last executing test programs: 7.591263076s ago: executing program 3 (id=5152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xf400000000000000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x3, 0x3c) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r4, 0x5609, r3) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) 6.694750767s ago: executing program 0 (id=5156): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) close_range$auto(0x2, 0x8, 0x4) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x1001, 0x0, 0xf, 0xffffffffffffffff, 0x1400000, 0x5}, 0x6f4) socket(0xa, 0x5, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x20341, 0x0) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r8) pread64$auto(r1, &(0x7f0000000540)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5\x05\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x1) 5.650575698s ago: executing program 2 (id=5159): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@ethernet={0x306, @multicast}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x100) r2 = eventfd2$auto(0x6af3, 0x800) r3 = socket(0x1e, 0x1, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r3, @new_map_fd=r0, 0x3, @old_prog_fd=r1}, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x2901, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x20000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r5, 0x0, 0x20) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) r8 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0) landlock_restrict_self$auto(r8, 0x7) 5.64610761s ago: executing program 0 (id=5167): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) setsockopt$auto_SO_NOFCS(r0, 0xf1c, 0x2b, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r1 = socketpair$auto(0x3, 0x5, 0x7, 0x0) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0xa, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, 0x0, 0x4000000) write$auto(0xca, 0x0, 0x2b) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) r5 = getuid() socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0xe983, 0x0, 0xeb1, 0x401, 0x8000) socket(0x0, 0x800, 0xffffffff) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) socketpair$auto(0x1, 0x2, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000200)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x1f, 0x0) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000003300)=ANY=[@ANYBLOB="9b1a00", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="d477c188ae22c7f6ad328ce187fff32af7f7d407fb81df1e2d943187f13d083241dbf87ea0d8ff0747e746685ea1f159cf5fba1523df710faaebece1807b02f4977ad1007b162a2e0161152e18049399d234bd09f78e79327259d87988c337ddcbc4c2e4963b76eb3bd7e9299e638d7581a8f5930c53e665081607ab67262024dfa31da0a4274c269486e6a3f81365a932f54302018061e025ca0b2f9a485058ca37a4dbdd2c6aeb9fcc987de7084dca81c6fb9e97e274c469b7c3678b0e6e56a92e55dcd89857395f2a985d92f564aa80c61e54e5b47b8d76a60400048008007e00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1a9c}, 0x1, 0x0, 0x0, 0x45}, 0x4000) mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.449606299s ago: executing program 3 (id=5160): r0 = bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_4={0x9f2, 0x4, 0x80000001, 0xffffffffffffffff}, 0x400006f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0xffffffffffffffff, 0xffffffffffff0006, 0x18) mmap$auto(0x4000000000000000, 0x400008, 0x7fffffffffffffff, 0x9b72, r0, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x400c4d05, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000120, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5c, 0xadae, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) 5.009856107s ago: executing program 1 (id=5161): r0 = bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_4={0x9f2, 0x4, 0x80000001, 0xffffffffffffffff}, 0x400006f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0xffffffffffffffff, 0xffffffffffff0006, 0x18) mmap$auto(0x4000000000000000, 0x400008, 0x7fffffffffffffff, 0x9b72, r0, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x400c4d05, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) 4.557478166s ago: executing program 0 (id=5162): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@ethernet={0x306, @multicast}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x100) r2 = eventfd2$auto(0x6af3, 0x800) r3 = socket(0x1e, 0x1, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r3, @new_map_fd=r0, 0x3, @old_prog_fd=r1}, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x2901, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xdffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x20000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r5, 0x0, 0x20) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) r8 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0) landlock_restrict_self$auto(r8, 0x7) 4.518590031s ago: executing program 1 (id=5163): r0 = bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_4={0x9f2, 0x4, 0x80000001, 0xffffffffffffffff}, 0x400006f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0xffffffffffffffff, 0xffffffffffff0006, 0x18) mmap$auto(0x4000000000000000, 0x400008, 0x7fffffffffffffff, 0x9b72, r0, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x400c4d05, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) r5 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) recvmsg$auto(r5, 0x0, 0xe) write$auto(r4, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5c, 0xadae, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) 4.469432072s ago: executing program 3 (id=5164): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) utime$auto(0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1, 0x10401}, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x21, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x18, r4, 0x1, 0x70bd2b, 0x25dfdbfa, {}, [@HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x18}}, 0x4044820) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0xffffffffffffffff) mmap$auto(0x0, 0x420008, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_CREATE_VM(r5, 0xc048aeca, 0x0) getsockopt$auto_SO_PEERSEC(r2, 0x2, 0x1f, &(0x7f00000000c0)='/dev/loop-control\x00', &(0x7f0000000080)=0x6) 3.953472972s ago: executing program 2 (id=5165): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000300dfd700000a00050000000000000000000a0001004cbd1bb0650300000a0001000000000000000000080004001000000008000300050000000a0001"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.490587618s ago: executing program 3 (id=5166): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xf400000000000000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x3, 0x3c) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r4, 0x5609, r3) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) 3.488011017s ago: executing program 2 (id=5168): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) close_range$auto(0x2, 0x8, 0x4) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948a, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x1, 0xffffffffffffffff, 0x200) close_range$auto(0x2, 0x8, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) epoll_pwait2$auto(r4, &(0x7f0000000380)={0xb, 0x1000}, 0xd, &(0x7f00000003c0)={0x3, 0x2}, &(0x7f0000000400)={0x2000000}, 0x8) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid$auto(r5, 0x0) 2.36598351s ago: executing program 2 (id=5172): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) setsockopt$auto_SO_NOFCS(r0, 0xf1c, 0x2b, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r1 = socketpair$auto(0x3, 0x5, 0x7, 0x0) write$auto(0xca, 0x0, 0x2d9) close_range$auto(0x2, 0xa, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r3, 0x0, 0x4000000) write$auto(0xca, 0x0, 0x2b) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) r5 = getuid() socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0xe983, 0x0, 0xeb1, 0x401, 0x8000) socket(0x0, 0x800, 0xffffffff) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x88) socketpair$auto(0x1, 0x2, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000200)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x1f, 0x0) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000003300)=ANY=[@ANYBLOB="9b1a00", @ANYRES16=r4, @ANYBLOB="3eb526bd7000fbdbdf2530000000e8178480d8153980d7bd0c9c52051ed5bfb4fcba3488bdd2cce91d0cc97bf0e769bde6e2631f019100b436b231b9bd9d37637dd1ff6bc311fc49b0cf5d664cdd258e52b1a20b7da9c20bd32698565040cf3c3c7814118d9171066dd5489a45a11b3850314085c4cc75885df25914143cb546b549e27fb586e7c6ae3a0af67f80d69c840ab3cfebdd8e4325641620a0e8955867e1a17ddaca3590af1ca326e78d1159e7bb85703725f1baedb89ea4facb47c1a9f70abc9c53c7d269de9a4f4aeb2fa7971dfeaa06973582509a402e83a9fad5562c2ce9a7ec46e9da4a3e74065ab46ffd307b0d7e7cd70fa629e9551d939c8924f6ac3d5f2e698907a7fd1d55a3edc59c3e6707c9f76a644ceb510ce04214f3dbe66eb9ac2be98118298f0e62a0268df3b80951fa62e598fe74eac03a7bf7e99c49da678c9348f404d02eccfeda21a04e045caa19d0e3793ce2a6d9b48469d704951fa890c455118beec85e2bdb4e23e4f6b724f3b41d0ccaa795417638f8ddbb28bdf7dfda95a3a02f956778deac79519cd91b0b179b2b3903e8fa71de513ff5c28b93fe363ed4a7c334565434be60a20f2062f4460ae73675702ccd37a44e6f3e1c0aae948b1521575f1a65866aefce746bc5f462db384cd6934d042cd2a25b29d6c937ea897f108dadfea105b8caf67c6f47f862af051cc13cb1bb8ae0efa5d446e76ef5186afeb71c3bce589466d22ba570f1e80bf8989f51026bb4d99d2e150c6b3465a3905ab43186a0af6e6bfe858485f22ba045abe520df8d6028add9c15c5b795e49455a70f62cc2f187b76bff51ebdc34348fa5289afe89d88f2ea812366d9cb0638f2ec58d304ed7267208f9434c79688262adddf4e633eb8f4add197f74f7bf9e3b1894228528e0f5debf1e47bf89df8fcb56d2e85305b0422a4a50089c2c07614bfb966a34d8966ca3f198ce093dc04211fa401984962370fbd8b721adf3654d78bd7f10b6cee970f480afc3e1d6231de8087a6c74571bcc1f39b0f4214bdc29897256cd12cddac956ac0ff9c1a6c62eaee327ad4de7375e20ac98fa4a122df25e22bfe8243fcce3c8aa2a457e0d60b005229d5c160616193d5edde741c4b9bb75d633ef9bed9a5b70bb2dbf13036ae8f32a9ae2b4309b85c4982a6f2b7139147b90ea59263942d025de54cfdad8506eef6f43c614bf5f7aabae183cb01946be3c36a346f0a2779d2c6c0f19ff650614b07b80d26d7262ca025877b3ef7863ea9b8c3dec568759788303e76b7ad6dd589caf03555d011fca91289986d352d1d4939c849fe72d2750902ea7fa216d10819d2ea2701eb9416e713811405fce93d2cd00c29e4560e54655f190db15621171171f52c186eec7c62b1d3ea6a3bc6cc6bd189ee2e45203941dbc12cb0038e707638c5b513ef11e1abe1938a3f7f8e59ad672187d0181a5970030ccfaee901d1529d493ecb55be31b5206c734f3139976d15c82b8c29c7006e7b2c9a2dca3a0f1074c6980f3c8bf3cb79a91f6f6fd8ce9f980d79883bae9667b410772688e213f303ccd9b14b01a3275fa253c3ed0f0ba6ca78b7e956c53c54dd753892d99253e57db87a5b1a57b14cb41797b4e6508976e64ac06721de1cec887dcfca61b18a99580ac1c79b7af0751445f42e4d82022b20da62f174e88d736917a856208876079bc378328bfbd55f8a2641497d1d09faf63bbd2bef5e0b4776b7c5dbac750f680aaf4a9d131ef30246f7104d3d5004c8aac42d8ea67e4a6854a64fd30834b381c9001f1e795942ddf6ec4aff807993303f9f69029d45dc10b56e741e1b73af695168b9c1424f2a070287480dcb7517aee54dd95d3a8e549ba9fcbd89c02caa90b1630827e4cc8f70fdd688f3f98a6eaedb8cd29635d197c4ece9116e9c793539dbc2c3bcd202e257fbb180912133b518495807f61f024f1dbe194e2dd9f3fa4499e81f5dd0904a184ab8690242abf944ee6549b148aca23934c00eccff9018c7fb84efcc2084660370ea2a567f2f7086edf30933980dad256bc88d5e6a614391b34471092f5d3baee76c934854fcd2a9fa9c6c3971d0227259f5ce9c208bb647a9ee6801a3035284421bfe20dee1f6bd51db2ec82bd964b302ba972330bdbebdbb02d9dfc8e019fd90a3176ce1fd038500157ded5a02fe81f0ee5255c8769e51c08893761a56a15496b43cffa1c97470f758907f758b4d1fcfa6b4891009367dcffc6f5b526696c378165f7f5daa96d6578ddee9a1c2ead4a1272864b5263a623d5c030b6beaf576d6ce84f2f226b8a4b825702ade59d2fa724521839df0e2ae2a2abaa54f4dcda4dbefce7e9a5d433b7e314525260c1c63df5b16e42edcc9b38eed75be77e0bbeec5289b88661eff88a0ca2477d9aa1ca1b20741de76e645f968f1e60d0061cef8371effdcf0be252090befb3b71d746827423c160cd9d8fbc4c5e71d9f1fc2b4cca0b4282b3b840aca833554e5c636a84525f0886aeaebc587eec6486c2eda1003e033fbb7924ebfc4fb3241d762d19a0c2358a8dd64dec7c19c00b7eda7389b1c77290a291fba3a767a510e606b09b2eb018602ec2a90b80304663cdd4c51a1f7ff53d31c28eb415ad7d9f0b1b0f97e9c0e1642df4052f410025baebd08c32aac4ed82ccb2ef4a617634c428579ec183982b2549ac4c3d08b59fc7ebf377f52393e9779199699e9b34edf4ae865939f1a57d1a4a685f106e9d8ba5406183bb901fa598c7e69727f1ab48db4b6476f67abbf21853329873123c0e9f5170f8051f4f8f7d01753cc9d0faf2cf18a01cdbdbcbff914add36040cb6d27e11860fca86a425501cd8c84212cc703c2187ff75d2b276db6e8cb577a61f259a5b78100c8460131cd8bb619a1cccc6af40b0b65d57e5cac8fb79767b6d57344dc079bf9ee9d3449f705c626e78326169e9d6ec268d045bc4aca0c2ca95ae2506fc14cedc6483732b2ac5f5e9c93eedf17697a48dfa297d85d0492f60a119327db488f869aae852d2528049cda5df61e6437f5696994c298436f9a28113d5e73c1cb8d7045cd0b7eacbfe356c363f236fc45b4eca5bca57618df108c739220b35727d600b0cdc8a2e3162cd0446a90fb8f1536cefa685868c575cd9994eba5ff0f0cb8f55405db6745d84c63663f4da28ba0c164752dcf45b5cdff3d717143670f06dd532e7f82fdeec51b164e0d67a616b974487bb3282fa88a8612e51124510f655ffd92fef6428e2a05b2c6dfc089e9c4185107e43585a2bc898625831ed676e4bfc3834ae684eecccda4408fd03709c3253a18b15201e9ac2ef2626b8df099d4f253889f788ae13b527616941f693e3609b91ca1593a13e5a717f1eb53b3dbea4925ea9cbb853b3f6c9a3fae44d4ff3d192a93be062d0a8907cc5e765dad0b0c709085e0bdccc26329d59e8b8f6dd32cd53f5c46540d6bd7509b5ac8ca2e13489656e3a40f799240ca51e64b6c11640821559cbfe40a81236921e146c63eb997d9617b49418433f36974b1f837e78589f9d02ed7b830010a9b1cefc03ccc62c320149db3c4485e4c66e8f0c0518d4f759a7d6e865026a373b7220027c8bcac2ef52e49760db5ad12fc062d9a9fd90757d5c7a9521f7b75b7b237d586c8b5a1f9446946ffdb069df6892696d5b0106177b27c7f4343fa31c22c0e6faeb7b15069c0cda45b0653cf75304f1f2a6f500819cb4f7eb00d2f73ad92ccd809eec420bf36d1ff1ed226c6caff49e3bd5548bfe7501fa347494a3cd3a6236fb2f320db9a3708c8c707fe32d1b0ee4f848dfc4b79ced960ca9c0897ce90d22f81dbfe2e201a9c87937906bacb35ec2f48a8e2988d9075f87b7d6d7d2537d46379724759f48ebc0421ec093385c0437ed7652a76ae0142f53de285f4ce1c7ab10f6cf8b312f93e9e395564f0e5615e80e2f6381116afc6d0432add276fd9da7b1173a8b526754b4a3628343dd044fb8c902357d1e3fdef97a1ded32b7bab91f1d299aee6c04c2acd85b96554c21b197723285456635db996154491d49c33fa97d93cbf163ecbe0fc024031c04dd87b1cd754cd6bc5b23b81cc8aafdd55881661447b7eb568175e4d75f39b59796058ac9893d78838113db635a374e34f5024cd0293cb2c7eaad3698acc38160a77e6b23f413ccef9e37247eafce401d450b91bc9f1aa60c4135adc7426d03dcc5778d9557e43e945a7674fea1a3438d9373de1ce8dec62e226d783fc83cce2b27b12b400b9aceabf7683a74d7285731f217b0a4ff7933b521eb9dc847036e63e8723b30aa4e81da3bb06417d402588515685f247c13b4080bb274b110a80a86c936ae0bcbc1ef2c0bf25e722d8b1d77c120a2f41a958a7f1254252cedcefaa447839d82612c794ef5c8a28b91e37df917a0185b5bb70efde0ad9b3ef8a177777fa6d5b5ea3de3a8424bae8678c35b1bb39664c29e4a57870d8a2e49301fc60f3fbb18e8237c1da5bb5b0001e83d58a30c0b06df069530cb035df744e34d0cda2573c913c406a6c75e6f97d13f543dffb2a17ad84fdfa4319e69469f13b66a4ce78abc06e9966dbb0e33dc92c7c409c8c4b078608c92bd6b61db155140bd96b09d9550f079557ebabc6e42ccbbb6b1c0256c35bfe3d8c520d2e2876c8290cbc7be8e9830881c94429a1a247d9d0ea05bf9e52c0bca17379f0d33ce23fac604024d9eafef9018d702db004d02da998101d650ee84e3ae255c62439982f7ccd3f938034f638752f18ea70fca77d458af0ec3ab51b5e1ae0e30fa16cf6216c31311d2fb457eaa5a0d24e5fedd0eb01a1c73d483e97388612b715ff352e911cb3abfc06708e8167b5e973fc69c53b65e5f9508a9c9061adb26c6c4d884aaf044321b5fe4569d3442b6e25275908c8a5972d86396d812310dd9e670dc0363d2a330ebff82d57de454bd3bf35bee9375c0018e05045366f4ceeeff11228b947e2e557fadac0fa2161428c2f62b6442d9d44eba8c00ff984ebe4a81078c978f8f83a15f06ce08f9315480339bf6d1372ac2ae10d3503b374b3e18d57847e176da90db75c3877a83eff8ab920572227fc74e43a7861", @ANYRES32=r5, @ANYBLOB="d477c188ae22c7f6ad328ce187fff32af7f7d407fb81df1e2d943187f13d083241dbf87ea0d8ff0747e746685ea1f159cf5fba1523df710faaebece1807b02f4977ad1007b162a2e0161152e18049399d234bd09f78e79327259d87988c337ddcbc4c2e4963b76eb3bd7e9299e638d7581a8f5930c53e665081607ab67262024dfa31da0a4274c269486e6a3f81365a932f54302018061e025ca0b2f9a485058ca37a4dbdd2c6aeb9fcc987de7084dca81c6fb9e97e274c469b7c3678b0e6e56a92e55dcd89857395f2a985d92f564aa80c61e54e5b47b8d76a60400048008007e00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1a9c}, 0x1, 0x0, 0x0, 0x45}, 0x4000) mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.476357449s ago: executing program 3 (id=5173): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) close_range$auto(0x2, 0x8, 0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/path\x00', 0x442800, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf250200000008000300000000001b"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b0500000000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) write$auto(0x3, 0x0, 0x5c8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.281882491s ago: executing program 2 (id=5175): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@ethernet={0x306, @multicast}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x100) r2 = eventfd2$auto(0x6af3, 0x800) r3 = socket(0x1e, 0x1, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r3, @new_map_fd=r0, 0x3, @old_prog_fd=r1}, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x2901, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xdffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x20000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r5, 0x0, 0x20) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0) 1.088999427s ago: executing program 1 (id=5176): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) socket(0xa, 0x1, 0x100) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000180)=""/54, 0x36) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x5, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x7, 0x6, 0x3fd6, 0x0, 0x1ffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_net_shaper(0x0, r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r6, 0x9, 0x70bd27, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r8}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x30000, 0x0, 0x44000}, 0xc050) r9 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r9, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 438.292256ms ago: executing program 0 (id=5177): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) connect$auto(0x3, &(0x7f00000000c0)=@ethernet={0x306, @multicast}, 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x100) r2 = eventfd2$auto(0x6af3, 0x800) r3 = socket(0x1e, 0x1, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)=@link_update={r3, @new_map_fd=r0, 0x3, @old_prog_fd=r1}, 0x1) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pipe2$auto(&(0x7f0000000040)=r2, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x2901, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xdffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x20000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/query\x00', 0x82a02, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r5, 0x0, 0x20) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) writev$auto(r6, 0x0, 0x3) r8 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x4, 0x8000000000001, 0xffff}, 0x9, 0x0) landlock_restrict_self$auto(r8, 0x7) 0s ago: executing program 2 (id=5178): socket(0x10, 0x4, 0xffffffc0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, 0xffffffffffffffff, 0x8003) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4104}, 0x10) kernel console output (not intermixed with test programs): in process `syz.3.4706'. [ 1522.206602][T31006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4707'. [ 1523.444868][T31028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4710'. [ 1523.557877][T31029] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1523.751877][T31034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4712'. [ 1523.807022][T31027] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1524.880570][T23210] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1524.896860][T23210] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1525.225004][T31055] ubi0: attaching mtd0 [ 1525.258974][T31055] ubi0: scanning is finished [ 1525.312062][T31055] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1525.596775][T31060] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1525.655344][T31061] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1525.692265][T31055] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1526.075071][T31075] syz.1.4719 (31075): attempted to duplicate a private mapping with mremap. This is not supported. [ 1526.400985][T31051] netlink: 314 bytes leftover after parsing attributes in process `syz.0.4714'. [ 1526.521307][T23210] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1526.528196][T23210] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1526.911044][T31088] FAULT_INJECTION: forcing a failure. [ 1526.911044][T31088] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1526.940215][T31088] CPU: 1 UID: 0 PID: 31088 Comm: syz.3.4722 Tainted: G U syzkaller #0 PREEMPT(full) [ 1526.940260][T31088] Tainted: [U]=USER [ 1526.940270][T31088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1526.940284][T31088] Call Trace: [ 1526.940293][T31088] [ 1526.940341][T31088] dump_stack_lvl+0x16c/0x1f0 [ 1526.940386][T31088] should_fail_ex+0x512/0x640 [ 1526.940431][T31088] get_futex_key+0x1d0/0x1560 [ 1526.940469][T31088] ? __pfx_get_futex_key+0x10/0x10 [ 1526.940502][T31088] ? __pfx___schedule+0x10/0x10 [ 1526.940534][T31088] ? do_raw_spin_unlock+0x172/0x230 [ 1526.940578][T31088] futex_wait_setup+0x9d/0x550 [ 1526.940626][T31088] __futex_wait+0x194/0x2f0 [ 1526.940664][T31088] ? __pfx___futex_wait+0x10/0x10 [ 1526.940707][T31088] ? __pfx_futex_wake_mark+0x10/0x10 [ 1526.940750][T31088] ? futex_private_hash_put+0x176/0x300 [ 1526.940786][T31088] ? futex_private_hash_put+0x18a/0x300 [ 1526.940820][T31088] futex_wait+0xe8/0x380 [ 1526.940857][T31088] ? __pfx_futex_wait+0x10/0x10 [ 1526.940907][T31088] ? lock_acquire+0x179/0x350 [ 1526.940943][T31088] do_futex+0x229/0x350 [ 1526.940974][T31088] ? __pfx_do_futex+0x10/0x10 [ 1526.941009][T31088] ? fd_install+0x244/0x750 [ 1526.941040][T31088] __x64_sys_futex+0x1e0/0x4c0 [ 1526.941074][T31088] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1526.941107][T31088] ? __pfx___x64_sys_futex+0x10/0x10 [ 1526.941153][T31088] do_syscall_64+0xcd/0x4c0 [ 1526.941194][T31088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.941221][T31088] RIP: 0033:0x7f509518eba9 [ 1526.941248][T31088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1526.941274][T31088] RSP: 002b:00007f50933b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1526.941310][T31088] RAX: ffffffffffffffda RBX: 00007f50953d6188 RCX: 00007f509518eba9 [ 1526.941331][T31088] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f50953d6188 [ 1526.941350][T31088] RBP: 00007f50953d6180 R08: 0000000000000000 R09: 0000000000000000 [ 1526.941369][T31088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1526.941387][T31088] R13: 00007f50953d6218 R14: 00007ffe3dae0ca0 R15: 00007ffe3dae0d88 [ 1526.941424][T31088] [ 1527.721776][T31079] FAULT_INJECTION: forcing a failure. [ 1527.721776][T31079] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1527.736300][T31079] CPU: 0 UID: 0 PID: 31079 Comm: syz.2.4721 Tainted: G U syzkaller #0 PREEMPT(full) [ 1527.736346][T31079] Tainted: [U]=USER [ 1527.736356][T31079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1527.736373][T31079] Call Trace: [ 1527.736383][T31079] [ 1527.736393][T31079] dump_stack_lvl+0x16c/0x1f0 [ 1527.736440][T31079] should_fail_ex+0x512/0x640 [ 1527.736494][T31079] get_futex_key+0x1d0/0x1560 [ 1527.736533][T31079] ? __pfx_get_futex_key+0x10/0x10 [ 1527.736568][T31079] ? __pfx___schedule+0x10/0x10 [ 1527.736601][T31079] ? find_held_lock+0x2b/0x80 [ 1527.736634][T31079] futex_wait_setup+0x9d/0x550 [ 1527.736683][T31079] __futex_wait+0x194/0x2f0 [ 1527.736723][T31079] ? __pfx___futex_wait+0x10/0x10 [ 1527.736767][T31079] ? __pfx_futex_wake_mark+0x10/0x10 [ 1527.736812][T31079] ? futex_private_hash_put+0x176/0x300 [ 1527.736849][T31079] ? futex_private_hash_put+0x18a/0x300 [ 1527.736883][T31079] futex_wait+0xe8/0x380 [ 1527.736921][T31079] ? __pfx_futex_wait+0x10/0x10 [ 1527.736973][T31079] ? lock_acquire+0x179/0x350 [ 1527.737010][T31079] do_futex+0x229/0x350 [ 1527.737044][T31079] ? __pfx_do_futex+0x10/0x10 [ 1527.737080][T31079] ? fd_install+0x244/0x750 [ 1527.737114][T31079] __x64_sys_futex+0x1e0/0x4c0 [ 1527.737150][T31079] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1527.737182][T31079] ? __pfx___x64_sys_futex+0x10/0x10 [ 1527.737219][T31079] ? __x64_sys_landlock_create_ruleset+0x11/0xb0 [ 1527.737256][T31079] do_syscall_64+0xcd/0x4c0 [ 1527.737300][T31079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.737327][T31079] RIP: 0033:0x7f6c1bd8eba9 [ 1527.737348][T31079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1527.737377][T31079] RSP: 002b:00007f6c1cb9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1527.737403][T31079] RAX: ffffffffffffffda RBX: 00007f6c1bfd5fa8 RCX: 00007f6c1bd8eba9 [ 1527.737422][T31079] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c1bfd5fa8 [ 1527.737441][T31079] RBP: 00007f6c1bfd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1527.737459][T31079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1527.737483][T31079] R13: 00007f6c1bfd6038 R14: 00007ffdba1e43c0 R15: 00007ffdba1e44a8 [ 1527.737520][T31079] [ 1528.485120][T31106] random: crng reseeded on system resumption [ 1530.634382][T31138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4731'. [ 1531.083628][T31142] random: crng reseeded on system resumption [ 1531.392546][T31144] FAULT_INJECTION: forcing a failure. [ 1531.392546][T31144] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1531.407190][T31144] CPU: 1 UID: 0 PID: 31144 Comm: syz.2.4732 Tainted: G U syzkaller #0 PREEMPT(full) [ 1531.407221][T31144] Tainted: [U]=USER [ 1531.407227][T31144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1531.407236][T31144] Call Trace: [ 1531.407242][T31144] [ 1531.407249][T31144] dump_stack_lvl+0x16c/0x1f0 [ 1531.407279][T31144] should_fail_ex+0x512/0x640 [ 1531.407305][T31144] ? unwind_get_return_address+0x59/0xa0 [ 1531.407325][T31144] get_futex_key+0x1d0/0x1560 [ 1531.407348][T31144] ? __pfx_get_futex_key+0x10/0x10 [ 1531.407368][T31144] ? stack_trace_save+0x8e/0xc0 [ 1531.407384][T31144] ? __pfx_stack_trace_save+0x10/0x10 [ 1531.407404][T31144] futex_wait_setup+0x9d/0x550 [ 1531.407433][T31144] __futex_wait+0x194/0x2f0 [ 1531.407457][T31144] ? __pfx___futex_wait+0x10/0x10 [ 1531.407481][T31144] ? __pfx_futex_wake_mark+0x10/0x10 [ 1531.407506][T31144] ? futex_private_hash_put+0x176/0x300 [ 1531.407526][T31144] ? futex_private_hash_put+0x18a/0x300 [ 1531.407546][T31144] futex_wait+0xe8/0x380 [ 1531.407568][T31144] ? __pfx_futex_wait+0x10/0x10 [ 1531.407594][T31144] ? kmem_cache_free+0x2d1/0x4d0 [ 1531.407610][T31144] ? fd_install+0x225/0x750 [ 1531.407626][T31144] ? putname+0x154/0x1a0 [ 1531.407649][T31144] do_futex+0x229/0x350 [ 1531.407669][T31144] ? __pfx_do_futex+0x10/0x10 [ 1531.407693][T31144] __x64_sys_futex+0x1e0/0x4c0 [ 1531.407713][T31144] ? __x64_sys_openat+0x174/0x210 [ 1531.407727][T31144] ? __pfx___x64_sys_futex+0x10/0x10 [ 1531.407753][T31144] do_syscall_64+0xcd/0x4c0 [ 1531.407791][T31144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.407810][T31144] RIP: 0033:0x7f6c1bd8eba9 [ 1531.407824][T31144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.407873][T31144] RSP: 002b:00007f6c1cb9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1531.407890][T31144] RAX: ffffffffffffffda RBX: 00007f6c1bfd5fa8 RCX: 00007f6c1bd8eba9 [ 1531.407901][T31144] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c1bfd5fa8 [ 1531.407910][T31144] RBP: 00007f6c1bfd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1531.407919][T31144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1531.407928][T31144] R13: 00007f6c1bfd6038 R14: 00007ffdba1e43c0 R15: 00007ffdba1e44a8 [ 1531.407948][T31144] [ 1531.662337][T31144] netlink: 'syz.2.4732': attribute type 1 has an invalid length. [ 1531.745001][T31151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4734'. [ 1533.084299][T31168] FAULT_INJECTION: forcing a failure. [ 1533.084299][T31168] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.163631][T31168] CPU: 0 UID: 0 PID: 31168 Comm: syz.0.4738 Tainted: G U syzkaller #0 PREEMPT(full) [ 1533.163678][T31168] Tainted: [U]=USER [ 1533.163689][T31168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1533.163706][T31168] Call Trace: [ 1533.163716][T31168] [ 1533.163728][T31168] dump_stack_lvl+0x16c/0x1f0 [ 1533.163774][T31168] should_fail_ex+0x512/0x640 [ 1533.163817][T31168] ? fs_reclaim_acquire+0xae/0x150 [ 1533.163862][T31168] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1533.163902][T31168] should_failslab+0xc2/0x120 [ 1533.163937][T31168] __kmalloc_noprof+0xd2/0x510 [ 1533.163977][T31168] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1533.164019][T31168] ? tomoyo_profile+0x47/0x60 [ 1533.164045][T31168] tomoyo_path_number_perm+0x245/0x580 [ 1533.164077][T31168] ? tomoyo_path_number_perm+0x237/0x580 [ 1533.164113][T31168] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1533.164186][T31168] ? find_held_lock+0x2b/0x80 [ 1533.164212][T31168] ? hook_file_ioctl_common+0x145/0x410 [ 1533.164256][T31168] ? __fget_files+0x20e/0x3c0 [ 1533.164291][T31168] security_file_ioctl+0x9b/0x240 [ 1533.164324][T31168] __x64_sys_ioctl+0xb7/0x210 [ 1533.164364][T31168] do_syscall_64+0xcd/0x4c0 [ 1533.164402][T31168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.164427][T31168] RIP: 0033:0x7f452f98eba9 [ 1533.164448][T31168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.164473][T31168] RSP: 002b:00007f453089d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.164497][T31168] RAX: ffffffffffffffda RBX: 00007f452fbd5fa0 RCX: 00007f452f98eba9 [ 1533.164515][T31168] RDX: 0000200000000300 RSI: 0000000040046f41 RDI: 0000000000000007 [ 1533.164533][T31168] RBP: 00007f452fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1533.164550][T31168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.164566][T31168] R13: 00007f452fbd6038 R14: 00007f452fbd5fa0 R15: 00007ffd2e6982b8 [ 1533.164741][T31168] [ 1533.164755][T31168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1533.420614][T31171] netlink: 323 bytes leftover after parsing attributes in process `syz.0.4738'. [ 1533.461250][T31162] netlink: 314 bytes leftover after parsing attributes in process `syz.1.4736'. [ 1533.526620][T31171] netlink: 'syz.0.4738': attribute type 1 has an invalid length. [ 1533.996300][T31177] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1534.016063][T31177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1534.025881][T31177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1534.041784][T31177] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1534.051386][T31177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1534.389251][T31177] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1534.407991][T31177] Bluetooth: Frame is too long (len 38, expected len 4) [ 1534.563810][T31176] chnl_net:caif_netlink_parms(): no params data found [ 1534.654162][T31188] ubi0: attaching mtd0 [ 1534.713416][T31188] ubi0: scanning is finished [ 1534.729192][T31188] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1534.900974][T31188] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1534.976273][T31176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.994285][T31176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.012497][T31176] bridge_slave_0: entered allmulticast mode [ 1535.037831][T31176] bridge_slave_0: entered promiscuous mode [ 1535.286909][T28717] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.320088][T31176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.327545][T31176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.342523][T31176] bridge_slave_1: entered allmulticast mode [ 1535.353809][T31176] bridge_slave_1: entered promiscuous mode [ 1535.368909][T31210] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1535.408668][T31207] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1535.439557][T31176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.544849][T28717] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.834701][T31176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.064251][T28717] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.132131][T31177] Bluetooth: hci2: command tx timeout [ 1536.221408][T31176] team0: Port device team_slave_0 added [ 1536.291216][T28717] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.389555][T31176] team0: Port device team_slave_1 added [ 1536.419606][T31209] FAULT_INJECTION: forcing a failure. [ 1536.419606][T31209] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1536.445763][T31209] CPU: 0 UID: 0 PID: 31209 Comm: syz.0.4745 Tainted: G U syzkaller #0 PREEMPT(full) [ 1536.445807][T31209] Tainted: [U]=USER [ 1536.445817][T31209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1536.445832][T31209] Call Trace: [ 1536.445842][T31209] [ 1536.445852][T31209] dump_stack_lvl+0x16c/0x1f0 [ 1536.445895][T31209] should_fail_ex+0x512/0x640 [ 1536.445944][T31209] get_futex_key+0x1d0/0x1560 [ 1536.445984][T31209] ? __pfx_get_futex_key+0x10/0x10 [ 1536.446019][T31209] ? __pfx___schedule+0x10/0x10 [ 1536.446052][T31209] ? do_raw_spin_unlock+0x172/0x230 [ 1536.446099][T31209] futex_wait_setup+0x9d/0x550 [ 1536.446148][T31209] __futex_wait+0x194/0x2f0 [ 1536.446189][T31209] ? __pfx___futex_wait+0x10/0x10 [ 1536.446234][T31209] ? __pfx_futex_wake_mark+0x10/0x10 [ 1536.446277][T31209] ? futex_private_hash_put+0x176/0x300 [ 1536.446321][T31209] ? futex_private_hash_put+0x18a/0x300 [ 1536.446359][T31209] futex_wait+0xe8/0x380 [ 1536.446398][T31209] ? __pfx_futex_wait+0x10/0x10 [ 1536.446445][T31209] ? lock_acquire+0x179/0x350 [ 1536.446483][T31209] do_futex+0x229/0x350 [ 1536.446516][T31209] ? __pfx_do_futex+0x10/0x10 [ 1536.446549][T31209] ? fd_install+0x244/0x750 [ 1536.446662][T31209] __x64_sys_futex+0x1e0/0x4c0 [ 1536.446700][T31209] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1536.446741][T31209] ? __pfx___x64_sys_futex+0x10/0x10 [ 1536.446776][T31209] ? xfd_validate_state+0x61/0x180 [ 1536.446829][T31209] do_syscall_64+0xcd/0x4c0 [ 1536.446871][T31209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.446897][T31209] RIP: 0033:0x7f452f98eba9 [ 1536.446920][T31209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1536.446947][T31209] RSP: 002b:00007f453089d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1536.446971][T31209] RAX: ffffffffffffffda RBX: 00007f452fbd5fa8 RCX: 00007f452f98eba9 [ 1536.446992][T31209] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f452fbd5fa8 [ 1536.447012][T31209] RBP: 00007f452fbd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.447034][T31209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.447054][T31209] R13: 00007f452fbd6038 R14: 00007ffd2e6981d0 R15: 00007ffd2e6982b8 [ 1536.447095][T31209] [ 1536.755514][T31176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.778039][T31176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.814880][T31176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.829360][T31176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.836559][T31176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.863658][T31176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.072362][T31176] hsr_slave_0: entered promiscuous mode [ 1537.085097][T31176] hsr_slave_1: entered promiscuous mode [ 1537.094946][T31176] debugfs: 'hsr0' already exists in 'hsr' [ 1537.107130][T31176] Cannot create hsr debugfs directory [ 1537.406388][T28717] bridge_slave_1: left allmulticast mode [ 1537.426944][T28717] bridge_slave_1: left promiscuous mode [ 1537.442234][T28717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.501212][T28717] bridge_slave_0: left allmulticast mode [ 1537.506997][T28717] bridge_slave_0: left promiscuous mode [ 1537.535866][T28717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.791652][T31240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1538.098357][T31240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4748'. [ 1538.215414][T31177] Bluetooth: hci2: command tx timeout [ 1539.455389][T28717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.525352][T28717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.551867][T28717] bond0 (unregistering): Released all slaves [ 1540.290100][T31177] Bluetooth: hci2: command tx timeout [ 1540.554376][T31177] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1540.567704][T31177] Bluetooth: Frame is too long (len 38, expected len 4) [ 1541.208979][T31281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4753'. [ 1542.018878][T31284] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1542.049298][T31284] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1542.370730][T31177] Bluetooth: hci2: command tx timeout [ 1542.621461][T31176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1542.714179][T31176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1542.846266][T31176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1542.910363][T31176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1543.114871][T31298] FAULT_INJECTION: forcing a failure. [ 1543.114871][T31298] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1543.128421][T31298] CPU: 1 UID: 0 PID: 31298 Comm: syz.1.4757 Tainted: G U syzkaller #0 PREEMPT(full) [ 1543.128463][T31298] Tainted: [U]=USER [ 1543.128472][T31298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1543.128488][T31298] Call Trace: [ 1543.128498][T31298] [ 1543.128508][T31298] dump_stack_lvl+0x16c/0x1f0 [ 1543.128555][T31298] should_fail_ex+0x512/0x640 [ 1543.128599][T31298] get_futex_key+0x1d0/0x1560 [ 1543.128638][T31298] ? __pfx_get_futex_key+0x10/0x10 [ 1543.128668][T31298] ? __lock_acquire+0xb97/0x1ce0 [ 1543.128706][T31298] ? find_held_lock+0x2b/0x80 [ 1543.128737][T31298] futex_wait_setup+0x9d/0x550 [ 1543.128788][T31298] __futex_wait+0x194/0x2f0 [ 1543.128827][T31298] ? __pfx___futex_wait+0x10/0x10 [ 1543.128891][T31298] ? __pfx_futex_wake_mark+0x10/0x10 [ 1543.128935][T31298] ? futex_private_hash_put+0x176/0x300 [ 1543.128974][T31298] ? futex_private_hash_put+0x18a/0x300 [ 1543.129009][T31298] futex_wait+0xe8/0x380 [ 1543.129047][T31298] ? __pfx_futex_wait+0x10/0x10 [ 1543.129099][T31298] ? rcu_is_watching+0x12/0xc0 [ 1543.129133][T31298] do_futex+0x229/0x350 [ 1543.129166][T31298] ? __pfx_do_futex+0x10/0x10 [ 1543.129202][T31298] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1543.129248][T31298] __x64_sys_futex+0x1e0/0x4c0 [ 1543.129283][T31298] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1543.129317][T31298] ? __pfx___x64_sys_futex+0x10/0x10 [ 1543.129365][T31298] do_syscall_64+0xcd/0x4c0 [ 1543.129410][T31298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.129437][T31298] RIP: 0033:0x7f0a7d38eba9 [ 1543.129460][T31298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1543.129487][T31298] RSP: 002b:00007f0a7e1320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1543.129514][T31298] RAX: ffffffffffffffda RBX: 00007f0a7d5d5fa8 RCX: 00007f0a7d38eba9 [ 1543.129534][T31298] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a7d5d5fa8 [ 1543.129552][T31298] RBP: 00007f0a7d5d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1543.129570][T31298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1543.129585][T31298] R13: 00007f0a7d5d6038 R14: 00007ffca3488540 R15: 00007ffca3488628 [ 1543.129619][T31298] [ 1543.501007][T28717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.530859][T31308] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1543.538801][T31314] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1543.539069][T28717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.648296][T28717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.716866][T31309] FAULT_INJECTION: forcing a failure. [ 1543.716866][T31309] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.729871][T31309] CPU: 1 UID: 0 PID: 31309 Comm: syz.2.4759 Tainted: G U syzkaller #0 PREEMPT(full) [ 1543.729913][T31309] Tainted: [U]=USER [ 1543.729921][T31309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1543.729936][T31309] Call Trace: [ 1543.729944][T31309] [ 1543.729954][T31309] dump_stack_lvl+0x16c/0x1f0 [ 1543.729983][T31309] should_fail_ex+0x512/0x640 [ 1543.730005][T31309] ? __kmalloc_noprof+0xbf/0x510 [ 1543.730025][T31309] ? lsm_blob_alloc+0x68/0x90 [ 1543.730038][T31309] should_failslab+0xc2/0x120 [ 1543.730058][T31309] __kmalloc_noprof+0xd2/0x510 [ 1543.730079][T31309] lsm_blob_alloc+0x68/0x90 [ 1543.730093][T31309] security_prepare_creds+0x30/0x270 [ 1543.730115][T31309] prepare_creds+0x56f/0x7d0 [ 1543.730138][T31309] __do_sys_landlock_restrict_self+0x13e/0x910 [ 1543.730156][T31309] ? rcu_is_watching+0x12/0xc0 [ 1543.730173][T31309] do_syscall_64+0xcd/0x4c0 [ 1543.730196][T31309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.730212][T31309] RIP: 0033:0x7f6c1bd8eba9 [ 1543.730225][T31309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1543.730240][T31309] RSP: 002b:00007f6c1cb9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1543.730254][T31309] RAX: ffffffffffffffda RBX: 00007f6c1bfd5fa0 RCX: 00007f6c1bd8eba9 [ 1543.730265][T31309] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 1543.730274][T31309] RBP: 00007f6c1be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1543.730284][T31309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1543.730293][T31309] R13: 00007f6c1bfd6038 R14: 00007f6c1bfd5fa0 R15: 00007ffdba1e44a8 [ 1543.730313][T31309] [ 1543.912470][T28717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.055089][T28717] veth0_macvtap: left promiscuous mode [ 1544.100052][T28717] veth1_vlan: left promiscuous mode [ 1544.106597][T28717] veth0_vlan: left promiscuous mode [ 1544.868173][T31322] FAULT_INJECTION: forcing a failure. [ 1544.868173][T31322] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1544.909993][T31322] CPU: 0 UID: 0 PID: 31322 Comm: syz.2.4761 Tainted: G U syzkaller #0 PREEMPT(full) [ 1544.910039][T31322] Tainted: [U]=USER [ 1544.910049][T31322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1544.910065][T31322] Call Trace: [ 1544.910075][T31322] [ 1544.910086][T31322] dump_stack_lvl+0x16c/0x1f0 [ 1544.910116][T31322] should_fail_ex+0x512/0x640 [ 1544.910141][T31322] get_futex_key+0x1d0/0x1560 [ 1544.910169][T31322] ? __pfx_get_futex_key+0x10/0x10 [ 1544.910185][T31322] ? kasan_save_stack+0x33/0x60 [ 1544.910204][T31322] ? __kasan_slab_alloc+0x89/0x90 [ 1544.910221][T31322] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1544.910239][T31322] ? security_file_alloc+0x34/0x2b0 [ 1544.910258][T31322] ? init_file+0x93/0x4c0 [ 1544.910277][T31322] ? alloc_empty_file+0x73/0x1e0 [ 1544.910295][T31322] ? alloc_file_pseudo+0x13a/0x230 [ 1544.910315][T31322] ? __anon_inode_getfile+0xe8/0x280 [ 1544.910340][T31322] ? anon_inode_getfd+0x52/0xb0 [ 1544.910356][T31322] ? __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 1544.910373][T31322] ? do_syscall_64+0xcd/0x4c0 [ 1544.910399][T31322] futex_wait_setup+0x9d/0x550 [ 1544.910430][T31322] __futex_wait+0x194/0x2f0 [ 1544.910452][T31322] ? __pfx___futex_wait+0x10/0x10 [ 1544.910476][T31322] ? __pfx_futex_wake_mark+0x10/0x10 [ 1544.910499][T31322] ? futex_private_hash_put+0x176/0x300 [ 1544.910518][T31322] ? futex_private_hash_put+0x18a/0x300 [ 1544.910536][T31322] futex_wait+0xe8/0x380 [ 1544.910556][T31322] ? __pfx_futex_wait+0x10/0x10 [ 1544.910583][T31322] ? lock_acquire+0x179/0x350 [ 1544.910604][T31322] do_futex+0x229/0x350 [ 1544.910622][T31322] ? __pfx_do_futex+0x10/0x10 [ 1544.910641][T31322] ? fd_install+0x244/0x750 [ 1544.910658][T31322] __x64_sys_futex+0x1e0/0x4c0 [ 1544.910677][T31322] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1544.910693][T31322] ? __pfx___x64_sys_futex+0x10/0x10 [ 1544.910718][T31322] do_syscall_64+0xcd/0x4c0 [ 1544.910741][T31322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.910755][T31322] RIP: 0033:0x7f6c1bd8eba9 [ 1544.910768][T31322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.910782][T31322] RSP: 002b:00007f6c1cb9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1544.910797][T31322] RAX: ffffffffffffffda RBX: 00007f6c1bfd5fa8 RCX: 00007f6c1bd8eba9 [ 1544.910808][T31322] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6c1bfd5fa8 [ 1544.910818][T31322] RBP: 00007f6c1bfd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1544.910827][T31322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.910836][T31322] R13: 00007f6c1bfd6038 R14: 00007ffdba1e43c0 R15: 00007ffdba1e44a8 [ 1544.910855][T31322] [ 1545.343032][T28717] team0 (unregistering): Port device team_slave_1 removed [ 1545.401176][T28717] team0 (unregistering): Port device team_slave_0 removed [ 1545.664793][T31332] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1545.675016][T31332] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1546.556811][T31333] Process accounting paused [ 1546.976532][T31357] ubi0: attaching mtd0 [ 1547.025883][T31357] ubi0: scanning is finished [ 1547.101677][T31357] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1547.300408][T31357] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1547.466653][T31176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.575371][T31176] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.627129][ T9128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.635335][ T9128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1547.775203][T19420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.782623][T19420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.081700][T31176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1548.134559][T31176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1548.345918][T31378] netlink: 314 bytes leftover after parsing attributes in process `syz.0.4766'. [ 1548.843484][T31176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1549.224739][T31383] FAULT_INJECTION: forcing a failure. [ 1549.224739][T31383] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1549.298516][T31383] CPU: 0 UID: 0 PID: 31383 Comm: syz.1.4767 Tainted: G U syzkaller #0 PREEMPT(full) [ 1549.298543][T31383] Tainted: [U]=USER [ 1549.298549][T31383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1549.298559][T31383] Call Trace: [ 1549.298565][T31383] [ 1549.298572][T31383] dump_stack_lvl+0x16c/0x1f0 [ 1549.298600][T31383] should_fail_ex+0x512/0x640 [ 1549.298627][T31383] get_futex_key+0x1d0/0x1560 [ 1549.298649][T31383] ? __pfx_get_futex_key+0x10/0x10 [ 1549.298664][T31383] ? kasan_save_stack+0x33/0x60 [ 1549.298682][T31383] ? __kasan_slab_alloc+0x89/0x90 [ 1549.298700][T31383] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1549.298719][T31383] ? security_file_alloc+0x34/0x2b0 [ 1549.298738][T31383] ? init_file+0x93/0x4c0 [ 1549.298756][T31383] ? alloc_empty_file+0x73/0x1e0 [ 1549.298775][T31383] ? alloc_file_pseudo+0x13a/0x230 [ 1549.298796][T31383] ? __anon_inode_getfile+0xe8/0x280 [ 1549.298812][T31383] ? anon_inode_getfd+0x52/0xb0 [ 1549.298828][T31383] ? __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 1549.298844][T31383] ? do_syscall_64+0xcd/0x4c0 [ 1549.298868][T31383] futex_wait_setup+0x9d/0x550 [ 1549.298895][T31383] __futex_wait+0x194/0x2f0 [ 1549.298916][T31383] ? __pfx___futex_wait+0x10/0x10 [ 1549.298940][T31383] ? __pfx_futex_wake_mark+0x10/0x10 [ 1549.298963][T31383] ? futex_private_hash_put+0x176/0x300 [ 1549.298983][T31383] ? futex_private_hash_put+0x18a/0x300 [ 1549.299001][T31383] futex_wait+0xe8/0x380 [ 1549.299022][T31383] ? __pfx_futex_wait+0x10/0x10 [ 1549.299050][T31383] ? lock_acquire+0x179/0x350 [ 1549.299070][T31383] do_futex+0x229/0x350 [ 1549.299089][T31383] ? __pfx_do_futex+0x10/0x10 [ 1549.299107][T31383] ? fd_install+0x244/0x750 [ 1549.299125][T31383] __x64_sys_futex+0x1e0/0x4c0 [ 1549.299154][T31383] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1549.299174][T31383] ? __pfx___x64_sys_futex+0x10/0x10 [ 1549.299200][T31383] do_syscall_64+0xcd/0x4c0 [ 1549.299224][T31383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.299239][T31383] RIP: 0033:0x7f0a7d38eba9 [ 1549.299253][T31383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1549.299268][T31383] RSP: 002b:00007f0a7e1320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1549.299284][T31383] RAX: ffffffffffffffda RBX: 00007f0a7d5d5fa8 RCX: 00007f0a7d38eba9 [ 1549.299295][T31383] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a7d5d5fa8 [ 1549.299305][T31383] RBP: 00007f0a7d5d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1549.299314][T31383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.299322][T31383] R13: 00007f0a7d5d6038 R14: 00007ffca3488540 R15: 00007ffca3488628 [ 1549.299341][T31383] [ 1549.914200][T31176] veth0_vlan: entered promiscuous mode [ 1550.071463][T31176] veth1_vlan: entered promiscuous mode [ 1550.235082][T31176] veth0_macvtap: entered promiscuous mode [ 1550.413139][T31176] veth1_macvtap: entered promiscuous mode [ 1550.463485][T31176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1550.484620][T31176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1550.585610][T19420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.657717][T19420] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.703559][T19420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.750926][T19420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.914079][T31426] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1550.952322][T31426] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1551.071242][ T9128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.114892][ T9128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.242510][ T9128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.285083][ T9128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.404756][T31429] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1551.470369][T31429] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1552.252706][T31449] ubi0: attaching mtd0 [ 1552.258113][T31449] ubi0: scanning is finished [ 1552.281362][T31449] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1552.459646][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.467428][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.634416][T31449] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1553.047344][T31459] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1553.073132][T31459] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1553.138171][T31460] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1554.236300][T31482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4781'. [ 1554.362374][T31485] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1554.428795][T31479] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1554.442116][T31177] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1554.449550][T31177] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1555.379659][T31503] random: crng reseeded on system resumption [ 1555.692100][T31510] ubi0: attaching mtd0 [ 1555.712630][T31510] ubi0: scanning is finished [ 1555.800764][T31510] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1555.859483][T31508] FAULT_INJECTION: forcing a failure. [ 1555.859483][T31508] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.887339][T31508] CPU: 0 UID: 0 PID: 31508 Comm: syz.0.4786 Tainted: G U syzkaller #0 PREEMPT(full) [ 1555.887385][T31508] Tainted: [U]=USER [ 1555.887395][T31508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1555.887410][T31508] Call Trace: [ 1555.887418][T31508] [ 1555.887427][T31508] dump_stack_lvl+0x16c/0x1f0 [ 1555.887471][T31508] should_fail_ex+0x512/0x640 [ 1555.887512][T31508] ? __kmalloc_noprof+0xbf/0x510 [ 1555.887545][T31508] ? create_ruleset+0x21/0x140 [ 1555.887574][T31508] should_failslab+0xc2/0x120 [ 1555.887607][T31508] __kmalloc_noprof+0xd2/0x510 [ 1555.887645][T31508] create_ruleset+0x21/0x140 [ 1555.887675][T31508] landlock_merge_ruleset+0xbb/0x870 [ 1555.887708][T31508] ? prepare_creds+0x583/0x7d0 [ 1555.887749][T31508] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 1555.887785][T31508] do_syscall_64+0xcd/0x4c0 [ 1555.887827][T31508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.887946][T31508] RIP: 0033:0x7f452f98eba9 [ 1555.887975][T31508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.888002][T31508] RSP: 002b:00007f453085b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1555.888028][T31508] RAX: ffffffffffffffda RBX: 00007f452fbd6180 RCX: 00007f452f98eba9 [ 1555.888042][T31508] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 1555.888056][T31508] RBP: 00007f452fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1555.888072][T31508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1555.888086][T31508] R13: 00007f452fbd6218 R14: 00007f452fbd6180 R15: 00007ffd2e6982b8 [ 1555.888120][T31508] [ 1556.104541][T31510] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1557.582699][T31540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4792'. [ 1557.789518][T31542] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1557.845209][T31543] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1558.669020][T31556] vivid-003: ================= START STATUS ================= [ 1558.690379][T31556] vivid-003: Radio HW Seek Mode: Bounded [ 1558.696200][T31556] vivid-003: Radio Programmable HW Seek: false [ 1558.740069][T31556] vivid-003: RDS Rx I/O Mode: Block I/O [ 1558.765957][T31556] vivid-003: Generate RBDS Instead of RDS: false [ 1558.772870][T31556] vivid-003: RDS Reception: true [ 1558.778001][T31556] vivid-003: RDS Program Type: 0 inactive [ 1558.784707][T31556] vivid-003: RDS PS Name: inactive [ 1558.810343][T31556] vivid-003: RDS Radio Text: inactive [ 1558.832400][T31551] netlink: 314 bytes leftover after parsing attributes in process `syz.3.4795'. [ 1558.848970][T31556] vivid-003: RDS Traffic Announcement: false inactive [ 1558.860247][T31556] vivid-003: RDS Traffic Program: false inactive [ 1558.934101][T31556] vivid-003: RDS Music: false inactive [ 1558.940157][T31556] vivid-003: ================== END STATUS ================== [ 1559.331187][T23210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1559.342852][T23210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1559.354318][T23210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1559.370562][T23210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1559.390112][T23210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1559.476955][T31573] random: crng reseeded on system resumption [ 1560.401617][T31568] chnl_net:caif_netlink_parms(): no params data found [ 1560.510865][T31585] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1560.528397][T31568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.538309][T31585] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1560.547674][T31568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.562429][T31568] bridge_slave_0: entered allmulticast mode [ 1560.601601][T31568] bridge_slave_0: entered promiscuous mode [ 1560.613248][T31568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.635212][T31568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.642638][T31568] bridge_slave_1: entered allmulticast mode [ 1560.649932][T31568] bridge_slave_1: entered promiscuous mode [ 1560.813600][T31568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.886164][T31568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.037276][T31568] team0: Port device team_slave_0 added [ 1561.082298][T31568] team0: Port device team_slave_1 added [ 1561.491718][T31177] Bluetooth: hci1: command tx timeout [ 1561.518843][T31568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.540015][T31568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.567749][T31568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.719091][T31568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.731365][T31568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.769907][T31568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.961954][T31568] hsr_slave_0: entered promiscuous mode [ 1561.979541][T31568] hsr_slave_1: entered promiscuous mode [ 1561.994683][T31610] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1562.000901][T31568] debugfs: 'hsr0' already exists in 'hsr' [ 1562.007478][T31610] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1562.008267][T31568] Cannot create hsr debugfs directory [ 1562.679109][T31568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.842386][T31568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.990920][T31627] random: crng reseeded on system resumption [ 1563.108086][T31568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.274011][T31568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.569945][T31177] Bluetooth: hci1: command tx timeout [ 1563.716315][T31568] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1563.775369][T31568] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1563.882870][T31568] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1563.897268][T31568] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1564.397951][T31568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.479368][T31568] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.509080][ T9128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.516336][ T9128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.572584][ T9128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.579781][ T9128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.720401][T31651] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1564.750120][T31651] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1564.910140][T31662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4812'. [ 1565.078838][T31649] FAULT_INJECTION: forcing a failure. [ 1565.078838][T31649] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1565.093848][T31649] CPU: 0 UID: 0 PID: 31649 Comm: syz.0.4810 Tainted: G U syzkaller #0 PREEMPT(full) [ 1565.093891][T31649] Tainted: [U]=USER [ 1565.093901][T31649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1565.093918][T31649] Call Trace: [ 1565.093927][T31649] [ 1565.093939][T31649] dump_stack_lvl+0x16c/0x1f0 [ 1565.093987][T31649] should_fail_ex+0x512/0x640 [ 1565.094035][T31649] get_futex_key+0x1d0/0x1560 [ 1565.094075][T31649] ? __pfx_get_futex_key+0x10/0x10 [ 1565.094110][T31649] ? __pfx___schedule+0x10/0x10 [ 1565.094144][T31649] ? find_held_lock+0x2b/0x80 [ 1565.094178][T31649] futex_wait_setup+0x9d/0x550 [ 1565.094262][T31649] __futex_wait+0x194/0x2f0 [ 1565.094305][T31649] ? __pfx___futex_wait+0x10/0x10 [ 1565.094348][T31649] ? __pfx_futex_wake_mark+0x10/0x10 [ 1565.094391][T31649] ? futex_private_hash_put+0x176/0x300 [ 1565.094427][T31649] ? futex_private_hash_put+0x18a/0x300 [ 1565.094460][T31649] futex_wait+0xe8/0x380 [ 1565.094495][T31649] ? __pfx_futex_wait+0x10/0x10 [ 1565.094544][T31649] ? lock_acquire+0x179/0x350 [ 1565.094580][T31649] do_futex+0x229/0x350 [ 1565.094613][T31649] ? __pfx_do_futex+0x10/0x10 [ 1565.094647][T31649] ? fd_install+0x244/0x750 [ 1565.094678][T31649] __x64_sys_futex+0x1e0/0x4c0 [ 1565.094713][T31649] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1565.094747][T31649] ? __pfx___x64_sys_futex+0x10/0x10 [ 1565.094795][T31649] do_syscall_64+0xcd/0x4c0 [ 1565.094836][T31649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.094863][T31649] RIP: 0033:0x7f452f98eba9 [ 1565.094885][T31649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.094912][T31649] RSP: 002b:00007f453089d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1565.094940][T31649] RAX: ffffffffffffffda RBX: 00007f452fbd5fa8 RCX: 00007f452f98eba9 [ 1565.094960][T31649] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f452fbd5fa8 [ 1565.094977][T31649] RBP: 00007f452fbd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1565.094991][T31649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1565.095005][T31649] R13: 00007f452fbd6038 R14: 00007ffd2e6981d0 R15: 00007ffd2e6982b8 [ 1565.095035][T31649] [ 1565.650147][T31669] random: crng reseeded on system resumption [ 1565.657154][T31177] Bluetooth: hci1: command tx timeout [ 1566.015276][T31568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.213991][T31568] veth0_vlan: entered promiscuous mode [ 1566.260902][T31568] veth1_vlan: entered promiscuous mode [ 1566.400056][T31568] veth0_macvtap: entered promiscuous mode [ 1566.410431][T31568] veth1_macvtap: entered promiscuous mode [ 1566.486461][T31568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1566.606707][T31568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.644608][T28719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.680542][T28719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.788920][T28719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.809979][T28719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.023325][T28719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.060569][T28719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.172419][T28718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.202756][T28718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.494079][T31702] random: crng reseeded on system resumption [ 1567.659471][T31177] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1567.721459][T31177] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1567.731470][T31177] Bluetooth: hci1: command tx timeout [ 1567.781930][T31688] netlink: 314 bytes leftover after parsing attributes in process `syz.2.4817'. [ 1568.279550][T31716] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1569.699779][T31738] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1569.733188][T31738] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1570.078426][T31748] ubi0: attaching mtd0 [ 1570.093793][T31748] ubi0: scanning is finished [ 1570.106345][T31748] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1570.645278][T31748] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1570.762687][T31763] random: crng reseeded on system resumption [ 1570.802805][T31177] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1570.832026][T31177] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1571.980417][T31780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1572.278883][T31795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4838'. [ 1573.525725][T31808] FAULT_INJECTION: forcing a failure. [ 1573.525725][T31808] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1573.538769][T31808] CPU: 1 UID: 0 PID: 31808 Comm: syz.3.4842 Tainted: G U syzkaller #0 PREEMPT(full) [ 1573.538807][T31808] Tainted: [U]=USER [ 1573.538817][T31808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1573.538834][T31808] Call Trace: [ 1573.538845][T31808] [ 1573.538855][T31808] dump_stack_lvl+0x16c/0x1f0 [ 1573.538901][T31808] should_fail_ex+0x512/0x640 [ 1573.538946][T31808] get_futex_key+0x1d0/0x1560 [ 1573.538984][T31808] ? __pfx_get_futex_key+0x10/0x10 [ 1573.539013][T31808] ? kasan_save_stack+0x33/0x60 [ 1573.539043][T31808] ? __kasan_slab_alloc+0x89/0x90 [ 1573.539071][T31808] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1573.539102][T31808] ? security_file_alloc+0x34/0x2b0 [ 1573.539135][T31808] ? init_file+0x93/0x4c0 [ 1573.539168][T31808] ? alloc_empty_file+0x73/0x1e0 [ 1573.539202][T31808] ? alloc_file_pseudo+0x13a/0x230 [ 1573.539236][T31808] ? __anon_inode_getfile+0xe8/0x280 [ 1573.539264][T31808] ? anon_inode_getfd+0x52/0xb0 [ 1573.539289][T31808] ? __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 1573.539315][T31808] ? do_syscall_64+0xcd/0x4c0 [ 1573.539354][T31808] futex_wait_setup+0x9d/0x550 [ 1573.539398][T31808] __futex_wait+0x194/0x2f0 [ 1573.539436][T31808] ? __pfx___futex_wait+0x10/0x10 [ 1573.539475][T31808] ? __pfx_futex_wake_mark+0x10/0x10 [ 1573.539515][T31808] ? futex_private_hash_put+0x176/0x300 [ 1573.539546][T31808] ? futex_private_hash_put+0x18a/0x300 [ 1573.539608][T31808] futex_wait+0xe8/0x380 [ 1573.539655][T31808] ? __pfx_futex_wait+0x10/0x10 [ 1573.539701][T31808] ? lock_acquire+0x179/0x350 [ 1573.539734][T31808] do_futex+0x229/0x350 [ 1573.539762][T31808] ? __pfx_do_futex+0x10/0x10 [ 1573.539795][T31808] ? fd_install+0x244/0x750 [ 1573.539826][T31808] __x64_sys_futex+0x1e0/0x4c0 [ 1573.539859][T31808] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1573.539888][T31808] ? __pfx___x64_sys_futex+0x10/0x10 [ 1573.539929][T31808] do_syscall_64+0xcd/0x4c0 [ 1573.539968][T31808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.539997][T31808] RIP: 0033:0x7f69c778eba9 [ 1573.540016][T31808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.540040][T31808] RSP: 002b:00007f69c86de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1573.540066][T31808] RAX: ffffffffffffffda RBX: 00007f69c79d5fa8 RCX: 00007f69c778eba9 [ 1573.540084][T31808] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69c79d5fa8 [ 1573.540101][T31808] RBP: 00007f69c79d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1573.540117][T31808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.540131][T31808] R13: 00007f69c79d6038 R14: 00007ffd229be170 R15: 00007ffd229be258 [ 1573.540164][T31808] [ 1573.926164][T31811] ubi0: attaching mtd0 [ 1573.981893][T31811] ubi0: scanning is finished [ 1574.038554][T31819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4843'. [ 1574.066448][T31811] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1574.161361][T31821] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1574.216327][T31821] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1574.241423][T31811] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1574.705971][T31827] netlink: 314 bytes leftover after parsing attributes in process `syz.1.4845'. [ 1576.445308][T31858] FAULT_INJECTION: forcing a failure. [ 1576.445308][T31858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1576.500209][T31858] CPU: 1 UID: 0 PID: 31858 Comm: syz.3.4851 Tainted: G U syzkaller #0 PREEMPT(full) [ 1576.500245][T31858] Tainted: [U]=USER [ 1576.500253][T31858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1576.500276][T31858] Call Trace: [ 1576.500285][T31858] [ 1576.500294][T31858] dump_stack_lvl+0x16c/0x1f0 [ 1576.500336][T31858] should_fail_ex+0x512/0x640 [ 1576.500375][T31858] _copy_from_user+0x2e/0xd0 [ 1576.500400][T31858] copy_msghdr_from_user+0x98/0x160 [ 1576.500433][T31858] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1576.500470][T31858] ? kfree+0x24f/0x4d0 [ 1576.500492][T31858] ? __lock_acquire+0x62e/0x1ce0 [ 1576.500528][T31858] ___sys_recvmsg+0xdb/0x1a0 [ 1576.500563][T31858] ? __pfx____sys_recvmsg+0x10/0x10 [ 1576.500616][T31858] ? __pfx___might_resched+0x10/0x10 [ 1576.500648][T31858] do_recvmmsg+0x2fe/0x750 [ 1576.500688][T31858] ? __pfx_do_recvmmsg+0x10/0x10 [ 1576.500729][T31858] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1576.500773][T31858] ? __fget_files+0x20e/0x3c0 [ 1576.500808][T31858] __x64_sys_recvmmsg+0x22a/0x280 [ 1576.500833][T31858] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1576.500872][T31858] do_syscall_64+0xcd/0x4c0 [ 1576.500904][T31858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.500928][T31858] RIP: 0033:0x7f69c778eba9 [ 1576.500948][T31858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1576.500970][T31858] RSP: 002b:00007f69c86bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1576.500990][T31858] RAX: ffffffffffffffda RBX: 00007f69c79d6090 RCX: 00007f69c778eba9 [ 1576.501004][T31858] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1576.501017][T31858] RBP: 00007f69c86bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.501028][T31858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1576.501041][T31858] R13: 00007f69c79d6128 R14: 00007f69c79d6090 R15: 00007ffd229be258 [ 1576.501070][T31858] [ 1577.948424][T31876] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1577.959060][T31853] Process accounting resumed [ 1577.982761][T31876] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1578.230509][T31881] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1578.283155][T31881] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1578.686505][T31894] random: crng reseeded on system resumption [ 1581.781045][T31928] ubi0: attaching mtd0 [ 1581.787429][T31928] ubi0: scanning is finished [ 1581.871756][T31928] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1581.888742][T31932] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1581.897794][T31932] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1582.187304][T23210] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1582.221457][T23210] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1582.262530][T23210] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1582.274093][T23210] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1582.284789][T23210] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1582.417247][T31935] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1582.491429][T31928] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1582.521642][T31935] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1583.355511][T31946] FAULT_INJECTION: forcing a failure. [ 1583.355511][T31946] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1583.370220][T31946] CPU: 0 UID: 0 PID: 31946 Comm: syz.3.4868 Tainted: G U syzkaller #0 PREEMPT(full) [ 1583.370258][T31946] Tainted: [U]=USER [ 1583.370263][T31946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1583.370273][T31946] Call Trace: [ 1583.370279][T31946] [ 1583.370286][T31946] dump_stack_lvl+0x16c/0x1f0 [ 1583.370347][T31946] should_fail_ex+0x512/0x640 [ 1583.370374][T31946] get_futex_key+0x1d0/0x1560 [ 1583.370395][T31946] ? __pfx_get_futex_key+0x10/0x10 [ 1583.370411][T31946] ? kasan_save_stack+0x33/0x60 [ 1583.370428][T31946] ? __kasan_slab_alloc+0x89/0x90 [ 1583.370445][T31946] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1583.370461][T31946] ? security_file_alloc+0x34/0x2b0 [ 1583.370481][T31946] ? init_file+0x93/0x4c0 [ 1583.370499][T31946] ? alloc_empty_file+0x73/0x1e0 [ 1583.370519][T31946] ? alloc_file_pseudo+0x13a/0x230 [ 1583.370538][T31946] ? __anon_inode_getfile+0xe8/0x280 [ 1583.370557][T31946] ? anon_inode_getfd+0x52/0xb0 [ 1583.370573][T31946] ? __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 1583.370590][T31946] ? do_syscall_64+0xcd/0x4c0 [ 1583.370614][T31946] futex_wait_setup+0x9d/0x550 [ 1583.370641][T31946] __futex_wait+0x194/0x2f0 [ 1583.370662][T31946] ? __pfx___futex_wait+0x10/0x10 [ 1583.370686][T31946] ? __pfx_futex_wake_mark+0x10/0x10 [ 1583.370709][T31946] ? futex_private_hash_put+0x176/0x300 [ 1583.370729][T31946] ? futex_private_hash_put+0x18a/0x300 [ 1583.370747][T31946] futex_wait+0xe8/0x380 [ 1583.370768][T31946] ? __pfx_futex_wait+0x10/0x10 [ 1583.370796][T31946] ? lock_acquire+0x179/0x350 [ 1583.370817][T31946] do_futex+0x229/0x350 [ 1583.370835][T31946] ? __pfx_do_futex+0x10/0x10 [ 1583.370854][T31946] ? fd_install+0x244/0x750 [ 1583.370872][T31946] __x64_sys_futex+0x1e0/0x4c0 [ 1583.370891][T31946] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1583.370907][T31946] ? __pfx___x64_sys_futex+0x10/0x10 [ 1583.370933][T31946] do_syscall_64+0xcd/0x4c0 [ 1583.370955][T31946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.370970][T31946] RIP: 0033:0x7f69c778eba9 [ 1583.370983][T31946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.370997][T31946] RSP: 002b:00007f69c86de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1583.371013][T31946] RAX: ffffffffffffffda RBX: 00007f69c79d5fa8 RCX: 00007f69c778eba9 [ 1583.371023][T31946] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69c79d5fa8 [ 1583.371033][T31946] RBP: 00007f69c79d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.371042][T31946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.371050][T31946] R13: 00007f69c79d6038 R14: 00007ffd229be170 R15: 00007ffd229be258 [ 1583.371069][T31946] [ 1583.694091][T31940] chnl_net:caif_netlink_parms(): no params data found [ 1584.298965][T31940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.322283][T31940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.338727][T31940] bridge_slave_0: entered allmulticast mode [ 1584.366762][T31940] bridge_slave_0: entered promiscuous mode [ 1584.373224][T23210] Bluetooth: hci4: command tx timeout [ 1584.436293][T31940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.452415][T31940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.473629][T31940] bridge_slave_1: entered allmulticast mode [ 1584.500479][T31940] bridge_slave_1: entered promiscuous mode [ 1584.708311][T31940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.774897][T31940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.794146][T31976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4872'. [ 1584.999184][T31940] team0: Port device team_slave_0 added [ 1585.008110][T31940] team0: Port device team_slave_1 added [ 1585.108276][T31940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1585.150814][T31940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.179305][T31940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1585.195466][T31940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1585.208713][T31940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.257298][T31940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.589972][T31984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4874'. [ 1585.612028][T31940] hsr_slave_0: entered promiscuous mode [ 1585.619035][T31940] hsr_slave_1: entered promiscuous mode [ 1585.682634][T31940] debugfs: 'hsr0' already exists in 'hsr' [ 1585.715052][T31940] Cannot create hsr debugfs directory [ 1586.068278][T31991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4875'. [ 1586.450410][T23210] Bluetooth: hci4: command tx timeout [ 1586.669508][T31994] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1586.717280][T31994] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1587.155778][T31940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.403736][T31940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.575123][T31940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.678351][T32005] FAULT_INJECTION: forcing a failure. [ 1587.678351][T32005] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.695780][T32005] CPU: 1 UID: 0 PID: 32005 Comm: syz.1.4878 Tainted: G U syzkaller #0 PREEMPT(full) [ 1587.695827][T32005] Tainted: [U]=USER [ 1587.695837][T32005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1587.695853][T32005] Call Trace: [ 1587.695862][T32005] [ 1587.695873][T32005] dump_stack_lvl+0x16c/0x1f0 [ 1587.695917][T32005] should_fail_ex+0x512/0x640 [ 1587.695957][T32005] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1587.695990][T32005] should_failslab+0xc2/0x120 [ 1587.696025][T32005] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1587.696054][T32005] ? fqdir_init+0x4f/0x1f0 [ 1587.696086][T32005] fqdir_init+0x4f/0x1f0 [ 1587.696126][T32005] ipv6_frags_init_net+0x2b/0x350 [ 1587.696228][T32005] ? __pfx_ipv6_frags_init_net+0x10/0x10 [ 1587.696257][T32005] ops_init+0x1df/0x5f0 [ 1587.696309][T32005] setup_net+0x10f/0x380 [ 1587.696333][T32005] ? lockdep_init_map_type+0x5c/0x280 [ 1587.696369][T32005] ? __pfx_setup_net+0x10/0x10 [ 1587.696397][T32005] ? debug_mutex_init+0x37/0x70 [ 1587.696430][T32005] copy_net_ns+0x2a6/0x5f0 [ 1587.696463][T32005] create_new_namespaces+0x3ea/0xa90 [ 1587.696504][T32005] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1587.696541][T32005] ksys_unshare+0x45b/0xa40 [ 1587.696579][T32005] ? __pfx_ksys_unshare+0x10/0x10 [ 1587.696616][T32005] ? ksys_read+0x1ac/0x250 [ 1587.696660][T32005] __x64_sys_unshare+0x31/0x40 [ 1587.696696][T32005] do_syscall_64+0xcd/0x4c0 [ 1587.696743][T32005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.696771][T32005] RIP: 0033:0x7f42bf78eba9 [ 1587.696796][T32005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.696822][T32005] RSP: 002b:00007f42c059f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1587.696849][T32005] RAX: ffffffffffffffda RBX: 00007f42bf9d5fa0 RCX: 00007f42bf78eba9 [ 1587.696868][T32005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1587.696885][T32005] RBP: 00007f42bf811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1587.696902][T32005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1587.696918][T32005] R13: 00007f42bf9d6038 R14: 00007f42bf9d5fa0 R15: 00007ffed4484128 [ 1587.696955][T32005] [ 1588.033615][T31940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.304666][T31940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1588.326087][T31940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1588.405421][T31940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1588.506808][T31940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1588.531419][T23210] Bluetooth: hci4: command tx timeout [ 1589.241841][T31940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1589.355593][T31940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1589.376611][T19420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.383852][T19420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.426036][T28718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.433432][T28718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.891734][T32048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4885'. [ 1590.326364][T31940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1590.611182][T23210] Bluetooth: hci4: command tx timeout [ 1590.659773][T32063] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1590.681143][T31940] veth0_vlan: entered promiscuous mode [ 1590.697407][T32063] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1590.806499][T31940] veth1_vlan: entered promiscuous mode [ 1590.902304][T31940] veth0_macvtap: entered promiscuous mode [ 1590.916187][T31940] veth1_macvtap: entered promiscuous mode [ 1591.006514][T32068] random: crng reseeded on system resumption [ 1591.127535][T31940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.425497][T31940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1591.559317][T28628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.601245][T28628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.696071][T28628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.723305][T28628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.902635][T19420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.913298][T19420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.005879][T19420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.017735][T19420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.115902][T32091] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1593.155221][T32091] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1593.473082][T32102] random: crng reseeded on system resumption [ 1595.081307][T32136] ubi0: attaching mtd0 [ 1595.128941][T32136] ubi0: scanning is finished [ 1595.148320][T32136] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1595.281242][T32136] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1596.236054][T32141] FAULT_INJECTION: forcing a failure. [ 1596.236054][T32141] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1596.314287][T32141] CPU: 0 UID: 0 PID: 32141 Comm: syz.1.4901 Tainted: G U syzkaller #0 PREEMPT(full) [ 1596.314330][T32141] Tainted: [U]=USER [ 1596.314339][T32141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1596.314353][T32141] Call Trace: [ 1596.314361][T32141] [ 1596.314373][T32141] dump_stack_lvl+0x16c/0x1f0 [ 1596.314417][T32141] should_fail_ex+0x512/0x640 [ 1596.314447][T32141] get_futex_key+0x1d0/0x1560 [ 1596.314470][T32141] ? __pfx_get_futex_key+0x10/0x10 [ 1596.314485][T32141] ? kasan_save_stack+0x33/0x60 [ 1596.314502][T32141] ? __kasan_slab_alloc+0x89/0x90 [ 1596.314519][T32141] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1596.314535][T32141] ? security_file_alloc+0x34/0x2b0 [ 1596.314554][T32141] ? init_file+0x93/0x4c0 [ 1596.314572][T32141] ? alloc_empty_file+0x73/0x1e0 [ 1596.314591][T32141] ? alloc_file_pseudo+0x13a/0x230 [ 1596.314610][T32141] ? __anon_inode_getfile+0xe8/0x280 [ 1596.314627][T32141] ? anon_inode_getfd+0x52/0xb0 [ 1596.314642][T32141] ? __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 1596.314658][T32141] ? do_syscall_64+0xcd/0x4c0 [ 1596.314681][T32141] futex_wait_setup+0x9d/0x550 [ 1596.314708][T32141] __futex_wait+0x194/0x2f0 [ 1596.314729][T32141] ? __pfx___futex_wait+0x10/0x10 [ 1596.314753][T32141] ? __pfx_futex_wake_mark+0x10/0x10 [ 1596.314776][T32141] ? futex_private_hash_put+0x176/0x300 [ 1596.314795][T32141] ? futex_private_hash_put+0x18a/0x300 [ 1596.314814][T32141] futex_wait+0xe8/0x380 [ 1596.314834][T32141] ? __pfx_futex_wait+0x10/0x10 [ 1596.314861][T32141] ? lock_acquire+0x179/0x350 [ 1596.314883][T32141] do_futex+0x229/0x350 [ 1596.314902][T32141] ? __pfx_do_futex+0x10/0x10 [ 1596.314930][T32141] ? fd_install+0x244/0x750 [ 1596.314949][T32141] __x64_sys_futex+0x1e0/0x4c0 [ 1596.314969][T32141] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1596.314987][T32141] ? __pfx___x64_sys_futex+0x10/0x10 [ 1596.315014][T32141] do_syscall_64+0xcd/0x4c0 [ 1596.315041][T32141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.315059][T32141] RIP: 0033:0x7f42bf78eba9 [ 1596.315073][T32141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.315089][T32141] RSP: 002b:00007f42c059f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1596.315105][T32141] RAX: ffffffffffffffda RBX: 00007f42bf9d5fa8 RCX: 00007f42bf78eba9 [ 1596.315115][T32141] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f42bf9d5fa8 [ 1596.315124][T32141] RBP: 00007f42bf9d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1596.315134][T32141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.315143][T32141] R13: 00007f42bf9d6038 R14: 00007ffed4484040 R15: 00007ffed4484128 [ 1596.315163][T32141] [ 1598.143072][T32184] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1598.877197][T32199] FAULT_INJECTION: forcing a failure. [ 1598.877197][T32199] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1598.909973][T32199] CPU: 0 UID: 0 PID: 32199 Comm: syz.0.4910 Tainted: G U syzkaller #0 PREEMPT(full) [ 1598.910015][T32199] Tainted: [U]=USER [ 1598.910024][T32199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1598.910038][T32199] Call Trace: [ 1598.910046][T32199] [ 1598.910056][T32199] dump_stack_lvl+0x16c/0x1f0 [ 1598.910098][T32199] should_fail_ex+0x512/0x640 [ 1598.910137][T32199] get_futex_key+0x1d0/0x1560 [ 1598.910169][T32199] ? __pfx_get_futex_key+0x10/0x10 [ 1598.910198][T32199] ? trace_pid_list_is_set+0xfb/0x150 [ 1598.910231][T32199] ? do_raw_spin_unlock+0x172/0x230 [ 1598.910277][T32199] futex_wait_setup+0x9d/0x550 [ 1598.910325][T32199] __futex_wait+0x194/0x2f0 [ 1598.910364][T32199] ? __pfx___futex_wait+0x10/0x10 [ 1598.910399][T32199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1598.910434][T32199] ? lockdep_hardirqs_on+0x7c/0x110 [ 1598.910474][T32199] ? __pfx_futex_wake_mark+0x10/0x10 [ 1598.910517][T32199] ? futex_private_hash_put+0x176/0x300 [ 1598.910553][T32199] ? futex_private_hash_put+0x18a/0x300 [ 1598.910587][T32199] futex_wait+0xe8/0x380 [ 1598.910624][T32199] ? __pfx_futex_wait+0x10/0x10 [ 1598.910752][T32199] ? lock_acquire+0x179/0x350 [ 1598.910790][T32199] do_futex+0x229/0x350 [ 1598.910824][T32199] ? __pfx_do_futex+0x10/0x10 [ 1598.910858][T32199] ? fd_install+0x244/0x750 [ 1598.910891][T32199] __x64_sys_futex+0x1e0/0x4c0 [ 1598.910925][T32199] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1598.910957][T32199] ? __pfx___x64_sys_futex+0x10/0x10 [ 1598.911005][T32199] do_syscall_64+0xcd/0x4c0 [ 1598.911046][T32199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.911074][T32199] RIP: 0033:0x7f452f98eba9 [ 1598.911095][T32199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1598.911121][T32199] RSP: 002b:00007f453085b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1598.911147][T32199] RAX: ffffffffffffffda RBX: 00007f452fbd6188 RCX: 00007f452f98eba9 [ 1598.911166][T32199] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f452fbd6188 [ 1598.911182][T32199] RBP: 00007f452fbd6180 R08: 0000000000000000 R09: 0000000000000000 [ 1598.911199][T32199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.911215][T32199] R13: 00007f452fbd6218 R14: 00007ffd2e6981d0 R15: 00007ffd2e6982b8 [ 1598.911249][T32199] [ 1599.914168][T32192] page: refcount:11 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1599.930072][T32192] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1599.939344][T32192] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1599.947505][T32192] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1599.956419][T32192] raw: 0000000000000000 0000000000000000 0000000bffffffff 0000000000000000 [ 1599.965231][T32192] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1599.975749][T32192] head: 0000000000000000 0000000000000000 0000000bffffffff 0000000000000000 [ 1600.040940][T32205] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1600.147305][T32192] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1600.240366][T32192] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1600.249106][T32192] page dumped because: unmovable page [ 1600.266161][T32192] page_owner tracks the page as allocated [ 1600.294514][T32192] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7640, tgid 7640 (syz.0.353), ts 206827167001, free_ts 206788934411 [ 1600.323524][T32192] post_alloc_hook+0x1c0/0x230 [ 1600.340251][T32192] get_page_from_freelist+0x132b/0x38e0 [ 1600.349240][T32209] FAULT_INJECTION: forcing a failure. [ 1600.349240][T32209] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.367576][T32209] CPU: 0 UID: 0 PID: 32209 Comm: syz.0.4913 Tainted: G U syzkaller #0 PREEMPT(full) [ 1600.367621][T32209] Tainted: [U]=USER [ 1600.367631][T32209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1600.367648][T32209] Call Trace: [ 1600.367657][T32209] [ 1600.367667][T32209] dump_stack_lvl+0x16c/0x1f0 [ 1600.367714][T32209] should_fail_ex+0x512/0x640 [ 1600.367755][T32209] ? __kmalloc_noprof+0xbf/0x510 [ 1600.367803][T32209] ? lsm_blob_alloc+0x68/0x90 [ 1600.367827][T32209] should_failslab+0xc2/0x120 [ 1600.367861][T32209] __kmalloc_noprof+0xd2/0x510 [ 1600.367899][T32209] lsm_blob_alloc+0x68/0x90 [ 1600.367924][T32209] security_prepare_creds+0x30/0x270 [ 1600.367965][T32209] prepare_creds+0x56f/0x7d0 [ 1600.368006][T32209] __do_sys_landlock_restrict_self+0x13e/0x910 [ 1600.368039][T32209] ? rcu_is_watching+0x12/0xc0 [ 1600.368071][T32209] do_syscall_64+0xcd/0x4c0 [ 1600.368114][T32209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.368142][T32209] RIP: 0033:0x7f452f98eba9 [ 1600.368171][T32209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.368198][T32209] RSP: 002b:00007f453089d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1600.368229][T32209] RAX: ffffffffffffffda RBX: 00007f452fbd5fa0 RCX: 00007f452f98eba9 [ 1600.368248][T32209] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1600.368264][T32209] RBP: 00007f452fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1600.368281][T32209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.368297][T32209] R13: 00007f452fbd6038 R14: 00007f452fbd5fa0 R15: 00007ffd2e6982b8 [ 1600.368333][T32209] [ 1600.564804][T32220] random: crng reseeded on system resumption [ 1600.581697][T32192] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1600.588240][T32192] alloc_pages_mpol+0x1fb/0x550 [ 1600.593513][T32192] alloc_pages_noprof+0x131/0x390 [ 1600.598699][T32192] skb_page_frag_refill+0x186/0x5c0 [ 1600.634323][T32192] try_fill_recv+0x7e4/0x2930 [ 1600.639195][T32192] virtnet_poll+0x1e11/0x3c10 [ 1600.644123][T32192] __napi_poll.constprop.0+0xb7/0x550 [ 1600.649646][T32192] net_rx_action+0xa9f/0xfe0 [ 1600.654361][T32192] handle_softirqs+0x216/0x8e0 [ 1600.659163][T32192] __irq_exit_rcu+0x109/0x170 [ 1600.664189][T32192] irq_exit_rcu+0x9/0x30 [ 1600.668483][T32192] common_interrupt+0xbf/0xe0 [ 1600.673442][T32192] asm_common_interrupt+0x26/0x40 [ 1600.678528][T32192] page last free pid 7640 tgid 7640 stack trace: [ 1600.697086][T32192] register_dummy_stack+0x89/0xd0 [ 1600.702545][T32192] init_page_owner+0x48/0x7e0 [ 1600.707402][T32192] page_ext_init+0x703/0xb00 [ 1600.712273][T32192] mm_core_init+0x13c/0x220 [ 1600.975851][T32225] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1601.020355][T32225] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1601.760274][T32196] kexec: Could not allocate control_code_buffer [ 1602.152693][T32240] FAULT_INJECTION: forcing a failure. [ 1602.152693][T32240] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.210856][T32240] CPU: 0 UID: 0 PID: 32240 Comm: syz.1.4917 Tainted: G U syzkaller #0 PREEMPT(full) [ 1602.210901][T32240] Tainted: [U]=USER [ 1602.210910][T32240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1602.210926][T32240] Call Trace: [ 1602.210935][T32240] [ 1602.210946][T32240] dump_stack_lvl+0x16c/0x1f0 [ 1602.210991][T32240] should_fail_ex+0x512/0x640 [ 1602.211031][T32240] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1602.211068][T32240] should_failslab+0xc2/0x120 [ 1602.211102][T32240] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1602.211132][T32240] ? lockdep_init_map_type+0x5c/0x280 [ 1602.211167][T32240] ? __d_alloc+0x32/0xae0 [ 1602.211189][T32240] __d_alloc+0x32/0xae0 [ 1602.211215][T32240] d_alloc_pseudo+0x1c/0xc0 [ 1602.211237][T32240] alloc_file_pseudo+0xcf/0x230 [ 1602.211261][T32240] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1602.211282][T32240] ? alloc_fd+0x471/0x7d0 [ 1602.211301][T32240] sock_alloc_file+0x50/0x210 [ 1602.211316][T32240] __sys_socket+0x1c0/0x260 [ 1602.211333][T32240] ? __pfx___sys_socket+0x10/0x10 [ 1602.211359][T32240] ? xfd_validate_state+0x61/0x180 [ 1602.211386][T32240] __x64_sys_socket+0x72/0xb0 [ 1602.211403][T32240] ? lockdep_hardirqs_on+0x7c/0x110 [ 1602.211425][T32240] do_syscall_64+0xcd/0x4c0 [ 1602.211447][T32240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.211463][T32240] RIP: 0033:0x7f42bf78eba9 [ 1602.211476][T32240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.211490][T32240] RSP: 002b:00007f42c059f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1602.211505][T32240] RAX: ffffffffffffffda RBX: 00007f42bf9d5fa0 RCX: 00007f42bf78eba9 [ 1602.211516][T32240] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1602.211526][T32240] RBP: 00007f42bf811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1602.211535][T32240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.211544][T32240] R13: 00007f42bf9d6038 R14: 00007f42bf9d5fa0 R15: 00007ffed4484128 [ 1602.211563][T32240] [ 1602.864654][T32259] ubi0: attaching mtd0 [ 1602.871354][T32259] ubi0: scanning is finished [ 1602.876151][T32259] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1603.330653][T32259] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1603.342563][T32277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4922'. [ 1603.932313][T32287] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1604.006365][T32287] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1604.721206][T23210] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1604.763380][T23210] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1604.990921][T32312] random: crng reseeded on system resumption [ 1605.232451][T32313] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1605.347318][T32313] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1606.400844][T32332] FAULT_INJECTION: forcing a failure. [ 1606.400844][T32332] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1606.480391][T32332] CPU: 1 UID: 0 PID: 32332 Comm: syz.3.4929 Tainted: G U syzkaller #0 PREEMPT(full) [ 1606.480419][T32332] Tainted: [U]=USER [ 1606.480424][T32332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1606.480434][T32332] Call Trace: [ 1606.480440][T32332] [ 1606.480446][T32332] dump_stack_lvl+0x16c/0x1f0 [ 1606.480473][T32332] should_fail_ex+0x512/0x640 [ 1606.480499][T32332] get_futex_key+0x1d0/0x1560 [ 1606.480520][T32332] ? __pfx_get_futex_key+0x10/0x10 [ 1606.480537][T32332] ? __mutex_trylock_common+0xe9/0x250 [ 1606.480562][T32332] futex_wake+0xea/0x530 [ 1606.480584][T32332] ? __pfx_futex_wake+0x10/0x10 [ 1606.480613][T32332] do_futex+0x1e3/0x350 [ 1606.480631][T32332] ? __pfx_do_futex+0x10/0x10 [ 1606.480647][T32332] ? __might_fault+0xe3/0x190 [ 1606.480670][T32332] mm_release+0x24e/0x300 [ 1606.480688][T32332] do_exit+0x68e/0x2bf0 [ 1606.480712][T32332] ? __pfx_do_exit+0x10/0x10 [ 1606.480731][T32332] ? do_raw_spin_lock+0x12c/0x2b0 [ 1606.480752][T32332] ? find_held_lock+0x2b/0x80 [ 1606.480770][T32332] do_group_exit+0xd3/0x2a0 [ 1606.480790][T32332] get_signal+0x2673/0x26d0 [ 1606.480812][T32332] ? lock_acquire+0x179/0x350 [ 1606.480831][T32332] ? __pfx_get_signal+0x10/0x10 [ 1606.480847][T32332] ? do_futex+0x122/0x350 [ 1606.480878][T32332] ? __pfx_do_futex+0x10/0x10 [ 1606.480897][T32332] arch_do_signal_or_restart+0x8f/0x790 [ 1606.480917][T32332] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1606.480946][T32332] exit_to_user_mode_loop+0x84/0x110 [ 1606.480968][T32332] do_syscall_64+0x41c/0x4c0 [ 1606.480991][T32332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.481006][T32332] RIP: 0033:0x7f69c778eba9 [ 1606.481019][T32332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.481034][T32332] RSP: 002b:00007f69c869c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1606.481049][T32332] RAX: fffffffffffffe00 RBX: 00007f69c79d6188 RCX: 00007f69c778eba9 [ 1606.481059][T32332] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69c79d6188 [ 1606.481069][T32332] RBP: 00007f69c79d6180 R08: 0000000000000000 R09: 0000000000000000 [ 1606.481078][T32332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1606.481087][T32332] R13: 00007f69c79d6218 R14: 00007ffd229be170 R15: 00007ffd229be258 [ 1606.481106][T32332] [ 1607.536617][T32358] netlink: 314 bytes leftover after parsing attributes in process `syz.3.4933'. [ 1608.014985][T23210] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1608.026921][T23210] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1608.176711][T32375] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1608.228746][T32378] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1608.661025][T32390] random: crng reseeded on system resumption [ 1608.818577][T32389] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1608.860796][T32389] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1610.074972][T23210] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1610.086467][T23210] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1611.201359][T32426] netlink: 314 bytes leftover after parsing attributes in process `syz.1.4945'. [ 1611.748505][T23210] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1611.991809][T32446] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1612.009754][T32446] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1612.378442][T32454] random: crng reseeded on system resumption [ 1613.893574][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.900439][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.635518][T32487] FAULT_INJECTION: forcing a failure. [ 1614.635518][T32487] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.648681][T32487] CPU: 0 UID: 0 PID: 32487 Comm: syz.1.4957 Tainted: G U syzkaller #0 PREEMPT(full) [ 1614.648708][T32487] Tainted: [U]=USER [ 1614.648713][T32487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1614.648723][T32487] Call Trace: [ 1614.648729][T32487] [ 1614.648735][T32487] dump_stack_lvl+0x16c/0x1f0 [ 1614.648763][T32487] should_fail_ex+0x512/0x640 [ 1614.648787][T32487] ? fs_reclaim_acquire+0xae/0x150 [ 1614.648811][T32487] should_failslab+0xc2/0x120 [ 1614.648831][T32487] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1614.648850][T32487] ? security_inode_alloc+0x3b/0x2b0 [ 1614.648870][T32487] security_inode_alloc+0x3b/0x2b0 [ 1614.648887][T32487] inode_init_always_gfp+0xce4/0x1030 [ 1614.648908][T32487] alloc_inode+0x86/0x240 [ 1614.648928][T32487] sock_alloc+0x40/0x280 [ 1614.648944][T32487] __sock_create+0xc1/0x8d0 [ 1614.648964][T32487] __sys_socket+0x14d/0x260 [ 1614.648998][T32487] ? __pfx___sys_socket+0x10/0x10 [ 1614.649016][T32487] ? xfd_validate_state+0x61/0x180 [ 1614.649044][T32487] __x64_sys_socket+0x72/0xb0 [ 1614.649061][T32487] ? lockdep_hardirqs_on+0x7c/0x110 [ 1614.649082][T32487] do_syscall_64+0xcd/0x4c0 [ 1614.649111][T32487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.649126][T32487] RIP: 0033:0x7f42bf78eba9 [ 1614.649140][T32487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1614.649154][T32487] RSP: 002b:00007f42c059f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1614.649170][T32487] RAX: ffffffffffffffda RBX: 00007f42bf9d5fa0 RCX: 00007f42bf78eba9 [ 1614.649180][T32487] RDX: 0000000000000005 RSI: 0000000000000003 RDI: 000000000000000a [ 1614.649190][T32487] RBP: 00007f42bf811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1614.649201][T32487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.649209][T32487] R13: 00007f42bf9d6038 R14: 00007f42bf9d5fa0 R15: 00007ffed4484128 [ 1614.649228][T32487] [ 1614.649254][T32487] socket: no more sockets [ 1616.207472][T32492] FAULT_INJECTION: forcing a failure. [ 1616.207472][T32492] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1616.225264][T32492] CPU: 1 UID: 0 PID: 32492 Comm: syz.3.4958 Tainted: G U syzkaller #0 PREEMPT(full) [ 1616.225304][T32492] Tainted: [U]=USER [ 1616.225312][T32492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1616.225326][T32492] Call Trace: [ 1616.225335][T32492] [ 1616.225346][T32492] dump_stack_lvl+0x16c/0x1f0 [ 1616.225390][T32492] should_fail_ex+0x512/0x640 [ 1616.225435][T32492] get_futex_key+0x1d0/0x1560 [ 1616.225473][T32492] ? __pfx_get_futex_key+0x10/0x10 [ 1616.225501][T32492] ? kasan_save_stack+0x33/0x60 [ 1616.225532][T32492] ? __kasan_slab_alloc+0x89/0x90 [ 1616.225562][T32492] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1616.225592][T32492] ? security_file_alloc+0x34/0x2b0 [ 1616.225626][T32492] ? init_file+0x93/0x4c0 [ 1616.225660][T32492] ? alloc_empty_file+0x73/0x1e0 [ 1616.225695][T32492] ? alloc_file_pseudo+0x13a/0x230 [ 1616.225731][T32492] ? __anon_inode_getfile+0xe8/0x280 [ 1616.225761][T32492] ? anon_inode_getfd+0x52/0xb0 [ 1616.225789][T32492] ? __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 1616.225819][T32492] ? do_syscall_64+0xcd/0x4c0 [ 1616.225873][T32492] futex_wait_setup+0x9d/0x550 [ 1616.225924][T32492] __futex_wait+0x194/0x2f0 [ 1616.225964][T32492] ? __pfx___futex_wait+0x10/0x10 [ 1616.226004][T32492] ? __pfx_futex_wake_mark+0x10/0x10 [ 1616.226048][T32492] ? futex_private_hash_put+0x176/0x300 [ 1616.226084][T32492] ? futex_private_hash_put+0x18a/0x300 [ 1616.226118][T32492] futex_wait+0xe8/0x380 [ 1616.226157][T32492] ? __pfx_futex_wait+0x10/0x10 [ 1616.226207][T32492] ? lock_acquire+0x179/0x350 [ 1616.226246][T32492] do_futex+0x229/0x350 [ 1616.226280][T32492] ? __pfx_do_futex+0x10/0x10 [ 1616.226315][T32492] ? fd_install+0x244/0x750 [ 1616.226347][T32492] __x64_sys_futex+0x1e0/0x4c0 [ 1616.226383][T32492] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1616.226415][T32492] ? __pfx___x64_sys_futex+0x10/0x10 [ 1616.226463][T32492] do_syscall_64+0xcd/0x4c0 [ 1616.226505][T32492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.226533][T32492] RIP: 0033:0x7f69c778eba9 [ 1616.226556][T32492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1616.226582][T32492] RSP: 002b:00007f69c86de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1616.226609][T32492] RAX: ffffffffffffffda RBX: 00007f69c79d5fa8 RCX: 00007f69c778eba9 [ 1616.226628][T32492] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69c79d5fa8 [ 1616.226645][T32492] RBP: 00007f69c79d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.226662][T32492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.226679][T32492] R13: 00007f69c79d6038 R14: 00007ffd229be170 R15: 00007ffd229be258 [ 1616.226714][T32492] [ 1616.614046][T32516] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1616.624534][T32516] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1616.639260][T32517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1617.876363][T32543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4968'. [ 1618.811842][T32551] FAULT_INJECTION: forcing a failure. [ 1618.811842][T32551] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.881096][T32551] CPU: 1 UID: 0 PID: 32551 Comm: syz.0.4977 Tainted: G U syzkaller #0 PREEMPT(full) [ 1618.881144][T32551] Tainted: [U]=USER [ 1618.881153][T32551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1618.881169][T32551] Call Trace: [ 1618.881179][T32551] [ 1618.881190][T32551] dump_stack_lvl+0x16c/0x1f0 [ 1618.881237][T32551] should_fail_ex+0x512/0x640 [ 1618.881278][T32551] ? __kmalloc_noprof+0xbf/0x510 [ 1618.881312][T32551] ? lsm_blob_alloc+0x68/0x90 [ 1618.881337][T32551] should_failslab+0xc2/0x120 [ 1618.881372][T32551] __kmalloc_noprof+0xd2/0x510 [ 1618.881411][T32551] lsm_blob_alloc+0x68/0x90 [ 1618.881437][T32551] security_prepare_creds+0x30/0x270 [ 1618.881478][T32551] prepare_creds+0x56f/0x7d0 [ 1618.881520][T32551] __do_sys_landlock_restrict_self+0x13e/0x910 [ 1618.881552][T32551] ? rcu_is_watching+0x12/0xc0 [ 1618.881584][T32551] do_syscall_64+0xcd/0x4c0 [ 1618.881628][T32551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.881664][T32551] RIP: 0033:0x7f452f98eba9 [ 1618.881687][T32551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1618.881713][T32551] RSP: 002b:00007f453089d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1618.881739][T32551] RAX: ffffffffffffffda RBX: 00007f452fbd5fa0 RCX: 00007f452f98eba9 [ 1618.881758][T32551] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1618.881774][T32551] RBP: 00007f452fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1618.881796][T32551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1618.881823][T32551] R13: 00007f452fbd6038 R14: 00007f452fbd5fa0 R15: 00007ffd2e6982b8 [ 1618.881861][T32551] [ 1619.270575][T32552] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1619.310438][T32552] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1620.066528][T32564] netlink: 314 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1620.166060][T32574] random: crng reseeded on system resumption [ 1621.050210][T32588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4976'. [ 1621.849695][T32599] ubi0: attaching mtd0 [ 1621.891453][T32599] ubi0: scanning is finished [ 1621.896205][T32599] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1622.088984][T32599] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1622.348814][T32612] FAULT_INJECTION: forcing a failure. [ 1622.348814][T32612] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.361758][T32612] CPU: 1 UID: 0 PID: 32612 Comm: syz.2.4981 Tainted: G U syzkaller #0 PREEMPT(full) [ 1622.361803][T32612] Tainted: [U]=USER [ 1622.361813][T32612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1622.361829][T32612] Call Trace: [ 1622.361838][T32612] [ 1622.361849][T32612] dump_stack_lvl+0x16c/0x1f0 [ 1622.361896][T32612] should_fail_ex+0x512/0x640 [ 1622.361936][T32612] ? __kmalloc_noprof+0xbf/0x510 [ 1622.361968][T32612] ? lsm_blob_alloc+0x68/0x90 [ 1622.361990][T32612] should_failslab+0xc2/0x120 [ 1622.362016][T32612] __kmalloc_noprof+0xd2/0x510 [ 1622.362037][T32612] lsm_blob_alloc+0x68/0x90 [ 1622.362050][T32612] security_prepare_creds+0x30/0x270 [ 1622.362074][T32612] prepare_creds+0x56f/0x7d0 [ 1622.362097][T32612] __do_sys_landlock_restrict_self+0x13e/0x910 [ 1622.362115][T32612] ? rcu_is_watching+0x12/0xc0 [ 1622.362131][T32612] do_syscall_64+0xcd/0x4c0 [ 1622.362154][T32612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.362170][T32612] RIP: 0033:0x7f45e298eba9 [ 1622.362183][T32612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.362209][T32612] RSP: 002b:00007f45e07d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1622.362226][T32612] RAX: ffffffffffffffda RBX: 00007f45e2bd6270 RCX: 00007f45e298eba9 [ 1622.362237][T32612] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 1622.362246][T32612] RBP: 00007f45e2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1622.362256][T32612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1622.362266][T32612] R13: 00007f45e2bd6308 R14: 00007f45e2bd6270 R15: 00007ffdbbccb348 [ 1622.362286][T32612] [ 1623.686741][T32627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4983'. [ 1623.761006][T32627] veth1_macvtap: left promiscuous mode [ 1624.071719][T31177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1624.088254][T31177] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1624.098007][T31177] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1624.115800][T31177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1624.142259][T31177] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1624.684437][T32629] FAULT_INJECTION: forcing a failure. [ 1624.684437][T32629] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.698366][T32629] CPU: 1 UID: 0 PID: 32629 Comm: syz.3.4985 Tainted: G U syzkaller #0 PREEMPT(full) [ 1624.698405][T32629] Tainted: [U]=USER [ 1624.698412][T32629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1624.698426][T32629] Call Trace: [ 1624.698434][T32629] [ 1624.698443][T32629] dump_stack_lvl+0x16c/0x1f0 [ 1624.698483][T32629] should_fail_ex+0x512/0x640 [ 1624.698519][T32629] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1624.698546][T32629] should_failslab+0xc2/0x120 [ 1624.698577][T32629] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1624.698604][T32629] ? __pfx_acct_collect+0x10/0x10 [ 1624.698637][T32629] ? taskstats_exit+0x654/0xbe0 [ 1624.698675][T32629] taskstats_exit+0x654/0xbe0 [ 1624.698711][T32629] ? __pfx_taskstats_exit+0x10/0x10 [ 1624.698754][T32629] do_exit+0x5dc/0x2bf0 [ 1624.698795][T32629] ? __pfx_do_exit+0x10/0x10 [ 1624.698827][T32629] ? do_raw_spin_lock+0x12c/0x2b0 [ 1624.698860][T32629] ? find_held_lock+0x2b/0x80 [ 1624.698891][T32629] do_group_exit+0xd3/0x2a0 [ 1624.698934][T32629] get_signal+0x2673/0x26d0 [ 1624.698986][T32629] ? lock_acquire+0x179/0x350 [ 1624.699018][T32629] ? __pfx_get_signal+0x10/0x10 [ 1624.699044][T32629] ? do_futex+0x122/0x350 [ 1624.699075][T32629] ? __pfx_do_futex+0x10/0x10 [ 1624.699109][T32629] arch_do_signal_or_restart+0x8f/0x790 [ 1624.699143][T32629] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1624.699191][T32629] ? xfd_validate_state+0x61/0x180 [ 1624.699233][T32629] exit_to_user_mode_loop+0x84/0x110 [ 1624.699270][T32629] do_syscall_64+0x41c/0x4c0 [ 1624.699309][T32629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.699334][T32629] RIP: 0033:0x7f69c778eba9 [ 1624.699355][T32629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.699378][T32629] RSP: 002b:00007f69c86de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1624.699403][T32629] RAX: fffffffffffffe00 RBX: 00007f69c79d5fa8 RCX: 00007f69c778eba9 [ 1624.699420][T32629] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69c79d5fa8 [ 1624.699435][T32629] RBP: 00007f69c79d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1624.699451][T32629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.699466][T32629] R13: 00007f69c79d6038 R14: 00007ffd229be170 R15: 00007ffd229be258 [ 1624.699501][T32629] [ 1625.332549][T31177] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1625.338473][T32644] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1625.339653][T31177] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1625.400262][T32652] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1625.451409][T32635] chnl_net:caif_netlink_parms(): no params data found [ 1625.771778][T32635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.789294][T32635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.808170][T32635] bridge_slave_0: entered allmulticast mode [ 1625.832394][T32635] bridge_slave_0: entered promiscuous mode [ 1625.852008][T32635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.861918][T32635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.869557][T32635] bridge_slave_1: entered allmulticast mode [ 1625.877941][T32635] bridge_slave_1: entered promiscuous mode [ 1625.969766][T32669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1625.996522][T32668] random: crng reseeded on system resumption [ 1626.057350][T32635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.076665][T32635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.195304][T32635] team0: Port device team_slave_0 added [ 1626.210009][T31177] Bluetooth: hci3: command tx timeout [ 1626.212891][T32635] team0: Port device team_slave_1 added [ 1626.439325][T32635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.514414][T32635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.541357][T32635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.588336][T32635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.636524][T32635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.809986][T32635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.903121][T32635] hsr_slave_0: entered promiscuous mode [ 1626.912703][T32635] hsr_slave_1: entered promiscuous mode [ 1626.919681][T32635] debugfs: 'hsr0' already exists in 'hsr' [ 1626.937178][T32635] Cannot create hsr debugfs directory [ 1627.517382][T32680] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1627.528248][T32680] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1627.754192][T32686] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1627.764034][T32635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.778820][T32686] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1628.012911][T32635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.251577][T32635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.290852][T31177] Bluetooth: hci3: command tx timeout [ 1628.301596][T32692] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1628.468956][T32692] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1628.495721][T32635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.922200][T32701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4996'. [ 1629.169564][T32635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1629.184495][T32635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1629.337033][T32635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1629.357228][T32635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1629.581866][T31177] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1629.612347][T31177] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1629.674264][T32635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1629.780447][T32635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1629.835829][T27411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.845269][T27411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1629.907595][T27411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.914822][T27411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.371011][T31177] Bluetooth: hci3: command tx timeout [ 1630.683604][T32719] FAULT_INJECTION: forcing a failure. [ 1630.683604][T32719] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1630.697773][T32719] CPU: 0 UID: 0 PID: 32719 Comm: syz.2.4999 Tainted: G U syzkaller #0 PREEMPT(full) [ 1630.697813][T32719] Tainted: [U]=USER [ 1630.697821][T32719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1630.697834][T32719] Call Trace: [ 1630.697843][T32719] [ 1630.697852][T32719] dump_stack_lvl+0x16c/0x1f0 [ 1630.697894][T32719] should_fail_ex+0x512/0x640 [ 1630.697932][T32719] get_futex_key+0x1d0/0x1560 [ 1630.697962][T32719] ? __pfx_get_futex_key+0x10/0x10 [ 1630.697987][T32719] ? __mutex_trylock_common+0xe9/0x250 [ 1630.698026][T32719] futex_wake+0xea/0x530 [ 1630.698065][T32719] ? __pfx_futex_wake+0x10/0x10 [ 1630.698112][T32719] do_futex+0x1e3/0x350 [ 1630.698140][T32719] ? __pfx_do_futex+0x10/0x10 [ 1630.698166][T32719] ? __might_fault+0xe3/0x190 [ 1630.698203][T32719] mm_release+0x24e/0x300 [ 1630.698232][T32719] do_exit+0x68e/0x2bf0 [ 1630.698271][T32719] ? __pfx_do_exit+0x10/0x10 [ 1630.698302][T32719] ? do_raw_spin_lock+0x12c/0x2b0 [ 1630.698334][T32719] ? find_held_lock+0x2b/0x80 [ 1630.698360][T32719] do_group_exit+0xd3/0x2a0 [ 1630.698393][T32719] get_signal+0x2673/0x26d0 [ 1630.698430][T32719] ? lock_acquire+0x179/0x350 [ 1630.698463][T32719] ? __pfx_get_signal+0x10/0x10 [ 1630.698491][T32719] ? do_futex+0x122/0x350 [ 1630.698521][T32719] ? __pfx_do_futex+0x10/0x10 [ 1630.698555][T32719] arch_do_signal_or_restart+0x8f/0x790 [ 1630.698589][T32719] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1630.698640][T32719] ? xfd_validate_state+0x61/0x180 [ 1630.698684][T32719] exit_to_user_mode_loop+0x84/0x110 [ 1630.698721][T32719] do_syscall_64+0x41c/0x4c0 [ 1630.698758][T32719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.698782][T32719] RIP: 0033:0x7f45e298eba9 [ 1630.698802][T32719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1630.698824][T32719] RSP: 002b:00007f45e37640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1630.698848][T32719] RAX: fffffffffffffe00 RBX: 00007f45e2bd5fa8 RCX: 00007f45e298eba9 [ 1630.698865][T32719] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45e2bd5fa8 [ 1630.698878][T32719] RBP: 00007f45e2bd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1630.698893][T32719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1630.698908][T32719] R13: 00007f45e2bd6038 R14: 00007ffdbbccb260 R15: 00007ffdbbccb348 [ 1630.698943][T32719] [ 1631.085650][T32635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.297323][T32635] veth0_vlan: entered promiscuous mode [ 1631.429361][T32635] veth1_vlan: entered promiscuous mode [ 1631.582498][T32635] veth0_macvtap: entered promiscuous mode [ 1631.596499][T32635] veth1_macvtap: entered promiscuous mode [ 1631.615626][T32735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1631.651802][T32635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1631.685403][T32735] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1631.757713][T32747] random: crng reseeded on system resumption [ 1631.795870][T32635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1631.993940][T27411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.050549][T27411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.108754][T27411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.150469][T27411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.423125][T28718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.453341][T31177] Bluetooth: hci3: command tx timeout [ 1632.461269][T28718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.547259][T32753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1632.575818][T28718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.587759][T28718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.611524][T32753] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1632.733296][T32760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4990'. [ 1633.446764][ T302] netlink: 314 bytes leftover after parsing attributes in process `syz.3.5006'. [ 1635.072282][ T322] netlink: 314 bytes leftover after parsing attributes in process `syz.0.5009'. [ 1635.735970][ T338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1635.822173][ T341] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1635.843922][ T338] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1635.879106][ T341] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1636.024939][ T346] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1636.842564][ T358] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1636.872856][ T358] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1638.122942][ T381] FAULT_INJECTION: forcing a failure. [ 1638.122942][ T381] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1638.136995][ T381] CPU: 1 UID: 0 PID: 381 Comm: syz.3.5021 Tainted: G U syzkaller #0 PREEMPT(full) [ 1638.137039][ T381] Tainted: [U]=USER [ 1638.137049][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1638.137065][ T381] Call Trace: [ 1638.137075][ T381] [ 1638.137086][ T381] dump_stack_lvl+0x16c/0x1f0 [ 1638.137132][ T381] should_fail_ex+0x512/0x640 [ 1638.137178][ T381] get_futex_key+0x1d0/0x1560 [ 1638.137223][ T381] ? __pfx_get_futex_key+0x10/0x10 [ 1638.137257][ T381] ? __pfx___schedule+0x10/0x10 [ 1638.137288][ T381] ? find_held_lock+0x2b/0x80 [ 1638.137322][ T381] futex_wait_setup+0x9d/0x550 [ 1638.137370][ T381] __futex_wait+0x194/0x2f0 [ 1638.137410][ T381] ? __pfx___futex_wait+0x10/0x10 [ 1638.137455][ T381] ? __pfx_futex_wake_mark+0x10/0x10 [ 1638.137499][ T381] ? futex_private_hash_put+0x176/0x300 [ 1638.137547][ T381] ? futex_private_hash_put+0x18a/0x300 [ 1638.137584][ T381] futex_wait+0xe8/0x380 [ 1638.137623][ T381] ? __pfx_futex_wait+0x10/0x10 [ 1638.137681][ T381] do_futex+0x229/0x350 [ 1638.137715][ T381] ? __pfx_do_futex+0x10/0x10 [ 1638.137752][ T381] ? __pfx___schedule+0x10/0x10 [ 1638.137789][ T381] __x64_sys_futex+0x1e0/0x4c0 [ 1638.137824][ T381] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1638.137857][ T381] ? __pfx___x64_sys_futex+0x10/0x10 [ 1638.137905][ T381] do_syscall_64+0xcd/0x4c0 [ 1638.137949][ T381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.137977][ T381] RIP: 0033:0x7f69c778eba9 [ 1638.138000][ T381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1638.138027][ T381] RSP: 002b:00007f69c86de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1638.138054][ T381] RAX: ffffffffffffffda RBX: 00007f69c79d5fa8 RCX: 00007f69c778eba9 [ 1638.138073][ T381] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69c79d5fa8 [ 1638.138089][ T381] RBP: 00007f69c79d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1638.138107][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1638.138124][ T381] R13: 00007f69c79d6038 R14: 00007ffd229be170 R15: 00007ffd229be258 [ 1638.138159][ T381] [ 1638.396457][ T383] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1638.415025][ T383] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1639.175737][ T404] FAULT_INJECTION: forcing a failure. [ 1639.175737][ T404] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.282909][ T404] CPU: 1 UID: 0 PID: 404 Comm: syz.2.5023 Tainted: G U syzkaller #0 PREEMPT(full) [ 1639.282971][ T404] Tainted: [U]=USER [ 1639.282982][ T404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1639.283000][ T404] Call Trace: [ 1639.283011][ T404] [ 1639.283023][ T404] dump_stack_lvl+0x16c/0x1f0 [ 1639.283078][ T404] should_fail_ex+0x512/0x640 [ 1639.283131][ T404] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1639.283175][ T404] should_failslab+0xc2/0x120 [ 1639.283222][ T404] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1639.283263][ T404] ? sk_prot_alloc+0x60/0x2a0 [ 1639.283317][ T404] sk_prot_alloc+0x60/0x2a0 [ 1639.283349][ T404] sk_alloc+0x36/0xc20 [ 1639.283386][ T404] tipc_sk_create+0xcf/0x21a0 [ 1639.283520][ T404] ? find_held_lock+0x2b/0x80 [ 1639.283551][ T404] ? __sock_create+0x2f2/0x8d0 [ 1639.283586][ T404] __sock_create+0x335/0x8d0 [ 1639.283626][ T404] __sys_socket+0x14d/0x260 [ 1639.283669][ T404] ? __pfx___sys_socket+0x10/0x10 [ 1639.283704][ T404] ? xfd_validate_state+0x61/0x180 [ 1639.283751][ T404] __x64_sys_socket+0x72/0xb0 [ 1639.283779][ T404] ? lockdep_hardirqs_on+0x7c/0x110 [ 1639.283816][ T404] do_syscall_64+0xcd/0x4c0 [ 1639.283858][ T404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.283887][ T404] RIP: 0033:0x7f45e298eba9 [ 1639.283909][ T404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.283936][ T404] RSP: 002b:00007f45e0bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1639.283975][ T404] RAX: ffffffffffffffda RBX: 00007f45e2bd6180 RCX: 00007f45e298eba9 [ 1639.283994][ T404] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1639.284009][ T404] RBP: 00007f45e2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1639.284025][ T404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.284041][ T404] R13: 00007f45e2bd6218 R14: 00007f45e2bd6180 R15: 00007ffdbbccb348 [ 1639.284077][ T404] [ 1641.519690][T31177] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1641.527440][T31177] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1641.806375][ T444] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1643.354429][ T491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5036'. [ 1643.484756][ T494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5038'. [ 1644.751002][ T514] random: crng reseeded on system resumption [ 1645.043910][T31177] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1645.053855][T31177] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1646.938976][ T553] random: crng reseeded on system resumption [ 1649.362140][T31177] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1649.374617][T31177] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1649.914559][ T600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5059'. [ 1649.948993][ T598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5067'. [ 1651.667244][ T616] FAULT_INJECTION: forcing a failure. [ 1651.667244][ T616] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1651.885155][ T616] CPU: 1 UID: 0 PID: 616 Comm: syz.3.5060 Tainted: G U syzkaller #0 PREEMPT(full) [ 1651.885253][ T616] Tainted: [U]=USER [ 1651.885259][ T616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1651.885268][ T616] Call Trace: [ 1651.885277][ T616] [ 1651.885284][ T616] dump_stack_lvl+0x16c/0x1f0 [ 1651.885312][ T616] should_fail_ex+0x512/0x640 [ 1651.885337][ T616] get_futex_key+0x1d0/0x1560 [ 1651.885364][ T616] ? __pfx_get_futex_key+0x10/0x10 [ 1651.885381][ T616] ? __mutex_trylock_common+0xe9/0x250 [ 1651.885405][ T616] futex_wake+0xea/0x530 [ 1651.885429][ T616] ? __pfx_futex_wake+0x10/0x10 [ 1651.885456][ T616] do_futex+0x1e3/0x350 [ 1651.885478][ T616] ? __pfx_do_futex+0x10/0x10 [ 1651.885494][ T616] ? __might_fault+0xe3/0x190 [ 1651.885517][ T616] mm_release+0x24e/0x300 [ 1651.885535][ T616] do_exit+0x68e/0x2bf0 [ 1651.885559][ T616] ? __pfx_do_exit+0x10/0x10 [ 1651.885579][ T616] ? do_raw_spin_lock+0x20e/0x2b0 [ 1651.885600][ T616] ? find_held_lock+0x2b/0x80 [ 1651.885618][ T616] do_group_exit+0xd3/0x2a0 [ 1651.885639][ T616] get_signal+0x2673/0x26d0 [ 1651.885664][ T616] ? lock_acquire+0x179/0x350 [ 1651.885683][ T616] ? __pfx_get_signal+0x10/0x10 [ 1651.885698][ T616] ? do_futex+0x122/0x350 [ 1651.885715][ T616] ? __pfx_do_futex+0x10/0x10 [ 1651.885735][ T616] arch_do_signal_or_restart+0x8f/0x790 [ 1651.885756][ T616] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1651.885780][ T616] ? xfd_validate_state+0x61/0x180 [ 1651.885805][ T616] exit_to_user_mode_loop+0x84/0x110 [ 1651.885828][ T616] do_syscall_64+0x41c/0x4c0 [ 1651.885852][ T616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.885868][ T616] RIP: 0033:0x7f69c778eba9 [ 1651.885886][ T616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1651.885901][ T616] RSP: 002b:00007f69c867b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1651.885917][ T616] RAX: fffffffffffffe00 RBX: 00007f69c79d6278 RCX: 00007f69c778eba9 [ 1651.885926][ T616] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69c79d6278 [ 1651.885936][ T616] RBP: 00007f69c79d6270 R08: 0000000000000000 R09: 0000000000000000 [ 1651.885944][ T616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1651.885955][ T616] R13: 00007f69c79d6308 R14: 00007ffd229be170 R15: 00007ffd229be258 [ 1651.885981][ T616] [ 1652.131717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1652.500946][ T637] random: crng reseeded on system resumption [ 1652.778834][ T641] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1652.792872][ T641] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1655.300351][ T685] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1655.312944][ T685] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1656.931513][ T9258] Bluetooth: hci2: command 0x0406 tx timeout [ 1657.090262][ T713] ubi0: attaching mtd0 [ 1657.103312][ T713] ubi0: scanning is finished [ 1657.108314][ T713] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1657.492750][ T713] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1658.596863][ T726] netlink: 314 bytes leftover after parsing attributes in process `syz.2.5079'. [ 1659.047143][ T732] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1659.148638][ T732] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1659.467747][ T745] FAULT_INJECTION: forcing a failure. [ 1659.467747][ T745] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1659.513844][ T745] CPU: 1 UID: 0 PID: 745 Comm: syz.3.5084 Tainted: G U syzkaller #0 PREEMPT(full) [ 1659.513886][ T745] Tainted: [U]=USER [ 1659.513896][ T745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1659.513912][ T745] Call Trace: [ 1659.513922][ T745] [ 1659.513933][ T745] dump_stack_lvl+0x16c/0x1f0 [ 1659.513972][ T745] should_fail_ex+0x512/0x640 [ 1659.513998][ T745] get_futex_key+0x1d0/0x1560 [ 1659.514020][ T745] ? __pfx_get_futex_key+0x10/0x10 [ 1659.514036][ T745] ? trace_pid_list_is_set+0xfb/0x150 [ 1659.514057][ T745] ? do_raw_spin_unlock+0x172/0x230 [ 1659.514083][ T745] futex_wait_setup+0x9d/0x550 [ 1659.514110][ T745] __futex_wait+0x194/0x2f0 [ 1659.514131][ T745] ? __pfx___futex_wait+0x10/0x10 [ 1659.514151][ T745] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1659.514171][ T745] ? lockdep_hardirqs_on+0x7c/0x110 [ 1659.514193][ T745] ? __pfx_futex_wake_mark+0x10/0x10 [ 1659.514217][ T745] ? futex_private_hash_put+0x176/0x300 [ 1659.514236][ T745] ? futex_private_hash_put+0x18a/0x300 [ 1659.514275][ T745] futex_wait+0xe8/0x380 [ 1659.514314][ T745] ? __pfx_futex_wait+0x10/0x10 [ 1659.514361][ T745] ? lock_acquire+0x179/0x350 [ 1659.514398][ T745] do_futex+0x229/0x350 [ 1659.514432][ T745] ? __pfx_do_futex+0x10/0x10 [ 1659.514463][ T745] ? fd_install+0x244/0x750 [ 1659.514493][ T745] __x64_sys_futex+0x1e0/0x4c0 [ 1659.514526][ T745] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1659.514557][ T745] ? __pfx___x64_sys_futex+0x10/0x10 [ 1659.514606][ T745] do_syscall_64+0xcd/0x4c0 [ 1659.514643][ T745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.514669][ T745] RIP: 0033:0x7f69c778eba9 [ 1659.514693][ T745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1659.514725][ T745] RSP: 002b:00007f69c86de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1659.514752][ T745] RAX: ffffffffffffffda RBX: 00007f69c79d5fa8 RCX: 00007f69c778eba9 [ 1659.514770][ T745] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69c79d5fa8 [ 1659.514786][ T745] RBP: 00007f69c79d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.514803][ T745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1659.514818][ T745] R13: 00007f69c79d6038 R14: 00007ffd229be170 R15: 00007ffd229be258 [ 1659.514854][ T745] [ 1660.415060][ T757] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1660.470245][ T757] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1662.090504][ T791] random: crng reseeded on system resumption [ 1662.786147][ T795] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1662.827302][ T795] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1663.815573][ T818] netlink: 338 bytes leftover after parsing attributes in process `syz.2.5096'. [ 1663.962627][ T823] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 1663.995649][ T824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5098'. [ 1664.439491][ T827] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1664.596533][ T828] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 1665.002047][ T842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5100'. [ 1666.168276][ T866] random: crng reseeded on system resumption [ 1666.286663][ T871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5114'. [ 1668.350535][ T893] netlink: 338 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1668.570386][ T890] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1668.601737][ T890] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1669.122181][ T896] FAULT_INJECTION: forcing a failure. [ 1669.122181][ T896] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1669.143291][ T896] CPU: 0 UID: 0 PID: 896 Comm: syz.1.5110 Tainted: G U syzkaller #0 PREEMPT(full) [ 1669.143332][ T896] Tainted: [U]=USER [ 1669.143341][ T896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1669.143355][ T896] Call Trace: [ 1669.143365][ T896] [ 1669.143374][ T896] dump_stack_lvl+0x16c/0x1f0 [ 1669.143416][ T896] should_fail_ex+0x512/0x640 [ 1669.143460][ T896] get_futex_key+0x1d0/0x1560 [ 1669.143495][ T896] ? __pfx_get_futex_key+0x10/0x10 [ 1669.143521][ T896] ? kasan_save_stack+0x33/0x60 [ 1669.143550][ T896] ? __kasan_slab_alloc+0x89/0x90 [ 1669.143578][ T896] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1669.143604][ T896] ? security_file_alloc+0x34/0x2b0 [ 1669.143637][ T896] ? init_file+0x93/0x4c0 [ 1669.143671][ T896] ? alloc_empty_file+0x73/0x1e0 [ 1669.143706][ T896] ? alloc_file_pseudo+0x13a/0x230 [ 1669.143741][ T896] ? __anon_inode_getfile+0xe8/0x280 [ 1669.143771][ T896] ? anon_inode_getfd+0x52/0xb0 [ 1669.143801][ T896] ? __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 1669.143831][ T896] ? do_syscall_64+0xcd/0x4c0 [ 1669.143874][ T896] futex_wait_setup+0x9d/0x550 [ 1669.143924][ T896] __futex_wait+0x194/0x2f0 [ 1669.143964][ T896] ? __pfx___futex_wait+0x10/0x10 [ 1669.144008][ T896] ? __pfx_futex_wake_mark+0x10/0x10 [ 1669.144053][ T896] ? futex_private_hash_put+0x176/0x300 [ 1669.144090][ T896] ? futex_private_hash_put+0x18a/0x300 [ 1669.144124][ T896] futex_wait+0xe8/0x380 [ 1669.144162][ T896] ? __pfx_futex_wait+0x10/0x10 [ 1669.144211][ T896] ? lock_acquire+0x179/0x350 [ 1669.144248][ T896] do_futex+0x229/0x350 [ 1669.144295][ T896] ? __pfx_do_futex+0x10/0x10 [ 1669.144330][ T896] ? fd_install+0x244/0x750 [ 1669.144362][ T896] __x64_sys_futex+0x1e0/0x4c0 [ 1669.144397][ T896] ? __do_sys_landlock_create_ruleset+0x2b2/0x4e0 [ 1669.144427][ T896] ? __pfx___x64_sys_futex+0x10/0x10 [ 1669.144475][ T896] do_syscall_64+0xcd/0x4c0 [ 1669.144513][ T896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.144541][ T896] RIP: 0033:0x7f42bf78eba9 [ 1669.144563][ T896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.144588][ T896] RSP: 002b:00007f42c059f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1669.144614][ T896] RAX: ffffffffffffffda RBX: 00007f42bf9d5fa8 RCX: 00007f42bf78eba9 [ 1669.144632][ T896] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f42bf9d5fa8 [ 1669.144649][ T896] RBP: 00007f42bf9d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.144667][ T896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1669.144742][ T896] R13: 00007f42bf9d6038 R14: 00007ffed4484040 R15: 00007ffed4484128 [ 1669.144780][ T896] [ 1670.007396][ T924] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1670.051500][ T924] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1671.383467][ T967] random: crng reseeded on system resumption [ 1673.092482][ T994] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1673.633361][ T1008] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1673.659303][ T1008] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1673.802508][ T1017] netlink: 338 bytes leftover after parsing attributes in process `syz.0.5128'. [ 1675.335253][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.346052][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.389207][ T1074] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1676.518987][ T1082] netlink: 338 bytes leftover after parsing attributes in process `syz.0.5139'. [ 1676.886597][ T1092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5140'. [ 1677.008886][ T1095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1677.021770][ T1095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1677.930921][ T1113] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1677.948949][ T1113] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1680.267107][ T1154] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1680.938527][ T1166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5156'. [ 1681.068051][ T9258] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1681.080738][ T9258] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1681.194069][ T1172] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1681.209513][ T1172] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1682.313597][T23210] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1682.322546][T23210] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1682.533908][T23210] Bluetooth: hci1: command 0x0406 tx timeout [ 1683.723171][ T1221] netlink: 326 bytes leftover after parsing attributes in process `syz.2.5165'. [ 1684.127391][ T1225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5168'. [ 1684.465666][ T1240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1685.242760][ T1244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5171'. [ 1685.407079][T31177] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1685.414277][T31177] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1686.359881][ T1259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5173'. [ 1686.486121][ T1264] random: crng reseeded on system resumption [ 1686.503967][ T1257] netlink: 314 bytes leftover after parsing attributes in process `syz.0.5174'. [ 1687.650183][T28717] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 1687.660461][T28717] ref_tracker: netdev@ffff888030002610 has 1/1 users at [ 1687.660461][T28717] batadv_hard_if_event+0xbb7/0x1550 [ 1687.660461][T28717] notifier_call_chain+0xb9/0x410 [ 1687.660461][T28717] call_netdevice_notifiers_info+0xbe/0x140 [ 1687.660461][T28717] register_netdevice+0x182e/0x2270 [ 1687.660461][T28717] veth_newlink+0x446/0xa00 [ 1687.660461][T28717] rtnl_newlink+0xc42/0x2000 [ 1687.660461][T28717] rtnetlink_rcv_msg+0x95e/0xe90 [ 1687.660461][T28717] netlink_rcv_skb+0x155/0x420 [ 1687.660461][T28717] netlink_unicast+0x5aa/0x870 [ 1687.660461][T28717] netlink_sendmsg+0x8d1/0xdd0 [ 1687.660461][T28717] __sys_sendto+0x4a0/0x520 [ 1687.660461][T28717] __x64_sys_sendto+0xe0/0x1c0 [ 1687.660461][T28717] do_syscall_64+0xcd/0x4c0 [ 1687.660461][T28717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.660461][T28717]