last executing test programs: 11.551197526s ago: executing program 3 (id=2907): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x3ffffe, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, 0x0) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050029bd7000fcdbdf250300000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@hci={0x1f, 0x0, 0x4}, 0x51) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 9.197408253s ago: executing program 0 (id=2911): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) fcntl$auto_F_GETOWNER_UIDS(0xffffffffffffffff, 0x11, 0x8000000000000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) utimes$auto(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x84c, 0x4}) r0 = socket(0xa, 0x2, 0x3a) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, 0x0, 0x6f4) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000000)=@generic={0xa, "dfffffffffffffff00"}, 0x6a) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000340)=""/15, 0x40) r2 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto_SO_RCVBUF(r2, 0x0, 0x8, &(0x7f0000000040)='\x00', 0x4) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x1, 0x0, 0x0, 0xc010}, 0x4000084) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 8.965353686s ago: executing program 1 (id=2912): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x110) clock_settime$auto(0x6d, &(0x7f0000000000)={0x5, 0x2}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x8}, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x1cddc0, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/bdi/mtd-0/wb_stats\x00', 0x24002, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)=@bpf_attr_11={0x1a4e, 0x4, 0x6, 0x7670000, 0x9, 0x7fffffff, 0x1000}, 0xf) ioctl$auto(0x3, 0xc048aec8, r1) mmap$auto(0x0, 0x810004, 0xffb, 0x4008000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x3, &(0x7f0000000140)={@siginfo_0_0={0x2, 0xffffff3b, 0x3, @_sigsys={&(0x7f0000000100)="bb4367fb7f560def999f4279b9ec92537cd9f6383f25c445fa349cb323653ff88d86dd0d077bf6d995d06c", 0x143942, 0x81}}}, 0x7) 8.620827717s ago: executing program 3 (id=2913): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000100)=""/92, 0x5c) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x11, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x11, 0x80003, 0x300) r4 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x40000e6) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) r5 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = bpf$auto(0x1, &(0x7f0000000000)=@link_detach={r5}, 0x7) sendmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, 0x0, 0x5, 0x100003}, 0x4}, 0x2, 0x100) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/shm_next_id\x00', 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) settimeofday$auto(0x0, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000003c0)={r1, &(0x7f0000000180)="43a8c3dee956e6272664f8d8f4bb", 0x7, &(0x7f0000000200)="97daee0574bcd54f08121956d69d810494dee3a81b7efd0edfb21ffc408c663efcf087d732882aed99d5686d66a5a51fd5dcb2dad1f54e64e5f616480d27d3d873441d15bd7b43235eee5fbddc48655a2a2c29608b1369f6afa760fc0d55a1e77f18ad10ec39facde0e4d3b2724cdbfc40d79ea9392d93ea5f67e6d2330eb1aa2642c6a70352ec99d42c63ddf6b37a4a9fdf24dba5a9ae2a1f", 0x6, &(0x7f00000002c0)="3539a379e6dce953dc0faf84730956d105e4913028ee76129c47d3c71e8f0ecf4ec510b8ca9962825ac621d3dcae04ddba9f515b482d06fd144e5f9386c816c66d5ff6a0b46c9c4672fd9188429de2c34a71c17fa0ba6b78b927f5f4f450607f19eae800c715446c7d1ac83ad3b1155119097f57e5c00908d9742bdc73c91e494e0f859b916dd949136d563c39d3565f19a533070ff49ce5e5016f1fed558b2239d299a5e08f20c7348a711303991690bb7a", &(0x7f0000000380)=0xff}) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) r9 = socket(0x1, 0x1, 0x1) mprotect$auto(0x1ffffffff000, 0x40100004, 0x6) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYRES8=r8, @ANYRES16=r9, @ANYBLOB="772f25bd7000ffdbdf2505000000fe81405e0880e8f02f29f18806b14f201d9946e509dc1fd79e2e2eaf6b3e6251701efe79e2ffcfa57e784f39d93f2af16f378ec61df84fc4223ee4e50e59f6e846b872ee93f8ffffffffffffff1c050000a3bc19d593a9"], 0x14}}, 0x415) sendmsg$auto_NL80211_CMD_NEW_STATION(r9, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYRES64=r6, @ANYRES16=0x0, @ANYRESDEC=r2], 0xa8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000091) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) write$auto(r7, &(0x7f0000000440)='/proc/sys\t\x15\x00\x00\x00\x00\x00\x00sxt_id\x00\x00\x00\x00\x00\x00', 0x6) 8.529573381s ago: executing program 2 (id=2914): mmap$auto(0x0, 0x7, 0x8, 0xebe, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_setup$auto(0xffff, &(0x7f0000000580)) clone3$auto(&(0x7f00000000c0)={0xd, 0xb2, 0xfffffffffffffffc, 0x5, 0x3, 0xc, 0x1, 0xfffffffffffffff9, 0x3, 0xd, 0x7e}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x80000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x21, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 7.291425337s ago: executing program 0 (id=2915): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setns(0xc9, 0x0) socket(0x1f, 0x1, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 6.808154998s ago: executing program 1 (id=2916): unshare$auto(0x40000080) select$auto(0xf, &(0x7f0000000140)={[0xfff, 0x8, 0x8, 0x7fffffff, 0xc, 0x8, 0x1, 0xc86, 0xa0b7, 0x9, 0x2, 0xbf, 0x8, 0x59c, 0x609, 0x4]}, &(0x7f0000000280)={[0x8912, 0x80000000001, 0x7, 0xff, 0xa5, 0x8, 0x584, 0xaee, 0x4, 0x6, 0x7a, 0x40000000000a, 0x7, 0x7, 0x2a0, 0x75cd65ac]}, &(0x7f0000000440)={[0x801ff, 0x4, 0xfffffffffffffffd, 0x8, 0x775, 0xffffffffffffffff, 0xffffffffffff2e3d, 0x100003, 0x2, 0x10080, 0x5, 0x4, 0x4, 0x5, 0xf47, 0xbba2]}, &(0x7f00000004c0)={0x4e3, 0x2}) ioctl$auto_FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x841, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='-)', 0x2) write$auto(r0, &(0x7f0000000500)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0x3ff) flock$auto(0xffffffffffffffff, 0x7) unshare$auto(0x40000080) mmap$auto(0x0, 0x400000, 0x7, 0x11, 0xdd, 0x1fffffffffffd) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r2, r2, 0x0, 0xe) r3 = getsockopt$auto_SO_PEERPIDFD(r0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)=0xc32) ioctl$auto(0xffffffffffffffff, 0x800064be, 0x1e6) socket(0xf, 0x3, 0x2) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x440c0) socket(0x1f, 0x3, 0x0) statx$auto(r3, &(0x7f00000005c0)='./file0\x00', 0xfffffabc, 0x10d, &(0x7f0000000600)={0x4, 0x40c0, 0x1, 0xc6ea, 0xffffffffffffffff, 0xee00, 0x5, 0x9, 0x2, 0xf, 0x0, 0x40, {0x3, 0x7}, {0x1, 0x9}, {0x9, 0x5}, {0x8001, 0xfffff800}, 0x4b, 0xfffffffc, 0x7, 0x4, 0x7, 0x0, 0x8, 0x9, 0x8, 0x1, 0x7, 0x10000, [0x2, 0x3, 0x8, 0x9, 0x7, 0xaa7d, 0x8, 0x678f884, 0x80000001]}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x10, 0x0, r4, 0x0, 0x8000) sendmsg$auto_TIPC_NL_BEARER_GET(r3, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="b801000089eb72772295364cd04a0e89a79a3cac7651dbd312b4e5b856cadf22205204cf2dbe3b1f78881e7d60e36c2c4235df14a11c410d92211bd5a292feb6951c660e0e", @ANYRES16, @ANYBLOB="00042abd7000fcdbdf2504000000140101807600a7009f681368c0821bec495473ae75eb9c6fb147d08a32da763972ed132e824cf24282beed7073193e1d295019d8c663fd1e2823c671b833011ddc659852b68f3dc4025dc73b00158df04fe5c9cffae75ac8ee4c54ee7129d08f2013dbe0bf88bafe3f2cf64ef8cb5f366e6895cf706959737aea00000b00ce002c292d7d74260000060014005b0000008300b5004e75dad170aa6400fdd8171dbef8ae15c695c9927ec92e8c21df2bac9d70da09ed8d0c5414db9b6a589dbf356ed3da23503a94fe046bd33d905bf60ee8f3a793ea16ff5621609a3dd9b80c9dbee2c63f27b8a54733fc35bfe091e711cbf7cc7a075d7ff95a0a35df31107eaf55e7cbeb6a80bc87b2c3f6728785dcea45201700900009808b00b580c080b596d52250304d200e82dfe194cbb5971a5a075d78dc815a32dec81509d90ad96dfb0db12322377a2b150eda7c547940383c088dcd0e15135afd4719c9e451f09eadf0856e75230d0247950a1e84584d929cb9791b0f9d0df6dd67e07734f8dbf9cbf5966083d4b9ea465e59236411017a2c052a67f153b92a6c7e6917a830ad786f213f9500"], 0x1b8}, 0x1, 0x0, 0x0, 0x811}, 0x80) socket(0x2, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x7ffff000) keyctl$auto(0x4000001f, 0x1, 0x6, 0x0, 0x3ff) 6.619874825s ago: executing program 3 (id=2917): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) (async) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) (async) adjtimex$auto(&(0x7f0000000780)={0xf, 0x0, 0x2b8, 0x100000001, 0x6, 0xffffffffffffffff, 0x2, 0x0, 0xe, 0x0, 0x5, {0x2fa}, 0x7fffffffffffffff, 0x4, 0x5, 0x1, 0x0, 0x6, 0x400000000, 0x7, 0x9, 0x5, 0x1}) (async) adjtimex$auto(&(0x7f00000002c0)={0x8c15, 0x0, 0xfff, 0x7f, 0x1, 0xffffffffffffff16, 0x3, 0x0, 0xb, 0x1, 0x104, {0x10002, 0x4}, 0x8, 0x0, 0x4, 0xffffff62, 0x0, 0x40, 0x1, 0x3, 0xfffffffffffffffe, 0x1000000005, 0x1}) adjtimex$auto(&(0x7f0000000540)={0x72, 0x0, 0xff, 0x800, 0x2, 0xffffffffffffffff, 0xa0c, 0x0, 0x3ffbffffffffff, 0x9536, 0x4007, {0x200, 0x4}, 0x80, 0x80, 0x5, 0x5, 0x0, 0x100000000, 0x21, 0x18d, 0x6, 0xa, 0x2015}) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/190, 0xfffffe39) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async, rerun: 64) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async, rerun: 64) pselect6$auto(0x7b6, &(0x7f00000000c0)={[0x800, 0x80000000, 0x1, 0x8, 0x9, 0x5, 0x4, 0x8001, 0x5, 0x2f3, 0x800, 0xeba, 0x1, 0x4, 0x2, 0xfffffffffffffffb]}, &(0x7f0000000180)={[0x5, 0x8, 0x7fffffff, 0x9, 0x10, 0x7, 0x3, 0x8, 0x2, 0x8f0, 0x6, 0x2, 0x6, 0x4, 0x22, 0x3]}, &(0x7f0000000200)={[0x5, 0x0, 0x4, 0x3, 0x40, 0x3, 0x1ed, 0x7, 0x6, 0x1, 0xbd, 0x0, 0x6, 0x7, 0xc, 0x1100000000000]}, &(0x7f00000003c0)={0x6, 0x5}, &(0x7f0000000400)="bb6077f3ffb9dea7d86e07f77c8efa5f81effa9c7f078587bdb357796e0e062ab25760c8f742684daa7f4f38e2eaa571ee1ee6a288cdebfd5e574491f8b11d42f1dee05cf9544d7cc25b7afe739bafcc8ff8fbc14e373d5ecd3481a433538439d0e7c881793ac0b016f41fdd78c0a54e64f698680005465d2b80e8043ae195318b7fa0f5f2390cf5bded7030a8acb334639a") (async) pwrite64$auto(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x3) (async) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000080), r2) (async) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) (async) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) unshare$auto(0x40000080) unshare$auto(0x40000080) semtimedop$auto(0x7, &(0x7f00000004c0)={0x6, 0x3, 0x4}, 0x6, &(0x7f0000000500)={0x1, 0x112ad58f}) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 6.536092227s ago: executing program 2 (id=2918): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) setns(0xc9, 0x0) r0 = socket(0x1f, 0x1, 0x3) shutdown$auto(r0, 0x10001) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, &(0x7f0000000580)={0x1, 0xdb36}) setfsgid$auto(0x0) bind$auto(0x3, &(0x7f0000000100)=@ax25={0x3, @default, 0x8}, 0x6a) rseq$auto(0x0, 0x20, 0x0, 0x7) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/stat/rt_cache\x00', 0x12b940, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[], 0x11c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) keyctl$auto(0xa097, 0x0, 0x0, 0x0, 0x7fff) pread64$auto(r1, 0x0, 0x100000001, 0x400000000000100) setsockopt$auto(r1, 0x25, 0x1d, 0x0, 0x8002) 6.323554871s ago: executing program 0 (id=2919): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x1a) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x1a) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f0000000180)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a", 0x2a) fremovexattr$auto(r0, &(0x7f0000000000)='\x00') mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setfsgid$auto(0xee01) (async) r1 = setfsgid$auto(0xee01) r2 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x8003, 0x0, 0x4) get_mempolicy$auto(0x0, 0x0, 0x3ff, 0x9, 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) kcmp$auto(0x0, 0x1, 0x0, r2, r0) (async) kcmp$auto(0x0, 0x1, 0x0, r2, r0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port1/quirks\x00', 0x800, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port1/quirks\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/63, 0x3f) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/63, 0x3f) r4 = socket(0x21, 0x3, 0x10000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@xdp={0x2c, 0x8, r5, 0x31}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) (async) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) semget$auto(0x0, 0x2e4a, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.903062659s ago: executing program 1 (id=2920): mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a0200, 0x0) (async, rerun: 64) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) unshare$auto(0x40000080) (async) r1 = socket(0x2c, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) (async, rerun: 32) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/features/freeze_notification\x00', 0x1, 0x0) (async, rerun: 32) socket(0x11, 0x80003, 0x300) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2281, 0x0) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x3f, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x4}, 0x2, 0x5) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/neigh/vlan1/proxy_qlen\x00', 0x121300, 0x0) (rerun: 32) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) (async, rerun: 32) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) unshare$auto(0x40000080) (async) socket(0x1d, 0x2, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) (async, rerun: 64) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket(0x28, 0x1, 0x0) (rerun: 64) 4.506822599s ago: executing program 2 (id=2921): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x103000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000000140)={0xa}, &(0x7f0000000180)={@_si_pad}, &(0x7f0000000200)={0xffffffff, 0x9}, 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x0) setsockopt$auto(r0, 0xb, 0xb, 0x0, 0x2) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) write$auto(0x3, 0x0, 0xffd8) 4.355992085s ago: executing program 3 (id=2922): unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f2, 0x14) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop1\x00', 0x84100, 0x0) mmap$auto(0x0, 0x8000000003fffff, 0x7, 0x11, r0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x642042, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000340)=""/15, 0x40) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) lseek$auto(r0, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000010) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40001, 0x0) madvise$auto(0x1, 0x7dd, 0x4) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(0x0, 0x9) renameat2$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0xa, 0x801, 0x106) unshare$auto(0x40000080) mmap$auto(0x0, 0x0, 0x7, 0x11, 0xffffffffffffffff, 0xcf) 4.355813535s ago: executing program 0 (id=2923): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000006c0)=""/249, 0x138) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) keyctl$auto_KEYCTL_RESTRICT_KEYRING(0x1d, 0xd4, 0x9, 0x9, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x84100, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bridge0/unres_qlen\x00', 0x80200, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f0000000100)=""/219, 0xdb) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setitimer$auto(0x2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x12) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC0D0p\x00', 0x18002, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, 0x0) socket(0xa, 0x1, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mprotect$auto(0x200000000000, 0x806121, 0x4) bpf$auto(0x5, &(0x7f0000000000)=@test={0x12, 0x1, 0x3ee, 0x0, 0xfffffffffffffffe, 0x10000000000003, 0x3da1, 0x7f, 0x8, 0x10000, 0xfffffffffffffff8, 0x0, 0x7fffffff, 0x6, 0x20001}, 0x171) writev$auto(0xffffffffffffffff, 0x0, 0x5) quotactl$auto(0x2, &(0x7f0000000200)='/dw\x1b^\xd2s\xec\xeeev/..\x00\x00\x00', 0x62a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000280)='/dev/media19\x00', 0x28000, 0x0) creat$auto(&(0x7f0000000080)='./file0\x00', 0x0) socket(0x2, 0x2, 0x0) 2.692681479s ago: executing program 2 (id=2924): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) get_mempolicy$auto(&(0x7f0000000000)=0x4a, 0x0, 0x7, 0xffffffffffffe48a, 0x1) sysfs$auto(0x2, 0x10, 0x0) r0 = fsopen$auto(0x0, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x40342, 0x22) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x3ff, 0xa, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r2) sched_setaffinity$auto(0x0, 0x8, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40c0}, 0x4080) futex_waitv$auto(&(0x7f0000000000)={0xe88b, 0x7ffffffff000, 0x68d6}, 0x1, 0x0, 0x0, 0x623c) r4 = socket(0x10, 0x2, 0x0) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r5) sendmsg$auto_TIPC_NL_MEDIA_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ca9cee9640816571c6824843c9084f3d060d403933a0863e21eaef568001ec4b320bde5ff52aacc0277a3c6293018acee4b1947455126782eedc7d26ca44f98a90b6a50b0c7a6dd35e4ac92d80fd1fd8dcb207db145cc4a61b368a02947fbf970049a3b95a686d08591c7d7b5baa9c3fe0181f108110acda5b6bb23cacfb229b657adf2728337ce9322e22b72f021a2f1188f0a6da751fa000fff1b452f91bec6d6d476dcb2c1b5c777f7def7ca3359fc3d021c45faecbc645a27dc80d492e0bd53c63d195807a2b1ab791184be08a414cb1f8db077e514fa035e6d2d01a6d3de61f7c82ce5d627ee6f877c22cbb916e1b0577ba7ce45a872b968c7d3e66e228f9ef1bebf5965205326c796aef29c5", @ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf250c00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) sendmsg$auto_TIPC_NL_NET_GET(r1, &(0x7f0000002200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000021c0)={&(0x7f0000000600)={0x1bac, r6, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@generic="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"]}, @TIPC_NLA_LINK={0x16d, 0x4, 0x0, 0x1, [@typed={0x7d, 0xf9, 0x0, 0x0, @binary="16855204e01c93ecccabb618301074c05e4f2a1874134a84058565aa939c7a1efddea96860c0c30728a79dd2ee7dfb25f4a66a25cfe0a40b5b21bb5a3593152e9aeb20dae853e46a2be83ffca5dc737d37c2b55ed3d20491d9ccfa86586ed07708ecf884707382ccf527af00e6560028d4ef2580452be62f2e"}, @generic="a3f249cd4fcd284c18024607b26926eba60546a416ff6c7745fa91be8b39c98b17e9609616e9d5fd0ff636b3888c369366107d69283ffa01dbda77a82c5dfa6da6139139ea0aa00ffb79936c6bbd3d813ba00daebb8ac16d252226a26694caa4736718e9dbf68aa6b6947e7d62f4f6a60779422c0116b189e2ffe6cec9a0d91cc1a1a510bd7722f8d7a043fb347a4a90bde2edcd2634f15a20b14fe7ebe88c533a02d499a5b76e1105be968492a67b50f8084e75115f487bc79477f679dea660bad98f1d30bfb623e4a6d952064ffdea521684fa1d", @typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x9, 0x1a, 0x0, 0x0, @str='nfsd\x00'}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@typed={0xb6, 0x2c, 0x0, 0x0, @binary="e5505e084d739fc96d5a4b820fef6f00c886470c7b72a2d721feff3ed87b8ed86f2547c8f7c05310414b7a7543d4aec1cbaa595450f5dbbda99d480344687b3173863f6f001513d63b5d46abefb3e99d343d8a05602a32dbb1f59034a79b781697bef4d7ec642fb4e9f7c8cdfdb3944405523ab8f9d98bded6ebdcdd81fd9644d06940da84cc9dc1dc0a3cbcd144ca9e1915614fec9a257945409865a186d62172c4498897dbf75b27a25b53e2d8bb0d8565"}]}, @TIPC_NLA_MON={0x158, 0x9, 0x0, 0x1, [@nested={0x14d, 0x2c, 0x0, 0x1, [@typed={0xc, 0x117, 0x0, 0x0, @u64}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x4, 0x11a}, @typed={0x4, 0x83}, @generic="f641d49a9fb59daad7b4300314a8955a23a3ed61b1a9db90dab0da2c77a65ae1d4c7da73bb0f3d443643f74c59d08c4d979ab94aec4bc0a6453c1ddc21451d8bbe90f4492b1957a0b2b8b2269f2edbfc96d9391c4fe1fdb6ec0166d61d6271398e1b1b7cdaade21c2c962b6c1ce6f6ee3f22c153e5e7142b5aee2737c8ef0f3f6763227043927bff6d106342b65e4445ee3a04aa62e5d6048923b5714a652e91e5027d19a1419484ddfc85b6aeb90199c2bc6cffc749f0a4e87ceff37281a4435dfe8277486c8992b766c644b7833415e2489b53b0f4", @generic="dddab8f43eeb4a50844a7f3258efa58ebdcc93959bb866bc57365e10231593e2b8c5c253aacc206f5ddf53", @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x15b}, @nested={0x4, 0x11e}, @nested={0x4, 0x14d}]}, @typed={0x4, 0x52}]}, @TIPC_NLA_NAME_TABLE={0x161, 0x8, 0x0, 0x1, [@nested={0xc, 0xd2, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @u32=0x1e}]}, @generic="42745e222c70f73839ba98042794a8e0d5b443772da3adb9dcaf6667d8bec4ef86ac7f6458c9357fa335e6f35d4c820a411329159b7d41e087753725b41a572b43d1d4721bdd6deb918a8a6ab35c8df6f6", @typed={0x8, 0x32, 0x0, 0x0, @fd=r4}, @generic="414a115445111f1f056c977b921c1d8d2dc75319b7308ae9eaeb06087a616ad745646e8df7e00917aa1937cb319bf92f74b1e919a5d6ac409ed29a8349756ed9ee5cc1c98bc48286c33a924ce7ab739bb409fc37d78be64fe816da8c30b7b1e73197e080636b7ee90a49ff170af8769587975fffae92c2b8679269345b5781d4f9f03ec93161b2b6f7a96ade16a3f02214d5a72e991bec44430ef2e74fbd7618618687a3a20e5a1301160435adbd9439c0b8f2b9be8ed2f3048450e83aee1cf39064bd4a2e6b49d1f892812f5f76a738d21f9233c6cc59dd5135d55b036f0ca8ea46780cb6cffba3f111d3963684c26e3ef15912cbad0d53"]}, @TIPC_NLA_NET={0x225, 0x7, 0x0, 0x1, [@typed={0x14, 0x126, 0x0, 0x0, @ipv6=@loopback}, @nested={0x126, 0x83, 0x0, 0x1, [@generic="9a334b23ca67516d7f1c3fd2fe772c81ab9c3308028b2d9a8c585ef08ef31d7027b99c75177262286f1a17e823e6328d5c03d52eb8e73f231500dc341ea5e0f6de6d0d1dda742e945413894e53a847e781280f30cf", @typed={0x14, 0xfc, 0x0, 0x0, @ipv6=@loopback}, @generic="481a6d14abecb03b57da422c1f1defa20b85258e8e79715a477b625a8a813699ec4b22b099f03b5b76fc902a16fa8f8d1df7d620bdfc79238f621884787f4382d01fe4fb5591f73f622389cf1772d0d98555d4eed8182c2f8d8fbf27ba10c8538639fd4d6c508769376c5e8a7c1daeb5265ef4b72040a41a893307b2a0ef5d5697e97b59e878f821906a61504a0467a5580603faa75d9c289587a08595197544b983de5be065caeac492c1ded53e68311728b4d478", @nested={0x4, 0x12a}]}, @generic="8b5bb94327e0cacef01e663d4dd1f0e491088b3eb0332dc6f07d12f81d7f2ffa2507fe8d128971efc1b071a0b615a6c1fe180c11f91cd523ea2c9b96bae2e9542979f0386dce7fe59eb0a41c25ec41f3e703cb5e8d75a6096e03fd535fb60845ed1f0c07f9d37e98095c0d8cef64723367b5fd4a77a4f88306d86fe3aaba70e27bf0f6684dcbcf37eef4cc267ed7c2233861da2a386bee8a30455aec251fcc58f0886cc7bffcf01713f15c729c3fdf9bf7a56962f2c319454375965905a011d6a9c1fb025f6c9b1f29177db2b8da83231f", @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@remote}]}, @TIPC_NLA_NET={0x127c, 0x7, 0x0, 0x1, [@typed={0x14, 0x157, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="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", @generic="b2a72de4e1d0bfec2bd606dc7bbc28568f6ddf9a5f5d9c6e57b71de82cda43581017f8c6e9b3d24f44540224a836c9545be168f3f3ca21fa9e0607e2027e52dae3d753978a103e4fa18e58c7a458df09537367530108e70e450379e2041251bdb942aab34ee5814ce25ae1631dd1d7121b37bc47738b8ec1fa840e8fa087ac3ea0c15a1aad82eb1bce6d16e3cc9d500d1a9372422c5f8ba6ec5e958f82596cb976a95b579e8711c0a014c4cdeca2c54c7b", @generic="36d27d7b6e511dfee1cc896b80688fdea7e803fdd05133847d10df16c1c36cf42132f5b48ff2dbb978310330a20852769354f2b935dd3b008612edba162bb4ffd12a641acbe0a21357c3ad0bdff907c68148ee0991e25a5a26d4c018b3163976c100fb287e82f0a2eaf4e188d646464fd0798dd0547a43543b170a4298670819064fd1068086ccc30159c329b514b7412d624e2d2dbdbaf0d85a5147d4633d3326520c291425f5dfac17af76f5ed4e1b05639c792b5bea", @generic="2f344d7e73c6080a64c6e72cea8fc7fb5d13f3c7014404dd9d68635cdbcef4167f14a269bae6fa52cd8ba7e2f070584483718e451518665822799cfbd6b21480530681a5332b18656f842bc47d10965f8f8d81fcf2a0112be6a630bc822ddea534a5a9da56308b299aa30392d475d1d9f46a1963caee88d58b175e359fcd49ece9879cbdc5e6359ab0ca76bab5a344b207c7af1a7ef5b21b3128e72d575fc615510167116be0ec0ea2925f112be9934e013be97c92d2", @generic="7ad16a6e42bffdccb1c473aad7f6d7ea827e7f6c008120d1ead40daaa5bba1c02266929b436d0a8af6c3e9aff697b66c72cdbe668470af0c03ee02481f04e53e37001a01709c"]}, @TIPC_NLA_PUBL={0x10c, 0x3, 0x0, 0x1, [@nested={0x105, 0x90, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @u32=0x8}, @generic="5cbbf50e26d83c6f6a3ede4c47f162ecf60045f739a26e1affa994c8374dd6e5f69917204e66687c16dddbc5663e0d492c5982109ab151df0d279ae26d72aac43e43662b9fece12a3f4b22b48be4d56604f403b3764469111a76a01322e60ffd8ba6f64d137b7875f4c42126b5a66031f815636d475a51de3a87a14509ff835251d2b5c82f969f7a052c382b5081d26af6ef13c8f00b73e49396a9f97264c2ff5671b4059f46d66dac23e674c22d6fba16e93e2ce891205fb980f3136fdbe715890c7ccf20bc8b0209a6f2071b156aefcab0313e86bffe5527188c5930c8bf192878091fff0dbcb9f0bcec657d5d44852a24582706", @nested={0x4, 0x1e}]}]}]}, 0x1bac}, 0x1, 0x0, 0x0, 0x20044058}, 0x4c881) 2.585189058s ago: executing program 3 (id=2925): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\xdcn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x01\x00\x00\x00\x00\x00\x00\x003.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x6) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r1 = open(&(0x7f0000000200)='./cgroup/file0\x00', 0x280081, 0xb5d1af1605322dc2) open_by_handle_at$auto(r1, &(0x7f0000000180)={0x1, 0x2, "02"}, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) read$auto(r2, 0x0, 0x4b) umount2$auto(0x0, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f00000001c0)="352c8efa618c0bcf83a4ebdb27ec25906b0e1015b18c429fc1d7c523728754e15f334a572cad539da201096bbbc2ce7db19c429b3f6e", 0x36) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0xfffffffffffffd6c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000094) r5 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x2000000, 0x2000000000008000}) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video11\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/module/ath9k/parameters/use_msi\x00', 0x8502, 0x0) umount2$auto(&(0x7f00000001c0)='\x00', 0x1) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000300)="7188b5e2c80d1b5d10ca81dcf782edc1f0c8af72b29cc084f15dcc9705b02477fded5e24183edbfa06ae821041fcf4b3d5519fecc112c2f64099db31d3", 0x3d) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x9, 0x2) 2.518119195s ago: executing program 0 (id=2926): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x0, 0x0) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x20, 0x0) (async, rerun: 32) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) (rerun: 32) unshare$auto(0x40000080) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001c00)=""/4111, 0x100f) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setns(0xc9, 0x0) (async, rerun: 64) r3 = socket(0x1f, 0x1, 0x0) shutdown$auto(r3, 0x10001) (async) execveat$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) socket(0x28, 0x1, 0x0) (async) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) (async) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dmmidi2\x00', 0x208c81, 0x0) (async) read$auto(0xffffffffffffffff, &(0x7f00000004c0)='/sys/kernel/debug/tracing/set_event\x00', 0xfff) (async) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x7, 0x30, &(0x7f0000000380)='/sys/kernI\xa8n\x80+\x87(\xef\xd5\xb5N\xf7\xf95\xf6el/debug/traing/saved_tgids\x00\x00', &(0x7f0000000340)=0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (async, rerun: 64) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) (rerun: 64) 2.439651445s ago: executing program 1 (id=2927): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') ioctl$auto(r0, 0x8004b709, 0x1) (async) unshare$auto(0x40000080) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0) (async) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) pwrite64$auto(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) (async) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) (async) ioperm$auto(0x7, 0x5ad2, 0x8) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) (async) open(0x0, 0x161342, 0x130) (async) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x600200, 0x0) gettimeofday$auto(&(0x7f00000000c0)={0xfffffffffffff349}, &(0x7f0000000100)={0x9}) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x7fffffff, 0x8000000000000, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) (async, rerun: 32) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (async, rerun: 32) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x0, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x16bd00, 0x0) socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x5e23, @remote}, 0x6a) (async) pread64$auto(r3, 0x0, 0x100000001, 0x400000000000100) (async, rerun: 64) write$auto(r2, 0x0, 0x6) (rerun: 64) 2.212649781s ago: executing program 2 (id=2928): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/admmidi2\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08002c00ff0700000c000600b2c949380000000005000f0016000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4141) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(0x200000003, 0x2) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000580)={{@raw=0x7000, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000963, 0x2, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/40, 0x28) ioperm$auto(0x7, 0x6, 0x80) r3 = syz_clone3(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) syz_clone3(&(0x7f00000005c0)={0x20000700, &(0x7f0000000100), 0x0, &(0x7f0000000340), {0x5}, &(0x7f0000000380)=""/184, 0xb8, &(0x7f0000000440)=""/234, &(0x7f0000000540)=[r3, r3, r3, 0x0, 0x0, r3], 0x6}, 0x58) r4 = socket(0xa, 0x1, 0x84) listen$auto(0xffffffffffffffff, 0x6) accept4$auto(r4, 0x0, 0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 574.428675ms ago: executing program 3 (id=2929): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0x1f, 0x2, 0x10) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r0) clone3$auto(&(0x7f0000000140)={0x4ff, 0x8, 0x2, 0xa6dd, 0x2, 0x20, 0xff, 0x8, 0x1, 0x401, 0x57}, 0x7ffffffffffffffe) sendmsg$auto_IPVS_CMD_ZERO(r0, &(0x7f0000001980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={0x0, 0x358}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000001) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = getpid() shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x4, 0xb}, 0x9, 0x1ff, 0x9, 0x2, @inferred=r1, @inferred=0xffffffffffffffff, 0xfffe, 0x0, &(0x7f00000001c0), 0x0}) r3 = setfsgid$auto(r2) connect$auto(0x3, 0x0, 0x51) shutdown$auto(0x200000003, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) rseq$auto(0x0, 0x6, 0x8, 0x10) r4 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x8a480, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r4, 0x50009404, &(0x7f00000005c0)={@raw=0x4, "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"}) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x2000, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000000280)=""/127, 0x7f) prctl$auto(0x18, 0x4000000000000001, 0x2009, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x37f) clock_nanosleep$auto(0x80000001, 0x1, &(0x7f0000000000)={0x8, 0x571}, &(0x7f0000000040)={0x2, 0xffffffff00000000}) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=@bpf_attr_11={0x8, 0xffffffffffffff1b, 0x200, 0x7, 0x2, 0xa, 0x10, r0}, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 319.993065ms ago: executing program 1 (id=2930): statmount$auto(0x0, &(0x7f0000000180)={0x5, 0xb9, 0x44f, 0xa, 0x1, 0x1007181, 0x8a0d, 0x5, 0x10007, 0x7, 0x89, 0x29, 0x4, 0x1ffffffffffe, 0x5, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffff00, 0x6, 0x401, 0x22402, 0x9, 0xfffffffd, 0x84, 0x4, 0x0, 0x6, 0x0, 0x0, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x0, 0x8, 0x138c8000000, 0x9, 0xd, 0x10004, 0xdbc, 0x7, 0x1fc, 0x20000000, 0x10000000000001, 0xb00000000, 0x0, 0x46, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x400000000, 0x0, 0x8, 0x0, 0x0, 0xc4, 0x0, 0xfffffffffffffffc, 0x3, 0xe, 0x3, 0x0, 0x0, 0xa53, 0xbd9, 0xfffffffffffffffd]}, 0x7, 0xd) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)="08f7e361f63f45e3bdbff30e0b8c15ca848e87605384c6a1f17294ddd0e99888c2aa3ab206fb6ca73373e47e255d889be753177c43e5e41fa5a3917fc84f99a5c6a63bff5c66171b3531c9288ce42464ff1ee13909d63d51c8b77b4ef465a1f9f544f7b33ed9adb830ddc519c867d98315e1d1ffc0fdd2186734072c41f78c3651cd1bf874408dc5baa1234c94e00663d794f8bb90483655981255482b01a7241d1e7bbf711e68051efde5320157b183ed1596075e38a25684606cbde9c9c696b50f85a6102c23f8ad893cf005f6da52b8") r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd0a, &(0x7f00000001c0)) 255.777029ms ago: executing program 0 (id=2931): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) setns(0xc9, 0x0) r0 = socket(0x1f, 0x1, 0x3) shutdown$auto(r0, 0x10001) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, &(0x7f0000000580)={0x1, 0xdb36}) setfsgid$auto(0x0) bind$auto(0x3, &(0x7f0000000100)=@ax25={0x3, @default, 0x8}, 0x6a) rseq$auto(0x0, 0x20, 0x0, 0x7) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/stat/rt_cache\x00', 0x12b940, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[], 0x11c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) keyctl$auto(0xa097, 0x0, 0x0, 0x0, 0x7fff) pread64$auto(r1, 0x0, 0x100000001, 0x400000000000100) setsockopt$auto(r1, 0x25, 0x1d, 0x0, 0x8002) 138.63829ms ago: executing program 1 (id=2932): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0x1f, 0x2, 0x10) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r0) clone3$auto(&(0x7f0000000140)={0x4ff, 0x8, 0x2, 0xa6dd, 0x2, 0x20, 0xff, 0x8, 0x1, 0x401, 0x57}, 0x7ffffffffffffffe) sendmsg$auto_IPVS_CMD_ZERO(r0, &(0x7f0000001980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f00000015c0)=ANY=[], 0x358}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000001) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = getpid() shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x4, 0xb}, 0x9, 0x1ff, 0x9, 0x2, @inferred=r1, @inferred=0xffffffffffffffff, 0xfffe, 0x0, &(0x7f00000001c0), 0x0}) r3 = setfsgid$auto(r2) connect$auto(0x3, 0x0, 0x51) shutdown$auto(0x200000003, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) rseq$auto(0x0, 0x6, 0x8, 0x10) r4 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x8a480, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r4, 0x50009404, &(0x7f00000005c0)={@raw=0x4, "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"}) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x2000, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000000280)=""/127, 0x7f) prctl$auto(0x18, 0x4000000000000001, 0x2009, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x37f) clock_nanosleep$auto(0x80000001, 0x1, &(0x7f0000000000)={0x8, 0x571}, &(0x7f0000000040)={0x2, 0xffffffff00000000}) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=@bpf_attr_11={0x8, 0xffffffffffffff1b, 0x200, 0x7, 0x2, 0xa, 0x10, r0}, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 0s ago: executing program 2 (id=2933): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x103000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000000140)={0xa}, &(0x7f0000000180)={@_si_pad}, &(0x7f0000000200)={0xffffffff, 0x9}, 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x0) setsockopt$auto(r0, 0xb, 0xb, 0x0, 0x2) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) write$auto(0x3, 0x0, 0xffd8) kernel console output (not intermixed with test programs): 937][T22180] bpf_map_do_batch+0x66f/0x6d0 [ 1191.330966][T22180] __sys_bpf+0x4ce/0x4a30 [ 1191.330991][T22180] ? __pfx___sys_bpf+0x10/0x10 [ 1191.331010][T22180] ? find_held_lock+0x2b/0x80 [ 1191.331030][T22180] ? get_pid_task+0xfc/0x250 [ 1191.331049][T22180] ? get_pid_task+0xfc/0x250 [ 1191.331075][T22180] ? find_held_lock+0x2b/0x80 [ 1191.331099][T22180] ? rcu_read_lock_any_held+0x6a/0x90 [ 1191.331121][T22180] ? find_held_lock+0x2b/0x80 [ 1191.331140][T22180] ? ksys_write+0x190/0x250 [ 1191.331159][T22180] ? ksys_write+0x190/0x250 [ 1191.331177][T22180] ? lock_acquire+0x1d1/0x380 [ 1191.331217][T22180] ? fput+0x7c/0x100 [ 1191.331240][T22180] ? ksys_write+0x1ac/0x250 [ 1191.331262][T22180] ? __x64_sys_bpf+0xce/0x140 [ 1191.331280][T22180] __x64_sys_bpf+0xce/0x140 [ 1191.331308][T22180] ? do_syscall_64+0xae/0x770 [ 1191.331330][T22180] do_syscall_64+0x121/0x770 [ 1191.331349][T22180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.331368][T22180] RIP: 0033:0x7f34d159e159 [ 1191.331385][T22180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.331403][T22180] RSP: 002b:00007f34cf7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1191.331422][T22180] RAX: ffffffffffffffda RBX: 00007f34d1826450 RCX: 00007f34d159e159 [ 1191.331434][T22180] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 1191.331445][T22180] RBP: 00007f34cf7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.331455][T22180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.331466][T22180] R13: 00007f34d18264e8 R14: 00007f34d1826450 R15: 00007ffd46c99ae8 [ 1191.331488][T22180] [ 1192.026564][T22156] Process accounting paused [ 1193.633070][T22204] synth uevent: /module/sr_mod: unknown uevent action string [ 1199.214428][T22279] FAULT_INJECTION: forcing a failure. [ 1199.214428][T22279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1199.214461][T22279] CPU: 0 UID: 0 PID: 22279 Comm: syz.0.1928 Not tainted syzkaller #0 PREEMPT(full) [ 1199.214482][T22279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1199.214492][T22279] Call Trace: [ 1199.214499][T22279] [ 1199.214506][T22279] dump_stack_lvl+0x100/0x190 [ 1199.214537][T22279] should_fail_ex.cold+0x5/0xa [ 1199.214560][T22279] _copy_from_user+0x2e/0xd0 [ 1199.214586][T22279] generic_map_update_batch+0x534/0x890 [ 1199.214612][T22279] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1199.214636][T22279] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1199.214655][T22279] bpf_map_do_batch+0x66f/0x6d0 [ 1199.214683][T22279] __sys_bpf+0x4ce/0x4a30 [ 1199.214707][T22279] ? __pfx___sys_bpf+0x10/0x10 [ 1199.214726][T22279] ? find_held_lock+0x2b/0x80 [ 1199.214746][T22279] ? get_pid_task+0xfc/0x250 [ 1199.214765][T22279] ? get_pid_task+0xfc/0x250 [ 1199.214790][T22279] ? find_held_lock+0x2b/0x80 [ 1199.214814][T22279] ? rcu_read_lock_any_held+0x6a/0x90 [ 1199.214835][T22279] ? find_held_lock+0x2b/0x80 [ 1199.214854][T22279] ? ksys_write+0x190/0x250 [ 1199.214872][T22279] ? ksys_write+0x190/0x250 [ 1199.214891][T22279] ? lock_acquire+0x1d1/0x380 [ 1199.214929][T22279] ? fput+0x7c/0x100 [ 1199.214952][T22279] ? ksys_write+0x1ac/0x250 [ 1199.214974][T22279] ? __x64_sys_bpf+0xce/0x140 [ 1199.214993][T22279] __x64_sys_bpf+0xce/0x140 [ 1199.215013][T22279] ? do_syscall_64+0xae/0x770 [ 1199.215033][T22279] do_syscall_64+0x121/0x770 [ 1199.215052][T22279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.215071][T22279] RIP: 0033:0x7faff3f9e159 [ 1199.215087][T22279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.215105][T22279] RSP: 002b:00007faff4e9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1199.215124][T22279] RAX: ffffffffffffffda RBX: 00007faff4226450 RCX: 00007faff3f9e159 [ 1199.215136][T22279] RDX: 0000000000000081 RSI: 0000200000000380 RDI: 000000000000001a [ 1199.215147][T22279] RBP: 00007faff4e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.215157][T22279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.215168][T22279] R13: 00007faff42264e8 R14: 00007faff4226450 R15: 00007ffe77919f78 [ 1199.215189][T22279] [ 1206.478485][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 1208.966248][ T5624] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1211.026472][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1213.094003][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1214.906074][T22518] net_ratelimit: 920 callbacks suppressed [ 1214.906094][T22518] netlink: zone id is out of range [ 1214.906101][T22518] netlink: zone id is out of range [ 1214.906107][T22518] netlink: zone id is out of range [ 1214.906117][T22518] netlink: zone id is out of range [ 1214.906124][T22518] netlink: zone id is out of range [ 1214.906130][T22518] netlink: zone id is out of range [ 1214.906137][T22518] netlink: zone id is out of range [ 1214.906143][T22518] netlink: zone id is out of range [ 1214.906148][T22518] netlink: zone id is out of range [ 1214.906154][T22518] netlink: zone id is out of range [ 1219.941893][T22588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1219.944481][T22588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1219.945097][T22588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1219.945267][T22588] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1220.238185][T22585] syz.0.1967 (22585) used greatest stack depth: 18960 bytes left [ 1221.448060][T11390] Bluetooth: hci2: command 0x0c1a tx timeout [ 1222.005391][T11390] Bluetooth: hci4: command 0x0c1a tx timeout [ 1222.005434][T11390] Bluetooth: hci1: command 0x0c1a tx timeout [ 1222.005457][T11390] Bluetooth: hci3: command 0x0c1a tx timeout [ 1223.742150][T22609] Process accounting resumed [ 1226.127464][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 1228.038606][T22725] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.1984'. [ 1228.198565][T22726] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.1983'. [ 1230.458047][T22759] synth uevent: /module/sr_mod: unknown uevent action string [ 1232.531307][T22789] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3302266462.2417750473.2276798763), cmd(3) [ 1234.581214][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1234.581265][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1234.708080][T22820] nfsd: Unknown parameter '•k8ƒÏÅDÌ' [ 1234.787875][T22821] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.1998'. [ 1236.371220][T22830] net_ratelimit: 455 callbacks suppressed [ 1236.371242][T22830] openvswitch: netlink: IP tunnel dst address not specified [ 1238.434950][T22883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2004'. [ 1241.781436][T22927] netlink: zone id is out of range [ 1241.781455][T22927] netlink: zone id is out of range [ 1241.781463][T22927] netlink: zone id is out of range [ 1241.781473][T22927] netlink: zone id is out of range [ 1241.781482][T22927] netlink: zone id is out of range [ 1241.781488][T22927] netlink: zone id is out of range [ 1241.781494][T22927] netlink: zone id is out of range [ 1241.781500][T22927] netlink: zone id is out of range [ 1241.781506][T22927] netlink: zone id is out of range [ 1241.781512][T22927] netlink: zone id is out of range [ 1243.094246][T22948] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2012'. [ 1249.581989][T23028] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 1252.065173][T23041] net_ratelimit: 919 callbacks suppressed [ 1252.065195][T23041] netlink: zone id is out of range [ 1252.065203][T23041] netlink: zone id is out of range [ 1252.065209][T23041] netlink: zone id is out of range [ 1252.065228][T23041] netlink: zone id is out of range [ 1252.065236][T23041] netlink: zone id is out of range [ 1252.065242][T23041] netlink: zone id is out of range [ 1252.065249][T23041] netlink: zone id is out of range [ 1252.065256][T23041] netlink: zone id is out of range [ 1252.065262][T23041] netlink: zone id is out of range [ 1252.065282][T23041] netlink: zone id is out of range [ 1254.026022][T23044] Process accounting paused [ 1254.492339][T23093] usb usb40: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1256.720169][T23136] FAULT_INJECTION: forcing a failure. [ 1256.720169][T23136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.720212][T23136] CPU: 0 UID: 0 PID: 23136 Comm: syz.0.2038 Not tainted syzkaller #0 PREEMPT(full) [ 1256.720234][T23136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1256.720245][T23136] Call Trace: [ 1256.720252][T23136] [ 1256.720259][T23136] dump_stack_lvl+0x100/0x190 [ 1256.720293][T23136] should_fail_ex.cold+0x5/0xa [ 1256.720320][T23136] _copy_to_user+0x32/0xd0 [ 1256.720349][T23136] simple_read_from_buffer+0xcb/0x170 [ 1256.720376][T23136] proc_fail_nth_read+0x1af/0x230 [ 1256.720400][T23136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1256.720422][T23136] ? rw_verify_area+0xce/0x6d0 [ 1256.720451][T23136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1256.720471][T23136] vfs_read+0x1e4/0xb40 [ 1256.720491][T23136] ? lock_acquire+0x1d1/0x380 [ 1256.720518][T23136] ? __fget_files+0x34/0x3d0 [ 1256.720539][T23136] ? __pfx_vfs_read+0x10/0x10 [ 1256.720557][T23136] ? find_held_lock+0x2b/0x80 [ 1256.720577][T23136] ? __fget_files+0x215/0x3d0 [ 1256.720602][T23136] ? __fget_files+0x21f/0x3d0 [ 1256.720629][T23136] ksys_read+0x12a/0x250 [ 1256.720648][T23136] ? __pfx_ksys_read+0x10/0x10 [ 1256.720674][T23136] do_syscall_64+0x121/0x770 [ 1256.720701][T23136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.720721][T23136] RIP: 0033:0x7faff3f5e98e [ 1256.720737][T23136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1256.720755][T23136] RSP: 002b:00007faff4e9cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1256.720775][T23136] RAX: ffffffffffffffda RBX: 00007faff4e9d6c0 RCX: 00007faff3f5e98e [ 1256.720787][T23136] RDX: 000000000000000f RSI: 00007faff4e9d0a0 RDI: 0000000000000004 [ 1256.720798][T23136] RBP: 00007faff4e9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.720809][T23136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.720819][T23136] R13: 00007faff42264e8 R14: 00007faff4226450 R15: 00007ffe77919f78 [ 1256.720842][T23136] [ 1260.694551][T23175] net_ratelimit: 454 callbacks suppressed [ 1260.694572][T23175] netlink: zone id is out of range [ 1260.694579][T23175] netlink: zone id is out of range [ 1260.694586][T23175] netlink: zone id is out of range [ 1260.694595][T23175] netlink: zone id is out of range [ 1260.694603][T23175] netlink: zone id is out of range [ 1260.694609][T23175] netlink: zone id is out of range [ 1260.694615][T23175] netlink: zone id is out of range [ 1260.694621][T23175] netlink: zone id is out of range [ 1260.694627][T23175] netlink: zone id is out of range [ 1260.694632][T23175] netlink: zone id is out of range [ 1261.068044][T23187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2044'. [ 1263.834798][T23211] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1263.834996][T23211] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1263.835105][T23211] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1263.835209][T23211] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1264.902197][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1265.185007][T23251] FAULT_INJECTION: forcing a failure. [ 1265.185007][T23251] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.185038][T23251] CPU: 0 UID: 0 PID: 23251 Comm: syz.1.2055 Not tainted syzkaller #0 PREEMPT(full) [ 1265.185061][T23251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1265.185071][T23251] Call Trace: [ 1265.185077][T23251] [ 1265.185084][T23251] dump_stack_lvl+0x100/0x190 [ 1265.185115][T23251] should_fail_ex.cold+0x5/0xa [ 1265.185139][T23251] should_failslab+0xc2/0x120 [ 1265.185165][T23251] __kmalloc_cache_noprof+0x91/0x6d0 [ 1265.185197][T23251] ? copy_net_ns+0x135/0x7a0 [ 1265.185223][T23251] copy_net_ns+0x135/0x7a0 [ 1265.185240][T23251] ? copy_cgroup_ns+0x71/0x970 [ 1265.185271][T23251] create_new_namespaces+0x3ea/0xac0 [ 1265.185304][T23251] unshare_nsproxy_namespaces+0xf2/0x220 [ 1265.185334][T23251] ksys_unshare+0x4a2/0xa70 [ 1265.185354][T23251] ? __pfx_ksys_unshare+0x10/0x10 [ 1265.185380][T23251] __x64_sys_unshare+0x31/0x40 [ 1265.185401][T23251] do_syscall_64+0x121/0x770 [ 1265.185422][T23251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.185441][T23251] RIP: 0033:0x7fe3dcf9e159 [ 1265.185457][T23251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.185474][T23251] RSP: 002b:00007fe3ddf3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1265.185493][T23251] RAX: ffffffffffffffda RBX: 00007fe3dd225fa0 RCX: 00007fe3dcf9e159 [ 1265.185505][T23251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1265.185516][T23251] RBP: 00007fe3dd03506b R08: 0000000000000000 R09: 0000000000000000 [ 1265.185527][T23251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.185537][T23251] R13: 00007fe3dd226038 R14: 00007fe3dd225fa0 R15: 00007ffe75e14fb8 [ 1265.185559][T23251] [ 1265.857352][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 1265.857386][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1265.857431][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 1270.209321][ T5624] Bluetooth: hci2: unexpected event 0x2c length: 1022 > 17 [ 1272.862909][T23395] synth uevent: /module/sr_mod: unknown uevent action string [ 1272.966255][T23396] synth uevent: /module/sr_mod: unknown uevent action string [ 1274.837412][T23414] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2073'. [ 1274.883190][T23414] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2073'. [ 1275.655180][T23435] net_ratelimit: 447 callbacks suppressed [ 1275.655215][T23435] netlink: zone id is out of range [ 1275.655222][T23435] netlink: zone id is out of range [ 1275.655228][T23435] netlink: zone id is out of range [ 1275.655238][T23435] netlink: zone id is out of range [ 1275.655245][T23435] netlink: zone id is out of range [ 1275.655251][T23435] netlink: zone id is out of range [ 1275.655257][T23435] netlink: zone id is out of range [ 1275.655263][T23435] netlink: zone id is out of range [ 1275.655269][T23435] netlink: zone id is out of range [ 1275.655275][T23435] netlink: zone id is out of range [ 1284.692739][T23545] Process accounting resumed [ 1287.062438][T23597] FAULT_INJECTION: forcing a failure. [ 1287.062438][T23597] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.062477][T23597] CPU: 0 UID: 0 PID: 23597 Comm: syz.2.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1287.062504][T23597] Tainted: [L]=SOFTLOCKUP [ 1287.062511][T23597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1287.062521][T23597] Call Trace: [ 1287.062528][T23597] [ 1287.062535][T23597] dump_stack_lvl+0x100/0x190 [ 1287.062569][T23597] should_fail_ex.cold+0x5/0xa [ 1287.062594][T23597] should_failslab+0xc2/0x120 [ 1287.062642][T23597] __kmalloc_noprof+0xfc/0x840 [ 1287.062664][T23597] ? get_callchain_buffers+0x123/0x380 [ 1287.062752][T23597] get_callchain_buffers+0x123/0x380 [ 1287.062772][T23597] ? bpf_lsm_capable+0x9/0x10 [ 1287.062801][T23597] ? security_capable+0x80/0x260 [ 1287.062830][T23597] stack_map_alloc+0x316/0x610 [ 1287.062878][T23597] map_create+0x874/0x30d0 [ 1287.062910][T23597] ? __lock_acquire+0x5c0/0x1f40 [ 1287.062949][T23597] ? __pfx_map_create+0x10/0x10 [ 1287.062978][T23597] ? lock_acquire+0x1d1/0x380 [ 1287.063003][T23597] ? __might_fault+0xc5/0x140 [ 1287.063034][T23597] ? __might_fault+0xc5/0x140 [ 1287.063071][T23597] __sys_bpf+0x12a0/0x4a30 [ 1287.063096][T23597] ? __pfx___sys_bpf+0x10/0x10 [ 1287.063115][T23597] ? find_held_lock+0x2b/0x80 [ 1287.063134][T23597] ? get_pid_task+0xfc/0x250 [ 1287.063153][T23597] ? get_pid_task+0xfc/0x250 [ 1287.063180][T23597] ? find_held_lock+0x2b/0x80 [ 1287.063208][T23597] ? rcu_read_lock_any_held+0x6a/0x90 [ 1287.063231][T23597] ? find_held_lock+0x2b/0x80 [ 1287.063250][T23597] ? ksys_write+0x190/0x250 [ 1287.063270][T23597] ? ksys_write+0x190/0x250 [ 1287.063289][T23597] ? lock_acquire+0x1d1/0x380 [ 1287.063330][T23597] ? fput+0x7c/0x100 [ 1287.063353][T23597] ? ksys_write+0x1ac/0x250 [ 1287.063375][T23597] ? __x64_sys_bpf+0xce/0x140 [ 1287.063394][T23597] __x64_sys_bpf+0xce/0x140 [ 1287.063415][T23597] ? do_syscall_64+0xae/0x770 [ 1287.063435][T23597] do_syscall_64+0x121/0x770 [ 1287.063455][T23597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.063474][T23597] RIP: 0033:0x7f0da279e159 [ 1287.063492][T23597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.063510][T23597] RSP: 002b:00007f0da364d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1287.063529][T23597] RAX: ffffffffffffffda RBX: 00007f0da2a25fa0 RCX: 00007f0da279e159 [ 1287.063541][T23597] RDX: 00000000000006f4 RSI: 0000200000000640 RDI: 0000000000000000 [ 1287.063553][T23597] RBP: 00007f0da364d090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.063564][T23597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.063574][T23597] R13: 00007f0da2a26038 R14: 00007f0da2a25fa0 R15: 00007ffe4f4b0cd8 [ 1287.063598][T23597] [ 1288.774007][T23630] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.2099'. [ 1295.704438][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.704487][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.082080][T23783] net_ratelimit: 455 callbacks suppressed [ 1299.082102][T23783] netlink: zone id is out of range [ 1299.082109][T23783] netlink: zone id is out of range [ 1299.082115][T23783] netlink: zone id is out of range [ 1299.082124][T23783] netlink: zone id is out of range [ 1299.082132][T23783] netlink: zone id is out of range [ 1299.082138][T23783] netlink: zone id is out of range [ 1299.082143][T23783] netlink: zone id is out of range [ 1299.082150][T23783] netlink: zone id is out of range [ 1299.082156][T23783] netlink: zone id is out of range [ 1299.082162][T23783] netlink: zone id is out of range [ 1300.560321][T23807] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1302.654507][T23836] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2128'. [ 1305.464110][T23871] can: request_module (can-proto-0) failed. [ 1307.433279][T23900] net_ratelimit: 449 callbacks suppressed [ 1307.433302][T23900] netlink: zone id is out of range [ 1307.433311][T23900] netlink: zone id is out of range [ 1307.433318][T23900] netlink: zone id is out of range [ 1307.433327][T23900] netlink: zone id is out of range [ 1307.433335][T23900] netlink: zone id is out of range [ 1307.433341][T23900] netlink: zone id is out of range [ 1307.433347][T23900] netlink: zone id is out of range [ 1307.433353][T23900] netlink: zone id is out of range [ 1307.433359][T23900] netlink: zone id is out of range [ 1307.433365][T23900] netlink: zone id is out of range [ 1310.221190][T23937] synth uevent: /module/sr_mod: unknown uevent action string [ 1312.810567][ T1391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.936169][T11390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1312.944052][T11390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1312.963119][T11390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1312.964287][T11390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1312.965764][T11390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1313.474950][ T1391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.857270][ T1391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.151463][ T1391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.041250][ T5624] Bluetooth: hci0: command tx timeout [ 1315.205421][T24000] net_ratelimit: 920 callbacks suppressed [ 1315.205441][T24000] netlink: zone id is out of range [ 1315.205449][T24000] netlink: zone id is out of range [ 1315.205455][T24000] netlink: zone id is out of range [ 1315.205464][T24000] netlink: zone id is out of range [ 1315.205472][T24000] netlink: zone id is out of range [ 1315.205486][T24000] netlink: zone id is out of range [ 1315.205492][T24000] netlink: zone id is out of range [ 1315.205499][T24000] netlink: zone id is out of range [ 1315.205504][T24000] netlink: zone id is out of range [ 1315.205510][T24000] netlink: zone id is out of range [ 1315.686307][ T1391] bridge_slave_1: left allmulticast mode [ 1315.686333][ T1391] bridge_slave_1: left promiscuous mode [ 1315.686491][ T1391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.709648][ T1391] bridge_slave_0: left allmulticast mode [ 1315.709672][ T1391] bridge_slave_0: left promiscuous mode [ 1315.709824][ T1391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.034148][ T1391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.047989][ T1391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.049885][ T1391] bond0 (unregistering): Released all slaves [ 1316.408077][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1317.020963][T23963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.023865][T23963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.024470][T23963] bridge_slave_0: entered allmulticast mode [ 1317.053756][T23963] bridge_slave_0: entered promiscuous mode [ 1317.069729][T23963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.069810][T23963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.069936][T23963] bridge_slave_1: entered allmulticast mode [ 1317.101028][T23963] bridge_slave_1: entered promiscuous mode [ 1317.111637][ T5624] Bluetooth: hci0: command tx timeout [ 1317.135205][ T1391] hsr_slave_0: left promiscuous mode [ 1317.139490][ T1391] hsr_slave_1: left promiscuous mode [ 1317.140186][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.140205][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.177209][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.177231][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.203182][ T1391] veth1_macvtap: left promiscuous mode [ 1317.203217][ T1391] veth0_macvtap: left promiscuous mode [ 1317.203296][ T1391] veth1_vlan: left promiscuous mode [ 1317.203344][ T1391] veth0_vlan: left promiscuous mode [ 1317.681948][ T1391] team0 (unregistering): Port device team_slave_1 removed [ 1317.711821][ T1391] team0 (unregistering): Port device team_slave_0 removed [ 1318.012941][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1318.032174][T23963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.061626][T23963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.104801][T23987] Process accounting paused [ 1318.250026][T23963] team0: Port device team_slave_0 added [ 1318.289069][T23963] team0: Port device team_slave_1 added [ 1318.402001][T23963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.402025][T23963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.402048][T23963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.452833][T23963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.452851][T23963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.452875][T23963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.898033][T23963] hsr_slave_0: entered promiscuous mode [ 1318.912418][T23963] hsr_slave_1: entered promiscuous mode [ 1318.917315][T23963] debugfs: 'hsr0' already exists in 'hsr' [ 1318.917340][T23963] Cannot create hsr debugfs directory [ 1319.179827][ T5624] Bluetooth: hci0: command tx timeout [ 1320.344628][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1321.250668][ T5624] Bluetooth: hci0: command tx timeout [ 1326.368025][T23963] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1326.410192][T23963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1326.422686][T23963] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1326.504911][T23963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1326.507286][T23963] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1326.548180][T23963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1326.563998][T23963] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1326.595440][T23963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1330.976407][T23963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.275025][T23963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.336250][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.336333][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.365656][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.365740][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.663777][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1334.101922][T24286] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1334.646571][T23963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.389101][T23963] veth0_vlan: entered promiscuous mode [ 1335.489680][T23963] veth1_vlan: entered promiscuous mode [ 1336.764383][T23963] veth0_macvtap: entered promiscuous mode [ 1336.955125][T23963] veth1_macvtap: entered promiscuous mode [ 1337.512256][T23963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.695681][T23963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.347055][ T1391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.350119][ T1391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.350174][ T1391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.350206][ T1391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.384828][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.384853][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.552489][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.552514][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.793179][T24388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1342.793394][T24388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1342.793560][T24388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1342.793718][T24388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1342.793790][T24388] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1342.856000][T24388] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1344.728341][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1344.806818][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 1344.806878][ T5624] Bluetooth: hci4: command 0x0c1a tx timeout [ 1344.806902][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1345.296394][T24439] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1345.530300][T24442] can: request_module (can-proto-5) failed. [ 1346.875746][T11390] Bluetooth: hci0: command 0x0c1a tx timeout [ 1348.945228][T11390] Bluetooth: hci0: command 0x0c1a tx timeout [ 1349.516311][T24499] Process accounting resumed [ 1349.946108][T24532] FAULT_INJECTION: forcing a failure. [ 1349.946108][T24532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.946142][T24532] CPU: 0 UID: 0 PID: 24532 Comm: syz.3.2196 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.946167][T24532] Tainted: [L]=SOFTLOCKUP [ 1349.946173][T24532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1349.946184][T24532] Call Trace: [ 1349.946190][T24532] [ 1349.946197][T24532] dump_stack_lvl+0x100/0x190 [ 1349.946231][T24532] should_fail_ex.cold+0x5/0xa [ 1349.946256][T24532] _copy_to_user+0x32/0xd0 [ 1349.946286][T24532] keyctl_capabilities+0x5a/0x160 [ 1349.946316][T24532] __do_sys_keyctl+0x427/0x5a0 [ 1349.946343][T24532] do_syscall_64+0x121/0x770 [ 1349.946368][T24532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.946388][T24532] RIP: 0033:0x7f34d159e159 [ 1349.946403][T24532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.946421][T24532] RSP: 002b:00007f34cf7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1349.946440][T24532] RAX: ffffffffffffffda RBX: 00007f34d1826450 RCX: 00007f34d159e159 [ 1349.946452][T24532] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1349.946462][T24532] RBP: 00007f34cf7f6090 R08: 00000000000003ff R09: 0000000000000000 [ 1349.946474][T24532] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1349.946484][T24532] R13: 00007f34d18264e8 R14: 00007f34d1826450 R15: 00007ffd46c99ae8 [ 1349.946506][T24532] [ 1351.683635][T24554] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1351.971434][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.295754][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.381294][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1352.398549][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1352.399532][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1352.407603][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1352.427184][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1352.780201][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.828976][ T60] bridge_slave_1: left allmulticast mode [ 1353.829006][ T60] bridge_slave_1: left promiscuous mode [ 1353.829206][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.873273][ T60] bridge_slave_0: left allmulticast mode [ 1353.873309][ T60] bridge_slave_0: left promiscuous mode [ 1353.873490][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.516161][T11390] Bluetooth: hci3: command tx timeout [ 1354.578951][T24599] random: crng reseeded on system resumption [ 1354.639370][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.658989][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.674199][ T60] bond0 (unregistering): Released all slaves [ 1354.927912][T24604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2204'. [ 1355.739333][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1355.798428][ T60] hsr_slave_0: left promiscuous mode [ 1355.806239][ T60] hsr_slave_1: left promiscuous mode [ 1355.806940][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.806960][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.832345][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.832370][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.897940][ T60] veth1_macvtap: left promiscuous mode [ 1355.897987][ T60] veth0_macvtap: left promiscuous mode [ 1355.898063][ T60] veth1_vlan: left promiscuous mode [ 1355.898121][ T60] veth0_vlan: left promiscuous mode [ 1356.372304][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1356.403174][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1356.585485][T11390] Bluetooth: hci3: command tx timeout [ 1356.829059][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.829106][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1357.698864][T24634] net_ratelimit: 920 callbacks suppressed [ 1357.698887][T24634] netlink: zone id is out of range [ 1357.698895][T24634] netlink: zone id is out of range [ 1357.698901][T24634] netlink: get zone limit has 8 unknown bytes [ 1357.951380][T24563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.951512][T24563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.951627][T24563] bridge_slave_0: entered allmulticast mode [ 1357.955554][T24563] bridge_slave_0: entered promiscuous mode [ 1357.992507][T24563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.992581][T24563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.992684][T24563] bridge_slave_1: entered allmulticast mode [ 1358.021750][T24563] bridge_slave_1: entered promiscuous mode [ 1358.587908][T24563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.654618][T11390] Bluetooth: hci3: command tx timeout [ 1358.812049][T24563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.989408][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1359.161587][T24563] team0: Port device team_slave_0 added [ 1359.258491][T24563] team0: Port device team_slave_1 added [ 1359.397489][T24563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1359.397510][T24563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.397532][T24563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.455951][T24563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.455970][T24563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.455993][T24563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.663307][T24563] hsr_slave_0: entered promiscuous mode [ 1359.680676][T24563] hsr_slave_1: entered promiscuous mode [ 1360.723818][T11390] Bluetooth: hci3: command tx timeout [ 1363.656014][T24563] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1363.671861][T24563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1363.673787][T24563] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1363.696368][T24563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1363.927398][T24563] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1363.931590][T24563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1364.135560][T24563] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1364.159485][T24563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1365.255784][T24563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.492142][T24563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.556422][T24469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.556518][T24469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.582995][T24469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.583070][T24469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1367.376081][T24825] FAULT_INJECTION: forcing a failure. [ 1367.376081][T24825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.376114][T24825] CPU: 0 UID: 0 PID: 24825 Comm: syz.1.2223 Tainted: G L syzkaller #0 PREEMPT(full) [ 1367.376140][T24825] Tainted: [L]=SOFTLOCKUP [ 1367.376146][T24825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1367.376157][T24825] Call Trace: [ 1367.376163][T24825] [ 1367.376170][T24825] dump_stack_lvl+0x100/0x190 [ 1367.376201][T24825] should_fail_ex.cold+0x5/0xa [ 1367.376224][T24825] _copy_from_user+0x2e/0xd0 [ 1367.376250][T24825] kstrtouint_from_user+0xd6/0x1d0 [ 1367.376317][T24825] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1367.376340][T24825] ? lock_acquire+0x1d1/0x380 [ 1367.376372][T24825] proc_fail_nth_write+0x83/0x220 [ 1367.376396][T24825] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1367.376422][T24825] vfs_write+0x2aa/0x1050 [ 1367.376446][T24825] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1367.376466][T24825] ? lock_acquire+0x1d1/0x380 [ 1367.376498][T24825] ? __fget_files+0x34/0x3d0 [ 1367.376521][T24825] ? __pfx_vfs_write+0x10/0x10 [ 1367.376539][T24825] ? find_held_lock+0x2b/0x80 [ 1367.376560][T24825] ? __fget_files+0x215/0x3d0 [ 1367.376584][T24825] ? __fget_files+0x21f/0x3d0 [ 1367.376611][T24825] ksys_write+0x12a/0x250 [ 1367.376631][T24825] ? __pfx_ksys_write+0x10/0x10 [ 1367.376658][T24825] do_syscall_64+0x121/0x770 [ 1367.376680][T24825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.376699][T24825] RIP: 0033:0x7f6f7595e98e [ 1367.376715][T24825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1367.376733][T24825] RSP: 002b:00007f6f768befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1367.376754][T24825] RAX: ffffffffffffffda RBX: 00007f6f768bf6c0 RCX: 00007f6f7595e98e [ 1367.376767][T24825] RDX: 0000000000000001 RSI: 00007f6f768bf0a0 RDI: 0000000000000003 [ 1367.376778][T24825] RBP: 00007f6f768bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.376789][T24825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.376799][T24825] R13: 00007f6f75c26038 R14: 00007f6f75c25fa0 R15: 00007ffd4af05228 [ 1367.376822][T24825] [ 1369.229065][T24563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.433963][T24563] veth0_vlan: entered promiscuous mode [ 1369.482705][T24563] veth1_vlan: entered promiscuous mode [ 1369.603844][T24563] veth0_macvtap: entered promiscuous mode [ 1369.630079][T24563] veth1_macvtap: entered promiscuous mode [ 1369.752621][T24563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.856936][T24563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1371.012952][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.013003][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.013034][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.013065][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.299741][T23005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.299765][T23005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1371.410535][T23005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1371.410558][T23005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.072653][T24897] synth uevent: /module/sr_mod: unknown uevent action string [ 1378.146122][T24971] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1383.461708][T25058] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1386.386567][T25096] IPVS: length: 117 != 21224 [ 1393.124862][T25201] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 1393.124885][T25201] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 1396.908937][T25249] FAULT_INJECTION: forcing a failure. [ 1396.908937][T25249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1396.908974][T25249] CPU: 0 UID: 0 PID: 25249 Comm: syz.1.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1396.909000][T25249] Tainted: [L]=SOFTLOCKUP [ 1396.909007][T25249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1396.909018][T25249] Call Trace: [ 1396.909024][T25249] [ 1396.909031][T25249] dump_stack_lvl+0x100/0x190 [ 1396.909063][T25249] should_fail_ex.cold+0x5/0xa [ 1396.909088][T25249] _copy_to_user+0x32/0xd0 [ 1396.909122][T25249] keyctl_capabilities+0x5a/0x160 [ 1396.909152][T25249] __do_sys_keyctl+0x427/0x5a0 [ 1396.909179][T25249] do_syscall_64+0x121/0x770 [ 1396.909201][T25249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.909220][T25249] RIP: 0033:0x7f6f7599e159 [ 1396.909237][T25249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.909255][T25249] RSP: 002b:00007f6f7681a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1396.909273][T25249] RAX: ffffffffffffffda RBX: 00007f6f75c26450 RCX: 00007f6f7599e159 [ 1396.909286][T25249] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000000000000001f [ 1396.909296][T25249] RBP: 00007f6f7681a090 R08: 8000000000000000 R09: 0000000000000000 [ 1396.909307][T25249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1396.909318][T25249] R13: 00007f6f75c264e8 R14: 00007f6f75c26450 R15: 00007ffd4af05228 [ 1396.909340][T25249] [ 1404.925457][T25361] netlink: zone id is out of range [ 1404.925475][T25361] netlink: zone id is out of range [ 1404.925482][T25361] netlink: zone id is out of range [ 1404.925488][T25361] netlink: get zone limit has 4 unknown bytes [ 1405.110353][T25367] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1405.130437][T25359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1405.130608][T25359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1405.130717][T25359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1405.130821][T25359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1405.130864][T25359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1405.174308][T25359] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1407.125039][T11390] Bluetooth: hci0: command 0x0c1a tx timeout [ 1407.126173][T11390] Bluetooth: hci1: command 0x0c1a tx timeout [ 1407.126201][T11390] Bluetooth: hci2: command 0x0c1a tx timeout [ 1407.126257][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 1407.305585][T24853] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1409.192008][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 1411.063330][T25474] capability: warning: `syz.2.2306' uses 32-bit capabilities (legacy support in use) [ 1411.261669][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 1411.895017][T25489] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1412.881834][T25502] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1412.991577][T25503] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.2309'. [ 1413.916665][T25520] netlink: zone id is out of range [ 1413.916682][T25520] netlink: zone id is out of range [ 1413.916688][T25520] netlink: zone id is out of range [ 1413.916695][T25520] netlink: get zone limit has 4 unknown bytes [ 1416.164009][T25558] synth uevent: /module/sr_mod: unknown uevent action string [ 1417.535755][T25577] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1417.716611][T25585] nfs: Unknown parameter '/sys/devices/virtual/net/eql/statistics/tx_carrier_errors' [ 1417.948042][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.948097][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1419.457148][T25593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1419.457301][T25593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1419.457406][T25593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1419.656869][T23005] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.048628][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1420.053667][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1420.054446][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1420.091762][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1420.093905][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1420.378488][T23005] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.689179][T25621] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.2326'. [ 1420.770530][T23005] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.005296][T23005] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.370788][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1421.448283][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1421.448335][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 1422.164428][ T5624] Bluetooth: hci2: command tx timeout [ 1422.265820][T23005] bridge_slave_1: left allmulticast mode [ 1422.265850][T23005] bridge_slave_1: left promiscuous mode [ 1422.266026][T23005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.268047][T23005] bridge_slave_0: left allmulticast mode [ 1422.268069][T23005] bridge_slave_0: left promiscuous mode [ 1422.268206][T23005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.750888][T23005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.776462][T23005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.780517][T23005] bond0 (unregistering): Released all slaves [ 1423.775428][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1424.237289][ T5624] Bluetooth: hci2: command tx timeout [ 1424.582849][T23005] hsr_slave_0: left promiscuous mode [ 1424.583450][T23005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.583469][T23005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.584147][T23005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.584163][T23005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.636236][T23005] veth1_macvtap: left promiscuous mode [ 1424.636277][T23005] veth0_macvtap: left promiscuous mode [ 1424.636350][T23005] veth1_vlan: left promiscuous mode [ 1424.636419][T23005] veth0_vlan: left promiscuous mode [ 1425.140302][T25689] netlink: zone id is out of range [ 1425.140321][T25689] netlink: zone id is out of range [ 1425.140328][T25689] netlink: zone id is out of range [ 1425.140348][T25689] netlink: zone id is out of range [ 1425.140357][T25689] netlink: zone id is out of range [ 1425.140364][T25689] netlink: zone id is out of range [ 1425.140370][T25689] netlink: zone id is out of range [ 1425.140377][T25689] netlink: zone id is out of range [ 1425.140384][T25689] netlink: zone id is out of range [ 1425.140390][T25689] netlink: zone id is out of range [ 1425.319946][T23005] team0 (unregistering): Port device team_slave_1 removed [ 1425.363562][T23005] team0 (unregistering): Port device team_slave_0 removed [ 1425.874016][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1426.303511][ T5624] Bluetooth: hci2: command tx timeout [ 1426.647684][T25600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.647766][T25600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.647871][T25600] bridge_slave_0: entered allmulticast mode [ 1426.649098][T25600] bridge_slave_0: entered promiscuous mode [ 1426.824016][T25600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.825430][T25600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.825585][T25600] bridge_slave_1: entered allmulticast mode [ 1426.853917][T25600] bridge_slave_1: entered promiscuous mode [ 1427.104083][T25600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.411166][T25600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.717624][T25600] team0: Port device team_slave_0 added [ 1427.984041][T25600] team0: Port device team_slave_1 added [ 1428.043327][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1428.331894][T25600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.331914][T25600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.331935][T25600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.378190][ T5624] Bluetooth: hci2: command tx timeout [ 1428.454687][T25600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.454705][T25600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.454727][T25600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.667382][T25600] hsr_slave_0: entered promiscuous mode [ 1428.669749][T25600] hsr_slave_1: entered promiscuous mode [ 1428.684043][T25600] debugfs: 'hsr0' already exists in 'hsr' [ 1428.684063][T25600] Cannot create hsr debugfs directory [ 1429.281021][T25743] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1429.282935][T25743] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1429.283086][T25743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1429.283250][T25743] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1429.283320][T25743] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1429.338714][T25743] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1430.310898][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1431.317301][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1431.317352][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 1431.317375][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 1431.317395][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1433.387517][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1433.389008][T25600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1433.394699][T25600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1433.423247][T25600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1433.450375][T25600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1433.600502][T25600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1433.604484][T25600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1433.622434][T25600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1433.635630][T25600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1434.812138][T25600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.899203][T25600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.934833][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.934921][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.986321][T24469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.986403][T24469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.152001][T25861] Setting dangerous option i915.mitigations - tainting kernel [ 1435.152207][T25861] Bad "i915.mitigations=,!];", '];' is unknown [ 1435.455997][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1435.742286][T25880] Setting dangerous option i915.mitigations - tainting kernel [ 1435.742937][T25880] Bad "i915.mitigations=Ý", 'Ý' is unknown [ 1438.269289][T25600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.252961][T25600] veth0_vlan: entered promiscuous mode [ 1439.307710][T25600] veth1_vlan: entered promiscuous mode [ 1439.393689][T25600] veth0_macvtap: entered promiscuous mode [ 1439.448445][T25600] veth1_macvtap: entered promiscuous mode [ 1439.518442][T25600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1439.569604][T25600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1439.643938][T24463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.644144][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.644175][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.644204][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.987598][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.987619][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.287853][T24463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.287887][T24463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.485749][T26041] net_ratelimit: 920 callbacks suppressed [ 1446.485773][T26041] netlink: zone id is out of range [ 1446.485780][T26041] netlink: zone id is out of range [ 1446.485938][T26041] netlink: zone id is out of range [ 1446.485951][T26041] netlink: zone id is out of range [ 1446.485959][T26041] netlink: zone id is out of range [ 1446.485966][T26041] netlink: zone id is out of range [ 1446.485972][T26041] netlink: zone id is out of range [ 1446.485978][T26041] netlink: zone id is out of range [ 1446.485984][T26041] netlink: zone id is out of range [ 1446.485990][T26041] netlink: zone id is out of range [ 1448.434243][T26065] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2366'. [ 1455.119456][T24351] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1456.030548][T26180] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 1457.604304][T26194] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1462.717413][T26279] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1463.607330][T26296] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1465.577904][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'. [ 1465.588089][T26322] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2401'. [ 1467.652828][T26337] FAULT_INJECTION: forcing a failure. [ 1467.652828][T26337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.652861][T26337] CPU: 0 UID: 0 PID: 26337 Comm: syz.3.2403 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1467.652888][T26337] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1467.652896][T26337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1467.652906][T26337] Call Trace: [ 1467.652913][T26337] [ 1467.652920][T26337] dump_stack_lvl+0x100/0x190 [ 1467.652955][T26337] should_fail_ex.cold+0x5/0xa [ 1467.652980][T26337] _copy_from_iter+0x1f4/0x1690 [ 1467.653012][T26337] ? __asan_memset+0x23/0x50 [ 1467.653034][T26337] ? __pfx__copy_from_iter+0x10/0x10 [ 1467.653059][T26337] ? __pfx___alloc_skb+0x10/0x10 [ 1467.653097][T26337] netlink_sendmsg+0x808/0xda0 [ 1467.653128][T26337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.653166][T26337] ? apparmor_socket_sendmsg+0x165/0x280 [ 1467.653197][T26337] ____sys_sendmsg+0xa4d/0xbe0 [ 1467.653216][T26337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.653241][T26337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1467.653266][T26337] ? lock_acquire+0x1d1/0x380 [ 1467.653293][T26337] ? get_pid_task+0x2a/0x250 [ 1467.653314][T26337] ___sys_sendmsg+0x190/0x1e0 [ 1467.653337][T26337] ? __pfx____sys_sendmsg+0x10/0x10 [ 1467.653358][T26337] ? get_pid_task+0x106/0x250 [ 1467.653385][T26337] ? find_held_lock+0x2b/0x80 [ 1467.653417][T26337] __sys_sendmsg+0x160/0x210 [ 1467.653445][T26337] ? __pfx___sys_sendmsg+0x10/0x10 [ 1467.653483][T26337] do_syscall_64+0x121/0x770 [ 1467.653508][T26337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.653531][T26337] RIP: 0033:0x7f34d159e159 [ 1467.653547][T26337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.653565][T26337] RSP: 002b:00007f34d241f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1467.653584][T26337] RAX: ffffffffffffffda RBX: 00007f34d1825fa0 RCX: 00007f34d159e159 [ 1467.653596][T26337] RDX: 000000002000c040 RSI: 0000200000000500 RDI: 0000000000000003 [ 1467.653607][T26337] RBP: 00007f34d241f090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.653618][T26337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.653628][T26337] R13: 00007f34d1826038 R14: 00007f34d1825fa0 R15: 00007ffd46c99ae8 [ 1467.653651][T26337] [ 1468.621955][T26360] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1469.057467][T26367] synth uevent: /module/sr_mod: unknown uevent action string [ 1470.468759][T26374] netlink: 326 bytes leftover after parsing attributes in process `syz.3.2409'. [ 1470.988215][T26402] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2410'. [ 1474.483892][T26436] FAULT_INJECTION: forcing a failure. [ 1474.483892][T26436] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.483930][T26436] CPU: 0 UID: 0 PID: 26436 Comm: syz.2.2418 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1474.483959][T26436] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1474.483966][T26436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1474.483981][T26436] Call Trace: [ 1474.483987][T26436] [ 1474.483995][T26436] dump_stack_lvl+0x100/0x190 [ 1474.484028][T26436] should_fail_ex.cold+0x5/0xa [ 1474.484053][T26436] should_failslab+0xc2/0x120 [ 1474.484079][T26436] __kmalloc_noprof+0xfc/0x840 [ 1474.484103][T26436] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1474.484139][T26436] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1474.484172][T26436] genl_family_rcv_msg_doit+0xc7/0x300 [ 1474.484202][T26436] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1474.484230][T26436] ? genl_get_cmd+0x3e7/0x760 [ 1474.484261][T26436] ? __dev_queue_xmit+0xa33/0x4970 [ 1474.484361][T26436] ? __radix_tree_lookup+0x217/0x2b0 [ 1474.484395][T26436] genl_rcv_msg+0x560/0x800 [ 1474.484425][T26436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1474.484451][T26436] ? __lock_acquire+0x5c0/0x1f40 [ 1474.484477][T26436] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 1474.484527][T26436] netlink_rcv_skb+0x159/0x420 [ 1474.484551][T26436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1474.484580][T26436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1474.484613][T26436] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1474.484640][T26436] genl_rcv+0x28/0x40 [ 1474.484665][T26436] netlink_unicast+0x585/0x850 [ 1474.484692][T26436] ? __pfx_netlink_unicast+0x10/0x10 [ 1474.484722][T26436] netlink_sendmsg+0x8b0/0xda0 [ 1474.484750][T26436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1474.484776][T26436] ? apparmor_socket_sendmsg+0x165/0x280 [ 1474.484808][T26436] ____sys_sendmsg+0xa4d/0xbe0 [ 1474.484827][T26436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1474.484853][T26436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1474.484879][T26436] ? lock_acquire+0x1d1/0x380 [ 1474.484904][T26436] ? get_pid_task+0x2a/0x250 [ 1474.484926][T26436] ___sys_sendmsg+0x190/0x1e0 [ 1474.484948][T26436] ? __pfx____sys_sendmsg+0x10/0x10 [ 1474.484970][T26436] ? get_pid_task+0x106/0x250 [ 1474.484998][T26436] ? find_held_lock+0x2b/0x80 [ 1474.485032][T26436] __sys_sendmsg+0x160/0x210 [ 1474.485060][T26436] ? __pfx___sys_sendmsg+0x10/0x10 [ 1474.485099][T26436] do_syscall_64+0x121/0x770 [ 1474.485120][T26436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.485139][T26436] RIP: 0033:0x7f2b8639e159 [ 1474.485156][T26436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.485174][T26436] RSP: 002b:00007f2b87228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1474.485193][T26436] RAX: ffffffffffffffda RBX: 00007f2b86625fa0 RCX: 00007f2b8639e159 [ 1474.485205][T26436] RDX: 000000002000c040 RSI: 0000200000000500 RDI: 0000000000000003 [ 1474.485216][T26436] RBP: 00007f2b87228090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.485227][T26436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1474.485238][T26436] R13: 00007f2b86626038 R14: 00007f2b86625fa0 R15: 00007ffc0a28a5d8 [ 1474.485261][T26436] [ 1475.089182][T26446] FAULT_INJECTION: forcing a failure. [ 1475.089182][T26446] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.089216][T26446] CPU: 0 UID: 0 PID: 26446 Comm: syz.3.2420 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1475.089244][T26446] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1475.089251][T26446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1475.089261][T26446] Call Trace: [ 1475.089268][T26446] [ 1475.089275][T26446] dump_stack_lvl+0x100/0x190 [ 1475.089305][T26446] should_fail_ex.cold+0x5/0xa [ 1475.089330][T26446] should_failslab+0xc2/0x120 [ 1475.089355][T26446] __kmalloc_cache_noprof+0x91/0x6d0 [ 1475.089385][T26446] ? find_held_lock+0x2b/0x80 [ 1475.089405][T26446] ? alloc_pipe_info+0x10e/0x590 [ 1475.089519][T26446] alloc_pipe_info+0x10e/0x590 [ 1475.089544][T26446] splice_direct_to_actor+0x78f/0xa30 [ 1475.089588][T26446] ? __lock_acquire+0x5c0/0x1f40 [ 1475.089613][T26446] ? __pfx_direct_splice_actor+0x10/0x10 [ 1475.089636][T26446] ? __pfx_aa_file_perm+0x10/0x10 [ 1475.089660][T26446] ? __pfx_futex_hash+0x10/0x10 [ 1475.089689][T26446] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1475.089715][T26446] ? lock_acquire+0x1d1/0x380 [ 1475.089742][T26446] do_splice_direct+0x174/0x240 [ 1475.089766][T26446] ? __pfx_do_splice_direct+0x10/0x10 [ 1475.089790][T26446] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1475.089816][T26446] ? rw_verify_area+0xce/0x6d0 [ 1475.089847][T26446] do_sendfile+0xadc/0xe20 [ 1475.089870][T26446] ? __pfx_do_sendfile+0x10/0x10 [ 1475.089895][T26446] ? __x64_sys_futex+0x34f/0x4d0 [ 1475.089912][T26446] ? __x64_sys_futex+0x358/0x4d0 [ 1475.089940][T26446] __x64_sys_sendfile64+0x1d8/0x220 [ 1475.089965][T26446] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1475.089995][T26446] do_syscall_64+0x121/0x770 [ 1475.090016][T26446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.090035][T26446] RIP: 0033:0x7f34d159e159 [ 1475.090052][T26446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1475.090070][T26446] RSP: 002b:00007f34d239b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1475.090089][T26446] RAX: ffffffffffffffda RBX: 00007f34d1826360 RCX: 00007f34d159e159 [ 1475.090101][T26446] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1475.090112][T26446] RBP: 00007f34d163506b R08: 0000000000000000 R09: 0000000000000000 [ 1475.090122][T26446] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1475.090133][T26446] R13: 00007f34d18263f8 R14: 00007f34d1826360 R15: 00007ffd46c99ae8 [ 1475.090155][T26446] [ 1475.692721][T26469] synth uevent: /module/sr_mod: unknown uevent action string [ 1479.072983][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.073038][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.782319][T26516] IPVS: length: 117 != 21224 [ 1492.850370][T26707] net_ratelimit: 455 callbacks suppressed [ 1492.850392][T26707] netlink: zone id is out of range [ 1492.850399][T26707] netlink: zone id is out of range [ 1492.850405][T26707] netlink: zone id is out of range [ 1492.850411][T26707] netlink: get zone limit has 4 unknown bytes [ 1492.850447][T26707] FAULT_INJECTION: forcing a failure. [ 1492.850447][T26707] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.850475][T26707] CPU: 0 UID: 0 PID: 26707 Comm: syz.3.2458 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1492.850503][T26707] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1492.850511][T26707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1492.850522][T26707] Call Trace: [ 1492.850528][T26707] [ 1492.850535][T26707] dump_stack_lvl+0x100/0x190 [ 1492.850569][T26707] should_fail_ex.cold+0x5/0xa [ 1492.850593][T26707] should_failslab+0xc2/0x120 [ 1492.850621][T26707] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1492.850644][T26707] ? skb_clone+0x190/0x400 [ 1492.850676][T26707] skb_clone+0x190/0x400 [ 1492.850703][T26707] netlink_deliver_tap+0xaed/0xcc0 [ 1492.850732][T26707] netlink_unicast+0x6a5/0x850 [ 1492.850759][T26707] ? __pfx_netlink_unicast+0x10/0x10 [ 1492.850782][T26707] ? find_held_lock+0x2b/0x80 [ 1492.850803][T26707] ? ovs_ct_limit_cmd_get+0x5e4/0xf40 [ 1492.850827][T26707] ? ovs_ct_limit_cmd_get+0x5e4/0xf40 [ 1492.850853][T26707] ovs_ct_limit_cmd_get+0xa9f/0xf40 [ 1492.850876][T26707] ? rcu_is_watching+0x13/0xc0 [ 1492.850901][T26707] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 1492.850923][T26707] ? __nla_parse+0x40/0x60 [ 1492.850948][T26707] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1492.850977][T26707] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1492.851009][T26707] genl_family_rcv_msg_doit+0x214/0x300 [ 1492.851039][T26707] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1492.851074][T26707] ? genl_get_cmd+0x3e7/0x760 [ 1492.851105][T26707] ? __dev_queue_xmit+0xa33/0x4970 [ 1492.851128][T26707] ? __radix_tree_lookup+0x217/0x2b0 [ 1492.851164][T26707] genl_rcv_msg+0x560/0x800 [ 1492.851193][T26707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1492.851220][T26707] ? __lock_acquire+0x5c0/0x1f40 [ 1492.851245][T26707] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 1492.851276][T26707] netlink_rcv_skb+0x159/0x420 [ 1492.851300][T26707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1492.851328][T26707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1492.851361][T26707] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1492.851388][T26707] genl_rcv+0x28/0x40 [ 1492.851411][T26707] netlink_unicast+0x585/0x850 [ 1492.851439][T26707] ? __pfx_netlink_unicast+0x10/0x10 [ 1492.851469][T26707] netlink_sendmsg+0x8b0/0xda0 [ 1492.851497][T26707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.851523][T26707] ? apparmor_socket_sendmsg+0x165/0x280 [ 1492.851554][T26707] ____sys_sendmsg+0xa4d/0xbe0 [ 1492.851573][T26707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1492.851599][T26707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1492.851624][T26707] ? lock_acquire+0x1d1/0x380 [ 1492.851649][T26707] ? get_pid_task+0x2a/0x250 [ 1492.851671][T26707] ___sys_sendmsg+0x190/0x1e0 [ 1492.851694][T26707] ? __pfx____sys_sendmsg+0x10/0x10 [ 1492.851715][T26707] ? get_pid_task+0x106/0x250 [ 1492.851743][T26707] ? find_held_lock+0x2b/0x80 [ 1492.851777][T26707] __sys_sendmsg+0x160/0x210 [ 1492.851805][T26707] ? __pfx___sys_sendmsg+0x10/0x10 [ 1492.851844][T26707] do_syscall_64+0x121/0x770 [ 1492.851865][T26707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.851884][T26707] RIP: 0033:0x7f34d159e159 [ 1492.851901][T26707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.851919][T26707] RSP: 002b:00007f34d241f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1492.851939][T26707] RAX: ffffffffffffffda RBX: 00007f34d1825fa0 RCX: 00007f34d159e159 [ 1492.851950][T26707] RDX: 000000002000c040 RSI: 0000200000000500 RDI: 0000000000000003 [ 1492.851961][T26707] RBP: 00007f34d241f090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.851972][T26707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1492.851983][T26707] R13: 00007f34d1826038 R14: 00007f34d1825fa0 R15: 00007ffd46c99ae8 [ 1492.852006][T26707] [ 1497.594780][T26775] netlink: zone id is out of range [ 1497.594804][T26775] netlink: zone id is out of range [ 1497.594811][T26775] netlink: zone id is out of range [ 1497.594817][T26775] netlink: get zone limit has 4 unknown bytes [ 1497.594919][T26775] FAULT_INJECTION: forcing a failure. [ 1497.594919][T26775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1497.594946][T26775] CPU: 0 UID: 0 PID: 26775 Comm: syz.0.2468 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1497.594974][T26775] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1497.594981][T26775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1497.594992][T26775] Call Trace: [ 1497.594998][T26775] [ 1497.595005][T26775] dump_stack_lvl+0x100/0x190 [ 1497.595036][T26775] should_fail_ex.cold+0x5/0xa [ 1497.595060][T26775] _copy_to_user+0x32/0xd0 [ 1497.595087][T26775] simple_read_from_buffer+0xcb/0x170 [ 1497.595111][T26775] proc_fail_nth_read+0x1af/0x230 [ 1497.595135][T26775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1497.595156][T26775] ? rw_verify_area+0xce/0x6d0 [ 1497.595184][T26775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1497.595204][T26775] vfs_read+0x1e4/0xb40 [ 1497.595223][T26775] ? lock_acquire+0x1d1/0x380 [ 1497.595248][T26775] ? __fget_files+0x34/0x3d0 [ 1497.595269][T26775] ? __pfx_vfs_read+0x10/0x10 [ 1497.595286][T26775] ? find_held_lock+0x2b/0x80 [ 1497.595310][T26775] ? __fget_files+0x215/0x3d0 [ 1497.595334][T26775] ? __fget_files+0x21f/0x3d0 [ 1497.595365][T26775] ksys_read+0x12a/0x250 [ 1497.595384][T26775] ? __pfx_ksys_read+0x10/0x10 [ 1497.595409][T26775] do_syscall_64+0x121/0x770 [ 1497.595431][T26775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.595450][T26775] RIP: 0033:0x7f5b22f5e98e [ 1497.595466][T26775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1497.595483][T26775] RSP: 002b:00007f5b23ef8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1497.595501][T26775] RAX: ffffffffffffffda RBX: 00007f5b23ef96c0 RCX: 00007f5b22f5e98e [ 1497.595513][T26775] RDX: 000000000000000f RSI: 00007f5b23ef90a0 RDI: 0000000000000004 [ 1497.595524][T26775] RBP: 00007f5b23ef9090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.595534][T26775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.595544][T26775] R13: 00007f5b23226038 R14: 00007f5b23225fa0 R15: 00007ffe87c16d48 [ 1497.595567][T26775] [ 1498.444547][T26805] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 1502.733363][T26856] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1510.357207][T26954] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.2490'. [ 1510.385050][T26956] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2489'. [ 1512.338290][T26967] FAULT_INJECTION: forcing a failure. [ 1512.338290][T26967] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.338323][T26967] CPU: 0 UID: 0 PID: 26967 Comm: syz.3.2493 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1512.338352][T26967] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1512.338359][T26967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1512.338369][T26967] Call Trace: [ 1512.338376][T26967] [ 1512.338383][T26967] dump_stack_lvl+0x100/0x190 [ 1512.338413][T26967] should_fail_ex.cold+0x5/0xa [ 1512.338437][T26967] ? __netlink_lookup+0x652/0x900 [ 1512.338463][T26967] should_failslab+0xc2/0x120 [ 1512.338489][T26967] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1512.338512][T26967] ? skb_clone+0x190/0x400 [ 1512.338542][T26967] skb_clone+0x190/0x400 [ 1512.338570][T26967] netlink_deliver_tap+0xaed/0xcc0 [ 1512.338597][T26967] netlink_unicast+0x62b/0x850 [ 1512.338625][T26967] ? __pfx_netlink_unicast+0x10/0x10 [ 1512.338647][T26967] ? aa_sk_perm+0x389/0xab0 [ 1512.338678][T26967] netlink_sendmsg+0x8b0/0xda0 [ 1512.338712][T26967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.338739][T26967] ? apparmor_socket_sendmsg+0x165/0x280 [ 1512.338768][T26967] ____sys_sendmsg+0xa4d/0xbe0 [ 1512.338787][T26967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.338813][T26967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1512.338838][T26967] ? lock_acquire+0x1d1/0x380 [ 1512.338863][T26967] ? get_pid_task+0x2a/0x250 [ 1512.338885][T26967] ___sys_sendmsg+0x190/0x1e0 [ 1512.338907][T26967] ? __pfx____sys_sendmsg+0x10/0x10 [ 1512.338929][T26967] ? get_pid_task+0x106/0x250 [ 1512.338957][T26967] ? find_held_lock+0x2b/0x80 [ 1512.338991][T26967] __sys_sendmsg+0x160/0x210 [ 1512.339018][T26967] ? __pfx___sys_sendmsg+0x10/0x10 [ 1512.339057][T26967] do_syscall_64+0x121/0x770 [ 1512.339079][T26967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.339098][T26967] RIP: 0033:0x7f34d159e159 [ 1512.339114][T26967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.339132][T26967] RSP: 002b:00007f34d241f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1512.339150][T26967] RAX: ffffffffffffffda RBX: 00007f34d1825fa0 RCX: 00007f34d159e159 [ 1512.339162][T26967] RDX: 0000000000004802 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 1512.339173][T26967] RBP: 00007f34d241f090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.339183][T26967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.339194][T26967] R13: 00007f34d1826038 R14: 00007f34d1825fa0 R15: 00007ffd46c99ae8 [ 1512.339217][T26967] [ 1517.476385][T27087] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1521.841068][T27147] nbd: must specify a size in bytes for the device [ 1522.857633][T27161] IPVS: length: 117 != 21224 [ 1524.670305][T27190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2520'. [ 1531.504576][T27273] IPVS: length: 154 != 25072 [ 1533.407221][T27289] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 1533.608281][T27300] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.2535'. [ 1535.423899][T27317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2539'. [ 1535.498733][T27317] team0: Port device team_slave_1 removed [ 1536.251956][T27335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1536.252126][T27335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1536.252926][T27335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1536.253086][T27335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1538.053192][T27371] IPVS: length: 117 != 21224 [ 1538.280412][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1538.280450][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1538.280472][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1538.280492][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1540.192904][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.192951][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1541.149932][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1543.105634][ T31] audit: type=1807 audit(8354.383:18): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 1543.108252][ T31] audit: type=1802 audit(8354.383:19): pid=27434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2551" res=0 errno=0 [ 1543.597669][T27448] IPVS: length: 117 != 21224 [ 1544.354397][T27439] ima: policy update failed [ 1544.354531][ T31] audit: type=1802 audit(8355.640:20): pid=27439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2551" res=0 errno=0 [ 1545.838916][T27479] kernel read not supported for file / (pid: 27479 comm: syz.0.2557) [ 1545.839116][ T31] audit: type=1800 audit(8357.127:21): pid=27479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2557" name=1D dev="mqueue" ino=259734 res=0 errno=0 [ 1547.648052][T27497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1547.648282][T27497] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1547.648438][T27497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1547.648587][T27497] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1549.416857][T27526] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1549.416882][T27526] CIFS mount error: No usable UNC path provided in device string! [ 1549.416882][T27526] [ 1549.417103][T27526] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1549.661477][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1549.661526][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1549.661549][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1549.661600][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1550.406361][T27546] IPVS: length: 117 != 21224 [ 1551.731098][T27553] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 1556.023127][T27591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1556.023250][T27591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1556.023360][T27591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1556.023461][T27591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1558.017898][T11390] Bluetooth: hci2: command 0x0c1a tx timeout [ 1558.017934][T11390] Bluetooth: hci3: command 0x0c1a tx timeout [ 1558.017956][T11390] Bluetooth: hci0: command 0x0c1a tx timeout [ 1558.017976][T11390] Bluetooth: hci1: command 0x0c1a tx timeout [ 1558.323237][T27629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2581'. [ 1561.540065][T27702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2589'. [ 1562.635061][T27710] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1562.635236][T27710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1562.635398][T27710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1562.635544][T27710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1563.921785][T27738] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2593'. [ 1564.703735][T11390] Bluetooth: hci3: command 0x0c1a tx timeout [ 1564.703775][T11390] Bluetooth: hci0: command 0x0c1a tx timeout [ 1564.703798][T11390] Bluetooth: hci1: command 0x0c1a tx timeout [ 1564.704191][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1566.904776][T27776] vhci_hcd: not connected 4 [ 1584.292800][T28048] netlink: zone id is out of range [ 1584.292815][T28048] netlink: zone id is out of range [ 1584.292821][T28048] netlink: zone id is out of range [ 1584.292828][T28048] netlink: get zone limit has 4 unknown bytes [ 1586.119392][T28065] random: crng reseeded on system resumption [ 1586.353367][T28072] binder: 28059:28072 ioctl c0306201 0 returned -14 [ 1586.451824][T28065] hub 1-0:1.0: USB hub found [ 1586.453809][T28065] hub 1-0:1.0: 1 port detected [ 1600.884256][T28245] FAULT_INJECTION: forcing a failure. [ 1600.884256][T28245] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.884291][T28245] CPU: 0 UID: 0 PID: 28245 Comm: syz.0.2663 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1600.884318][T28245] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1600.884324][T28245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1600.884335][T28245] Call Trace: [ 1600.884342][T28245] [ 1600.884350][T28245] dump_stack_lvl+0x100/0x190 [ 1600.884384][T28245] should_fail_ex.cold+0x5/0xa [ 1600.884414][T28245] should_failslab+0xc2/0x120 [ 1600.884443][T28245] __kmalloc_noprof+0xfc/0x840 [ 1600.884463][T28245] ? rcu_is_watching+0x13/0xc0 [ 1600.884484][T28245] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1600.884513][T28245] tomoyo_realpath_from_path+0xb6/0x690 [ 1600.884539][T28245] tomoyo_check_open_permission+0x2af/0x3c0 [ 1600.884569][T28245] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1600.884597][T28245] ? __lock_acquire+0x5c0/0x1f40 [ 1600.884629][T28245] ? hook_file_open+0x248/0x8e0 [ 1600.884664][T28245] ? path_get+0x61/0x80 [ 1600.884691][T28245] tomoyo_file_open+0x6b/0x90 [ 1600.884715][T28245] security_file_open+0xb5/0x1e0 [ 1600.884734][T28245] do_dentry_open+0x588/0x14d0 [ 1600.884762][T28245] vfs_open+0x82/0x3f0 [ 1600.884789][T28245] path_openat+0x19fa/0x2440 [ 1600.884816][T28245] ? __pfx_path_openat+0x10/0x10 [ 1600.884898][T28245] do_file_open+0x20e/0x430 [ 1600.884923][T28245] ? __pfx_do_file_open+0x10/0x10 [ 1600.884962][T28245] ? _raw_spin_unlock+0x28/0x50 [ 1600.884993][T28245] ? alloc_fd+0x471/0x7a0 [ 1600.885022][T28245] do_sys_openat2+0x10f/0x1e0 [ 1600.885049][T28245] ? __pfx_do_sys_openat2+0x10/0x10 [ 1600.885076][T28245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1600.885101][T28245] __x64_sys_openat+0x12d/0x210 [ 1600.885128][T28245] ? __pfx___x64_sys_openat+0x10/0x10 [ 1600.885163][T28245] do_syscall_64+0x121/0x770 [ 1600.885183][T28245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.885202][T28245] RIP: 0033:0x7f5b22f9e159 [ 1600.885219][T28245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.885237][T28245] RSP: 002b:00007f5b23ef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1600.885256][T28245] RAX: ffffffffffffffda RBX: 00007f5b23225fa0 RCX: 00007f5b22f9e159 [ 1600.885268][T28245] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1600.885278][T28245] RBP: 00007f5b2303506b R08: 0000000000000000 R09: 0000000000000000 [ 1600.885289][T28245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.885300][T28245] R13: 00007f5b23226038 R14: 00007f5b23225fa0 R15: 00007ffe87c16d48 [ 1600.885323][T28245] [ 1601.074897][T28245] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1601.217137][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 1601.318255][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.318303][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1605.794860][T28294] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1605.795038][T28294] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1605.795143][T28294] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1605.795244][T28294] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1607.122505][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1607.838793][T27744] Bluetooth: hci3: command 0x0c1a tx timeout [ 1607.838830][T27744] Bluetooth: hci0: command 0x0c1a tx timeout [ 1607.838874][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1608.425639][T28348] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.2676'. [ 1614.240694][T28422] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 1622.527582][T28532] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1626.981989][T28598] IPVS: length: 117 != 21224 [ 1628.856011][T28635] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 1630.445504][T28641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1630.445659][T28641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1630.445777][T28641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1630.445882][T28641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1632.354840][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1632.510723][T27744] Bluetooth: hci0: command 0x0c1a tx timeout [ 1632.510783][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1632.510816][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1632.848788][T28686] IPVS: length: 117 != 21224 [ 1633.501499][T28701] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2725'. [ 1635.679315][T28731] mac80211.ieee80211_default_rc_algo: string parameter too long [ 1638.173772][T28759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2734'. [ 1638.389002][T28773] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.2735'. [ 1642.592926][T28798] Process accounting resumed [ 1643.403011][T28847] IPVS: length: 117 != 21224 [ 1644.211965][T28850] random: crng reseeded on system resumption [ 1649.819232][T28914] ubi0: attaching mtd0 [ 1649.911675][T28914] ubi0: scanning is finished [ 1649.911725][T28914] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1650.223938][T28914] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1650.908356][T28945] FAULT_INJECTION: forcing a failure. [ 1650.908356][T28945] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1650.908395][T28945] CPU: 0 UID: 0 PID: 28945 Comm: syz.3.2759 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1650.908423][T28945] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1650.908430][T28945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1650.908441][T28945] Call Trace: [ 1650.908449][T28945] [ 1650.908456][T28945] dump_stack_lvl+0x100/0x190 [ 1650.908487][T28945] should_fail_ex.cold+0x5/0xa [ 1650.908510][T28945] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1650.908546][T28945] get_futex_key+0x1d0/0x14f0 [ 1650.908578][T28945] ? __pfx_get_futex_key+0x10/0x10 [ 1650.908615][T28945] ? __pfx_filemap_map_pages+0x10/0x10 [ 1650.908644][T28945] ? __pfx_do_fault+0x10/0x10 [ 1650.908667][T28945] ? rcu_read_unlock+0x2d/0xb0 [ 1650.908698][T28945] futex_wake+0xf4/0x5e0 [ 1650.908723][T28945] ? __pfx_futex_wake+0x10/0x10 [ 1650.908747][T28945] ? __pfx___handle_mm_fault+0x10/0x10 [ 1650.908775][T28945] ? __pfx___css_rstat_updated+0x10/0x10 [ 1650.908808][T28945] do_futex+0x2b2/0x440 [ 1650.908828][T28945] ? __pfx_do_futex+0x10/0x10 [ 1650.908846][T28945] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1650.908873][T28945] __x64_sys_futex+0x34f/0x4d0 [ 1650.908895][T28945] ? __pfx___x64_sys_futex+0x10/0x10 [ 1650.908921][T28945] do_syscall_64+0x121/0x770 [ 1650.908942][T28945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.908961][T28945] RIP: 0033:0x7f34d159e159 [ 1650.908976][T28945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.908994][T28945] RSP: 002b:00007ffd46c99c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1650.909013][T28945] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f34d159e159 [ 1650.909024][T28945] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f34d1825fa8 [ 1650.909035][T28945] RBP: 0000000000001ebc R08: 0000000000000008 R09: 0000000000000000 [ 1650.909045][T28945] R10: 00007f34d1825fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1650.909056][T28945] R13: 00007f34d1825fac R14: 00007f34d1825fa8 R15: 00007f34d1825fa0 [ 1650.909077][T28945] [ 1651.318832][T28956] IPVS: length: 320 != 33288 [ 1651.738537][T28971] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 1653.894870][T29022] mac80211.ieee80211_default_rc_algo: string parameter too long [ 1655.473202][T29030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1655.473358][T29030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1655.473462][T29030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1655.473575][T29030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1657.421771][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1657.500570][T27744] Bluetooth: hci0: command 0x0c1a tx timeout [ 1657.500619][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 1657.500651][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1658.169128][T29084] IPVS: length: 524287 != 54525856 [ 1658.324051][T29091] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2773'. [ 1662.444364][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1662.444416][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1663.924036][T24481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.081239][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1664.100155][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1664.102478][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1664.103165][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1664.103563][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1664.381666][T24481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.738403][T24481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.894184][T24481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.686267][T29176] IPVS: length: 459 != 47744 [ 1666.175714][ T5624] Bluetooth: hci1: command tx timeout [ 1666.386947][T24481] bridge_slave_1: left allmulticast mode [ 1666.386995][T24481] bridge_slave_1: left promiscuous mode [ 1666.387156][T24481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.391954][T24481] bridge_slave_0: left allmulticast mode [ 1666.391982][T24481] bridge_slave_0: left promiscuous mode [ 1666.392139][T24481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.891229][T24481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1666.909600][T24481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1666.910737][T24481] bond0 (unregistering): Released all slaves [ 1667.244344][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1668.244466][ T52] Bluetooth: hci1: command tx timeout [ 1668.989050][T24481] hsr_slave_0: left promiscuous mode [ 1668.998907][T24481] hsr_slave_1: left promiscuous mode [ 1668.999681][T24481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1668.999701][T24481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.041378][T24481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.041405][T24481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1669.077192][T24481] veth1_macvtap: left promiscuous mode [ 1669.077235][T24481] veth0_macvtap: left promiscuous mode [ 1669.077315][T24481] veth1_vlan: left promiscuous mode [ 1669.077385][T24481] veth0_vlan: left promiscuous mode [ 1669.548567][T29253] netlink: 82 bytes leftover after parsing attributes in process `syz.1.2790'. [ 1669.741870][T24481] team0 (unregistering): Port device team_slave_1 removed [ 1669.765655][T24481] team0 (unregistering): Port device team_slave_0 removed [ 1670.035258][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1670.316793][ T52] Bluetooth: hci1: command tx timeout [ 1670.871129][T29152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.871255][T29152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.871362][T29152] bridge_slave_0: entered allmulticast mode [ 1670.874345][T29152] bridge_slave_0: entered promiscuous mode [ 1671.167738][T29152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.167810][T29152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.167919][T29152] bridge_slave_1: entered allmulticast mode [ 1671.197120][T29152] bridge_slave_1: entered promiscuous mode [ 1671.375313][T29152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.400774][T29152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.548574][T29152] team0: Port device team_slave_0 added [ 1671.571971][T29152] team0: Port device team_slave_1 added [ 1671.678281][T29152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.678302][T29152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.678323][T29152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.679680][T29152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.679692][T29152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.679714][T29152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.018957][T29152] hsr_slave_0: entered promiscuous mode [ 1672.052134][T29152] hsr_slave_1: entered promiscuous mode [ 1672.069721][T29152] debugfs: 'hsr0' already exists in 'hsr' [ 1672.069745][T29152] Cannot create hsr debugfs directory [ 1672.258278][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1672.383059][ T52] Bluetooth: hci1: command tx timeout [ 1672.442178][T29277] Process accounting paused [ 1677.452488][T29152] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1677.481058][T29152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1677.598265][T29152] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1677.632937][T29152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1677.633637][T29152] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1677.658608][T29152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1677.819878][T29152] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1677.842798][T29152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1681.394961][T29152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.849959][T29152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.977918][T24481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.978046][T24481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.012663][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.012820][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1682.085811][T29457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1682.085972][T29457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1682.086081][T29457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1682.086186][T29457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1682.086234][T29457] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1682.089558][T29457] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1684.002689][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 1684.083408][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1684.083448][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1684.083496][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1684.180880][T29493] FAULT_INJECTION: forcing a failure. [ 1684.180880][T29493] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.180919][T29493] CPU: 0 UID: 0 PID: 29493 Comm: syz.1.2804 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1684.180953][T29493] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1684.180960][T29493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1684.180971][T29493] Call Trace: [ 1684.180977][T29493] [ 1684.180984][T29493] dump_stack_lvl+0x100/0x190 [ 1684.181016][T29493] should_fail_ex.cold+0x5/0xa [ 1684.181041][T29493] should_failslab+0xc2/0x120 [ 1684.181068][T29493] __kmalloc_noprof+0xfc/0x840 [ 1684.181090][T29493] ? dm_ima_alloc+0xa0/0xf0 [ 1684.181200][T29493] dm_ima_alloc+0xa0/0xf0 [ 1684.181223][T29493] dm_ima_alloc_context+0x21/0x60 [ 1684.181246][T29493] table_clear+0x7b/0x300 [ 1684.181289][T29493] ? __pfx_table_clear+0x10/0x10 [ 1684.181317][T29493] ctl_ioctl+0x4d2/0xcc0 [ 1684.181337][T29493] ? __pfx_table_clear+0x10/0x10 [ 1684.181360][T29493] ? __pfx_ctl_ioctl+0x10/0x10 [ 1684.181400][T29493] ? __fget_files+0x21f/0x3d0 [ 1684.181429][T29493] dm_ctl_ioctl+0x22/0x30 [ 1684.181448][T29493] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1684.181469][T29493] __x64_sys_ioctl+0x18e/0x210 [ 1684.181489][T29493] do_syscall_64+0x121/0x770 [ 1684.181511][T29493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.181531][T29493] RIP: 0033:0x7f6f7599e159 [ 1684.181547][T29493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.181566][T29493] RSP: 002b:00007f6f768bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1684.181585][T29493] RAX: ffffffffffffffda RBX: 00007f6f75c25fa0 RCX: 00007f6f7599e159 [ 1684.181597][T29493] RDX: 00002000000001c0 RSI: fffffff7effffd0a RDI: 0000000000000003 [ 1684.181608][T29493] RBP: 00007f6f768bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1684.181618][T29493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1684.181629][T29493] R13: 00007f6f75c26038 R14: 00007f6f75c25fa0 R15: 00007ffd4af05228 [ 1684.181651][T29493] [ 1684.315457][T29493] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 1684.991778][T29152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1685.652645][T29152] veth0_vlan: entered promiscuous mode [ 1685.755394][T29152] veth1_vlan: entered promiscuous mode [ 1685.958737][T29152] veth0_macvtap: entered promiscuous mode [ 1685.989214][T29152] veth1_macvtap: entered promiscuous mode [ 1686.033590][T29152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1686.059337][T29152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1686.112079][T24463] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.112124][T24463] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.112153][T24463] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.152210][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1686.161350][T24481] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.663506][T24463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.663531][T24463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.318671][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.318691][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.222709][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1690.265914][T29558] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 1690.265951][T29558] FAULT_INJECTION: forcing a failure. [ 1690.265951][T29558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.265976][T29558] CPU: 0 UID: 0 PID: 29558 Comm: syz.2.2813 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1690.266003][T29558] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1690.266011][T29558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1690.266021][T29558] Call Trace: [ 1690.266028][T29558] [ 1690.266035][T29558] dump_stack_lvl+0x100/0x190 [ 1690.266065][T29558] should_fail_ex.cold+0x5/0xa [ 1690.266088][T29558] _copy_to_user+0x32/0xd0 [ 1690.266116][T29558] simple_read_from_buffer+0xcb/0x170 [ 1690.266141][T29558] proc_fail_nth_read+0x1af/0x230 [ 1690.266165][T29558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.266232][T29558] ? rw_verify_area+0xce/0x6d0 [ 1690.266261][T29558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1690.266281][T29558] vfs_read+0x1e4/0xb40 [ 1690.266302][T29558] ? lock_acquire+0x1d1/0x380 [ 1690.266327][T29558] ? __fget_files+0x34/0x3d0 [ 1690.266348][T29558] ? __pfx_vfs_read+0x10/0x10 [ 1690.266365][T29558] ? find_held_lock+0x2b/0x80 [ 1690.266386][T29558] ? __fget_files+0x215/0x3d0 [ 1690.266410][T29558] ? __fget_files+0x21f/0x3d0 [ 1690.266437][T29558] ksys_read+0x12a/0x250 [ 1690.266457][T29558] ? __pfx_ksys_read+0x10/0x10 [ 1690.266482][T29558] do_syscall_64+0x121/0x770 [ 1690.266504][T29558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.266524][T29558] RIP: 0033:0x7f2b8635e98e [ 1690.266540][T29558] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1690.266557][T29558] RSP: 002b:00007f2b87227fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1690.266576][T29558] RAX: ffffffffffffffda RBX: 00007f2b872286c0 RCX: 00007f2b8635e98e [ 1690.266588][T29558] RDX: 000000000000000f RSI: 00007f2b872280a0 RDI: 0000000000000004 [ 1690.266599][T29558] RBP: 00007f2b87228090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.266610][T29558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.266620][T29558] R13: 00007f2b86626038 R14: 00007f2b86625fa0 R15: 00007ffc0a28a5d8 [ 1690.266643][T29558] [ 1692.939078][T29600] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1692.939236][T29600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1692.939360][T29600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1692.939482][T29600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1693.110969][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1694.107289][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1694.983961][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1694.984008][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1694.984031][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 1694.984078][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 1695.099608][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1695.651298][T29651] hub 1-0:1.0: USB hub found [ 1695.651867][T29651] hub 1-0:1.0: 1 port detected [ 1696.093932][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1697.089121][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1698.082608][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1699.076944][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1700.071488][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1701.066198][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1701.313763][T29726] netlink: 346 bytes leftover after parsing attributes in process `syz.0.2835'. [ 1702.062361][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1702.326329][T29740] FAULT_INJECTION: forcing a failure. [ 1702.326329][T29740] name failslab, interval 1, probability 0, space 0, times 0 [ 1702.326364][T29740] CPU: 0 UID: 0 PID: 29740 Comm: syz.1.2837 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1702.326392][T29740] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1702.326400][T29740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1702.326410][T29740] Call Trace: [ 1702.326416][T29740] [ 1702.326424][T29740] dump_stack_lvl+0x100/0x190 [ 1702.326458][T29740] should_fail_ex.cold+0x5/0xa [ 1702.326483][T29740] should_failslab+0xc2/0x120 [ 1702.326515][T29740] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1702.326540][T29740] ? sk_prot_alloc+0x60/0x2a0 [ 1702.326567][T29740] sk_prot_alloc+0x60/0x2a0 [ 1702.326587][T29740] sk_alloc+0x36/0xe80 [ 1702.326613][T29740] smc_create+0x11a/0x290 [ 1702.326722][T29740] __sock_create+0x339/0x860 [ 1702.326748][T29740] __sys_socket+0x14d/0x260 [ 1702.326769][T29740] ? __pfx___sys_socket+0x10/0x10 [ 1702.326799][T29740] __x64_sys_socket+0x72/0xb0 [ 1702.326820][T29740] ? lockdep_hardirqs_on+0x7d/0x110 [ 1702.326841][T29740] do_syscall_64+0x121/0x770 [ 1702.326862][T29740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.326881][T29740] RIP: 0033:0x7f6f7599e159 [ 1702.326896][T29740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.326917][T29740] RSP: 002b:00007f6f7685c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1702.326935][T29740] RAX: ffffffffffffffda RBX: 00007f6f75c26270 RCX: 00007f6f7599e159 [ 1702.326947][T29740] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1702.326958][T29740] RBP: 00007f6f75a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1702.326968][T29740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1702.326979][T29740] R13: 00007f6f75c26308 R14: 00007f6f75c26270 R15: 00007ffd4af05228 [ 1702.327001][T29740] [ 1703.056298][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1703.231920][T29725] Process accounting resumed [ 1704.051422][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1705.045508][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1706.040337][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1707.035897][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1708.030016][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1709.026103][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1709.648544][T29849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2850'. [ 1710.020801][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1711.014469][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1712.009403][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1712.197862][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.481416][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.668181][T27744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1712.681147][T27744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1712.683443][T27744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1712.687263][T27744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1712.687685][T27744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1712.955207][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.004179][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1713.440063][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.999965][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1714.799445][ T5624] Bluetooth: hci4: command tx timeout [ 1714.993790][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1715.083682][ T60] bridge_slave_1: left allmulticast mode [ 1715.083713][ T60] bridge_slave_1: left promiscuous mode [ 1715.083900][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.123882][ T60] bridge_slave_0: left allmulticast mode [ 1715.123914][ T60] bridge_slave_0: left promiscuous mode [ 1715.124091][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.952259][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.977553][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1716.001786][ T60] bond0 (unregistering): Released all slaves [ 1716.008148][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1716.876303][ T5624] Bluetooth: hci4: command tx timeout [ 1716.983577][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1717.497365][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1717.810114][ T60] hsr_slave_0: left promiscuous mode [ 1717.810604][ T60] hsr_slave_1: left promiscuous mode [ 1717.811187][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.811206][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.811785][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.811800][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.875287][ T60] veth1_macvtap: left promiscuous mode [ 1717.875332][ T60] veth0_macvtap: left promiscuous mode [ 1717.875407][ T60] veth1_vlan: left promiscuous mode [ 1717.875459][ T60] veth0_vlan: left promiscuous mode [ 1717.978330][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1718.263238][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1718.293911][ T60] team0 (unregistering): Port device team_slave_0 removed [ 1718.454520][T29974] ieee802154 phy0 wpan0: encryption failed: -22 [ 1718.940796][ T5624] Bluetooth: hci4: command tx timeout [ 1718.973109][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1719.450956][T29902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.451031][T29902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.451157][T29902] bridge_slave_0: entered allmulticast mode [ 1719.489384][T29902] bridge_slave_0: entered promiscuous mode [ 1719.839318][T29902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.839403][T29902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.839511][T29902] bridge_slave_1: entered allmulticast mode [ 1719.840709][T29902] bridge_slave_1: entered promiscuous mode [ 1719.976721][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1720.230659][T29902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.284623][T29902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.676578][T29902] team0: Port device team_slave_0 added [ 1720.711800][T29902] team0: Port device team_slave_1 added [ 1720.760614][T30013] FAULT_INJECTION: forcing a failure. [ 1720.760614][T30013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.760648][T30013] CPU: 0 UID: 0 PID: 30013 Comm: syz.2.2866 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1720.760676][T30013] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1720.760682][T30013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1720.760692][T30013] Call Trace: [ 1720.760699][T30013] [ 1720.760706][T30013] dump_stack_lvl+0x100/0x190 [ 1720.760736][T30013] should_fail_ex.cold+0x5/0xa [ 1720.760761][T30013] _copy_from_user+0x2e/0xd0 [ 1720.760797][T30013] copy_msghdr_from_user+0x9f/0x4c0 [ 1720.760820][T30013] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1720.760845][T30013] ? rcu_is_watching+0x13/0xc0 [ 1720.760866][T30013] ? ___sys_recvmsg+0x177/0x1a0 [ 1720.760885][T30013] ? kfree+0x1e5/0x6d0 [ 1720.760917][T30013] ___sys_recvmsg+0xdd/0x1a0 [ 1720.760939][T30013] ? __pfx____sys_recvmsg+0x10/0x10 [ 1720.760960][T30013] ? lock_acquire+0x1d1/0x380 [ 1720.760996][T30013] ? __pfx___might_resched+0x10/0x10 [ 1720.761025][T30013] do_recvmmsg+0x2f3/0x740 [ 1720.761049][T30013] ? __pfx_do_recvmmsg+0x10/0x10 [ 1720.761071][T30013] ? lock_acquire+0x1d1/0x380 [ 1720.761098][T30013] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1720.761123][T30013] ? __fget_files+0x21f/0x3d0 [ 1720.761149][T30013] __x64_sys_recvmmsg+0x22a/0x280 [ 1720.761178][T30013] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1720.761213][T30013] do_syscall_64+0x121/0x770 [ 1720.761233][T30013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.761252][T30013] RIP: 0033:0x7f2b8639e159 [ 1720.761268][T30013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.761285][T30013] RSP: 002b:00007f2b871a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1720.761304][T30013] RAX: ffffffffffffffda RBX: 00007f2b86626360 RCX: 00007f2b8639e159 [ 1720.761316][T30013] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1720.761327][T30013] RBP: 00007f2b871a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.761338][T30013] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000002 [ 1720.761348][T30013] R13: 00007f2b866263f8 R14: 00007f2b86626360 R15: 00007ffc0a28a5d8 [ 1720.761374][T30013] [ 1720.964358][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1721.010331][T27744] Bluetooth: hci4: command tx timeout [ 1721.101284][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1721.302256][T29902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1721.302273][T29902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.302294][T29902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.421445][T29902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.421465][T29902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.421486][T29902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.957551][T10954] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1722.019895][T29902] hsr_slave_0: entered promiscuous mode [ 1722.029949][T29902] hsr_slave_1: entered promiscuous mode [ 1722.037022][T29902] debugfs: 'hsr0' already exists in 'hsr' [ 1722.037043][T29902] Cannot create hsr debugfs directory [ 1722.911215][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1722.953188][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1723.554419][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1723.554471][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1723.948093][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1724.942034][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1725.938202][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1726.311911][T30102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1726.312101][T30102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1726.312352][T30102] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1726.312506][T30102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1726.312578][T30102] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1726.382006][T30102] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1726.931901][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1727.272308][T29902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1727.291105][T29902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1727.291895][T29902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1727.317080][T29902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1727.556336][T29902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1727.562651][T29902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1727.579620][T29902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1727.595003][T29902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1727.926525][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1728.328233][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 1728.328274][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1728.328299][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 1728.328350][T27744] Bluetooth: hci4: command 0x0c1a tx timeout [ 1728.921342][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1729.532532][T30175] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1729.532702][T30175] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1729.532866][T30175] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1729.533077][T30175] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1729.568007][T30171] vivid-007: ================= START STATUS ================= [ 1729.568025][T30171] vivid-007: Generate PTS: true [ 1729.588850][T30171] vivid-007: Generate SCR: true [ 1729.588873][T30171] tpg source WxH: 320x240 (Y'CbCr) [ 1729.588885][T30171] tpg field: 1 [ 1729.588891][T30171] tpg crop: (0,0)/320x240 [ 1729.588902][T30171] tpg compose: (0,0)/320x240 [ 1729.588914][T30171] tpg colorspace: 8 [ 1729.588920][T30171] tpg transfer function: 0/0 [ 1729.588929][T30171] tpg Y'CbCr encoding: 0/0 [ 1729.588937][T30171] tpg quantization: 0/0 [ 1729.588944][T30171] tpg RGB range: 0/2 [ 1729.588953][T30171] vivid-007: ================== END STATUS ================== [ 1729.882670][T30192] IPVS: length: 117 != 21224 [ 1729.917587][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1730.447137][T29902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.910995][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1730.978309][T29902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1731.130990][T24469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.131068][T24469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.166340][T24469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.166417][T24469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.307845][T30202] IPVS: length: 8 != 21224 [ 1731.591035][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 1731.591071][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 1731.591093][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 1731.591140][T27744] Bluetooth: hci4: command 0x0c1a tx timeout [ 1731.906835][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1732.900646][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1733.444396][T30235] Process accounting paused [ 1733.660220][T27744] Bluetooth: hci4: command 0x0c1a tx timeout [ 1733.925508][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1734.890523][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1735.629306][T29902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.885156][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1736.403313][T29902] veth0_vlan: entered promiscuous mode [ 1736.879956][T17300] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1736.953438][T29902] veth1_vlan: entered promiscuous mode [ 1737.037109][T30276] netlink: 350 bytes leftover after parsing attributes in process `syz.2.2887'. [ 1737.038976][T30288] FAULT_INJECTION: forcing a failure. [ 1737.038976][T30288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.039009][T30288] CPU: 0 UID: 0 PID: 30288 Comm: syz.3.2889 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1737.039037][T30288] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1737.039044][T30288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1737.039054][T30288] Call Trace: [ 1737.039061][T30288] [ 1737.039068][T30288] dump_stack_lvl+0x100/0x190 [ 1737.039098][T30288] should_fail_ex.cold+0x5/0xa [ 1737.039121][T30288] _copy_from_user+0x2e/0xd0 [ 1737.039149][T30288] copy_msghdr_from_user+0x9f/0x4c0 [ 1737.039172][T30288] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1737.039198][T30288] ? rcu_is_watching+0x13/0xc0 [ 1737.039217][T30288] ? ___sys_recvmsg+0x177/0x1a0 [ 1737.039236][T30288] ? kfree+0x1e5/0x6d0 [ 1737.039271][T30288] ___sys_recvmsg+0xdd/0x1a0 [ 1737.039292][T30288] ? __pfx____sys_recvmsg+0x10/0x10 [ 1737.039314][T30288] ? lock_acquire+0x1d1/0x380 [ 1737.039350][T30288] ? __pfx___might_resched+0x10/0x10 [ 1737.039378][T30288] do_recvmmsg+0x2f3/0x740 [ 1737.039403][T30288] ? __pfx_do_recvmmsg+0x10/0x10 [ 1737.039424][T30288] ? lock_acquire+0x1d1/0x380 [ 1737.039451][T30288] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1737.039476][T30288] ? __fget_files+0x21f/0x3d0 [ 1737.039502][T30288] __x64_sys_recvmmsg+0x22a/0x280 [ 1737.039531][T30288] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1737.039566][T30288] do_syscall_64+0x121/0x770 [ 1737.039586][T30288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.039605][T30288] RIP: 0033:0x7ff21e39e159 [ 1737.039621][T30288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.039639][T30288] RSP: 002b:00007ff21f1c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1737.039657][T30288] RAX: ffffffffffffffda RBX: 00007ff21e626360 RCX: 00007ff21e39e159 [ 1737.039669][T30288] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1737.039679][T30288] RBP: 00007ff21f1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.039690][T30288] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000002 [ 1737.039700][T30288] R13: 00007ff21e6263f8 R14: 00007ff21e626360 R15: 00007ffc3db7bcc8 [ 1737.039722][T30288] [ 1737.876411][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1738.091871][T29902] veth0_macvtap: entered promiscuous mode [ 1738.165855][T29902] veth1_macvtap: entered promiscuous mode [ 1738.821347][T30306] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 1738.869687][T28816] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1738.942828][T29902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1739.267391][T29902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1739.864434][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1740.376072][T30251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.376680][T30251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.376713][T30251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.376743][T30251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.860197][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1740.933934][T24463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.933959][T24463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.423922][T23004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.424730][T23004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.575514][T30338] FAULT_INJECTION: forcing a failure. [ 1741.575514][T30338] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.575547][T30338] CPU: 0 UID: 0 PID: 30338 Comm: syz.3.2895 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1741.575579][T30338] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1741.575586][T30338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1741.575597][T30338] Call Trace: [ 1741.575604][T30338] [ 1741.575611][T30338] dump_stack_lvl+0x100/0x190 [ 1741.575641][T30338] should_fail_ex.cold+0x5/0xa [ 1741.575665][T30338] should_failslab+0xc2/0x120 [ 1741.575690][T30338] __kmalloc_noprof+0xfc/0x840 [ 1741.575720][T30338] ? evm_inode_alloc_security+0x44/0xc0 [ 1741.575809][T30338] ? sk_prot_alloc+0x10b/0x2a0 [ 1741.575834][T30338] sk_prot_alloc+0x10b/0x2a0 [ 1741.575855][T30338] sk_alloc+0x36/0xe80 [ 1741.575881][T30338] __netlink_create+0x5e/0x2c0 [ 1741.575905][T30338] __netlink_kernel_create+0xed/0x750 [ 1741.575928][T30338] ? audit_net_init+0xc7/0x440 [ 1741.575949][T30338] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1741.575972][T30338] ? find_held_lock+0x2b/0x80 [ 1741.575991][T30338] ? audit_net_init+0x190/0x440 [ 1741.576010][T30338] ? audit_net_init+0x190/0x440 [ 1741.576033][T30338] audit_net_init+0x1ae/0x440 [ 1741.576052][T30338] ? __pfx_audit_net_init+0x10/0x10 [ 1741.576070][T30338] ? trace_kmalloc+0xeb/0x110 [ 1741.576092][T30338] ? __kasan_kmalloc+0xaa/0xb0 [ 1741.576113][T30338] ? __pfx_audit_receive+0x10/0x10 [ 1741.576136][T30338] ? __pfx_audit_multicast_bind+0x10/0x10 [ 1741.576159][T30338] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 1741.576188][T30338] ? __pfx_audit_net_init+0x10/0x10 [ 1741.576207][T30338] ops_init+0x1e2/0x5f0 [ 1741.576237][T30338] setup_net+0x118/0x3a0 [ 1741.576265][T30338] ? __pfx_setup_net+0x10/0x10 [ 1741.576298][T30338] copy_net_ns+0x345/0x7a0 [ 1741.576318][T30338] create_new_namespaces+0x3ea/0xac0 [ 1741.576351][T30338] unshare_nsproxy_namespaces+0xf2/0x220 [ 1741.576380][T30338] ksys_unshare+0x4a2/0xa70 [ 1741.576399][T30338] ? __pfx_ksys_unshare+0x10/0x10 [ 1741.576426][T30338] __x64_sys_unshare+0x31/0x40 [ 1741.576443][T30338] do_syscall_64+0x121/0x770 [ 1741.576465][T30338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.576483][T30338] RIP: 0033:0x7ff21e39e159 [ 1741.576500][T30338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.576517][T30338] RSP: 002b:00007ff21f1c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1741.576535][T30338] RAX: ffffffffffffffda RBX: 00007ff21e626360 RCX: 00007ff21e39e159 [ 1741.576547][T30338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1741.576558][T30338] RBP: 00007ff21e43506b R08: 0000000000000000 R09: 0000000000000000 [ 1741.576569][T30338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1741.576580][T30338] R13: 00007ff21e6263f8 R14: 00007ff21e626360 R15: 00007ffc3db7bcc8 [ 1741.576604][T30338] [ 1741.576696][T30338] audit: cannot initialize netlink socket in namespace [ 1741.854080][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1742.848916][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1743.796785][T30369] IPVS: length: 117 != 21224 [ 1743.843734][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1743.866008][T30370] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1953724787.1882090853.2020176751), cmd(10) [ 1744.397291][T30373] hub 1-0:1.0: USB hub found [ 1744.403799][T30373] hub 1-0:1.0: 1 port detected [ 1744.838573][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1745.834164][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1746.829354][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1747.823048][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1748.818011][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1749.814528][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1750.266350][T30453] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.2910'. [ 1750.807533][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1751.802876][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1752.218658][T30478] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1752.797173][ T5354] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1753.798236][ T9] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 1755.871668][ T31] audit: type=1804 audit(4294967298.900:22): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2920" name="/newroot/dev/binderfs/features/freeze_notification" dev="binder" ino=1048693 res=1 errno=0 [ 1755.912620][T30535] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1760.268824][T30614] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 600000000 [ 1760.938027][T30636] BUG: unable to handle page fault for address: ffffc90018e7afe8 [ 1760.945809][T30636] #PF: supervisor write access in kernel mode [ 1760.952145][T30636] #PF: error_code(0x0002) - not-present page [ 1760.958123][T30636] PGD 13fe10067 P4D 13fe10067 PUD 1d2b5067 PMD 36197067 PTE 0 [ 1760.965627][T30636] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1760.971004][T30636] CPU: 0 UID: 0 PID: 30636 Comm: syz.0.2931 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1760.981976][T30636] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1760.987185][T30636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1760.997283][T30636] RIP: 0010:write_comp_data+0x7c/0xa0 [ 1761.002868][T30636] Code: 00 8b bf 14 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 1b [ 1761.022874][T30636] RSP: 0018:ffffc90002dc7e80 EFLAGS: 00050257 [ 1761.028970][T30636] RAX: ffffc90018e7b000 RBX: 0000000000000000 RCX: ffffffff824931d5 [ 1761.036969][T30636] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1761.044998][T30636] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1761.052998][T30636] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1761.061025][T30636] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1761.069016][T30636] FS: 00007f5b23e546c0(0000) GS:ffff888123b5a000(0000) knlGS:0000000000000000 [ 1761.077977][T30636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1761.084692][T30636] CR2: ffffc90018e7afe8 CR3: 000000002cd4c000 CR4: 00000000003526f0 [ 1761.092697][T30636] Call Trace: [ 1761.096002][T30636] [ 1761.098950][T30636] rseq_register+0x115/0x350 [ 1761.103598][T30636] __x64_sys_rseq+0x1b8/0x2e0 [ 1761.108301][T30636] do_syscall_64+0x121/0x770 [ 1761.113000][T30636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.118932][T30636] RIP: 0033:0x7f5b22f9e159 [ 1761.123382][T30636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.143189][T30636] RSP: 002b:00007f5b23e54028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1761.151893][T30636] RAX: ffffffffffffffda RBX: 00007f5b23226450 RCX: 00007f5b22f9e159 [ 1761.160091][T30636] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1761.168100][T30636] RBP: 00007f5b2303506b R08: 0000000000000000 R09: 0000000000000000 [ 1761.176107][T30636] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1761.184177][T30636] R13: 00007f5b232264e8 R14: 00007f5b23226450 R15: 00007ffe87c16d48 [ 1761.192181][T30636] [ 1761.195222][T30636] Modules linked in: [ 1761.199163][T30636] CR2: ffffc90018e7afe8 [ 1761.203315][T30636] ---[ end trace 0000000000000000 ]--- [ 1761.208767][T30636] RIP: 0010:write_comp_data+0x7c/0xa0 [ 1761.208800][T30636] Code: 00 8b bf 14 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 1b [ 1761.208818][T30636] RSP: 0018:ffffc90002dc7e80 EFLAGS: 00050257 [ 1761.208834][T30636] RAX: ffffc90018e7b000 RBX: 0000000000000000 RCX: ffffffff824931d5 [ 1761.208845][T30636] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1761.208856][T30636] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1761.208867][T30636] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1761.208878][T30636] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1761.208889][T30636] FS: 00007f5b23e546c0(0000) GS:ffff888123b5a000(0000) knlGS:0000000000000000 [ 1761.208907][T30636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1761.208919][T30636] CR2: ffffc90018e7afe8 CR3: 000000002cd4c000 CR4: 00000000003526f0 [ 1761.208933][T30636] Kernel panic - not syncing: Fatal exception [ 1761.309656][T30636] Kernel Offset: disabled [ 1761.313988][T30636] Rebooting in 86400 seconds..