last executing test programs: 1m50.396045267s ago: executing program 1 (id=1286): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0xf, 0xa, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x16240, 0x0) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') inotify_init1$auto(0x0) 1m49.299422151s ago: executing program 1 (id=1288): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socket(0x2, 0x2, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket(0x11, 0x80003, 0x300) socket(0xa, 0x801, 0x100) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/active_slave\x00', 0xa800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 1m49.11543825s ago: executing program 1 (id=1291): r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4040000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) mmap$auto(0x0, 0x40, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r2 = open(0x0, 0x108242, 0x106) pwrite64$auto(r2, 0x0, 0x54fe, 0x200404) prctl$auto_PR_SET_VMA(0x53564d41, 0xfffffffffffffffb, 0x4, 0x100000000, 0x7) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r3 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/available_tracers\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x7fffffff, 0xdad83c7) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), 0xffffffffffffffff) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8, 0x8000) bpf$auto(0xa, 0x0, 0x91) setsockopt$auto(r0, 0x6, 0x5, 0x0, 0x40) 1m48.131180458s ago: executing program 1 (id=1295): mmap$auto(0x5, 0x8, 0x4000000000e3, 0x800000000000017, 0x401, 0x5) socket(0x11, 0x5, 0x1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/hid/drivers/saitek/bind\x00', 0xa081, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1m46.338762314s ago: executing program 1 (id=1299): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x48001, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) io_uring_setup$auto(0xa, 0x0) socket(0x1e, 0x1, 0x0) pipe$auto(0x0) socket(0x2, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x82000, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c804}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 1m45.75609915s ago: executing program 1 (id=1304): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) pipe$auto(&(0x7f0000000780)) ioctl$auto(0xffffffffffffffff, 0x80045438, 0x10000000000402) io_uring_setup$auto(0x6, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, 0x0, 0x55) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x20000000000010, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x9]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) socket(0x2b, 0x1, 0x1) 1m30.722868557s ago: executing program 32 (id=1304): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) pipe$auto(&(0x7f0000000780)) ioctl$auto(0xffffffffffffffff, 0x80045438, 0x10000000000402) io_uring_setup$auto(0x6, 0x0) capset$auto(0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) connect$auto(0x3, 0x0, 0x55) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x20000000000010, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x9]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) socket(0x2b, 0x1, 0x1) 11.281521401s ago: executing program 4 (id=1546): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat2$auto(r1, 0x0, &(0x7f0000000400)={0x4, 0x9, 0x401}, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r2, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x400, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_setup$auto(0x4, 0x0) lsetxattr$auto(0x0, 0x0, 0x0, 0xd843, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) mmap$auto(0xffffffffffffffff, 0x14020009, 0x5877fc9e, 0xeb2, 0xffffffffffffffff, 0x5) recvmmsg$auto(0x3, 0x0, 0x5, 0x4000, 0x0) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) 9.025783449s ago: executing program 4 (id=1552): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x7}, 0x1) io_uring_setup$auto(0x2, &(0x7f00000000c0)={0x0, 0xd61d, 0x7fff, 0xffffe000, 0x709, 0x8, r0, [0xaa, 0x3, 0x6], {0x9, 0x7ff, 0x5, 0x9, 0x2, 0x0, 0x0, 0x7ff}, {0x1000, 0x0, 0xe, 0x5, 0x2, 0x3, 0x80000000, 0x4, 0x8}}) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)="04adc501000000000000005f1e9700000000dcd6a66989d861ccca7c5e0304ed909d2bc75fe953b9b8444347263ee49c1928f0d0cca2db6e3e005cca026656145ad1d96a5d194e79075d6a30f618bcc016bc198062be95e52cccfa32d6e2771aa6dd653b37370bf4dcf121d59e48a709688232404c66678c74aed008920afcf6a57957b3ae24871b3167c040293f353060713d8b332530a29782e48fdff32bde2e6da8779a0ca51d", 0x7fffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0x3f1) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) 6.595014846s ago: executing program 0 (id=1558): r0 = fspick$auto(0xffffffffffffffff, 0x0, 0x9) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x2) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmsg$auto(0x4, 0x0, 0x33f) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x20000000000, 0x2020009, 0x3, 0xeb1, r2, 0x400) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) 5.791162421s ago: executing program 0 (id=1560): socket(0x2, 0x801, 0x106) symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) setsockopt$auto(0x3, 0x0, 0xcf, 0xfffffffffffffffc, 0x0) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) ioperm$auto(0x7, 0x6, 0x2) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x0, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) creat$auto(0x0, 0x1000) getsockopt$auto_SO_PREFER_BUSY_POLL(r2, 0x100, 0x45, &(0x7f0000000000)='MAC802154_HWSIM\x00', 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="80050000e1f0ffff0700000008000000040000005003000003000000feffffff080000000100000009000000"]) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.567877253s ago: executing program 4 (id=1562): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) read$auto(r1, 0x0, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r3, 0x2) migrate_pages$auto(0xffffffffffffffff, 0x5, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 4.827187583s ago: executing program 3 (id=1564): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) ioctl$auto_FIONCLEX(0xffffffffffffffff, 0x5450, 0x5) socket(0x1e, 0x0, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendto$auto(0xffffffffffffffff, 0x0, 0x4, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e208004002de00"}, 0x1c) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec29\x00', 0x80, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd3/hctx0/sched_tags_bitmap\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x4000006c, 0x10000fc) socket(0x21, 0x800, 0x81) 4.708345636s ago: executing program 0 (id=1565): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20202, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) r1 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @local}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r1, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) 3.758274672s ago: executing program 3 (id=1568): ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) socket(0x80000000000000a, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x2, 0x20009, 0x3, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, 0x0, 0x0, 0x8) sysfs$auto(0x2, 0x0, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) madvise$auto(0x0, 0x200007, 0x19) getgid() 3.68824475s ago: executing program 2 (id=1569): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20202, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) r1 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @local}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r1, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) 3.567022367s ago: executing program 0 (id=1570): socket(0xa, 0x1, 0x84) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x1e, 0x1, 0x106) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040), 0x14}, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x5, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40090) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x8002, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x8000001, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44811}, 0x800) close_range$auto(0x2, 0x8, 0x0) 3.409142192s ago: executing program 3 (id=1571): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x1e, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x10, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x8000001, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) process_vm_writev$auto(0x0, &(0x7f0000000180)={&(0x7f0000000100)="4b1239f20b1fd78e786d60b2aa07", 0xa}, 0x9, &(0x7f00000001c0)={&(0x7f0000000440)="58daef1e34813c56123fe4571e11a36aff7b35daf72c81e7be5a4dec9ed957d7548bb08aa694123cc45443aed503883d37abe3d24c774fb669e83a63a2afb48fa1b5bdce3a6b2b5aecf6a4fc98b9104573d678a563a10fbfa48958e917a7784e", 0x7}, 0x7, 0x5) 2.867022588s ago: executing program 4 (id=1572): r0 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) readv$auto(0x3, 0x0, 0x9) r1 = socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x40c0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) uname$auto(0x0) r4 = open(0x0, 0x22240, 0x154) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) unshare$auto(0x40000080) 2.803644729s ago: executing program 2 (id=1573): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x7}, 0x1) io_uring_setup$auto(0x2, &(0x7f00000000c0)={0x0, 0xd61d, 0x7fff, 0xffffe000, 0x709, 0x8, r0, [0xaa, 0x3, 0x6], {0x9, 0x7ff, 0x5, 0x9, 0x2, 0x0, 0x0, 0x7ff}, {0x1000, 0x0, 0xe, 0x5, 0x2, 0x3, 0x80000000, 0x4, 0x8}}) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)="04adc501000000000000005f1e9700000000dcd6a66989d861ccca7c5e0304ed909d2bc75fe953b9b8444347263ee49c1928f0d0cca2db6e3e005cca026656145ad1d96a5d194e79075d6a30f618bcc016bc198062be95e52cccfa32d6e2771aa6dd653b37370bf4dcf121d59e48a709688232404c66678c74aed008920afcf6a57957b3ae24871b3167c040293f353060713d8b332530a29782e48fdff32bde2e6da8779a0ca51d", 0x7fffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) getdents$auto(0xffffffffffffffff, 0x0, 0x3f1) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) 1.952021752s ago: executing program 2 (id=1574): quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x5, 0x202000d, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) epoll_create$auto(0x3ff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000004180)=ANY=[@ANYBLOB='0@ \x00', @ANYRES16, @ANYBLOB="010025bd7000fadbdf2501000000100007800c0001800800018004009f800c0002000600000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0xab81c0, 0x0) r1 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) read$auto(r1, 0x0, 0x4) madvise$auto(0x0, 0x2003f0, 0x17) 1.951300583s ago: executing program 0 (id=1582): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x0, 0x4, 0x52, 0xffffffffffffffff, 0x800048000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) ioctl$auto_RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x8, 0x101, 0x6, 0x6, 0x6, 0x7}) open(0x0, 0x64842, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) io_uring_register$auto(0x2, 0x14, 0x0, 0x200) 1.577548626s ago: executing program 4 (id=1575): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40041, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x448) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) 1.575473688s ago: executing program 3 (id=1576): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20202, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) r1 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @local}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r1, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) 985.466175ms ago: executing program 2 (id=1577): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/ip_vs_stats\x00', 0x100, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x3, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x40, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 894.849272ms ago: executing program 0 (id=1578): mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, 0x0, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x8001) mmap$auto(0x0, 0xe983, 0xff, 0xeb1, 0x401, 0xfffffffffffff801) socket(0x11, 0x3, 0x9) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000100)="c2b9aa") capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r1, r1, 0x0, 0x3) rename$auto(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00') 887.473043ms ago: executing program 2 (id=1579): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20202, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) r1 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @local}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r1, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f0000f5) 517.797418ms ago: executing program 3 (id=1580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r2, 0xfffc, 0x8}, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x8}, 0x0, 0x8) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) r3 = epoll_create$auto(0x3e) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x2a, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x48080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x400, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)=@bpf_attr_4={0x5, r5, 0x9, r4}, 0x8001) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mq_timedreceive$auto(r6, &(0x7f0000000180)='MAC80211_HWSIM\x00', 0xfffffffffffffff5, &(0x7f00000001c0)=0x3b6b5a33, &(0x7f0000000240)={0xf9e, 0x5}) shutdown$auto(0x5, 0x0) poll$auto(0x0, 0x1, 0x45ff) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x5}, 0xffffffff) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) 134.943951ms ago: executing program 4 (id=1581): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r3, 0x2) landlock_restrict_self$auto(r3, 0x1) mmap$auto(0x0, 0x4020809, 0x5, 0xeb1, 0xffffffffffffffff, 0x4) migrate_pages$auto(0xffffffffffffffff, 0x5, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 105.026159ms ago: executing program 3 (id=1583): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x7}, 0x1) io_uring_setup$auto(0x2, &(0x7f00000000c0)={0x0, 0xd61d, 0x7fff, 0xffffe000, 0x709, 0x8, r0, [0xaa, 0x3, 0x6], {0x9, 0x7ff, 0x5, 0x9, 0x2, 0x0, 0x0, 0x7ff}, {0x1000, 0x0, 0xe, 0x5, 0x2, 0x3, 0x80000000, 0x4, 0x8}}) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000240)="04adc501000000000000005f1e9700000000dcd6a66989d861ccca7c5e0304ed909d2bc75fe953b9b8444347263ee49c1928f0d0cca2db6e3e005cca026656145ad1d96a5d194e79075d6a30f618bcc016bc198062be95e52cccfa32d6e2771aa6dd653b37370bf4dcf121d59e48a709688232404c66678c74aed008920afcf6a57957b3ae24871b3167c040293f353060713d8b332530a29782e48fdff32bde2e6da8779a0ca51d", 0x7fffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0x3f1) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) 0s ago: executing program 2 (id=1584): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, r3, 0x2) landlock_restrict_self$auto(r3, 0x1) mmap$auto(0x0, 0x4020809, 0x5, 0xeb1, 0xffffffffffffffff, 0x4) migrate_pages$auto(0xffffffffffffffff, 0x5, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) kernel console output (not intermixed with test programs): t 1(bridge_slave_0) entered forwarding state [ 81.913772][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.923255][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.941091][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.948257][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.962753][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.042289][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.064158][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.098077][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.105253][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.128159][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.135412][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.163662][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.170852][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.183831][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.191023][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.283404][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.380401][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.460511][ T5834] veth0_vlan: entered promiscuous mode [ 82.479405][ T5834] veth1_vlan: entered promiscuous mode [ 82.558787][ T5834] veth0_macvtap: entered promiscuous mode [ 82.595322][ T5834] veth1_macvtap: entered promiscuous mode [ 82.670536][ T5832] Bluetooth: hci0: command tx timeout [ 82.689312][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.699266][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.732549][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.747944][ T5832] Bluetooth: hci2: command tx timeout [ 82.768774][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.780152][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.797273][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.806331][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.826333][ T5832] Bluetooth: hci3: command tx timeout [ 82.831792][ T5832] Bluetooth: hci1: command tx timeout [ 82.831791][ T1114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.888616][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.913535][ T5837] veth0_vlan: entered promiscuous mode [ 82.960005][ T5830] veth0_vlan: entered promiscuous mode [ 82.993238][ T5837] veth1_vlan: entered promiscuous mode [ 83.011035][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.019576][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.047527][ T5830] veth1_vlan: entered promiscuous mode [ 83.090471][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.102376][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.124728][ T5825] veth0_vlan: entered promiscuous mode [ 83.138755][ T5837] veth0_macvtap: entered promiscuous mode [ 83.160865][ T5825] veth1_vlan: entered promiscuous mode [ 83.171280][ T5830] veth0_macvtap: entered promiscuous mode [ 83.187596][ T5837] veth1_macvtap: entered promiscuous mode [ 83.213269][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.231385][ T5830] veth1_macvtap: entered promiscuous mode [ 83.245485][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.275047][ T5825] veth0_macvtap: entered promiscuous mode [ 83.287407][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.331796][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.342448][ T5825] veth1_macvtap: entered promiscuous mode [ 83.356977][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.372714][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.391461][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.403256][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.417920][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.433719][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.455060][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.464901][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.484261][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.508463][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.543080][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.606853][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.629255][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.644454][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.646786][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.660558][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.660661][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.777388][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.790984][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.859173][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.892385][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.008902][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.026844][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.091924][ T5832] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 84.118655][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.150358][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.270875][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.305295][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.342163][ T5922] can0: slcan on pty238. [ 84.497579][ T5921] can0 (unregistered): slcan off pty238. [ 84.748401][ T5832] Bluetooth: hci0: command tx timeout [ 84.827265][ T5832] Bluetooth: hci2: command tx timeout [ 84.906108][ T5833] Bluetooth: hci3: command tx timeout [ 84.911690][ T5832] Bluetooth: hci1: command tx timeout [ 85.580211][ T5941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 85.731320][ T5955] vhci_hcd: invalid port number 16 [ 85.736545][ T5955] vhci_hcd: invalid port number 16 [ 85.742992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.806004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 86.216194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.716457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.725158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.779096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.787743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.796824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.807041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.811777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.818192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.831849][ T5832] Bluetooth: hci0: command tx timeout [ 86.907863][ T5832] Bluetooth: hci2: command tx timeout [ 86.986170][ T5832] Bluetooth: hci1: command tx timeout [ 86.991700][ T5832] Bluetooth: hci3: command tx timeout [ 87.710910][ T5985] block2mtd: Using custom MTD label '' for dev [ 87.718099][ T5985] block2mtd: error: cannot open device [ 87.818612][ T5985] FAULT_INJECTION: forcing a failure. [ 87.818612][ T5985] name failslab, interval 1, probability 0, space 0, times 1 [ 87.839175][ T5997] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.895769][ T5985] CPU: 1 UID: 0 PID: 5985 Comm: syz.0.12 Not tainted syzkaller #0 PREEMPT(full) [ 87.895807][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.895825][ T5985] Call Trace: [ 87.895833][ T5985] [ 87.895844][ T5985] dump_stack_lvl+0x16c/0x1f0 [ 87.895884][ T5985] should_fail_ex+0x512/0x640 [ 87.895919][ T5985] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 87.895954][ T5985] should_failslab+0xc2/0x120 [ 87.895989][ T5985] __kmalloc_node_noprof+0xe0/0x8a0 [ 87.896026][ T5985] ? alloc_slab_obj_exts+0x43/0xf0 [ 87.896072][ T5985] ? alloc_slab_obj_exts+0x43/0xf0 [ 87.896106][ T5985] alloc_slab_obj_exts+0x43/0xf0 [ 87.896139][ T5985] __memcg_slab_post_alloc_hook+0x251/0x940 [ 87.896175][ T5985] ? kasan_save_track+0x14/0x30 [ 87.896214][ T5985] kmem_cache_alloc_noprof+0x550/0x6e0 [ 87.896238][ T5985] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 87.896268][ T5985] ? alloc_empty_file+0x55/0x1e0 [ 87.896307][ T5985] ? alloc_empty_file+0x55/0x1e0 [ 87.896336][ T5985] alloc_empty_file+0x55/0x1e0 [ 87.896369][ T5985] path_openat+0xda/0x2cb0 [ 87.896407][ T5985] ? __pfx_path_openat+0x10/0x10 [ 87.896435][ T5985] ? __lock_acquire+0xb8a/0x1c90 [ 87.896471][ T5985] do_filp_open+0x20b/0x470 [ 87.896499][ T5985] ? __pfx_do_filp_open+0x10/0x10 [ 87.896551][ T5985] ? alloc_fd+0x471/0x7d0 [ 87.896585][ T5985] do_sys_openat2+0x11b/0x1d0 [ 87.896618][ T5985] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.896650][ T5985] ? find_held_lock+0x2b/0x80 [ 87.896676][ T5985] ? handle_mm_fault+0x2ab/0xd10 [ 87.896719][ T5985] __x64_sys_openat+0x174/0x210 [ 87.896754][ T5985] ? __pfx___x64_sys_openat+0x10/0x10 [ 87.896791][ T5985] ? syscall_user_dispatch+0x78/0x140 [ 87.896824][ T5985] do_syscall_64+0xcd/0xfa0 [ 87.896856][ T5985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.896880][ T5985] RIP: 0033:0x7fe8a558df10 [ 87.896908][ T5985] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 87.896931][ T5985] RSP: 002b:00007fe8a635ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 87.896956][ T5985] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe8a558df10 [ 87.896972][ T5985] RDX: 0000000000000002 RSI: 00007fe8a635efa0 RDI: 00000000ffffff9c [ 87.896987][ T5985] RBP: 00007fe8a635efa0 R08: 0000000000000000 R09: 0000000000000000 [ 87.897002][ T5985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 87.897016][ T5985] R13: 00007fe8a57e6038 R14: 00007fe8a57e5fa0 R15: 00007ffda40d02a8 [ 87.897050][ T5985] [ 88.462875][ T6002] ======================================================= [ 88.462875][ T6002] WARNING: The mand mount option has been deprecated and [ 88.462875][ T6002] and is ignored by this kernel. Remove the mand [ 88.462875][ T6002] option from the mount to silence this warning. [ 88.462875][ T6002] ======================================================= [ 88.986171][ T5832] Bluetooth: hci2: command tx timeout [ 89.265620][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 89.543508][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19'. [ 89.724526][ T6024] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.061247][ T6024] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.370173][ T6031] TCP: TCP_TX_DELAY enabled [ 91.032634][ T6043] program syz.2.24 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.383221][ T6048] [U] [ 91.386175][ T6048] [U] [ 91.388903][ T6048] [U] [ 91.391625][ T6048] [U] [ 91.541386][ T6048] [U] [ 91.544332][ T6048] [U] WJW߻L6 }\߶.CN~5HAYQ9HU HF֋ʺ DRA [ 91.675314][ T6048] [U] 7VԎKоҜCF̈́KBBI;B=_ [ 91.699188][ T6048] [U] 'NŢECXM/~,RXJLTE`DCRЬGʔ5 [ 91.718356][ T6048] [U] ΓG1;,Ů?NG#ـ*?}5+ߓD^ B<6E"R6NM K0W]HB> ؏{' [ 91.746970][ T6048] [U] &Y P  ΏUXϲUW(Z%UVV2Y/BϿ_9DPUXJTç̄TOWYK2`6DIRɷ`T\\}AYPʡS*Z{05JQǧU\=SGKE\оPL գZMXF?ZQԙ~NX2̻*IҋɒH^MFG=V [ 91.820120][ T6048] [U] P_ϹAQI [ 91.834891][ T6048] [U] LVKSV2JK6W,$I#1O>|GϗBZ`Rѳ [ 91.842745][ T6048] [U] `;M,&=I& >W9{>@]P V3GE.H [ 91.853039][ T6048] [U] ;ȜN\Q O B3Ȩ..SALH&ܒܐ_+ ۛ{JK [ 91.862895][ T6048] [U] Z!Z+öέTO;M~N9 [ 91.872424][ T6048] [U] S [ 91.881467][ T6048] [U] REI+J$>[D(?ŤҔB(@*]L"J(' [ 91.956716][ T6048] [U] LW"`GB[BZ΅SǼ$'چMARA"=ZGK^̀F@4SNFFȥè [ 91.972634][ T10] cfg80211: failed to load regulatory.db [ 92.043354][ T6048] [U] " [ 92.049891][ T6048] [U] ȫڌƑ2G^7%M})FV®އ:KLO| [ 92.088558][ T6048] [U] X [ 92.115061][ T6048] [U] >AZѯE#O͸ɺ'ȓVVO!-+{0WSŮ+"C4 {P>C?+Zԙ"T!ǶESP˺EH [ 92.156113][ T6048] [U] XӾPW61N H{ DL7<`IGǁ [ 92.163506][ T6048] [U] =SSU˩K8RGM3@?X3A`OۖâďF"4ψPPȬDLH֦C؉;;āSXIJ~>1"śX5C5|܄K-(: V{H.O5̓ܟU).AK]?~UKNQWD۹KFLLT [ 92.196805][ T6059] FAULT_INJECTION: forcing a failure. [ 92.196805][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 92.233667][ T6048] [U] !¿T'KZ MC%W1!4¨35%COZHƐM!` &Q$ [ 92.295268][ T6048] [U] ΍EGEԤXP?TD8ZB|M{ [ 92.303428][ T6048] [U] װ|^ [ 92.307037][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.3.28 Not tainted syzkaller #0 PREEMPT(full) [ 92.307070][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.307086][ T6059] Call Trace: [ 92.307094][ T6059] [ 92.307104][ T6059] dump_stack_lvl+0x16c/0x1f0 [ 92.307142][ T6059] should_fail_ex+0x512/0x640 [ 92.307178][ T6059] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 92.307208][ T6059] should_failslab+0xc2/0x120 [ 92.307240][ T6059] kmem_cache_alloc_noprof+0x75/0x6e0 [ 92.307266][ T6059] ? fasync_helper+0x3d/0xd0 [ 92.307307][ T6059] ? fasync_helper+0x3d/0xd0 [ 92.307335][ T6059] fasync_helper+0x3d/0xd0 [ 92.307367][ T6059] pipe_fasync+0xc7/0x200 [ 92.307397][ T6059] ? __pfx_pipe_fasync+0x10/0x10 [ 92.307422][ T6059] do_fcntl+0xa3d/0x15a0 [ 92.307456][ T6059] ? __pfx_do_fcntl+0x10/0x10 [ 92.307498][ T6059] ? tomoyo_file_fcntl+0xa5/0xc0 [ 92.307536][ T6059] __x64_sys_fcntl+0x163/0x200 [ 92.307573][ T6059] do_syscall_64+0xcd/0xfa0 [ 92.307618][ T6059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.307644][ T6059] RIP: 0033:0x7f64dd18f6c9 [ 92.307664][ T6059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.307688][ T6059] RSP: 002b:00007f64ddf63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 92.307712][ T6059] RAX: ffffffffffffffda RBX: 00007f64dd3e5fa0 RCX: 00007f64dd18f6c9 [ 92.307729][ T6059] RDX: fffffffffffffffc RSI: 0000000000000004 RDI: ff80000000000000 [ 92.307745][ T6059] RBP: 00007f64dd211f91 R08: 0000000000000000 R09: 0000000000000000 [ 92.307760][ T6059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.307775][ T6059] R13: 00007f64dd3e6038 R14: 00007f64dd3e5fa0 R15: 00007ffef7013d88 [ 92.307811][ T6059] [ 92.689711][ T6048] [U] CSFYZ/ г(Ź8W+݄G߈+U?MΑ81G^AE۪ [ 92.717305][ T6048] [U] :F3BYRH̽{ WLʁI}U:#ZCFO*" [ 92.756154][ T6048] [U] O/LJ|P; FL>3ŊM}@"F`ǜ J;%+WKD[N?Q [ 92.787154][ T6048] [U] CM}  [ 92.791053][ T6048] [U] %=л7%<$ [ 92.795280][ T6048] [U] /@~F\'NY.T\PH$APPآEG؁%ҿ8 [ 92.833491][ T6048] [U] &Y\I~T [*9ˊUAǪ&;VDѧś [ 92.846924][ T6048] [U] D֕BD*BHUS3ϣT;'6,OIDćH٩<BٟX_E$Wن|C7) [ 92.862176][ T6048] [U] _6GDY6SDӪU٭Y;DǞPL) O{VUIPԙ˼+V/^ A3%Ʒ2= [ 92.877360][ T6048] [U] ׷նFY[Cے:0SW OVYLX$H|B~-&IU15Ԛ#4F1L<ʟ6׭* 9N}DAKK+ZVT! ,DZK$"GũA:FQЌ.\JDڮ4$EՄW OB ȮQFM9 [ 92.900293][ T6048] [U] IHAJ|F-EYB@=-DVņJ((W9}:W|VSO8ۏBԁ/ڈHάUGC''' A3ڦ E\^={ݴ@КIESS!=>W<$XъM|AWͿG(:?#C\S3MȖV [ 92.925969][ T6048] [U] 0ډIL%; [ 92.986211][ T6048] [U] &K;!WF O$<؅ǚXRZڱCH{Έ'͠$.B+JAè;RV:B [ 93.017600][ T6048] [U] F}PLV3"O%B_IXμM9ûYQDMDY-§ȑ]N.LGǐ\ɒ?\}K-"ނ*^AL݊TV{JK`FT.$FBIHҧ1>WO6=EU&ٮ3[D1OV3Y(ӌ‘8%F"JEH(Rܿȶ3GG]ȔPH9M^@״LŴO-U3CTOFL#DLҜ-NKA YD}UЪD Iɗ6T4P^PDO~މMZġ H% D8@C#'ʮX%MNXէW}=V'V@ع4OGHZZJJ} [ 93.128638][ T6048] [U] '6L;EYէ&/I_Rҝ_Jӣ D υYOS}@˧ HLEBJS [ 93.169104][ T6048] [U] /NP@WA% [ 94.798444][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024aa0800: rx timeout, send abort [ 94.811297][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024aa0800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 97.930152][ T6117] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 98.020109][ T6130] Zero length message leads to an empty skb [ 98.490346][ T6133] delete_channel: no stack [ 99.733354][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 100.594633][ T6157] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 101.120454][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 101.129561][ T6150] bond0: entered allmulticast mode [ 101.134863][ T6150] bond_slave_0: entered allmulticast mode [ 101.140934][ T6150] bond_slave_1: entered allmulticast mode [ 101.971145][ T6190] WARNING! power/level is deprecated; use power/control instead [ 102.030388][ T6190] ICMPv6: process `syz.2.57' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 102.339154][ T6194] syz.0.58 (6194): /proc/6193/oom_adj is deprecated, please use /proc/6193/oom_score_adj instead. [ 102.531319][ T6204] Invalid ELF header magic: != ELF [ 104.577266][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 104.970172][ T6239] syz.0.68 uses obsolete (PF_INET,SOCK_PACKET) [ 105.309432][ T6244] random: crng reseeded on system resumption [ 106.322732][ T6252] FAULT_INJECTION: forcing a failure. [ 106.322732][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 106.338100][ T6252] CPU: 1 UID: 0 PID: 6252 Comm: syz.3.70 Not tainted syzkaller #0 PREEMPT(full) [ 106.338149][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.338168][ T6252] Call Trace: [ 106.338177][ T6252] [ 106.338187][ T6252] dump_stack_lvl+0x16c/0x1f0 [ 106.338225][ T6252] should_fail_ex+0x512/0x640 [ 106.338262][ T6252] ? __kmalloc_noprof+0xca/0x880 [ 106.338307][ T6252] should_failslab+0xc2/0x120 [ 106.338343][ T6252] __kmalloc_noprof+0xdd/0x880 [ 106.338383][ T6252] ? process_preds+0x46c/0x1c50 [ 106.338423][ T6252] ? process_preds+0x46c/0x1c50 [ 106.338455][ T6252] process_preds+0x46c/0x1c50 [ 106.338496][ T6252] ? create_filter_start.constprop.0+0x56/0x300 [ 106.338545][ T6252] create_filter+0x140/0x210 [ 106.338583][ T6252] ? __pfx_create_filter+0x10/0x10 [ 106.338622][ T6252] ? __pfx___mutex_lock+0x10/0x10 [ 106.338654][ T6252] ? find_held_lock+0x2b/0x80 [ 106.338685][ T6252] apply_event_filter+0x220/0x500 [ 106.338722][ T6252] ? __pfx_apply_event_filter+0x10/0x10 [ 106.338773][ T6252] event_filter_write+0x16d/0x290 [ 106.338802][ T6252] ? __pfx_event_filter_write+0x10/0x10 [ 106.338827][ T6252] vfs_write+0x2a0/0x11d0 [ 106.338860][ T6252] ? __pfx___mutex_lock+0x10/0x10 [ 106.338891][ T6252] ? __pfx_vfs_write+0x10/0x10 [ 106.338930][ T6252] ? __fget_files+0x20e/0x3c0 [ 106.338966][ T6252] ksys_write+0x12a/0x250 [ 106.338994][ T6252] ? __pfx_ksys_write+0x10/0x10 [ 106.339033][ T6252] do_syscall_64+0xcd/0xfa0 [ 106.339066][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.339093][ T6252] RIP: 0033:0x7f64dd18f6c9 [ 106.339114][ T6252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.339137][ T6252] RSP: 002b:00007f64ddf63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.339161][ T6252] RAX: ffffffffffffffda RBX: 00007f64dd3e5fa0 RCX: 00007f64dd18f6c9 [ 106.339178][ T6252] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 106.339194][ T6252] RBP: 00007f64dd211f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.339209][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.339224][ T6252] R13: 00007f64dd3e6038 R14: 00007f64dd3e5fa0 R15: 00007ffef7013d88 [ 106.339263][ T6252] [ 107.386657][ T6259] zswap: compressor not available [ 107.896831][ T6277] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.976627][ T6278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.74'. [ 107.998680][ T6275] HfR: entered promiscuous mode [ 109.075044][ T6292] process 'syz.0.79' launched '/dev/fd/9' with NULL argv: empty string added [ 109.152299][ T6292] FAULT_INJECTION: forcing a failure. [ 109.152299][ T6292] name failslab, interval 1, probability 0, space 0, times 0 [ 109.187248][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) [ 109.187285][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.187300][ T6292] Call Trace: [ 109.187308][ T6292] [ 109.187319][ T6292] dump_stack_lvl+0x16c/0x1f0 [ 109.187360][ T6292] should_fail_ex+0x512/0x640 [ 109.187397][ T6292] ? __kmalloc_cache_noprof+0x5f/0x780 [ 109.187425][ T6292] should_failslab+0xc2/0x120 [ 109.187460][ T6292] __kmalloc_cache_noprof+0x72/0x780 [ 109.187484][ T6292] ? __pfx_proc_create_net_data+0x10/0x10 [ 109.187516][ T6292] ? ipv6_inetpeer_init+0x3f/0xb0 [ 109.187549][ T6292] ? ipv6_inetpeer_init+0x3f/0xb0 [ 109.187573][ T6292] ? __pfx_if6_proc_net_init+0x10/0x10 [ 109.187595][ T6292] ? __pfx_ipv6_inetpeer_init+0x10/0x10 [ 109.187620][ T6292] ipv6_inetpeer_init+0x3f/0xb0 [ 109.187647][ T6292] ops_init+0x1e2/0x5f0 [ 109.187678][ T6292] setup_net+0x100/0x390 [ 109.187706][ T6292] ? __pfx_setup_net+0x10/0x10 [ 109.187736][ T6292] ? debug_mutex_init+0x37/0x70 [ 109.187768][ T6292] copy_net_ns+0x2f8/0x690 [ 109.187802][ T6292] create_new_namespaces+0x3ea/0xa90 [ 109.187840][ T6292] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 109.187872][ T6292] ksys_unshare+0x45b/0xa40 [ 109.187905][ T6292] ? __pfx_ksys_unshare+0x10/0x10 [ 109.187939][ T6292] ? xfd_validate_state+0x61/0x180 [ 109.187982][ T6292] __x64_sys_unshare+0x31/0x40 [ 109.188014][ T6292] do_syscall_64+0xcd/0xfa0 [ 109.188047][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.188073][ T6292] RIP: 0033:0x7fe8a558f6c9 [ 109.188094][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.188116][ T6292] RSP: 002b:00007fe8a635f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 109.188141][ T6292] RAX: ffffffffffffffda RBX: 00007fe8a57e5fa0 RCX: 00007fe8a558f6c9 [ 109.188158][ T6292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 109.188171][ T6292] RBP: 00007fe8a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.188186][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.188206][ T6292] R13: 00007fe8a57e6038 R14: 00007fe8a57e5fa0 R15: 00007ffda40d02a8 [ 109.188245][ T6292] [ 110.906791][ T6322] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.569546][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.85'. [ 111.612314][ T6319] bond0: entered allmulticast mode [ 111.656276][ T6319] bond_slave_0: entered allmulticast mode [ 111.715198][ T6319] bond_slave_1: entered allmulticast mode [ 114.671083][ T6368] delete_channel: no stack [ 116.373902][ T6388] Invalid ELF header magic: != ELF [ 117.305586][ T6398] [U] 0="/ [ 117.333790][ T6398] [U] [ 117.336755][ T6398] [U] EeQ@ [ 117.407115][ T6398] [U]  [ 118.201843][ T6411] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 119.225697][ T6414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 119.640607][ T6433] ICMPv6: process `syz.1.109' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 120.716013][ T6447] Invalid ELF header magic: != ELF [ 121.553706][ T6457] FAULT_INJECTION: forcing a failure. [ 121.553706][ T6457] name failslab, interval 1, probability 0, space 0, times 0 [ 121.650649][ T6457] CPU: 0 UID: 0 PID: 6457 Comm: syz.3.115 Not tainted syzkaller #0 PREEMPT(full) [ 121.650671][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.650680][ T6457] Call Trace: [ 121.650685][ T6457] [ 121.650691][ T6457] dump_stack_lvl+0x16c/0x1f0 [ 121.650713][ T6457] should_fail_ex+0x512/0x640 [ 121.650734][ T6457] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 121.650753][ T6457] should_failslab+0xc2/0x120 [ 121.650773][ T6457] kmem_cache_alloc_node_noprof+0x78/0x770 [ 121.650787][ T6457] ? __alloc_skb+0x2b2/0x380 [ 121.650817][ T6457] ? __alloc_skb+0x2b2/0x380 [ 121.650836][ T6457] __alloc_skb+0x2b2/0x380 [ 121.650858][ T6457] ? __pfx___alloc_skb+0x10/0x10 [ 121.650888][ T6457] ethnl_default_notify+0x56a/0xa40 [ 121.650906][ T6457] ? __pfx_ethnl_default_notify+0x10/0x10 [ 121.650921][ T6457] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 121.650947][ T6457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.650974][ T6457] ? __pfx_ethnl_default_notify+0x10/0x10 [ 121.650988][ T6457] ethnl_notify+0xc2/0x200 [ 121.651003][ T6457] ethnl_netdev_event+0x10a/0x190 [ 121.651018][ T6457] notifier_call_chain+0xbc/0x410 [ 121.651036][ T6457] ? __pfx_ethnl_netdev_event+0x10/0x10 [ 121.651060][ T6457] call_netdevice_notifiers_info+0xbe/0x140 [ 121.651082][ T6457] netdev_update_features+0xca/0xe0 [ 121.651098][ T6457] ? __pfx_netdev_update_features+0x10/0x10 [ 121.651116][ T6457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.651140][ T6457] __tun_chr_ioctl+0x4d1/0x4880 [ 121.651155][ T6457] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 121.651178][ T6457] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 121.651194][ T6457] ? hook_file_ioctl_common+0x145/0x410 [ 121.651214][ T6457] ? __fget_files+0x20e/0x3c0 [ 121.651231][ T6457] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 121.651246][ T6457] __x64_sys_ioctl+0x18e/0x210 [ 121.651267][ T6457] do_syscall_64+0xcd/0xfa0 [ 121.651285][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.651299][ T6457] RIP: 0033:0x7f64dd18f6c9 [ 121.651317][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.651332][ T6457] RSP: 002b:00007f64ddf63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.651348][ T6457] RAX: ffffffffffffffda RBX: 00007f64dd3e5fa0 RCX: 00007f64dd18f6c9 [ 121.651357][ T6457] RDX: 0000000000000003 RSI: 00000000400454d0 RDI: 00000000000000c8 [ 121.651366][ T6457] RBP: 00007f64dd211f91 R08: 0000000000000000 R09: 0000000000000000 [ 121.651374][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.651382][ T6457] R13: 00007f64dd3e6038 R14: 00007f64dd3e5fa0 R15: 00007ffef7013d88 [ 121.651403][ T6457] [ 123.323723][ T6478] vhci_hcd: invalid port number 16 [ 123.360671][ T6478] vhci_hcd: invalid port number 16 [ 126.353779][ T6513] Invalid ELF header magic: != ELF [ 126.546545][ T6525] vhci_hcd: invalid port number 16 [ 126.551800][ T6525] vhci_hcd: invalid port number 16 [ 126.882000][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 127.198361][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 128.048244][ T6554] program syz.3.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.661252][ T6658] random: crng reseeded on system resumption [ 132.704673][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.717121][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.977368][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 138.495418][ T6758] program syz.0.167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.739867][ T6773] can0: slcan on pty238. [ 140.780020][ T6772] can0 (unregistered): slcan off pty238. [ 146.786147][ T6898] Invalid ELF header magic: != ELF [ 147.433577][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 147.936882][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 148.031895][ T6915] Invalid ELF header magic: != ELF [ 151.132639][ T6986] program syz.1.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.189226][ T7013] Invalid ELF header magic: != ELF [ 155.186373][ T7037] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 155.193771][ T7037] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.310710][ T7037] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 155.323041][ T7037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.329201][ T7037] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.338120][ T7037] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 155.347785][ T7037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.374472][ T7037] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.411227][ T7037] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.423590][ T7037] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 155.482247][ T7037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.489213][ T7037] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.503050][ T7037] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 156.586033][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.671789][ T7065] netlink: 334 bytes leftover after parsing attributes in process `syz.3.235'. [ 156.846549][ T7077] FAULT_INJECTION: forcing a failure. [ 156.846549][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 156.862064][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(full) [ 156.862101][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.862116][ T7077] Call Trace: [ 156.862124][ T7077] [ 156.862134][ T7077] dump_stack_lvl+0x16c/0x1f0 [ 156.862171][ T7077] should_fail_ex+0x512/0x640 [ 156.862209][ T7077] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 156.862239][ T7077] should_failslab+0xc2/0x120 [ 156.862273][ T7077] kmem_cache_alloc_noprof+0x75/0x6e0 [ 156.862299][ T7077] ? __anon_vma_prepare+0x344/0x5e0 [ 156.862344][ T7077] ? __anon_vma_prepare+0x344/0x5e0 [ 156.862381][ T7077] __anon_vma_prepare+0x344/0x5e0 [ 156.862424][ T7077] __vmf_anon_prepare+0x11c/0x240 [ 156.862459][ T7077] do_pte_missing+0x10b7/0x3ba0 [ 156.862498][ T7077] ? find_held_lock+0x2b/0x80 [ 156.862534][ T7077] __handle_mm_fault+0x1556/0x2aa0 [ 156.862594][ T7077] ? __pfx___handle_mm_fault+0x10/0x10 [ 156.862636][ T7077] ? __pte_offset_map_lock+0x174/0x310 [ 156.862669][ T7077] ? find_held_lock+0x2b/0x80 [ 156.862706][ T7077] ? follow_page_pte+0x5cf/0x1390 [ 156.862747][ T7077] handle_mm_fault+0x589/0xd10 [ 156.862791][ T7077] __get_user_pages+0x54e/0x3530 [ 156.862841][ T7077] ? __pfx___get_user_pages+0x10/0x10 [ 156.862885][ T7077] populate_vma_page_range+0x267/0x3f0 [ 156.862923][ T7077] ? __pfx_populate_vma_page_range+0x10/0x10 [ 156.862957][ T7077] ? __pfx_find_vma_intersection+0x10/0x10 [ 156.862999][ T7077] __mm_populate+0x1d8/0x380 [ 156.863035][ T7077] ? __pfx___mm_populate+0x10/0x10 [ 156.863073][ T7077] ? up_write+0x209/0x520 [ 156.863112][ T7077] vm_mmap_pgoff+0x37f/0x470 [ 156.863148][ T7077] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 156.863189][ T7077] ? __x64_sys_futex+0x1e0/0x4c0 [ 156.863225][ T7077] ? __x64_sys_futex+0x1e9/0x4c0 [ 156.863260][ T7077] ksys_mmap_pgoff+0x7d/0x5c0 [ 156.863287][ T7077] ? xfd_validate_state+0x61/0x180 [ 156.863317][ T7077] ? __pfx_do_writev+0x10/0x10 [ 156.863342][ T7077] __x64_sys_mmap+0x125/0x190 [ 156.863379][ T7077] do_syscall_64+0xcd/0xfa0 [ 156.863413][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.863437][ T7077] RIP: 0033:0x7fe8a558f6c9 [ 156.863455][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.863476][ T7077] RSP: 002b:00007fe8a633e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 156.863499][ T7077] RAX: ffffffffffffffda RBX: 00007fe8a57e6090 RCX: 00007fe8a558f6c9 [ 156.863515][ T7077] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 156.863529][ T7077] RBP: 00007fe8a5611f91 R08: ffffffffffffffff R09: 0000000000008000 [ 156.863558][ T7077] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 156.863572][ T7077] R13: 00007fe8a57e6128 R14: 00007fe8a57e6090 R15: 00007ffda40d02a8 [ 156.863605][ T7077] [ 157.153227][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 157.386062][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.386068][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.540210][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.669748][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.459252][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.465953][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.610630][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.290470][ T30] audit: type=1804 audit(4294985398.992:2): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.249" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=23 res=1 errno=0 [ 160.456878][ T7132] zswap: compressor not available [ 160.725352][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.521601][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.527798][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.680732][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.592137][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.962819][ T7391] Invalid ELF header magic: != ELF [ 193.854342][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.894790][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.754341][ T7720] Invalid ELF header magic: != ELF [ 200.389846][ T7737] FAULT_INJECTION: forcing a failure. [ 200.389846][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 200.413738][ T7737] CPU: 0 UID: 0 PID: 7737 Comm: syz.2.395 Not tainted syzkaller #0 PREEMPT(full) [ 200.413774][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.413789][ T7737] Call Trace: [ 200.413798][ T7737] [ 200.413808][ T7737] dump_stack_lvl+0x16c/0x1f0 [ 200.413845][ T7737] should_fail_ex+0x512/0x640 [ 200.413882][ T7737] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 200.413914][ T7737] should_failslab+0xc2/0x120 [ 200.413946][ T7737] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 200.413972][ T7737] ? stack_depot_save_flags+0x29/0x9c0 [ 200.414009][ T7737] ? __d_alloc+0x32/0xae0 [ 200.414042][ T7737] ? __d_alloc+0x32/0xae0 [ 200.414066][ T7737] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 200.414089][ T7737] __d_alloc+0x32/0xae0 [ 200.414115][ T7737] ? inode_init_always_gfp+0xce4/0x1030 [ 200.414139][ T7737] ? alloc_inode+0x86/0x240 [ 200.414174][ T7737] d_alloc_parallel+0x111/0x1510 [ 200.414222][ T7737] ? __lock_acquire+0xb8a/0x1c90 [ 200.414254][ T7737] ? __pfx_d_alloc_parallel+0x10/0x10 [ 200.414293][ T7737] ? lockdep_init_map_type+0x5c/0x280 [ 200.414328][ T7737] ? lockdep_init_map_type+0x5c/0x280 [ 200.414369][ T7737] __lookup_slow+0x193/0x460 [ 200.414404][ T7737] ? __pfx___lookup_slow+0x10/0x10 [ 200.414443][ T7737] ? __mod_node_page_state+0x1c0/0x1d0 [ 200.414486][ T7737] ? __mod_node_page_state+0x1c0/0x1d0 [ 200.414521][ T7737] ? d_lookup+0xe7/0x190 [ 200.414575][ T7737] lookup_noperm+0xe1/0x110 [ 200.414612][ T7737] simple_start_creating+0xd1/0x1b0 [ 200.414642][ T7737] nfsd_fill_super+0x1c1/0x5a0 [ 200.414682][ T7737] ? __pfx_nfsd_fill_super+0x10/0x10 [ 200.414718][ T7737] get_tree_keyed+0x10e/0x1d0 [ 200.414747][ T7737] vfs_get_tree+0x8e/0x340 [ 200.414782][ T7737] path_mount+0x7b9/0x23a0 [ 200.414816][ T7737] ? __pfx_path_mount+0x10/0x10 [ 200.414847][ T7737] ? kmem_cache_free+0x2d4/0x6c0 [ 200.414872][ T7737] ? putname+0x154/0x1a0 [ 200.414907][ T7737] ? putname+0x154/0x1a0 [ 200.414934][ T7737] ? putname+0x154/0x1a0 [ 200.414968][ T7737] ? __x64_sys_mount+0x293/0x310 [ 200.414995][ T7737] __x64_sys_mount+0x293/0x310 [ 200.415024][ T7737] ? __pfx___x64_sys_mount+0x10/0x10 [ 200.415069][ T7737] do_syscall_64+0xcd/0xfa0 [ 200.415101][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.415127][ T7737] RIP: 0033:0x7ff35e38f6c9 [ 200.415148][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.415171][ T7737] RSP: 002b:00007ff35f1c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.415195][ T7737] RAX: ffffffffffffffda RBX: 00007ff35e5e6090 RCX: 00007ff35e38f6c9 [ 200.415211][ T7737] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 200.415227][ T7737] RBP: 00007ff35e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.415241][ T7737] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 200.415255][ T7737] R13: 00007ff35e5e6128 R14: 00007ff35e5e6090 R15: 00007fff1fc50138 [ 200.415291][ T7737] [ 201.539364][ T5833] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 201.539402][ T5833] Bluetooth: hci0: unexpected subevent 0x0c length: 727 > 5 [ 201.607204][ T7757] FAULT_INJECTION: forcing a failure. [ 201.607204][ T7757] name failslab, interval 1, probability 0, space 0, times 0 [ 201.660584][ T7757] CPU: 0 UID: 0 PID: 7757 Comm: syz.0.400 Not tainted syzkaller #0 PREEMPT(full) [ 201.660621][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.660636][ T7757] Call Trace: [ 201.660645][ T7757] [ 201.660655][ T7757] dump_stack_lvl+0x16c/0x1f0 [ 201.660692][ T7757] should_fail_ex+0x512/0x640 [ 201.660730][ T7757] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 201.660761][ T7757] should_failslab+0xc2/0x120 [ 201.660793][ T7757] kmem_cache_alloc_noprof+0x75/0x6e0 [ 201.660818][ T7757] ? __asan_memcpy+0x3c/0x60 [ 201.660842][ T7757] ? __kernfs_new_node+0xd2/0x8e0 [ 201.660879][ T7757] ? __kernfs_new_node+0xd2/0x8e0 [ 201.660907][ T7757] __kernfs_new_node+0xd2/0x8e0 [ 201.660944][ T7757] ? __pfx___kernfs_new_node+0x10/0x10 [ 201.660985][ T7757] ? find_held_lock+0x2b/0x80 [ 201.661011][ T7757] ? kernfs_root+0xee/0x2a0 [ 201.661049][ T7757] kernfs_new_node+0x13c/0x1e0 [ 201.661082][ T7757] ? net_ns_get_ownership+0xf8/0x1b0 [ 201.661113][ T7757] kernfs_create_dir_ns+0x4c/0x1a0 [ 201.661152][ T7757] sysfs_create_dir_ns+0x13a/0x2b0 [ 201.661183][ T7757] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 201.661211][ T7757] ? find_held_lock+0x2b/0x80 [ 201.661238][ T7757] ? net_namespace+0x12/0x50 [ 201.661266][ T7757] ? device_namespace+0x76/0xa0 [ 201.661304][ T7757] kobject_add_internal+0x2c4/0x9b0 [ 201.661341][ T7757] kobject_add+0x16e/0x240 [ 201.661370][ T7757] ? __pfx_kobject_add+0x10/0x10 [ 201.661403][ T7757] ? get_device_parent+0x1c5/0x4e0 [ 201.661449][ T7757] ? kobject_put+0xab/0x5a0 [ 201.661490][ T7757] device_add+0x288/0x1aa0 [ 201.661509][ T7757] ? __pfx_dev_set_name+0x10/0x10 [ 201.661534][ T7757] ? __pfx_device_add+0x10/0x10 [ 201.661572][ T7757] ? lockdep_init_map_type+0x5c/0x280 [ 201.661611][ T7757] ? __init_waitqueue_head+0xca/0x150 [ 201.661645][ T7757] netdev_register_kobject+0x1a9/0x3d0 [ 201.661680][ T7757] register_netdevice+0x13dc/0x2270 [ 201.661718][ T7757] ? __pfx_register_netdevice+0x10/0x10 [ 201.661759][ T7757] ppp_dev_configure+0xa1e/0xd40 [ 201.661805][ T7757] ppp_ioctl+0x170e/0x2880 [ 201.661843][ T7757] ? find_held_lock+0x2b/0x80 [ 201.661869][ T7757] ? __pfx_ppp_ioctl+0x10/0x10 [ 201.661911][ T7757] ? __fget_files+0x20e/0x3c0 [ 201.661943][ T7757] ? __pfx_ppp_ioctl+0x10/0x10 [ 201.661979][ T7757] __x64_sys_ioctl+0x18e/0x210 [ 201.662019][ T7757] do_syscall_64+0xcd/0xfa0 [ 201.662053][ T7757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.662078][ T7757] RIP: 0033:0x7fe8a558f6c9 [ 201.662100][ T7757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.662124][ T7757] RSP: 002b:00007fe8a635f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.662148][ T7757] RAX: ffffffffffffffda RBX: 00007fe8a57e5fa0 RCX: 00007fe8a558f6c9 [ 201.662166][ T7757] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 201.662181][ T7757] RBP: 00007fe8a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.662197][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.662212][ T7757] R13: 00007fe8a57e6038 R14: 00007fe8a57e5fa0 R15: 00007ffda40d02a8 [ 201.662251][ T7757] [ 201.972297][ T7757] kobject: kobject_add_internal failed for ppp808482864 (error: -12 parent: net) [ 202.140238][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 202.600079][ T7755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.609661][ T7755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.615833][ T7755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.629037][ T7755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.471203][ T7747] MTRR 1 not used [ 204.599004][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.689209][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.695319][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.695373][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.782154][ T7791] netlink: 25 bytes leftover after parsing attributes in process `syz.0.415'. [ 205.717835][ T7810] FAULT_INJECTION: forcing a failure. [ 205.717835][ T7810] name failslab, interval 1, probability 0, space 0, times 0 [ 205.795506][ T7810] CPU: 0 UID: 0 PID: 7810 Comm: syz.2.412 Not tainted syzkaller #0 PREEMPT(full) [ 205.795540][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.795556][ T7810] Call Trace: [ 205.795564][ T7810] [ 205.795574][ T7810] dump_stack_lvl+0x16c/0x1f0 [ 205.795611][ T7810] should_fail_ex+0x512/0x640 [ 205.795648][ T7810] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 205.795679][ T7810] should_failslab+0xc2/0x120 [ 205.795712][ T7810] kmem_cache_alloc_noprof+0x75/0x6e0 [ 205.795739][ T7810] ? __kernfs_new_node+0xd2/0x8e0 [ 205.795777][ T7810] ? __kernfs_new_node+0xd2/0x8e0 [ 205.795805][ T7810] __kernfs_new_node+0xd2/0x8e0 [ 205.795841][ T7810] ? __pfx___kernfs_new_node+0x10/0x10 [ 205.795882][ T7810] ? find_held_lock+0x2b/0x80 [ 205.795909][ T7810] ? kernfs_root+0xee/0x2a0 [ 205.795947][ T7810] kernfs_new_node+0x13c/0x1e0 [ 205.795989][ T7810] __kernfs_create_file+0x53/0x350 [ 205.796020][ T7810] sysfs_add_file_mode_ns+0x207/0x3c0 [ 205.796058][ T7810] internal_create_group+0x578/0xf30 [ 205.796101][ T7810] ? __pfx_internal_create_group+0x10/0x10 [ 205.796140][ T7810] ? kernfs_create_link+0x1bd/0x240 [ 205.796171][ T7810] internal_create_groups+0x9d/0x150 [ 205.796208][ T7810] device_add+0x731/0x1aa0 [ 205.796236][ T7810] ? __pfx_device_add+0x10/0x10 [ 205.796273][ T7810] ? rcu_is_watching+0x12/0xc0 [ 205.796307][ T7810] ? lockdep_init_map_type+0x5c/0x280 [ 205.796351][ T7810] input_register_device+0x7e8/0x1180 [ 205.796382][ T7810] ? input_ff_create+0x256/0x350 [ 205.796420][ T7810] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 205.796458][ T7810] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.796494][ T7810] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 205.796539][ T7810] ? find_held_lock+0x2b/0x80 [ 205.796584][ T7810] ? __pfx_uinput_ioctl+0x10/0x10 [ 205.796620][ T7810] __x64_sys_ioctl+0x18e/0x210 [ 205.796659][ T7810] do_syscall_64+0xcd/0xfa0 [ 205.796692][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.796717][ T7810] RIP: 0033:0x7ff35e38f6c9 [ 205.796738][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.796761][ T7810] RSP: 002b:00007ff35f1e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.796785][ T7810] RAX: ffffffffffffffda RBX: 00007ff35e5e5fa0 RCX: 00007ff35e38f6c9 [ 205.796802][ T7810] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 205.796817][ T7810] RBP: 00007ff35e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.796831][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.796846][ T7810] R13: 00007ff35e5e6038 R14: 00007ff35e5e5fa0 R15: 00007fff1fc50138 [ 205.796884][ T7810] [ 206.474195][ T7822] FAULT_INJECTION: forcing a failure. [ 206.474195][ T7822] name fail_futex, interval 1, probability 0, space 0, times 1 [ 206.494513][ T7822] CPU: 0 UID: 0 PID: 7822 Comm: syz.2.416 Not tainted syzkaller #0 PREEMPT(full) [ 206.494545][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.494559][ T7822] Call Trace: [ 206.494568][ T7822] [ 206.494577][ T7822] dump_stack_lvl+0x16c/0x1f0 [ 206.494613][ T7822] should_fail_ex+0x512/0x640 [ 206.494656][ T7822] get_futex_key+0x1d0/0x1560 [ 206.494688][ T7822] ? __lock_acquire+0x622/0x1c90 [ 206.494721][ T7822] ? __pfx_get_futex_key+0x10/0x10 [ 206.494755][ T7822] ? do_raw_spin_lock+0x12c/0x2b0 [ 206.494803][ T7822] futex_wake+0xea/0x530 [ 206.494839][ T7822] ? find_held_lock+0x2b/0x80 [ 206.494866][ T7822] ? fd_install+0x225/0x750 [ 206.494892][ T7822] ? __pfx_futex_wake+0x10/0x10 [ 206.494935][ T7822] ? rcu_is_watching+0x12/0xc0 [ 206.494983][ T7822] ? io_uring_setup+0x16e4/0x20e0 [ 206.495020][ T7822] do_futex+0x1e3/0x350 [ 206.495056][ T7822] ? __pfx_do_futex+0x10/0x10 [ 206.495091][ T7822] ? __pfx___might_resched+0x10/0x10 [ 206.495120][ T7822] __x64_sys_futex+0x1e0/0x4c0 [ 206.495160][ T7822] ? __pfx___x64_sys_futex+0x10/0x10 [ 206.495194][ T7822] ? xfd_validate_state+0x61/0x180 [ 206.495247][ T7822] do_syscall_64+0xcd/0xfa0 [ 206.495282][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.495308][ T7822] RIP: 0033:0x7ff35e38f6c9 [ 206.495328][ T7822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.495352][ T7822] RSP: 002b:00007ff35f1e20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 206.495376][ T7822] RAX: ffffffffffffffda RBX: 00007ff35e5e5fa8 RCX: 00007ff35e38f6c9 [ 206.495393][ T7822] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff35e5e5fac [ 206.495408][ T7822] RBP: 00007ff35e5e5fa0 R08: 00007ff35f1e3000 R09: 0000000000000000 [ 206.495424][ T7822] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 206.495439][ T7822] R13: 00007ff35e5e6038 R14: 00007fff1fc50050 R15: 00007fff1fc50138 [ 206.495475][ T7822] [ 207.357420][ T7814] ptrace attach of ""[7829] was attempted by "./syz-executor exec"[7814] [ 207.396720][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 207.682316][ T7842] random: crng reseeded on system resumption [ 208.793078][ T7860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.799742][ T7860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.806491][ T7860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.813458][ T7860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.718755][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 210.812186][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.812208][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.818235][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.889665][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.202503][ T7923] ptrace attach of ""[7934] was attempted by "./syz-executor exec"[7923] [ 215.096492][ T7969] syz.1.445 (7969) used greatest stack depth: 19080 bytes left [ 219.729852][ T8054] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 219.736942][ T8054] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 219.769412][ T8054] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 219.775493][ T8054] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 219.911960][ T8068] ptrace attach of ""[8072] was attempted by "./syz-executor exec"[8068] [ 220.425604][ T8082] random: crng reseeded on system resumption [ 221.081518][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 221.808054][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.814122][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.820251][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.518950][ T8144] random: crng reseeded on system resumption [ 225.786678][ T8148] Invalid ELF header magic: != ELF [ 229.495574][ T8220] netlink: 186 bytes leftover after parsing attributes in process `syz.2.508'. [ 229.574882][ T8210] netlink: 342 bytes leftover after parsing attributes in process `syz.0.506'. [ 229.630556][ T8227] input: f as /devices/virtual/input/input10 [ 230.289984][ T8223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.296362][ T8223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.305252][ T8223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.318364][ T8223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.752726][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.318759][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.320539][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.388454][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.599714][ T8260] FAULT_INJECTION: forcing a failure. [ 232.599714][ T8260] name failslab, interval 1, probability 0, space 0, times 0 [ 232.622968][ T8260] CPU: 1 UID: 0 PID: 8260 Comm: syz.1.517 Not tainted syzkaller #0 PREEMPT(full) [ 232.623004][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.623018][ T8260] Call Trace: [ 232.623027][ T8260] [ 232.623037][ T8260] dump_stack_lvl+0x16c/0x1f0 [ 232.623075][ T8260] should_fail_ex+0x512/0x640 [ 232.623111][ T8260] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 232.623143][ T8260] should_failslab+0xc2/0x120 [ 232.623178][ T8260] kmem_cache_alloc_node_noprof+0x78/0x770 [ 232.623204][ T8260] ? __alloc_skb+0x2b2/0x380 [ 232.623248][ T8260] ? __alloc_skb+0x2b2/0x380 [ 232.623282][ T8260] __alloc_skb+0x2b2/0x380 [ 232.623320][ T8260] ? __pfx___alloc_skb+0x10/0x10 [ 232.623364][ T8260] ? __pfx___register_sysctl_table+0x10/0x10 [ 232.623400][ T8260] ? is_module_address+0x69/0xf0 [ 232.623439][ T8260] inet6_netconf_notify_devconf+0x87/0x180 [ 232.623476][ T8260] __addrconf_sysctl_register+0x22b/0x360 [ 232.623510][ T8260] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 232.623549][ T8260] ? __asan_memcpy+0x3c/0x60 [ 232.623579][ T8260] addrconf_init_net+0x50c/0x8e0 [ 232.623612][ T8260] ? __pfx_addrconf_init_net+0x10/0x10 [ 232.623640][ T8260] ops_init+0x1e2/0x5f0 [ 232.623670][ T8260] setup_net+0x100/0x390 [ 232.623697][ T8260] ? __pfx_setup_net+0x10/0x10 [ 232.623724][ T8260] ? debug_mutex_init+0x37/0x70 [ 232.623756][ T8260] copy_net_ns+0x2f8/0x690 [ 232.623796][ T8260] create_new_namespaces+0x3ea/0xa90 [ 232.623835][ T8260] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 232.623868][ T8260] ksys_unshare+0x45b/0xa40 [ 232.623909][ T8260] ? __pfx_ksys_unshare+0x10/0x10 [ 232.623945][ T8260] ? xfd_validate_state+0x61/0x180 [ 232.624008][ T8260] __x64_sys_unshare+0x31/0x40 [ 232.624042][ T8260] do_syscall_64+0xcd/0xfa0 [ 232.624076][ T8260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.624102][ T8260] RIP: 0033:0x7ff56438f6c9 [ 232.624123][ T8260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.624145][ T8260] RSP: 002b:00007ff5651b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 232.624169][ T8260] RAX: ffffffffffffffda RBX: 00007ff5645e5fa0 RCX: 00007ff56438f6c9 [ 232.624185][ T8260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 232.624200][ T8260] RBP: 00007ff564411f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.624216][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.624231][ T8260] R13: 00007ff5645e6038 R14: 00007ff5645e5fa0 R15: 00007fff5d2907c8 [ 232.624268][ T8260] [ 233.077014][ T8269] Console: switching to colour VGA+ 80x25 [ 233.483309][ T8271] Console: switching to colour frame buffer device 128x48 [ 233.683385][ T8281] mmap: syz.1.521 (8281) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 234.760274][ T8273] binder: 8272:8273 ioctl 5380 2000000000c0 returned -22 [ 234.768954][ T8273] capability: warning: `syz.3.520' uses 32-bit capabilities (legacy support in use) [ 234.781980][ T8273] sd 0:0:1:0: PR command failed: 1026 [ 234.797545][ T8273] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 234.804547][ T8273] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 238.699726][ T8338] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 243.172440][ T8394] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 243.485229][ T8412] Invalid ELF header magic: != ELF [ 247.315580][ T8489] random: crng reseeded on system resumption [ 248.376495][ T8516] Console: switching to colour VGA+ 80x25 [ 248.570440][ T8518] Console: switching to colour frame buffer device 128x48 [ 255.016535][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.101953][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.215602][ T8631] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 260.607862][ T8717] random: crng reseeded on system resumption [ 270.677592][ T8859] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 278.267740][ T8979] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 285.981409][ T9102] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 286.225900][ T9114] input: f as /devices/virtual/input/input11 [ 288.031913][ T9151] netlink: 306 bytes leftover after parsing attributes in process `syz.3.747'. [ 291.287615][ T9209] [U] [ 291.290467][ T9209] [U] [ 291.293244][ T9209] [U] [ 291.295957][ T9209] [U] [ 291.342451][ T9209] [U] [ 291.345218][ T9209] [U] [ 291.348281][ T9209] [U] [ 291.351033][ T9209] [U] [ 291.381267][ T9209] [U] [ 291.384232][ T9209] [U] 4P #‡T(GQݩS8VX C.ܘCńF+M R`KN [ 291.455629][ T9209] [U] M4N/4CKTI?&X//YV:́("W GENOF3łBCƴ Y5+|Rݎ [ 291.509630][ T9209] [U] :JY\CK%EW";J.-\ [ 291.547476][ T9209] [U] F(O[M,? ɻ [ 291.557239][ T9209] [U] G [ 291.563651][ T9209] [U] UC%>"K&= Ք'YYLAT˥&ĶտW [ 291.578148][ T9209] [U] Uԅέ ]QJI5'1>CVZ;)KI<?Hբ'Z;ܗ^SE F]=N]:$بE0.K}?X [ 291.602026][ T9209] [U] 5$W,1"?V~դ-͂͹~{ ARڋR6CR͗L/GNKP5Y[2]:`6ʎYXÜ~; ɿTG2ZU%{,RUKEWIV#/]SUU>^4ٚ^C>ؑX+7DWXȫW՚ =N\ [ 291.654103][ T9209] [U] ݱ-I _I-{+P- ~̸.KGMιE{֟HUݖC ӵ [ 291.680075][ T9209] [U] #M[UVޙ6WWP˵D71%MA٤@@UEGZ\+KJIL0F{R#'.#L’UQ+V [ 291.767494][ T9209] [U] RO!@WNAϪYLޠ .~N&-_ ֭?T$WL K*̡Ȱ?@{}6D>|OSZ_G<6#}LSѵ!о^=ҕZA%V L2ůUF*EK~O7%H]ƥGCG@0R6ʿ1ETO:VTTM`O[ț-÷( 2=8!K[PV`E&IRڱŏV@^B$$ގ8CݪL˕HNK840Èʛ K Tԅ3A]ˮڡ'ɴD5L'T"ȀIɲӖFUL"&R؞Y*L= >SĒ5ι*KM!җߢ [ 291.834941][ T9209] [U] >9Ǵ\ [ 291.838551][ T9209] [U] Z [ 291.855697][ T9209] [U] D",ZM)V4[| 3Q [ 291.914066][ T9209] [U] PFJ* +|KYL =`ZZ^RB [ 291.954742][ T9209] [U] BY +#XV!N&Ϙ3RWYFRWXɊ4 YIWY9MTD;0¤HPV 3؊X<XFֱJWO$ Z Fő'/F߉[}$7 DZYHCEF)Q܊W< JϬ{?OåL:VMSR [ 292.019906][ T9209] [U] TнS4Σڏ8N+HXLLKD;DXPF:ʋ1$T4^DH)1ȆB\!2% \3לݪ`ȵO [ 292.032605][ T9209] [U] ' HE [ 292.036792][ T9209] [U] ;VUڞ_3}_3J!Aٿ_RGF>R֓]SϙAD#,$&I@Q EՠC3ӊ' T[XB˰H]{ե=X?ʲ$/ [ 292.103898][ T9209] [U] >X|&}K![ڴ)8TF:-'40_7HD3O$(,Xâ93`= [ 292.253619][ T9209] [U] UPUQZKQUGG_ ~$8?[GۃQAOK$HY(D=.FHMF4W);A <+HNGLƛ2J=JHHBA*ځUEVǴ\΀}DKCA!R/1`LNŸ [ 292.288372][ T9209] [U] >éH}D,Ȩ]6,GJJ%:JX5,ȬT܂"$1UAV;:33(VQқ7N?WCZ>KV [ 292.317549][ T9209] [U] 5LGԊ)TZ QEĬLՈBII/BWN*IN [ 292.341973][ T9209] [U] C4VG=<QݏE{EDIٵNAWO~N$%ǗՈF˱CJ }T_(,Q99)PFBV7@.2OX\ [ 292.399963][ T9209] [U] 1JAZӥH<V/=WW5G|Y.G~LS6Z!$]}WG [ 292.412370][ T9209] [U] RؠP7[ +†ZDL" [ 292.419894][ T9209] [U] FZVJ4ۇ!YJFTP|W7V' Ē:Ɣ=D]YPMݥM $V I [ 292.431052][ T9209] [U] B|=K۲U\Ʃ$PF#;%7YHTZDT"724U1PRPHVKN&BN:;GF3QCK| F $C;UKL5KS8?XC(%O+{JXYZ3OͰ>G˲ȐAžοHLЖ#*U܄ӕMD;%M'Oپ#,>NPA [ 299.743391][ T9365] [U] #̓K}O(ջNȞR3ۧ@B^7ʇنGV%I)J ] [ 299.786392][ T9365] [U] P3.)L-HPZ .A";FBJ$XBQبʈJ C}YֳPJPĞZPP]IZ!9,;.DT=^-ɮ-D ECT̨);ES [ 299.842457][ T9365] [U] ( [ 299.856725][ T9365] [U] `"Ø˼|ŕMD!MD'Eӫѫ^֐,GFK:?ι}U6}AV RI{%>ɩIU>*OQAR2XF+NT!ŋZAGTYߊ;0H A3P-6_ED| ?TPH̟߬VN` ծW [ 300.027803][ T9365] [U] Q7ºFW4 T"B;|Kډ`؀O;U=C [ 300.100444][ T9365] [U] ©QTTPX_/RY0A 3~QDW$Y^YMȴ'HP޴!]Z'SL-N)& [ 300.120162][ T9365] [U] #A"PQ!( [ 300.129074][ T9365] [U] WDßĆ1Ϟ&TP͛Z RH*23OI6\õ|OّK:W Y6W2B}T1@T٩X`6VC\ֹQ,֊XK)|1\L18+E$WCNAL"H[ [ 300.204972][ T9365] [U] YC8 [ 366.206752][T10504] dump_stack_lvl+0x16c/0x1f0 [ 366.206791][T10504] should_fail_ex+0x512/0x640 [ 366.206829][T10504] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 366.206860][T10504] should_failslab+0xc2/0x120 [ 366.206894][T10504] kmem_cache_alloc_node_noprof+0x78/0x770 [ 366.206926][T10504] ? __alloc_skb+0x2b2/0x380 [ 366.206975][T10504] ? __alloc_skb+0x2b2/0x380 [ 366.207009][T10504] __alloc_skb+0x2b2/0x380 [ 366.207048][T10504] ? __pfx___alloc_skb+0x10/0x10 [ 366.207091][T10504] ? __lock_acquire+0xb8a/0x1c90 [ 366.207132][T10504] tipc_buf_acquire+0x26/0xe0 [ 366.207158][T10504] tipc_msg_build+0x112/0x1150 [ 366.207185][T10504] ? do_raw_spin_lock+0x12c/0x2b0 [ 366.207221][T10504] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 366.207266][T10504] ? __pfx_tipc_msg_build+0x10/0x10 [ 366.207295][T10504] ? mark_held_locks+0x49/0x80 [ 366.207322][T10504] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 366.207352][T10504] tipc_send_group_bcast+0x7cc/0xa50 [ 366.207396][T10504] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 366.207429][T10504] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 366.207459][T10504] ? __pfx_woken_wake_function+0x10/0x10 [ 366.207483][T10504] ? __kernel_text_address+0xd/0x40 [ 366.207505][T10504] ? unwind_get_return_address+0x59/0xa0 [ 366.207543][T10504] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 366.207577][T10504] __tipc_sendmsg+0x4ab/0x19a0 [ 366.207597][T10504] ? stack_depot_save_flags+0x29/0x9c0 [ 366.207639][T10504] ? __pfx___tipc_sendmsg+0x10/0x10 [ 366.207692][T10504] ? __local_bh_enable_ip+0xa4/0x120 [ 366.207721][T10504] tipc_sendmsg+0x4f/0x70 [ 366.207739][T10504] ____sys_sendmsg+0xa98/0xc70 [ 366.207767][T10504] ? copy_msghdr_from_user+0x10a/0x160 [ 366.207792][T10504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.207835][T10504] ___sys_sendmsg+0x134/0x1d0 [ 366.207861][T10504] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.207882][T10504] ? __lock_acquire+0x622/0x1c90 [ 366.207958][T10504] __sys_sendmsg+0x16d/0x220 [ 366.207984][T10504] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.208029][T10504] do_syscall_64+0xcd/0xfa0 [ 366.208062][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.208086][T10504] RIP: 0033:0x7ff56438f6c9 [ 366.208108][T10504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.208131][T10504] RSP: 002b:00007ff5651b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.208154][T10504] RAX: ffffffffffffffda RBX: 00007ff5645e5fa0 RCX: 00007ff56438f6c9 [ 366.208171][T10504] RDX: 000000000000c800 RSI: 0000000000000000 RDI: 0000000000000003 [ 366.208186][T10504] RBP: 00007ff564411f91 R08: 0000000000000000 R09: 0000000000000000 [ 366.208200][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.208212][T10504] R13: 00007ff5645e6038 R14: 00007ff5645e5fa0 R15: 00007fff5d2907c8 [ 366.208258][T10504] [ 372.875035][T10616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1092'. [ 373.187310][T10608] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 376.053780][T10661] device-mapper: ioctl: Invalid ioctl structure: name , dev 4 [ 377.236291][T10680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.312203][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.319048][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.913739][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 379.040475][T10697] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 379.058560][T10697] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1115'. [ 383.693625][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1132'. [ 387.836998][T10825] FAULT_INJECTION: forcing a failure. [ 387.836998][T10825] name failslab, interval 1, probability 0, space 0, times 0 [ 387.855198][T10826] Invalid ELF header magic: != ELF [ 387.891518][T10825] CPU: 1 UID: 0 PID: 10825 Comm: syz.0.1149 Not tainted syzkaller #0 PREEMPT(full) [ 387.891551][T10825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.891565][T10825] Call Trace: [ 387.891574][T10825] [ 387.891584][T10825] dump_stack_lvl+0x16c/0x1f0 [ 387.891619][T10825] should_fail_ex+0x512/0x640 [ 387.891655][T10825] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 387.891684][T10825] should_failslab+0xc2/0x120 [ 387.891717][T10825] kmem_cache_alloc_node_noprof+0x78/0x770 [ 387.891739][T10825] ? find_held_lock+0x2b/0x80 [ 387.891763][T10825] ? __alloc_skb+0x2b2/0x380 [ 387.891803][T10825] ? __alloc_skb+0x2b2/0x380 [ 387.891834][T10825] __alloc_skb+0x2b2/0x380 [ 387.891872][T10825] ? __pfx___alloc_skb+0x10/0x10 [ 387.891915][T10825] ? __pfx___register_sysctl_table+0x10/0x10 [ 387.891950][T10825] ? is_module_address+0x69/0xf0 [ 387.891990][T10825] inet_netconf_notify_devconf+0x8b/0x1f0 [ 387.892024][T10825] __devinet_sysctl_register+0x227/0x360 [ 387.892059][T10825] ? rcu_is_watching+0x12/0xc0 [ 387.892087][T10825] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 387.892117][T10825] ? __kmalloc_node_track_caller_noprof+0x362/0x8a0 [ 387.892155][T10825] ? __asan_memcpy+0x3c/0x60 [ 387.892183][T10825] devinet_init_net+0x347/0x910 [ 387.892213][T10825] ? __pfx_devinet_init_net+0x10/0x10 [ 387.892250][T10825] ops_init+0x1e2/0x5f0 [ 387.892276][T10825] setup_net+0x100/0x390 [ 387.892300][T10825] ? __pfx_setup_net+0x10/0x10 [ 387.892325][T10825] ? debug_mutex_init+0x37/0x70 [ 387.892350][T10825] copy_net_ns+0x2f8/0x690 [ 387.892377][T10825] create_new_namespaces+0x3ea/0xa90 [ 387.892408][T10825] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 387.892434][T10825] ksys_unshare+0x45b/0xa40 [ 387.892461][T10825] ? __pfx_ksys_unshare+0x10/0x10 [ 387.892489][T10825] ? xfd_validate_state+0x61/0x180 [ 387.892526][T10825] __x64_sys_unshare+0x31/0x40 [ 387.892552][T10825] do_syscall_64+0xcd/0xfa0 [ 387.892579][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.892600][T10825] RIP: 0033:0x7fe8a558f6c9 [ 387.892618][T10825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.892639][T10825] RSP: 002b:00007fe8a635f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 387.892661][T10825] RAX: ffffffffffffffda RBX: 00007fe8a57e5fa0 RCX: 00007fe8a558f6c9 [ 387.892675][T10825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 387.892688][T10825] RBP: 00007fe8a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 387.892701][T10825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.892713][T10825] R13: 00007fe8a57e6038 R14: 00007fe8a57e5fa0 R15: 00007ffda40d02a8 [ 387.892744][T10825] [ 389.062652][T10843] bond0: option packets_per_slave: invalid value ( Xnp) [ 389.087967][T10843] bond0: option packets_per_slave: allowed values 0 - 65535 [ 389.109500][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1153'. [ 391.639772][ T5827] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 392.247620][T10881] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 392.277323][T10881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.283527][T10881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.300761][T10881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 394.267383][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 394.347068][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 394.351079][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.353131][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.726819][T10928] FAULT_INJECTION: forcing a failure. [ 395.726819][T10928] name failslab, interval 1, probability 0, space 0, times 0 [ 395.853923][T10928] CPU: 0 UID: 0 PID: 10928 Comm: syz.3.1175 Not tainted syzkaller #0 PREEMPT(full) [ 395.853962][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.853978][T10928] Call Trace: [ 395.853987][T10928] [ 395.853997][T10928] dump_stack_lvl+0x16c/0x1f0 [ 395.854035][T10928] should_fail_ex+0x512/0x640 [ 395.854070][T10928] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 395.854101][T10928] should_failslab+0xc2/0x120 [ 395.854135][T10928] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 395.854160][T10928] ? __dquot_initialize+0x299/0xd50 [ 395.854191][T10928] ? __d_alloc+0x32/0xae0 [ 395.854225][T10928] ? __d_alloc+0x32/0xae0 [ 395.854251][T10928] __d_alloc+0x32/0xae0 [ 395.854284][T10928] d_alloc_pseudo+0x1c/0xc0 [ 395.854318][T10928] alloc_file_pseudo+0xcf/0x230 [ 395.854356][T10928] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 395.854402][T10928] __shmem_file_setup+0x1a3/0x330 [ 395.854444][T10928] shmem_zero_setup+0x93/0x1a0 [ 395.854473][T10928] __mmap_region+0x2076/0x27a0 [ 395.854503][T10928] ? __pfx___mmap_region+0x10/0x10 [ 395.854526][T10928] ? finish_task_switch.isra.0+0x21c/0xc10 [ 395.854556][T10928] ? rcu_is_watching+0x12/0xc0 [ 395.854591][T10928] ? finish_task_switch.isra.0+0x221/0xc10 [ 395.854617][T10928] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.854648][T10928] ? finish_task_switch.isra.0+0x221/0xc10 [ 395.854710][T10928] ? __pfx___schedule+0x10/0x10 [ 395.854783][T10928] ? trace_cap_capable+0x18d/0x200 [ 395.854830][T10928] mmap_region+0x1ab/0x3f0 [ 395.854855][T10928] ? __get_unmapped_area+0x267/0x440 [ 395.854891][T10928] do_mmap+0xa3e/0x1210 [ 395.854930][T10928] ? __pfx_do_mmap+0x10/0x10 [ 395.854962][T10928] ? __pfx_down_write_killable+0x10/0x10 [ 395.854995][T10928] ? kmem_cache_free+0x2d4/0x6c0 [ 395.855028][T10928] vm_mmap_pgoff+0x29e/0x470 [ 395.855067][T10928] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 395.855107][T10928] ? __x64_sys_futex+0x1e0/0x4c0 [ 395.855139][T10928] ? __x64_sys_futex+0x1e9/0x4c0 [ 395.855177][T10928] ksys_mmap_pgoff+0x7d/0x5c0 [ 395.855206][T10928] ? xfd_validate_state+0x61/0x180 [ 395.855246][T10928] __x64_sys_mmap+0x125/0x190 [ 395.855286][T10928] do_syscall_64+0xcd/0xfa0 [ 395.855318][T10928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.855344][T10928] RIP: 0033:0x7f64dd18f6c9 [ 395.855365][T10928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.855389][T10928] RSP: 002b:00007f64ddf63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 395.855413][T10928] RAX: ffffffffffffffda RBX: 00007f64dd3e5fa0 RCX: 00007f64dd18f6c9 [ 395.855430][T10928] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 395.855446][T10928] RBP: 00007f64dd211f91 R08: fffffffffffffffa R09: 0000000000008000 [ 395.855462][T10928] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 395.855478][T10928] R13: 00007f64dd3e6038 R14: 00007f64dd3e5fa0 R15: 00007ffef7013d88 [ 395.855516][T10928] [ 401.926673][T11031] random: crng reseeded on system resumption [ 403.685793][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1202'. [ 403.720391][T11065] vhci_hcd: invalid port number 16 [ 404.132011][T11070] can0: slcan on ttyS2. [ 404.192803][T11070] can0 (unregistered): slcan off ttyS2. [ 407.071725][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1213'. [ 409.702117][T10972] Bluetooth: hci3: unexpected event 0x36 length: 123 > 7 [ 410.603107][T11151] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 411.018290][T11157] erspan0: entered allmulticast mode [ 411.074527][T11158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1226'. [ 411.658096][T11173] device-mapper: ioctl: Invalid ioctl structure: name , dev 200010002 [ 411.961957][T11168] zswap: compressor not available [ 414.621009][T11216] random: crng reseeded on system resumption [ 415.231554][T11226] bond0: option packets_per_slave: invalid value ( Xnp) [ 415.248246][T11226] bond0: option packets_per_slave: allowed values 0 - 65535 [ 415.800914][T11232] FAULT_INJECTION: forcing a failure. [ 415.800914][T11232] name failslab, interval 1, probability 0, space 0, times 0 [ 415.837069][T11232] CPU: 1 UID: 0 PID: 11232 Comm: syz.1.1243 Not tainted syzkaller #0 PREEMPT(full) [ 415.837105][T11232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.837120][T11232] Call Trace: [ 415.837129][T11232] [ 415.837139][T11232] dump_stack_lvl+0x16c/0x1f0 [ 415.837177][T11232] should_fail_ex+0x512/0x640 [ 415.837214][T11232] ? fs_reclaim_acquire+0xae/0x150 [ 415.837249][T11232] should_failslab+0xc2/0x120 [ 415.837281][T11232] kmem_cache_alloc_noprof+0x75/0x6e0 [ 415.837308][T11232] ? __kernfs_new_node+0xd2/0x8e0 [ 415.837346][T11232] ? __kernfs_new_node+0xd2/0x8e0 [ 415.837374][T11232] __kernfs_new_node+0xd2/0x8e0 [ 415.837411][T11232] ? __pfx___kernfs_new_node+0x10/0x10 [ 415.837453][T11232] ? find_held_lock+0x2b/0x80 [ 415.837481][T11232] ? kernfs_root+0xee/0x2a0 [ 415.837521][T11232] kernfs_new_node+0x13c/0x1e0 [ 415.837563][T11232] __kernfs_create_file+0x53/0x350 [ 415.837594][T11232] sysfs_add_file_mode_ns+0x207/0x3c0 [ 415.837635][T11232] internal_create_group+0x578/0xf30 [ 415.837677][T11232] ? __pfx_internal_create_group+0x10/0x10 [ 415.837717][T11232] ? kernfs_create_link+0x1bd/0x240 [ 415.837749][T11232] internal_create_groups+0x9d/0x150 [ 415.837785][T11232] device_add+0x731/0x1aa0 [ 415.837814][T11232] ? __pfx_device_add+0x10/0x10 [ 415.837848][T11232] ? __pfx___might_resched+0x10/0x10 [ 415.837875][T11232] ? is_dynamic_key+0xb4/0x160 [ 415.837925][T11232] __add_disk+0x457/0xf00 [ 415.837967][T11232] add_disk_fwnode+0x13f/0x5d0 [ 415.838006][T11232] nbd_dev_add+0x783/0xbb0 [ 415.838044][T11232] ? __pfx_nbd_dev_add+0x10/0x10 [ 415.838101][T11232] ? bpf_lsm_capable+0x9/0x10 [ 415.838133][T11232] ? __radix_tree_lookup+0x21f/0x2c0 [ 415.838168][T11232] nbd_genl_connect+0x8b0/0x1c60 [ 415.838212][T11232] ? __pfx_nbd_genl_connect+0x10/0x10 [ 415.838249][T11232] ? __nla_parse+0x40/0x60 [ 415.838281][T11232] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 415.838315][T11232] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 415.838356][T11232] genl_family_rcv_msg_doit+0x209/0x2f0 [ 415.838391][T11232] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 415.838421][T11232] ? genl_get_cmd+0x194/0x580 [ 415.838459][T11232] ? __radix_tree_lookup+0x21f/0x2c0 [ 415.838490][T11232] genl_rcv_msg+0x55c/0x800 [ 415.838526][T11232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.838558][T11232] ? __pfx_nbd_genl_connect+0x10/0x10 [ 415.838609][T11232] netlink_rcv_skb+0x158/0x420 [ 415.838636][T11232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 415.838668][T11232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.838711][T11232] ? netlink_deliver_tap+0x1ae/0xd30 [ 415.838744][T11232] genl_rcv+0x28/0x40 [ 415.838770][T11232] netlink_unicast+0x5aa/0x870 [ 415.838803][T11232] ? __pfx_netlink_unicast+0x10/0x10 [ 415.838846][T11232] netlink_sendmsg+0x8c8/0xdd0 [ 415.838880][T11232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.838912][T11232] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 415.838962][T11232] ____sys_sendmsg+0xa98/0xc70 [ 415.838997][T11232] ? copy_msghdr_from_user+0x10a/0x160 [ 415.839024][T11232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.839064][T11232] ? __pfx_futex_wake_mark+0x10/0x10 [ 415.839108][T11232] ___sys_sendmsg+0x134/0x1d0 [ 415.839136][T11232] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.839159][T11232] ? __lock_acquire+0x622/0x1c90 [ 415.839239][T11232] __sys_sendmsg+0x16d/0x220 [ 415.839266][T11232] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.839290][T11232] ? __x64_sys_futex+0x1e0/0x4c0 [ 415.839339][T11232] do_syscall_64+0xcd/0xfa0 [ 415.839370][T11232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.839395][T11232] RIP: 0033:0x7ff56438f6c9 [ 415.839415][T11232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.839437][T11232] RSP: 002b:00007ff5651b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.839462][T11232] RAX: ffffffffffffffda RBX: 00007ff5645e5fa0 RCX: 00007ff56438f6c9 [ 415.839478][T11232] RDX: 0000000020040000 RSI: 0000200000000500 RDI: 0000000000000005 [ 415.839493][T11232] RBP: 00007ff564411f91 R08: 0000000000000000 R09: 0000000000000000 [ 415.839508][T11232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.839522][T11232] R13: 00007ff5645e6038 R14: 00007ff5645e5fa0 R15: 00007fff5d2907c8 [ 415.839559][T11232] [ 416.344732][T11232] nbd: failed to add new device [ 416.583093][T11241] FAULT_INJECTION: forcing a failure. [ 416.583093][T11241] name failslab, interval 1, probability 0, space 0, times 0 [ 416.596223][T11241] CPU: 1 UID: 0 PID: 11241 Comm: syz.3.1246 Not tainted syzkaller #0 PREEMPT(full) [ 416.596256][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.596269][T11241] Call Trace: [ 416.596277][T11241] [ 416.596285][T11241] dump_stack_lvl+0x16c/0x1f0 [ 416.596321][T11241] should_fail_ex+0x512/0x640 [ 416.596354][T11241] ? __kmalloc_cache_noprof+0x5f/0x780 [ 416.596382][T11241] should_failslab+0xc2/0x120 [ 416.596415][T11241] __kmalloc_cache_noprof+0x72/0x780 [ 416.596439][T11241] ? rcu_is_watching+0x12/0xc0 [ 416.596465][T11241] ? append_filter_err+0xb8/0x610 [ 416.596504][T11241] ? append_filter_err+0xb8/0x610 [ 416.596535][T11241] append_filter_err+0xb8/0x610 [ 416.596574][T11241] apply_subsystem_event_filter+0x75a/0x17e0 [ 416.596622][T11241] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 416.596683][T11241] ? _copy_from_user+0x59/0xd0 [ 416.596727][T11241] subsystem_filter_write+0x95/0x120 [ 416.596765][T11241] ? __pfx_subsystem_filter_write+0x10/0x10 [ 416.596798][T11241] vfs_write+0x2a0/0x11d0 [ 416.596832][T11241] ? __pfx___mutex_lock+0x10/0x10 [ 416.596864][T11241] ? __pfx_vfs_write+0x10/0x10 [ 416.596901][T11241] ? __fget_files+0x20e/0x3c0 [ 416.596938][T11241] ksys_write+0x12a/0x250 [ 416.596964][T11241] ? __pfx_ksys_write+0x10/0x10 [ 416.597001][T11241] do_syscall_64+0xcd/0xfa0 [ 416.597034][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.597060][T11241] RIP: 0033:0x7f64dd18f6c9 [ 416.597080][T11241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.597104][T11241] RSP: 002b:00007f64ddf63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.597128][T11241] RAX: ffffffffffffffda RBX: 00007f64dd3e5fa0 RCX: 00007f64dd18f6c9 [ 416.597145][T11241] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000008 [ 416.597160][T11241] RBP: 00007f64dd211f91 R08: 0000000000000000 R09: 0000000000000000 [ 416.597175][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.597190][T11241] R13: 00007f64dd3e6038 R14: 00007f64dd3e5fa0 R15: 00007ffef7013d88 [ 416.597228][T11241] [ 419.124884][T11272] ICMPv6: process `syz.0.1261' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 423.448213][T11334] ICMPv6: process `syz.3.1267' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 425.711840][T10972] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 429.662461][T10972] Bluetooth: hci3: unexpected subevent 0x03 length: 253 > 9 [ 430.160844][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 430.190870][T11431] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1288'. [ 431.354623][T11460] random: crng reseeded on system resumption [ 433.235232][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 433.255619][T11478] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1299'. [ 433.564682][T11484] Invalid ELF header magic: != ELF [ 438.263037][T11545] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1311'. [ 438.272400][T11545] mac80211_hwsim hwsim7 ": renamed from wlan0 (while UP) [ 438.464391][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.478768][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.186439][T10972] Bluetooth: hci2: unexpected subevent 0x03 length: 253 > 9 [ 450.404574][T11640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 450.419990][T11640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 450.437018][T11640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 450.450519][T11640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 450.458217][T11640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.121003][T11638] chnl_net:caif_netlink_parms(): no params data found [ 451.186161][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.193596][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.201248][T11638] bridge_slave_0: entered allmulticast mode [ 451.208245][T11638] bridge_slave_0: entered promiscuous mode [ 451.216466][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.223690][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.231224][T11638] bridge_slave_1: entered allmulticast mode [ 451.238167][T11638] bridge_slave_1: entered promiscuous mode [ 451.267309][T11638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.278892][T11638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.308379][T11638] team0: Port device team_slave_0 added [ 451.316746][T11638] team0: Port device team_slave_1 added [ 451.344033][T11638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.351623][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.378750][T11638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.391979][T11638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.399453][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.425834][T11638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.466800][T11638] hsr_slave_0: entered promiscuous mode [ 451.474175][T11638] hsr_slave_1: entered promiscuous mode [ 451.480484][T11638] debugfs: 'hsr0' already exists in 'hsr' [ 451.486214][T11638] Cannot create hsr debugfs directory [ 451.612917][T11638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 451.622765][T11638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 451.632592][T11638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.642276][T11638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.674467][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.681702][T11638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.689949][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.697078][T11638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.749231][T11638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.771007][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.783274][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.799115][T11638] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.815866][T10991] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.823077][T10991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.835328][T10965] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.842509][T10965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.015632][T11638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.207974][T11638] veth0_vlan: entered promiscuous mode [ 452.220848][T11638] veth1_vlan: entered promiscuous mode [ 452.249705][T11638] veth0_macvtap: entered promiscuous mode [ 452.258694][T11638] veth1_macvtap: entered promiscuous mode [ 452.274145][T11638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.289959][T11638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.304111][T10991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.315107][T10991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.328345][T10991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.339973][T10991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.405898][T10991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.421249][T10991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.447776][T10981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.459053][T10981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.643343][T10972] Bluetooth: hci4: command tx timeout [ 454.709148][T10972] Bluetooth: hci4: command tx timeout [ 455.561973][T11715] hub 1-0:1.0: USB hub found [ 455.567886][T11715] hub 1-0:1.0: 1 port detected [ 455.578154][T11715] FAULT_INJECTION: forcing a failure. [ 455.578154][T11715] name failslab, interval 1, probability 0, space 0, times 0 [ 455.592580][T11715] CPU: 1 UID: 0 PID: 11715 Comm: syz.0.1337 Not tainted syzkaller #0 PREEMPT(full) [ 455.592602][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.592611][T11715] Call Trace: [ 455.592617][T11715] [ 455.592622][T11715] dump_stack_lvl+0x16c/0x1f0 [ 455.592644][T11715] should_fail_ex+0x512/0x640 [ 455.592666][T11715] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 455.592683][T11715] should_failslab+0xc2/0x120 [ 455.592703][T11715] kmem_cache_alloc_noprof+0x75/0x6e0 [ 455.592717][T11715] ? __kernfs_new_node+0xd2/0x8e0 [ 455.592739][T11715] ? __kernfs_new_node+0xd2/0x8e0 [ 455.592755][T11715] __kernfs_new_node+0xd2/0x8e0 [ 455.592775][T11715] ? __pfx___kernfs_new_node+0x10/0x10 [ 455.592797][T11715] ? find_held_lock+0x2b/0x80 [ 455.592813][T11715] ? kernfs_root+0xee/0x2a0 [ 455.592834][T11715] kernfs_new_node+0x13c/0x1e0 [ 455.592857][T11715] __kernfs_create_file+0x53/0x350 [ 455.592875][T11715] sysfs_add_file_mode_ns+0x207/0x3c0 [ 455.592897][T11715] internal_create_group+0x578/0xf30 [ 455.592919][T11715] ? sysfs_create_file_ns+0x154/0x1d0 [ 455.592935][T11715] ? __pfx_internal_create_group+0x10/0x10 [ 455.592952][T11715] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 455.592967][T11715] ? __pfx_usb_acpi_find_companion+0x10/0x10 [ 455.592987][T11715] ? acpi_device_notify+0xcf/0x480 [ 455.593015][T11715] ? lockdep_init_map_type+0x5c/0x280 [ 455.593039][T11715] internal_create_groups+0x9d/0x150 [ 455.593060][T11715] device_add+0x77f/0x1aa0 [ 455.593079][T11715] ? __pfx_device_add+0x10/0x10 [ 455.593114][T11715] ? lockdep_init_map_type+0x5c/0x280 [ 455.593146][T11715] ? __init_waitqueue_head+0xca/0x150 [ 455.593176][T11715] usb_hub_create_port_device+0x3a1/0xde0 [ 455.593209][T11715] hub_probe+0x203b/0x3480 [ 455.593243][T11715] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 455.593266][T11715] ? __pfx_hub_probe+0x10/0x10 [ 455.593278][T11715] ? mark_held_locks+0x49/0x80 [ 455.593296][T11715] ? __smp_text_poke_batch_add+0x710/0x7a0 [ 455.593316][T11715] ? mark_held_locks+0x49/0x80 [ 455.593334][T11715] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 455.593354][T11715] usb_probe_interface+0x303/0xa40 [ 455.593373][T11715] ? __pfx_usb_probe_interface+0x10/0x10 [ 455.593389][T11715] really_probe+0x241/0xa90 [ 455.593411][T11715] __driver_probe_device+0x1de/0x440 [ 455.593431][T11715] driver_probe_device+0x4c/0x1b0 [ 455.593450][T11715] __device_attach_driver+0x1df/0x310 [ 455.593470][T11715] ? __pfx___device_attach_driver+0x10/0x10 [ 455.593488][T11715] bus_for_each_drv+0x159/0x1e0 [ 455.593504][T11715] ? __pfx_bus_for_each_drv+0x10/0x10 [ 455.593520][T11715] ? lockdep_hardirqs_on+0x7c/0x110 [ 455.593536][T11715] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 455.593555][T11715] __device_attach+0x1e4/0x4b0 [ 455.593574][T11715] ? __pfx___device_attach+0x10/0x10 [ 455.593593][T11715] ? do_raw_spin_unlock+0x172/0x230 [ 455.593609][T11715] bus_probe_device+0x17f/0x1c0 [ 455.593628][T11715] device_add+0x1148/0x1aa0 [ 455.593643][T11715] ? __pfx_device_add+0x10/0x10 [ 455.593663][T11715] ? mark_held_locks+0x49/0x80 [ 455.593687][T11715] usb_set_configuration+0x1187/0x1e20 [ 455.593715][T11715] bConfigurationValue_store+0x100/0x180 [ 455.593730][T11715] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 455.593745][T11715] ? find_held_lock+0x2b/0x80 [ 455.593759][T11715] ? sysfs_file_kobj+0xe4/0x290 [ 455.593775][T11715] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 455.593789][T11715] dev_attr_store+0x58/0x80 [ 455.593808][T11715] ? __pfx_dev_attr_store+0x10/0x10 [ 455.593828][T11715] sysfs_kf_write+0xf2/0x150 [ 455.593844][T11715] kernfs_fop_write_iter+0x3af/0x570 [ 455.593856][T11715] ? __pfx_sysfs_kf_write+0x10/0x10 [ 455.593874][T11715] iter_file_splice_write+0xa24/0x12e0 [ 455.593902][T11715] ? __pfx_iter_file_splice_write+0x10/0x10 [ 455.593921][T11715] ? __pfx_copy_splice_read+0x10/0x10 [ 455.593946][T11715] ? __pfx_iter_file_splice_write+0x10/0x10 [ 455.593961][T11715] direct_splice_actor+0x192/0x6c0 [ 455.593978][T11715] splice_direct_to_actor+0x345/0xa30 [ 455.593993][T11715] ? __pfx_direct_splice_actor+0x10/0x10 [ 455.594020][T11715] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 455.594041][T11715] do_splice_direct+0x174/0x240 [ 455.594056][T11715] ? __pfx_do_splice_direct+0x10/0x10 [ 455.594071][T11715] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 455.594099][T11715] ? rw_verify_area+0xcf/0x6c0 [ 455.594115][T11715] do_sendfile+0xb06/0xe50 [ 455.594133][T11715] ? __pfx_do_sendfile+0x10/0x10 [ 455.594151][T11715] ? __x64_sys_futex+0x1e0/0x4c0 [ 455.594169][T11715] ? __x64_sys_futex+0x1e9/0x4c0 [ 455.594189][T11715] __x64_sys_sendfile64+0x1d8/0x220 [ 455.594208][T11715] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 455.594232][T11715] do_syscall_64+0xcd/0xfa0 [ 455.594251][T11715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.594265][T11715] RIP: 0033:0x7fe8a558f6c9 [ 455.594279][T11715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.594292][T11715] RSP: 002b:00007fe8a633e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 455.594307][T11715] RAX: ffffffffffffffda RBX: 00007fe8a57e6090 RCX: 00007fe8a558f6c9 [ 455.594316][T11715] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 455.594325][T11715] RBP: 00007fe8a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.594333][T11715] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 455.594342][T11715] R13: 00007fe8a57e6128 R14: 00007fe8a57e6090 R15: 00007ffda40d02a8 [ 455.594363][T11715] [ 455.594552][T11715] hub 1-0:1.0: couldn't create port1 device. [ 456.216520][T11715] hub 1-0:1.0: config failed, out of memory (err -12) [ 456.773625][T11640] Bluetooth: hci4: command tx timeout [ 458.854826][T11640] Bluetooth: hci4: command tx timeout [ 464.736684][ T30] audit: type=1800 audit(4294990819.859:4): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1369" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 464.834235][T11827] random: crng reseeded on system resumption [ 466.329268][T10972] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 467.660752][T11866] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 475.931880][T11974] FAULT_INJECTION: forcing a failure. [ 475.931880][T11974] name failslab, interval 1, probability 0, space 0, times 0 [ 475.960725][T11974] CPU: 1 UID: 0 PID: 11974 Comm: syz.0.1394 Not tainted syzkaller #0 PREEMPT(full) [ 475.960762][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.960779][T11974] Call Trace: [ 475.960787][T11974] [ 475.960797][T11974] dump_stack_lvl+0x16c/0x1f0 [ 475.960835][T11974] should_fail_ex+0x512/0x640 [ 475.960872][T11974] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 475.960905][T11974] should_failslab+0xc2/0x120 [ 475.960938][T11974] kmem_cache_alloc_noprof+0x75/0x6e0 [ 475.960965][T11974] ? ptlock_alloc+0x1f/0x70 [ 475.961008][T11974] ? ptlock_alloc+0x1f/0x70 [ 475.961042][T11974] ptlock_alloc+0x1f/0x70 [ 475.961079][T11974] pte_alloc_one+0x84/0x350 [ 475.961113][T11974] __pte_alloc+0x6d/0x380 [ 475.961144][T11974] ? __pfx___pte_alloc+0x10/0x10 [ 475.961183][T11974] ? __pfx___might_resched+0x10/0x10 [ 475.961211][T11974] ? copy_page_range+0x1c69/0x6930 [ 475.961256][T11974] copy_page_range+0x44a1/0x6930 [ 475.961344][T11974] ? __pfx_copy_page_range+0x10/0x10 [ 475.961395][T11974] ? __pfx___might_resched+0x10/0x10 [ 475.961419][T11974] ? __pfx_mas_store+0x10/0x10 [ 475.961450][T11974] ? __vma_enter_locked+0x163/0x3f0 [ 475.961490][T11974] ? dup_mmap+0xe30/0x2280 [ 475.961521][T11974] ? down_write+0x14d/0x200 [ 475.961558][T11974] ? up_write+0x1b2/0x520 [ 475.961598][T11974] dup_mmap+0xe80/0x2280 [ 475.961646][T11974] ? __pfx_dup_mmap+0x10/0x10 [ 475.961706][T11974] copy_process+0x3f0c/0x76a0 [ 475.961738][T11974] ? __pfx___futex_wait+0x10/0x10 [ 475.961775][T11974] ? __pfx_copy_process+0x10/0x10 [ 475.961815][T11974] ? futex_private_hash_put+0xd5/0x190 [ 475.961854][T11974] kernel_clone+0xfc/0x930 [ 475.961888][T11974] ? __pfx_kernel_clone+0x10/0x10 [ 475.961940][T11974] __do_sys_clone+0xce/0x120 [ 475.961972][T11974] ? __pfx___do_sys_clone+0x10/0x10 [ 475.962020][T11974] ? xfd_validate_state+0x61/0x180 [ 475.962053][T11974] ? __pfx_do_writev+0x10/0x10 [ 475.962091][T11974] do_syscall_64+0xcd/0xfa0 [ 475.962124][T11974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.962150][T11974] RIP: 0033:0x7fe8a558f6c9 [ 475.962180][T11974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.962204][T11974] RSP: 002b:00007fe8a635efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 475.962229][T11974] RAX: ffffffffffffffda RBX: 00007fe8a57e5fa0 RCX: 00007fe8a558f6c9 [ 475.962246][T11974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 475.962261][T11974] RBP: 00007fe8a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 475.962277][T11974] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.962292][T11974] R13: 00007fe8a57e6038 R14: 00007fe8a57e5fa0 R15: 00007ffda40d02a8 [ 475.962330][T11974] [ 476.695504][T11988] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 479.693306][ T30] audit: type=1800 audit(4294990834.899:5): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=33625 res=0 errno=0 [ 480.394780][T12047] binder: 12045:12047 ioctl c018620c 0 returned -22 [ 480.901534][T12043] FAULT_INJECTION: forcing a failure. [ 480.901534][T12043] name failslab, interval 1, probability 0, space 0, times 0 [ 480.916252][T12043] CPU: 1 UID: 0 PID: 12043 Comm: syz.3.1411 Not tainted syzkaller #0 PREEMPT(full) [ 480.916285][T12043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.916299][T12043] Call Trace: [ 480.916308][T12043] [ 480.916319][T12043] dump_stack_lvl+0x16c/0x1f0 [ 480.916351][T12043] should_fail_ex+0x512/0x640 [ 480.916385][T12043] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 480.916413][T12043] should_failslab+0xc2/0x120 [ 480.916445][T12043] kmem_cache_alloc_noprof+0x75/0x6e0 [ 480.916472][T12043] ? ptlock_alloc+0x1f/0x70 [ 480.916516][T12043] ? ptlock_alloc+0x1f/0x70 [ 480.916551][T12043] ptlock_alloc+0x1f/0x70 [ 480.916587][T12043] pte_alloc_one+0x84/0x350 [ 480.916618][T12043] __pte_alloc+0x6d/0x380 [ 480.916648][T12043] ? __pfx___pte_alloc+0x10/0x10 [ 480.916677][T12043] ? __pfx___might_resched+0x10/0x10 [ 480.916704][T12043] ? copy_page_range+0x1c69/0x6930 [ 480.916757][T12043] copy_page_range+0x44a1/0x6930 [ 480.916842][T12043] ? __pfx_copy_page_range+0x10/0x10 [ 480.916893][T12043] ? __pfx___might_resched+0x10/0x10 [ 480.916915][T12043] ? __pfx_mas_store+0x10/0x10 [ 480.916951][T12043] ? __vma_enter_locked+0x163/0x3f0 [ 480.916991][T12043] ? dup_mmap+0xe30/0x2280 [ 480.917024][T12043] ? down_write+0x14d/0x200 [ 480.917062][T12043] ? up_write+0x1b2/0x520 [ 480.917107][T12043] dup_mmap+0xe80/0x2280 [ 480.917156][T12043] ? __pfx_dup_mmap+0x10/0x10 [ 480.917216][T12043] copy_process+0x3f0c/0x76a0 [ 480.917248][T12043] ? __pfx___futex_wait+0x10/0x10 [ 480.917270][T12043] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 480.917314][T12043] ? __pfx_copy_process+0x10/0x10 [ 480.917344][T12043] ? find_held_lock+0x2b/0x80 [ 480.917377][T12043] ? futex_private_hash_put+0xd5/0x190 [ 480.917415][T12043] kernel_clone+0xfc/0x930 [ 480.917446][T12043] ? __pfx_kernel_clone+0x10/0x10 [ 480.917500][T12043] __do_sys_clone+0xce/0x120 [ 480.917531][T12043] ? __pfx___do_sys_clone+0x10/0x10 [ 480.917580][T12043] ? xfd_validate_state+0x61/0x180 [ 480.917629][T12043] do_syscall_64+0xcd/0xfa0 [ 480.917663][T12043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.917688][T12043] RIP: 0033:0x7f64dd18f6c9 [ 480.917710][T12043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.917734][T12043] RSP: 002b:00007f64ddf62fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 480.917759][T12043] RAX: ffffffffffffffda RBX: 00007f64dd3e5fa0 RCX: 00007f64dd18f6c9 [ 480.917775][T12043] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 480.917790][T12043] RBP: 00007f64dd211f91 R08: 0000000000000000 R09: 0000000000000000 [ 480.917805][T12043] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 480.917820][T12043] R13: 00007f64dd3e6038 R14: 00007f64dd3e5fa0 R15: 00007ffef7013d88 [ 480.917858][T12043] [ 482.545305][T12073] [U] [ 482.548136][T12073] [U] [ 482.550832][T12073] [U] [ 482.553522][T12073] [U] [ 482.563150][T12073] [U] [ 482.565866][T12073] [U] [ 482.568590][T12073] [U] [ 482.571276][T12073] [U] [ 482.598237][T12073] [U] [ 482.600983][T12073] [U] [ 482.603702][T12073] [U] [ 482.606413][T12073] [U] [ 482.630620][T12073] [U] [ 482.634065][T12073] [U] JM,2U-AހKʿCX LDBE [ 482.642623][T12073] [U] ؠ8 HG>KO) HY+ [ 482.713895][T12073] [U] HG [ 482.717137][T12073] [U] MOѼߢM؞'BOT W!ZFJVUVܸ&0ALSُTG7`BK7ɭȦ؅*3S[ŐKBF7>KLЗÐݣӓOLJFZ%5PZ.5-P9.O!RID)$_I[CL8G53W Ŭ1A˿ۿ[=5S۾AI(2U˄URќ4?P\3Y6M.`U- ;40S%njGN͂țB5<\Q6VOLO+C! [ 483.040684][T12073] [U] OL0S'8B!5:{UB".CB%?}H؍J$SYUҶT:=HȐG>)ܭفF^ÓEZRF"AH2 RU<&EY8C|[р*9F'Σ. [ 483.081757][T12073] [U] ~>EJ$ Z"7DŵJ/ߧ3]RRV&޶ƉVEMO NóQ͸2A[J$ [ 483.121263][T12073] [U] LCRZ؉_ժ}RMP0M*?Ώ3'R_Eڨ\KͿ_Rڒ*7GXIW,˂A%.ΑP.DO#VBɴ<ޥX5W'CҪ-EL#}A1X-JLL/"ԬT2ҟ4?V _DSNPP2IYG[׼(LLYȦE~M/O5[޵L 6_WF׍\N,B" )ƧLZƟˮ+JBW,7NA' [ 483.290828][T12073] [U]  { Cʑ+|˾NF4$+ԷA$G@4˛~1\<10 ВLM=>8 [ 483.328887][T12073] [U] [ 483.392951][T12073] [U] W(3@'=ʥ&W/R {H̷ܸY8XEʞ6ʎC-8ϯ15R= [ 483.420057][T12073] [U] /5BPP^FDM>M'&EIFяAۃGM̓ݳRۄIYވá@RZCHW-@ťHZ4 [ 483.463218][T12073] [U] 5DDKS":įȬ/| E([P˄ԩǾ]N [ 483.492293][T12073] [U] @Z{ [ 483.495475][T12073] [U] +]ݓVBQZ 6~Z [ 483.504114][T12073] [U] ӜەS! [ 483.522976][T12073] [U] ѭJҤUüXCXSƉ+KU`ôXSQȻՂ$K3EA^TCο4X=C%LQђ!Ӗ>ګLMXD}VR5U֮ BK"^ [ 483.568108][T12073] [U] H6ٌۧ@A_^נ+ [ 483.574292][T12073] [U] %MPHˣ+D(DU*ėZ͕*6"Ɩ6ޖ>+ `U02U:\UZGA{F1J$?3VJ!լȒ۠ [ 483.591884][T12073] [U] ZYT[):„QRDETWKϹ9H.FH[$_RB^Y_ [ 483.651877][T12073] [U] \O<γS7ָMM=C3?B [ 483.703471][T12073] [U] NՑE_ܛ7SD+ZNIT&;\" C=ĮGD_TYM]>_LHX*QXXVKɉ HX [ 483.727631][T12073] [U] =.ɜSUMXHGA39W&S2BSυъCA',ȒS\DCؖCD9ہOQGF̃YDQƘ$҇JHVYM13RM4(ߌWFуOM;N?T˗LKN0@ɕ_EID. ۀWOA.CB*7` [ 483.806722][T12073] [U] *H9#C9ɷKGBS" QZT [ 483.811711][T12073] [U] A [ 483.814646][T12073] [U]  T2IVij DZ۠U? $9ACZ Z#֪Z-Z3'? [ 483.843656][T12073] [U] ,H4XHK_؆SXD݌ ؐԋ^3M$NJ1ZLEMԎ]ƵFS [ 484.169144][T12073] [U] N|Gӄ\D܆!~QE;QEA''̎_(J$FLZTĽC$NM^Ŋ5)L Ѳ\ [ 484.186153][T12073] [U] 3'+ M4֏0R [ 484.190677][T12073] [U] )&ROV`ܩK&{$S[(B<F'R=WZPTI [ 486.669218][T12114] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 487.629991][ T30] audit: type=1800 audit(4294990842.827:6): pid=12137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=34823 res=0 errno=0 [ 488.223332][T12148] binder: 12147:12148 ioctl c018620c 0 returned -22 [ 489.506656][T12157] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input14 [ 490.270125][T12161] Invalid ELF header magic: != ELF [ 491.891199][T12198] __vm_enough_memory: pid: 12198, comm: syz.0.1445, bytes: 4398046511104 not enough memory for the allocation [ 491.988579][T12185] zswap: compressor not available [ 493.224012][T12211] vivid-007: ================= START STATUS ================= [ 493.231922][T12211] vivid-007: Generate PTS: true [ 493.237277][T12211] vivid-007: Generate SCR: true [ 493.243277][T12211] tpg source WxH: 320x240 (Y'CbCr) [ 493.248400][T12211] tpg field: 1 [ 493.251753][T12211] tpg crop: (0,0)/320x240 [ 493.261069][T12211] tpg compose: (0,0)/320x240 [ 493.283981][T12211] tpg colorspace: 8 [ 493.287800][T12211] tpg transfer function: 0/0 [ 493.312411][T12211] tpg Y'CbCr encoding: 0/0 [ 493.316864][T12211] tpg quantization: 0/0 [ 493.320997][T12211] tpg RGB range: 0/2 [ 493.348925][T12211] vivid-007: ================== END STATUS ================== [ 495.997383][T12252] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 496.223383][T12254] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 496.591619][T12261] Invalid ELF header magic: != ELF [ 497.468470][T12260] rtc_cmos 00:00: Alarms can be up to one day in the future [ 498.374446][ T5892] rtc_cmos 00:00: Alarms can be up to one day in the future [ 498.510683][ T5892] rtc_cmos 00:00: Alarms can be up to one day in the future [ 498.576592][ T5892] rtc_cmos 00:00: Alarms can be up to one day in the future [ 498.655508][ T5892] rtc_cmos 00:00: Alarms can be up to one day in the future [ 498.712960][ T5892] rtc rtc0: __rtc_set_alarm: err=-22 [ 499.620132][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.632168][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.727823][T12297] Invalid ELF header magic: != ELF [ 502.587487][ T30] audit: type=1800 audit(4294990857.766:7): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=35238 res=0 errno=0 [ 505.034887][T12362] Invalid ELF header magic: != ELF [ 507.301943][T12398] mkiss: ax0: crc mode is auto. [ 507.834426][T12415] random: crng reseeded on system resumption [ 508.126994][T12414] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 510.084580][T12448] __vm_enough_memory: pid: 12448, comm: syz.0.1498, bytes: 4398046511104 not enough memory for the allocation [ 510.811438][T12457] FAULT_INJECTION: forcing a failure. [ 510.811438][T12457] name failslab, interval 1, probability 0, space 0, times 0 [ 510.833822][T12457] CPU: 1 UID: 0 PID: 12457 Comm: syz.0.1502 Not tainted syzkaller #0 PREEMPT(full) [ 510.833858][T12457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.833872][T12457] Call Trace: [ 510.833881][T12457] [ 510.833892][T12457] dump_stack_lvl+0x16c/0x1f0 [ 510.833941][T12457] should_fail_ex+0x512/0x640 [ 510.833978][T12457] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 510.834015][T12457] should_failslab+0xc2/0x120 [ 510.834049][T12457] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 510.834080][T12457] ? ip_vs_est_add_kthread+0x5c2/0x850 [ 510.834117][T12457] ? krealloc_node_align_noprof+0x2c5/0x470 [ 510.834147][T12457] krealloc_node_align_noprof+0x2c5/0x470 [ 510.834182][T12457] ip_vs_est_add_kthread+0x5c2/0x850 [ 510.834219][T12457] ip_vs_start_estimator+0x250/0x430 [ 510.834253][T12457] ip_vs_control_net_init+0x158c/0x1d20 [ 510.834296][T12457] __ip_vs_init+0x217/0x520 [ 510.834320][T12457] ? __pfx___ip_vs_init+0x10/0x10 [ 510.834342][T12457] ops_init+0x1e2/0x5f0 [ 510.834373][T12457] setup_net+0x100/0x390 [ 510.834401][T12457] ? __pfx_setup_net+0x10/0x10 [ 510.834429][T12457] ? debug_mutex_init+0x37/0x70 [ 510.834462][T12457] copy_net_ns+0x2f8/0x690 [ 510.834495][T12457] create_new_namespaces+0x3ea/0xa90 [ 510.834533][T12457] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 510.834566][T12457] ksys_unshare+0x45b/0xa40 [ 510.834599][T12457] ? __pfx_ksys_unshare+0x10/0x10 [ 510.834633][T12457] ? xfd_validate_state+0x61/0x180 [ 510.834679][T12457] __x64_sys_unshare+0x31/0x40 [ 510.834711][T12457] do_syscall_64+0xcd/0xfa0 [ 510.834744][T12457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.834770][T12457] RIP: 0033:0x7fe8a558f6c9 [ 510.834791][T12457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.834816][T12457] RSP: 002b:00007fe8a635f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 510.834841][T12457] RAX: ffffffffffffffda RBX: 00007fe8a57e5fa0 RCX: 00007fe8a558f6c9 [ 510.834858][T12457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 510.834874][T12457] RBP: 00007fe8a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 510.834889][T12457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.834911][T12457] R13: 00007fe8a57e6038 R14: 00007fe8a57e5fa0 R15: 00007ffda40d02a8 [ 510.834950][T12457] [ 512.311334][T12467] Invalid ELF header magic: != ELF [ 513.148432][T12465] rtc_cmos 00:00: Alarms can be up to one day in the future [ 513.363423][ T5892] rtc_cmos 00:00: Alarms can be up to one day in the future [ 513.437510][ T5892] rtc_cmos 00:00: Alarms can be up to one day in the future [ 513.455615][ T5892] rtc_cmos 00:00: Alarms can be up to one day in the future [ 513.569411][ T5892] rtc_cmos 00:00: Alarms can be up to one day in the future [ 513.726268][ T5892] rtc rtc0: __rtc_set_alarm: err=-22 [ 516.424160][T12522] FAULT_INJECTION: forcing a failure. [ 516.424160][T12522] name failslab, interval 1, probability 0, space 0, times 0 [ 516.437059][T12522] CPU: 0 UID: 0 PID: 12522 Comm: syz.3.1517 Not tainted syzkaller #0 PREEMPT(full) [ 516.437092][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.437107][T12522] Call Trace: [ 516.437116][T12522] [ 516.437126][T12522] dump_stack_lvl+0x16c/0x1f0 [ 516.437163][T12522] should_fail_ex+0x512/0x640 [ 516.437200][T12522] ? __kmalloc_cache_noprof+0x5f/0x780 [ 516.437228][T12522] should_failslab+0xc2/0x120 [ 516.437261][T12522] __kmalloc_cache_noprof+0x72/0x780 [ 516.437295][T12522] ? ip_vs_est_add_kthread+0x1d5/0x850 [ 516.437332][T12522] ? ip_vs_est_add_kthread+0x1d5/0x850 [ 516.437362][T12522] ip_vs_est_add_kthread+0x1d5/0x850 [ 516.437395][T12522] ip_vs_start_estimator+0x250/0x430 [ 516.437424][T12522] ip_vs_control_net_init+0x158c/0x1d20 [ 516.437459][T12522] __ip_vs_init+0x217/0x520 [ 516.437481][T12522] ? __pfx___ip_vs_init+0x10/0x10 [ 516.437500][T12522] ops_init+0x1e2/0x5f0 [ 516.437530][T12522] setup_net+0x100/0x390 [ 516.437555][T12522] ? __pfx_setup_net+0x10/0x10 [ 516.437579][T12522] ? debug_mutex_init+0x37/0x70 [ 516.437607][T12522] copy_net_ns+0x2f8/0x690 [ 516.437649][T12522] create_new_namespaces+0x3ea/0xa90 [ 516.437688][T12522] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 516.437723][T12522] ksys_unshare+0x45b/0xa40 [ 516.437758][T12522] ? __pfx_ksys_unshare+0x10/0x10 [ 516.437790][T12522] ? xfd_validate_state+0x61/0x180 [ 516.437835][T12522] __x64_sys_unshare+0x31/0x40 [ 516.437865][T12522] do_syscall_64+0xcd/0xfa0 [ 516.437897][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.437921][T12522] RIP: 0033:0x7f64dd18f6c9 [ 516.437940][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.437963][T12522] RSP: 002b:00007f64ddf63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 516.437986][T12522] RAX: ffffffffffffffda RBX: 00007f64dd3e5fa0 RCX: 00007f64dd18f6c9 [ 516.438003][T12522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 516.438017][T12522] RBP: 00007f64dd211f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.438033][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.438048][T12522] R13: 00007f64dd3e6038 R14: 00007f64dd3e5fa0 R15: 00007ffef7013d88 [ 516.438085][T12522] [ 518.686010][T12543] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 519.909808][T12563] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 524.011304][T12590] futex_wake_op: syz.3.1531 tries to shift op by -2048; fix this program [ 524.030360][T12590] 0x000000000001-0x000000020000 : "" [ 524.060446][T12590] ftl_cs: FTL header corrupt! [ 525.076564][T12593] FAULT_INJECTION: forcing a failure. [ 525.076564][T12593] name failslab, interval 1, probability 0, space 0, times 0 [ 525.142264][T12593] CPU: 0 UID: 0 PID: 12593 Comm: syz.4.1528 Not tainted syzkaller #0 PREEMPT(full) [ 525.142300][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 525.142317][T12593] Call Trace: [ 525.142326][T12593] [ 525.142336][T12593] dump_stack_lvl+0x16c/0x1f0 [ 525.142373][T12593] should_fail_ex+0x512/0x640 [ 525.142404][T12593] ? __kmalloc_cache_noprof+0x5f/0x780 [ 525.142429][T12593] should_failslab+0xc2/0x120 [ 525.142455][T12593] __kmalloc_cache_noprof+0x72/0x780 [ 525.142474][T12593] ? net_generic+0xea/0x2a0 [ 525.142501][T12593] ? gact_init_net+0x56/0x270 [ 525.142532][T12593] ? gact_init_net+0x56/0x270 [ 525.142558][T12593] ? __pfx_gact_init_net+0x10/0x10 [ 525.142584][T12593] gact_init_net+0x56/0x270 [ 525.142615][T12593] ops_init+0x1e2/0x5f0 [ 525.142639][T12593] setup_net+0x100/0x390 [ 525.142660][T12593] ? __pfx_setup_net+0x10/0x10 [ 525.142682][T12593] ? debug_mutex_init+0x37/0x70 [ 525.142706][T12593] copy_net_ns+0x2f8/0x690 [ 525.142731][T12593] create_new_namespaces+0x3ea/0xa90 [ 525.142760][T12593] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 525.142785][T12593] ksys_unshare+0x45b/0xa40 [ 525.142811][T12593] ? __pfx_ksys_unshare+0x10/0x10 [ 525.142837][T12593] ? xfd_validate_state+0x61/0x180 [ 525.142879][T12593] __x64_sys_unshare+0x31/0x40 [ 525.142906][T12593] do_syscall_64+0xcd/0xfa0 [ 525.142933][T12593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.142953][T12593] RIP: 0033:0x7f986fb8f6c9 [ 525.142969][T12593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.142987][T12593] RSP: 002b:00007f9870957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 525.143008][T12593] RAX: ffffffffffffffda RBX: 00007f986fde5fa0 RCX: 00007f986fb8f6c9 [ 525.143021][T12593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 525.143032][T12593] RBP: 00007f986fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 525.143043][T12593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.143054][T12593] R13: 00007f986fde6038 R14: 00007f986fde5fa0 R15: 00007fffd4aca6e8 [ 525.143082][T12593] [ 529.715517][T12665] mkiss: ax0: crc mode is auto. [ 532.466065][T12691] [U]  [ 532.468872][T12691] [U] [ 532.471553][T12691] [U] [ 532.474226][T12691] [U] [ 532.492548][T12691] [U] [ 532.495302][T12691] [U] [ 532.498005][T12691] [U] [ 532.500681][T12691] [U] [ 532.520411][T12691] [U] [ 532.523125][T12691] [U] [ 532.525802][T12691] [U] [ 532.528475][T12691] [U] [ 532.550712][T12691] [U] [ 532.553426][T12691] [U] [ 532.556102][T12691] [U] [ 532.558775][T12691] [U] [ 532.602923][T12691] [U] [ 532.605639][T12691] [U] [ 532.608323][T12691] [U] [ 532.611001][T12691] [U] [ 532.639779][T12691] [U] [ 532.642529][T12691] [U] [ 532.645251][T12691] [U] [ 532.647971][T12691] [U] [ 532.682340][T12691] [U] [ 533.003722][T12699] FAULT_INJECTION: forcing a failure. [ 533.003722][T12699] name failslab, interval 1, probability 0, space 0, times 0 [ 533.085168][T12699] CPU: 1 UID: 0 PID: 12699 Comm: syz.0.1558 Not tainted syzkaller #0 PREEMPT(full) [ 533.085204][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 533.085220][T12699] Call Trace: [ 533.085229][T12699] [ 533.085240][T12699] dump_stack_lvl+0x16c/0x1f0 [ 533.085280][T12699] should_fail_ex+0x512/0x640 [ 533.085320][T12699] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 533.085348][T12699] should_failslab+0xc2/0x120 [ 533.085385][T12699] kmem_cache_alloc_noprof+0x75/0x6e0 [ 533.085411][T12699] ? __anon_vma_prepare+0xae/0x5e0 [ 533.085457][T12699] ? __anon_vma_prepare+0xae/0x5e0 [ 533.085493][T12699] __anon_vma_prepare+0xae/0x5e0 [ 533.085529][T12699] ? __filemap_get_folio+0x32b/0xc30 [ 533.085561][T12699] __vmf_anon_prepare+0x11c/0x240 [ 533.085597][T12699] hugetlb_fault+0x1ba4/0x2f40 [ 533.085631][T12699] ? __pfx_hugetlb_fault+0x10/0x10 [ 533.085673][T12699] ? find_vma+0xbf/0x140 [ 533.085702][T12699] ? __pfx_find_vma+0x10/0x10 [ 533.085736][T12699] handle_mm_fault+0xbfa/0xd10 [ 533.085776][T12699] ? __pkru_allows_pkey+0x21/0xb0 [ 533.085817][T12699] do_user_addr_fault+0x7a6/0x1370 [ 533.085846][T12699] ? rcu_is_watching+0x12/0xc0 [ 533.085878][T12699] exc_page_fault+0x64/0xc0 [ 533.085908][T12699] asm_exc_page_fault+0x26/0x30 [ 533.085932][T12699] RIP: 0010:__put_user_4+0xd/0x20 [ 533.085962][T12699] Code: 66 89 01 31 c9 0f 01 ca e9 c0 80 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 80 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 533.085987][T12699] RSP: 0018:ffffc90003cefe18 EFLAGS: 00050246 [ 533.086009][T12699] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000000000000 [ 533.086024][T12699] RDX: 0000000000080000 RSI: ffffffff8924d4a4 RDI: ffffffff8bf078c0 [ 533.086042][T12699] RBP: 1ffff9200079dfc7 R08: edbc7214ceca522d R09: 0000000000000000 [ 533.086058][T12699] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 533.086073][T12699] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 533.086101][T12699] ? __sys_socketpair+0x114/0x5a0 [ 533.086174][T12699] __sys_socketpair+0x120/0x5a0 [ 533.086213][T12699] ? __pfx___sys_socketpair+0x10/0x10 [ 533.086253][T12699] ? xfd_validate_state+0x61/0x180 [ 533.086286][T12699] ? __pfx_ksys_write+0x10/0x10 [ 533.086322][T12699] __x64_sys_socketpair+0x96/0x100 [ 533.086355][T12699] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.086385][T12699] do_syscall_64+0xcd/0xfa0 [ 533.086419][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.086444][T12699] RIP: 0033:0x7fe8a558f6c9 [ 533.086465][T12699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.086488][T12699] RSP: 002b:00007fe8a635f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 533.086512][T12699] RAX: ffffffffffffffda RBX: 00007fe8a57e5fa0 RCX: 00007fe8a558f6c9 [ 533.086529][T12699] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 533.086543][T12699] RBP: 00007fe8a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 533.086558][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.086573][T12699] R13: 00007fe8a57e6038 R14: 00007fe8a57e5fa0 R15: 00007ffda40d02a8 [ 533.086612][T12699] [ 536.910751][T12762] FAULT_INJECTION: forcing a failure. [ 536.910751][T12762] name failslab, interval 1, probability 0, space 0, times 0 [ 536.924053][T12762] CPU: 1 UID: 0 PID: 12762 Comm: syz.4.1572 Not tainted syzkaller #0 PREEMPT(full) [ 536.924089][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.924105][T12762] Call Trace: [ 536.924113][T12762] [ 536.924124][T12762] dump_stack_lvl+0x16c/0x1f0 [ 536.924161][T12762] should_fail_ex+0x512/0x640 [ 536.924198][T12762] ? __kmalloc_cache_noprof+0x5f/0x780 [ 536.924228][T12762] should_failslab+0xc2/0x120 [ 536.924262][T12762] __kmalloc_cache_noprof+0x72/0x780 [ 536.924289][T12762] ? ip_vs_protocol_net_init+0xbe/0x300 [ 536.924328][T12762] ? ip_vs_protocol_net_init+0xbe/0x300 [ 536.924359][T12762] ip_vs_protocol_net_init+0xbe/0x300 [ 536.924399][T12762] __ip_vs_init+0x239/0x520 [ 536.924425][T12762] ? __pfx___ip_vs_init+0x10/0x10 [ 536.924446][T12762] ops_init+0x1e2/0x5f0 [ 536.924512][T12762] setup_net+0x100/0x390 [ 536.924542][T12762] ? __pfx_setup_net+0x10/0x10 [ 536.924572][T12762] ? debug_mutex_init+0x37/0x70 [ 536.924605][T12762] copy_net_ns+0x2f8/0x690 [ 536.924640][T12762] create_new_namespaces+0x3ea/0xa90 [ 536.924678][T12762] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 536.924711][T12762] ksys_unshare+0x45b/0xa40 [ 536.924746][T12762] ? __pfx_ksys_unshare+0x10/0x10 [ 536.924780][T12762] ? xfd_validate_state+0x61/0x180 [ 536.924837][T12762] __x64_sys_unshare+0x31/0x40 [ 536.924870][T12762] do_syscall_64+0xcd/0xfa0 [ 536.924905][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.924930][T12762] RIP: 0033:0x7f986fb8f6c9 [ 536.924952][T12762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.924976][T12762] RSP: 002b:00007f9870957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 536.925001][T12762] RAX: ffffffffffffffda RBX: 00007f986fde5fa0 RCX: 00007f986fb8f6c9 [ 536.925018][T12762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 536.925034][T12762] RBP: 00007f986fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.925050][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.925065][T12762] R13: 00007f986fde6038 R14: 00007f986fde5fa0 R15: 00007fffd4aca6e8 [ 536.925103][T12762] [ 538.602904][T12795] random: crng reseeded on system resumption [ 538.649685][T10972] Bluetooth: hci4: unexpected event 0x16 length: 440 > 6 [ 539.604286][T10966] unregister_netdevice: waiting for erspan0 to become free. Usage count = 9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 539.827806][T10966] unregister_netdevice: waiting for gretap0 to become free. Usage count = 3