last executing test programs: 11.56391644s ago: executing program 2 (id=568): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x580, 0x0) sendfile$auto(0x1, r0, 0x0, 0x1f) mmap$auto(0x0, 0x400008, 0xb23, 0x9b72, 0x2, 0x8000) mknodat$auto(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0xffffffff) clone3$auto(&(0x7f00000000c0)={0x9, 0x2, 0x5, 0x5, 0x7542, 0xa3c2, 0x3ff, 0x4, 0x8, 0x10000, 0x4}, 0x10001) socket(0x25, 0x1, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyb4/dev\x00', 0xa1e043, 0x0) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) getsockopt$auto(r1, 0x8, 0x8, &(0x7f0000000140)='/m[\x00', &(0x7f0000000180)=0x9) 11.141470538s ago: executing program 2 (id=572): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x1, 0x803a, r0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x9, 0x0, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x9, 0x1, 0x0, 0x0, 0xb]}, 0xb, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) rename$auto(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000140)='./file0\x00') ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, &(0x7f00000001c0)) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r2, 0xc1004110, &(0x7f0000000000)={0x4e, [0x4, 0x7, 0xd], [{0x2f, 0x6, 0x0, 0x1}, {0x9, 0x101, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x0, 0x0, 0x1}, {0x6b, 0x2, 0x1, 0x0, 0x1}, {0x3ff}, {0x12, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x47, 0x0, 0x1, 0x1, 0x1}, {0x23, 0x400, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x6, 0x20, 0x0, 0x0, 0x1}], 0xcd0, 0x40, 0x6, 0x40000000, 0x5, 0xffffff80, 0x100000001, "54280518eaab097757f2fba66f89d6304bb19b0153b4619d079ae07764a25744152bfebb6df8ea6d88ceaeb9cf5fe117f747e738d8cf293cef40af732d28f371"}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0xc2082, 0x0) write$auto(r4, 0x0, 0x9) 10.051307481s ago: executing program 2 (id=574): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000001140)={{&(0x7f0000000000)="c50079342b6c16563bee87c589ce0792182de7327d3138fa5d0f950d2d6f5b946f90031480190d1375b12aefdf5e16bc6ac88cea8a5f6a1ab3076917c8aa663f2451f43907c8a9357c9aa88c4fe2cb485dc44d5dd6f521be04b0579dcbf1fea60b4254", 0x3e1, &(0x7f0000000100)={&(0x7f0000000080)="657990fba0d9bbe1e0d0adfae90d32f49df38460f5e0a1723d3b74bad3633a3be3270a6933ccdf7986bcea089fc1e0e65cf3635f99b11139aa5b0d4df3df6e53f6489717920d8be35d124334412f8fa67b8d1fd5", 0x9}, 0x5, &(0x7f0000000140)="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", 0x8, 0x4}, 0x254}, 0x55a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/tx_queue_len\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) socket(0x2, 0x1, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r5, 0x5646, r5) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f0000000280)=""/40, 0x28) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x1000, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0xa, 0x7, 0x6d3f, 0xa, 0x40000000004, 0x5]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) gettid() 8.752762606s ago: executing program 2 (id=580): mmap$auto(0x7, 0x4020009, 0x4, 0x18, 0x401, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) semctl$auto(0x1ff, 0x2, 0x13, 0xfffffffffffffffd) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (rerun: 32) mlockall$auto(0x800000000000005) (async) clone$auto(0x100000001, 0x4, 0x0, 0x0, 0x200) (async, rerun: 64) madvise$auto(0x0, 0x200007, 0x44) (rerun: 64) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x402, 0x0) read$auto(r0, 0x0, 0x39b8) 7.866754396s ago: executing program 0 (id=583): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x1, 0x803a, r0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x9, 0x0, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x9, 0x1, 0x0, 0x0, 0xb]}, 0xb, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim7/health/break_health\x00', 0x80200, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, &(0x7f00000001c0)) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r2, 0xc1004110, &(0x7f0000000000)={0x4e, [0x4, 0x7, 0xd], [{0x2f, 0x6, 0x0, 0x1}, {0x9, 0x101, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x0, 0x0, 0x1}, {0x6b, 0x2, 0x1, 0x0, 0x1}, {0x3ff}, {0x12, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x47, 0x0, 0x1, 0x1, 0x1}, {0x23, 0x400, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x6, 0x20, 0x0, 0x0, 0x1}], 0xcd0, 0x40, 0x6, 0x40000000, 0x5, 0xffffff80, 0x100000001, "54280518eaab097757f2fba66f89d6304bb19b0153b4619d079ae07764a25744152bfebb6df8ea6d88ceaeb9cf5fe117f747e738d8cf293cef40af732d28f371"}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0xc2082, 0x0) write$auto(r4, 0x0, 0x9) 7.410829476s ago: executing program 2 (id=584): unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sysinfo$auto(&(0x7f0000000100)={0x6, [0x7, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x7, 0x6, 0x1, 0x1, 0x0, 0x100000004, 0x7, 0x219}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) execveat$auto(r4, 0x0, &(0x7f00000000c0)=&(0x7f0000000340)='/sys/kerneh/deync\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdc\xb3\"\xd4=e\x13\xb2T\xd9\xf4\xc2\\vxI\xf0\x06W\x96\xc1\xf1\xb8$\xb8(\xe2\x13\xde9d\x8c\xf8\"y\xce\xf0t\x98\x1d2w#\xa7\x0f\xf0\xce\x9akS\x0f]\xf7\xbdT\xe8J\x1b\x18\x03-6\x11\x16\xc14sz\xbcR\"\x83\x1eOcM%\x85\x1c@2\x81\xe2\xd3\xe6\x0e\x82\xbd\xa4\xc1\x92\xb0\x16\x11\x90@\xf2\xa8Q<\x10\x99\xfcTb\xf5\x01\x8c\xad\x85\x9b\xf1z\xa2\xa5OM\xca`#\xa6!\xb7\x12\xbd\x05f\b^\xff\x8e+\x84\x8c\xd9\xd8\x9eF;\xe2\x92\xfac\x04\x11K\x86s6eP\x03^\xd4\xc9\x11\xc29\xc5\x86F\xc9l-\x87\vV\x85\xac\xc1,\xff1[\x8fR\r\xe3\xee\x1e\x88\x1b\x00\xf0^\x91\xf8qYQ/\xb4\x06\x06\x18f', 0x0, 0x7cc9) mmap$auto(0x40000000000000, 0x2020008, 0x8002000006, 0xeb1, 0xffffffffffffffff, 0x200008000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) sendmsg$auto_IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@nested={0xc, 0x92, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r3}]}, @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}, @IPVS_CMD_ATTR_DEST={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x7c, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa394}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8800) read$auto(r5, 0x0, 0x1f40) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) r7 = socket(0x2, 0x801, 0x106) getsockopt$auto(r7, 0x6, 0x21, 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000001640)="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") 6.980380732s ago: executing program 3 (id=585): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7009ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x90140, 0x0) ioctl$auto(r1, 0x8, 0xffffffffffffffff) 6.442627525s ago: executing program 0 (id=586): unshare$auto(0x8000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/apparmor/exec\x00', 0x68000, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:00.0/ari_enabled\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/64, 0x40) fchdir$auto(r0) (async) r1 = open(&(0x7f0000000080)='./cgroup\x00', 0x101000, 0x0) (async) exit$auto(0x2) read$auto_trace_options_fops_trace(r1, &(0x7f0000000380)=""/173, 0xad) (async) unshare$auto(0x8000000) 6.155051673s ago: executing program 3 (id=588): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) sysfs$auto(0x2, 0x1e, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x6b) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x54) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x5}, 0x9}, 0x16d, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) r1 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x2202, 0x0) write$auto_nsim_psample_enable_fops_psample(r1, &(0x7f0000000080)='yG', 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.296400837s ago: executing program 3 (id=590): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) (async) sysfs$auto(0x2, 0x6, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x160, r2, 0x408, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x9}, @NL80211_ATTR_STA_FLAGS2={0xcc, 0x43, "c930e28fd0d8b2bf2f6898750277ce7642fac9abbe0a786dab6a91d7859a950054637a098d608707223ba33b468a87f849241da132982cb9d42ed1384ebad2008274298949bb002c3bd622a07063dbf7f83d88b1f6d99b47528a747475ecb807ea3e2ad56e65cef4b26b1ddde95a38a8e1634615a265cf592ea55d2304f918c77ec8c4f8a5387e177409152114f7104d896bcec888ddb81ba93a40251ea5240fdd2fc1a5fcfde09855e92a9ffffd579ba017475f09d0dc9912552201e6475541a6bf3a57117c63c4"}, @NL80211_ATTR_S1G_CAPABILITY={0x78, 0x128, "4385901e6633569251856927d49cf18112d4f46f85ee8c4ae32ce87ac26f2d7bfba78eef167aa0e9e7736f65fa008ec5fdbdeae5a2f88b98daddacf60fdd2e96b66d64958c2ec716b99d6323ee1fc0f54e4e28feb6d192d5504ce64f814d63d02e799c97acabaec0821806bf29a3afc18e8f65d6"}]}, 0x160}, 0x1, 0x0, 0x0, 0x40081}, 0x40000) (async, rerun: 64) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) (rerun: 64) ioctl$auto(r3, 0x3b8c, r0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) capget$auto(&(0x7f0000000280)={0x6, 0xffffffffffffffff}, &(0x7f00000002c0)={0x8, 0x9, 0x8}) prctl$auto_SECCOMP_MODE_STRICT(0x2f, 0x1, r4, 0xfffffffffffffffd, 0x8) 5.206963047s ago: executing program 0 (id=591): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x200082, 0x0) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r0, 0x28000) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r2, 0x0, 0x40) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x48400, 0x41) fchmod$auto(r3, 0x7439) setreuid$auto(0x4, 0x8) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0xfee) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x142, 0x0) writev$auto(r4, &(0x7f0000000c00)={0x0, 0x7}, 0x4) 5.131773874s ago: executing program 1 (id=592): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) epoll_create$auto(0x107fb9) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0x10000000000eb1, 0xffffffffffffffff, 0xf) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='R'], 0x1ac}}, 0x40000) ioctl$auto_BCH_IOCTL_QUERY_UUID(0xffffffffffffffff, 0x8010bc01, &(0x7f0000000200)={{"bf6263fb0379d637cc31a1a2859547fd"}}) unshare$auto(0x40000080) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x181000, 0x0) fanotify_init$auto(0x8, 0x40000005) mmap$auto(0x20008, 0x18, 0x6, 0xeb1, 0x401, 0x7ffd) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x48002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xaea2, 0x38) 4.226933905s ago: executing program 3 (id=593): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) read$auto(0x3, 0x0, 0x80) get_robust_list$auto(0x0, 0x0, 0x0) write$auto_proc_loginuid_operations_base(0xffffffffffffffff, &(0x7f0000000040)="9dc4e29815c3dd855a4340428a12ae12c859250e55d63ef492651f515f9a76158c045ff86707a23e18496d5d7129a8e340b7ebcd1806c7b26420ea05cab20eabc25b6240b084785dac9ddeceedcf0c288633b6a40eb3c9a9a00a8140c1a5d3f4418e6820622dc5e8f300f88254e3b7a4052254f9c40b62b89841b2", 0x7b) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000002c00010004000000000000000c00010040000000000000000a00"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r2 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) write$auto(r0, 0x0, 0xa) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, 0x0, 0x40002, 0x0) 3.970535243s ago: executing program 1 (id=594): mmap$auto(0x0, 0xe980, 0xdf, 0xeb1, 0x401, 0x20000008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x5, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video6\x00', 0x1600, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x40d00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1e, 0x0, 0x7, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r0, &(0x7f0000000080)=""/19, 0x13) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptysb\x00', 0xa0001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 3.731027146s ago: executing program 3 (id=595): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r0, 0x1, 0x803a, r0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/178, 0xb2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x9, 0x0, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x9, 0x1, 0x0, 0x0, 0xb]}, 0xb, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim7/health/break_health\x00', 0x80200, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd0c, &(0x7f00000001c0)) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r2, 0xc1004110, &(0x7f0000000000)={0x4e, [0x4, 0x7, 0xd], [{0x2f, 0x6, 0x0, 0x1}, {0x9, 0x101, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x0, 0x0, 0x1}, {0x6b, 0x2, 0x1, 0x0, 0x1}, {0x3ff}, {0x12, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x47, 0x0, 0x1, 0x1, 0x1}, {0x23, 0x400, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x0, 0x1}, {0x6, 0x20, 0x0, 0x0, 0x1}], 0xcd0, 0x40, 0x6, 0x40000000, 0x5, 0xffffff80, 0x100000001, "54280518eaab097757f2fba66f89d6304bb19b0153b4619d079ae07764a25744152bfebb6df8ea6d88ceaeb9cf5fe117f747e738d8cf293cef40af732d28f371"}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0xc2082, 0x0) write$auto(r4, 0x0, 0x9) 3.49211161s ago: executing program 1 (id=596): r0 = socket(0x1, 0x6, 0x84) getsockopt$auto(r0, 0x84, 0x86, 0x0, &(0x7f0000000000)=0x7) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x80, 0x0) (async) unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) (async) prctl$auto(0xa2db, 0x1, 0x0, 0x1, 0xfffffffffffffffd) (async, rerun: 64) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x88b, 0xffffffffffffff50, 0x9b76, 0xffffffffffffffff, 0x8000) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) (async, rerun: 64) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) (async) r4 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$auto_RNDGETENTCNT2(r4, 0x80045200, &(0x7f0000000200)=0x6) (async, rerun: 32) ioctl$auto(r3, 0x4008af23, r1) (async, rerun: 32) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(r6, 0x0, 0x39b8) (async) r7 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sg1\x00', 0x280000, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r7, 0x227b, 0x0) (async, rerun: 64) read$auto(r2, 0x0, 0x55) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x6, 0xeb0, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r8 = syz_clone(0x82010000, &(0x7f00000009c0)="85161b0be06c1b9ffc0363ea7a04f44ddf5ee7861581bb1fbfc2453bc4a9be8415326a06c8ff9d2209cd188ac72ed7945e81237bb8327208e3a2785f4eb3093de0734164a604b0a8e89b197f988ef80be9f06861c979bf7faf84b06f28ec34cfc5e32e7d1f13eaa7100996d6ed2c406edb2741198bb79aa47d8cfbdb1021cbf7d34332fd3f5dee62f80efb63a17060b759eaa1808224194f3f687187b0ee133ff68cb4801b88ba3b06330dbd942e71420cae432cdeab53f4c06032c1f7260c8c65dd3eaa5e1da368b6b3843a7b8b0239654adc7481a35127e0d8f7f0a74e6cf7b12117d4448a3ffbf3278768fe59312f3583b748091255d493d9e2f2c1c0d6b7c9d2f65de24d25fa7db7609af080e80971c9f22389b1fc4c008bd599e1e04b7febf9485f2139dea884c8502ab6c6a72778fa9403680688e1b12be5a12d89a86d55147e267037aad392e75f201bbab380c5cd176811bc43094daac08b5315aef8f9c53629ba9c07e06014a3c9bdbb85912a4ecec936f56e626fa652659683225cbeaf5ff072e9ea37a9c339ec0f31794dfb4073d3767ad8621d33c7b8a94e47d3a645eb5e3e9540f303be1041a2092640a0dcdb75dc1ae0b7199de10bc28fd4c97e629dd338bd7fcf69b9c6c3db14932eae2df605c7e0c30e1709423510e99aeae07c4d53485af9ed0793d9d685cead41e0880bb2bc31156e4007745299ca90106e16b2e6800235f8d73ff1ce9fb0ab515114f4fe526f48de6a18a54da07874d50cfb3042b23aa10588ecf25bd2e807e1588cf58ad052bdbbff0423897b9cae73efe3bd5e8301486b1cd07b18340b65c2c3f02c44cee1833c6e90617fbb87313896e1d9f8d52d5c3f0cb1953b9048628e57e14c4cab76bbc7a2a54f68727b409ac4955597c9d4187830873019946d1881dee12b1822e4f1cdda2222879f196e59c03da519d82622c0fd37b26047a15931c40fa7b4d8fe15f078b32e382ed6d9eb23ce5afb89c6c2f1c1b074cf3702feaff1c07c288ad262fc5c6495d7e4a70c6772e12a3562b642bc1c136de4a670a0f4d582fccf7861a93856791a89c5990da3ce9508263b776d1ca24dc408810b0c9dbfb1429192d3f7f6580900e8f5ab3c102e90be521bf6d7ff92ee5220d8a3b1da1fe96fb2e5036281de7fdc99aa3fe0b8026f6139140f4db1e3866d22e3accbe3f7a62bc670d8d5dc44fec23cd80bc32e94b94e0e91f4dc00f3cf2b5100a391a302890562a9d1795ccae14a761bdbc74e87a0406e86891e408ff3d0062e19a3b8945898bd9e51b5c9a315295ea33dda6d965c089b4fcdb884b53a433e4252993426d8a6b6d61b2f706bbdc30675f69a52f7fa386151dfde75041c7cebf4b368033af19891f1f829319814160a525a5fbd5f51b0ee12740a0bc09550a4085ef507a7e5b5a1af3b1860efe4cc1632ee444739c0e03b65b855acf766bbbd93ebd9ae80a90ae5401c2f87b98458869855d58b005d847b4f11a360af1fcddcfd89daeb3d24958633de04ef09d424620a738d92576d3cb70cdff06a15b75661675781c0400e211d6b2a7e8db957d906ec73bd39f9aa8dabc9a6d1ad1b36cd62ec835c154389b8a17ddad24618991ccbc974789d9f33cbb79d4ad70148bc3d1d5f22bd20db7d2a10c044451e44b27d4ba2dd8d929b52b71cbee6bdd19a1f2e5e6a09ff9e5dc3a1d77dd209261516b9fec5748b3016ffd07be4325b3b2201f8534ed884f2334446e4d80da7801b5484ef67344d2c998f896165097159b9c92eaa776adb3e9f8b69d3d30441e42de31defbe77b7b6454cfe8dc7d2fb1598a24413b88b1f0856e175b9397ba8cd5f269fe9946cd7fc7cdaa594ac030df0372e538f899705c64b7c860e4db10dffc445f6b18309f04ccc6859f83c759b210276b9cad3ab686214533db419b51846e42f411cfb74fb4f5549345d95d94620db7d5f5a12f9117deb3c3b1f7ec09c29b61b1ec30e29948aa502dcd39755d964356bb9f56e7b4f98860fe5b1bbffcbb5812455e75c3fdac08f3cb73f200ef528a5b1d560f76ec18439c61828f594c201d05c5b07692d379458acd132cb59d3fdf54067baa256178db91b62794d5d8e251d6c77142f16270c9274b2cc6ef74d3674eb5bb3080aede285324d27b31ad3156fe327d1e852d8729ba827b8a08b88f71f7121604257abde8eeb03d4a9f74367d35ba8ba0953de16038f42c69917f1adeadc12949cfc7012ee156b968dd535a6054d38a6eae9546517fc6b988357bcce9515eaff10781198328109093354d68a05ce8debb817f2a122f58ea36d6f6210ad9fecd508d4237bf9602f7579c46000a43404f7b0e78511da6fb78b3022204c4983f71c4ce815d2af3a880fb29c45e23959cec468fb0da605c2c6f190ac6ae06dd886bd3fdeff1bceb15a22699f9bae7f7fb8c1d3b5a8bb2ec671e2cfc641dd389dbf488bc5427b1d104d4f0d9ea0ec96120c312e1af4b7c085d3ffc3245fd7e25b89d636ec360289bc857211b31591e8f137fe90969c88343d4f0c0d70eb6d349e4191dae7f035353c7fa48baab19e0dd86fe7d4cd87c2de5e67e70704336568ccaff6928d46125a49741bd340980c026fcb79c9ea2909a17776d0a0fe2fee7033f8af11c527f4f080cf3e9cc53ceab1b305a876c72e56e4300fd1dc2f6a6e2c4ae24577d81f498298aec81e163dc2364d898142dfd19f569ef5db7887b5982ef8c48e8eb6add18e607e053c3e21e59240357b253c35e23a0933c4854dbd4759f224a16fd15d22fa4277e0a6a9f34e10aef581323b2d5464030eeffcb0c0772cdfdacabbe43293f76ae6f0a26bf0f8f95660cd712050e87df9e3e4a4e703d65750087aad7eb37ac6a5378eff8fdae1fb3843e61511adc63f40fca58006dcbb43bd512f6c511ad54f4d6644a0d072bbca8fa5abbf127c48e2066f4bfe5ea7a7df7593123eec5b41de40d8b545952a50d1e0e0df0dba99d8860d16e21221760cf85e22d483b6cdaf3cee9e29eb73139ed29705e001e938c29d173970c925bc5b5bd31447ff22a6bd42e805b9c81f973ecad404eb9956ef23d9c55e47df0fc3279e48e1267eb2f1bfb5c23582b0ae2dbae5669eae77e31bc4cdf9f9015df90db7fa7c3f45f336d46764441366195bd8c316e6deddb86172801789e5e45009b9a0eefd84fd5655b726b5937887b35db164ab31d68ab141f60d03aff61712c3b83a7cf173adb687f2002205099680e9ca3c2f25147176bb24b93d8d97c73a697047b982f582c4152c7b77996366451cb55c3afc7f25e4140c499cc12f350be2aeaa5989d73170028d9a582f557ce99f4b3ebaeba7c12d32a31cc6b1409bd9a46c0dac5bb717cc43bd23950b80289627b25ffd305cb26a203f02ed8bfbab99d6e1473c1429dfc8f11f6dfe1dbcc41a7ac4c934cbbbe81587e4851ca9cf0cbefb84ff0a79cb9679df684a6d4de13288781cc6966ac2aa11a7bc93362b93d580df9d9deedd16af749ed70b459c3796c69ae4bf6b0025b60d228db9987415ef9683c9050df82c56b5d8abf518c65104fa8dcbefed787ec6dd27f50dc5aa6ff10e68f5df5d6fc065405f12846d81b5325534a84b7ab16c98e9eb692c0955ca8ee43e31232f54c78342d4dd1efcb46d3e712db881f6af0428bef26a917e85885f160593e23b14c73b0917a804b482b1d2a1fcdba701b9564951c1ea0a933c14fa64ec75a28ec266543fe0ac69c1fd40402bb4856845ef42cd287909fc6391b1002e73e2f61d4f5fc90484f68e5053cf9c7c0b92acd7e2bfe9f2443a01746d68bb23c222a33ec7ddf9d570c8c3c5f45e14a2e84c56e0eb58d85113b8ee578330f353fe851524b93e4660de57f882d5557e49947e6f35f3be1799ac6075227e0d00bc82f540927f4725d9b4e0cfa19e2dde0e2dc194da11e4c5aca4fb84bb770e3113beb56a38ce9efc78cfe6aad0fa2c1f9f3c23db46fb1d37485b24df7d6783122c63eca3c7baf760cfbe53cd711cbce4e9bc01480a0d327fe5b554f5a7e298bd472acea67e7aad5a7d75181f25f70d3cbdc76a3f14129f787cff24abb4aa99c4955a36579974660cd043c10d109dd395e42f29a5c8a233dc0f649aeaf659c57ba99bfb3feb3b7207e255f48196c6f8f61de4cf1df39d7443dd11ce924f8088db7f2ab5eb35af132fec7fdf9331caea525a6e00dc8fe5890b2b798c8e74069038b90ff5f8b19702241c0e364efad7acc61b065e8245816ba9669fe144847d81ee542adcba835fd28609b81a5e92df43287b814b2a0b4d685cacbe39fc7971abebd9922dcc0da5a85ea514ef68d29caa96a930844bd4fa79b0a435631dd663cfadff3dda11b85cab91d52067697cb5fe49ad102257a3ed7004835c78ec41870c5268b3c20f403663e75891aa6dbcf9e6934b121abc1ffd408a827283ddca94e91ca5b2a7c7aed478e0d88e84922c69dceff83ea5b108060c50f83a70ca63da2bb7d4155358fa8f2675b0ed82969e649736a9621cf1eef06330f94de773071f260efcb1c70b31bad87e5a8615821501522ad85ad2b6a48cf864f0d78a73cf45c54e3ed0118f9ef53ac9ebd8e24e8cb546bbec3f783be7f4642b9e260b9ae0acd8db39fefd7bd2a44a702d5d2e31985419fdfae6d6b49d4249c5cb43b98fccfb9a67ea9d248af2e9473dcd7481fff0d8864dd425e90db7667ef9715e0346ec0290fe952e45a9051340d98ffc2ee5f22be118427dac0f047774443e36958ae88ab5bacca250b4d6eb1249b9642c198a6f651a802a479c2025fc0f8c541566e5ca2afa51007c528bbefab95a681c53d7f7b48958c88deec3cc0bc03cfc6e02f9af7c0952e4e16d6b0067dc0f4c07e1e71fbf1474d55d5d662c0f0c2a05e32a783722de6177099b6b9b4be0a5126c0d6b145be3d666f0dc1ed133557e7e31c92cafc5e8840fb16b2a0b99c9a7b2e49b10a3dba97d6875da31d2d1492d86c2d9a75231f057e87e647759fb468193a7a160d8a3f5bf091bf01846e82881fcef7eb1212f9927b0d20c63b0723545aad6eb59b64df4d6eb7ab36f7bf473b65903f60581113f5dca1e9aa4ba8b9a08a8acfd1e98c9ab04f3b18a2a70bca7797041b263731a36431e38306ed7fd7dfc589528692cb2313b18cd5c023f48bf07f260a68b355b3eadadf65542c983a1247bbde8038f61d32ad64c514d046e9eefbd86f2b6a7a4b3c632d9464a6e5ee1e1a366ebb7f7f92919753c855adb05eb3888384968f47227c736e49e93ca14689dd5729f235fca6df17b342898ac26cd5329ef37a2543100967e2d9eb096b10be402115d33099ebe2629c0ba72375c9103187d47763b5aafbfd0c06f6958478237b01c613e3f89da5273d96d54da8af4936906aec187e69fa787154caaf1c442ae977e057f044b08f3f96677995b14630ccf1da6301f048cc5e87a18a9a945e04c99a890ab4c3cfe7ed606068f09e629c113438ca9f67303a9026f832f74e1ea04a7a2d9067d71141d1ad2d573b79cc9c0b6e7612403939dce60a2bf464a7c153488f1517f11832f6496bbaebcc0c2f5ff27c2a9ea938ef6026f7f51648edefd9b1da3781e98c0e6317242ddbdbeb39c18772d4f756db2c5cc6a2a13706d25be4f65a2c3b8ce0ff2510fd205c38fd9a1bcb33c586a4d591c6e6ecdbfe6926581366f7cc72e56dd89c9246cf16bbc57ed0852040a0daf12f1a307962bbada136cde0bf96467354fcf851d2e279c796472871adb9598601eea525c0f45099fbb2f07007672c31c6bbd059763341edd4742c1df61ab", 0x1000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="eccf17a46591823225bc15f06a2d490cc982f53ac2acea7af373660f7350e2dc3c93e6fd3a7d608a4f67bc68b4a4644dec330cc4f288ca179c62e6f42653fa361698c4ef26") (rerun: 32) prctl$auto(0x1000000003b, 0x1, r8, 0x5, 0x7) madvise$auto(0x0, 0x4, 0xb3) r9 = socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="4d125c0bdf348e6596199695b5a4f1dfd3f27f252a3798355581d182b20b80a63ef17ee9d77c2223728400000001561cf2e7a69a821f24035d8710e83be646030000000000020000", @ANYBLOB="c5d5f7e40967079c154d8ae35362fa06634a78504f1e39e7de83db04a65e5ec8c2d4376c61ec7f2fe18e2d1de5", @ANYBLOB, @ANYRESHEX, @ANYRES32=r5, @ANYRES8=r7, @ANYRES8=r0, @ANYRES8=r7, @ANYRESDEC=r5, @ANYRES16=r9], 0x28}, 0x1, 0x0, 0x0, 0x4c8d4}, 0x0) (async) mmap$auto(0x0, 0x3, 0xdf, 0x1a, 0x401, 0x8001) 3.416195432s ago: executing program 0 (id=597): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd11/sched/queued\x00', 0xa000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000040)=""/124, 0x7c) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r4, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02F0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) r7 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r7, @new_prog_fd=0x4, 0x4, @old_map_fd=r6}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r7, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x4fff, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x20000], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) 3.150795661s ago: executing program 1 (id=598): r0 = socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r1) (async) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) clone$auto(0x2, 0x5feb, 0x0, 0x0, 0x2000000000003) ioperm$auto(0x7, 0x6, 0x80) (async) r2 = wait4$auto(0x0, 0xfffffffffffffffc, 0x60000003, 0x0) (async) ptrace$auto(0x10, 0x0, 0x4, 0x8000040006) (async) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x28100}, 0x20040000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x40, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) (rerun: 32) prctl$auto(0x3, 0x4ced0000000, r2, 0x5, 0x5) sendmmsg$auto(0x3, 0x0, 0x9a5, 0xb00000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{@inferred=r3, 0x4, 0x10003, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000000040000660e070100", @raw=0x7}, 0x6, 0x0, 0x9, @raw=0xff, @integer={0x800, 0x802, 0x4}, "a4699d30a05edbe0d28473c399a7dc9218153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2021009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x18, r5, 0x27c9d9d5b13b6c03, 0x70bd25, 0x25dfdbfd, {}, [@HWSIM_ATTR_NO_VIF={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c884}, 0x64004894) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r6 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r6, 0x0, 0xfccd) 2.160374841s ago: executing program 1 (id=599): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x890006, 0x3ff, 0x8000000008012, r0, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtdblock0\x00', 0x705401, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008013, r1, 0x8000) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x8, 0x7, 0x0, 0x1, 0x3ff) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) getpid() r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x2000000, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8020) move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r4, 0x4018bc13, &(0x7f0000000100)={0x0, 0x9d, 0x1, [0x0]}) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(r3, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) 489.404197ms ago: executing program 0 (id=600): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24044805) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = io_uring_setup$auto(0x3, &(0x7f0000000180)={0xb, 0x7, 0x6, 0xf, 0x1, 0x10001, 0xffffffffffffffff, [0x3, 0x0, 0xb55d], {0x8d, 0x4, 0xb, 0x1, 0x51, 0xffffffff, 0xf230, 0x5, 0x2}, {0x1, 0xfffffffc, 0x5, 0x2cec, 0x8000, 0x8, 0x0, 0x200, 0x9}}) r2 = getsid$auto(0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="440300005487e8a248aa7316c982ccf9c411caddff3fea5c6d4f8e2ab223cf35f1d0acebcdb2839bd83a555a24feb6f47816662147a36da7ad8f6eaf05788ad681e5cc1247536e36c4e13408e9f0b465711030860a0d3b28359a8f8472563196f90943a33f497f6b02be1d5640e48862ec3ab0515e16d41fd0ae2c507a076a910ac741ecf2a26cb15add2e1b3df7ed5d0dc62ca731cfa311d6a54cfe46b7b2ae884ae94bb4a17fabf25bfef922f015aa064396a5371843ccda36c4cee96f1ca9c100acebcb3bb1f6b4925c", @ANYRES64=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0800e000ffffffffdefa941a2426639c8e31ce3f6bf5008566cdb1a031eefdea33c4eead58044efa01bbbc561b8dee619ce8a76a1d0efdea21e299e2169fded13105a557a8f3e37e1658c03259d3a976282cefbb27a994f402400b7c25c4bf71d9b98acb7f961c15f94da038872a017f8dd5b5fa493a7f988e31c830284ff370e77028afc0edbd6583dd9f31c18f9f895b76142465d7a50a89e86b14e1aab66b387c48a1e7a4687dc8210bbb94262d0f8c49b30bd6561c0cc1c484d9297b24f2fa2b925f23aebdff8e517245c7ab000008003b00", @ANYRES32=r2, @ANYBLOB="0b003600052dbf832825000005000600010000000500060000000000"], 0x344}}, 0x804) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x1, 0x10000000000048, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) r4 = epoll_create$auto(0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r5, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) pwrite64$auto(r6, &(0x7f0000000040)='+\x00', 0xfdef, 0x1ff) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1000, 0x8, 0xb, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x400000, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x2, r4) madvise$auto(0x0, 0x400053, 0x9) wait4$auto(r3, 0x0, 0x80000001, 0x0) 364.837983ms ago: executing program 2 (id=601): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x400000000001, 0x0, 0x12) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x3], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) madvise$auto(0x97, 0xffffffff80000001, 0x4) r0 = open(0x0, 0x22240, 0x154) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r1, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x20000000009) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000140)=0x4d) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', &(0x7f0000001cc0)='\x00', 0x0, 0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x5eea, 0x7, [{r2, 0x0, 0x4, 0x6}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3a) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f1008104b275b418224be2782d3fa33101301809dcc6a66a2d6a699683091c2ebc448bf194786c73eb710f607c4a0cd622d6bfa5deac44451b41b7f20e20593060bfcb4d8564b171648f9cdbf911c989e001e9784f74ea23c55497066ea551a466a7489c8fbb37edfd6764cfc9fdf2e8b03063b8e3741a4d4fc56182f49ef769855bdc392bbc144b4f662ecbcc3de942912e1561eb7236afb4b1bb51b7676a9de3e586d25c0dd4a1766a992e711db8c9ca6db209cf095208f34c8540689b0523594b9403000000000000001b66", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf25040000001f000200b48eda657fd220c4ca3299a35ddccd9b7364824540e73f5f68bf9100"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0xa, 0x801, 0x84) clock_nanosleep$auto(0x5, 0x1ff, &(0x7f0000000000)={0x7, 0x8}, &(0x7f0000000040)={0x7, 0x7}) 117.998258ms ago: executing program 1 (id=602): mmap$auto(0x0, 0x0, 0x7, 0xeb1, 0xffffffffffffffff, 0x100) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0xffffffffffffffff, 0x2000a, 0xb3, 0x5e9a, 0x40000000000a5, 0x7fff) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, r0, 0x1, 0x0) (async) unshare$auto(0x2a) (async) socket(0x2, 0x1, 0x100) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async, rerun: 32) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x179, [{0x40000010, 0x400, 0x9}]}) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async, rerun: 32) mmap$auto(0x1, 0x32, 0x5, 0x41e, r3, 0x6) (async, rerun: 32) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) (async) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) pwrite64$auto(r5, &(0x7f0000000340)='/dev/vcsa\x00\x84\xbd\xe3\xa8\xaf\xd0E>0Q!\x8dIY\x1cPw+\x85\xdf\xa2\xfd\xf1\x80\xc6\xde>KC\x931\xf7vvjlm\xae\xf8\xc3\xa8\xbe\xdc9|\xfe}\xaf\x9e\'\xef\x84\xa8\xd3eX\x8f\xf8\x82\xe9\x8d\x86\x15\xa4B\xd3\x1e\xbd\x81\x00q\xca\xfe\xa8<\'~\xec\x0f\xc9\x91\x86\x19\x97}\xba\x1f\x1a\xf8\x15\x8a?\xe0\xeb\xfaOS\x11\x964\xd58\xf9q\xdc\xce\t\f\xa3\xc7\x84j\x15\x81\x16\xbb\x8d\xa9\x04\xc4\x03W(\xbc\x03N\x95\xb8\x1b&,\xeb\x94\xc2p}u#\xd22[\xfe@\xfap\x8c\xa8&\xb3\xbe\x12R\xd1V\xd0\xd4\xb1\x8b\xf3\x86\xd2\xba\r\x8a~]\\wg=\raRc\xb8\xf0\x9e\xc7D\xde\xa6;\x7f\x90\xf8\xf3\xc8f\xa1\n\x8b\xd6\xd5\xc6-\xf6X\x8cS\x10\x98)xo\xa3\x92\xa0=?\xde@\xb1\b8\xe1D\xb7\xf2\b\xfa\xad\xa43\x9dI9d\x152\x96\xd7\x9f\x9e\t^\x827\xfe\xb1!Z\x12\xf9\x1e\x9b\xef\xd5\xb7\x17\x8f\xc8]\x9f\x1b\xfaD\xa7\x1f\x8a\xaf\x919\x8ee\xb4\x13\x05\xf1\x04>\r\x80*j&\x99e\v\xfd\x9b\xd0\xb8y\xa2\xa7\x85\x87*\x00\xea\xe1c\xda\x11\xbcF\xc5\xe0T\x9c\xe9\xd2\xc9\xea\f\x9bt\x18\xc5\xa0o\xae\x91X\t\x8a\x91', 0x7b05, 0x3) (async) sendfile$auto(r4, r4, 0x0, 0x10000800000003) 8.04863ms ago: executing program 3 (id=603): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/veth1_to_hsr/accept_local\x00', 0x2002, 0x0) sendfile$auto(r1, r1, 0x0, 0x80000000003) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0xa, 0xaf, 0x3, 0x17, r1, 0x80000004) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) rseq$auto(0x0, 0xfffffffe, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x244442, 0x0) mlockall$auto(0x800000000000005) clone$auto(0x100000001, 0x4, 0x0, 0x0, 0x200) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r3, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=604): close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x5b1, 0x400, 0x7}, 0x9, 0x0) (async) landlock_restrict_self$auto(r0, 0x0) (async) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x8500, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) setresuid$auto(0x2, 0x7, 0x8080) (async, rerun: 32) faccessat2$auto(0x1, &(0x7f0000000000)='\x00', 0x2, 0x1000) (rerun: 32) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 100.108059][ T5854] cgroup: Unknown subsys name 'net' [ 100.257673][ T5854] cgroup: Unknown subsys name 'cpuset' [ 100.267718][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.187191][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.275621][ T10] cfg80211: failed to load regulatory.db [ 104.485319][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.494634][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.503892][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.512262][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.514627][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.528270][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.537832][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.546237][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.555508][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.556083][ T5187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.623026][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.630614][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.631096][ T5187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.640088][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.646252][ T5187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.653559][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.667646][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.675087][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.690617][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.703087][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.223426][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 105.385299][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 105.420351][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 105.502397][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 105.544282][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.552224][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.560161][ T5869] bridge_slave_0: entered allmulticast mode [ 105.567908][ T5869] bridge_slave_0: entered promiscuous mode [ 105.612986][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.620352][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.627752][ T5869] bridge_slave_1: entered allmulticast mode [ 105.635205][ T5869] bridge_slave_1: entered promiscuous mode [ 105.763451][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.771247][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.779016][ T5879] bridge_slave_0: entered allmulticast mode [ 105.786966][ T5879] bridge_slave_0: entered promiscuous mode [ 105.796303][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.803532][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.810744][ T5879] bridge_slave_1: entered allmulticast mode [ 105.818600][ T5879] bridge_slave_1: entered promiscuous mode [ 105.829441][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.899150][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.911087][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.918659][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.926875][ T5872] bridge_slave_0: entered allmulticast mode [ 105.934337][ T5872] bridge_slave_0: entered promiscuous mode [ 105.941895][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.949893][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.957199][ T5876] bridge_slave_0: entered allmulticast mode [ 105.965260][ T5876] bridge_slave_0: entered promiscuous mode [ 106.014785][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.022063][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.029472][ T5872] bridge_slave_1: entered allmulticast mode [ 106.037948][ T5872] bridge_slave_1: entered promiscuous mode [ 106.045240][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.052385][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.060473][ T5876] bridge_slave_1: entered allmulticast mode [ 106.068140][ T5876] bridge_slave_1: entered promiscuous mode [ 106.078344][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.090188][ T5869] team0: Port device team_slave_0 added [ 106.128187][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.140131][ T5869] team0: Port device team_slave_1 added [ 106.210862][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.223420][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.264542][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.276465][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.302544][ T5879] team0: Port device team_slave_0 added [ 106.311986][ T5879] team0: Port device team_slave_1 added [ 106.319315][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.326475][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.352878][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.397716][ T5876] team0: Port device team_slave_0 added [ 106.419207][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.426493][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.452691][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.482340][ T5876] team0: Port device team_slave_1 added [ 106.511076][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.518732][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.545259][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.559160][ T5872] team0: Port device team_slave_0 added [ 106.594232][ T5871] Bluetooth: hci0: command tx timeout [ 106.602171][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.609340][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.635849][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.647962][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.655399][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.681629][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.695904][ T5872] team0: Port device team_slave_1 added [ 106.718841][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.725883][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.752474][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.763698][ T5871] Bluetooth: hci3: command tx timeout [ 106.764000][ T5875] Bluetooth: hci2: command tx timeout [ 106.769593][ T5187] Bluetooth: hci1: command tx timeout [ 106.821989][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.829394][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.855381][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.898371][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.905455][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.931721][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.971260][ T5876] hsr_slave_0: entered promiscuous mode [ 106.978204][ T5876] hsr_slave_1: entered promiscuous mode [ 106.991958][ T5869] hsr_slave_0: entered promiscuous mode [ 106.998654][ T5869] hsr_slave_1: entered promiscuous mode [ 107.005403][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 107.011220][ T5869] Cannot create hsr debugfs directory [ 107.108318][ T5879] hsr_slave_0: entered promiscuous mode [ 107.115570][ T5879] hsr_slave_1: entered promiscuous mode [ 107.121768][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 107.128036][ T5879] Cannot create hsr debugfs directory [ 107.188214][ T5872] hsr_slave_0: entered promiscuous mode [ 107.194874][ T5872] hsr_slave_1: entered promiscuous mode [ 107.201012][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 107.206992][ T5872] Cannot create hsr debugfs directory [ 107.679218][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.693055][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.706855][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.729052][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.797370][ T5879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.809471][ T5879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.821857][ T5879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.837337][ T5879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.932151][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.967003][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.980610][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.993196][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.138803][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.151698][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.170712][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.182283][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.208230][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.272039][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.307085][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.314533][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.329469][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.360992][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.368210][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.405124][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.480656][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.487894][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.499874][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.507134][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.579462][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.649439][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.677739][ T5871] Bluetooth: hci0: command tx timeout [ 108.686318][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.693550][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.742249][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.758729][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.766109][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.833845][ T5871] Bluetooth: hci2: command tx timeout [ 108.839332][ T5871] Bluetooth: hci3: command tx timeout [ 108.845785][ T5187] Bluetooth: hci1: command tx timeout [ 108.868304][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.940205][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.948187][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.997471][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.004758][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.120860][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.187390][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.356245][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.373115][ T5869] veth0_vlan: entered promiscuous mode [ 109.414740][ T5869] veth1_vlan: entered promiscuous mode [ 109.563731][ T5879] veth0_vlan: entered promiscuous mode [ 109.592541][ T5869] veth0_macvtap: entered promiscuous mode [ 109.621508][ T5869] veth1_macvtap: entered promiscuous mode [ 109.636753][ T5879] veth1_vlan: entered promiscuous mode [ 109.699844][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.724524][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.742910][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.779470][ T2945] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.789838][ T2945] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.809664][ T2945] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.818631][ T2945] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.832767][ T5879] veth0_macvtap: entered promiscuous mode [ 109.858427][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.879862][ T5879] veth1_macvtap: entered promiscuous mode [ 109.990810][ T5876] veth0_vlan: entered promiscuous mode [ 110.041724][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.071773][ T5876] veth1_vlan: entered promiscuous mode [ 110.085486][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.095491][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.110813][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.122869][ T5872] veth0_vlan: entered promiscuous mode [ 110.169213][ T2945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.178662][ T2945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.201089][ T2945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.211137][ T2945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.235796][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.249789][ T5872] veth1_vlan: entered promiscuous mode [ 110.256379][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.279388][ T5876] veth0_macvtap: entered promiscuous mode [ 110.312451][ T5876] veth1_macvtap: entered promiscuous mode [ 110.386523][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.399718][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.456720][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.480841][ T5872] veth0_macvtap: entered promiscuous mode [ 110.529619][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.548287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.560384][ T5872] veth1_macvtap: entered promiscuous mode [ 110.592415][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.609077][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.679624][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.715942][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.731056][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.740638][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.755039][ T5871] Bluetooth: hci0: command tx timeout [ 110.769397][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.846524][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.913781][ T5871] Bluetooth: hci2: command tx timeout [ 110.919290][ T5871] Bluetooth: hci3: command tx timeout [ 110.924850][ T5871] Bluetooth: hci1: command tx timeout [ 111.089286][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.259846][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.320799][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.331559][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.351178][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.359106][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.853039][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.903691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.912521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.921785][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.997925][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.086834][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.117631][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.124303][ T5967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.260363][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.283698][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.343423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 112.753383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 112.764344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.843411][ T5871] Bluetooth: hci0: command tx timeout [ 112.995705][ T5871] Bluetooth: hci1: command tx timeout [ 113.001259][ T5875] Bluetooth: hci3: command tx timeout [ 113.001308][ T5187] Bluetooth: hci2: command tx timeout [ 113.188518][ T5973] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.223988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.232761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.303393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.333962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.342685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.528666][ T5983] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.484668][ T6010] Zero length message leads to an empty skb [ 119.155449][ T6019] ALSA: mixer_oss: invalid OSS volume '' [ 122.565489][ T6041] kexec: Could not allocate control_code_buffer [ 124.118845][ T6074] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 124.220903][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 126.386326][ T6075] random: crng reseeded on system resumption [ 126.474194][ T6073] FAULT_INJECTION: forcing a failure. [ 126.474194][ T6073] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.593622][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 126.593664][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.593688][ T6073] Call Trace: [ 126.593698][ T6073] [ 126.593710][ T6073] dump_stack_lvl+0x16c/0x1f0 [ 126.593769][ T6073] should_fail_ex+0x512/0x640 [ 126.593829][ T6073] _copy_from_user+0x2e/0xd0 [ 126.593866][ T6073] get_timespec64+0x8b/0x1b0 [ 126.593905][ T6073] ? __pfx_get_timespec64+0x10/0x10 [ 126.593942][ T6073] ? ktime_get+0x200/0x310 [ 126.593991][ T6073] __x64_sys_futex+0x288/0x4c0 [ 126.594039][ T6073] ? __pfx___x64_sys_futex+0x10/0x10 [ 126.594082][ T6073] ? xfd_validate_state+0x61/0x180 [ 126.594142][ T6073] do_syscall_64+0xcd/0x490 [ 126.594196][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.594229][ T6073] RIP: 0033:0x7ff9be18ebe9 [ 126.594261][ T6073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.594291][ T6073] RSP: 002b:00007fff3b5afb98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.594326][ T6073] RAX: ffffffffffffffda RBX: 000000000001edec RCX: 00007ff9be18ebe9 [ 126.594347][ T6073] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9be3c618c [ 126.594367][ T6073] RBP: 0000000000000032 R08: 00007ff9bef09000 R09: 0000001c3b5afe8f [ 126.594386][ T6073] R10: 00007fff3b5afc90 R11: 0000000000000246 R12: 00007ff9be3c618c [ 126.594405][ T6073] R13: 00007fff3b5afc90 R14: 000000000001ee1e R15: 00007fff3b5afcb0 [ 126.594476][ T6073] [ 127.689492][ T6097] mmap: syz.0.31 (6097) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.683098][ T6097] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 130.529090][ T6112] process 'syz.0.35' launched '/dev/fd/9' with NULL argv: empty string added [ 131.085488][ T6112] FAULT_INJECTION: forcing a failure. [ 131.085488][ T6112] name failslab, interval 1, probability 0, space 0, times 1 [ 131.217565][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 131.217602][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.217621][ T6112] Call Trace: [ 131.217632][ T6112] [ 131.217644][ T6112] dump_stack_lvl+0x16c/0x1f0 [ 131.217703][ T6112] should_fail_ex+0x512/0x640 [ 131.217743][ T6112] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 131.217778][ T6112] should_failslab+0xc2/0x120 [ 131.217810][ T6112] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 131.217842][ T6112] ? ipv4_sysctl_init_net+0x3e/0x350 [ 131.217872][ T6112] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 131.217904][ T6112] kmemdup_noprof+0x29/0x60 [ 131.217934][ T6112] ipv4_sysctl_init_net+0x3e/0x350 [ 131.217963][ T6112] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 131.217992][ T6112] ops_init+0x1df/0x5f0 [ 131.218033][ T6112] setup_net+0x10f/0x380 [ 131.218051][ T6112] ? lockdep_init_map_type+0x5c/0x280 [ 131.218086][ T6112] ? __pfx_setup_net+0x10/0x10 [ 131.218108][ T6112] ? debug_mutex_init+0x37/0x70 [ 131.218135][ T6112] copy_net_ns+0x2a6/0x5f0 [ 131.218170][ T6112] create_new_namespaces+0x3ea/0xa90 [ 131.218205][ T6112] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 131.218236][ T6112] ksys_unshare+0x45b/0xa40 [ 131.218270][ T6112] ? __pfx_ksys_unshare+0x10/0x10 [ 131.218304][ T6112] ? xfd_validate_state+0x61/0x180 [ 131.218348][ T6112] __x64_sys_unshare+0x31/0x40 [ 131.218380][ T6112] do_syscall_64+0xcd/0x490 [ 131.218419][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.218442][ T6112] RIP: 0033:0x7ff9be18ebe9 [ 131.218461][ T6112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.218483][ T6112] RSP: 002b:00007ff9bc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 131.218506][ T6112] RAX: ffffffffffffffda RBX: 00007ff9be3c5fa0 RCX: 00007ff9be18ebe9 [ 131.218521][ T6112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 131.218535][ T6112] RBP: 00007ff9be211e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.218549][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.218562][ T6112] R13: 00007ff9be3c6038 R14: 00007ff9be3c5fa0 R15: 00007fff3b5afa38 [ 131.218601][ T6112] [ 134.057739][ T6152] svc: failed to register nfsdv3 RPC service (errno 111). [ 134.126091][ T6152] svc: failed to register nfsaclv3 RPC service (errno 111). [ 135.860358][ T6170] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 138.980707][ T6199] syz.2.51 uses obsolete (PF_INET,SOCK_PACKET) [ 140.530576][ T6204] syz.3.52 (6204): /proc/6201/oom_adj is deprecated, please use /proc/6201/oom_score_adj instead. [ 143.231764][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.238186][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.749555][ T6237] ubi0: attaching mtd0 [ 144.761415][ T6237] ubi0: scanning is finished [ 144.766111][ T6237] ubi0: empty MTD device detected [ 145.041260][ T6237] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 145.048839][ T6237] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 145.130581][ T6237] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 145.137635][ T6237] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 145.242964][ T6237] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 145.251976][ T6237] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 145.261920][ T6237] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2477908427 [ 145.278462][ T6237] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 145.297246][ T6239] ubi0: detaching mtd0 [ 145.846885][ T6239] ubi0: mtd0 is detached [ 148.660499][ T6275] sysfs_service_op_show: Client not running :-5: [ 150.355051][ T5187] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 152.279207][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 154.481373][ T6340] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 155.024139][ T5187] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 157.059245][ T5187] Bluetooth: hci2: command tx timeout [ 158.942210][ T6367] kexec: Could not allocate control_code_buffer [ 161.611761][ T6412] ICMPv6: process `syz.0.83' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 166.660887][ T6458] FAULT_INJECTION: forcing a failure. [ 166.660887][ T6458] name failslab, interval 1, probability 0, space 0, times 0 [ 166.678877][ T6458] CPU: 1 UID: 0 PID: 6458 Comm: syz.2.88 Not tainted syzkaller #0 PREEMPT(full) [ 166.678920][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.678940][ T6458] Call Trace: [ 166.678950][ T6458] [ 166.678961][ T6458] dump_stack_lvl+0x16c/0x1f0 [ 166.679017][ T6458] should_fail_ex+0x512/0x640 [ 166.679068][ T6458] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 166.679111][ T6458] should_failslab+0xc2/0x120 [ 166.679155][ T6458] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 166.679195][ T6458] ? getname_flags.part.0+0x4c/0x550 [ 166.679253][ T6458] getname_flags.part.0+0x4c/0x550 [ 166.679307][ T6458] getname_flags+0x93/0xf0 [ 166.679342][ T6458] user_path_at+0x24/0x60 [ 166.679382][ T6458] __x64_sys_umount+0x10a/0x1a0 [ 166.679420][ T6458] ? __pfx___x64_sys_umount+0x10/0x10 [ 166.679469][ T6458] ? rcu_is_watching+0x12/0xc0 [ 166.679502][ T6458] do_syscall_64+0xcd/0x490 [ 166.679551][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.679580][ T6458] RIP: 0033:0x7f9b7018ebe9 [ 166.679620][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.679649][ T6458] RSP: 002b:00007f9b70fe5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 166.679677][ T6458] RAX: ffffffffffffffda RBX: 00007f9b703c6270 RCX: 00007f9b7018ebe9 [ 166.679696][ T6458] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000005c0 [ 166.679714][ T6458] RBP: 00007f9b70211e19 R08: 0000000000000000 R09: 0000000000000000 [ 166.679731][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.679748][ T6458] R13: 00007f9b703c6308 R14: 00007f9b703c6270 R15: 00007ffd74e33508 [ 166.679785][ T6458] [ 167.030472][ T6456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.755529][ T6457] FAULT_INJECTION: forcing a failure. [ 167.755529][ T6457] name failslab, interval 1, probability 0, space 0, times 0 [ 167.824380][ T6457] CPU: 0 UID: 0 PID: 6457 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT(full) [ 167.824425][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.824444][ T6457] Call Trace: [ 167.824455][ T6457] [ 167.824467][ T6457] dump_stack_lvl+0x16c/0x1f0 [ 167.824532][ T6457] should_fail_ex+0x512/0x640 [ 167.824586][ T6457] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 167.824632][ T6457] should_failslab+0xc2/0x120 [ 167.824679][ T6457] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 167.824721][ T6457] ? __pmd_alloc+0xbf/0x930 [ 167.824777][ T6457] __pmd_alloc+0xbf/0x930 [ 167.824826][ T6457] ? __pud_alloc+0x526/0x750 [ 167.824888][ T6457] copy_page_range+0x3eaf/0x5c80 [ 167.824919][ T6457] ? copy_process+0x4081/0x7690 [ 167.824975][ T6457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.825018][ T6457] ? mas_wr_store_entry+0xa14/0x2550 [ 167.825045][ T6457] ? mas_destroy+0x5de/0xa20 [ 167.825071][ T6457] ? __pfx_copy_page_range+0x10/0x10 [ 167.825102][ T6457] ? mas_store+0x7a9/0x1160 [ 167.825130][ T6457] ? find_held_lock+0x2b/0x80 [ 167.825158][ T6457] ? __pfx_mas_store+0x10/0x10 [ 167.825182][ T6457] ? __vma_enter_locked+0x163/0x3f0 [ 167.825227][ T6457] dup_mmap+0xe88/0x21d0 [ 167.825285][ T6457] ? __pfx_dup_mmap+0x10/0x10 [ 167.825369][ T6457] copy_process+0x4081/0x7690 [ 167.825405][ T6457] ? __pfx___futex_wait+0x10/0x10 [ 167.825446][ T6457] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 167.825498][ T6457] ? __pfx_copy_process+0x10/0x10 [ 167.825539][ T6457] ? futex_private_hash_put+0x176/0x300 [ 167.825577][ T6457] ? futex_private_hash_put+0x18a/0x300 [ 167.825617][ T6457] kernel_clone+0xfc/0x930 [ 167.825655][ T6457] ? __pfx_kernel_clone+0x10/0x10 [ 167.825712][ T6457] __do_sys_clone+0xce/0x120 [ 167.825749][ T6457] ? __pfx___do_sys_clone+0x10/0x10 [ 167.825786][ T6457] ? ksys_unshare+0x687/0xa40 [ 167.825839][ T6457] ? xfd_validate_state+0x61/0x180 [ 167.825893][ T6457] do_syscall_64+0xcd/0x490 [ 167.825940][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.825968][ T6457] RIP: 0033:0x7f9fbe58ebe9 [ 167.825991][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.826019][ T6457] RSP: 002b:00007f9fbc7d4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 167.826046][ T6457] RAX: ffffffffffffffda RBX: 00007f9fbe7c6090 RCX: 00007f9fbe58ebe9 [ 167.826064][ T6457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 167.826080][ T6457] RBP: 00007f9fbe611e19 R08: 0000000000000000 R09: 0000000000000000 [ 167.826096][ T6457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.826112][ T6457] R13: 00007f9fbe7c6128 R14: 00007f9fbe7c6090 R15: 00007ffc3d640258 [ 167.826148][ T6457] [ 169.057520][ T5187] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 169.899053][ T6490] can: request_module (can-proto-0) failed. [ 171.150342][ T5187] Bluetooth: hci3: command tx timeout [ 173.429881][ T6527] ubi0: attaching mtd0 [ 173.440317][ T6527] ubi0: scanning is finished [ 173.742100][ T6535] FAULT_INJECTION: forcing a failure. [ 173.742100][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 173.767733][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.3.105 Not tainted syzkaller #0 PREEMPT(full) [ 173.767764][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.767777][ T6535] Call Trace: [ 173.767784][ T6535] [ 173.767794][ T6535] dump_stack_lvl+0x16c/0x1f0 [ 173.767834][ T6535] should_fail_ex+0x512/0x640 [ 173.767870][ T6535] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 173.767905][ T6535] should_failslab+0xc2/0x120 [ 173.767935][ T6535] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 173.767965][ T6535] ? kobject_init_and_add+0xe7/0x190 [ 173.767987][ T6535] ? netdev_queue_update_kobjects+0x32d/0x720 [ 173.768012][ T6535] ? netdev_register_kobject+0x2b3/0x3d0 [ 173.768034][ T6535] ? kstrdup_const+0x63/0x80 [ 173.768075][ T6535] kstrdup+0x53/0x100 [ 173.768104][ T6535] kstrdup_const+0x63/0x80 [ 173.768132][ T6535] __kernfs_new_node+0x9b/0x8e0 [ 173.768163][ T6535] ? __pfx_number+0x10/0x10 [ 173.768187][ T6535] ? __pfx___kernfs_new_node+0x10/0x10 [ 173.768223][ T6535] ? find_held_lock+0x2b/0x80 [ 173.768247][ T6535] ? kernfs_root+0xee/0x2a0 [ 173.768281][ T6535] kernfs_new_node+0x13c/0x1e0 [ 173.768319][ T6535] kernfs_create_dir_ns+0x4c/0x1a0 [ 173.768356][ T6535] sysfs_create_dir_ns+0x13a/0x2b0 [ 173.768385][ T6535] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 173.768413][ T6535] ? find_held_lock+0x2b/0x80 [ 173.768450][ T6535] ? do_raw_spin_unlock+0x172/0x230 [ 173.768503][ T6535] kobject_add_internal+0x2c4/0x9b0 [ 173.768542][ T6535] kobject_init_and_add+0x11b/0x190 [ 173.768571][ T6535] ? __pfx_kobject_init_and_add+0x10/0x10 [ 173.768597][ T6535] ? ops_init+0x1df/0x5f0 [ 173.768640][ T6535] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 173.768669][ T6535] ? ksys_unshare+0x45b/0xa40 [ 173.768703][ T6535] ? __x64_sys_unshare+0x31/0x40 [ 173.768736][ T6535] ? do_syscall_64+0xcd/0x490 [ 173.768777][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.768817][ T6535] netdev_queue_update_kobjects+0x32d/0x720 [ 173.768856][ T6535] netdev_register_kobject+0x2b3/0x3d0 [ 173.768891][ T6535] register_netdevice+0x13dc/0x2270 [ 173.768923][ T6535] ? __pfx_register_netdevice+0x10/0x10 [ 173.768961][ T6535] __ip_tunnel_create+0x540/0x6e0 [ 173.768991][ T6535] ? __pfx___ip_tunnel_create+0x10/0x10 [ 173.769032][ T6535] ip_tunnel_init_net+0x22f/0x7d0 [ 173.769074][ T6535] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 173.769113][ T6535] ? trace_kmalloc+0x2b/0xd0 [ 173.769155][ T6535] ? __kmalloc_noprof+0x242/0x510 [ 173.769190][ T6535] ? lockdep_init_map_type+0x5c/0x280 [ 173.769239][ T6535] ? __pfx_ipgre_init_net+0x10/0x10 [ 173.769288][ T6535] ops_init+0x1df/0x5f0 [ 173.769346][ T6535] setup_net+0x10f/0x380 [ 173.769372][ T6535] ? lockdep_init_map_type+0x5c/0x280 [ 173.769418][ T6535] ? __pfx_setup_net+0x10/0x10 [ 173.769450][ T6535] ? debug_mutex_init+0x37/0x70 [ 173.769488][ T6535] copy_net_ns+0x2a6/0x5f0 [ 173.769526][ T6535] create_new_namespaces+0x3ea/0xa90 [ 173.769574][ T6535] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 173.769616][ T6535] ksys_unshare+0x45b/0xa40 [ 173.769661][ T6535] ? __pfx_ksys_unshare+0x10/0x10 [ 173.769708][ T6535] ? xfd_validate_state+0x61/0x180 [ 173.769767][ T6535] __x64_sys_unshare+0x31/0x40 [ 173.769811][ T6535] do_syscall_64+0xcd/0x490 [ 173.769866][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.769898][ T6535] RIP: 0033:0x7feccad8ebe9 [ 173.769923][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.769954][ T6535] RSP: 002b:00007feccbb54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 173.769984][ T6535] RAX: ffffffffffffffda RBX: 00007feccafc5fa0 RCX: 00007feccad8ebe9 [ 173.770005][ T6535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 173.770024][ T6535] RBP: 00007feccae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 173.770050][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.770069][ T6535] R13: 00007feccafc6038 R14: 00007feccafc5fa0 R15: 00007ffd0950f278 [ 173.770112][ T6535] [ 173.770141][ T6535] kobject: kobject_add_internal failed for tx-0 (error: -12 parent: queues) [ 174.201328][ T6527] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 174.242696][ T6527] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 174.303720][ T6527] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 174.328483][ T6527] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 174.379029][ T6527] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 174.395914][ T6527] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 174.409690][ T6527] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2477908427 [ 174.421218][ T6527] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 174.444489][ T6539] ubi0: background thread "ubi_bgt0d" started, PID 6539 [ 174.527239][ T6547] program syz.2.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.588192][ T6543] warning: `syz.2.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.237319][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.243886][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.253642][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.260308][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.271073][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.280262][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.290012][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.297430][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 178.850109][ T6589] usb usb36: usbfs: process 6589 (syz.1.117) did not claim interface 0 before use [ 180.236603][ T6603] ubi: mtd0 is already attached to ubi0 [ 180.456805][ T6605] program syz.1.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.834462][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.840826][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.853880][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.860229][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.896121][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.904373][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.933050][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.939584][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.438047][ T6615] FAULT_INJECTION: forcing a failure. [ 181.438047][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 181.512146][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.2.122 Not tainted syzkaller #0 PREEMPT(full) [ 181.512178][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.512192][ T6615] Call Trace: [ 181.512200][ T6615] [ 181.512209][ T6615] dump_stack_lvl+0x16c/0x1f0 [ 181.512250][ T6615] should_fail_ex+0x512/0x640 [ 181.512295][ T6615] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 181.512327][ T6615] should_failslab+0xc2/0x120 [ 181.512359][ T6615] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 181.512389][ T6615] ? __kernfs_new_node+0xd2/0x8e0 [ 181.512423][ T6615] __kernfs_new_node+0xd2/0x8e0 [ 181.512457][ T6615] ? __pfx___kernfs_new_node+0x10/0x10 [ 181.512495][ T6615] ? find_held_lock+0x2b/0x80 [ 181.512520][ T6615] ? kernfs_root+0xee/0x2a0 [ 181.512555][ T6615] kernfs_new_node+0x13c/0x1e0 [ 181.512595][ T6615] __kernfs_create_file+0x53/0x350 [ 181.512622][ T6615] sysfs_add_file_mode_ns+0x207/0x3c0 [ 181.512659][ T6615] internal_create_group+0x578/0xf30 [ 181.512698][ T6615] ? __pfx_internal_create_group+0x10/0x10 [ 181.512734][ T6615] ? kernfs_create_link+0x1bd/0x240 [ 181.512763][ T6615] internal_create_groups+0x9d/0x150 [ 181.512797][ T6615] device_add+0xf30/0x1aa0 [ 181.512826][ T6615] ? __pfx_device_add+0x10/0x10 [ 181.512851][ T6615] ? lockdep_init_map_type+0x5c/0x280 [ 181.512885][ T6615] ? __init_waitqueue_head+0xca/0x150 [ 181.512934][ T6615] netdev_register_kobject+0x1a9/0x3d0 [ 181.512965][ T6615] register_netdevice+0x13dc/0x2270 [ 181.512994][ T6615] ? __pfx_register_netdevice+0x10/0x10 [ 181.513026][ T6615] __ip_tunnel_create+0x540/0x6e0 [ 181.513051][ T6615] ? __pfx___ip_tunnel_create+0x10/0x10 [ 181.513084][ T6615] ip_tunnel_init_net+0x22f/0x7d0 [ 181.513112][ T6615] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 181.513142][ T6615] ? trace_kmalloc+0x2b/0xd0 [ 181.513174][ T6615] ? __kmalloc_noprof+0x242/0x510 [ 181.513200][ T6615] ? lockdep_init_map_type+0x5c/0x280 [ 181.513236][ T6615] ? __pfx_ipgre_init_net+0x10/0x10 [ 181.513271][ T6615] ops_init+0x1df/0x5f0 [ 181.513318][ T6615] setup_net+0x10f/0x380 [ 181.513336][ T6615] ? lockdep_init_map_type+0x5c/0x280 [ 181.513370][ T6615] ? __pfx_setup_net+0x10/0x10 [ 181.513392][ T6615] ? debug_mutex_init+0x37/0x70 [ 181.513419][ T6615] copy_net_ns+0x2a6/0x5f0 [ 181.513447][ T6615] create_new_namespaces+0x3ea/0xa90 [ 181.513481][ T6615] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 181.513512][ T6615] ksys_unshare+0x45b/0xa40 [ 181.513545][ T6615] ? __pfx_ksys_unshare+0x10/0x10 [ 181.513579][ T6615] ? xfd_validate_state+0x61/0x180 [ 181.513623][ T6615] __x64_sys_unshare+0x31/0x40 [ 181.513659][ T6615] do_syscall_64+0xcd/0x490 [ 181.513699][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.513724][ T6615] RIP: 0033:0x7f9b7018ebe9 [ 181.513742][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.513764][ T6615] RSP: 002b:00007f9b71048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 181.513787][ T6615] RAX: ffffffffffffffda RBX: 00007f9b703c5fa0 RCX: 00007f9b7018ebe9 [ 181.513802][ T6615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 181.513816][ T6615] RBP: 00007f9b70211e19 R08: 0000000000000000 R09: 0000000000000000 [ 181.513831][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.513844][ T6615] R13: 00007f9b703c6038 R14: 00007f9b703c5fa0 R15: 00007ffd74e33508 [ 181.513875][ T6615] [ 181.856446][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.697080][ T6648] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 184.798618][ T6663] program syz.3.134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.335255][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.344940][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 185.369849][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.378286][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 185.514064][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.522869][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 185.532730][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.539050][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.139112][ T6669] ubi: mtd0 is already attached to ubi0 [ 186.440392][ T6679] FAULT_INJECTION: forcing a failure. [ 186.440392][ T6679] name failslab, interval 1, probability 0, space 0, times 0 [ 186.457641][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: syz.1.138 Not tainted syzkaller #0 PREEMPT(full) [ 186.457670][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.457683][ T6679] Call Trace: [ 186.457690][ T6679] [ 186.457698][ T6679] dump_stack_lvl+0x16c/0x1f0 [ 186.457734][ T6679] should_fail_ex+0x512/0x640 [ 186.457768][ T6679] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 186.457798][ T6679] should_failslab+0xc2/0x120 [ 186.457827][ T6679] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 186.457853][ T6679] ? __kernfs_new_node+0xd2/0x8e0 [ 186.457885][ T6679] __kernfs_new_node+0xd2/0x8e0 [ 186.457913][ T6679] ? __pfx_stack_trace_save+0x10/0x10 [ 186.457939][ T6679] ? __pfx___kernfs_new_node+0x10/0x10 [ 186.457974][ T6679] ? find_held_lock+0x2b/0x80 [ 186.457996][ T6679] ? kernfs_root+0xee/0x2a0 [ 186.458028][ T6679] kernfs_new_node+0x13c/0x1e0 [ 186.458060][ T6679] ? device_get_ownership+0x7c/0xa0 [ 186.458086][ T6679] kernfs_create_dir_ns+0x4c/0x1a0 [ 186.458121][ T6679] sysfs_create_dir_ns+0x13a/0x2b0 [ 186.458148][ T6679] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 186.458179][ T6679] ? kobject_set_name_vargs+0xfe/0x140 [ 186.458201][ T6679] ? kobject_set_name+0xc7/0x100 [ 186.458222][ T6679] ? __pfx_kobject_set_name+0x10/0x10 [ 186.458248][ T6679] kobject_add_internal+0x2c4/0x9b0 [ 186.458274][ T6679] kset_register+0x198/0x2b0 [ 186.458295][ T6679] kset_create_and_add+0x123/0x190 [ 186.458318][ T6679] netdev_register_kobject+0x1ef/0x3d0 [ 186.458345][ T6679] register_netdevice+0x13dc/0x2270 [ 186.458372][ T6679] ? __pfx_register_netdevice+0x10/0x10 [ 186.458401][ T6679] __ip_tunnel_create+0x540/0x6e0 [ 186.458424][ T6679] ? __pfx___ip_tunnel_create+0x10/0x10 [ 186.458453][ T6679] ip_tunnel_init_net+0x22f/0x7d0 [ 186.458478][ T6679] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 186.458506][ T6679] ? trace_kmalloc+0x2b/0xd0 [ 186.458535][ T6679] ? __kmalloc_noprof+0x242/0x510 [ 186.458559][ T6679] ? lockdep_init_map_type+0x5c/0x280 [ 186.458592][ T6679] ? __pfx_ipgre_init_net+0x10/0x10 [ 186.458643][ T6679] ops_init+0x1df/0x5f0 [ 186.458686][ T6679] setup_net+0x10f/0x380 [ 186.458704][ T6679] ? lockdep_init_map_type+0x5c/0x280 [ 186.458736][ T6679] ? __pfx_setup_net+0x10/0x10 [ 186.458758][ T6679] ? debug_mutex_init+0x37/0x70 [ 186.458783][ T6679] copy_net_ns+0x2a6/0x5f0 [ 186.458809][ T6679] create_new_namespaces+0x3ea/0xa90 [ 186.458843][ T6679] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 186.458872][ T6679] ksys_unshare+0x45b/0xa40 [ 186.458904][ T6679] ? __pfx_ksys_unshare+0x10/0x10 [ 186.458937][ T6679] ? xfd_validate_state+0x61/0x180 [ 186.458979][ T6679] __x64_sys_unshare+0x31/0x40 [ 186.459010][ T6679] do_syscall_64+0xcd/0x490 [ 186.459048][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.459071][ T6679] RIP: 0033:0x7f9fbe58ebe9 [ 186.459089][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.459111][ T6679] RSP: 002b:00007f9fbc7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 186.459133][ T6679] RAX: ffffffffffffffda RBX: 00007f9fbe7c5fa0 RCX: 00007f9fbe58ebe9 [ 186.459152][ T6679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 186.459166][ T6679] RBP: 00007f9fbe611e19 R08: 0000000000000000 R09: 0000000000000000 [ 186.459179][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.459192][ T6679] R13: 00007f9fbe7c6038 R14: 00007f9fbe7c5fa0 R15: 00007ffc3d640258 [ 186.459221][ T6679] [ 186.839220][ T6679] kobject: kobject_add_internal failed for queues (error: -12 parent: gre0) [ 189.991510][ T5187] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 190.000204][ T5187] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 190.013834][ T5187] CPU: 1 UID: 0 PID: 5187 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 190.013872][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.013888][ T5187] Workqueue: hci2 hci_rx_work [ 190.013925][ T5187] Call Trace: [ 190.013932][ T5187] [ 190.013941][ T5187] dump_stack_lvl+0x16c/0x1f0 [ 190.013979][ T5187] sysfs_warn_dup+0x7f/0xa0 [ 190.014008][ T5187] sysfs_create_dir_ns+0x24b/0x2b0 [ 190.014037][ T5187] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 190.014065][ T5187] ? find_held_lock+0x2b/0x80 [ 190.014094][ T5187] ? do_raw_spin_unlock+0x172/0x230 [ 190.014133][ T5187] kobject_add_internal+0x2c4/0x9b0 [ 190.014162][ T5187] kobject_add+0x16e/0x240 [ 190.014184][ T5187] ? __pfx_kobject_add+0x10/0x10 [ 190.014209][ T5187] ? do_raw_spin_unlock+0x172/0x230 [ 190.014247][ T5187] ? kobject_put+0xab/0x5a0 [ 190.014276][ T5187] device_add+0x288/0x1aa0 [ 190.014302][ T5187] ? __pfx_dev_set_name+0x10/0x10 [ 190.014332][ T5187] ? __pfx_device_add+0x10/0x10 [ 190.014358][ T5187] ? mgmt_send_event_skb+0x2fb/0x460 [ 190.014396][ T5187] hci_conn_add_sysfs+0x17e/0x230 [ 190.014431][ T5187] le_conn_complete_evt+0x1075/0x1d70 [ 190.014461][ T5187] ? preempt_count_sub+0x130/0x160 [ 190.014491][ T5187] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 190.014521][ T5187] ? bt_warn+0xe4/0x120 [ 190.014546][ T5187] ? __pfx_bt_warn+0x10/0x10 [ 190.014580][ T5187] hci_le_conn_complete_evt+0x23c/0x370 [ 190.014625][ T5187] hci_le_meta_evt+0x357/0x5e0 [ 190.014659][ T5187] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 190.014694][ T5187] hci_event_packet+0x685/0x11c0 [ 190.014724][ T5187] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 190.014759][ T5187] ? __pfx_hci_event_packet+0x10/0x10 [ 190.014792][ T5187] ? kcov_remote_start+0x3c9/0x6d0 [ 190.014827][ T5187] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.014876][ T5187] hci_rx_work+0x2c5/0x16b0 [ 190.014923][ T5187] ? rcu_is_watching+0x12/0xc0 [ 190.014951][ T5187] process_one_work+0x9cf/0x1b70 [ 190.015000][ T5187] ? __pfx_process_one_work+0x10/0x10 [ 190.015045][ T5187] ? assign_work+0x1a0/0x250 [ 190.015082][ T5187] worker_thread+0x6c8/0xf10 [ 190.015110][ T5187] ? __kthread_parkme+0x19e/0x250 [ 190.015140][ T5187] ? __pfx_worker_thread+0x10/0x10 [ 190.015160][ T5187] kthread+0x3c5/0x780 [ 190.015194][ T5187] ? __pfx_kthread+0x10/0x10 [ 190.015230][ T5187] ? rcu_is_watching+0x12/0xc0 [ 190.015252][ T5187] ? __pfx_kthread+0x10/0x10 [ 190.015287][ T5187] ret_from_fork+0x5d7/0x6f0 [ 190.015321][ T5187] ? __pfx_kthread+0x10/0x10 [ 190.015356][ T5187] ret_from_fork_asm+0x1a/0x30 [ 190.015397][ T5187] [ 190.015423][ T5187] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 190.286143][ T5187] Bluetooth: hci2: failed to register connection device [ 190.437791][ T6715] can: request_module (can-proto-0) failed. [ 192.316743][ T5187] Bluetooth: hci2: command tx timeout [ 192.681091][ T6739] FAULT_INJECTION: forcing a failure. [ 192.681091][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 192.697308][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.0.149 Not tainted syzkaller #0 PREEMPT(full) [ 192.697351][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.697369][ T6739] Call Trace: [ 192.697380][ T6739] [ 192.697393][ T6739] dump_stack_lvl+0x16c/0x1f0 [ 192.697452][ T6739] should_fail_ex+0x512/0x640 [ 192.697514][ T6739] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 192.697560][ T6739] should_failslab+0xc2/0x120 [ 192.697605][ T6739] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 192.697646][ T6739] ? __kernfs_new_node+0xd2/0x8e0 [ 192.697696][ T6739] __kernfs_new_node+0xd2/0x8e0 [ 192.697743][ T6739] ? __pfx___kernfs_new_node+0x10/0x10 [ 192.697810][ T6739] ? find_held_lock+0x2b/0x80 [ 192.697842][ T6739] ? kernfs_root+0xee/0x2a0 [ 192.697892][ T6739] kernfs_new_node+0x13c/0x1e0 [ 192.697946][ T6739] __kernfs_create_file+0x53/0x350 [ 192.697983][ T6739] sysfs_add_file_mode_ns+0x207/0x3c0 [ 192.698033][ T6739] internal_create_group+0x578/0xf30 [ 192.698087][ T6739] ? __pfx_internal_create_group+0x10/0x10 [ 192.698137][ T6739] ? kernfs_create_link+0x1bd/0x240 [ 192.698176][ T6739] internal_create_groups+0x9d/0x150 [ 192.698224][ T6739] device_add+0xf30/0x1aa0 [ 192.698264][ T6739] ? __pfx_device_add+0x10/0x10 [ 192.698299][ T6739] ? lockdep_init_map_type+0x5c/0x280 [ 192.698346][ T6739] ? __init_waitqueue_head+0xca/0x150 [ 192.698407][ T6739] netdev_register_kobject+0x1a9/0x3d0 [ 192.698449][ T6739] register_netdevice+0x13dc/0x2270 [ 192.698490][ T6739] ? __pfx_register_netdevice+0x10/0x10 [ 192.698541][ T6739] __ip_tunnel_create+0x540/0x6e0 [ 192.698576][ T6739] ? __pfx___ip_tunnel_create+0x10/0x10 [ 192.698621][ T6739] ip_tunnel_init_net+0x22f/0x7d0 [ 192.698660][ T6739] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 192.698701][ T6739] ? trace_kmalloc+0x2b/0xd0 [ 192.698744][ T6739] ? __kmalloc_noprof+0x242/0x510 [ 192.698780][ T6739] ? lockdep_init_map_type+0x5c/0x280 [ 192.698829][ T6739] ? __pfx_ipgre_init_net+0x10/0x10 [ 192.698876][ T6739] ops_init+0x1df/0x5f0 [ 192.698931][ T6739] setup_net+0x10f/0x380 [ 192.698957][ T6739] ? lockdep_init_map_type+0x5c/0x280 [ 192.699003][ T6739] ? __pfx_setup_net+0x10/0x10 [ 192.699033][ T6739] ? debug_mutex_init+0x37/0x70 [ 192.699070][ T6739] copy_net_ns+0x2a6/0x5f0 [ 192.699105][ T6739] create_new_namespaces+0x3ea/0xa90 [ 192.699152][ T6739] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 192.699194][ T6739] ksys_unshare+0x45b/0xa40 [ 192.699239][ T6739] ? __pfx_ksys_unshare+0x10/0x10 [ 192.699286][ T6739] ? xfd_validate_state+0x61/0x180 [ 192.699347][ T6739] __x64_sys_unshare+0x31/0x40 [ 192.699391][ T6739] do_syscall_64+0xcd/0x490 [ 192.699445][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.699476][ T6739] RIP: 0033:0x7ff9be18ebe9 [ 192.699510][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.699542][ T6739] RSP: 002b:00007ff9bc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.699572][ T6739] RAX: ffffffffffffffda RBX: 00007ff9be3c5fa0 RCX: 00007ff9be18ebe9 [ 192.699593][ T6739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 192.699612][ T6739] RBP: 00007ff9be211e19 R08: 0000000000000000 R09: 0000000000000000 [ 192.699631][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.699651][ T6739] R13: 00007ff9be3c6038 R14: 00007ff9be3c5fa0 R15: 00007fff3b5afa38 [ 192.699692][ T6739] [ 193.437293][ T6751] ubi: mtd0 is already attached to ubi0 [ 193.629737][ T6752] can: request_module (can-proto-0) failed. [ 197.440827][ T5187] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 199.513238][ T5187] Bluetooth: hci0: command tx timeout [ 200.517626][ T6814] FAULT_INJECTION: forcing a failure. [ 200.517626][ T6814] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 200.545954][ T6814] CPU: 0 UID: 0 PID: 6814 Comm: syz.3.162 Not tainted syzkaller #0 PREEMPT(full) [ 200.545986][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.546001][ T6814] Call Trace: [ 200.546009][ T6814] [ 200.546019][ T6814] dump_stack_lvl+0x16c/0x1f0 [ 200.546061][ T6814] should_fail_ex+0x512/0x640 [ 200.546103][ T6814] should_fail_alloc_page+0xe7/0x130 [ 200.546138][ T6814] prepare_alloc_pages+0x3c2/0x610 [ 200.546179][ T6814] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 200.546209][ T6814] ? __lock_acquire+0x62e/0x1ce0 [ 200.546248][ T6814] ? __lock_acquire+0x62e/0x1ce0 [ 200.546284][ T6814] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.546326][ T6814] ? is_bpf_text_address+0x8a/0x1a0 [ 200.546356][ T6814] ? bpf_ksym_find+0x124/0x1c0 [ 200.546378][ T6814] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.546406][ T6814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.546444][ T6814] ? policy_nodemask+0xea/0x4e0 [ 200.546478][ T6814] alloc_pages_mpol+0x1fb/0x550 [ 200.546511][ T6814] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 200.546552][ T6814] alloc_pages_noprof+0x131/0x390 [ 200.546584][ T6814] __pud_alloc+0x3b/0x750 [ 200.546623][ T6814] copy_page_range+0x3c08/0x5c80 [ 200.546650][ T6814] ? copy_process+0x4081/0x7690 [ 200.546686][ T6814] ? __lock_acquire+0x62e/0x1ce0 [ 200.546727][ T6814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.546765][ T6814] ? mas_wr_store_entry+0xa14/0x2550 [ 200.546789][ T6814] ? mas_destroy+0x5de/0xa20 [ 200.546811][ T6814] ? __pfx_copy_page_range+0x10/0x10 [ 200.546839][ T6814] ? mas_store+0x7a9/0x1160 [ 200.546862][ T6814] ? find_held_lock+0x2b/0x80 [ 200.546895][ T6814] ? __pfx_mas_store+0x10/0x10 [ 200.546916][ T6814] ? __vma_enter_locked+0x163/0x3f0 [ 200.546956][ T6814] dup_mmap+0xe88/0x21d0 [ 200.547005][ T6814] ? __pfx_dup_mmap+0x10/0x10 [ 200.547064][ T6814] copy_process+0x4081/0x7690 [ 200.547095][ T6814] ? __pfx___futex_wait+0x10/0x10 [ 200.547142][ T6814] ? __pfx_copy_process+0x10/0x10 [ 200.547172][ T6814] ? futex_private_hash_put+0x176/0x300 [ 200.547205][ T6814] ? futex_private_hash_put+0x18a/0x300 [ 200.547239][ T6814] kernel_clone+0xfc/0x930 [ 200.547271][ T6814] ? __pfx_kernel_clone+0x10/0x10 [ 200.547319][ T6814] __do_sys_clone+0xce/0x120 [ 200.547350][ T6814] ? __pfx___do_sys_clone+0x10/0x10 [ 200.547380][ T6814] ? ksys_unshare+0x687/0xa40 [ 200.547425][ T6814] ? xfd_validate_state+0x61/0x180 [ 200.547471][ T6814] do_syscall_64+0xcd/0x490 [ 200.547510][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.547534][ T6814] RIP: 0033:0x7feccad8ebe9 [ 200.547554][ T6814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.547577][ T6814] RSP: 002b:00007feccbb53fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 200.547599][ T6814] RAX: ffffffffffffffda RBX: 00007feccafc5fa0 RCX: 00007feccad8ebe9 [ 200.547614][ T6814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 200.547628][ T6814] RBP: 00007feccae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.547642][ T6814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.547655][ T6814] R13: 00007feccafc6038 R14: 00007feccafc5fa0 R15: 00007ffd0950f278 [ 200.547686][ T6814] [ 202.645564][ T6835] FAULT_INJECTION: forcing a failure. [ 202.645564][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 202.813058][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.0.164 Not tainted syzkaller #0 PREEMPT(full) [ 202.813091][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.813106][ T6835] Call Trace: [ 202.813113][ T6835] [ 202.813123][ T6835] dump_stack_lvl+0x16c/0x1f0 [ 202.813162][ T6835] should_fail_ex+0x512/0x640 [ 202.813200][ T6835] ? __kvmalloc_node_noprof+0x124/0x620 [ 202.813231][ T6835] should_failslab+0xc2/0x120 [ 202.813263][ T6835] __kvmalloc_node_noprof+0x137/0x620 [ 202.813290][ T6835] ? __lock_acquire+0xb97/0x1ce0 [ 202.813321][ T6835] ? seq_read_iter+0x826/0x12c0 [ 202.813349][ T6835] ? seq_read_iter+0x826/0x12c0 [ 202.813369][ T6835] seq_read_iter+0x826/0x12c0 [ 202.813393][ T6835] ? __mutex_trylock_common+0xe9/0x250 [ 202.813436][ T6835] kernfs_fop_read_iter+0x40f/0x5a0 [ 202.813458][ T6835] ? rw_verify_area+0xcf/0x6c0 [ 202.813485][ T6835] vfs_read+0x8bf/0xcf0 [ 202.813516][ T6835] ? __pfx___mutex_lock+0x10/0x10 [ 202.813554][ T6835] ? __pfx_vfs_read+0x10/0x10 [ 202.813600][ T6835] ksys_read+0x12a/0x250 [ 202.813627][ T6835] ? __pfx_ksys_read+0x10/0x10 [ 202.813667][ T6835] do_syscall_64+0xcd/0x490 [ 202.813707][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.813731][ T6835] RIP: 0033:0x7ff9be18ebe9 [ 202.813749][ T6835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.813777][ T6835] RSP: 002b:00007ff9bc3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.813800][ T6835] RAX: ffffffffffffffda RBX: 00007ff9be3c6180 RCX: 00007ff9be18ebe9 [ 202.813816][ T6835] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 202.813830][ T6835] RBP: 00007ff9be211e19 R08: 0000000000000000 R09: 0000000000000000 [ 202.813844][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.813858][ T6835] R13: 00007ff9be3c6218 R14: 00007ff9be3c6180 R15: 00007fff3b5afa38 [ 202.813888][ T6835] [ 204.107949][ T6849] FAULT_INJECTION: forcing a failure. [ 204.107949][ T6849] name failslab, interval 1, probability 0, space 0, times 0 [ 204.202466][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT(full) [ 204.202512][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.202532][ T6849] Call Trace: [ 204.202543][ T6849] [ 204.202555][ T6849] dump_stack_lvl+0x16c/0x1f0 [ 204.202611][ T6849] should_fail_ex+0x512/0x640 [ 204.202663][ T6849] ? __kvmalloc_node_noprof+0x124/0x620 [ 204.202724][ T6849] should_failslab+0xc2/0x120 [ 204.202771][ T6849] __kvmalloc_node_noprof+0x137/0x620 [ 204.202810][ T6849] ? __lock_acquire+0xb97/0x1ce0 [ 204.202855][ T6849] ? seq_read_iter+0x826/0x12c0 [ 204.202895][ T6849] ? seq_read_iter+0x826/0x12c0 [ 204.202932][ T6849] seq_read_iter+0x826/0x12c0 [ 204.202967][ T6849] ? __mutex_trylock_common+0xe9/0x250 [ 204.203031][ T6849] kernfs_fop_read_iter+0x40f/0x5a0 [ 204.203062][ T6849] ? rw_verify_area+0xcf/0x6c0 [ 204.203102][ T6849] vfs_read+0x8bf/0xcf0 [ 204.203147][ T6849] ? __pfx___mutex_lock+0x10/0x10 [ 204.203201][ T6849] ? __pfx_vfs_read+0x10/0x10 [ 204.203269][ T6849] ksys_read+0x12a/0x250 [ 204.203308][ T6849] ? __pfx_ksys_read+0x10/0x10 [ 204.203361][ T6849] do_syscall_64+0xcd/0x490 [ 204.203418][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.203453][ T6849] RIP: 0033:0x7f9fbe58ebe9 [ 204.203479][ T6849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.203512][ T6849] RSP: 002b:00007f9fbc7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.203543][ T6849] RAX: ffffffffffffffda RBX: 00007f9fbe7c6180 RCX: 00007f9fbe58ebe9 [ 204.203566][ T6849] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 204.203586][ T6849] RBP: 00007f9fbe611e19 R08: 0000000000000000 R09: 0000000000000000 [ 204.203607][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.203626][ T6849] R13: 00007f9fbe7c6218 R14: 00007f9fbe7c6180 R15: 00007ffc3d640258 [ 204.203671][ T6849] [ 204.664551][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.681294][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.015271][ T6870] ICMPv6: process `syz.3.175' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 207.714468][ T6865] FAULT_INJECTION: forcing a failure. [ 207.714468][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 207.785688][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: syz.0.174 Not tainted syzkaller #0 PREEMPT(full) [ 207.785734][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.785755][ T6865] Call Trace: [ 207.785766][ T6865] [ 207.785779][ T6865] dump_stack_lvl+0x16c/0x1f0 [ 207.785838][ T6865] should_fail_ex+0x512/0x640 [ 207.785890][ T6865] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 207.785935][ T6865] should_failslab+0xc2/0x120 [ 207.785981][ T6865] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 207.786029][ T6865] ? __kmalloc_large_node_noprof+0x21/0x70 [ 207.786085][ T6865] ? anon_vma_fork+0xe6/0x620 [ 207.786128][ T6865] anon_vma_fork+0xe6/0x620 [ 207.786162][ T6865] ? vm_area_dup+0x5a1/0x8d0 [ 207.786201][ T6865] dup_mmap+0x152e/0x21d0 [ 207.786269][ T6865] ? __pfx_dup_mmap+0x10/0x10 [ 207.786352][ T6865] copy_process+0x4081/0x7690 [ 207.786410][ T6865] ? __pfx___futex_wait+0x10/0x10 [ 207.786478][ T6865] ? __pfx_copy_process+0x10/0x10 [ 207.786523][ T6865] ? futex_private_hash_put+0x176/0x300 [ 207.786569][ T6865] ? futex_private_hash_put+0x18a/0x300 [ 207.786617][ T6865] kernel_clone+0xfc/0x930 [ 207.786664][ T6865] ? __pfx_kernel_clone+0x10/0x10 [ 207.786734][ T6865] __do_sys_clone+0xce/0x120 [ 207.786777][ T6865] ? __pfx___do_sys_clone+0x10/0x10 [ 207.786820][ T6865] ? ksys_unshare+0x687/0xa40 [ 207.786884][ T6865] ? xfd_validate_state+0x61/0x180 [ 207.786950][ T6865] do_syscall_64+0xcd/0x490 [ 207.787007][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.787042][ T6865] RIP: 0033:0x7ff9be18ebe9 [ 207.787068][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.787101][ T6865] RSP: 002b:00007ff9bc3f5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 207.787133][ T6865] RAX: ffffffffffffffda RBX: 00007ff9be3c5fa0 RCX: 00007ff9be18ebe9 [ 207.787155][ T6865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 207.787175][ T6865] RBP: 00007ff9be211e19 R08: 0000000000000000 R09: 0000000000000000 [ 207.787195][ T6865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.787215][ T6865] R13: 00007ff9be3c6038 R14: 00007ff9be3c5fa0 R15: 00007fff3b5afa38 [ 207.787260][ T6865] [ 216.141858][ T6974] FAULT_INJECTION: forcing a failure. [ 216.141858][ T6974] name failslab, interval 1, probability 0, space 0, times 0 [ 216.245758][ T6974] CPU: 1 UID: 0 PID: 6974 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) [ 216.245809][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.245823][ T6974] Call Trace: [ 216.245831][ T6974] [ 216.245839][ T6974] dump_stack_lvl+0x16c/0x1f0 [ 216.245880][ T6974] should_fail_ex+0x512/0x640 [ 216.245918][ T6974] ? __kvmalloc_node_noprof+0x124/0x620 [ 216.245948][ T6974] should_failslab+0xc2/0x120 [ 216.245980][ T6974] __kvmalloc_node_noprof+0x137/0x620 [ 216.246007][ T6974] ? __lock_acquire+0xb97/0x1ce0 [ 216.246039][ T6974] ? seq_read_iter+0x826/0x12c0 [ 216.246067][ T6974] ? seq_read_iter+0x826/0x12c0 [ 216.246087][ T6974] seq_read_iter+0x826/0x12c0 [ 216.246110][ T6974] ? __mutex_trylock_common+0xe9/0x250 [ 216.246153][ T6974] kernfs_fop_read_iter+0x40f/0x5a0 [ 216.246175][ T6974] ? rw_verify_area+0xcf/0x6c0 [ 216.246202][ T6974] vfs_read+0x8bf/0xcf0 [ 216.246232][ T6974] ? __pfx___mutex_lock+0x10/0x10 [ 216.246274][ T6974] ? __pfx_vfs_read+0x10/0x10 [ 216.246320][ T6974] ksys_read+0x12a/0x250 [ 216.246348][ T6974] ? __pfx_ksys_read+0x10/0x10 [ 216.246384][ T6974] do_syscall_64+0xcd/0x490 [ 216.246424][ T6974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.246448][ T6974] RIP: 0033:0x7feccad8ebe9 [ 216.246466][ T6974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.246489][ T6974] RSP: 002b:00007fecc8ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.246510][ T6974] RAX: ffffffffffffffda RBX: 00007feccafc6180 RCX: 00007feccad8ebe9 [ 216.246526][ T6974] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000009 [ 216.246541][ T6974] RBP: 00007feccae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 216.246555][ T6974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.246569][ T6974] R13: 00007feccafc6218 R14: 00007feccafc6180 R15: 00007ffd0950f278 [ 216.246598][ T6974] [ 219.015172][ T5187] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 219.029473][ T5187] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 219.039204][ T5187] CPU: 1 UID: 0 PID: 5187 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 219.039247][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.039269][ T5187] Workqueue: hci3 hci_rx_work [ 219.039318][ T5187] Call Trace: [ 219.039328][ T5187] [ 219.039341][ T5187] dump_stack_lvl+0x16c/0x1f0 [ 219.039394][ T5187] sysfs_warn_dup+0x7f/0xa0 [ 219.039436][ T5187] sysfs_create_dir_ns+0x24b/0x2b0 [ 219.039478][ T5187] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 219.039518][ T5187] ? find_held_lock+0x2b/0x80 [ 219.039557][ T5187] ? do_raw_spin_unlock+0x172/0x230 [ 219.039623][ T5187] kobject_add_internal+0x2c4/0x9b0 [ 219.039664][ T5187] kobject_add+0x16e/0x240 [ 219.039698][ T5187] ? __pfx_kobject_add+0x10/0x10 [ 219.039734][ T5187] ? do_raw_spin_unlock+0x172/0x230 [ 219.039788][ T5187] ? kobject_put+0xab/0x5a0 [ 219.039829][ T5187] device_add+0x288/0x1aa0 [ 219.039867][ T5187] ? __pfx_dev_set_name+0x10/0x10 [ 219.039909][ T5187] ? __pfx_device_add+0x10/0x10 [ 219.039946][ T5187] ? mgmt_send_event_skb+0x2fb/0x460 [ 219.040002][ T5187] hci_conn_add_sysfs+0x17e/0x230 [ 219.040053][ T5187] le_conn_complete_evt+0x1075/0x1d70 [ 219.040096][ T5187] ? preempt_count_sub+0x130/0x160 [ 219.040140][ T5187] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 219.040183][ T5187] ? bt_warn+0xe4/0x120 [ 219.040219][ T5187] ? __pfx_bt_warn+0x10/0x10 [ 219.040268][ T5187] hci_le_conn_complete_evt+0x23c/0x370 [ 219.040322][ T5187] hci_le_meta_evt+0x357/0x5e0 [ 219.040368][ T5187] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 219.040418][ T5187] hci_event_packet+0x685/0x11c0 [ 219.040461][ T5187] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 219.040510][ T5187] ? __pfx_hci_event_packet+0x10/0x10 [ 219.040557][ T5187] ? kcov_remote_start+0x3c9/0x6d0 [ 219.040616][ T5187] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.040677][ T5187] hci_rx_work+0x2c5/0x16b0 [ 219.040726][ T5187] ? rcu_is_watching+0x12/0xc0 [ 219.040767][ T5187] process_one_work+0x9cf/0x1b70 [ 219.040838][ T5187] ? __pfx_process_one_work+0x10/0x10 [ 219.040906][ T5187] ? assign_work+0x1a0/0x250 [ 219.040960][ T5187] worker_thread+0x6c8/0xf10 [ 219.041004][ T5187] ? __kthread_parkme+0x19e/0x250 [ 219.041049][ T5187] ? __pfx_worker_thread+0x10/0x10 [ 219.041079][ T5187] kthread+0x3c5/0x780 [ 219.041130][ T5187] ? __pfx_kthread+0x10/0x10 [ 219.041183][ T5187] ? rcu_is_watching+0x12/0xc0 [ 219.041217][ T5187] ? __pfx_kthread+0x10/0x10 [ 219.041269][ T5187] ret_from_fork+0x5d7/0x6f0 [ 219.041319][ T5187] ? __pfx_kthread+0x10/0x10 [ 219.041370][ T5187] ret_from_fork_asm+0x1a/0x30 [ 219.041432][ T5187] [ 219.041469][ T5187] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 219.311342][ T5187] Bluetooth: hci3: failed to register connection device [ 219.512439][ T6993] ICMPv6: process `syz.2.189' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 221.352199][ T5875] Bluetooth: hci3: command tx timeout [ 224.057359][ T7030] kexec: Could not allocate control_code_buffer [ 225.666841][ T7058] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 226.639679][ T7059] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 227.239201][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 227.245393][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 227.252677][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 227.258799][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 227.372268][ T7050] kexec: Could not allocate control_code_buffer [ 227.573011][ T5875] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 228.765059][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 229.660437][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 232.704147][ T7149] sysfs_service_op_show: Client not running :-5: [ 232.978938][ T7155] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 233.976508][ T7158] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 235.435365][ T5875] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 235.443362][ T5875] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 235.454251][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 235.454294][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.454316][ T5875] Workqueue: hci0 hci_rx_work [ 235.454366][ T5875] Call Trace: [ 235.454377][ T5875] [ 235.454390][ T5875] dump_stack_lvl+0x16c/0x1f0 [ 235.454454][ T5875] sysfs_warn_dup+0x7f/0xa0 [ 235.454497][ T5875] sysfs_create_dir_ns+0x24b/0x2b0 [ 235.454540][ T5875] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 235.454580][ T5875] ? find_held_lock+0x2b/0x80 [ 235.454622][ T5875] ? do_raw_spin_unlock+0x172/0x230 [ 235.454677][ T5875] kobject_add_internal+0x2c4/0x9b0 [ 235.454718][ T5875] kobject_add+0x16e/0x240 [ 235.454750][ T5875] ? __pfx_kobject_add+0x10/0x10 [ 235.454787][ T5875] ? do_raw_spin_unlock+0x172/0x230 [ 235.454842][ T5875] ? kobject_put+0xab/0x5a0 [ 235.454884][ T5875] device_add+0x288/0x1aa0 [ 235.454921][ T5875] ? __pfx_dev_set_name+0x10/0x10 [ 235.454963][ T5875] ? __pfx_device_add+0x10/0x10 [ 235.455000][ T5875] ? mgmt_send_event_skb+0x2fb/0x460 [ 235.455060][ T5875] hci_conn_add_sysfs+0x17e/0x230 [ 235.455109][ T5875] le_conn_complete_evt+0x1075/0x1d70 [ 235.455152][ T5875] ? preempt_count_sub+0x130/0x160 [ 235.455197][ T5875] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 235.455237][ T5875] ? bt_warn+0xe4/0x120 [ 235.455274][ T5875] ? __pfx_bt_warn+0x10/0x10 [ 235.455323][ T5875] hci_le_conn_complete_evt+0x23c/0x370 [ 235.455376][ T5875] hci_le_meta_evt+0x357/0x5e0 [ 235.455427][ T5875] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 235.455477][ T5875] hci_event_packet+0x685/0x11c0 [ 235.455521][ T5875] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 235.455571][ T5875] ? __pfx_hci_event_packet+0x10/0x10 [ 235.455622][ T5875] ? kcov_remote_start+0x3d9/0x6d0 [ 235.455685][ T5875] hci_rx_work+0x2c5/0x16b0 [ 235.455733][ T5875] ? rcu_is_watching+0x12/0xc0 [ 235.455774][ T5875] process_one_work+0x9cf/0x1b70 [ 235.455845][ T5875] ? __pfx_process_one_work+0x10/0x10 [ 235.455912][ T5875] ? assign_work+0x1a0/0x250 [ 235.455967][ T5875] worker_thread+0x6c8/0xf10 [ 235.456011][ T5875] ? __kthread_parkme+0x19e/0x250 [ 235.456056][ T5875] ? __pfx_worker_thread+0x10/0x10 [ 235.456086][ T5875] kthread+0x3c5/0x780 [ 235.456136][ T5875] ? __pfx_kthread+0x10/0x10 [ 235.456190][ T5875] ? rcu_is_watching+0x12/0xc0 [ 235.456224][ T5875] ? __pfx_kthread+0x10/0x10 [ 235.456274][ T5875] ret_from_fork+0x5d7/0x6f0 [ 235.456325][ T5875] ? __pfx_kthread+0x10/0x10 [ 235.456376][ T5875] ret_from_fork_asm+0x1a/0x30 [ 235.456443][ T5875] [ 235.705974][ T5875] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 235.720045][ T5875] Bluetooth: hci0: failed to register connection device [ 236.346062][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 236.383883][ T7175] ptrace attach of ""[7185] was attempted by "./syz-executor exec"[7175] [ 237.381006][ T7178] sysfs_service_op_show: Client not running :-5: [ 237.734030][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 240.133362][ T5878] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 242.471746][ T7257] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 243.357243][ T7259] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 247.353677][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 247.757547][ T7292] ubi: mtd0 is already attached to ubi0 [ 247.880669][ T7296] ubi0: detaching mtd0 [ 247.963494][ T7296] ubi0: mtd0 is detached [ 251.177593][ T5878] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 256.983227][ T7401] ubi0: attaching mtd0 [ 257.118366][ T7401] ubi0: scanning is finished [ 257.466236][ T7401] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 257.501133][ T7401] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 257.527824][ T7401] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 257.536461][ T7401] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 257.544782][ T7401] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 257.562551][ T7401] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 257.612823][ T7401] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2477908427 [ 257.624702][ T7401] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 257.635084][ T7405] ubi0: detaching mtd0 [ 257.762418][ T7405] ubi0: mtd0 is detached [ 259.412359][ T7419] netlink: 268 bytes leftover after parsing attributes in process `syz.1.264'. [ 259.947720][ T7419] syz.1.264 (7419) used greatest stack depth: 18312 bytes left [ 262.274491][ T7459] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 263.882581][ T7479] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 265.440590][ T7511] netlink: 186 bytes leftover after parsing attributes in process `syz.1.271'. [ 265.524118][ T7511] netlink: 186 bytes leftover after parsing attributes in process `syz.1.271'. [ 265.650324][ T7511] netlink: 186 bytes leftover after parsing attributes in process `syz.1.271'. [ 265.681062][ T7511] netlink: 186 bytes leftover after parsing attributes in process `syz.1.271'. [ 265.750353][ T7511] netlink: 186 bytes leftover after parsing attributes in process `syz.1.271'. [ 265.790295][ T7511] netlink: 186 bytes leftover after parsing attributes in process `syz.1.271'. [ 266.043162][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.049583][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.124787][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'. [ 266.468790][ T7505] bridge_slave_1: left allmulticast mode [ 266.494254][ T7523] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(17) [ 266.569744][ T7505] bridge_slave_1: left promiscuous mode [ 266.706904][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.122716][ T7505] bridge_slave_0: left allmulticast mode [ 267.239601][ T7505] bridge_slave_0: left promiscuous mode [ 267.319580][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.484271][ T7532] svc: failed to register nfsdv3 RPC service (errno 111). [ 267.542862][ T7532] svc: failed to register nfsaclv3 RPC service (errno 111). [ 268.072279][ T7522] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 268.102316][ T7522] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 268.189154][ T7522] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 268.789739][ T7543] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 271.799153][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.288'. [ 271.922668][ T7590] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 272.073076][ T7585] blktrace: Concurrent blktraces are not allowed on ram7 [ 272.151171][ T7584] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 272.689735][ T30] audit: type=1326 audit(4294967453.616:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7594 comm="syz.1.289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fbe58ebe9 code=0x0 [ 277.452877][ T7647] blktrace: Concurrent blktraces are not allowed on ram7 [ 279.878181][ T7670] netlink: 186 bytes leftover after parsing attributes in process `syz.2.307'. [ 286.417369][ T7719] ubi0: attaching mtd0 [ 286.423101][ T7719] ubi0: scanning is finished [ 286.657097][ T7719] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 286.666835][ T7719] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 286.729568][ T7719] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 286.740694][ T7719] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 286.750744][ T7719] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 286.759684][ T7719] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 286.769701][ T7719] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2477908427 [ 286.783354][ T7719] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 286.803281][ T7723] ubi0: background thread "ubi_bgt0d" started, PID 7723 [ 286.810396][ T7721] ubi0: detaching mtd0 [ 286.826723][ T7721] ubi0: mtd0 is detached [ 287.991631][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 290.727793][ T7739] random: crng reseeded on system resumption [ 290.887622][ T7736] FAULT_INJECTION: forcing a failure. [ 290.887622][ T7736] name fail_futex, interval 1, probability 0, space 0, times 1 [ 290.953186][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.3.322 Tainted: G I syzkaller #0 PREEMPT(full) [ 290.953235][ T7736] Tainted: [I]=FIRMWARE_WORKAROUND [ 290.953247][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.953276][ T7736] Call Trace: [ 290.953287][ T7736] [ 290.953299][ T7736] dump_stack_lvl+0x16c/0x1f0 [ 290.953353][ T7736] should_fail_ex+0x512/0x640 [ 290.953430][ T7736] should_fail_futex+0x4c/0x60 [ 290.953469][ T7736] __x64_sys_futex+0x25e/0x4c0 [ 290.953517][ T7736] ? __pfx___x64_sys_futex+0x10/0x10 [ 290.953560][ T7736] ? xfd_validate_state+0x61/0x180 [ 290.953623][ T7736] do_syscall_64+0xcd/0x490 [ 290.953683][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.953715][ T7736] RIP: 0033:0x7feccad8ebe9 [ 290.953744][ T7736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.953775][ T7736] RSP: 002b:00007ffd0950f3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 290.953804][ T7736] RAX: ffffffffffffffda RBX: 000000000004707c RCX: 00007feccad8ebe9 [ 290.953824][ T7736] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feccafc618c [ 290.953843][ T7736] RBP: 0000000000000032 R08: 00007feccbb55000 R09: 0000001c0950f6cf [ 290.953861][ T7736] R10: 00007ffd0950f4d0 R11: 0000000000000246 R12: 00007feccafc618c [ 290.953880][ T7736] R13: 00007ffd0950f4d0 R14: 00000000000470ae R15: 00007ffd0950f4f0 [ 290.953920][ T7736] [ 291.104793][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.763246][ T7792] ALSA: mixer_oss: invalid OSS volume '' [ 295.368397][ T7761] kexec: Could not allocate control_code_buffer [ 298.294180][ T7819] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 298.899543][ T7825] FAULT_INJECTION: forcing a failure. [ 298.899543][ T7825] name failslab, interval 1, probability 0, space 0, times 0 [ 298.963931][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.3.338 Tainted: G I syzkaller #0 PREEMPT(full) [ 298.963984][ T7825] Tainted: [I]=FIRMWARE_WORKAROUND [ 298.963997][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.964017][ T7825] Call Trace: [ 298.964029][ T7825] [ 298.964041][ T7825] dump_stack_lvl+0x16c/0x1f0 [ 298.964101][ T7825] should_fail_ex+0x512/0x640 [ 298.964155][ T7825] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 298.964196][ T7825] should_failslab+0xc2/0x120 [ 298.964243][ T7825] __kmalloc_cache_noprof+0x6a/0x3e0 [ 298.964276][ T7825] ? __asan_memcpy+0x3c/0x60 [ 298.964310][ T7825] ? ip_vs_protocol_net_init+0xbe/0x300 [ 298.964350][ T7825] ip_vs_protocol_net_init+0xbe/0x300 [ 298.964391][ T7825] __ip_vs_init+0x239/0x520 [ 298.964438][ T7825] ? __pfx___ip_vs_init+0x10/0x10 [ 298.964482][ T7825] ops_init+0x1df/0x5f0 [ 298.964541][ T7825] setup_net+0x10f/0x380 [ 298.964568][ T7825] ? lockdep_init_map_type+0x5c/0x280 [ 298.964618][ T7825] ? __pfx_setup_net+0x10/0x10 [ 298.964651][ T7825] ? debug_mutex_init+0x37/0x70 [ 298.964689][ T7825] copy_net_ns+0x2a6/0x5f0 [ 298.964728][ T7825] create_new_namespaces+0x3ea/0xa90 [ 298.964778][ T7825] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 298.964834][ T7825] ksys_unshare+0x45b/0xa40 [ 298.964883][ T7825] ? __pfx_ksys_unshare+0x10/0x10 [ 298.964934][ T7825] ? xfd_validate_state+0x61/0x180 [ 298.965001][ T7825] __x64_sys_unshare+0x31/0x40 [ 298.965048][ T7825] do_syscall_64+0xcd/0x490 [ 298.965105][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.965139][ T7825] RIP: 0033:0x7feccad8ebe9 [ 298.965166][ T7825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.965198][ T7825] RSP: 002b:00007feccbb54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 298.965230][ T7825] RAX: ffffffffffffffda RBX: 00007feccafc5fa0 RCX: 00007feccad8ebe9 [ 298.965253][ T7825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 298.965273][ T7825] RBP: 00007feccae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 298.965293][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.965312][ T7825] R13: 00007feccafc6038 R14: 00007feccafc5fa0 R15: 00007ffd0950f278 [ 298.965356][ T7825] [ 300.104177][ T7846] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 301.359627][ T7864] ovs_: entered promiscuous mode [ 302.885729][ T7888] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 307.757716][ T7971] FAULT_INJECTION: forcing a failure. [ 307.757716][ T7971] name failslab, interval 1, probability 0, space 0, times 0 [ 307.819149][ T7971] CPU: 0 UID: 0 PID: 7971 Comm: syz.2.365 Tainted: G I syzkaller #0 PREEMPT(full) [ 307.819202][ T7971] Tainted: [I]=FIRMWARE_WORKAROUND [ 307.819214][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.819232][ T7971] Call Trace: [ 307.819242][ T7971] [ 307.819254][ T7971] dump_stack_lvl+0x16c/0x1f0 [ 307.819308][ T7971] should_fail_ex+0x512/0x640 [ 307.819359][ T7971] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 307.819403][ T7971] should_failslab+0xc2/0x120 [ 307.819445][ T7971] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 307.819497][ T7971] ? d_instantiate+0x77/0x90 [ 307.819538][ T7971] ? alloc_empty_file+0x55/0x1e0 [ 307.819595][ T7971] alloc_empty_file+0x55/0x1e0 [ 307.819645][ T7971] alloc_file_pseudo+0x13a/0x230 [ 307.819697][ T7971] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 307.819758][ T7971] __shmem_file_setup+0x1a3/0x330 [ 307.819795][ T7971] shmem_zero_setup+0x93/0x1a0 [ 307.819840][ T7971] __mmap_region+0x2081/0x27b0 [ 307.819881][ T7971] ? lock_acquire+0x179/0x350 [ 307.819924][ T7971] ? __pfx___mmap_region+0x10/0x10 [ 307.819973][ T7971] ? lockdep_hardirqs_on+0x7c/0x110 [ 307.820021][ T7971] ? finish_task_switch.isra.0+0x221/0xc10 [ 307.820057][ T7971] ? rcu_is_watching+0x12/0xc0 [ 307.820090][ T7971] ? trace_sched_exit_tp+0xd1/0x120 [ 307.820141][ T7971] ? __schedule+0x11a3/0x5de0 [ 307.820255][ T7971] ? trace_cap_capable+0x18d/0x200 [ 307.820305][ T7971] mmap_region+0x1ab/0x3f0 [ 307.820345][ T7971] ? __get_unmapped_area+0x267/0x440 [ 307.820399][ T7971] do_mmap+0xa3e/0x1210 [ 307.820456][ T7971] ? __pfx_do_mmap+0x10/0x10 [ 307.820511][ T7971] ? __pfx_down_write_killable+0x10/0x10 [ 307.820553][ T7971] vm_mmap_pgoff+0x29e/0x470 [ 307.820609][ T7971] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 307.820666][ T7971] ? __x64_sys_futex+0x1e0/0x4c0 [ 307.820707][ T7971] ? __x64_sys_futex+0x1e9/0x4c0 [ 307.820755][ T7971] ksys_mmap_pgoff+0x7d/0x5c0 [ 307.820800][ T7971] ? xfd_validate_state+0x61/0x180 [ 307.820846][ T7971] ? __pfx_ksys_write+0x10/0x10 [ 307.820888][ T7971] __x64_sys_mmap+0x125/0x190 [ 307.820945][ T7971] do_syscall_64+0xcd/0x490 [ 307.821000][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.821033][ T7971] RIP: 0033:0x7f9b7018ebe9 [ 307.821059][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.821089][ T7971] RSP: 002b:00007f9b71048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 307.821119][ T7971] RAX: ffffffffffffffda RBX: 00007f9b703c5fa0 RCX: 00007f9b7018ebe9 [ 307.821140][ T7971] RDX: 0000000000000008 RSI: 000000000000e983 RDI: 0000000000000000 [ 307.821159][ T7971] RBP: 00007f9b70211e19 R08: 0000000000000401 R09: 0000000000008000 [ 307.821180][ T7971] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 307.821199][ T7971] R13: 00007f9b703c6038 R14: 00007f9b703c5fa0 R15: 00007ffd74e33508 [ 307.821242][ T7971] @@[ 310.015576][ T5878] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 310.015610][ T5878] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 310.031057][ T5878] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 310.031092][ T5878] Bluetooth: hci0: adv larger than maximum supported [ 310.038397][ T5878] Bluetooth: hci0: adv larger than maximum supported [ 310.045083][ T5878] Bluetooth: hci0: Malformed LE Event: 0x0d [ 310.580486][ T8031] FAULT_INJECTION: forcing a failure. [ 310.580486][ T8031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.605525][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.1.374 Tainted: G I syzkaller #0 PREEMPT(full) [ 310.605581][ T8031] Tainted: [I]=FIRMWARE_WORKAROUND [ 310.605594][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.605613][ T8031] Call Trace: [ 310.605624][ T8031] [ 310.605637][ T8031] dump_stack_lvl+0x16c/0x1f0 [ 310.605693][ T8031] should_fail_ex+0x512/0x640 [ 310.605754][ T8031] should_fail_alloc_page+0xe7/0x130 [ 310.605803][ T8031] prepare_alloc_pages+0x3c2/0x610 [ 310.605853][ T8031] ? rcu_is_watching+0x12/0xc0 [ 310.605891][ T8031] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 310.605934][ T8031] ? __lock_acquire+0xb97/0x1ce0 [ 310.605997][ T8031] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 310.606040][ T8031] ? do_raw_spin_lock+0x12c/0x2b0 [ 310.606093][ T8031] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.606146][ T8031] ? find_held_lock+0x2b/0x80 [ 310.606191][ T8031] ? __lock_acquire+0xb97/0x1ce0 [ 310.606236][ T8031] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 310.606289][ T8031] ? policy_nodemask+0xea/0x4e0 [ 310.606346][ T8031] alloc_pages_mpol+0x1fb/0x550 [ 310.606394][ T8031] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 310.606452][ T8031] folio_alloc_mpol_noprof+0x36/0x2f0 [ 310.606509][ T8031] shmem_alloc_folio+0x135/0x160 [ 310.606566][ T8031] shmem_alloc_and_add_folio+0x499/0xc20 [ 310.606616][ T8031] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 310.606660][ T8031] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 310.606708][ T8031] shmem_get_folio_gfp+0x67f/0x1600 [ 310.606756][ T8031] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 310.606800][ T8031] ? filemap_map_pages+0xf58/0x1670 [ 310.606846][ T8031] shmem_fault+0x1fe/0xa30 [ 310.606888][ T8031] ? __pfx_shmem_fault+0x10/0x10 [ 310.606934][ T8031] ? __pfx_filemap_map_pages+0x10/0x10 [ 310.606987][ T8031] ? __pfx_filemap_map_pages+0x10/0x10 [ 310.607026][ T8031] __do_fault+0x10d/0x490 [ 310.607070][ T8031] ? __pfx_filemap_map_pages+0x10/0x10 [ 310.607111][ T8031] do_pte_missing+0xf50/0x3ba0 [ 310.607146][ T8031] ? find_held_lock+0x2b/0x80 [ 310.607180][ T8031] ? __handle_mm_fault+0x14fd/0x2a50 [ 310.607221][ T8031] __handle_mm_fault+0x152a/0x2a50 [ 310.607268][ T8031] ? __pfx___handle_mm_fault+0x10/0x10 [ 310.607313][ T8031] ? __pte_offset_map_lock+0x174/0x310 [ 310.607363][ T8031] ? find_held_lock+0x2b/0x80 [ 310.607413][ T8031] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 310.607475][ T8031] handle_mm_fault+0x589/0xd10 [ 310.607516][ T8031] __get_user_pages+0x551/0x34a0 [ 310.607585][ T8031] ? __pfx___get_user_pages+0x10/0x10 [ 310.607650][ T8031] faultin_page_range+0x338/0x940 [ 310.607712][ T8031] madvise_do_behavior+0x34c/0x530 [ 310.607767][ T8031] ? __pfx_madvise_do_behavior+0x10/0x10 [ 310.607819][ T8031] ? down_read+0x13d/0x480 [ 310.607872][ T8031] do_madvise+0x176/0x240 [ 310.607920][ T8031] ? __pfx_do_madvise+0x10/0x10 [ 310.607967][ T8031] ? do_futex+0x122/0x350 [ 310.608039][ T8031] ? xfd_validate_state+0x61/0x180 [ 310.608087][ T8031] ? __pfx_do_writev+0x10/0x10 [ 310.608131][ T8031] __x64_sys_madvise+0xa9/0x110 [ 310.608180][ T8031] ? lockdep_hardirqs_on+0x7c/0x110 [ 310.608230][ T8031] do_syscall_64+0xcd/0x490 [ 310.608285][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.608327][ T8031] RIP: 0033:0x7f9fbe58ebe9 [ 310.608354][ T8031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.608386][ T8031] RSP: 002b:00007f9fbc7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 310.608418][ T8031] RAX: ffffffffffffffda RBX: 00007f9fbe7c6090 RCX: 00007f9fbe58ebe9 [ 310.608440][ T8031] RDX: 0000000000000016 RSI: 00000000002003f2 RDI: 0000000000000000 [ 310.608460][ T8031] RBP: 00007f9fbe611e19 R08: 0000000000000000 R09: 0000000000000000 [ 310.608481][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.608499][ T8031] R13: 00007f9fbe7c6128 R14: 00007f9fbe7c6090 R15: 00007ffc3d640258 [ 310.608543][ T8031] [ 311.853625][ T8053] FAULT_INJECTION: forcing a failure. [ 311.853625][ T8053] name failslab, interval 1, probability 0, space 0, times 0 [ 311.900109][ T8053] CPU: 1 UID: 0 PID: 8053 Comm: syz.3.379 Tainted: G I syzkaller #0 PREEMPT(full) [ 311.900164][ T8053] Tainted: [I]=FIRMWARE_WORKAROUND [ 311.900183][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.900208][ T8053] Call Trace: [ 311.900219][ T8053] [ 311.900231][ T8053] dump_stack_lvl+0x16c/0x1f0 [ 311.900288][ T8053] should_fail_ex+0x512/0x640 [ 311.900343][ T8053] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 311.900389][ T8053] should_failslab+0xc2/0x120 [ 311.900434][ T8053] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 311.900475][ T8053] ? __proc_create+0xc3/0x8e0 [ 311.900523][ T8053] ? __proc_create+0x2ce/0x8e0 [ 311.900580][ T8053] __proc_create+0x2ce/0x8e0 [ 311.900631][ T8053] ? __pfx___proc_create+0x10/0x10 [ 311.900698][ T8053] proc_create_reg+0x7d/0x180 [ 311.900755][ T8053] proc_create_net_data+0x8e/0x1c0 [ 311.900809][ T8053] ? __pfx_proc_create_net_data+0x10/0x10 [ 311.900864][ T8053] ? __kasan_kmalloc+0xaa/0xb0 [ 311.900912][ T8053] ip_vs_app_net_init+0xc8/0x110 [ 311.900963][ T8053] __ip_vs_init+0x25b/0x520 [ 311.901011][ T8053] ? __pfx___ip_vs_init+0x10/0x10 [ 311.901054][ T8053] ops_init+0x1df/0x5f0 [ 311.901114][ T8053] setup_net+0x10f/0x380 [ 311.901140][ T8053] ? lockdep_init_map_type+0x5c/0x280 [ 311.901196][ T8053] ? __pfx_setup_net+0x10/0x10 [ 311.901228][ T8053] ? debug_mutex_init+0x37/0x70 [ 311.901266][ T8053] copy_net_ns+0x2a6/0x5f0 [ 311.901305][ T8053] create_new_namespaces+0x3ea/0xa90 [ 311.901354][ T8053] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 311.901396][ T8053] ksys_unshare+0x45b/0xa40 [ 311.901442][ T8053] ? __pfx_ksys_unshare+0x10/0x10 [ 311.901489][ T8053] ? xfd_validate_state+0x61/0x180 [ 311.901550][ T8053] __x64_sys_unshare+0x31/0x40 [ 311.901593][ T8053] do_syscall_64+0xcd/0x490 [ 311.901650][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.901684][ T8053] RIP: 0033:0x7feccad8ebe9 [ 311.901711][ T8053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.901744][ T8053] RSP: 002b:00007feccbb54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 311.901776][ T8053] RAX: ffffffffffffffda RBX: 00007feccafc5fa0 RCX: 00007feccad8ebe9 [ 311.901796][ T8053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 311.901814][ T8053] RBP: 00007feccae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 311.901833][ T8053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.901852][ T8053] R13: 00007feccafc6038 R14: 00007feccafc5fa0 R15: 00007ffd0950f278 [ 311.901893][ T8053] [ 312.161789][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.595925][ T8140] mmap: syz.3.392 (8140): VmData 46276608 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 316.470473][ T30] audit: type=1806 audit(4294967322.431:3): xattr="" res=-22 [ 317.540743][ T8166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.551035][ T8166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 317.577254][ T8166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 317.588081][ T8166] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 317.597689][ T8166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.632246][ T8166] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 317.797351][ T8166] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 317.836131][ T8166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.842418][ T8166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 317.871108][ T8166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 317.892020][ T8166] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 317.901407][ T8166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.914138][ T8166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 317.923673][ T8166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 317.938573][ T8166] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 318.021398][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 318.635918][ T8226] FAULT_INJECTION: forcing a failure. [ 318.635918][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 318.659985][ T8226] CPU: 0 UID: 0 PID: 8226 Comm: syz.2.408 Tainted: G I syzkaller #0 PREEMPT(full) [ 318.660040][ T8226] Tainted: [I]=FIRMWARE_WORKAROUND [ 318.660053][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.660072][ T8226] Call Trace: [ 318.660083][ T8226] [ 318.660094][ T8226] dump_stack_lvl+0x16c/0x1f0 [ 318.660143][ T8226] should_fail_ex+0x512/0x640 [ 318.660180][ T8226] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 318.660212][ T8226] should_failslab+0xc2/0x120 [ 318.660244][ T8226] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 318.660272][ T8226] ? mark_held_locks+0x49/0x80 [ 318.660302][ T8226] ? key_alloc+0x3e0/0x1330 [ 318.660337][ T8226] key_alloc+0x3e0/0x1330 [ 318.660380][ T8226] ? __pfx_key_alloc+0x10/0x10 [ 318.660413][ T8226] ? __pfx_key_default_cmp+0x10/0x10 [ 318.660450][ T8226] ? __pfx_keyring_search_iterator+0x10/0x10 [ 318.660491][ T8226] keyring_alloc+0x44/0xc0 [ 318.660529][ T8226] look_up_user_keyrings+0x510/0x760 [ 318.660562][ T8226] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 318.660603][ T8226] lookup_user_key+0x1a3/0x1300 [ 318.660636][ T8226] ? __pfx_lookup_user_key+0x10/0x10 [ 318.660677][ T8226] ? do_futex+0x122/0x350 [ 318.660729][ T8226] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 318.660779][ T8226] ? fput+0x9b/0xd0 [ 318.660833][ T8226] keyctl_keyring_clear+0x24/0x1a0 [ 318.660870][ T8226] __do_sys_keyctl+0x355/0x590 [ 318.660912][ T8226] do_syscall_64+0xcd/0x490 [ 318.660970][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.661004][ T8226] RIP: 0033:0x7f9b7018ebe9 [ 318.661030][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.661062][ T8226] RSP: 002b:00007f9b71048038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 318.661093][ T8226] RAX: ffffffffffffffda RBX: 00007f9b703c5fa0 RCX: 00007f9b7018ebe9 [ 318.661115][ T8226] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 318.661134][ T8226] RBP: 00007f9b70211e19 R08: 0000000000000008 R09: 0000000000000000 [ 318.661154][ T8226] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 318.661174][ T8226] R13: 00007f9b703c6038 R14: 00007f9b703c5fa0 R15: 00007ffd74e33508 [ 318.661217][ T8226] [ 319.021737][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 319.615159][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 319.852944][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 319.932967][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 320.320766][ T8252] FAULT_INJECTION: forcing a failure. [ 320.320766][ T8252] name failslab, interval 1, probability 0, space 0, times 0 [ 320.339054][ T8252] CPU: 0 UID: 0 PID: 8252 Comm: syz.1.414 Tainted: G I syzkaller #0 PREEMPT(full) [ 320.339105][ T8252] Tainted: [I]=FIRMWARE_WORKAROUND [ 320.339117][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.339135][ T8252] Call Trace: [ 320.339146][ T8252] [ 320.339158][ T8252] dump_stack_lvl+0x16c/0x1f0 [ 320.339214][ T8252] should_fail_ex+0x512/0x640 [ 320.339267][ T8252] ? fs_reclaim_acquire+0xae/0x150 [ 320.339320][ T8252] ? tomoyo_open_control+0x51f/0xa30 [ 320.339364][ T8252] should_failslab+0xc2/0x120 [ 320.339408][ T8252] __kmalloc_noprof+0xd2/0x510 [ 320.339455][ T8252] tomoyo_open_control+0x51f/0xa30 [ 320.339493][ T8252] do_dentry_open+0x97f/0x1530 [ 320.339545][ T8252] ? __pfx_tomoyo_open+0x10/0x10 [ 320.339603][ T8252] vfs_open+0x82/0x3f0 [ 320.339659][ T8252] path_openat+0x1de4/0x2cb0 [ 320.339713][ T8252] ? __pfx_path_openat+0x10/0x10 [ 320.339764][ T8252] do_filp_open+0x20b/0x470 [ 320.339805][ T8252] ? __pfx_do_filp_open+0x10/0x10 [ 320.339875][ T8252] ? alloc_fd+0x471/0x7d0 [ 320.339921][ T8252] do_sys_openat2+0x11b/0x1d0 [ 320.339973][ T8252] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.340041][ T8252] __x64_sys_openat+0x174/0x210 [ 320.340092][ T8252] ? __pfx___x64_sys_openat+0x10/0x10 [ 320.340161][ T8252] do_syscall_64+0xcd/0x490 [ 320.340216][ T8252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.340249][ T8252] RIP: 0033:0x7f9fbe58ebe9 [ 320.340275][ T8252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.340306][ T8252] RSP: 002b:00007f9fbc7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.340335][ T8252] RAX: ffffffffffffffda RBX: 00007f9fbe7c5fa0 RCX: 00007f9fbe58ebe9 [ 320.340356][ T8252] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 320.340377][ T8252] RBP: 00007f9fbe611e19 R08: 0000000000000000 R09: 0000000000000000 [ 320.340396][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.340415][ T8252] R13: 00007f9fbe7c6038 R14: 00007f9fbe7c5fa0 R15: 00007ffc3d640258 [ 320.340456][ T8252] [ 320.870213][ T8261] bond0: option all_slaves_active: invalid value () [ 321.054130][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 321.692421][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 321.931849][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 322.011829][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 322.465951][ T8275] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 323.131314][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 323.278601][ T8299] FAULT_INJECTION: forcing a failure. [ 323.278601][ T8299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.313127][ T8299] CPU: 1 UID: 0 PID: 8299 Comm: syz.0.422 Tainted: G I syzkaller #0 PREEMPT(full) [ 323.313178][ T8299] Tainted: [I]=FIRMWARE_WORKAROUND [ 323.313190][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.313209][ T8299] Call Trace: [ 323.313219][ T8299] [ 323.313231][ T8299] dump_stack_lvl+0x16c/0x1f0 [ 323.313286][ T8299] should_fail_ex+0x512/0x640 [ 323.313362][ T8299] _copy_from_user+0x2e/0xd0 [ 323.313394][ T8299] copy_msghdr_from_user+0x98/0x160 [ 323.313436][ T8299] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 323.313485][ T8299] ? __pfx_futex_wake_mark+0x10/0x10 [ 323.313532][ T8299] ___sys_sendmsg+0xfe/0x1d0 [ 323.313574][ T8299] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.313654][ T8299] __sys_sendmsg+0x16d/0x220 [ 323.313696][ T8299] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.313736][ T8299] ? __x64_sys_futex+0x1e0/0x4c0 [ 323.313808][ T8299] do_syscall_64+0xcd/0x490 [ 323.313854][ T8299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.313881][ T8299] RIP: 0033:0x7ff9be18ebe9 [ 323.313902][ T8299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.313928][ T8299] RSP: 002b:00007ff9bc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.313953][ T8299] RAX: ffffffffffffffda RBX: 00007ff9be3c5fa0 RCX: 00007ff9be18ebe9 [ 323.313970][ T8299] RDX: 000000000000c050 RSI: 00002000000016c0 RDI: 0000000000000003 [ 323.313987][ T8299] RBP: 00007ff9be211e19 R08: 0000000000000000 R09: 0000000000000000 [ 323.314004][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.314019][ T8299] R13: 00007ff9be3c6038 R14: 00007ff9be3c5fa0 R15: 00007fff3b5afa38 [ 323.314054][ T8299] [ 323.771571][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 324.010883][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 324.102684][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 324.158177][ T8319] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 325.220396][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 325.228779][ T8342] FAULT_INJECTION: forcing a failure. [ 325.228779][ T8342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.255809][ T8342] CPU: 1 UID: 0 PID: 8342 Comm: syz.3.429 Tainted: G I syzkaller #0 PREEMPT(full) [ 325.255858][ T8342] Tainted: [I]=FIRMWARE_WORKAROUND [ 325.255870][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.255888][ T8342] Call Trace: [ 325.255899][ T8342] [ 325.255910][ T8342] dump_stack_lvl+0x16c/0x1f0 [ 325.255964][ T8342] should_fail_ex+0x512/0x640 [ 325.256021][ T8342] _copy_from_user+0x2e/0xd0 [ 325.256058][ T8342] get_timespec64+0x8b/0x1b0 [ 325.256099][ T8342] ? __pfx_get_timespec64+0x10/0x10 [ 325.256144][ T8342] ? common_nsleep+0xa1/0xd0 [ 325.256186][ T8342] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 325.256221][ T8342] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 325.256273][ T8342] do_syscall_64+0xcd/0x490 [ 325.256325][ T8342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.256357][ T8342] RIP: 0033:0x7feccadc14a5 [ 325.256382][ T8342] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 325.256411][ T8342] RSP: 002b:00007ffd0950f370 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 325.256441][ T8342] RAX: ffffffffffffffda RBX: 00007feccafc5fa0 RCX: 00007feccadc14a5 [ 325.256461][ T8342] RDX: 00007ffd0950f3b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.256481][ T8342] RBP: 00007feccafc7da0 R08: 0000000000000000 R09: 00007feccbb55000 [ 325.256500][ T8342] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000004f76e [ 325.256519][ T8342] R13: 00007feccafc6090 R14: ffffffffffffffff R15: 00007ffd0950f4f0 [ 325.256561][ T8342] [ 326.090640][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 326.169909][ T5878] Bluetooth: hci3: command 0x0406 tx timeout [ 326.309837][ T8380] FAULT_INJECTION: forcing a failure. [ 326.309837][ T8380] name failslab, interval 1, probability 0, space 0, times 0 [ 326.322690][ T8380] CPU: 1 UID: 0 PID: 8380 Comm: syz.2.437 Tainted: G I syzkaller #0 PREEMPT(full) [ 326.322740][ T8380] Tainted: [I]=FIRMWARE_WORKAROUND [ 326.322752][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.322771][ T8380] Call Trace: [ 326.322781][ T8380] [ 326.322793][ T8380] dump_stack_lvl+0x16c/0x1f0 [ 326.322848][ T8380] should_fail_ex+0x512/0x640 [ 326.322918][ T8380] ? fs_reclaim_acquire+0xae/0x150 [ 326.322973][ T8380] ? tomoyo_open_control+0x51f/0xa30 [ 326.323004][ T8380] should_failslab+0xc2/0x120 [ 326.323050][ T8380] __kmalloc_noprof+0xd2/0x510 [ 326.323109][ T8380] tomoyo_open_control+0x51f/0xa30 [ 326.323151][ T8380] do_dentry_open+0x97f/0x1530 [ 326.323194][ T8380] ? __pfx_tomoyo_open+0x10/0x10 [ 326.323253][ T8380] vfs_open+0x82/0x3f0 [ 326.323307][ T8380] path_openat+0x1de4/0x2cb0 [ 326.323359][ T8380] ? __pfx_path_openat+0x10/0x10 [ 326.323412][ T8380] do_filp_open+0x20b/0x470 [ 326.323454][ T8380] ? __pfx_do_filp_open+0x10/0x10 [ 326.323524][ T8380] ? alloc_fd+0x471/0x7d0 [ 326.323573][ T8380] do_sys_openat2+0x11b/0x1d0 [ 326.323626][ T8380] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.323685][ T8380] __x64_sys_openat+0x174/0x210 [ 326.323730][ T8380] ? __pfx___x64_sys_openat+0x10/0x10 [ 326.323790][ T8380] do_syscall_64+0xcd/0x490 [ 326.323840][ T8380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.323874][ T8380] RIP: 0033:0x7f9b7018ebe9 [ 326.323896][ T8380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.323927][ T8380] RSP: 002b:00007f9b71048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 326.323958][ T8380] RAX: ffffffffffffffda RBX: 00007f9b703c5fa0 RCX: 00007f9b7018ebe9 [ 326.323979][ T8380] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 326.323999][ T8380] RBP: 00007f9b70211e19 R08: 0000000000000000 R09: 0000000000000000 [ 326.324017][ T8380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.324036][ T8380] R13: 00007f9b703c6038 R14: 00007f9b703c5fa0 R15: 00007ffd74e33508 [ 326.324087][ T8380] [ 326.927430][ T8380] kvm_intel: kvm [8379]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 327.453528][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.459981][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.107632][ T8403] vhci_hcd: invalid port number 255 [ 328.127152][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 328.137310][ T8403] vhci_hcd: default hub control req: 5903 v0001 i00ff l1 [ 328.718640][ T8434] binder: 8431:8434 ioctl c018620c 0 returned -1 [ 328.786896][ T8434] random: crng reseeded on system resumption [ 329.686615][ T8451] delete_channel: no stack [ 332.028574][ T8498] netlink: 338 bytes leftover after parsing attributes in process `syz.2.464'. [ 332.673274][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.467'. [ 333.786427][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 333.900603][ T8523] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 341.564875][ T8649] netlink: 342 bytes leftover after parsing attributes in process `syz.1.493'. [ 342.951092][ T8657] netlink: 342 bytes leftover after parsing attributes in process `syz.0.494'. [ 344.294046][ T8677] random: crng reseeded on system resumption [ 344.907693][ T30] audit: type=1806 audit(2147483660.336:4): xattr="" res=-22 [ 345.652087][ T8702] netlink: 342 bytes leftover after parsing attributes in process `syz.0.504'. [ 347.193131][ T8729] program syz.1.510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.649066][ T8732] FAULT_INJECTION: forcing a failure. [ 347.649066][ T8732] name failslab, interval 1, probability 0, space 0, times 0 [ 347.719717][ T8732] CPU: 0 UID: 0 PID: 8732 Comm: syz.0.511 Tainted: G I syzkaller #0 PREEMPT(full) [ 347.719774][ T8732] Tainted: [I]=FIRMWARE_WORKAROUND [ 347.719787][ T8732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.719807][ T8732] Call Trace: [ 347.719817][ T8732] [ 347.719829][ T8732] dump_stack_lvl+0x16c/0x1f0 [ 347.719887][ T8732] should_fail_ex+0x512/0x640 [ 347.719942][ T8732] ? __kmalloc_noprof+0xbf/0x510 [ 347.719983][ T8732] ? sk_prot_alloc+0x1a8/0x2a0 [ 347.720016][ T8732] should_failslab+0xc2/0x120 [ 347.720062][ T8732] __kmalloc_noprof+0xd2/0x510 [ 347.720111][ T8732] sk_prot_alloc+0x1a8/0x2a0 [ 347.720150][ T8732] sk_alloc+0x36/0xc20 [ 347.720200][ T8732] pppoe_create+0x32/0x310 [ 347.720247][ T8732] pppox_create+0x15c/0x2c0 [ 347.720296][ T8732] __sock_create+0x335/0x8d0 [ 347.720341][ T8732] __sys_socket+0x14d/0x260 [ 347.720382][ T8732] ? __pfx___sys_socket+0x10/0x10 [ 347.720421][ T8732] ? xfd_validate_state+0x61/0x180 [ 347.720478][ T8732] __x64_sys_socket+0x72/0xb0 [ 347.720515][ T8732] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.720563][ T8732] do_syscall_64+0xcd/0x490 [ 347.720631][ T8732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.720665][ T8732] RIP: 0033:0x7ff9be18ebe9 [ 347.720691][ T8732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.720722][ T8732] RSP: 002b:00007ff9bc3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 347.720751][ T8732] RAX: ffffffffffffffda RBX: 00007ff9be3c6090 RCX: 00007ff9be18ebe9 [ 347.720772][ T8732] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000018 [ 347.720791][ T8732] RBP: 00007ff9be211e19 R08: 0000000000000000 R09: 0000000000000000 [ 347.720809][ T8732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.720827][ T8732] R13: 00007ff9be3c6128 R14: 00007ff9be3c6090 R15: 00007fff3b5afa38 [ 347.720868][ T8732] [ 347.955724][ T8727] can: request_module (can-proto-4) failed. [ 349.645368][ T8761] netlink: 342 bytes leftover after parsing attributes in process `syz.0.517'. [ 350.722268][ T8774] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 352.338183][ T8789] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 355.124207][ T8831] netlink: 342 bytes leftover after parsing attributes in process `syz.3.530'. [ 356.607708][ T8846] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 358.140740][ T8858] netlink: 'syz.0.536': attribute type 2 has an invalid length. [ 358.411472][ T8861] binder: 8859:8861 ioctl c0306201 0 returned -14 [ 360.684763][ T8895] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 361.798012][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 361.833367][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 361.852210][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 361.885114][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 361.897265][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 361.912490][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 361.926889][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 361.942220][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 362.005966][ T8918] __vm_enough_memory: pid: 8918, comm: syz.2.544, bytes: 4398046511104 not enough memory for the allocation [ 363.765752][ T8948] netlink: 338 bytes leftover after parsing attributes in process `syz.3.553'. [ 364.207831][ T8964] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 364.981843][ T8974] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 367.477401][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 367.870003][ T9038] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 368.001371][ T9045] netlink: 93 bytes leftover after parsing attributes in process `syz.1.573'. [ 368.619031][ T9049] vivid-007: ================= START STATUS ================= [ 368.628924][ T9049] vivid-007: Generate PTS: true [ 368.633945][ T9049] vivid-007: Generate SCR: true [ 368.668775][ T9049] tpg source WxH: 320x240 (Y'CbCr) [ 368.694099][ T9049] tpg field: 1 [ 368.745817][ T9049] tpg crop: (0,0)/320x240 [ 368.750443][ T9049] tpg compose: (0,0)/320x240 [ 368.755239][ T9049] tpg colorspace: 8 [ 368.759299][ T9049] tpg transfer function: 0/0 [ 368.764064][ T9049] tpg Y'CbCr encoding: 0/0 [ 368.771783][ T9049] tpg quantization: 0/0 [ 368.776178][ T9049] tpg RGB range: 0/2 [ 368.780425][ T9049] vivid-007: ================== END STATUS ================== [ 371.377611][ T9113] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 372.441053][ T9128] netlink: 342 bytes leftover after parsing attributes in process `syz.3.588'. [ 372.548046][ T9128] netlink: 'syz.3.588': attribute type 3 has an invalid length. [ 372.555949][ T9128] netlink: 294 bytes leftover after parsing attributes in process `syz.3.588'. [ 372.569431][ T9128] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.686642][ T9128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.694136][ T9128] IPv6: NLM_F_CREATE should be set when creating new route [ 372.701444][ T9128] IPv6: NLM_F_CREATE should be set when creating new route [ 373.288189][ T9137] netlink: 310 bytes leftover after parsing attributes in process `syz.1.592'. [ 373.521528][ T9115] FAULT_INJECTION: forcing a failure. [ 373.521528][ T9115] name fail_futex, interval 1, probability 0, space 0, times 0 [ 373.601132][ T9115] CPU: 0 UID: 0 PID: 9115 Comm: syz.2.584 Tainted: G I syzkaller #0 PREEMPT(full) [ 373.601196][ T9115] Tainted: [I]=FIRMWARE_WORKAROUND [ 373.601208][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.601226][ T9115] Call Trace: [ 373.601236][ T9115] [ 373.601248][ T9115] dump_stack_lvl+0x16c/0x1f0 [ 373.601304][ T9115] should_fail_ex+0x512/0x640 [ 373.601362][ T9115] get_futex_key+0x1d0/0x1560 [ 373.601409][ T9115] ? __pfx_get_futex_key+0x10/0x10 [ 373.601462][ T9115] ? __pick_eevdf+0x30a/0x670 [ 373.601511][ T9115] futex_wait_setup+0x9d/0x550 [ 373.601574][ T9115] __futex_wait+0x194/0x2f0 [ 373.601626][ T9115] ? __pfx___futex_wait+0x10/0x10 [ 373.601673][ T9115] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 373.601721][ T9115] ? lockdep_hardirqs_on+0x7c/0x110 [ 373.601776][ T9115] ? __pfx_futex_wake_mark+0x10/0x10 [ 373.601833][ T9115] ? futex_private_hash_put+0x176/0x300 [ 373.601877][ T9115] ? futex_private_hash_put+0x18a/0x300 [ 373.601918][ T9115] futex_wait+0xe8/0x380 [ 373.601976][ T9115] ? __pfx_futex_wait+0x10/0x10 [ 373.602034][ T9115] ? task_mm_cid_work+0x37b/0x900 [ 373.602070][ T9115] do_futex+0x229/0x350 [ 373.602109][ T9115] ? __pfx_do_futex+0x10/0x10 [ 373.602149][ T9115] ? __pfx_task_mm_cid_work+0x10/0x10 [ 373.602180][ T9115] ? __pfx___might_resched+0x10/0x10 [ 373.602217][ T9115] __x64_sys_futex+0x1e0/0x4c0 [ 373.602261][ T9115] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 373.602307][ T9115] ? __pfx___x64_sys_futex+0x10/0x10 [ 373.602349][ T9115] ? xfd_validate_state+0x61/0x180 [ 373.602397][ T9115] ? __pfx_do_writev+0x10/0x10 [ 373.602441][ T9115] do_syscall_64+0xcd/0x490 [ 373.602503][ T9115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.602534][ T9115] RIP: 0033:0x7f9b7018ebe9 [ 373.602558][ T9115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.602586][ T9115] RSP: 002b:00007f9b710060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.602613][ T9115] RAX: ffffffffffffffda RBX: 00007f9b703c6188 RCX: 00007f9b7018ebe9 [ 373.602634][ T9115] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9b703c6188 [ 373.602653][ T9115] RBP: 00007f9b703c6180 R08: 0000000000000000 R09: 0000000000000000 [ 373.602672][ T9115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.602691][ T9115] R13: 00007f9b703c6218 R14: 00007ffd74e33420 R15: 00007ffd74e33508 [ 373.602731][ T9115] [ 373.849296][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.139715][ T9168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'. [ 375.258559][ T9169] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 375.386647][ T9159] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 378.577692][ T9194] ================================================================== [ 378.577707][ T9194] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 378.577742][ T9194] Write of size 8 at addr ffffc90003709000 by task syz.1.602/9194 [ 378.577760][ T9194] [ 378.577773][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.1.602 Tainted: G I syzkaller #0 PREEMPT(full) [ 378.577806][ T9194] Tainted: [I]=FIRMWARE_WORKAROUND [ 378.577815][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.577828][ T9194] Call Trace: [ 378.577836][ T9194] [ 378.577845][ T9194] dump_stack_lvl+0x116/0x1f0 [ 378.577881][ T9194] print_report+0xcd/0x630 [ 378.577912][ T9194] ? __virt_addr_valid+0x81/0x610 [ 378.577944][ T9194] ? sys_imageblit+0x1a6f/0x1e60 [ 378.577968][ T9194] kasan_report+0xe0/0x110 [ 378.577999][ T9194] ? sys_imageblit+0x1a6f/0x1e60 [ 378.578028][ T9194] sys_imageblit+0x1a6f/0x1e60 [ 378.578058][ T9194] ? __pfx_sys_imageblit+0x10/0x10 [ 378.578085][ T9194] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.578122][ T9194] ? find_held_lock+0x2b/0x80 [ 378.578148][ T9194] ? queue_work_on+0x12a/0x1f0 [ 378.578168][ T9194] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.578202][ T9194] ? queue_work_on+0x8b/0x1f0 [ 378.578224][ T9194] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 378.578261][ T9194] bit_putcs+0x90f/0xde0 [ 378.578309][ T9194] ? __pfx_bit_putcs+0x10/0x10 [ 378.578348][ T9194] ? fb_get_color_depth+0x120/0x250 [ 378.578381][ T9194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.578426][ T9194] ? __pfx_bit_putcs+0x10/0x10 [ 378.578461][ T9194] fbcon_putcs+0x384/0x4a0 [ 378.578495][ T9194] do_update_region+0x2e6/0x3f0 [ 378.578523][ T9194] update_region+0xc1/0x160 [ 378.578555][ T9194] vcs_write+0x7c7/0xdb0 [ 378.578589][ T9194] ? __pfx_vcs_write+0x10/0x10 [ 378.578617][ T9194] ? common_file_perm+0x1a9/0x340 [ 378.578648][ T9194] ? bpf_lsm_file_permission+0x9/0x10 [ 378.578683][ T9194] ? security_file_permission+0x71/0x210 [ 378.578717][ T9194] ? rw_verify_area+0xcf/0x6c0 [ 378.578740][ T9194] ? __pfx_vcs_write+0x10/0x10 [ 378.578768][ T9194] vfs_write+0x29d/0x11d0 [ 378.578798][ T9194] ? __pfx_vfs_write+0x10/0x10 [ 378.578823][ T9194] ? find_held_lock+0x2b/0x80 [ 378.578845][ T9194] ? __fget_files+0x204/0x3c0 [ 378.578872][ T9194] ? __fget_files+0x20e/0x3c0 [ 378.578901][ T9194] __x64_sys_pwrite64+0x1eb/0x250 [ 378.578930][ T9194] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 378.578964][ T9194] do_syscall_64+0xcd/0x490 [ 378.579002][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.579026][ T9194] RIP: 0033:0x7f9fbe58ebe9 [ 378.579042][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.579065][ T9194] RSP: 002b:00007f9fbc7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 378.579086][ T9194] RAX: ffffffffffffffda RBX: 00007f9fbe7c6090 RCX: 00007f9fbe58ebe9 [ 378.579102][ T9194] RDX: 0000000000007b05 RSI: 0000200000000340 RDI: 0000000000000052 [ 378.579116][ T9194] RBP: 00007f9fbe611e19 R08: 0000000000000000 R09: 0000000000000000 [ 378.579130][ T9194] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 378.579144][ T9194] R13: 00007f9fbe7c6128 R14: 00007f9fbe7c6090 R15: 00007ffc3d640258 [ 378.579167][ T9194] [ 378.579174][ T9194] [ 378.579180][ T9194] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003409000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 378.579232][ T9194] Memory state around the buggy address: [ 378.579243][ T9194] ffffc90003708f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.579259][ T9194] ffffc90003708f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 378.579275][ T9194] >ffffc90003709000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 378.579287][ T9194] ^ [ 378.579299][ T9194] ffffc90003709080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 378.579314][ T9194] ffffc90003709100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 378.579327][ T9194] ================================================================== [ 378.586465][ T9194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 378.586494][ T9194] CPU: 1 UID: 0 PID: 9194 Comm: syz.1.602 Tainted: G I syzkaller #0 PREEMPT(full) [ 378.586541][ T9194] Tainted: [I]=FIRMWARE_WORKAROUND [ 378.586553][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.586573][ T9194] Call Trace: [ 378.586584][ T9194] [ 378.586596][ T9194] dump_stack_lvl+0x3d/0x1f0 [ 378.586650][ T9194] vpanic+0x6e8/0x7a0 [ 378.586698][ T9194] ? __pfx_vpanic+0x10/0x10 [ 378.586750][ T9194] ? sys_imageblit+0x1a6f/0x1e60 [ 378.586786][ T9194] panic+0xca/0xd0 [ 378.586831][ T9194] ? __pfx_panic+0x10/0x10 [ 378.586878][ T9194] ? sys_imageblit+0x1a6f/0x1e60 [ 378.586913][ T9194] ? preempt_schedule_common+0x44/0xc0 [ 378.586959][ T9194] ? preempt_schedule_thunk+0x16/0x30 [ 378.587007][ T9194] ? check_panic_on_warn+0x1f/0xb0 [ 378.587077][ T9194] check_panic_on_warn+0xab/0xb0 [ 378.587128][ T9194] end_report+0x107/0x170 [ 378.587176][ T9194] kasan_report+0xee/0x110 [ 378.587219][ T9194] ? sys_imageblit+0x1a6f/0x1e60 [ 378.587261][ T9194] sys_imageblit+0x1a6f/0x1e60 [ 378.587303][ T9194] ? __pfx_sys_imageblit+0x10/0x10 [ 378.587342][ T9194] ? do_raw_spin_lock+0x12c/0x2b0 [ 378.587395][ T9194] ? find_held_lock+0x2b/0x80 [ 378.587432][ T9194] ? queue_work_on+0x12a/0x1f0 [ 378.587460][ T9194] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.587507][ T9194] ? queue_work_on+0x8b/0x1f0 [ 378.587539][ T9194] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 378.587592][ T9194] bit_putcs+0x90f/0xde0 [ 378.587653][ T9194] ? __pfx_bit_putcs+0x10/0x10 [ 378.587708][ T9194] ? fb_get_color_depth+0x120/0x250 [ 378.587754][ T9194] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 378.587807][ T9194] ? __pfx_bit_putcs+0x10/0x10 [ 378.587855][ T9194] fbcon_putcs+0x384/0x4a0 [ 378.587900][ T9194] do_update_region+0x2e6/0x3f0 [ 378.587941][ T9194] update_region+0xc1/0x160 [ 378.587985][ T9194] vcs_write+0x7c7/0xdb0 [ 378.588034][ T9194] ? __pfx_vcs_write+0x10/0x10 [ 378.588073][ T9194] ? common_file_perm+0x1a9/0x340 [ 378.588116][ T9194] ? bpf_lsm_file_permission+0x9/0x10 [ 378.588172][ T9194] ? security_file_permission+0x71/0x210 [ 378.588218][ T9194] ? rw_verify_area+0xcf/0x6c0 [ 378.588251][ T9194] ? __pfx_vcs_write+0x10/0x10 [ 378.588289][ T9194] vfs_write+0x29d/0x11d0 [ 378.588331][ T9194] ? __pfx_vfs_write+0x10/0x10 [ 378.588367][ T9194] ? find_held_lock+0x2b/0x80 [ 378.588398][ T9194] ? __fget_files+0x204/0x3c0 [ 378.588437][ T9194] ? __fget_files+0x20e/0x3c0 [ 378.588479][ T9194] __x64_sys_pwrite64+0x1eb/0x250 [ 378.588520][ T9194] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 378.588568][ T9194] do_syscall_64+0xcd/0x490 [ 378.588622][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.588656][ T9194] RIP: 0033:0x7f9fbe58ebe9 [ 378.588680][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.588714][ T9194] RSP: 002b:00007f9fbc7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 378.588745][ T9194] RAX: ffffffffffffffda RBX: 00007f9fbe7c6090 RCX: 00007f9fbe58ebe9 [ 378.588766][ T9194] RDX: 0000000000007b05 RSI: 0000200000000340 RDI: 0000000000000052 [ 378.588786][ T9194] RBP: 00007f9fbe611e19 R08: 0000000000000000 R09: 0000000000000000 [ 378.588806][ T9194] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 378.588825][ T9194] R13: 00007f9fbe7c6128 R14: 00007f9fbe7c6090 R15: 00007ffc3d640258 [ 378.588857][ T9194] [ 378.589190][ T9194] Kernel Offset: disabled