? kasan_save_stack+0x3f/0x50 [ 1048.342453][T20364] ? kasan_save_stack+0x30/0x50 [ 1048.342483][T20364] ? kasan_save_track+0x14/0x30 [ 1048.342513][T20364] ? __kasan_kmalloc+0xaa/0xb0 [ 1048.342543][T20364] ? __kmalloc_noprof+0x322/0x820 [ 1048.342572][T20364] ? copy_splice_read+0x1a3/0xbb0 [ 1048.342597][T20364] ? do_splice_read+0x2bd/0x370 [ 1048.342621][T20364] ? splice_direct_to_actor+0x2a1/0xa30 [ 1048.342646][T20364] ? do_splice_direct+0x174/0x240 [ 1048.342670][T20364] ? do_sendfile+0xadc/0xe20 [ 1048.342708][T20364] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1048.342756][T20364] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 1048.342797][T20364] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1048.342826][T20364] ? rcu_is_watching+0x12/0xc0 [ 1048.342856][T20364] ? trace_kmalloc+0xeb/0x110 [ 1048.342890][T20364] ? __kasan_kmalloc+0xaa/0xb0 [ 1048.342926][T20364] ? copy_splice_read+0x1a3/0xbb0 [ 1048.342956][T20364] copy_splice_read+0x1e1/0xbb0 [ 1048.342989][T20364] ? __pfx_copy_splice_read+0x10/0x10 [ 1048.343024][T20364] ? lockdep_init_map_type+0x5c/0x250 [ 1048.343049][T20364] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1048.343092][T20364] ? __pfx_filemap_splice_read+0x10/0x10 [ 1048.343121][T20364] do_splice_read+0x2bd/0x370 [ 1048.343150][T20364] splice_direct_to_actor+0x2a1/0xa30 [ 1048.343179][T20364] ? __pfx_direct_splice_actor+0x10/0x10 [ 1048.343216][T20364] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1048.343252][T20364] do_splice_direct+0x174/0x240 [ 1048.343280][T20364] ? __pfx_do_splice_direct+0x10/0x10 [ 1048.343308][T20364] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1048.343335][T20364] ? bpf_lsm_file_permission+0x9/0x10 [ 1048.343359][T20364] ? security_file_permission+0x76/0x210 [ 1048.343398][T20364] ? rw_verify_area+0xce/0x6d0 [ 1048.343437][T20364] do_sendfile+0xadc/0xe20 [ 1048.343482][T20364] ? __pfx_do_sendfile+0x10/0x10 [ 1048.343527][T20364] ? __x64_sys_futex+0x34f/0x4d0 [ 1048.343554][T20364] ? __x64_sys_futex+0x358/0x4d0 [ 1048.343584][T20364] __x64_sys_sendfile64+0x1d8/0x220 [ 1048.343615][T20364] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1048.343653][T20364] do_syscall_64+0x115/0x840 [ 1048.343684][T20364] ? clear_bhb_loop+0x40/0x90 [ 1048.343715][T20364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.343741][T20364] RIP: 0033:0x7f3b5b79de99 [ 1048.343761][T20364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.343786][T20364] RSP: 002b:00007f3b5c6d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1048.343809][T20364] RAX: ffffffffffffffda RBX: 00007f3b5ba25fa0 RCX: 00007f3b5b79de99 [ 1048.343826][T20364] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1048.343842][T20364] RBP: 00007f3b5b833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1048.343857][T20364] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1048.343872][T20364] R13: 00007f3b5ba26038 R14: 00007f3b5ba25fa0 R15: 00007ffc6150f978 [ 1048.343903][T20364] [ 1050.766467][T19979] veth0_vlan: entered promiscuous mode [ 1050.983683][T19979] veth1_vlan: entered promiscuous mode [ 1051.291538][T19979] veth0_macvtap: entered promiscuous mode [ 1051.343437][T19979] veth1_macvtap: entered promiscuous mode [ 1051.436181][T19979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.516976][T19979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.583677][T20411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1980'. [ 1051.674958][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.706074][T20411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.731001][T20411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.753267][T20411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.774103][T20411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.909347][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.070497][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.150028][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.493912][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.502079][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.145118][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.216597][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.413893][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.459868][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.425589][T20510] FAULT_INJECTION: forcing a failure. [ 1058.425589][T20510] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1058.476390][T20510] CPU: 0 UID: 0 PID: 20510 Comm: syz.3.1993 Not tainted syzkaller #0 PREEMPT(full) [ 1058.476430][T20510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1058.476446][T20510] Call Trace: [ 1058.476454][T20510] [ 1058.476463][T20510] dump_stack_lvl+0x100/0x190 [ 1058.476495][T20510] should_fail_ex.cold+0x5/0xa [ 1058.476523][T20510] get_futex_key+0x1d2/0x14f0 [ 1058.476551][T20510] ? __pfx_get_futex_key+0x10/0x10 [ 1058.476575][T20510] ? __pfx_futex_hash+0x10/0x10 [ 1058.476597][T20510] ? find_held_lock+0x2b/0x80 [ 1058.476628][T20510] ? locks_remove_posix+0xff/0x4d0 [ 1058.476732][T20510] futex_wake+0xf4/0x5e0 [ 1058.476763][T20510] ? futex_wait+0x11e/0x370 [ 1058.476800][T20510] ? __pfx_futex_wake+0x10/0x10 [ 1058.476838][T20510] ? find_held_lock+0x2b/0x80 [ 1058.476868][T20510] ? __fget_files+0x215/0x3d0 [ 1058.476890][T20510] ? __fget_files+0x215/0x3d0 [ 1058.476916][T20510] do_futex+0x2b2/0x440 [ 1058.476945][T20510] ? __pfx_do_futex+0x10/0x10 [ 1058.476974][T20510] ? fdget+0x18b/0x210 [ 1058.476999][T20510] __x64_sys_futex+0x34f/0x4d0 [ 1058.477031][T20510] ? __pfx___x64_sys_futex+0x10/0x10 [ 1058.477070][T20510] do_syscall_64+0x115/0x840 [ 1058.477102][T20510] ? clear_bhb_loop+0x40/0x90 [ 1058.477132][T20510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.477158][T20510] RIP: 0033:0x7f5e2bb9de99 [ 1058.477179][T20510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.477204][T20510] RSP: 002b:00007f5e2c9be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1058.477227][T20510] RAX: ffffffffffffffda RBX: 00007f5e2be26188 RCX: 00007f5e2bb9de99 [ 1058.477244][T20510] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5e2be2618c [ 1058.477260][T20510] RBP: 00007f5e2be26180 R08: 0000000000000001 R09: 0000000000000000 [ 1058.477275][T20510] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1058.477290][T20510] R13: 00007f5e2be26218 R14: 00007ffc7fc672d0 R15: 00007ffc7fc673b8 [ 1058.477321][T20510] [ 1071.746751][T20691] FAULT_INJECTION: forcing a failure. [ 1071.746751][T20691] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1071.801130][T20691] CPU: 0 UID: 0 PID: 20691 Comm: syz.2.2018 Not tainted syzkaller #0 PREEMPT(full) [ 1071.801164][T20691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1071.801180][T20691] Call Trace: [ 1071.801188][T20691] [ 1071.801197][T20691] dump_stack_lvl+0x100/0x190 [ 1071.801232][T20691] should_fail_ex.cold+0x5/0xa [ 1071.801261][T20691] get_futex_key+0x1d2/0x14f0 [ 1071.801297][T20691] ? __pfx_get_futex_key+0x10/0x10 [ 1071.801321][T20691] ? __pfx_futex_hash+0x10/0x10 [ 1071.801342][T20691] ? find_held_lock+0x2b/0x80 [ 1071.801378][T20691] ? locks_remove_posix+0xff/0x4d0 [ 1071.801407][T20691] ? __pfx_locks_remove_posix+0x10/0x10 [ 1071.801439][T20691] futex_wake+0xf4/0x5e0 [ 1071.801469][T20691] ? futex_wait+0x11e/0x370 [ 1071.801505][T20691] ? __pfx_futex_wake+0x10/0x10 [ 1071.801550][T20691] do_futex+0x2b2/0x440 [ 1071.801578][T20691] ? __pfx_do_futex+0x10/0x10 [ 1071.801606][T20691] ? find_held_lock+0x2b/0x80 [ 1071.801636][T20691] ? __x64_sys_close_range+0x3ce/0x5d0 [ 1071.801668][T20691] __x64_sys_futex+0x34f/0x4d0 [ 1071.801697][T20691] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 1071.801794][T20691] ? __pfx___x64_sys_futex+0x10/0x10 [ 1071.801834][T20691] do_syscall_64+0x115/0x840 [ 1071.801866][T20691] ? clear_bhb_loop+0x40/0x90 [ 1071.801896][T20691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.801922][T20691] RIP: 0033:0x7fc05f59de99 [ 1071.801943][T20691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.801968][T20691] RSP: 002b:00007fc0603c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1071.801991][T20691] RAX: ffffffffffffffda RBX: 00007fc05f826188 RCX: 00007fc05f59de99 [ 1071.802008][T20691] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc05f82618c [ 1071.802023][T20691] RBP: 00007fc05f826180 R08: 0000000000000001 R09: 0000000000000000 [ 1071.802038][T20691] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1071.802053][T20691] R13: 00007fc05f826218 R14: 00007fff44ce3490 R15: 00007fff44ce3578 [ 1071.802084][T20691] [ 1084.234500][T20846] FAULT_INJECTION: forcing a failure. [ 1084.234500][T20846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.284104][T20846] CPU: 0 UID: 0 PID: 20846 Comm: syz.1.2038 Not tainted syzkaller #0 PREEMPT(full) [ 1084.284137][T20846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1084.284153][T20846] Call Trace: [ 1084.284160][T20846] [ 1084.284173][T20846] dump_stack_lvl+0x100/0x190 [ 1084.284205][T20846] should_fail_ex.cold+0x5/0xa [ 1084.284233][T20846] _copy_from_iter+0x1f4/0x1690 [ 1084.284278][T20846] ? _copy_from_iter+0x270/0x1690 [ 1084.284318][T20846] ? __pfx__copy_from_iter+0x10/0x10 [ 1084.284361][T20846] ? __pfx__copy_from_iter+0x10/0x10 [ 1084.284408][T20846] copy_page_from_iter+0x238/0x300 [ 1084.284452][T20846] skb_copy_datagram_from_iter+0x399/0x720 [ 1084.284494][T20846] unix_stream_sendmsg+0x536/0x1310 [ 1084.284538][T20846] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1084.284578][T20846] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1084.284610][T20846] sock_write_iter+0x53a/0x5b0 [ 1084.284634][T20846] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1084.284667][T20846] ? __pfx_sock_write_iter+0x10/0x10 [ 1084.284700][T20846] ? bpf_lsm_file_permission+0x9/0x10 [ 1084.284724][T20846] ? security_file_permission+0x76/0x210 [ 1084.284778][T20846] ? rw_verify_area+0xce/0x6d0 [ 1084.284820][T20846] vfs_write+0x6ac/0x1050 [ 1084.284843][T20846] ? __pfx_sock_write_iter+0x10/0x10 [ 1084.284871][T20846] ? __pfx_vfs_write+0x10/0x10 [ 1084.284905][T20846] ? __x64_sys_futex+0x34f/0x4d0 [ 1084.284932][T20846] ? __x64_sys_futex+0x358/0x4d0 [ 1084.284963][T20846] ksys_write+0x1f8/0x250 [ 1084.284986][T20846] ? __pfx_ksys_write+0x10/0x10 [ 1084.285017][T20846] do_syscall_64+0x115/0x840 [ 1084.285048][T20846] ? clear_bhb_loop+0x40/0x90 [ 1084.285083][T20846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.285109][T20846] RIP: 0033:0x7f3b5b79de99 [ 1084.285129][T20846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.285154][T20846] RSP: 002b:00007f3b5c6af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1084.285178][T20846] RAX: ffffffffffffffda RBX: 00007f3b5ba26090 RCX: 00007f3b5b79de99 [ 1084.285195][T20846] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1084.285210][T20846] RBP: 00007f3b5b833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1084.285226][T20846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1084.285241][T20846] R13: 00007f3b5ba26128 R14: 00007f3b5ba26090 R15: 00007ffc6150f978 [ 1084.285271][T20846] [ 1089.735670][T20936] FAULT_INJECTION: forcing a failure. [ 1089.735670][T20936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.771892][T20936] CPU: 0 UID: 0 PID: 20936 Comm: syz.2.2049 Not tainted syzkaller #0 PREEMPT(full) [ 1089.771926][T20936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1089.771941][T20936] Call Trace: [ 1089.771949][T20936] [ 1089.771958][T20936] dump_stack_lvl+0x100/0x190 [ 1089.771991][T20936] should_fail_ex.cold+0x5/0xa [ 1089.772020][T20936] _copy_from_iter+0x1f4/0x1690 [ 1089.772066][T20936] ? __pfx__copy_from_iter+0x10/0x10 [ 1089.772120][T20936] skb_copy_datagram_from_iter+0x11f/0x720 [ 1089.772152][T20936] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 1089.772188][T20936] unix_stream_sendmsg+0x536/0x1310 [ 1089.772231][T20936] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1089.772272][T20936] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1089.772304][T20936] sock_write_iter+0x53a/0x5b0 [ 1089.772328][T20936] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1089.772361][T20936] ? __pfx_sock_write_iter+0x10/0x10 [ 1089.772393][T20936] ? bpf_lsm_file_permission+0x9/0x10 [ 1089.772417][T20936] ? security_file_permission+0x76/0x210 [ 1089.772455][T20936] ? rw_verify_area+0xce/0x6d0 [ 1089.772495][T20936] vfs_write+0x6ac/0x1050 [ 1089.772519][T20936] ? __pfx_sock_write_iter+0x10/0x10 [ 1089.772546][T20936] ? __pfx_vfs_write+0x10/0x10 [ 1089.772580][T20936] ? __x64_sys_futex+0x34f/0x4d0 [ 1089.772607][T20936] ? __x64_sys_futex+0x358/0x4d0 [ 1089.772638][T20936] ksys_write+0x1f8/0x250 [ 1089.772670][T20936] ? __pfx_ksys_write+0x10/0x10 [ 1089.772702][T20936] do_syscall_64+0x115/0x840 [ 1089.772732][T20936] ? clear_bhb_loop+0x40/0x90 [ 1089.772763][T20936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.772789][T20936] RIP: 0033:0x7fc05f59de99 [ 1089.772809][T20936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.772834][T20936] RSP: 002b:00007fc0603e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1089.772857][T20936] RAX: ffffffffffffffda RBX: 00007fc05f826090 RCX: 00007fc05f59de99 [ 1089.772877][T20936] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1089.772892][T20936] RBP: 00007fc05f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1089.772907][T20936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.772921][T20936] R13: 00007fc05f826128 R14: 00007fc05f826090 R15: 00007fff44ce3578 [ 1089.772951][T20936] [ 1095.740784][T21023] FAULT_INJECTION: forcing a failure. [ 1095.740784][T21023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.804600][T21023] CPU: 0 UID: 0 PID: 21023 Comm: syz.0.2061 Not tainted syzkaller #0 PREEMPT(full) [ 1095.804633][T21023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1095.804648][T21023] Call Trace: [ 1095.804656][T21023] [ 1095.804665][T21023] dump_stack_lvl+0x100/0x190 [ 1095.804698][T21023] should_fail_ex.cold+0x5/0xa [ 1095.804725][T21023] _copy_from_user+0x2e/0xd0 [ 1095.804767][T21023] copy_msghdr_from_user+0x9f/0x4c0 [ 1095.804797][T21023] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1095.804829][T21023] ? rcu_is_watching+0x12/0xc0 [ 1095.804859][T21023] ? ___sys_sendmsg+0x19d/0x1e0 [ 1095.804884][T21023] ? kfree+0x1e5/0x6c0 [ 1095.804912][T21023] ___sys_sendmsg+0x106/0x1e0 [ 1095.804940][T21023] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.804967][T21023] ? futex_hash+0x311/0x400 [ 1095.805012][T21023] ? __pfx___might_resched+0x10/0x10 [ 1095.805065][T21023] __sys_sendmmsg+0x20c/0x440 [ 1095.805105][T21023] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1095.805149][T21023] ? __pfx_do_futex+0x10/0x10 [ 1095.805190][T21023] ? xfd_validate_state+0x129/0x190 [ 1095.805227][T21023] __x64_sys_sendmmsg+0x9c/0x100 [ 1095.805262][T21023] ? lockdep_hardirqs_on+0x78/0x100 [ 1095.805293][T21023] do_syscall_64+0x115/0x840 [ 1095.805323][T21023] ? clear_bhb_loop+0x40/0x90 [ 1095.805353][T21023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.805379][T21023] RIP: 0033:0x7fa2f199de99 [ 1095.805399][T21023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.805424][T21023] RSP: 002b:00007fa2f279e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1095.805448][T21023] RAX: ffffffffffffffda RBX: 00007fa2f1c26180 RCX: 00007fa2f199de99 [ 1095.805465][T21023] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000008 [ 1095.805480][T21023] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1095.805496][T21023] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 1095.805511][T21023] R13: 00007fa2f1c26218 R14: 00007fa2f1c26180 R15: 00007ffdf46ed298 [ 1095.805543][T21023] [ 1103.660203][T21123] ======================================================= [ 1103.660203][T21123] WARNING: The mand mount option has been deprecated and [ 1103.660203][T21123] and is ignored by this kernel. Remove the mand [ 1103.660203][T21123] option from the mount to silence this warning. [ 1103.660203][T21123] ======================================================= [ 1113.609745][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1113.617617][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1113.835535][T21268] FAULT_INJECTION: forcing a failure. [ 1113.835535][T21268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1113.888970][T21268] CPU: 0 UID: 0 PID: 21268 Comm: syz.2.2093 Not tainted syzkaller #0 PREEMPT(full) [ 1113.889003][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1113.889020][T21268] Call Trace: [ 1113.889030][T21268] [ 1113.889040][T21268] dump_stack_lvl+0x100/0x190 [ 1113.889072][T21268] should_fail_ex.cold+0x5/0xa [ 1113.889100][T21268] _copy_from_iter+0x1f4/0x1690 [ 1113.889144][T21268] ? _copy_from_iter+0x270/0x1690 [ 1113.889184][T21268] ? __pfx__copy_from_iter+0x10/0x10 [ 1113.889227][T21268] ? __pfx__copy_from_iter+0x10/0x10 [ 1113.889274][T21268] copy_page_from_iter+0x238/0x300 [ 1113.889318][T21268] skb_copy_datagram_from_iter+0x399/0x720 [ 1113.889358][T21268] unix_stream_sendmsg+0x536/0x1310 [ 1113.889400][T21268] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1113.889440][T21268] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1113.889472][T21268] sock_write_iter+0x53a/0x5b0 [ 1113.889502][T21268] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1113.889536][T21268] ? __pfx_sock_write_iter+0x10/0x10 [ 1113.889569][T21268] ? bpf_lsm_file_permission+0x9/0x10 [ 1113.889593][T21268] ? security_file_permission+0x76/0x210 [ 1113.889632][T21268] ? rw_verify_area+0xce/0x6d0 [ 1113.889672][T21268] vfs_write+0x6ac/0x1050 [ 1113.889695][T21268] ? __pfx_sock_write_iter+0x10/0x10 [ 1113.889723][T21268] ? __pfx_vfs_write+0x10/0x10 [ 1113.889749][T21268] ? do_raw_spin_lock+0x128/0x260 [ 1113.889776][T21268] ? find_held_lock+0x2b/0x80 [ 1113.889812][T21268] ? __x64_sys_futex+0x34f/0x4d0 [ 1113.889839][T21268] ? __x64_sys_futex+0x358/0x4d0 [ 1113.889870][T21268] ksys_write+0x1f8/0x250 [ 1113.889893][T21268] ? __pfx_ksys_write+0x10/0x10 [ 1113.889925][T21268] do_syscall_64+0x115/0x840 [ 1113.889955][T21268] ? clear_bhb_loop+0x40/0x90 [ 1113.889986][T21268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.890011][T21268] RIP: 0033:0x7fc05f59de99 [ 1113.890032][T21268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.890057][T21268] RSP: 002b:00007fc060403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1113.890080][T21268] RAX: ffffffffffffffda RBX: 00007fc05f825fa0 RCX: 00007fc05f59de99 [ 1113.890096][T21268] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1113.890111][T21268] RBP: 00007fc05f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1113.890126][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1113.890141][T21268] R13: 00007fc05f826038 R14: 00007fc05f825fa0 R15: 00007fff44ce3578 [ 1113.890172][T21268] [ 1144.739516][T21682] FAULT_INJECTION: forcing a failure. [ 1144.739516][T21682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1144.810153][T21682] CPU: 0 UID: 0 PID: 21682 Comm: syz.0.2147 Not tainted syzkaller #0 PREEMPT(full) [ 1144.810187][T21682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1144.810203][T21682] Call Trace: [ 1144.810211][T21682] [ 1144.810221][T21682] dump_stack_lvl+0x100/0x190 [ 1144.810254][T21682] should_fail_ex.cold+0x5/0xa [ 1144.810283][T21682] _copy_from_iter+0x1f4/0x1690 [ 1144.810328][T21682] ? _copy_from_iter+0x270/0x1690 [ 1144.810368][T21682] ? __pfx__copy_from_iter+0x10/0x10 [ 1144.810411][T21682] ? __pfx__copy_from_iter+0x10/0x10 [ 1144.810458][T21682] copy_page_from_iter+0x238/0x300 [ 1144.810503][T21682] skb_copy_datagram_from_iter+0x399/0x720 [ 1144.810543][T21682] unix_stream_sendmsg+0x536/0x1310 [ 1144.810585][T21682] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1144.810625][T21682] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1144.810658][T21682] sock_write_iter+0x53a/0x5b0 [ 1144.810682][T21682] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1144.810716][T21682] ? __pfx_sock_write_iter+0x10/0x10 [ 1144.810748][T21682] ? bpf_lsm_file_permission+0x9/0x10 [ 1144.810772][T21682] ? security_file_permission+0x76/0x210 [ 1144.810810][T21682] ? rw_verify_area+0xce/0x6d0 [ 1144.810859][T21682] vfs_write+0x6ac/0x1050 [ 1144.810884][T21682] ? __pfx_sock_write_iter+0x10/0x10 [ 1144.810912][T21682] ? __pfx_vfs_write+0x10/0x10 [ 1144.810947][T21682] ? __x64_sys_futex+0x34f/0x4d0 [ 1144.810974][T21682] ? __x64_sys_futex+0x358/0x4d0 [ 1144.811006][T21682] ksys_write+0x1f8/0x250 [ 1144.811029][T21682] ? __pfx_ksys_write+0x10/0x10 [ 1144.811061][T21682] do_syscall_64+0x115/0x840 [ 1144.811091][T21682] ? clear_bhb_loop+0x40/0x90 [ 1144.811121][T21682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.811149][T21682] RIP: 0033:0x7fa2f199de99 [ 1144.811169][T21682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.811194][T21682] RSP: 002b:00007fa2f27bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1144.811217][T21682] RAX: ffffffffffffffda RBX: 00007fa2f1c26090 RCX: 00007fa2f199de99 [ 1144.811234][T21682] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1144.811249][T21682] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1144.811264][T21682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.811279][T21682] R13: 00007fa2f1c26128 R14: 00007fa2f1c26090 R15: 00007ffdf46ed298 [ 1144.811309][T21682] [ 1151.335539][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1155.782388][T21844] FAULT_INJECTION: forcing a failure. [ 1155.782388][T21844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.841532][T21844] CPU: 0 UID: 0 PID: 21844 Comm: syz.0.2168 Not tainted syzkaller #0 PREEMPT(full) [ 1155.841566][T21844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1155.841582][T21844] Call Trace: [ 1155.841590][T21844] [ 1155.841599][T21844] dump_stack_lvl+0x100/0x190 [ 1155.841633][T21844] should_fail_ex.cold+0x5/0xa [ 1155.841661][T21844] _copy_from_iter+0x1f4/0x1690 [ 1155.841706][T21844] ? _copy_from_iter+0x270/0x1690 [ 1155.841747][T21844] ? __pfx__copy_from_iter+0x10/0x10 [ 1155.841791][T21844] ? __pfx__copy_from_iter+0x10/0x10 [ 1155.841838][T21844] copy_page_from_iter+0x238/0x300 [ 1155.841882][T21844] skb_copy_datagram_from_iter+0x399/0x720 [ 1155.841930][T21844] unix_stream_sendmsg+0x536/0x1310 [ 1155.841976][T21844] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1155.842016][T21844] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1155.842049][T21844] sock_write_iter+0x53a/0x5b0 [ 1155.842074][T21844] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1155.842108][T21844] ? __pfx_sock_write_iter+0x10/0x10 [ 1155.842141][T21844] ? bpf_lsm_file_permission+0x9/0x10 [ 1155.842165][T21844] ? security_file_permission+0x76/0x210 [ 1155.842203][T21844] ? rw_verify_area+0xce/0x6d0 [ 1155.842243][T21844] vfs_write+0x6ac/0x1050 [ 1155.842267][T21844] ? __pfx_sock_write_iter+0x10/0x10 [ 1155.842295][T21844] ? __pfx_vfs_write+0x10/0x10 [ 1155.842321][T21844] ? do_raw_spin_lock+0x128/0x260 [ 1155.842348][T21844] ? find_held_lock+0x2b/0x80 [ 1155.842385][T21844] ? __x64_sys_futex+0x34f/0x4d0 [ 1155.842412][T21844] ? __x64_sys_futex+0x358/0x4d0 [ 1155.842443][T21844] ksys_write+0x1f8/0x250 [ 1155.842466][T21844] ? __pfx_ksys_write+0x10/0x10 [ 1155.842498][T21844] do_syscall_64+0x115/0x840 [ 1155.842529][T21844] ? clear_bhb_loop+0x40/0x90 [ 1155.842559][T21844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.842586][T21844] RIP: 0033:0x7fa2f199de99 [ 1155.842606][T21844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.842630][T21844] RSP: 002b:00007fa2f27bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1155.842653][T21844] RAX: ffffffffffffffda RBX: 00007fa2f1c26090 RCX: 00007fa2f199de99 [ 1155.842670][T21844] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1155.842685][T21844] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1155.842700][T21844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.842715][T21844] R13: 00007fa2f1c26128 R14: 00007fa2f1c26090 R15: 00007ffdf46ed298 [ 1155.842747][T21844] [ 1157.031864][T21853] FAULT_INJECTION: forcing a failure. [ 1157.031864][T21853] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.188608][T21853] CPU: 0 UID: 0 PID: 21853 Comm: syz.0.2169 Not tainted syzkaller #0 PREEMPT(full) [ 1157.188641][T21853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1157.188656][T21853] Call Trace: [ 1157.188664][T21853] [ 1157.188672][T21853] dump_stack_lvl+0x100/0x190 [ 1157.188705][T21853] should_fail_ex.cold+0x5/0xa [ 1157.188732][T21853] should_failslab+0xc2/0x120 [ 1157.188770][T21853] __kmalloc_noprof+0xfc/0x820 [ 1157.188809][T21853] ? snd_pcm_plugin_build+0x91/0x680 [ 1157.188914][T21853] snd_pcm_plugin_build+0x91/0x680 [ 1157.188947][T21853] snd_pcm_plugin_build_io+0x207/0x5f0 [ 1157.188979][T21853] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 1157.189012][T21853] ? lockdep_hardirqs_on+0x78/0x100 [ 1157.189055][T21853] snd_pcm_oss_change_params_locked+0x2eb3/0x39f0 [ 1157.189097][T21853] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1157.189129][T21853] ? __pfx___mutex_lock+0x10/0x10 [ 1157.189177][T21853] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1157.189207][T21853] snd_pcm_oss_sync+0x265/0x840 [ 1157.189238][T21853] snd_pcm_oss_release+0x238/0x300 [ 1157.189265][T21853] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1157.189292][T21853] __fput+0x3ff/0xb50 [ 1157.189329][T21853] task_work_run+0x150/0x240 [ 1157.189368][T21853] ? __pfx_task_work_run+0x10/0x10 [ 1157.189414][T21853] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1157.189439][T21853] ? rcu_is_watching+0x12/0xc0 [ 1157.189472][T21853] do_syscall_64+0x652/0x840 [ 1157.189502][T21853] ? clear_bhb_loop+0x40/0x90 [ 1157.189532][T21853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.189558][T21853] RIP: 0033:0x7fa2f199de99 [ 1157.189579][T21853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.189604][T21853] RSP: 002b:00007fa2f279e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1157.189628][T21853] RAX: 0000000000000000 RBX: 00007fa2f1c26180 RCX: 00007fa2f199de99 [ 1157.189644][T21853] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1157.189658][T21853] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1157.189673][T21853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.189688][T21853] R13: 00007fa2f1c26218 R14: 00007fa2f1c26180 R15: 00007ffdf46ed298 [ 1157.189719][T21853] [ 1169.246934][T22033] FAULT_INJECTION: forcing a failure. [ 1169.246934][T22033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.310409][T22033] CPU: 0 UID: 0 PID: 22033 Comm: syz.0.2191 Not tainted syzkaller #0 PREEMPT(full) [ 1169.310442][T22033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1169.310458][T22033] Call Trace: [ 1169.310465][T22033] [ 1169.310474][T22033] dump_stack_lvl+0x100/0x190 [ 1169.310507][T22033] should_fail_ex.cold+0x5/0xa [ 1169.310535][T22033] _copy_from_iter+0x1f4/0x1690 [ 1169.310580][T22033] ? _copy_from_iter+0x270/0x1690 [ 1169.310619][T22033] ? __pfx__copy_from_iter+0x10/0x10 [ 1169.310663][T22033] ? __pfx__copy_from_iter+0x10/0x10 [ 1169.310710][T22033] copy_page_from_iter+0x238/0x300 [ 1169.310754][T22033] skb_copy_datagram_from_iter+0x399/0x720 [ 1169.310795][T22033] unix_stream_sendmsg+0x536/0x1310 [ 1169.310846][T22033] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1169.310887][T22033] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1169.310920][T22033] sock_write_iter+0x53a/0x5b0 [ 1169.310944][T22033] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1169.310978][T22033] ? __pfx_sock_write_iter+0x10/0x10 [ 1169.311010][T22033] ? bpf_lsm_file_permission+0x9/0x10 [ 1169.311035][T22033] ? security_file_permission+0x76/0x210 [ 1169.311073][T22033] ? rw_verify_area+0xce/0x6d0 [ 1169.311113][T22033] vfs_write+0x6ac/0x1050 [ 1169.311137][T22033] ? __pfx_sock_write_iter+0x10/0x10 [ 1169.311165][T22033] ? __pfx_vfs_write+0x10/0x10 [ 1169.311200][T22033] ? __x64_sys_futex+0x34f/0x4d0 [ 1169.311227][T22033] ? __x64_sys_futex+0x358/0x4d0 [ 1169.311260][T22033] ksys_write+0x1f8/0x250 [ 1169.311286][T22033] ? __pfx_ksys_write+0x10/0x10 [ 1169.311321][T22033] do_syscall_64+0x115/0x840 [ 1169.311357][T22033] ? clear_bhb_loop+0x40/0x90 [ 1169.311395][T22033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.311422][T22033] RIP: 0033:0x7fa2f199de99 [ 1169.311445][T22033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.311470][T22033] RSP: 002b:00007fa2f27bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1169.311493][T22033] RAX: ffffffffffffffda RBX: 00007fa2f1c26090 RCX: 00007fa2f199de99 [ 1169.311511][T22033] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1169.311526][T22033] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1169.311543][T22033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1169.311559][T22033] R13: 00007fa2f1c26128 R14: 00007fa2f1c26090 R15: 00007ffdf46ed298 [ 1169.311591][T22033] [ 1174.736257][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1174.742739][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1192.545463][T22328] sysfs_service_op_store: Client not running :-5: [ 1197.296247][T22379] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2234'. [ 1197.338125][T22379] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2234'. [ 1197.392493][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1197.403892][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1209.483315][ T29] audit: type=1800 audit(4294967300.558:42): pid=22537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2253" name="lu_gp_id" dev="configfs" ino=187901 res=0 errno=0 [ 1218.360662][T22657] random: crng reseeded on system resumption [ 1235.854952][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.863991][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.682943][ T29] audit: type=1800 audit(4294967308.399:43): pid=23358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2361" name="lu_gp_id" dev="configfs" ino=195383 res=0 errno=0 [ 1275.884689][ T29] audit: type=1800 audit(4294967297.894:44): pid=23455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2373" name="lu_gp_id" dev="configfs" ino=196090 res=0 errno=0 [ 1292.577338][T23736] FAULT_INJECTION: forcing a failure. [ 1292.577338][T23736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.670379][T23736] CPU: 0 UID: 0 PID: 23736 Comm: syz.0.2405 Not tainted syzkaller #0 PREEMPT(full) [ 1292.670414][T23736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1292.670430][T23736] Call Trace: [ 1292.670439][T23736] [ 1292.670448][T23736] dump_stack_lvl+0x100/0x190 [ 1292.670485][T23736] should_fail_ex.cold+0x5/0xa [ 1292.670515][T23736] _copy_from_user+0x2e/0xd0 [ 1292.670559][T23736] copy_msghdr_from_user+0x9f/0x4c0 [ 1292.670591][T23736] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1292.670624][T23736] ? rcu_is_watching+0x12/0xc0 [ 1292.670656][T23736] ? ___sys_sendmsg+0x19d/0x1e0 [ 1292.670680][T23736] ? kfree+0x1e5/0x6c0 [ 1292.670709][T23736] ___sys_sendmsg+0x106/0x1e0 [ 1292.670737][T23736] ? __pfx____sys_sendmsg+0x10/0x10 [ 1292.670765][T23736] ? futex_hash+0x311/0x400 [ 1292.670811][T23736] ? __pfx___might_resched+0x10/0x10 [ 1292.670864][T23736] __sys_sendmmsg+0x20c/0x440 [ 1292.670904][T23736] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1292.670951][T23736] ? __pfx_do_futex+0x10/0x10 [ 1292.670992][T23736] ? xfd_validate_state+0x129/0x190 [ 1292.671030][T23736] __x64_sys_sendmmsg+0x9c/0x100 [ 1292.671066][T23736] ? lockdep_hardirqs_on+0x78/0x100 [ 1292.671099][T23736] do_syscall_64+0x115/0x840 [ 1292.671130][T23736] ? clear_bhb_loop+0x40/0x90 [ 1292.671161][T23736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.671188][T23736] RIP: 0033:0x7fa2f199de99 [ 1292.671209][T23736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.671234][T23736] RSP: 002b:00007fa2f279e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1292.671259][T23736] RAX: ffffffffffffffda RBX: 00007fa2f1c26180 RCX: 00007fa2f199de99 [ 1292.671276][T23736] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000009 [ 1292.671290][T23736] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1292.671305][T23736] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 1292.671320][T23736] R13: 00007fa2f1c26218 R14: 00007fa2f1c26180 R15: 00007ffdf46ed298 [ 1292.671351][T23736] [ 1296.974789][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1296.986046][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1331.335579][T24235] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.656236][T24235] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.758967][T24235] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.037605][T24235] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.307640][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.800686][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.070341][T24286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1335.088889][T24286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1335.098168][T24286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1335.108820][T24286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1335.116611][T24286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1335.254277][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.496582][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.071857][ T29] audit: type=1800 audit(4294967349.753:45): pid=24311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2489" name="members" dev="configfs" ino=202444 res=0 errno=0 [ 1337.151288][ T13] bridge_slave_1: left allmulticast mode [ 1337.164434][T24286] Bluetooth: hci2: command tx timeout [ 1337.185498][ T13] bridge_slave_1: left promiscuous mode [ 1337.202605][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.221972][ T13] bridge_slave_0: left allmulticast mode [ 1337.234151][ T13] bridge_slave_0: left promiscuous mode [ 1337.246507][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.589254][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.612088][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.635953][ T13] bond0 (unregistering): Released all slaves [ 1338.208884][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1338.577160][T24350] blktrace: Concurrent blktraces are not allowed on ram10 [ 1338.730980][T24351] blktrace: Concurrent blktraces are not allowed on ram10 [ 1339.231802][T24286] Bluetooth: hci2: command tx timeout [ 1340.563455][T24369] FAULT_INJECTION: forcing a failure. [ 1340.563455][T24369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.659022][T24369] CPU: 0 UID: 0 PID: 24369 Comm: syz.3.2497 Not tainted syzkaller #0 PREEMPT(full) [ 1340.659055][T24369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1340.659070][T24369] Call Trace: [ 1340.659078][T24369] [ 1340.659087][T24369] dump_stack_lvl+0x100/0x190 [ 1340.659123][T24369] should_fail_ex.cold+0x5/0xa [ 1340.659154][T24369] _copy_from_iter+0x1f4/0x1690 [ 1340.659201][T24369] ? _copy_from_iter+0x270/0x1690 [ 1340.659240][T24369] ? __pfx__copy_from_iter+0x10/0x10 [ 1340.659284][T24369] ? __pfx__copy_from_iter+0x10/0x10 [ 1340.659330][T24369] copy_page_from_iter+0x238/0x300 [ 1340.659375][T24369] skb_copy_datagram_from_iter+0x399/0x720 [ 1340.659416][T24369] unix_stream_sendmsg+0x536/0x1310 [ 1340.659459][T24369] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1340.659500][T24369] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1340.659532][T24369] sock_write_iter+0x53a/0x5b0 [ 1340.659556][T24369] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1340.659589][T24369] ? __pfx_sock_write_iter+0x10/0x10 [ 1340.659621][T24369] ? bpf_lsm_file_permission+0x9/0x10 [ 1340.659646][T24369] ? security_file_permission+0x76/0x210 [ 1340.659685][T24369] ? rw_verify_area+0xce/0x6d0 [ 1340.659726][T24369] vfs_write+0x6ac/0x1050 [ 1340.659750][T24369] ? __pfx_sock_write_iter+0x10/0x10 [ 1340.659777][T24369] ? __pfx_vfs_write+0x10/0x10 [ 1340.659807][T24369] ? do_raw_spin_lock+0x128/0x260 [ 1340.659835][T24369] ? find_held_lock+0x2b/0x80 [ 1340.659879][T24369] ? __x64_sys_futex+0x34f/0x4d0 [ 1340.659906][T24369] ? __x64_sys_futex+0x358/0x4d0 [ 1340.659937][T24369] ksys_write+0x1f8/0x250 [ 1340.659961][T24369] ? __pfx_ksys_write+0x10/0x10 [ 1340.659993][T24369] do_syscall_64+0x115/0x840 [ 1340.660025][T24369] ? clear_bhb_loop+0x40/0x90 [ 1340.660055][T24369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.660081][T24369] RIP: 0033:0x7f5e2bb9de99 [ 1340.660103][T24369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.660128][T24369] RSP: 002b:00007f5e2c9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1340.660152][T24369] RAX: ffffffffffffffda RBX: 00007f5e2be26090 RCX: 00007f5e2bb9de99 [ 1340.660169][T24369] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1340.660184][T24369] RBP: 00007f5e2bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1340.660200][T24369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1340.660215][T24369] R13: 00007f5e2be26128 R14: 00007f5e2be26090 R15: 00007ffc7fc673b8 [ 1340.660245][T24369] [ 1341.345435][T24286] Bluetooth: hci2: command tx timeout [ 1342.070500][ T13] hsr_slave_0: left promiscuous mode [ 1342.110163][ T13] hsr_slave_1: left promiscuous mode [ 1342.133526][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1342.167851][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1342.194586][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1342.212246][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.224560][ T13] veth1_macvtap: left promiscuous mode [ 1342.232985][ T13] veth0_macvtap: left promiscuous mode [ 1342.241858][ T13] veth1_vlan: left promiscuous mode [ 1342.247715][ T13] veth0_vlan: left promiscuous mode [ 1342.615783][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1342.641875][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1342.788269][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1343.373696][T24286] Bluetooth: hci2: command tx timeout [ 1343.752638][T24285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.776737][T24285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.805824][T24285] bridge_slave_0: entered allmulticast mode [ 1343.830253][T24285] bridge_slave_0: entered promiscuous mode [ 1343.912433][T24285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.946319][T24285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.976518][T24285] bridge_slave_1: entered allmulticast mode [ 1344.013905][T24285] bridge_slave_1: entered promiscuous mode [ 1344.263202][T24285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.362336][T24285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.702393][T24285] team0: Port device team_slave_0 added [ 1344.779487][T24285] team0: Port device team_slave_1 added [ 1345.196013][T24285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1345.251152][T24285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.414379][T24285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.536551][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1345.551146][T24285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.577415][T24285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.673097][T24285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.085354][T24285] hsr_slave_0: entered promiscuous mode [ 1346.110536][T24285] hsr_slave_1: entered promiscuous mode [ 1346.126683][T24285] debugfs: 'hsr0' already exists in 'hsr' [ 1346.144468][T24285] Cannot create hsr debugfs directory [ 1346.705543][T24468] blktrace: Concurrent blktraces are not allowed on ram10 [ 1346.759227][T24470] blktrace: Concurrent blktraces are not allowed on ram10 [ 1350.551160][T24285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1350.601755][T24285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.643228][T24285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1350.704583][T24285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1350.827910][T24285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1350.878790][T24285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1350.907672][T24285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1350.953190][T24285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1351.074198][T24563] FAULT_INJECTION: forcing a failure. [ 1351.074198][T24563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.253612][T24563] CPU: 0 UID: 0 PID: 24563 Comm: syz.3.2512 Not tainted syzkaller #0 PREEMPT(full) [ 1351.253648][T24563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1351.253663][T24563] Call Trace: [ 1351.253670][T24563] [ 1351.253679][T24563] dump_stack_lvl+0x100/0x190 [ 1351.253711][T24563] should_fail_ex.cold+0x5/0xa [ 1351.253738][T24563] _copy_to_user+0x32/0xd0 [ 1351.253776][T24563] keyctl_capabilities+0x5a/0x160 [ 1351.253880][T24563] __do_sys_keyctl+0x427/0x5a0 [ 1351.253908][T24563] do_syscall_64+0x115/0x840 [ 1351.253937][T24563] ? clear_bhb_loop+0x40/0x90 [ 1351.253966][T24563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.253990][T24563] RIP: 0033:0x7f5e2bb9de99 [ 1351.254010][T24563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.254032][T24563] RSP: 002b:00007f5e29df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1351.254055][T24563] RAX: ffffffffffffffda RBX: 00007f5e2be26360 RCX: 00007f5e2bb9de99 [ 1351.254071][T24563] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1351.254084][T24563] RBP: 00007f5e29df6090 R08: 00000000000003ff R09: 0000000000000000 [ 1351.254099][T24563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.254113][T24563] R13: 00007f5e2be263f8 R14: 00007f5e2be26360 R15: 00007ffc7fc673b8 [ 1351.254142][T24563] [ 1353.073359][T24285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.282963][T24285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.745688][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.752892][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.190127][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.197355][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1357.869490][T24285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1358.098579][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1358.107896][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.837403][T24285] veth0_vlan: entered promiscuous mode [ 1359.933152][T24285] veth1_vlan: entered promiscuous mode [ 1361.681080][T24285] veth0_macvtap: entered promiscuous mode [ 1361.897605][T24285] veth1_macvtap: entered promiscuous mode [ 1362.191143][T24285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.246483][T24285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.313958][T21801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.349552][T21801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.382748][T21801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.417518][T21801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.883523][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.933281][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.090882][T24757] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1363.330310][ T29] audit: type=1800 audit(4294967377.155:46): pid=24757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2533" name="trace_pipe" dev="tracefs" ino=1970 res=0 errno=0 [ 1364.119507][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.140684][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1368.555311][T24843] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1375.480682][T24955] random: crng reseeded on system resumption [ 1377.801811][T24989] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1377.849143][T24989] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1378.149519][T24995] FAULT_INJECTION: forcing a failure. [ 1378.149519][T24995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.196630][T24995] CPU: 0 UID: 0 PID: 24995 Comm: syz.1.2565 Not tainted syzkaller #0 PREEMPT(full) [ 1378.196662][T24995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1378.196678][T24995] Call Trace: [ 1378.196686][T24995] [ 1378.196694][T24995] dump_stack_lvl+0x100/0x190 [ 1378.196725][T24995] should_fail_ex.cold+0x5/0xa [ 1378.196753][T24995] _copy_from_user+0x2e/0xd0 [ 1378.196792][T24995] copy_msghdr_from_user+0x9f/0x4c0 [ 1378.196821][T24995] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1378.196853][T24995] ? rcu_is_watching+0x12/0xc0 [ 1378.196882][T24995] ? ___sys_sendmsg+0x19d/0x1e0 [ 1378.196906][T24995] ? kfree+0x1e5/0x6c0 [ 1378.196933][T24995] ___sys_sendmsg+0x106/0x1e0 [ 1378.196961][T24995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1378.196987][T24995] ? futex_hash+0x311/0x400 [ 1378.197032][T24995] ? __pfx___might_resched+0x10/0x10 [ 1378.197077][T24995] __sys_sendmmsg+0x20c/0x440 [ 1378.197134][T24995] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1378.197178][T24995] ? __pfx_do_futex+0x10/0x10 [ 1378.197226][T24995] ? xfd_validate_state+0x129/0x190 [ 1378.197264][T24995] __x64_sys_sendmmsg+0x9c/0x100 [ 1378.197302][T24995] ? lockdep_hardirqs_on+0x78/0x100 [ 1378.197333][T24995] do_syscall_64+0x115/0x840 [ 1378.197362][T24995] ? clear_bhb_loop+0x40/0x90 [ 1378.197392][T24995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.197418][T24995] RIP: 0033:0x7fbcd9f9de99 [ 1378.197439][T24995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.197463][T24995] RSP: 002b:00007fbcdae2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1378.197487][T24995] RAX: ffffffffffffffda RBX: 00007fbcda226180 RCX: 00007fbcd9f9de99 [ 1378.197503][T24995] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000009 [ 1378.197519][T24995] RBP: 00007fbcda033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1378.197534][T24995] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 1378.197548][T24995] R13: 00007fbcda226218 R14: 00007fbcda226180 R15: 00007fffd55a8f18 [ 1378.197578][T24995] [ 1390.941949][T25183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2592'. [ 1391.028603][T25183] batadv0: entered promiscuous mode [ 1395.429060][T25254] FAULT_INJECTION: forcing a failure. [ 1395.429060][T25254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.481868][T25254] CPU: 0 UID: 0 PID: 25254 Comm: syz.0.2601 Not tainted syzkaller #0 PREEMPT(full) [ 1395.481903][T25254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1395.481920][T25254] Call Trace: [ 1395.481927][T25254] [ 1395.481936][T25254] dump_stack_lvl+0x100/0x190 [ 1395.481969][T25254] should_fail_ex.cold+0x5/0xa [ 1395.481998][T25254] _copy_from_iter+0x1f4/0x1690 [ 1395.482045][T25254] ? __pfx__copy_from_iter+0x10/0x10 [ 1395.482098][T25254] skb_copy_datagram_from_iter+0x11f/0x720 [ 1395.482132][T25254] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 1395.482164][T25254] unix_stream_sendmsg+0x536/0x1310 [ 1395.482207][T25254] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1395.482248][T25254] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1395.482284][T25254] sock_write_iter+0x53a/0x5b0 [ 1395.482308][T25254] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1395.482342][T25254] ? __pfx_sock_write_iter+0x10/0x10 [ 1395.482374][T25254] ? bpf_lsm_file_permission+0x9/0x10 [ 1395.482398][T25254] ? security_file_permission+0x76/0x210 [ 1395.482436][T25254] ? rw_verify_area+0xce/0x6d0 [ 1395.482477][T25254] vfs_write+0x6ac/0x1050 [ 1395.482500][T25254] ? __pfx_sock_write_iter+0x10/0x10 [ 1395.482528][T25254] ? __pfx_vfs_write+0x10/0x10 [ 1395.482562][T25254] ? __x64_sys_futex+0x34f/0x4d0 [ 1395.482589][T25254] ? __x64_sys_futex+0x358/0x4d0 [ 1395.482628][T25254] ksys_write+0x1f8/0x250 [ 1395.482651][T25254] ? __pfx_ksys_write+0x10/0x10 [ 1395.482683][T25254] do_syscall_64+0x115/0x840 [ 1395.482714][T25254] ? clear_bhb_loop+0x40/0x90 [ 1395.482744][T25254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.482770][T25254] RIP: 0033:0x7fa2f199de99 [ 1395.482797][T25254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.482821][T25254] RSP: 002b:00007fa2f27bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1395.482845][T25254] RAX: ffffffffffffffda RBX: 00007fa2f1c26090 RCX: 00007fa2f199de99 [ 1395.482861][T25254] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1395.482877][T25254] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1395.482892][T25254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1395.482908][T25254] R13: 00007fa2f1c26128 R14: 00007fa2f1c26090 R15: 00007ffdf46ed298 [ 1395.482939][T25254] [ 1400.777354][T25336] FAULT_INJECTION: forcing a failure. [ 1400.777354][T25336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1400.811239][T25336] CPU: 0 UID: 0 PID: 25336 Comm: syz.1.2614 Not tainted syzkaller #0 PREEMPT(full) [ 1400.811272][T25336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1400.811287][T25336] Call Trace: [ 1400.811295][T25336] [ 1400.811304][T25336] dump_stack_lvl+0x100/0x190 [ 1400.811339][T25336] should_fail_ex.cold+0x5/0xa [ 1400.811368][T25336] _copy_from_iter+0x1f4/0x1690 [ 1400.811416][T25336] ? __pfx__copy_from_iter+0x10/0x10 [ 1400.811468][T25336] skb_copy_datagram_from_iter+0x11f/0x720 [ 1400.811501][T25336] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 1400.811533][T25336] unix_stream_sendmsg+0x536/0x1310 [ 1400.811575][T25336] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1400.811616][T25336] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1400.811648][T25336] sock_write_iter+0x53a/0x5b0 [ 1400.811672][T25336] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1400.811706][T25336] ? __pfx_sock_write_iter+0x10/0x10 [ 1400.811738][T25336] ? bpf_lsm_file_permission+0x9/0x10 [ 1400.811763][T25336] ? security_file_permission+0x76/0x210 [ 1400.811800][T25336] ? rw_verify_area+0xce/0x6d0 [ 1400.811841][T25336] vfs_write+0x6ac/0x1050 [ 1400.811864][T25336] ? __pfx_sock_write_iter+0x10/0x10 [ 1400.811892][T25336] ? __pfx_vfs_write+0x10/0x10 [ 1400.811926][T25336] ? __x64_sys_futex+0x34f/0x4d0 [ 1400.811954][T25336] ? __x64_sys_futex+0x358/0x4d0 [ 1400.811986][T25336] ksys_write+0x1f8/0x250 [ 1400.812009][T25336] ? __pfx_ksys_write+0x10/0x10 [ 1400.812041][T25336] do_syscall_64+0x115/0x840 [ 1400.812072][T25336] ? clear_bhb_loop+0x40/0x90 [ 1400.812103][T25336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.812129][T25336] RIP: 0033:0x7fbcd9f9de99 [ 1400.812156][T25336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.812181][T25336] RSP: 002b:00007fbcdae4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1400.812205][T25336] RAX: ffffffffffffffda RBX: 00007fbcda226090 RCX: 00007fbcd9f9de99 [ 1400.812221][T25336] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1400.812236][T25336] RBP: 00007fbcda033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1400.812251][T25336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.812266][T25336] R13: 00007fbcda226128 R14: 00007fbcda226090 R15: 00007fffd55a8f18 [ 1400.812297][T25336] [ 1401.951623][T25348] zswap: compressor 000 not available [ 1403.733950][T25396] FAULT_INJECTION: forcing a failure. [ 1403.733950][T25396] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.788546][T25396] CPU: 0 UID: 0 PID: 25396 Comm: syz.1.2623 Not tainted syzkaller #0 PREEMPT(full) [ 1403.788580][T25396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1403.788596][T25396] Call Trace: [ 1403.788604][T25396] [ 1403.788614][T25396] dump_stack_lvl+0x100/0x190 [ 1403.788649][T25396] should_fail_ex.cold+0x5/0xa [ 1403.788677][T25396] should_failslab+0xc2/0x120 [ 1403.788714][T25396] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 1403.788749][T25396] ? kernel_text_address+0x8d/0x100 [ 1403.788789][T25396] ? kstrdup_const+0x63/0x80 [ 1403.788824][T25396] kstrdup+0x51/0xe0 [ 1403.788854][T25396] kstrdup_const+0x63/0x80 [ 1403.788882][T25396] __kernfs_new_node+0x9b/0xa10 [ 1403.788923][T25396] ? stack_trace_save+0x8e/0xc0 [ 1403.788958][T25396] ? __pfx_stack_trace_save+0x10/0x10 [ 1403.788994][T25396] ? __pfx___kernfs_new_node+0x10/0x10 [ 1403.789032][T25396] ? find_held_lock+0x2b/0x80 [ 1403.789063][T25396] ? kernfs_root+0xee/0x2a0 [ 1403.789100][T25396] ? kernfs_root+0xee/0x2a0 [ 1403.789145][T25396] kernfs_create_dir_ns+0xa6/0x2b0 [ 1403.789181][T25396] sysfs_create_dir_ns+0x13a/0x2b0 [ 1403.789219][T25396] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1403.789256][T25396] ? find_held_lock+0x2b/0x80 [ 1403.789286][T25396] ? kobject_add_internal+0x25f/0x930 [ 1403.789327][T25396] ? kobject_add_internal+0x25f/0x930 [ 1403.789369][T25396] ? class_dir_child_ns_type+0xd/0x60 [ 1403.789423][T25396] kobject_add_internal+0x2c8/0x930 [ 1403.789467][T25396] kobject_add+0x16a/0x1e0 [ 1403.789506][T25396] ? __pfx_kobject_add+0x10/0x10 [ 1403.789547][T25396] ? get_device_parent+0x1b3/0x4c0 [ 1403.789585][T25396] ? kobject_put+0xb9/0x640 [ 1403.789629][T25396] device_add+0x294/0x1970 [ 1403.789669][T25396] ? __pfx_dev_set_name+0x10/0x10 [ 1403.789696][T25396] ? __pfx_device_add+0x10/0x10 [ 1403.789735][T25396] ? __pfx___might_resched+0x10/0x10 [ 1403.789774][T25396] ? lockdep_hardirqs_on+0x78/0x100 [ 1403.789813][T25396] __add_disk+0x518/0xe40 [ 1403.789850][T25396] add_disk_fwnode+0x118/0x480 [ 1403.789885][T25396] loop_add+0x90b/0xb60 [ 1403.789915][T25396] ? __pfx_loop_add+0x10/0x10 [ 1403.789961][T25396] ? find_held_lock+0x2b/0x80 [ 1403.789992][T25396] ? __fget_files+0x215/0x3d0 [ 1403.790018][T25396] loop_control_ioctl+0xae/0x620 [ 1403.790055][T25396] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1403.790090][T25396] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1403.790123][T25396] __x64_sys_ioctl+0x18e/0x210 [ 1403.790165][T25396] do_syscall_64+0x115/0x840 [ 1403.790195][T25396] ? clear_bhb_loop+0x40/0x90 [ 1403.790226][T25396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.790252][T25396] RIP: 0033:0x7fbcd9f9de99 [ 1403.790273][T25396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.790298][T25396] RSP: 002b:00007fbcdae70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1403.790322][T25396] RAX: ffffffffffffffda RBX: 00007fbcda225fa0 RCX: 00007fbcd9f9de99 [ 1403.790339][T25396] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 1403.790355][T25396] RBP: 00007fbcda033eaf R08: 0000000000000000 R09: 0000000000000000 [ 1403.790371][T25396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.790386][T25396] R13: 00007fbcda226038 R14: 00007fbcda225fa0 R15: 00007fffd55a8f18 [ 1403.790418][T25396] [ 1404.184334][T25396] kobject: kobject_add_internal failed for loop84 (error: -12 parent: block) [ 1408.467606][T25461] netlink: 'syz.3.2633': attribute type 5 has an invalid length. [ 1408.486040][T25461] netlink: 'syz.3.2633': attribute type 1 has an invalid length. [ 1409.537806][T25493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'. [ 1409.723344][T25493] net_ratelimit: 12 callbacks suppressed [ 1409.723367][T25493] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1409.818738][T25490] random: crng reseeded on system resumption [ 1411.281786][T25503] FAULT_INJECTION: forcing a failure. [ 1411.281786][T25503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.370401][T25503] CPU: 0 UID: 0 PID: 25503 Comm: syz.0.2639 Not tainted syzkaller #0 PREEMPT(full) [ 1411.370441][T25503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1411.370457][T25503] Call Trace: [ 1411.370465][T25503] [ 1411.370474][T25503] dump_stack_lvl+0x100/0x190 [ 1411.370507][T25503] should_fail_ex.cold+0x5/0xa [ 1411.370535][T25503] _copy_from_iter+0x1f4/0x1690 [ 1411.370579][T25503] ? _copy_from_iter+0x270/0x1690 [ 1411.370618][T25503] ? __pfx__copy_from_iter+0x10/0x10 [ 1411.370661][T25503] ? __pfx__copy_from_iter+0x10/0x10 [ 1411.370709][T25503] copy_page_from_iter+0x238/0x300 [ 1411.370752][T25503] skb_copy_datagram_from_iter+0x399/0x720 [ 1411.370793][T25503] unix_stream_sendmsg+0x536/0x1310 [ 1411.370834][T25503] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1411.370875][T25503] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1411.370906][T25503] sock_write_iter+0x53a/0x5b0 [ 1411.370931][T25503] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1411.370963][T25503] ? __pfx_sock_write_iter+0x10/0x10 [ 1411.370995][T25503] ? bpf_lsm_file_permission+0x9/0x10 [ 1411.371020][T25503] ? security_file_permission+0x76/0x210 [ 1411.371057][T25503] ? rw_verify_area+0xce/0x6d0 [ 1411.371098][T25503] vfs_write+0x6ac/0x1050 [ 1411.371122][T25503] ? __pfx_sock_write_iter+0x10/0x10 [ 1411.371149][T25503] ? __pfx_vfs_write+0x10/0x10 [ 1411.371183][T25503] ? __x64_sys_futex+0x34f/0x4d0 [ 1411.371219][T25503] ? __x64_sys_futex+0x358/0x4d0 [ 1411.371251][T25503] ksys_write+0x1f8/0x250 [ 1411.371274][T25503] ? __pfx_ksys_write+0x10/0x10 [ 1411.371305][T25503] do_syscall_64+0x115/0x840 [ 1411.371336][T25503] ? clear_bhb_loop+0x40/0x90 [ 1411.371366][T25503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.371392][T25503] RIP: 0033:0x7fa2f199de99 [ 1411.371415][T25503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.371440][T25503] RSP: 002b:00007fa2f27bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1411.371464][T25503] RAX: ffffffffffffffda RBX: 00007fa2f1c26090 RCX: 00007fa2f199de99 [ 1411.371481][T25503] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1411.371496][T25503] RBP: 00007fa2f1a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1411.371511][T25503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1411.371525][T25503] R13: 00007fa2f1c26128 R14: 00007fa2f1c26090 R15: 00007ffdf46ed298 [ 1411.371556][T25503] [ 1419.219918][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1419.228825][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.146874][T25735] FAULT_INJECTION: forcing a failure. [ 1425.146874][T25735] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.203737][T25735] CPU: 0 UID: 0 PID: 25735 Comm: syz.3.2673 Not tainted syzkaller #0 PREEMPT(full) [ 1425.203770][T25735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1425.203785][T25735] Call Trace: [ 1425.203793][T25735] [ 1425.203803][T25735] dump_stack_lvl+0x100/0x190 [ 1425.203838][T25735] should_fail_ex.cold+0x5/0xa [ 1425.203862][T25735] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1425.203892][T25735] should_failslab+0xc2/0x120 [ 1425.203928][T25735] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1425.203962][T25735] ? skb_clone+0x190/0x400 [ 1425.204019][T25735] skb_clone+0x190/0x400 [ 1425.204063][T25735] netlink_deliver_tap+0xaed/0xcc0 [ 1425.204110][T25735] netlink_unicast+0x62b/0x850 [ 1425.204142][T25735] ? __pfx_netlink_unicast+0x10/0x10 [ 1425.204168][T25735] ? __build_skb_around+0x278/0x390 [ 1425.204200][T25735] ? is_vmalloc_addr+0x86/0xa0 [ 1425.204230][T25735] netlink_sendmsg+0x8b0/0xda0 [ 1425.204263][T25735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.204295][T25735] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1425.204327][T25735] ____sys_sendmsg+0xa4d/0xbe0 [ 1425.204352][T25735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1425.204382][T25735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1425.204410][T25735] ? futex_unqueue+0x133/0x2c0 [ 1425.204443][T25735] ___sys_sendmsg+0x190/0x1e0 [ 1425.204476][T25735] ? __pfx____sys_sendmsg+0x10/0x10 [ 1425.204503][T25735] ? futex_hash+0x311/0x400 [ 1425.204536][T25735] ? find_held_lock+0x2b/0x80 [ 1425.204586][T25735] __sys_sendmmsg+0x20c/0x440 [ 1425.204625][T25735] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1425.204669][T25735] ? __pfx_do_futex+0x10/0x10 [ 1425.204710][T25735] ? xfd_validate_state+0x129/0x190 [ 1425.204748][T25735] __x64_sys_sendmmsg+0x9c/0x100 [ 1425.204784][T25735] ? lockdep_hardirqs_on+0x78/0x100 [ 1425.204817][T25735] do_syscall_64+0x115/0x840 [ 1425.204847][T25735] ? clear_bhb_loop+0x40/0x90 [ 1425.204878][T25735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.204903][T25735] RIP: 0033:0x7f5e2bb9de99 [ 1425.204924][T25735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.204949][T25735] RSP: 002b:00007f5e2c9be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1425.204973][T25735] RAX: ffffffffffffffda RBX: 00007f5e2be26180 RCX: 00007f5e2bb9de99 [ 1425.204989][T25735] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000009 [ 1425.205004][T25735] RBP: 00007f5e2bc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1425.205019][T25735] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 1425.205035][T25735] R13: 00007f5e2be26218 R14: 00007f5e2be26180 R15: 00007ffc7fc673b8 [ 1425.205072][T25735] [ 1429.915453][ T1112] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:8: bg 2: bad block bitmap checksum [ 1429.979348][ T1112] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3 with max blocks 2 with error 74 [ 1430.014177][ T1112] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1430.014177][ T1112] [ 1431.421886][T25835] FAULT_INJECTION: forcing a failure. [ 1431.421886][T25835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1431.609806][T25835] CPU: 0 UID: 0 PID: 25835 Comm: syz.3.2687 Not tainted syzkaller #0 PREEMPT(full) [ 1431.609838][T25835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1431.609856][T25835] Call Trace: [ 1431.609864][T25835] [ 1431.609872][T25835] dump_stack_lvl+0x100/0x190 [ 1431.609904][T25835] should_fail_ex.cold+0x5/0xa [ 1431.609931][T25835] _copy_to_user+0x32/0xd0 [ 1431.609971][T25835] keyctl_capabilities+0x5a/0x160 [ 1431.610003][T25835] __do_sys_keyctl+0x427/0x5a0 [ 1431.610031][T25835] do_syscall_64+0x115/0x840 [ 1431.610060][T25835] ? clear_bhb_loop+0x40/0x90 [ 1431.610089][T25835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.610113][T25835] RIP: 0033:0x7f5e2bb9de99 [ 1431.610132][T25835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.610155][T25835] RSP: 002b:00007f5e29df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1431.610177][T25835] RAX: ffffffffffffffda RBX: 00007f5e2be26360 RCX: 00007f5e2bb9de99 [ 1431.610192][T25835] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1431.610206][T25835] RBP: 00007f5e29df6090 R08: 00000000000003ff R09: 0000000000000000 [ 1431.610220][T25835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.610235][T25835] R13: 00007f5e2be263f8 R14: 00007f5e2be26360 R15: 00007ffc7fc673b8 [ 1431.610264][T25835] [ 1433.379917][T25850] nbd: socks must be embedded in a SOCK_ITEM attr [ 1433.475949][T25859] nbd: nbd4133 already in use [ 1436.564283][T10471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.946623][T13154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1436.962895][T13154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1436.974791][T13154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1436.984711][T13154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1437.002793][T13154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1437.107287][T10471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.352914][T10471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.703428][T25906] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 1437.722212][T10471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.380024][T25917] kernel read not supported for file /\*)A (pid: 25917 comm: syz.0.2700) [ 1438.540876][ T29] audit: type=1800 audit(4294967297.844:47): pid=25917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2700" name="\*)A" dev="mqueue" ino=215823 res=0 errno=0 [ 1439.032777][T24286] Bluetooth: hci3: command tx timeout [ 1439.168430][T10471] bridge_slave_1: left allmulticast mode [ 1439.200021][T10471] bridge_slave_1: left promiscuous mode [ 1439.237190][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.312804][T10471] bridge_slave_0: left allmulticast mode [ 1439.355432][T10471] bridge_slave_0: left promiscuous mode [ 1439.376463][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.058116][T13154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1440.071009][T13154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1440.079615][T13154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1440.092247][T13154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1440.100834][T13154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1440.111722][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1440.185298][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1440.233178][T10471] bond0 (unregistering): Released all slaves [ 1440.606970][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1441.102199][T24286] Bluetooth: hci3: command tx timeout [ 1442.137362][T24286] Bluetooth: hci2: command tx timeout [ 1443.176196][T24286] Bluetooth: hci3: command tx timeout [ 1443.226691][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1443.278802][T25899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.297632][T25899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.311279][T25899] bridge_slave_0: entered allmulticast mode [ 1443.334450][T25899] bridge_slave_0: entered promiscuous mode [ 1443.426852][T25899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.437695][T25899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.445871][T25899] bridge_slave_1: entered allmulticast mode [ 1443.454535][T25899] bridge_slave_1: entered promiscuous mode [ 1443.655807][T25899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.721476][T25899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.036330][T25899] team0: Port device team_slave_0 added [ 1444.055451][T25899] team0: Port device team_slave_1 added [ 1444.206286][T24286] Bluetooth: hci2: command tx timeout [ 1444.602677][T25899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.631812][T25899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.712024][T25899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.793261][T25899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1444.819969][T25899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1444.916905][T25899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.213066][T13154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1445.230244][T13154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1445.240245][T13154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1445.248161][T13154] Bluetooth: hci3: command tx timeout [ 1445.259278][T26017] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1445.280975][T26017] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1445.405715][T25899] hsr_slave_0: entered promiscuous mode [ 1445.430867][T25899] hsr_slave_1: entered promiscuous mode [ 1445.455632][T25899] debugfs: 'hsr0' already exists in 'hsr' [ 1445.477155][T25899] Cannot create hsr debugfs directory [ 1445.645901][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1445.839019][T25939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.866679][T25939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.894703][T25939] bridge_slave_0: entered allmulticast mode [ 1445.924741][T25939] bridge_slave_0: entered promiscuous mode [ 1446.017163][T25939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.046505][T25939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.077725][T25939] bridge_slave_1: entered allmulticast mode [ 1446.104744][T25939] bridge_slave_1: entered promiscuous mode [ 1446.275233][T26017] Bluetooth: hci2: command tx timeout [ 1446.412093][T25939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.553273][T25939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.922210][T25939] team0: Port device team_slave_0 added [ 1447.022263][T10471] hsr_slave_0: left promiscuous mode [ 1447.042470][T10471] hsr_slave_1: left promiscuous mode [ 1447.074137][T10471] veth1_macvtap: left promiscuous mode [ 1447.091767][T10471] veth0_macvtap: left promiscuous mode [ 1447.101213][T10471] veth1_vlan: left promiscuous mode [ 1447.111408][T10471] veth0_vlan: left promiscuous mode [ 1447.390321][T26017] Bluetooth: hci1: command tx timeout [ 1447.566852][T10471] team0 (unregistering): Port device team_slave_1 removed [ 1447.586919][T10471] team0 (unregistering): Port device team_slave_0 removed [ 1447.723009][T25939] team0: Port device team_slave_1 added [ 1447.795392][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1447.855688][T25939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.873778][T25939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1447.950915][T25939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.988063][T25939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.025340][T25939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.104212][T25939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.350534][T26017] Bluetooth: hci2: command tx timeout [ 1448.373965][T10471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.400152][T26056] BUG: unable to handle page fault for address: ffffc90013d81fe8 [ 1448.407990][T26056] #PF: supervisor write access in kernel mode [ 1448.414239][T26056] #PF: error_code(0x0002) - not-present page [ 1448.420224][T26056] PGD 13fe60067 P4D 13fe60067 PUD 1cafa067 PMD 63c76067 PTE 0 [ 1448.427731][T26056] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1448.433131][T26056] CPU: 0 UID: 0 PID: 26056 Comm: syz.2.2708 Not tainted syzkaller #0 PREEMPT(full) [ 1448.442517][T26056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1448.452594][T26056] RIP: 0010:write_comp_data+0x75/0x90 [ 1448.458009][T26056] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 42 [ 1448.477663][T26056] RSP: 0018:ffffc900051d7e78 EFLAGS: 00050257 [ 1448.483772][T26056] RAX: ffffc90013d82000 RBX: 0000000000000000 RCX: ffffffff82458885 [ 1448.491759][T26056] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1448.499741][T26056] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1448.507741][T26056] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1448.515740][T26056] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1448.523750][T26056] FS: 00007fc05cbf06c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 1448.532706][T26056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1448.539312][T26056] CR2: ffffc90013d81fe8 CR3: 0000000045d2c000 CR4: 00000000003526f0 [ 1448.547298][T26056] Call Trace: [ 1448.550866][T26056] [ 1448.553816][T26056] rseq_register+0x115/0x350 [ 1448.558446][T26056] __x64_sys_rseq+0x1b8/0x2e0 [ 1448.563243][T26056] do_syscall_64+0x115/0x840 [ 1448.567877][T26056] ? clear_bhb_loop+0x40/0x90 [ 1448.572591][T26056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.578516][T26056] RIP: 0033:0x7fc05f59de99 [ 1448.582948][T26056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.602577][T26056] RSP: 002b:00007fc05cbf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1448.611004][T26056] RAX: ffffffffffffffda RBX: 00007fc05f826450 RCX: 00007fc05f59de99 [ 1448.618991][T26056] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1448.626995][T26056] RBP: 00007fc05f633eaf R08: 0000000000000000 R09: 0000000000000000 [ 1448.634976][T26056] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 1448.643044][T26056] R13: 00007fc05f8264e8 R14: 00007fc05f826450 R15: 00007fff44ce3578 [ 1448.651131][T26056] [ 1448.654178][T26056] Modules linked in: [ 1448.658120][T26056] CR2: ffffc90013d81fe8 [ 1448.662313][T26056] ---[ end trace 0000000000000000 ]--- [ 1448.667781][T26056] RIP: 0010:write_comp_data+0x75/0x90 [ 1448.673184][T26056] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 42 [ 1448.692816][T26056] RSP: 0018:ffffc900051d7e78 EFLAGS: 00050257 [ 1448.698917][T26056] RAX: ffffc90013d82000 RBX: 0000000000000000 RCX: ffffffff82458885 [ 1448.706913][T26056] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1448.714921][T26056] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1448.722921][T26056] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1448.730934][T26056] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1448.738932][T26056] FS: 00007fc05cbf06c0(0000) GS:ffff888123de3000(0000) knlGS:0000000000000000 [ 1448.747879][T26056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1448.754478][T26056] CR2: ffffc90013d81fe8 CR3: 0000000045d2c000 CR4: 00000000003526f0 [ 1448.762495][T26056] Kernel panic - not syncing: Fatal exception [ 1448.768634][T26056] Kernel Offset: disabled [ 1448.772970][T26056] Rebooting in 86400 seconds..