last executing test programs: 22.745571872s ago: executing program 1 (id=3432): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) (fail_nth: 1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0xff, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1059a0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?\xf8\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/28, 0x1c) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x6, 0xa, 0x0, &(0x7f0000000240)=0x20009) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000440)=@prog_bind_map={r1, 0xffffffffffffffff, 0x2}, 0xd) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x5) 21.003653108s ago: executing program 1 (id=3433): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0xff, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1059a0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?\xf8\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/28, 0x1c) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x6, 0xa, 0x0, &(0x7f0000000240)=0x20009) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000440)=@prog_bind_map={r1, 0xffffffffffffffff, 0x2}, 0xd) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x5) 19.47278901s ago: executing program 1 (id=3434): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0xff, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1059a0, 0x0) setresuid$auto(0x2, 0x7, 0x8080) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x7}, 0x7, 0x300000000000, 0x6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x200000000000, 0x9f24, 0x0) r2 = prctl$auto(0x3a, 0x1, 0x0, 0x1, 0x413) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?\xf8\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/28, 0x1c) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x6, 0xa, 0x0, &(0x7f0000000240)=0x20009) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000440)=@prog_bind_map={r1, 0xffffffffffffffff, 0x2}, 0xd) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x5) 10.069139136s ago: executing program 0 (id=3440): mmap$auto(0x2, 0x20009, 0x3fe, 0xeb1, 0x401, 0x7ffc) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000001740), 0x2, 0x0) preadv$auto(r0, &(0x7f0000000240)={0x0, 0x8}, 0x2, 0x0, 0xfffffffffffffffa) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_background_ratio\x00', 0x141241, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mremap$auto(0x0, 0x5ac2, 0x4, 0x7, 0x100800000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x5], {0x9, 0xfffffff9, 0xfffffffd, 0x29b, 0x100, 0x4, 0x101, 0x4000006, 0x2000}, {0x2, 0x1, 0x52, 0x3, 0x1, 0x6, 0x104, 0x3ff, 0x100000000}}) r2 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) fsconfig$auto(0xffffffffffffffff, 0x9, &(0x7f0000000100)='(%-.\x00', &(0x7f0000000280), r2) mmap$auto(0x0, 0x83, 0xc00000072, 0x8b72, 0x1000000002, 0x5) sendmsg$auto_GTP_CMD_DELPDP(r1, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x45f1fdedc6398cd1}, 0x800) r3 = io_uring_setup$auto(0x8, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x536, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdf, 0x70f, 0x5}, {0x3, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x4, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=0x0, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES64=r0, @ANYRESHEX=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20000028}, 0x8004) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) 9.539825052s ago: executing program 2 (id=3441): mmap$auto(0x0, 0x4, 0x4000000000df, 0x9016, 0x401, 0x300000000000) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x0, 0x8, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5e, 0x51}, &(0x7f0000000580)={0x5, 0xdb34}) r0 = setfsgid$auto(0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nfc={0x27, 0x0, 0x6, 0x6}, 0x66) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) unshare$auto(0x80000000) rseq$auto(0x0, 0x20e0, 0x2000, 0x2) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/dev_snmp6/bond_slave_1\x00', 0x16bd00, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x4000000) keyctl$auto(0xffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x7fff) pread64$auto(r1, 0x0, 0x100000001, 0x400000000000100) acct$auto(&(0x7f0000002c40)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00') ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x100}) setsockopt$auto(0xffffffffffffffff, 0x7, 0x11d, 0x0, 0x20a) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)=0xece6) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)="e28d2a7f61a08147475e2c4adb0a9abca15e7382edf1eaaac86d291ab608d6edf4b95cb1e672ef6f20dffe1fad88d68911f8981457e38f757ac5d0ef9e813dfd3847c2cb8ffda6d53ca1d5927a932e8e5a7c308d6cb3fc76aa4b70f6aa1510ff269fe7ed6698c13eb376e0c9bdb2e529e39cb493fac4d8d15c7b8181c0fc8d3e22a2dc936662c2323a85") r3 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(0x0, 0x401, 0x9, 0xffffffffffffffff, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r0, 0x37f) futimesat$auto(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x6, 0x1ff}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.983500225s ago: executing program 3 (id=3442): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x8) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x9) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)={0x83, 0x5, 0x0, 0x3, &(0x7f00000000c0)="d16e6dec31ffffff30449d598a9410139ea50eddc327a2d54603365a5ab4f0996c4df139ad1b4f888176738265ffff", 0x6, 0x10, 0xffffffff, @stream_id=0x17f, 0x2084c, 0xc9bf, 0x0, [{0x7, 0x4, 0xe}, {0x8, 0x6, 0x8001}, {0x2000002, 0x8}, {0x3, 0x6, 0x10000}]}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000000)='\x1e\x00\x00\x00\x00k\x00\x00\x05\x00\x01\x00\x00\xa3\x1f\x00\x00\x00\x00HD\x03:,P\v\xe3\xbeu\xca\xe1[\x82\x1bm\xf1C', 0x8000000000000001) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3fffff, 0x7fff, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000000c0)="22edd92f26639ec0023a8686bd579dcf16f50e9bfa20abfa3a30", 0x1a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x4, 0x0, 0x0) setfsgid$auto(0x0) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x1b201, &(0x7f0000000240)=@bpf_attr_5={@target_fd=r1, r2, 0x8, 0x2, 0xffffffffffffffff, @relative_fd=r2, 0x3}, 0x8) mmap$auto(0xffffffffffffffff, 0xd1, 0x8000000000000005, 0xeb2, 0xffffffffffffffff, 0x8003) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a0200, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xffffffffffffff1c) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) select$auto(0x0, 0x0, &(0x7f0000000080)={[0x400000209c, 0x74, 0x4, 0x8001, 0x3, 0x100000004, 0x2c2, 0x800000800002017d, 0x7, 0x102000008000000, 0xd, 0x80000000000d59, 0x562, 0xff, 0xffffffffffffffff, 0x100000005]}, 0x0, 0x0) 7.986504484s ago: executing program 0 (id=3443): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = fspick$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x7) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x9) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000004c0)={0xfd, 0x5, 0x0, 0x4, &(0x7f00000000c0)="d16b4e081fdef5ff30449d598a9410139aa50eddc327a2d54603365aff444f306c4df129a91bab8881767372479606ae0c9553687a9aefff79dc5385d6b85dc1942ab4", 0x6, 0x10, 0xffffffff, @number_of_packets=0xf7ffffff, 0x2084c, 0xc9bc, 0x0, [{0x7, 0x5, 0xc}, {0x5, 0x94, 0x5}]}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/rc_rateidx_mcs_mask_5ghz\x00', 0x88000, 0x0) read$auto(r1, &(0x7f0000001200)='\x00', 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="000828bd7000fedbdf251f000000df007f003fb1b88d4992975305d801f296dffc2d7f40d05201e776480c277d54e4d372c7f4e534b7fdbd0a5caef322aef797afc0f3871c77a4de2f6f26a065cb91e1a882722a0ce5948b8316ff65ea462142f7ed83c057e89443c3cdf19acae44c26157128261cf9ab0fa3513cebfc4b15beb71ab6df40318237717e9f4fba471c0ecffcc12a9514886156a8eed0948ff5f00835b696315d2eb3fdccaae85450bec6fbae6dc590d1f437bac21e1c363071194ba88a6eab3160d0e62054de92cdc0c225f9d6429a356744f40787c8dad996248c1d43f2f72d142da21a50b2af0006001200000000004000328005000200070000000500010003000000050003000f000000080004aaaa5cc175b80fbcd3722a93a63536c0dda376124a4a7bf9a52309d68a2f96271b1e94485d12d56554d49581568bc64fd6af4c59259c86d537e9cf1f1569fe5940cf01f68e8a0c79232d2f3e3edaa8fa4ba291a4d90c2507468dd3b7ac32f648ddc5a34c02d54522e0d09db8fbdb6f7c0a98e57ef4a45d89f6c811d50524f5116d25a0d730f70ea5faa6d8bd47459af684fcb5f6336c55df8f6a8e3c4ecb19ecd22cb6accea74efbed7a692ab360764fa98358b43752a7664e75f4f8ed8988443712f66414425abad4ec1072d77bc5d3328b52f885cea297d6e996be72a187bff8f37e3dc2a1e1e4f21ef5dcbce4a07c1e789f02ed2660f6f3fd41de3483ad1053e0bc138c1cc1ff99bb2884bac2378b54e627ebcbab6abef514c3292e76522dab32e38544f8aa86df2f79b4734333139077ddae49cac2aae07e9623c81c82439155ba3426defc4a06a89e39d5b54f45c93917a96af3008bd02468b66ffac6a7ff258bd3b39003ce5f6e3c5b", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x144}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x7fff, 0x2}, 0x6a) timer_create$auto(0x4, 0x0, &(0x7f0000000280)=0x5) r2 = setfsgid$auto(0x0) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) msgctl$auto(0x201, 0x48, &(0x7f0000000540)={{0x0, 0xffffffffffffffff, r2, 0x2, 0x6, 0x3, 0xffff}, &(0x7f0000000140), &(0x7f00000001c0)=0x6, 0x7, 0x7fffffff, 0x2, 0x5, 0x10001, 0x4, 0xfffb, 0x1000}) keyctl$auto(0xe, r3, 0x7, 0xfffffffffff00003, 0x2) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x1d9882, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000280)={0x9, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0xb) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 7.934163136s ago: executing program 3 (id=3444): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x400, &(0x7f0000000380)="d05073a9f2b04b8d147fe0e7534f52f5130fff2e5cd1341f16dd30194588444a06242f68c25dd13f73f3e7c8bf4f78b9a03a0389ebc44980c0d4483041fd593d6c3582ca791a6fb89510a9b307f2b5348d5db71315561e4390d8e7c9c9e3a62b82859553a598aad370f2b459efe06a7a9f361b2d2e88938ab5d8c502ed478e624f8500"/155, 0x4b47, 0x3, 0x4080005, @number_of_packets=0x2, 0x101, 0xa, 0x0, [{0x0, 0x9, 0x4}, {0xe0, 0xf5e, 0xfd}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = prctl$auto_PR_SYS_DISPATCH_OFF(0x15, 0x0, 0x0, 0x9, 0x7) unshare$auto(0x2) unshare$auto(0x40000080) setns(0xc9, 0x0) mmap$auto(0x0, 0x80004, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x15, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop12\x00', 0x101a00, 0x0) socketpair$auto(0x1, 0x5, 0x1, 0x0) fanotify_init$auto(0x65, 0x2) dup2$auto(0x5, 0x4) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r1, 0x0, 0xb5ed87b5117da2c8) r3 = socket(0x8, 0x80000, 0x80000003) ioctl$sock_SIOCGIFINDEX(r3, 0x400261f2, &(0x7f0000000140)={'veth1_macvtap\x00'}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000100)={0x5e, 0xa72a}, &(0x7f0000000000)={0x1, 0x80000000}) setfsgid$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) setsockopt$auto(r0, 0x2, 0x7f, &(0x7f00000000c0)='\xcb\'\x00', 0x7) shutdown$auto(r2, 0x108) 7.929305016s ago: executing program 2 (id=3445): read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2400, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x5, 0xa}, 0x5, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000001240)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r1 = io_uring_setup$auto(0x5b, &(0x7f0000001280)={0x7fffffff, 0x65, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74e, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x8}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x4, 0x100000004}}) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1c/sub7/xrun_injection\x00', 0x1cb902, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) write$auto(r2, 0x0, 0x7) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x220080d0) shmctl$auto_SHM_UNLOCK(0x5, 0xc, &(0x7f00000010c0)={{0x1, 0xee01, 0xee01, 0x1, 0x7, 0x3, 0x6}, 0xe, 0x9, 0x8, 0x1, @inferred=0x0, @inferred, 0x6, 0x0, 0x0, &(0x7f0000001300)="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"}) msgctl$auto_MSG_STAT_ANY(0x206, 0xd, &(0x7f00000011c0)={{0x2, r4, r5, 0xe, 0xb05, 0x6, 0x901e}, &(0x7f0000001140)=0x1, &(0x7f0000001180)=0xd, 0x0, 0x8, 0x345c, 0x1, 0x0, 0x1, 0x9, 0x800, @inferred=r6, @inferred=r6}) keyctl$auto(0x1f, r4, 0x6, r5, 0x3fb) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) recvmmsg$auto(r1, 0x0, 0x10000, 0x700, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/scsi/scsi\x00', 0x28802, 0x0) 6.319412921s ago: executing program 2 (id=3446): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, 0x0, 0x6) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1e000000", @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a90950735e7b19172f", 0xa) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) ioprio_get$auto(0xfffffffe, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x2000, 0x0) socket(0x1, 0x5, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x8000, 0x0) r3 = socket(0xa, 0x801, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0x4000000000002) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x15, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0xb, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) pread64$auto(r2, 0x0, 0x2, 0x5) (fail_nth: 1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 6.267354729s ago: executing program 0 (id=3447): r0 = eventfd$auto(0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) socket(0x2, 0x5, 0xb) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1e9080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x103861, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/wg1/retrans_time\x00', 0x82, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) (fail_nth: 1) 6.165964502s ago: executing program 3 (id=3448): r0 = eventfd$auto(0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) socket(0x2, 0x5, 0xb) mmap$auto(0xffffffffffffffff, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) read$auto_proc_pagemap_operations_internal(r1, &(0x7f0000001540)=""/209, 0xd1) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1, 0x1, 0x102) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x10fa02, 0x0) r5 = setfsgid$auto(0xee01) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x640a00, 0x0) r6 = semctl$auto(0xb, 0x10000, 0x7ffffffc, 0x4) shmctl$auto_SHM_STAT_ANY(0x2, 0xf, &(0x7f0000002640)={{0xc7d6, 0xffffffffffffffff, r5, 0x6, 0xf, 0x7, 0x7}, 0x7, 0x0, 0x9, 0x10001, @raw=0x5, @inferred=r6, 0x0, 0x0, &(0x7f0000000080)="05a2eca32c60f9c41d7526b6deeb5553489303f607aa2a757e02fe7f10fa9bc2abea69916631566fbb8ca43d4fa7a408a64ecee490", &(0x7f0000001640)="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"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x4b564d00, 0x7, 0x1000}]}) keyctl$auto(0x1f, 0x0, 0x6, 0xee01, 0x3) 6.055342065s ago: executing program 1 (id=3434): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0xff, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub6/xrun_injection\x00', 0x1059a0, 0x0) setresuid$auto(0x2, 0x7, 0x8080) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) preadv$auto(0xffffffffffffffff, &(0x7f0000002100)={0x0, 0x7}, 0x7, 0x300000000000, 0x6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x200000000000, 0x9f24, 0x0) r2 = prctl$auto(0x3a, 0x1, 0x0, 0x1, 0x413) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88d\x11\x00\x00\x00\x00?\xf8\xff\xff\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/28, 0x1c) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x6, 0xa, 0x0, &(0x7f0000000240)=0x20009) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000440)=@prog_bind_map={r1, 0xffffffffffffffff, 0x2}, 0xd) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x5) 4.542713191s ago: executing program 0 (id=3449): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552") openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, 0x0, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/92, 0x5c) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) socket(0x11, 0x80003, 0x300) 4.523016728s ago: executing program 2 (id=3450): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffffffffffff8, 0x4080000000, 0x4, 0xab1, r0, 0x200000000a6) r1 = socket(0xf, 0x4, 0x4) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = socket(0xa, 0x2, 0x3a) r3 = socket(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r3) setsockopt$auto(r2, 0x29, 0x3e, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) read$auto_proc_tid_children_operations_internal(0xffffffffffffffff, &(0x7f00000005c0)=""/34, 0x22) r4 = pidfd_open$auto(0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000240)={0x1000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket(0x8, 0x6, 0xffffffff) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x8002) r6 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000180), r1) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x200}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x8}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x958a}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x4}, @HANDSHAKE_A_ACCEPT_HANDLER_CLASS={0x8, 0x2, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) open_tree_attr$auto(r4, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xd16, &(0x7f0000000040)={0x1800000, 0x4, 0x4, @raw}, 0xc8) writev$auto(0x3, 0x0, 0x8) open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) inotify_init1$auto(0x3000000000000) clone3$auto(0x0, 0x7ff) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.452564114s ago: executing program 3 (id=3451): r0 = socket(0xa, 0x4, 0x9000300) sendfile$auto(r0, r0, 0x0, 0x8001) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x55d042, 0x0) preadv2$auto(r1, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) r2 = fanotify_init$auto(0xf8, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0008, 0x17) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo$auto(r4, r3, 0xb, &(0x7f0000000400)={@siginfo_0_0={0x1, 0x6, 0x81, @_sigpoll={0x2}}}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_RRK={0x38, 0xfc, "e5dd59d01f9c1d89644b38bc92830d911b1d118ec67124b4b56e828f93bc0538f2b7413bd74d65cf9861a2afc177ee5a4fa320b7"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r6 = socket(0xa, 0x801, 0x84) r7 = getsockopt$auto(r6, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) unshare$auto(0x40000080) mmap$auto(0x1, 0x1, 0x3, 0xeb1, r7, 0x8000) r8 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/lru_gen\x00', 0x800, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) ioctl$auto(r8, 0x921064a0, r8) mbind$auto(0x0, 0x7, 0xfffffffd, 0x0, 0x6, 0x1) madvise$auto(0x0, 0x20499d, 0x9) 4.434986035s ago: executing program 1 (id=3452): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, 0xfffffffffffffffa) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mremap$auto(0x0, 0x5ac2, 0x4, 0x7, 0x100800000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000280), 0x0) mmap$auto(0x0, 0x83, 0xc00000072, 0x8b72, 0x1000000002, 0x5) sendmsg$auto_GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x894) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x20000028}, 0x8004) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) 2.979972655s ago: executing program 2 (id=3453): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) preadv$auto(0xffffffffffffffff, 0x0, 0x2, 0x0, 0xfffffffffffffffa) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) mremap$auto(0x0, 0x5ac2, 0x4, 0x7, 0x100800000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) fsconfig$auto(0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000280), 0x0) mmap$auto(0x0, 0x83, 0xc00000072, 0x8b72, 0x1000000002, 0x5) sendmsg$auto_GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x894) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x20000028}, 0x8004) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) 2.771406664s ago: executing program 0 (id=3454): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f00000003c0)="ceb4489daadaae2a0ee670222dc17823a86e01e2c1ba30fe2832d1310e016948f4a70608d630b4efa63fecf96319734eea004c43f713797cb850a18f2a573e2d0d414d54be5258bba3be8817d2110fdcc972543aa53935e4ef29daf5d55193dee60e82fe60118845823fa65acc2726d90ac11aaca8e19fea6392c18e554f9ca05492f8ef42c4f212c40b3327809a1486d3fc2a3356ab51aaff2b11cb306765145178214014edbf5e") unshare$auto(0x0) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd6\x00', 0x58200, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/sctp/rto_min\x00', 0x81, 0x0) unshare$auto(0x7) write$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000090) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) bind$auto(0x3, &(0x7f0000000380)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0c/sub5/info\x00', 0x145400, 0x0) getdents64$auto(r2, 0x0, 0x200c8) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x9c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xc}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_ED_LIST={0x1f, 0x16, "f3c31767a53cd7d230745a605831405dfc8c97b4f153b0c4891407"}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "1f157f25c4d4aee13a0ad7f91afd18efa21a36afba0bd88491871fd195e50cfe"}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004040}, 0x40) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/kvm/insn_emulation_fail\x00', 0xa2540, 0x0) read$auto_stat_fops_per_vm_kvm_main(r3, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.759119204s ago: executing program 1 (id=3455): unshare$auto(0x40000080) r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) process_madvise$auto_MADV_DONTDUMP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)="c40f18ed24f8a9343f868adbc03c4d06abf8a3eb674cae4d26df9b972d9acaa0ddc899d92fdbf19cdd095b21ee", 0x9}, 0x64e1b10a, 0x10, 0x3) setsockopt$auto(r0, 0x6, 0x6, &(0x7f0000000080)='*\x00', 0xe6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) utimes$auto(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffd) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r2, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) (fail_nth: 1) 2.292893979s ago: executing program 3 (id=3456): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000580)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\xdcn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xfff\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xa9\x8d\xda\x19\xae,\x95k8\x83\xcf\xc5D\xcc|\xc4\xc1wN\x83\xec\xf5\xd5\x102\xf7\x14\xdd\xfc\xf5\xdf[$\xdc@C\xc5N\x88\xe8\xc9p\xce\x90b\x86\xf0\tq\xa3\x914g\x18F\xe0od#\xd4\xbcw?\xe9s\xa7`\x10\xe8\xb3\xaaI\xf9\xd2Z\xb6\x98\b\xdf\r\xc5\xa8\xe7G\xcd\x03J\x1eF\xcf\xdf\xb5\x1f\x1b~\xbb\xe5\x91\x11\x13\xea7eez\xec\x89h\xe6\xdaf\x8a\xe8\x13\x9f\x16\xd4\xe2\"\xa1\x9d\xcc\x9d\x1a\x1f\xd6\xc0\xca\"A/6\x80H\x8av\x9a \f9\xd9\xf9=\b\xf3\x1d\xca%\x98|\xbd\xab\xeai\xe3c-E\xd6+6\x96N\'\xea\xdd\x96\xf6\xfb\xcd\x94\xf7\xc6\xf5\x93 \x00\x17\xdc\xcd\xc9\xff\x1a\xb6\x8d\xeb\xb0\xc2\xac\"\x16\xc5\xed\xeb&>\xa7U\xa6\xa5O\xf2{\x16\xfb\x9cA\x17{6\x92\x02\x0e\'\x1d0\xb6\xaf8\xc8\x03\xf42\xa1\x1c\x14j\xc9$\x02\xd8\xc1;\xdf:m\xce8M', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0x1, 0x5, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x109001, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP2(r1, 0x40044103, &(0x7f0000001000)) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x8602, 0x0) read$auto(r2, 0x0, 0x4b) ioctl$auto_TIOCGSID2(0xffffffffffffffff, 0x5429, &(0x7f0000000440)="1af0882fc75e565484b366b8f2174cbb77a0a14a817eaf2719d49806d2f4c0dfa50f0219e0994a4498fb0071ee944065e29f1757ee15bfade8c77870ce1a1ce55fda5adb02531c453a3462fcd4ca2b7c594f7a162e1b4305b6bc4514b3480851739010b50ae156c420d07d3d7328b4f6fd13083cda17c94c8f66d5b305c8800edaf51a0fb6fd6e90e5afcbedb872909a8095ed846d8358d43586b2f684ec530fbecb6d6b978f86941542e7f077f5ec1b59c801ff3c38de8210ea3c410ec73ad4581e1a") sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0xfffffffffffffd6c}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x55) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), r3) r4 = ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x2000000, 0x2000000000008000}) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0xd) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyp8\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8502, 0x0) umount2$auto(&(0x7f0000000140)='\x92\xca\xce$\xba\xd4\xae\x87<\x88\xf0Z\x9c\'\xf2\xcd\x12\xc9X\x8f', 0xfffffffd) r5 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) read$auto_hwsim_fops_ps_(r5, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.165975561s ago: executing program 2 (id=3457): unshare$auto(0x40000080) r0 = socket(0x2, 0x1, 0x106) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) process_madvise$auto_MADV_DONTDUMP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000140)="c40f18ed24f8a9343f868adbc03c4d06abf8a3eb674cae4d26df9b972d9acaa0ddc899d92fdbf19cdd095b21ee", 0x9}, 0x64e1b10a, 0x10, 0x3) setsockopt$auto(r0, 0x6, 0x6, &(0x7f0000000080)='*\x00', 0xe6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) utimes$auto(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffd) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r2, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x601, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80004, @stream_id=0x7, 0x2004b, 0xc, 0x0}) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setfsgid$auto(0xee01) 781.716181ms ago: executing program 0 (id=3458): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x4080005, @stream_id=0x7, 0x2004c, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x1, 0x400058dc, 0x101}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = socket(0x1a, 0x803, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) r2 = getpid() syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r2], 0x1}, 0x58) fcntl$auto(r1, 0x80, r2) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x85, 0x3, 0x8}, 0x9, 0x1ff, 0x6, 0x1, @raw=0x2, @inferred=0xffffffffffffffff, 0xffff, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x8201, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)="fc06c1f730b9d2867a8ba29f242cf38f59f712fcd917fee796") openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f) 0s ago: executing program 3 (id=3459): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5e, 0x1}, &(0x7f0000000580)={0x1, 0xdb36}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x11c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) pread64$auto(r0, 0x0, 0x100000001, 0x400000000000100) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) ioctl$auto_BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)) fanotify_mark$auto(0x0, 0x401, 0x9, 0xffffffffffffffff, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f) r1 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000780)={@siginfo_0_0={0x1, 0x401, 0x7, @_sigsys={0x0, 0x77f, 0x1007}}}, 0x5, &(0x7f0000000800)={{0x1, 0x10000}, {0x4}, 0x7, 0x5, 0xc, 0x8, 0x7ff, 0x62, 0x9, 0x10000, 0xc9, 0x9, 0x2, 0x0, 0x7fffffff, 0x5}) setpgid$auto(0x0, r1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) kernel console output (not intermixed with test programs): 595.364827][T31020] sk_prot_alloc+0x60/0x2a0 [ 1595.364859][T31020] sk_alloc+0x36/0xe80 [ 1595.364896][T31020] unix_create1+0xa6/0x700 [ 1595.364939][T31020] unix_create+0x10f/0x1b0 [ 1595.364977][T31020] __sock_create+0x339/0x860 [ 1595.365016][T31020] __sys_socket+0x14d/0x260 [ 1595.365048][T31020] ? __pfx___sys_socket+0x10/0x10 [ 1595.365091][T31020] __x64_sys_socket+0x72/0xb0 [ 1595.365122][T31020] ? lockdep_hardirqs_on+0x7d/0x110 [ 1595.365151][T31020] do_syscall_64+0x121/0x770 [ 1595.365185][T31020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.365211][T31020] RIP: 0033:0x7fcbb199e199 [ 1595.365232][T31020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.365255][T31020] RSP: 002b:00007fcbb281d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1595.365280][T31020] RAX: ffffffffffffffda RBX: 00007fcbb1c26450 RCX: 00007fcbb199e199 [ 1595.365298][T31020] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 1595.365314][T31020] RBP: 00007fcbb1a350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1595.365330][T31020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1595.365346][T31020] R13: 00007fcbb1c264e8 R14: 00007fcbb1c26450 R15: 00007ffcfd9470f8 [ 1595.365381][T31020] [ 1596.875326][T31024] batman_adv: Routing algorithm 'Q' is not supported [ 1598.762235][T31090] FAULT_INJECTION: forcing a failure. [ 1598.762235][T31090] name failslab, interval 1, probability 0, space 0, times 0 [ 1598.762273][T31090] CPU: 0 UID: 0 PID: 31090 Comm: syz.0.3117 Not tainted syzkaller #0 PREEMPT(full) [ 1598.762301][T31090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1598.762316][T31090] Call Trace: [ 1598.762324][T31090] [ 1598.762333][T31090] dump_stack_lvl+0x100/0x190 [ 1598.762375][T31090] should_fail_ex.cold+0x5/0xa [ 1598.762412][T31090] should_failslab+0xc2/0x120 [ 1598.762450][T31090] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1598.762497][T31090] ? __d_alloc+0x35/0xa50 [ 1598.762543][T31090] __d_alloc+0x35/0xa50 [ 1598.762584][T31090] d_alloc_pseudo+0x1c/0xc0 [ 1598.762612][T31090] alloc_file_pseudo+0x118/0x290 [ 1598.762653][T31090] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1598.762692][T31090] ? alloc_fd+0x471/0x7a0 [ 1598.762730][T31090] sock_alloc_file+0x50/0x210 [ 1598.762761][T31090] __sys_socket+0x1c0/0x260 [ 1598.762795][T31090] ? __pfx___sys_socket+0x10/0x10 [ 1598.762839][T31090] __x64_sys_socket+0x72/0xb0 [ 1598.762871][T31090] ? lockdep_hardirqs_on+0x7d/0x110 [ 1598.762903][T31090] do_syscall_64+0x121/0x770 [ 1598.762937][T31090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.762962][T31090] RIP: 0033:0x7fe292f9e199 [ 1598.762982][T31090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.763004][T31090] RSP: 002b:00007fe293ead028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1598.763029][T31090] RAX: ffffffffffffffda RBX: 00007fe293226450 RCX: 00007fe292f9e199 [ 1598.763045][T31090] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 1598.763059][T31090] RBP: 00007fe2930350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1598.763074][T31090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1598.763088][T31090] R13: 00007fe2932264e8 R14: 00007fe293226450 R15: 00007ffcdbb68168 [ 1598.763121][T31090] [ 1598.767422][T31090] batman_adv: Routing algorithm '{' is not supported [ 1600.577652][T31122] FAULT_INJECTION: forcing a failure. [ 1600.577652][T31122] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.577694][T31122] CPU: 1 UID: 0 PID: 31122 Comm: syz.1.3120 Not tainted syzkaller #0 PREEMPT(full) [ 1600.577726][T31122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1600.577742][T31122] Call Trace: [ 1600.577751][T31122] [ 1600.577761][T31122] dump_stack_lvl+0x100/0x190 [ 1600.577804][T31122] should_fail_ex.cold+0x5/0xa [ 1600.577839][T31122] should_failslab+0xc2/0x120 [ 1600.577879][T31122] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1600.577912][T31122] ? __d_alloc+0x35/0xa50 [ 1600.577951][T31122] __d_alloc+0x35/0xa50 [ 1600.577985][T31122] d_alloc_pseudo+0x1c/0xc0 [ 1600.578012][T31122] alloc_file_pseudo+0x118/0x290 [ 1600.578051][T31122] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1600.578087][T31122] ? alloc_fd+0x471/0x7a0 [ 1600.578124][T31122] sock_alloc_file+0x50/0x210 [ 1600.578154][T31122] __sys_socket+0x1c0/0x260 [ 1600.578198][T31122] ? __pfx___sys_socket+0x10/0x10 [ 1600.578242][T31122] __x64_sys_socket+0x72/0xb0 [ 1600.578274][T31122] ? lockdep_hardirqs_on+0x7d/0x110 [ 1600.578305][T31122] do_syscall_64+0x121/0x770 [ 1600.578340][T31122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.578368][T31122] RIP: 0033:0x7fbd6599e199 [ 1600.578390][T31122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1600.578413][T31122] RSP: 002b:00007fbd62ff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1600.578439][T31122] RAX: ffffffffffffffda RBX: 00007fbd65c26450 RCX: 00007fbd6599e199 [ 1600.578457][T31122] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 1600.578471][T31122] RBP: 00007fbd65a350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1600.578486][T31122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.578500][T31122] R13: 00007fbd65c264e8 R14: 00007fbd65c26450 R15: 00007ffef2a27798 [ 1600.578530][T31122] [ 1601.795848][T31137] FAULT_INJECTION: forcing a failure. [ 1601.795848][T31137] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.795887][T31137] CPU: 1 UID: 0 PID: 31137 Comm: syz.2.3123 Not tainted syzkaller #0 PREEMPT(full) [ 1601.795917][T31137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1601.795932][T31137] Call Trace: [ 1601.795941][T31137] [ 1601.795951][T31137] dump_stack_lvl+0x100/0x190 [ 1601.795989][T31137] should_fail_ex.cold+0x5/0xa [ 1601.796020][T31137] should_failslab+0xc2/0x120 [ 1601.796057][T31137] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1601.796090][T31137] ? sk_prot_alloc+0x60/0x2a0 [ 1601.796126][T31137] sk_prot_alloc+0x60/0x2a0 [ 1601.796158][T31137] sk_alloc+0x36/0xe80 [ 1601.796196][T31137] unix_create1+0xa6/0x700 [ 1601.796236][T31137] unix_create+0x10f/0x1b0 [ 1601.796271][T31137] __sock_create+0x339/0x860 [ 1601.796308][T31137] __sys_socket+0x14d/0x260 [ 1601.796340][T31137] ? __pfx___sys_socket+0x10/0x10 [ 1601.796381][T31137] __x64_sys_socket+0x72/0xb0 [ 1601.796411][T31137] ? lockdep_hardirqs_on+0x7d/0x110 [ 1601.796441][T31137] do_syscall_64+0x121/0x770 [ 1601.796473][T31137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.796510][T31137] RIP: 0033:0x7f07af59e199 [ 1601.796533][T31137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.796557][T31137] RSP: 002b:00007f07acbf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1601.796583][T31137] RAX: ffffffffffffffda RBX: 00007f07af826450 RCX: 00007f07af59e199 [ 1601.796600][T31137] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 1601.796615][T31137] RBP: 00007f07af6350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1601.796630][T31137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1601.796646][T31137] R13: 00007f07af8264e8 R14: 00007f07af826450 R15: 00007fffd5cb2728 [ 1601.796683][T31137] [ 1602.926601][T31170] FAULT_INJECTION: forcing a failure. [ 1602.926601][T31170] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.926640][T31170] CPU: 1 UID: 0 PID: 31170 Comm: syz.2.3127 Not tainted syzkaller #0 PREEMPT(full) [ 1602.926669][T31170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1602.926685][T31170] Call Trace: [ 1602.926694][T31170] [ 1602.926704][T31170] dump_stack_lvl+0x100/0x190 [ 1602.926745][T31170] should_fail_ex.cold+0x5/0xa [ 1602.926781][T31170] should_failslab+0xc2/0x120 [ 1602.926819][T31170] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1602.926852][T31170] ? __d_alloc+0x35/0xa50 [ 1602.926901][T31170] __d_alloc+0x35/0xa50 [ 1602.926940][T31170] d_alloc_pseudo+0x1c/0xc0 [ 1602.926969][T31170] alloc_file_pseudo+0x118/0x290 [ 1602.927006][T31170] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1602.927041][T31170] ? alloc_fd+0x471/0x7a0 [ 1602.927078][T31170] sock_alloc_file+0x50/0x210 [ 1602.927107][T31170] __sys_socket+0x1c0/0x260 [ 1602.927140][T31170] ? __pfx___sys_socket+0x10/0x10 [ 1602.927183][T31170] __x64_sys_socket+0x72/0xb0 [ 1602.927215][T31170] ? lockdep_hardirqs_on+0x7d/0x110 [ 1602.927248][T31170] do_syscall_64+0x121/0x770 [ 1602.927284][T31170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.927311][T31170] RIP: 0033:0x7f07af59e199 [ 1602.927332][T31170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.927356][T31170] RSP: 002b:00007f07acbf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1602.927381][T31170] RAX: ffffffffffffffda RBX: 00007f07af826450 RCX: 00007f07af59e199 [ 1602.927399][T31170] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 1602.927414][T31170] RBP: 00007f07af6350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1602.927431][T31170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.927446][T31170] R13: 00007f07af8264e8 R14: 00007f07af826450 R15: 00007fffd5cb2728 [ 1602.927481][T31170] [ 1603.056009][T31170] batman_adv: Routing algorithm '{' is not supported [ 1604.728267][T31181] FAULT_INJECTION: forcing a failure. [ 1604.728267][T31181] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.728305][T31181] CPU: 1 UID: 0 PID: 31181 Comm: syz.0.3128 Not tainted syzkaller #0 PREEMPT(full) [ 1604.728335][T31181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1604.728350][T31181] Call Trace: [ 1604.728358][T31181] [ 1604.728368][T31181] dump_stack_lvl+0x100/0x190 [ 1604.728408][T31181] should_fail_ex.cold+0x5/0xa [ 1604.728441][T31181] should_failslab+0xc2/0x120 [ 1604.728477][T31181] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1604.728509][T31181] ? d_instantiate+0x8a/0xb0 [ 1604.728545][T31181] ? alloc_empty_file+0x5b/0x1c0 [ 1604.728584][T31181] alloc_empty_file+0x5b/0x1c0 [ 1604.728620][T31181] alloc_file_pseudo+0x183/0x290 [ 1604.728654][T31181] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1604.728700][T31181] ? alloc_fd+0x471/0x7a0 [ 1604.728740][T31181] sock_alloc_file+0x50/0x210 [ 1604.728770][T31181] __sys_socket+0x1c0/0x260 [ 1604.728806][T31181] ? __pfx___sys_socket+0x10/0x10 [ 1604.728847][T31181] __x64_sys_socket+0x72/0xb0 [ 1604.728877][T31181] ? lockdep_hardirqs_on+0x7d/0x110 [ 1604.728906][T31181] do_syscall_64+0x121/0x770 [ 1604.728942][T31181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.728967][T31181] RIP: 0033:0x7fe292f9e199 [ 1604.728989][T31181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.729011][T31181] RSP: 002b:00007fe293f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1604.729037][T31181] RAX: ffffffffffffffda RBX: 00007fe293226180 RCX: 00007fe292f9e199 [ 1604.729055][T31181] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000001 [ 1604.729070][T31181] RBP: 00007fe2930350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1604.729085][T31181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.729100][T31181] R13: 00007fe293226218 R14: 00007fe293226180 R15: 00007ffcdbb68168 [ 1604.729135][T31181] [ 1604.799006][T31181] batman_adv: Routing algorithm 'ÿ' is not supported [ 1607.215839][T31247] batman_adv: Routing algorithm '{' is not supported [ 1607.370599][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.370665][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.631970][T31403] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3302266462.2417750473.2276798763), cmd(3) [ 1624.638800][T31573] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3302266462.2417750473.2276798763), cmd(3) [ 1668.814578][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.814645][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1696.719427][ T354] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1698.332230][ T376] FAULT_INJECTION: forcing a failure. [ 1698.332230][ T376] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1698.332267][ T376] CPU: 0 UID: 0 PID: 376 Comm: syz.2.3326 Not tainted syzkaller #0 PREEMPT(full) [ 1698.332295][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1698.332311][ T376] Call Trace: [ 1698.332319][ T376] [ 1698.332328][ T376] dump_stack_lvl+0x100/0x190 [ 1698.332366][ T376] should_fail_ex.cold+0x5/0xa [ 1698.332399][ T376] _copy_from_user+0x2e/0xd0 [ 1698.332551][ T376] copy_msghdr_from_user+0x9f/0x4c0 [ 1698.332587][ T376] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1698.332628][ T376] ? lock_acquire+0x1d1/0x380 [ 1698.332680][ T376] ? get_pid_task+0x2a/0x250 [ 1698.332716][ T376] ___sys_sendmsg+0x106/0x1e0 [ 1698.332749][ T376] ? __pfx____sys_sendmsg+0x10/0x10 [ 1698.332779][ T376] ? get_pid_task+0x106/0x250 [ 1698.332818][ T376] ? find_held_lock+0x2b/0x80 [ 1698.332868][ T376] __sys_sendmsg+0x160/0x210 [ 1698.332894][ T376] ? __pfx___sys_sendmsg+0x10/0x10 [ 1698.332945][ T376] do_syscall_64+0x121/0x770 [ 1698.332980][ T376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.333006][ T376] RIP: 0033:0x7f07af59e199 [ 1698.333027][ T376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.333050][ T376] RSP: 002b:00007f07b0402028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1698.333074][ T376] RAX: ffffffffffffffda RBX: 00007f07af825fa0 RCX: 00007f07af59e199 [ 1698.333090][ T376] RDX: 0000000000040800 RSI: 00002000000031c0 RDI: 0000000000000003 [ 1698.333106][ T376] RBP: 00007f07b0402090 R08: 0000000000000000 R09: 0000000000000000 [ 1698.333121][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1698.333134][ T376] R13: 00007f07af826038 R14: 00007f07af825fa0 R15: 00007fffd5cb2728 [ 1698.333169][ T376] [ 1699.168412][ T402] FAULT_INJECTION: forcing a failure. [ 1699.168412][ T402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.168451][ T402] CPU: 1 UID: 0 PID: 402 Comm: syz.1.3331 Not tainted syzkaller #0 PREEMPT(full) [ 1699.168480][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1699.168494][ T402] Call Trace: [ 1699.168502][ T402] [ 1699.168512][ T402] dump_stack_lvl+0x100/0x190 [ 1699.168550][ T402] should_fail_ex.cold+0x5/0xa [ 1699.168583][ T402] _copy_from_user+0x2e/0xd0 [ 1699.168619][ T402] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 1699.168652][ T402] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1699.168693][ T402] do_sock_getsockopt+0x530/0x6e0 [ 1699.168729][ T402] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1699.168764][ T402] ? __fget_files+0x34/0x3d0 [ 1699.168794][ T402] ? find_held_lock+0x2b/0x80 [ 1699.168832][ T402] ? __fget_files+0x21f/0x3d0 [ 1699.168872][ T402] __sys_getsockopt+0x133/0x1d0 [ 1699.168907][ T402] ? __x64_sys_getsockopt+0xbd/0x160 [ 1699.168930][ T402] __x64_sys_getsockopt+0xbd/0x160 [ 1699.168953][ T402] ? do_syscall_64+0xae/0x770 [ 1699.168982][ T402] ? lockdep_hardirqs_on+0x7d/0x110 [ 1699.169011][ T402] do_syscall_64+0x121/0x770 [ 1699.169043][ T402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.169069][ T402] RIP: 0033:0x7fbd6599e199 [ 1699.169089][ T402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.169111][ T402] RSP: 002b:00007fbd66821028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1699.169135][ T402] RAX: ffffffffffffffda RBX: 00007fbd65c25fa0 RCX: 00007fbd6599e199 [ 1699.169151][ T402] RDX: 0000000000000024 RSI: 0000000000000118 RDI: 0000000000000003 [ 1699.169166][ T402] RBP: 00007fbd66821090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.169187][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.169201][ T402] R13: 00007fbd65c26038 R14: 00007fbd65c25fa0 R15: 00007ffef2a27798 [ 1699.169232][ T402] [ 1704.866705][ T503] FAULT_INJECTION: forcing a failure. [ 1704.866705][ T503] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.866742][ T503] CPU: 1 UID: 0 PID: 503 Comm: syz.3.3347 Not tainted syzkaller #0 PREEMPT(full) [ 1704.866770][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1704.866785][ T503] Call Trace: [ 1704.866793][ T503] [ 1704.866803][ T503] dump_stack_lvl+0x100/0x190 [ 1704.866841][ T503] should_fail_ex.cold+0x5/0xa [ 1704.866874][ T503] should_failslab+0xc2/0x120 [ 1704.866909][ T503] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1704.866942][ T503] ? vm_area_dup+0x27/0x9d0 [ 1704.867048][ T503] vm_area_dup+0x27/0x9d0 [ 1704.867082][ T503] __split_vma+0x19c/0x1de0 [ 1704.867133][ T503] ? down_write+0x146/0x1f0 [ 1704.867203][ T503] ? __pfx___split_vma+0x10/0x10 [ 1704.867249][ T503] vma_modify+0x1ef4/0x29b0 [ 1704.867291][ T503] ? __pfx_vma_modify+0x10/0x10 [ 1704.867314][ T503] ? lock_acquire+0x1d1/0x380 [ 1704.867347][ T503] ? is_bpf_text_address+0x25/0x1a0 [ 1704.867449][ T503] ? find_held_lock+0x2b/0x80 [ 1704.867474][ T503] ? is_bpf_text_address+0x8a/0x1a0 [ 1704.867507][ T503] ? is_bpf_text_address+0x8a/0x1a0 [ 1704.867557][ T503] vma_modify_flags+0x2c3/0x460 [ 1704.867585][ T503] ? __pfx_vma_modify_flags+0x10/0x10 [ 1704.867631][ T503] ? __pfx_ima_file_mprotect+0x10/0x10 [ 1704.867741][ T503] mprotect_fixup+0x27a/0xe00 [ 1704.867801][ T503] ? __pfx_mprotect_fixup+0x10/0x10 [ 1704.867838][ T503] ? common_file_perm+0x266/0x500 [ 1704.867907][ T503] do_mprotect_pkey+0xa51/0xdd0 [ 1704.867943][ T503] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1704.867967][ T503] ? ksys_write+0x190/0x250 [ 1704.867996][ T503] ? lock_acquire+0x1d1/0x380 [ 1704.868040][ T503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1704.868079][ T503] ? __fget_files+0x21f/0x3d0 [ 1704.868123][ T503] ? __pfx_ksys_write+0x10/0x10 [ 1704.868149][ T503] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1704.868185][ T503] __x64_sys_mprotect+0x78/0xc0 [ 1704.868208][ T503] ? lockdep_hardirqs_on+0x7d/0x110 [ 1704.868238][ T503] do_syscall_64+0x121/0x770 [ 1704.868271][ T503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.868297][ T503] RIP: 0033:0x7fcbb199e199 [ 1704.868319][ T503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.868341][ T503] RSP: 002b:00007fcbb28c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 1704.868365][ T503] RAX: ffffffffffffffda RBX: 00007fcbb1c25fa0 RCX: 00007fcbb199e199 [ 1704.868382][ T503] RDX: 0000000000000004 RSI: 0000000000401000 RDI: 0000000000001000 [ 1704.868397][ T503] RBP: 00007fcbb28c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.868412][ T503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.868426][ T503] R13: 00007fcbb1c26038 R14: 00007fcbb1c25fa0 R15: 00007ffcfd9470f8 [ 1704.868463][ T503] [ 1705.309341][ T520] FAULT_INJECTION: forcing a failure. [ 1705.309341][ T520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1705.309376][ T520] CPU: 0 UID: 0 PID: 520 Comm: syz.2.3350 Not tainted syzkaller #0 PREEMPT(full) [ 1705.309406][ T520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1705.309419][ T520] Call Trace: [ 1705.309426][ T520] [ 1705.309435][ T520] dump_stack_lvl+0x100/0x190 [ 1705.309473][ T520] should_fail_ex.cold+0x5/0xa [ 1705.309507][ T520] _copy_to_user+0x32/0xd0 [ 1705.309542][ T520] simple_read_from_buffer+0xcb/0x170 [ 1705.309668][ T520] proc_fail_nth_read+0x1af/0x230 [ 1705.309759][ T520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1705.309791][ T520] ? rw_verify_area+0xce/0x6d0 [ 1705.309816][ T520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1705.309845][ T520] vfs_read+0x1e4/0xb40 [ 1705.309873][ T520] ? lock_acquire+0x1d1/0x380 [ 1705.309905][ T520] ? __fget_files+0x34/0x3d0 [ 1705.309935][ T520] ? __pfx_vfs_read+0x10/0x10 [ 1705.309959][ T520] ? find_held_lock+0x2b/0x80 [ 1705.309987][ T520] ? __fget_files+0x215/0x3d0 [ 1705.310021][ T520] ? __fget_files+0x21f/0x3d0 [ 1705.310059][ T520] ksys_read+0x12a/0x250 [ 1705.310094][ T520] ? __pfx_ksys_read+0x10/0x10 [ 1705.310131][ T520] do_syscall_64+0x121/0x770 [ 1705.310165][ T520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.310190][ T520] RIP: 0033:0x7f07af55e9ce [ 1705.310209][ T520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1705.310230][ T520] RSP: 002b:00007f07b03e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1705.310253][ T520] RAX: ffffffffffffffda RBX: 00007f07b03e16c0 RCX: 00007f07af55e9ce [ 1705.310269][ T520] RDX: 000000000000000f RSI: 00007f07b03e10a0 RDI: 0000000000000005 [ 1705.310284][ T520] RBP: 00007f07b03e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1705.310298][ T520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.310312][ T520] R13: 00007f07af826128 R14: 00007f07af826090 R15: 00007fffd5cb2728 [ 1705.310349][ T520] [ 1706.755738][ T555] FAULT_INJECTION: forcing a failure. [ 1706.755738][ T555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.755777][ T555] CPU: 0 UID: 0 PID: 555 Comm: syz.2.3357 Not tainted syzkaller #0 PREEMPT(full) [ 1706.755799][ T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1706.755811][ T555] Call Trace: [ 1706.755818][ T555] [ 1706.755825][ T555] dump_stack_lvl+0x100/0x190 [ 1706.755856][ T555] should_fail_ex.cold+0x5/0xa [ 1706.755882][ T555] strncpy_from_user+0x3b/0x2d0 [ 1706.756040][ T555] do_getname+0x78/0x390 [ 1706.756098][ T555] do_sys_openat2+0xc7/0x1e0 [ 1706.756161][ T555] ? __pfx_do_sys_openat2+0x10/0x10 [ 1706.756195][ T555] ? __fget_files+0x21f/0x3d0 [ 1706.756233][ T555] __x64_sys_openat+0x12d/0x210 [ 1706.756258][ T555] ? __pfx___x64_sys_openat+0x10/0x10 [ 1706.756295][ T555] do_syscall_64+0x121/0x770 [ 1706.756328][ T555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.756352][ T555] RIP: 0033:0x7f07af55e9ce [ 1706.756372][ T555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1706.756392][ T555] RSP: 002b:00007f07b0401f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1706.756415][ T555] RAX: ffffffffffffffda RBX: 00007f07b04026c0 RCX: 00007f07af55e9ce [ 1706.756430][ T555] RDX: 0000000000000002 RSI: 00007f07af6349b2 RDI: ffffffffffffff9c [ 1706.756445][ T555] RBP: 00007f07af6350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1706.756460][ T555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.756474][ T555] R13: 00007f07af826038 R14: 00007f07af825fa0 R15: 00007fffd5cb2728 [ 1706.756515][ T555] [ 1706.951733][ T557] futex_wake_op: syz.2.3358 tries to shift op by -2048; fix this program [ 1706.952007][ T557] futex_wake_op: syz.2.3358 tries to shift op by -2048; fix this program [ 1707.371884][ T576] FAULT_INJECTION: forcing a failure. [ 1707.371884][ T576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1707.371921][ T576] CPU: 1 UID: 0 PID: 576 Comm: syz.0.3362 Not tainted syzkaller #0 PREEMPT(full) [ 1707.371949][ T576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1707.371964][ T576] Call Trace: [ 1707.371972][ T576] [ 1707.371982][ T576] dump_stack_lvl+0x100/0x190 [ 1707.372028][ T576] should_fail_ex.cold+0x5/0xa [ 1707.372061][ T576] _copy_from_user+0x2e/0xd0 [ 1707.372096][ T576] move_addr_to_kernel+0x65/0x170 [ 1707.372130][ T576] __sys_connect+0xb5/0x170 [ 1707.372163][ T576] ? __pfx___sys_connect+0x10/0x10 [ 1707.372194][ T576] ? __fget_files+0x21f/0x3d0 [ 1707.372236][ T576] ? __pfx_ksys_write+0x10/0x10 [ 1707.372273][ T576] __x64_sys_connect+0x72/0xb0 [ 1707.372304][ T576] ? lockdep_hardirqs_on+0x7d/0x110 [ 1707.372333][ T576] do_syscall_64+0x121/0x770 [ 1707.372371][ T576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.372393][ T576] RIP: 0033:0x7fe292f9e199 [ 1707.372412][ T576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.372434][ T576] RSP: 002b:00007fe293f52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1707.372458][ T576] RAX: ffffffffffffffda RBX: 00007fe293225fa0 RCX: 00007fe292f9e199 [ 1707.372474][ T576] RDX: 0000000000000055 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1707.372489][ T576] RBP: 00007fe293f52090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.372503][ T576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.372517][ T576] R13: 00007fe293226038 R14: 00007fe293225fa0 R15: 00007ffcdbb68168 [ 1707.372549][ T576] [ 1707.645700][ T583] FAULT_INJECTION: forcing a failure. [ 1707.645700][ T583] name failslab, interval 1, probability 0, space 0, times 0 [ 1707.645739][ T583] CPU: 1 UID: 0 PID: 583 Comm: syz.1.3361 Not tainted syzkaller #0 PREEMPT(full) [ 1707.645770][ T583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1707.645785][ T583] Call Trace: [ 1707.645793][ T583] [ 1707.645802][ T583] dump_stack_lvl+0x100/0x190 [ 1707.645842][ T583] should_fail_ex.cold+0x5/0xa [ 1707.645876][ T583] should_failslab+0xc2/0x120 [ 1707.645911][ T583] __kmalloc_cache_noprof+0x91/0x6d0 [ 1707.645938][ T583] ? alloc_anon_inode+0x31b/0x3e0 [ 1707.645970][ T583] ? bpf_lsm_inode_init_security_anon+0x9/0x10 [ 1707.646073][ T583] ? __do_sys_memfd_secret+0x130/0x570 [ 1707.646155][ T583] __do_sys_memfd_secret+0x130/0x570 [ 1707.646196][ T583] do_syscall_64+0x121/0x770 [ 1707.646236][ T583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.646264][ T583] RIP: 0033:0x7fbd6599e199 [ 1707.646287][ T583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.646311][ T583] RSP: 002b:00007fbd62ff0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 1707.646350][ T583] RAX: ffffffffffffffda RBX: 00007fbd65c26450 RCX: 00007fbd6599e199 [ 1707.646369][ T583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1707.646385][ T583] RBP: 00007fbd65a350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1707.646402][ T583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1707.646418][ T583] R13: 00007fbd65c264e8 R14: 00007fbd65c26450 R15: 00007ffef2a27798 [ 1707.646453][ T583] [ 1708.564881][ T603] FAULT_INJECTION: forcing a failure. [ 1708.564881][ T603] name failslab, interval 1, probability 0, space 0, times 0 [ 1708.564920][ T603] CPU: 0 UID: 0 PID: 603 Comm: syz.1.3366 Not tainted syzkaller #0 PREEMPT(full) [ 1708.564948][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1708.564962][ T603] Call Trace: [ 1708.564970][ T603] [ 1708.564979][ T603] dump_stack_lvl+0x100/0x190 [ 1708.565017][ T603] should_fail_ex.cold+0x5/0xa [ 1708.565049][ T603] should_failslab+0xc2/0x120 [ 1708.565084][ T603] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1708.565112][ T603] ? ksys_write+0x190/0x250 [ 1708.565140][ T603] ? create_new_namespaces+0x30/0xac0 [ 1708.565181][ T603] create_new_namespaces+0x30/0xac0 [ 1708.565216][ T603] ? bpf_lsm_capable+0x9/0x10 [ 1708.565240][ T603] ? security_capable+0x80/0x260 [ 1708.565278][ T603] unshare_nsproxy_namespaces+0xf2/0x220 [ 1708.565314][ T603] ksys_unshare+0x4a2/0xa70 [ 1708.565389][ T603] ? __pfx_ksys_unshare+0x10/0x10 [ 1708.565415][ T603] ? ksys_write+0x1ac/0x250 [ 1708.565454][ T603] __x64_sys_unshare+0x31/0x40 [ 1708.565480][ T603] do_syscall_64+0x121/0x770 [ 1708.565514][ T603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.565540][ T603] RIP: 0033:0x7fbd6599e199 [ 1708.565561][ T603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.565583][ T603] RSP: 002b:00007fbd66821028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1708.565608][ T603] RAX: ffffffffffffffda RBX: 00007fbd65c25fa0 RCX: 00007fbd6599e199 [ 1708.565625][ T603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1708.565641][ T603] RBP: 00007fbd66821090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.565657][ T603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.565672][ T603] R13: 00007fbd65c26038 R14: 00007fbd65c25fa0 R15: 00007ffef2a27798 [ 1708.565713][ T603] [ 1709.154444][ T612] syz.1.3367: vmalloc error: size 31525197391593472, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1709.155228][ T612] CPU: 0 UID: 0 PID: 612 Comm: syz.1.3367 Not tainted syzkaller #0 PREEMPT(full) [ 1709.155258][ T612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1709.155274][ T612] Call Trace: [ 1709.155283][ T612] [ 1709.155294][ T612] dump_stack_lvl+0x100/0x190 [ 1709.155337][ T612] warn_alloc.cold+0x9e/0xb2 [ 1709.155366][ T612] ? __pfx_warn_alloc+0x10/0x10 [ 1709.155476][ T612] ? add_lock_to_list+0x9d/0x1d0 [ 1709.155521][ T612] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1709.155590][ T612] ? __lock_acquire+0xe8b/0x1f40 [ 1709.155639][ T612] ? disksize_store+0x14d/0x4a0 [ 1709.155779][ T612] ? lock_acquire+0x1d1/0x380 [ 1709.155815][ T612] ? disksize_store+0xab/0x4a0 [ 1709.155851][ T612] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1709.155893][ T612] ? __pfx___might_resched+0x10/0x10 [ 1709.155926][ T612] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1709.155979][ T612] ? disksize_store+0x14d/0x4a0 [ 1709.156014][ T612] __vmalloc_node_noprof+0xad/0xf0 [ 1709.156052][ T612] ? disksize_store+0x14d/0x4a0 [ 1709.156091][ T612] disksize_store+0x14d/0x4a0 [ 1709.156126][ T612] ? sysfs_file_kobj+0xe4/0x290 [ 1709.156186][ T612] ? sysfs_file_kobj+0xe4/0x290 [ 1709.156218][ T612] ? __pfx_disksize_store+0x10/0x10 [ 1709.156252][ T612] dev_attr_store+0x58/0x80 [ 1709.156354][ T612] ? __pfx_dev_attr_store+0x10/0x10 [ 1709.156381][ T612] sysfs_kf_write+0xf2/0x150 [ 1709.156412][ T612] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1709.156437][ T612] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1709.156469][ T612] vfs_write+0x6af/0x1050 [ 1709.156500][ T612] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1709.156529][ T612] ? __pfx_vfs_write+0x10/0x10 [ 1709.156556][ T612] ? find_held_lock+0x2b/0x80 [ 1709.156611][ T612] ksys_write+0x12a/0x250 [ 1709.156640][ T612] ? __pfx_ksys_write+0x10/0x10 [ 1709.156679][ T612] do_syscall_64+0x121/0x770 [ 1709.156716][ T612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.156753][ T612] RIP: 0033:0x7fbd6599e199 [ 1709.156777][ T612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1709.156801][ T612] RSP: 002b:00007fbd62ff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1709.156826][ T612] RAX: ffffffffffffffda RBX: 00007fbd65c26450 RCX: 00007fbd6599e199 [ 1709.156844][ T612] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000003 [ 1709.156860][ T612] RBP: 00007fbd65a350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1709.156876][ T612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1709.156891][ T612] R13: 00007fbd65c264e8 R14: 00007fbd65c26450 R15: 00007ffef2a27798 [ 1709.156929][ T612] [ 1709.156950][ T612] Mem-Info: [ 1709.156995][ T612] active_anon:5532 inactive_anon:0 isolated_anon:0 [ 1709.156995][ T612] active_file:0 inactive_file:55925 isolated_file:0 [ 1709.156995][ T612] unevictable:0 dirty:571 writeback:0 [ 1709.156995][ T612] slab_reclaimable:11257 slab_unreclaimable:94709 [ 1709.156995][ T612] mapped:31618 shmem:519 pagetables:1099 [ 1709.156995][ T612] sec_pagetables:0 bounce:0 [ 1709.156995][ T612] kernel_misc_reclaimable:0 [ 1709.156995][ T612] free:1332861 free_pcp:8970 free_cma:0 [ 1709.157067][ T612] Node 0 active_anon:22128kB inactive_anon:0kB active_file:0kB inactive_file:223496kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126472kB dirty:2284kB writeback:0kB shmem:2076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11160kB pagetables:4248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1709.157137][ T612] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1709.157202][ T612] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.157272][ T612] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 1709.157317][ T612] Node 0 DMA32 free:1366976kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22128kB inactive_anon:0kB active_file:0kB inactive_file:223496kB unevictable:0kB writepending:2284kB zspages:0kB present:3129332kB managed:2530552kB mlocked:0kB bounce:0kB free_pcp:35880kB local_pcp:18852kB free_cma:0kB [ 1709.157389][ T612] lowmem_reserve[]: 0 0 0 0 0 [ 1709.157431][ T612] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.157498][ T612] lowmem_reserve[]: 0 0 0 0 0 [ 1709.157539][ T612] Node 1 Normal free:3949108kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.157609][ T612] lowmem_reserve[]: 0 0 0 0 0 [ 1709.157647][ T612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1709.164679][ T612] Node 0 DMA32: 737*4kB (UME) 791*8kB (UME) 453*16kB (UM) 290*32kB (UME) 151*64kB (UME) 64*128kB (UM) 51*256kB (M) 21*512kB (UM) 11*1024kB (ME) 7*2048kB (UM) 311*4096kB (UM) = 1366924kB [ 1709.164885][ T612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1709.165007][ T612] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 5*16kB (UM) 9*32kB (UM) 8*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3949108kB [ 1709.165204][ T612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.165222][ T612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1709.165240][ T612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.165268][ T612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1709.165288][ T612] 56445 total pagecache pages [ 1709.165314][ T612] 0 pages in swap cache [ 1709.165323][ T612] Free swap = 124996kB [ 1709.165332][ T612] Total swap = 124996kB [ 1709.165342][ T612] 2097051 pages RAM [ 1709.165350][ T612] 0 pages HighMem/MovableOnly [ 1709.165359][ T612] 432778 pages reserved [ 1709.165368][ T612] 0 pages cma reserved [ 1709.201801][ T612] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3604856577.688429005.3275973710), cmd(5) [ 1709.870696][ T615] FAULT_INJECTION: forcing a failure. [ 1709.870696][ T615] name failslab, interval 1, probability 0, space 0, times 0 [ 1709.870733][ T615] CPU: 0 UID: 0 PID: 615 Comm: syz.3.3368 Not tainted syzkaller #0 PREEMPT(full) [ 1709.870760][ T615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1709.870775][ T615] Call Trace: [ 1709.870784][ T615] [ 1709.870794][ T615] dump_stack_lvl+0x100/0x190 [ 1709.870830][ T615] should_fail_ex.cold+0x5/0xa [ 1709.870861][ T615] should_failslab+0xc2/0x120 [ 1709.870894][ T615] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1709.870924][ T615] ? do_getname+0x35/0x390 [ 1709.870950][ T615] do_getname+0x35/0x390 [ 1709.870973][ T615] __x64_sys_mknod+0x78/0xc0 [ 1709.871005][ T615] do_syscall_64+0x121/0x770 [ 1709.871038][ T615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.871062][ T615] RIP: 0033:0x7fcbb199e199 [ 1709.871083][ T615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1709.871113][ T615] RSP: 002b:00007fcbb28c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1709.871136][ T615] RAX: ffffffffffffffda RBX: 00007fcbb1c25fa0 RCX: 00007fcbb199e199 [ 1709.871152][ T615] RDX: 00000000fffffffa RSI: 00000000000000c9 RDI: 0000200000000180 [ 1709.871165][ T615] RBP: 00007fcbb28c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.871178][ T615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.871191][ T615] R13: 00007fcbb1c26038 R14: 00007fcbb1c25fa0 R15: 00007ffcfd9470f8 [ 1709.871221][ T615] [ 1712.293053][ T662] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1712.293195][ T662] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1712.346778][ T662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1712.346868][ T662] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1712.383075][ T662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1712.386779][ T662] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1712.403576][ T662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1712.403888][ T662] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1713.802267][ T696] FAULT_INJECTION: forcing a failure. [ 1713.802267][ T696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1713.802302][ T696] CPU: 1 UID: 0 PID: 696 Comm: syz.2.3379 Not tainted syzkaller #0 PREEMPT(full) [ 1713.802329][ T696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1713.802343][ T696] Call Trace: [ 1713.802351][ T696] [ 1713.802361][ T696] dump_stack_lvl+0x100/0x190 [ 1713.802398][ T696] should_fail_ex.cold+0x5/0xa [ 1713.802429][ T696] _copy_to_user+0x32/0xd0 [ 1713.802464][ T696] simple_read_from_buffer+0xcb/0x170 [ 1713.802498][ T696] proc_fail_nth_read+0x1af/0x230 [ 1713.802529][ T696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1713.802560][ T696] ? rw_verify_area+0xce/0x6d0 [ 1713.802586][ T696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1713.802614][ T696] vfs_read+0x1e4/0xb40 [ 1713.802643][ T696] ? lock_acquire+0x1d1/0x380 [ 1713.802671][ T696] ? __fget_files+0x34/0x3d0 [ 1713.802696][ T696] ? __pfx_vfs_read+0x10/0x10 [ 1713.802721][ T696] ? find_held_lock+0x2b/0x80 [ 1713.802746][ T696] ? __fget_files+0x215/0x3d0 [ 1713.802781][ T696] ? __fget_files+0x21f/0x3d0 [ 1713.802821][ T696] ksys_read+0x12a/0x250 [ 1713.802848][ T696] ? __pfx_ksys_read+0x10/0x10 [ 1713.802885][ T696] do_syscall_64+0x121/0x770 [ 1713.802918][ T696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.802943][ T696] RIP: 0033:0x7f07af55e9ce [ 1713.802963][ T696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1713.802984][ T696] RSP: 002b:00007f07b0401fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1713.803009][ T696] RAX: ffffffffffffffda RBX: 00007f07b04026c0 RCX: 00007f07af55e9ce [ 1713.803025][ T696] RDX: 000000000000000f RSI: 00007f07b04020a0 RDI: 0000000000000003 [ 1713.803038][ T696] RBP: 00007f07b0402090 R08: 0000000000000000 R09: 0000000000000000 [ 1713.803052][ T696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.803065][ T696] R13: 00007f07af826038 R14: 00007f07af825fa0 R15: 00007fffd5cb2728 [ 1713.803096][ T696] [ 1714.329053][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 1714.408015][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 1714.408055][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1714.408083][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1714.928663][ T738] FAULT_INJECTION: forcing a failure. [ 1714.928663][ T738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1714.928699][ T738] CPU: 1 UID: 0 PID: 738 Comm: syz.3.3383 Not tainted syzkaller #0 PREEMPT(full) [ 1714.928725][ T738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1714.928738][ T738] Call Trace: [ 1714.928746][ T738] [ 1714.928756][ T738] dump_stack_lvl+0x100/0x190 [ 1714.928794][ T738] should_fail_ex.cold+0x5/0xa [ 1714.928827][ T738] _copy_to_user+0x32/0xd0 [ 1714.928862][ T738] keyctl_capabilities+0x5a/0x160 [ 1714.929015][ T738] __do_sys_keyctl+0x427/0x5a0 [ 1714.929069][ T738] do_syscall_64+0x121/0x770 [ 1714.929103][ T738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1714.929128][ T738] RIP: 0033:0x7fcbb199e199 [ 1714.929149][ T738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1714.929172][ T738] RSP: 002b:00007fcbb281d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1714.929194][ T738] RAX: ffffffffffffffda RBX: 00007fcbb1c26450 RCX: 00007fcbb199e199 [ 1714.929210][ T738] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1714.929224][ T738] RBP: 00007fcbb281d090 R08: 00000000000003ff R09: 0000000000000000 [ 1714.929239][ T738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1714.929253][ T738] R13: 00007fcbb1c264e8 R14: 00007fcbb1c26450 R15: 00007ffcfd9470f8 [ 1714.929288][ T738] [ 1715.486168][ T738] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1715.486383][ T738] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1715.486550][ T738] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1716.083840][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.311594][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.424991][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.558535][ T752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1716.562032][ T752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1716.581801][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1716.611159][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1716.612650][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1716.632716][ T769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1716.633706][ T769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1716.634008][ T767] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1716.638727][ T767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1716.646471][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.661027][ T767] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1716.662014][ T767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1716.669010][ T767] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1717.220546][ T759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1717.220762][ T759] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1717.220959][ T759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1717.221030][ T759] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1717.285509][ T759] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1717.296493][ T759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1717.296582][ T759] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1717.323617][ T759] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1717.650720][ T12] bridge_slave_1: left allmulticast mode [ 1717.650751][ T12] bridge_slave_1: left promiscuous mode [ 1717.651029][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.655209][ T12] bridge_slave_0: left allmulticast mode [ 1717.655236][ T12] bridge_slave_0: left promiscuous mode [ 1717.656625][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.950389][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.953456][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.956698][ T12] bond0 (unregistering): Released all slaves [ 1718.093037][ T812] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 1718.386324][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1718.825634][ T12] hsr_slave_0: left promiscuous mode [ 1718.826106][ T12] hsr_slave_1: left promiscuous mode [ 1718.826643][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1718.826669][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.827228][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1718.827248][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1718.849544][ T12] veth1_macvtap: left promiscuous mode [ 1718.849586][ T12] veth0_macvtap: left promiscuous mode [ 1718.849689][ T12] veth1_vlan: left promiscuous mode [ 1718.849759][ T12] veth0_vlan: left promiscuous mode [ 1719.057970][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 1719.087296][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1719.107503][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1719.288344][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 1719.288412][ T5618] Bluetooth: hci0: command 0x041b tx timeout [ 1719.376270][ T769] Bluetooth: hci1: command 0x041b tx timeout [ 1719.895755][ T851] bridge0: port 3(dummy0) entered blocking state [ 1719.895907][ T851] bridge0: port 3(dummy0) entered disabled state [ 1719.896140][ T851] dummy0: entered allmulticast mode [ 1719.905847][ T851] dummy0: entered promiscuous mode [ 1719.910020][ T851] bridge0: port 3(dummy0) entered blocking state [ 1719.910140][ T851] bridge0: port 3(dummy0) entered forwarding state [ 1720.166966][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1720.505380][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.761547][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1720.802845][ T760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.802909][ T760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.803011][ T760] bridge_slave_0: entered allmulticast mode [ 1720.804079][ T760] bridge_slave_0: entered promiscuous mode [ 1721.004297][ T760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.004361][ T760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.004468][ T760] bridge_slave_1: entered allmulticast mode [ 1721.006426][ T760] bridge_slave_1: entered promiscuous mode [ 1721.259793][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.377952][ T769] Bluetooth: hci0: command 0x041b tx timeout [ 1721.439970][ T760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.448317][ T769] Bluetooth: hci1: command 0x041b tx timeout [ 1721.464900][ T760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1721.465104][ T755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.465197][ T755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.465314][ T755] bridge_slave_0: entered allmulticast mode [ 1721.478252][ T755] bridge_slave_0: entered promiscuous mode [ 1721.613600][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.669064][ T755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.669177][ T755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.669314][ T755] bridge_slave_1: entered allmulticast mode [ 1721.673057][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1721.674361][ T755] bridge_slave_1: entered promiscuous mode [ 1721.674753][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1721.716974][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1721.727254][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1721.736327][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1721.806485][ T760] team0: Port device team_slave_0 added [ 1721.809971][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1721.832614][ T755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.837249][ T760] team0: Port device team_slave_1 added [ 1721.876965][ T755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1721.901450][ T760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1721.901471][ T760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.901498][ T760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.955836][ T760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.955855][ T760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.955882][ T760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.020424][ T755] team0: Port device team_slave_0 added [ 1722.170988][ T903] FAULT_INJECTION: forcing a failure. [ 1722.170988][ T903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1722.171026][ T903] CPU: 0 UID: 0 PID: 903 Comm: syz.3.3394 Not tainted syzkaller #0 PREEMPT(full) [ 1722.171052][ T903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1722.171065][ T903] Call Trace: [ 1722.171072][ T903] [ 1722.171081][ T903] dump_stack_lvl+0x100/0x190 [ 1722.171121][ T903] should_fail_ex.cold+0x5/0xa [ 1722.171155][ T903] _copy_to_user+0x32/0xd0 [ 1722.171193][ T903] keyctl_capabilities+0x5a/0x160 [ 1722.171232][ T903] __do_sys_keyctl+0x427/0x5a0 [ 1722.171268][ T903] do_syscall_64+0x121/0x770 [ 1722.171302][ T903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.171327][ T903] RIP: 0033:0x7fcbb199e199 [ 1722.171355][ T903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.171377][ T903] RSP: 002b:00007fcbb281d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1722.171402][ T903] RAX: ffffffffffffffda RBX: 00007fcbb1c26450 RCX: 00007fcbb199e199 [ 1722.171418][ T903] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1722.171433][ T903] RBP: 00007fcbb281d090 R08: 00000000000003ff R09: 0000000000000000 [ 1722.171448][ T903] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1722.171462][ T903] R13: 00007fcbb1c264e8 R14: 00007fcbb1c26450 R15: 00007ffcfd9470f8 [ 1722.171494][ T903] [ 1722.180060][ T755] team0: Port device team_slave_1 added [ 1722.504877][ T760] hsr_slave_0: entered promiscuous mode [ 1722.506008][ T760] hsr_slave_1: entered promiscuous mode [ 1722.506796][ T760] debugfs: 'hsr0' already exists in 'hsr' [ 1722.506818][ T760] Cannot create hsr debugfs directory [ 1722.517098][ T755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.517116][ T755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.517143][ T755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.623673][ T755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.623691][ T755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.623718][ T755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.680957][ T12] bridge_slave_1: left allmulticast mode [ 1722.680988][ T12] bridge_slave_1: left promiscuous mode [ 1722.681256][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.685826][ T12] bridge_slave_0: left allmulticast mode [ 1722.685854][ T12] bridge_slave_0: left promiscuous mode [ 1722.686113][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.112683][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1723.114463][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1723.115553][ T12] bond0 (unregistering): Released all slaves [ 1723.274971][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1723.460923][ T769] Bluetooth: hci0: command 0x041b tx timeout [ 1723.530183][ T769] Bluetooth: hci1: command 0x041b tx timeout [ 1723.594268][ T755] hsr_slave_0: entered promiscuous mode [ 1723.594892][ T755] hsr_slave_1: entered promiscuous mode [ 1723.595318][ T755] debugfs: 'hsr0' already exists in 'hsr' [ 1723.595338][ T755] Cannot create hsr debugfs directory [ 1723.848528][ T769] Bluetooth: hci2: command tx timeout [ 1723.881017][ T12] hsr_slave_0: left promiscuous mode [ 1723.881807][ T12] hsr_slave_1: left promiscuous mode [ 1723.883409][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1723.883432][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.885320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1723.885342][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1723.947651][ T12] veth1_macvtap: left promiscuous mode [ 1723.947706][ T12] veth0_macvtap: left promiscuous mode [ 1723.960748][ T12] veth1_vlan: left promiscuous mode [ 1723.960833][ T12] veth0_vlan: left promiscuous mode [ 1724.415744][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1724.426364][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1724.587401][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1725.538062][ T769] Bluetooth: hci0: command 0x041b tx timeout [ 1725.563628][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.608363][ T769] Bluetooth: hci1: command 0x041b tx timeout [ 1725.676185][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.737006][ T888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.737112][ T888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.737261][ T888] bridge_slave_0: entered allmulticast mode [ 1725.762742][ T888] bridge_slave_0: entered promiscuous mode [ 1725.783309][ T888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.783486][ T888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.783636][ T888] bridge_slave_1: entered allmulticast mode [ 1725.809182][ T888] bridge_slave_1: entered promiscuous mode [ 1725.874558][ T991] FAULT_INJECTION: forcing a failure. [ 1725.874558][ T991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.874610][ T991] CPU: 0 UID: 0 PID: 991 Comm: syz.3.3396 Not tainted syzkaller #0 PREEMPT(full) [ 1725.874637][ T991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1725.874650][ T991] Call Trace: [ 1725.874658][ T991] [ 1725.874667][ T991] dump_stack_lvl+0x100/0x190 [ 1725.874702][ T991] should_fail_ex.cold+0x5/0xa [ 1725.874733][ T991] _copy_to_user+0x32/0xd0 [ 1725.874766][ T991] keyctl_capabilities+0x5a/0x160 [ 1725.874803][ T991] __do_sys_keyctl+0x427/0x5a0 [ 1725.874836][ T991] do_syscall_64+0x121/0x770 [ 1725.874867][ T991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.874889][ T991] RIP: 0033:0x7fcbb199e199 [ 1725.874908][ T991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.874928][ T991] RSP: 002b:00007fcbb281d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1725.874950][ T991] RAX: ffffffffffffffda RBX: 00007fcbb1c26450 RCX: 00007fcbb199e199 [ 1725.874965][ T991] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1725.874978][ T991] RBP: 00007fcbb281d090 R08: 00000000000003ff R09: 0000000000000000 [ 1725.874991][ T991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.875004][ T991] R13: 00007fcbb1c264e8 R14: 00007fcbb1c26450 R15: 00007ffcfd9470f8 [ 1725.875036][ T991] [ 1725.877733][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.942142][ T769] Bluetooth: hci2: command tx timeout [ 1726.008270][ T888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.016450][ T888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.016536][ T760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1726.030597][ T760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1726.033718][ T760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1726.043725][ T760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1726.047242][ T760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1726.062549][ T760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1726.134186][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.190052][ T760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1726.192679][ T760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.225712][ T888] team0: Port device team_slave_0 added [ 1726.261508][ T888] team0: Port device team_slave_1 added [ 1726.356159][ T888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.356178][ T888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.356203][ T888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1726.430733][ T888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1726.430753][ T888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.430770][ T888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.698068][ T888] hsr_slave_0: entered promiscuous mode [ 1726.699132][ T888] hsr_slave_1: entered promiscuous mode [ 1726.700048][ T888] debugfs: 'hsr0' already exists in 'hsr' [ 1726.700070][ T888] Cannot create hsr debugfs directory [ 1726.840387][ T12] bridge_slave_1: left allmulticast mode [ 1726.840417][ T12] bridge_slave_1: left promiscuous mode [ 1726.840640][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.844812][ T12] bridge_slave_0: left allmulticast mode [ 1726.844840][ T12] bridge_slave_0: left promiscuous mode [ 1726.845060][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.085468][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1727.113560][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.124231][ T12] bond0 (unregistering): Released all slaves [ 1727.608215][ T769] Bluetooth: hci0: command 0x041b tx timeout [ 1727.688912][ T769] Bluetooth: hci1: command 0x041b tx timeout [ 1727.863896][ T12] hsr_slave_0: left promiscuous mode [ 1727.864393][ T12] hsr_slave_1: left promiscuous mode [ 1727.864931][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1727.864946][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.866983][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1727.867003][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.896515][ T12] veth1_macvtap: left promiscuous mode [ 1727.896555][ T12] veth0_macvtap: left promiscuous mode [ 1727.896659][ T12] veth1_vlan: left promiscuous mode [ 1727.896732][ T12] veth0_vlan: left promiscuous mode [ 1728.008010][ T769] Bluetooth: hci2: command tx timeout [ 1728.221312][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1728.245778][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1728.702343][ T755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1728.708807][ T755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1728.724359][ T755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1728.743871][ T755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1728.750916][ T760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1728.764264][ T760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1728.813812][ T755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1728.823799][ T755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1728.829568][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.829683][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1728.832519][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.832642][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1728.980356][ T755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1728.996065][ T755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1729.290387][ T1090] FAULT_INJECTION: forcing a failure. [ 1729.290387][ T1090] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.290425][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: syz.3.3399 Not tainted syzkaller #0 PREEMPT(full) [ 1729.290453][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1729.290466][ T1090] Call Trace: [ 1729.290474][ T1090] [ 1729.290482][ T1090] dump_stack_lvl+0x100/0x190 [ 1729.290517][ T1090] should_fail_ex.cold+0x5/0xa [ 1729.290546][ T1090] should_failslab+0xc2/0x120 [ 1729.290581][ T1090] __kmalloc_noprof+0xfc/0x840 [ 1729.290618][ T1090] ? rcu_is_watching+0x13/0xc0 [ 1729.290675][ T1090] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1729.290765][ T1090] tomoyo_realpath_from_path+0xb6/0x690 [ 1729.290803][ T1090] tomoyo_path_number_perm+0x23c/0x580 [ 1729.290829][ T1090] ? tomoyo_path_number_perm+0x22e/0x580 [ 1729.290857][ T1090] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1729.290897][ T1090] ? __lock_acquire+0x5c0/0x1f40 [ 1729.290949][ T1090] ? __fget_files+0x34/0x3d0 [ 1729.290983][ T1090] ? find_held_lock+0x2b/0x80 [ 1729.291009][ T1090] ? hook_file_ioctl_common+0x140/0x440 [ 1729.291072][ T1090] ? __fget_files+0x21f/0x3d0 [ 1729.291106][ T1090] security_file_ioctl+0xd3/0x230 [ 1729.291134][ T1090] __x64_sys_ioctl+0xb7/0x210 [ 1729.291164][ T1090] do_syscall_64+0x121/0x770 [ 1729.291198][ T1090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.291223][ T1090] RIP: 0033:0x7fcbb199e199 [ 1729.291243][ T1090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1729.291265][ T1090] RSP: 002b:00007fcbb285f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.291290][ T1090] RAX: ffffffffffffffda RBX: 00007fcbb1c26270 RCX: 00007fcbb199e199 [ 1729.291306][ T1090] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000008 [ 1729.291320][ T1090] RBP: 00007fcbb285f090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.291335][ T1090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.291349][ T1090] R13: 00007fcbb1c26308 R14: 00007fcbb1c26270 R15: 00007ffcfd9470f8 [ 1729.291383][ T1090] [ 1729.297003][ T1090] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1729.697033][ T769] Bluetooth: hci0: command 0x041b tx timeout [ 1729.768027][ T769] Bluetooth: hci1: command 0x041b tx timeout [ 1730.098476][ T769] Bluetooth: hci2: command tx timeout [ 1730.130098][ T755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.203643][ T888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1730.207575][ T888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1730.224162][ T755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.224429][ T888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1730.246512][ T888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1730.247435][ T888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1730.249702][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.249760][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.293277][ T888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1730.315352][ T888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1730.327582][ T1104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3400'. [ 1730.342545][ T888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1730.345802][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.345921][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1730.445089][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.445209][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.223891][ T760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1731.285839][ T888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1731.388266][ T760] veth0_vlan: entered promiscuous mode [ 1731.397378][ T888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1731.434748][ T760] veth1_vlan: entered promiscuous mode [ 1731.452742][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.452857][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.506617][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.506736][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.657271][ T760] veth0_macvtap: entered promiscuous mode [ 1731.696860][ T760] veth1_macvtap: entered promiscuous mode [ 1731.802961][ T760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1731.832647][ T760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1732.128514][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.128571][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.128613][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.178729][ T161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1732.326300][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.326331][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.514186][ T755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1732.621706][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1732.621732][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.941328][ T755] veth0_vlan: entered promiscuous mode [ 1732.959824][ T755] veth1_vlan: entered promiscuous mode [ 1733.116732][ T755] veth0_macvtap: entered promiscuous mode [ 1733.129608][ T888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1733.183867][ T755] veth1_macvtap: entered promiscuous mode [ 1733.639101][ T755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1733.892691][ T755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.210265][ T888] veth0_vlan: entered promiscuous mode [ 1734.283188][ T888] veth1_vlan: entered promiscuous mode [ 1734.685003][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.685211][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.685373][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.716062][ T888] veth0_macvtap: entered promiscuous mode [ 1734.816052][ T888] veth1_macvtap: entered promiscuous mode [ 1734.866057][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.866081][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.879530][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.150270][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.150288][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.203221][ T888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.267379][ T888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.389753][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.389906][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.389950][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.389989][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.616373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.616398][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.760909][ T1272] FAULT_INJECTION: forcing a failure. [ 1735.760909][ T1272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.760936][ T1272] CPU: 0 UID: 0 PID: 1272 Comm: syz.3.3406 Not tainted syzkaller #0 PREEMPT(full) [ 1735.760953][ T1272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1735.760962][ T1272] Call Trace: [ 1735.760967][ T1272] [ 1735.760974][ T1272] dump_stack_lvl+0x100/0x190 [ 1735.761001][ T1272] should_fail_ex.cold+0x5/0xa [ 1735.761021][ T1272] _copy_from_user+0x2e/0xd0 [ 1735.761042][ T1272] snd_pcm_oss_write2+0x1c2/0x400 [ 1735.761182][ T1272] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 1735.761198][ T1272] ? snd_pcm_kernel_ioctl+0x12e/0x280 [ 1735.761262][ T1272] ? snd_pcm_oss_prepare+0x11e/0x240 [ 1735.761280][ T1272] snd_pcm_oss_write+0x729/0xa30 [ 1735.761306][ T1272] ? security_file_permission+0x76/0x210 [ 1735.761339][ T1272] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1735.761366][ T1272] vfs_writev+0x5ed/0xdd0 [ 1735.761403][ T1272] ? __pfx_vfs_writev+0x10/0x10 [ 1735.761434][ T1272] ? lock_acquire+0x1d1/0x380 [ 1735.761466][ T1272] ? __fget_files+0x34/0x3d0 [ 1735.761505][ T1272] ? __fget_files+0x21f/0x3d0 [ 1735.761528][ T1272] ? do_writev+0x13e/0x340 [ 1735.761541][ T1272] do_writev+0x13e/0x340 [ 1735.761558][ T1272] ? __pfx_do_writev+0x10/0x10 [ 1735.761579][ T1272] do_syscall_64+0x121/0x770 [ 1735.761599][ T1272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.761614][ T1272] RIP: 0033:0x7fcbb199e199 [ 1735.761627][ T1272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.761641][ T1272] RSP: 002b:00007fcbb2880028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1735.761655][ T1272] RAX: ffffffffffffffda RBX: 00007fcbb1c26180 RCX: 00007fcbb199e199 [ 1735.761665][ T1272] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1735.761673][ T1272] RBP: 00007fcbb2880090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.761695][ T1272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.761704][ T1272] R13: 00007fcbb1c26218 R14: 00007fcbb1c26180 R15: 00007ffcfd9470f8 [ 1735.761724][ T1272] [ 1735.869567][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.869600][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.707669][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.933753][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1737.937408][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1737.953604][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1737.959495][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1737.960270][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1738.007023][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.229788][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.349972][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.851239][ T1346] FAULT_INJECTION: forcing a failure. [ 1738.851239][ T1346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1738.851276][ T1346] CPU: 1 UID: 0 PID: 1346 Comm: syz.2.3413 Not tainted syzkaller #0 PREEMPT(full) [ 1738.851305][ T1346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1738.851320][ T1346] Call Trace: [ 1738.851328][ T1346] [ 1738.851337][ T1346] dump_stack_lvl+0x100/0x190 [ 1738.851376][ T1346] should_fail_ex.cold+0x5/0xa [ 1738.851409][ T1346] _copy_to_user+0x32/0xd0 [ 1738.851446][ T1346] keyctl_capabilities+0x5a/0x160 [ 1738.851486][ T1346] __do_sys_keyctl+0x427/0x5a0 [ 1738.851523][ T1346] do_syscall_64+0x121/0x770 [ 1738.851557][ T1346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.851580][ T1346] RIP: 0033:0x7fc5f299e199 [ 1738.851600][ T1346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1738.851621][ T1346] RSP: 002b:00007fc5f0b93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1738.851642][ T1346] RAX: ffffffffffffffda RBX: 00007fc5f2c26450 RCX: 00007fc5f299e199 [ 1738.851658][ T1346] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1738.851671][ T1346] RBP: 00007fc5f0b93090 R08: 00000000000003ff R09: 0000000000000000 [ 1738.851686][ T1346] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1738.851700][ T1346] R13: 00007fc5f2c264e8 R14: 00007fc5f2c26450 R15: 00007fff3ef109e8 [ 1738.851733][ T1346] [ 1739.588303][ T13] bridge_slave_1: left allmulticast mode [ 1739.588334][ T13] bridge_slave_1: left promiscuous mode [ 1739.588597][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.596422][ T13] bridge_slave_0: left allmulticast mode [ 1739.596450][ T13] bridge_slave_0: left promiscuous mode [ 1739.596669][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.952002][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.954841][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.956645][ T13] bond0 (unregistering): Released all slaves [ 1740.008051][ T769] Bluetooth: hci2: command tx timeout [ 1740.160912][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1740.542857][ T13] hsr_slave_0: left promiscuous mode [ 1740.558954][ T13] hsr_slave_1: left promiscuous mode [ 1740.559899][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1740.559923][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1740.593887][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1740.593913][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1740.651857][ T13] veth1_macvtap: left promiscuous mode [ 1740.651903][ T13] veth0_macvtap: left promiscuous mode [ 1740.652012][ T13] veth1_vlan: left promiscuous mode [ 1740.652086][ T13] veth0_vlan: left promiscuous mode [ 1741.193550][ T1398] FAULT_INJECTION: forcing a failure. [ 1741.193550][ T1398] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.193587][ T1398] CPU: 0 UID: 0 PID: 1398 Comm: syz.3.3418 Not tainted syzkaller #0 PREEMPT(full) [ 1741.193616][ T1398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1741.193630][ T1398] Call Trace: [ 1741.193638][ T1398] [ 1741.193647][ T1398] dump_stack_lvl+0x100/0x190 [ 1741.193687][ T1398] should_fail_ex.cold+0x5/0xa [ 1741.193718][ T1398] should_failslab+0xc2/0x120 [ 1741.193753][ T1398] __kmalloc_cache_noprof+0x91/0x6d0 [ 1741.193783][ T1398] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 1741.193822][ T1398] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 1741.193856][ T1398] ? rcu_is_watching+0x13/0xc0 [ 1741.193883][ T1398] ? trace_contention_end+0x126/0x160 [ 1741.193924][ T1398] ? snd_pcm_oss_write+0x49a/0xa30 [ 1741.193956][ T1398] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1741.193990][ T1398] ? __pfx___mutex_lock+0x10/0x10 [ 1741.194029][ T1398] ? get_pid_task+0x2a/0x250 [ 1741.194058][ T1398] ? get_pid_task+0xfc/0x250 [ 1741.194083][ T1398] ? get_pid_task+0xfc/0x250 [ 1741.194113][ T1398] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1741.194145][ T1398] snd_pcm_oss_write+0x4bb/0xa30 [ 1741.194177][ T1398] ? bpf_lsm_file_permission+0x9/0x10 [ 1741.194303][ T1398] ? security_file_permission+0x76/0x210 [ 1741.194340][ T1398] vfs_write+0x2aa/0x1050 [ 1741.194370][ T1398] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1741.194398][ T1398] ? lock_acquire+0x1d1/0x380 [ 1741.194431][ T1398] ? __fget_files+0x34/0x3d0 [ 1741.194462][ T1398] ? __pfx_vfs_write+0x10/0x10 [ 1741.194512][ T1398] ? find_held_lock+0x2b/0x80 [ 1741.194539][ T1398] ? __fget_files+0x215/0x3d0 [ 1741.194567][ T1398] ? __fget_files+0x215/0x3d0 [ 1741.194603][ T1398] ? __fget_files+0x21f/0x3d0 [ 1741.194643][ T1398] ksys_write+0x12a/0x250 [ 1741.194669][ T1398] ? __pfx_ksys_write+0x10/0x10 [ 1741.194707][ T1398] do_syscall_64+0x121/0x770 [ 1741.194740][ T1398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.194764][ T1398] RIP: 0033:0x7fcbb199e199 [ 1741.194784][ T1398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.194807][ T1398] RSP: 002b:00007fcbb285f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1741.194831][ T1398] RAX: ffffffffffffffda RBX: 00007fcbb1c26270 RCX: 00007fcbb199e199 [ 1741.194847][ T1398] RDX: 0000000080000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 1741.194862][ T1398] RBP: 00007fcbb285f090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.194877][ T1398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.194892][ T1398] R13: 00007fcbb1c26308 R14: 00007fcbb1c26270 R15: 00007ffcfd9470f8 [ 1741.194923][ T1398] [ 1741.624341][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1741.646688][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1741.784139][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1742.098042][ T769] Bluetooth: hci2: command tx timeout [ 1742.955558][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.955744][ T1315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.955899][ T1315] bridge_slave_0: entered allmulticast mode [ 1742.957726][ T1315] bridge_slave_0: entered promiscuous mode [ 1742.978678][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.978785][ T1315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.978907][ T1315] bridge_slave_1: entered allmulticast mode [ 1742.980628][ T1315] bridge_slave_1: entered promiscuous mode [ 1742.984071][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1743.045579][ T1315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1743.128955][ T1315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1743.225657][ T1315] team0: Port device team_slave_0 added [ 1743.234871][ T1315] team0: Port device team_slave_1 added [ 1743.300527][ T1315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.300548][ T1315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.300575][ T1315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1743.365216][ T1315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1743.365237][ T1315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.365267][ T1315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.168259][ T769] Bluetooth: hci2: command tx timeout [ 1744.263962][ T1315] hsr_slave_0: entered promiscuous mode [ 1744.270457][ T1315] hsr_slave_1: entered promiscuous mode [ 1744.273251][ T1315] debugfs: 'hsr0' already exists in 'hsr' [ 1744.273275][ T1315] Cannot create hsr debugfs directory [ 1744.274131][ T1472] FAULT_INJECTION: forcing a failure. [ 1744.274131][ T1472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1744.274164][ T1472] CPU: 1 UID: 0 PID: 1472 Comm: syz.1.3422 Not tainted syzkaller #0 PREEMPT(full) [ 1744.274191][ T1472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1744.274204][ T1472] Call Trace: [ 1744.274213][ T1472] [ 1744.274222][ T1472] dump_stack_lvl+0x100/0x190 [ 1744.274259][ T1472] should_fail_ex.cold+0x5/0xa [ 1744.274293][ T1472] _copy_to_user+0x32/0xd0 [ 1744.274329][ T1472] keyctl_capabilities+0x5a/0x160 [ 1744.274369][ T1472] __do_sys_keyctl+0x427/0x5a0 [ 1744.274406][ T1472] do_syscall_64+0x121/0x770 [ 1744.274439][ T1472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.274465][ T1472] RIP: 0033:0x7f41c6f9e199 [ 1744.274486][ T1472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.274508][ T1472] RSP: 002b:00007f41c7e56028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1744.274532][ T1472] RAX: ffffffffffffffda RBX: 00007f41c7226450 RCX: 00007f41c6f9e199 [ 1744.274547][ T1472] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1744.274561][ T1472] RBP: 00007f41c7e56090 R08: 000000000000000d R09: 0000000000000000 [ 1744.274576][ T1472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1744.274591][ T1472] R13: 00007f41c72264e8 R14: 00007f41c7226450 R15: 00007ffcbce03c18 [ 1744.274624][ T1472] [ 1744.680908][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1745.666533][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.979155][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.249360][ T769] Bluetooth: hci2: command tx timeout [ 1746.333897][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1746.337781][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1746.353516][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1746.355111][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1746.355750][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1746.424384][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.814769][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.467362][ T1315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1747.492192][ T1315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1747.505437][ T1315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1747.526905][ T1315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1747.550164][ T13] bridge_slave_1: left allmulticast mode [ 1747.550192][ T13] bridge_slave_1: left promiscuous mode [ 1747.550414][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.583000][ T13] bridge_slave_0: left allmulticast mode [ 1747.583031][ T13] bridge_slave_0: left promiscuous mode [ 1747.583281][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.965290][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.980725][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.985317][ T13] bond0 (unregistering): Released all slaves [ 1748.013046][ T1315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1748.022565][ T1315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1748.101686][ T1315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1748.161328][ T1315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1748.410085][ T5618] Bluetooth: hci0: command tx timeout [ 1748.840789][ T13] hsr_slave_0: left promiscuous mode [ 1748.841228][ T13] hsr_slave_1: left promiscuous mode [ 1748.841741][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.841756][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.842298][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.842314][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.845523][ T13] veth1_macvtap: left promiscuous mode [ 1748.845550][ T13] veth0_macvtap: left promiscuous mode [ 1748.845624][ T13] veth1_vlan: left promiscuous mode [ 1748.846642][ T13] veth0_vlan: left promiscuous mode [ 1749.056863][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1749.080560][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1749.571200][ T1315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.586992][ T1315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.616527][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.616652][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.660597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.660718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.118365][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.120166][ T1506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.120327][ T1506] bridge_slave_0: entered allmulticast mode [ 1750.122121][ T1506] bridge_slave_0: entered promiscuous mode [ 1750.317326][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.334407][ T1609] FAULT_INJECTION: forcing a failure. [ 1750.334407][ T1609] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.334433][ T1609] CPU: 0 UID: 0 PID: 1609 Comm: syz.1.3430 Not tainted syzkaller #0 PREEMPT(full) [ 1750.334450][ T1609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1750.334458][ T1609] Call Trace: [ 1750.334463][ T1609] [ 1750.334469][ T1609] dump_stack_lvl+0x100/0x190 [ 1750.334495][ T1609] should_fail_ex.cold+0x5/0xa [ 1750.334522][ T1609] should_failslab+0xc2/0x120 [ 1750.334544][ T1609] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1750.334563][ T1609] ? __alloc_skb+0x5b7/0x710 [ 1750.334577][ T1609] ? __alloc_skb+0x140/0x710 [ 1750.334592][ T1609] __alloc_skb+0x140/0x710 [ 1750.334604][ T1609] ? __alloc_skb+0x5b7/0x710 [ 1750.334616][ T1609] ? __pfx___alloc_skb+0x10/0x10 [ 1750.334629][ T1609] ? is_bpf_text_address+0x25/0x1a0 [ 1750.334652][ T1609] ? find_held_lock+0x2b/0x80 [ 1750.334671][ T1609] alloc_skb_with_frags+0xdd/0x760 [ 1750.334764][ T1609] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1750.334784][ T1609] ? is_bpf_text_address+0x94/0x1a0 [ 1750.334807][ T1609] sock_alloc_send_pskb+0x801/0x980 [ 1750.334829][ T1609] ? __lock_acquire+0x5c0/0x1f40 [ 1750.334853][ T1609] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1750.334876][ T1609] ? lock_acquire+0x1d1/0x380 [ 1750.334895][ T1609] ? aa_file_perm+0x197/0x14d0 [ 1750.334945][ T1609] ? find_held_lock+0x2b/0x80 [ 1750.334963][ T1609] tun_get_user+0x7d0/0x3cc0 [ 1750.335049][ T1609] ? __lock_acquire+0x5c0/0x1f40 [ 1750.335068][ T1609] ? __pfx_tun_get_user+0x10/0x10 [ 1750.335091][ T1609] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1750.335113][ T1609] ? find_held_lock+0x2b/0x80 [ 1750.335129][ T1609] ? tun_get+0x191/0x370 [ 1750.335148][ T1609] ? tun_get+0x191/0x370 [ 1750.335172][ T1609] tun_chr_write_iter+0xdc/0x200 [ 1750.335187][ T1609] vfs_write+0x6af/0x1050 [ 1750.335204][ T1609] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1750.335220][ T1609] ? __pfx_vfs_write+0x10/0x10 [ 1750.335235][ T1609] ? find_held_lock+0x2b/0x80 [ 1750.335262][ T1609] __x64_sys_pwrite64+0x1eb/0x250 [ 1750.335284][ T1609] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1750.335307][ T1609] do_syscall_64+0x121/0x770 [ 1750.335327][ T1609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.335342][ T1609] RIP: 0033:0x7f41c6f9e199 [ 1750.335356][ T1609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.335369][ T1609] RSP: 002b:00007f41c7e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1750.335384][ T1609] RAX: ffffffffffffffda RBX: 00007f41c7226450 RCX: 00007f41c6f9e199 [ 1750.335394][ T1609] RDX: 000000000000fdef RSI: 0000200000000340 RDI: 00000000000000c8 [ 1750.335403][ T1609] RBP: 00007f41c7e56090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.335412][ T1609] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1750.335420][ T1609] R13: 00007f41c72264e8 R14: 00007f41c7226450 R15: 00007ffcbce03c18 [ 1750.335438][ T1609] [ 1750.498122][ T5618] Bluetooth: hci0: command tx timeout [ 1750.882287][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.882451][ T1506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.882613][ T1506] bridge_slave_1: entered allmulticast mode [ 1750.884834][ T1506] bridge_slave_1: entered promiscuous mode [ 1750.978689][ T769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1750.984102][ T769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1750.986618][ T769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1750.991505][ T769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1750.992202][ T769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1751.125280][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.217696][ T1506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.362450][ T1506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.479508][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.610159][ T1506] team0: Port device team_slave_0 added [ 1751.652490][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.684140][ T1506] team0: Port device team_slave_1 added [ 1751.763616][ T1506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.763635][ T1506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.763661][ T1506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.831197][ T1506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.831216][ T1506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.831244][ T1506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1752.076582][ T1506] hsr_slave_0: entered promiscuous mode [ 1752.077752][ T1506] hsr_slave_1: entered promiscuous mode [ 1752.078839][ T1506] debugfs: 'hsr0' already exists in 'hsr' [ 1752.078861][ T1506] Cannot create hsr debugfs directory [ 1752.225992][ T1657] FAULT_INJECTION: forcing a failure. [ 1752.225992][ T1657] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.226028][ T1657] CPU: 1 UID: 0 PID: 1657 Comm: syz.1.3432 Not tainted syzkaller #0 PREEMPT(full) [ 1752.226056][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1752.226071][ T1657] Call Trace: [ 1752.226079][ T1657] [ 1752.226088][ T1657] dump_stack_lvl+0x100/0x190 [ 1752.226127][ T1657] should_fail_ex.cold+0x5/0xa [ 1752.226160][ T1657] should_failslab+0xc2/0x120 [ 1752.226196][ T1657] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1752.226225][ T1657] ? ksys_write+0x190/0x250 [ 1752.226254][ T1657] ? create_new_namespaces+0x30/0xac0 [ 1752.226291][ T1657] create_new_namespaces+0x30/0xac0 [ 1752.226325][ T1657] ? bpf_lsm_capable+0x9/0x10 [ 1752.226349][ T1657] ? security_capable+0x80/0x260 [ 1752.226388][ T1657] unshare_nsproxy_namespaces+0xf2/0x220 [ 1752.226422][ T1657] ksys_unshare+0x4a2/0xa70 [ 1752.226449][ T1657] ? __pfx_ksys_unshare+0x10/0x10 [ 1752.226474][ T1657] ? ksys_write+0x1ac/0x250 [ 1752.226512][ T1657] __x64_sys_unshare+0x31/0x40 [ 1752.226537][ T1657] do_syscall_64+0x121/0x770 [ 1752.226568][ T1657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.226591][ T1657] RIP: 0033:0x7f41c6f9e199 [ 1752.226611][ T1657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.226632][ T1657] RSP: 002b:00007f41c7e98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1752.226655][ T1657] RAX: ffffffffffffffda RBX: 00007f41c7226270 RCX: 00007f41c6f9e199 [ 1752.226670][ T1657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1752.226684][ T1657] RBP: 00007f41c7e98090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.226699][ T1657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.226713][ T1657] R13: 00007f41c7226308 R14: 00007f41c7226270 R15: 00007ffcbce03c18 [ 1752.226747][ T1657] [ 1752.568139][ T5618] Bluetooth: hci0: command tx timeout [ 1752.817559][ T50] dummy0: left allmulticast mode [ 1752.828729][ T50] dummy0: left promiscuous mode [ 1752.829448][ T50] bridge0: port 3(dummy0) entered disabled state [ 1752.850940][ T50] bridge_slave_1: left allmulticast mode [ 1752.850970][ T50] bridge_slave_1: left promiscuous mode [ 1752.851192][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.858882][ T50] bridge_slave_0: left allmulticast mode [ 1752.858909][ T50] bridge_slave_0: left promiscuous mode [ 1752.859098][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.057697][ T5618] Bluetooth: hci3: command tx timeout [ 1753.102879][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.107438][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1753.134905][ T50] bond0 (unregistering): Released all slaves [ 1753.218402][ T1315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.631552][ T50] hsr_slave_0: left promiscuous mode [ 1753.633169][ T50] hsr_slave_1: left promiscuous mode [ 1753.633761][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.633776][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.635113][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1753.635135][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.666303][ T50] veth1_macvtap: left promiscuous mode [ 1753.666347][ T50] veth0_macvtap: left promiscuous mode [ 1753.666498][ T50] veth1_vlan: left promiscuous mode [ 1753.666568][ T50] veth0_vlan: left promiscuous mode [ 1753.971655][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1753.998419][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1754.218699][ T1315] veth0_vlan: entered promiscuous mode [ 1754.506405][ T1315] veth1_vlan: entered promiscuous mode [ 1754.648466][ T5618] Bluetooth: hci0: command tx timeout [ 1754.790266][ T1506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1754.793772][ T1506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1754.794308][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.794641][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1754.794721][ T1620] bridge_slave_0: entered allmulticast mode [ 1754.795756][ T1620] bridge_slave_0: entered promiscuous mode [ 1754.798861][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.798962][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1754.799079][ T1620] bridge_slave_1: entered allmulticast mode [ 1754.800935][ T1620] bridge_slave_1: entered promiscuous mode [ 1754.868682][ T1315] veth0_macvtap: entered promiscuous mode [ 1754.871575][ T1506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1754.879130][ T1506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1754.923049][ T1620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1754.929005][ T1620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.947024][ T1506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1754.960780][ T1506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1755.002448][ T1620] team0: Port device team_slave_0 added [ 1755.010340][ T1315] veth1_macvtap: entered promiscuous mode [ 1755.030906][ T1506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1755.033375][ T1506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1755.070903][ T1620] team0: Port device team_slave_1 added [ 1755.106122][ T1620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.106141][ T1620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.106165][ T1620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.113774][ T1620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.113792][ T1620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.113820][ T1620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.143175][ T5618] Bluetooth: hci3: command tx timeout [ 1755.162849][ T1315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1755.236949][ T1620] hsr_slave_0: entered promiscuous mode [ 1755.244620][ T1620] hsr_slave_1: entered promiscuous mode [ 1755.263437][ T1315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1755.423878][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.470650][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.470801][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.470845][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.470888][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.601584][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.842723][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.863917][ T769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1755.880529][ T769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1755.882071][ T769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1755.884188][ T769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1755.884792][ T769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1756.042116][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.135341][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1756.145508][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.145527][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.303680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.303703][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.644365][ T1506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.667053][ T50] bridge_slave_1: left allmulticast mode [ 1756.667085][ T50] bridge_slave_1: left promiscuous mode [ 1756.667309][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.693933][ T50] bridge_slave_0: left allmulticast mode [ 1756.693965][ T50] bridge_slave_0: left promiscuous mode [ 1756.694209][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.055959][ T1742] capability: warning: `syz.0.3411' uses deprecated v2 capabilities in a way that may be insecure [ 1757.140161][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1757.149028][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1757.170857][ T50] bond0 (unregistering): Released all slaves [ 1757.208221][ T5618] Bluetooth: hci3: command tx timeout [ 1757.328124][ T1506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1757.538554][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.538693][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.786723][ T50] hsr_slave_0: left promiscuous mode [ 1757.787505][ T50] hsr_slave_1: left promiscuous mode [ 1757.798249][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1757.798275][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1757.799390][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1757.799410][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1757.822717][ T50] veth1_macvtap: left promiscuous mode [ 1757.822759][ T50] veth0_macvtap: left promiscuous mode [ 1757.822891][ T50] veth1_vlan: left promiscuous mode [ 1757.822963][ T50] veth0_vlan: left promiscuous mode [ 1758.007933][ T5618] Bluetooth: hci1: command tx timeout [ 1758.046805][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1758.071396][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1758.222170][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.222287][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1758.314992][ T1620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1758.320317][ T1620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1758.325262][ T1620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1758.342030][ T1620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1758.404477][ T1620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1758.418614][ T1620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1758.419638][ T1620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1758.424958][ T1620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1759.271289][ T1620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.289837][ T5618] Bluetooth: hci3: command tx timeout [ 1759.335449][ T1711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.335624][ T1711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.335755][ T1711] bridge_slave_0: entered allmulticast mode [ 1759.337661][ T1711] bridge_slave_0: entered promiscuous mode [ 1759.400198][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.400374][ T1711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.400520][ T1711] bridge_slave_1: entered allmulticast mode [ 1759.402806][ T1711] bridge_slave_1: entered promiscuous mode [ 1759.479733][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1759.595715][ T1711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.612394][ T1620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1759.654485][ T1711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1759.733466][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.733584][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1759.763999][ T1711] team0: Port device team_slave_0 added [ 1759.833086][ T1711] team0: Port device team_slave_1 added [ 1759.857519][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.857640][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1759.925875][ T1711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.925895][ T1711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.925923][ T1711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.945890][ T1711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.945909][ T1711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.945937][ T1711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.087918][ T5618] Bluetooth: hci1: command tx timeout [ 1760.204126][ T1711] hsr_slave_0: entered promiscuous mode [ 1760.205827][ T1711] hsr_slave_1: entered promiscuous mode [ 1760.206530][ T1711] debugfs: 'hsr0' already exists in 'hsr' [ 1760.206550][ T1711] Cannot create hsr debugfs directory [ 1760.326953][ T1506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1760.796387][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1761.387188][ T1506] veth0_vlan: entered promiscuous mode [ 1761.532395][ T1506] veth1_vlan: entered promiscuous mode [ 1761.706460][ T1506] veth0_macvtap: entered promiscuous mode [ 1761.713027][ T1506] veth1_macvtap: entered promiscuous mode [ 1761.757451][ T1506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1761.795180][ T1506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.885058][ T161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.898196][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.898265][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.898307][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.013510][ T1620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.168183][ T5618] Bluetooth: hci1: command tx timeout [ 1762.267471][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.267497][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.346512][ T1711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1762.352088][ T1711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1762.361212][ T1711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1762.377314][ T1711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1762.386181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.386205][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.394319][ T1711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1762.403350][ T1711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1762.407080][ T1620] veth0_vlan: entered promiscuous mode [ 1762.416081][ T1711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1762.431109][ T1711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1762.490897][ T1620] veth1_vlan: entered promiscuous mode [ 1762.636045][ T1620] veth0_macvtap: entered promiscuous mode [ 1762.653346][ T1620] veth1_macvtap: entered promiscuous mode [ 1762.674443][ T1865] FAULT_INJECTION: forcing a failure. [ 1762.674443][ T1865] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.674478][ T1865] CPU: 0 UID: 0 PID: 1865 Comm: syz.2.3425 Not tainted syzkaller #0 PREEMPT(full) [ 1762.674507][ T1865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1762.674521][ T1865] Call Trace: [ 1762.674530][ T1865] [ 1762.674539][ T1865] dump_stack_lvl+0x100/0x190 [ 1762.674579][ T1865] should_fail_ex.cold+0x5/0xa [ 1762.674612][ T1865] should_failslab+0xc2/0x120 [ 1762.674645][ T1865] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1762.674675][ T1865] ? ksys_write+0x190/0x250 [ 1762.674701][ T1865] ? create_new_namespaces+0x30/0xac0 [ 1762.674741][ T1865] create_new_namespaces+0x30/0xac0 [ 1762.674773][ T1865] ? bpf_lsm_capable+0x9/0x10 [ 1762.674796][ T1865] ? security_capable+0x80/0x260 [ 1762.674834][ T1865] unshare_nsproxy_namespaces+0xf2/0x220 [ 1762.674871][ T1865] ksys_unshare+0x4a2/0xa70 [ 1762.674897][ T1865] ? __pfx_ksys_unshare+0x10/0x10 [ 1762.674921][ T1865] ? ksys_write+0x1ac/0x250 [ 1762.674958][ T1865] __x64_sys_unshare+0x31/0x40 [ 1762.674982][ T1865] do_syscall_64+0x121/0x770 [ 1762.675014][ T1865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1762.675039][ T1865] RIP: 0033:0x7fe2bbd9e199 [ 1762.675058][ T1865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1762.675079][ T1865] RSP: 002b:00007fe2bcc69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1762.675101][ T1865] RAX: ffffffffffffffda RBX: 00007fe2bc025fa0 RCX: 00007fe2bbd9e199 [ 1762.675117][ T1865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1762.675131][ T1865] RBP: 00007fe2bcc69090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.675145][ T1865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.675159][ T1865] R13: 00007fe2bc026038 R14: 00007fe2bc025fa0 R15: 00007ffe1610db98 [ 1762.675191][ T1865] [ 1762.995577][ T1620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1763.235868][ T1620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.336110][ T1884] FAULT_INJECTION: forcing a failure. [ 1763.336110][ T1884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1763.336147][ T1884] CPU: 0 UID: 0 PID: 1884 Comm: syz.0.3438 Not tainted syzkaller #0 PREEMPT(full) [ 1763.336176][ T1884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1763.336190][ T1884] Call Trace: [ 1763.336199][ T1884] [ 1763.336208][ T1884] dump_stack_lvl+0x100/0x190 [ 1763.336253][ T1884] should_fail_ex.cold+0x5/0xa [ 1763.336285][ T1884] _copy_to_user+0x32/0xd0 [ 1763.336322][ T1884] keyctl_capabilities+0x5a/0x160 [ 1763.336362][ T1884] __do_sys_keyctl+0x427/0x5a0 [ 1763.336399][ T1884] do_syscall_64+0x121/0x770 [ 1763.336433][ T1884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.336458][ T1884] RIP: 0033:0x7f373bb9e199 [ 1763.336479][ T1884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.336504][ T1884] RSP: 002b:00007f373c990028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1763.336529][ T1884] RAX: ffffffffffffffda RBX: 00007f373be26450 RCX: 00007f373bb9e199 [ 1763.336545][ T1884] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1763.336559][ T1884] RBP: 00007f373c990090 R08: 00000000000003ff R09: 0000000000000000 [ 1763.336574][ T1884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1763.336588][ T1884] R13: 00007f373be264e8 R14: 00007f373be26450 R15: 00007ffe9567ca58 [ 1763.336623][ T1884] [ 1764.179519][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.180421][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.180459][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.180490][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.248640][ T5618] Bluetooth: hci1: command tx timeout [ 1764.421610][ T1711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.497161][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.497207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.556684][ T1711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1764.566874][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.566956][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.594061][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.594086][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.615696][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.615764][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.559031][ T1943] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1766.145782][ T1711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.874076][ T1711] veth0_vlan: entered promiscuous mode [ 1766.904342][ T1711] veth1_vlan: entered promiscuous mode [ 1767.035720][ T1711] veth0_macvtap: entered promiscuous mode [ 1767.078231][ T1711] veth1_macvtap: entered promiscuous mode [ 1767.477323][ T1978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1767.477406][ T1978] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1767.513785][ T1978] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1767.532130][ T1978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1767.537723][ T1978] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1767.581726][ T1978] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1767.594866][ T1978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1767.594939][ T1978] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1767.605335][ T1978] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1767.634686][ T1983] FAULT_INJECTION: forcing a failure. [ 1767.634686][ T1983] name failslab, interval 1, probability 0, space 0, times 0 [ 1767.634723][ T1983] CPU: 1 UID: 0 PID: 1983 Comm: syz.2.3445 Not tainted syzkaller #0 PREEMPT(full) [ 1767.634750][ T1983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1767.634765][ T1983] Call Trace: [ 1767.634773][ T1983] [ 1767.634781][ T1983] dump_stack_lvl+0x100/0x190 [ 1767.634832][ T1983] should_fail_ex.cold+0x5/0xa [ 1767.634868][ T1983] should_failslab+0xc2/0x120 [ 1767.634907][ T1983] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1767.634943][ T1983] ? security_file_alloc+0x34/0x2c0 [ 1767.634981][ T1983] security_file_alloc+0x34/0x2c0 [ 1767.635011][ T1983] init_file+0x95/0x480 [ 1767.635048][ T1983] alloc_empty_file+0x79/0x1c0 [ 1767.635087][ T1983] alloc_file_pseudo+0x183/0x290 [ 1767.635124][ T1983] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1767.635157][ T1983] ? inode_init_always_gfp+0xc90/0xfb0 [ 1767.635197][ T1983] sock_alloc_file+0x50/0x210 [ 1767.635226][ T1983] do_accept+0x242/0x530 [ 1767.635262][ T1983] ? do_raw_spin_lock+0x128/0x260 [ 1767.635289][ T1983] ? __pfx_do_accept+0x10/0x10 [ 1767.635351][ T1983] __sys_accept4+0x108/0x200 [ 1767.635387][ T1983] ? __pfx___sys_accept4+0x10/0x10 [ 1767.635432][ T1983] __x64_sys_accept+0x74/0xb0 [ 1767.635464][ T1983] ? lockdep_hardirqs_on+0x7d/0x110 [ 1767.635494][ T1983] do_syscall_64+0x121/0x770 [ 1767.635526][ T1983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.635553][ T1983] RIP: 0033:0x7fe2bbd9e199 [ 1767.635574][ T1983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1767.635598][ T1983] RSP: 002b:00007fe2bcbe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1767.635622][ T1983] RAX: ffffffffffffffda RBX: 00007fe2bc026360 RCX: 00007fe2bbd9e199 [ 1767.635640][ T1983] RDX: ffffffffffffffff RSI: ffffffffffffffff RDI: 0000000000000003 [ 1767.635656][ T1983] RBP: 00007fe2bbe350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1767.635671][ T1983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1767.635686][ T1983] R13: 00007fe2bc0263f8 R14: 00007fe2bc026360 R15: 00007ffe1610db98 [ 1767.635721][ T1983] [ 1767.665624][ T1978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1767.665700][ T1978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1767.706976][ T1978] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1768.068723][ T1711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1768.113442][ T1711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1768.278344][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.279241][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.279284][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.279317][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.514581][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.514604][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.606466][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.606490][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.936553][ T2017] FAULT_INJECTION: forcing a failure. [ 1768.936553][ T2017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.936590][ T2017] CPU: 1 UID: 0 PID: 2017 Comm: syz.2.3446 Not tainted syzkaller #0 PREEMPT(full) [ 1768.936623][ T2017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1768.936636][ T2017] Call Trace: [ 1768.936645][ T2017] [ 1768.936654][ T2017] dump_stack_lvl+0x100/0x190 [ 1768.936691][ T2017] should_fail_ex.cold+0x5/0xa [ 1768.936723][ T2017] _copy_to_user+0x32/0xd0 [ 1768.936759][ T2017] simple_read_from_buffer+0xcb/0x170 [ 1768.936791][ T2017] proc_fail_nth_read+0x1af/0x230 [ 1768.936823][ T2017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.936854][ T2017] ? rw_verify_area+0xce/0x6d0 [ 1768.936876][ T2017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1768.936903][ T2017] vfs_read+0x1e4/0xb40 [ 1768.936934][ T2017] ? __pfx_vfs_read+0x10/0x10 [ 1768.936959][ T2017] ? do_sys_openat2+0x159/0x1e0 [ 1768.936993][ T2017] ? __pfx_do_sys_openat2+0x10/0x10 [ 1768.937042][ T2017] ksys_read+0x12a/0x250 [ 1768.937068][ T2017] ? __pfx_ksys_read+0x10/0x10 [ 1768.937104][ T2017] do_syscall_64+0x121/0x770 [ 1768.937137][ T2017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.937162][ T2017] RIP: 0033:0x7fe2bbd5e9ce [ 1768.937183][ T2017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1768.937205][ T2017] RSP: 002b:00007fe2bcbc3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1768.937227][ T2017] RAX: ffffffffffffffda RBX: 00007fe2bcbc46c0 RCX: 00007fe2bbd5e9ce [ 1768.937241][ T2017] RDX: 000000000000000f RSI: 00007fe2bcbc40a0 RDI: 0000000000000008 [ 1768.937256][ T2017] RBP: 00007fe2bcbc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.937270][ T2017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.937285][ T2017] R13: 00007fe2bc0264e8 R14: 00007fe2bc026450 R15: 00007ffe1610db98 [ 1768.937318][ T2017] [ 1768.970278][ T1995] FAULT_INJECTION: forcing a failure. [ 1768.970278][ T1995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.970315][ T1995] CPU: 0 UID: 0 PID: 1995 Comm: syz.0.3447 Not tainted syzkaller #0 PREEMPT(full) [ 1768.970343][ T1995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1768.970357][ T1995] Call Trace: [ 1768.970365][ T1995] [ 1768.970374][ T1995] dump_stack_lvl+0x100/0x190 [ 1768.970412][ T1995] should_fail_ex.cold+0x5/0xa [ 1768.970444][ T1995] _copy_to_user+0x32/0xd0 [ 1768.970480][ T1995] keyctl_capabilities+0x5a/0x160 [ 1768.970520][ T1995] __do_sys_keyctl+0x427/0x5a0 [ 1768.970556][ T1995] do_syscall_64+0x121/0x770 [ 1768.970590][ T1995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.970615][ T1995] RIP: 0033:0x7f373bb9e199 [ 1768.970634][ T1995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.970654][ T1995] RSP: 002b:00007f373ca14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1768.970676][ T1995] RAX: ffffffffffffffda RBX: 00007f373be26090 RCX: 00007f373bb9e199 [ 1768.970691][ T1995] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1768.970704][ T1995] RBP: 00007f373ca14090 R08: 0000000080000000 R09: 0000000000000000 [ 1768.970718][ T1995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.970731][ T1995] R13: 00007f373be26128 R14: 00007f373be26090 R15: 00007ffe9567ca58 [ 1768.970763][ T1995] [ 1769.528234][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 1769.608032][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 1769.608052][ T769] Bluetooth: hci0: command 0x0c1a tx timeout [ 1769.688747][ T5618] Bluetooth: hci1: command 0x0c1a tx timeout [ 1771.608344][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 1771.687863][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 1771.687919][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 1772.121149][ T161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.132388][ T2062] FAULT_INJECTION: forcing a failure. [ 1772.132388][ T2062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.132424][ T2062] CPU: 1 UID: 0 PID: 2062 Comm: syz.2.3453 Not tainted syzkaller #0 PREEMPT(full) [ 1772.132452][ T2062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1772.132466][ T2062] Call Trace: [ 1772.132474][ T2062] [ 1772.132483][ T2062] dump_stack_lvl+0x100/0x190 [ 1772.132521][ T2062] should_fail_ex.cold+0x5/0xa [ 1772.132554][ T2062] _copy_to_user+0x32/0xd0 [ 1772.132591][ T2062] keyctl_capabilities+0x5a/0x160 [ 1772.132629][ T2062] __do_sys_keyctl+0x427/0x5a0 [ 1772.132667][ T2062] do_syscall_64+0x121/0x770 [ 1772.132700][ T2062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.132725][ T2062] RIP: 0033:0x7fe2bbd9e199 [ 1772.132745][ T2062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1772.132767][ T2062] RSP: 002b:00007fe2bcbe5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1772.132791][ T2062] RAX: ffffffffffffffda RBX: 00007fe2bc026360 RCX: 00007fe2bbd9e199 [ 1772.132807][ T2062] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1772.132821][ T2062] RBP: 00007fe2bcbe5090 R08: 00000000000003ff R09: 0000000000000000 [ 1772.132843][ T2062] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1772.132857][ T2062] R13: 00007fe2bc0263f8 R14: 00007fe2bc026360 R15: 00007ffe1610db98 [ 1772.132891][ T2062] [ 1772.384290][ T161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.569379][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1772.576598][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1772.578599][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1772.591676][ T161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.606004][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1772.606661][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1773.071615][ T161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.698289][ T5618] Bluetooth: hci2: command 0x0c1a tx timeout [ 1773.767926][ T5618] Bluetooth: hci3: command 0x0c1a tx timeout [ 1773.769207][ T5618] Bluetooth: hci0: command 0x0c1a tx timeout [ 1774.170979][ T161] bridge_slave_1: left allmulticast mode [ 1774.171010][ T161] bridge_slave_1: left promiscuous mode [ 1774.171241][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.175659][ T161] bridge_slave_0: left allmulticast mode [ 1774.175688][ T161] bridge_slave_0: left promiscuous mode [ 1774.175903][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.523838][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.526918][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.533323][ T161] bond0 (unregistering): Released all slaves [ 1774.728118][ T769] Bluetooth: hci1: command tx timeout [ 1774.893854][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1775.075490][ T2123] BUG: unable to handle page fault for address: ffffc9000f860fe8 [ 1775.083239][ T2123] #PF: supervisor write access in kernel mode [ 1775.089323][ T2123] #PF: error_code(0x0002) - not-present page [ 1775.095363][ T2123] PGD 13fe12067 P4D 13fe12067 PUD 1d2ca067 PMD 35d4a067 PTE 0 [ 1775.102842][ T2123] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 1775.108234][ T2123] CPU: 1 UID: 0 PID: 2123 Comm: syz.3.3459 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1775.117510][ T2123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1775.127569][ T2123] RIP: 0010:write_comp_data+0x7c/0xa0 [ 1775.132989][ T2123] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 9b [ 1775.152613][ T2123] RSP: 0018:ffffc90003c0fe80 EFLAGS: 00050257 [ 1775.158691][ T2123] RAX: ffffc9000f861000 RBX: 0000000000000000 RCX: ffffffff8249a325 [ 1775.166669][ T2123] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1775.174643][ T2123] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1775.182616][ T2123] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1775.190587][ T2123] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1775.198559][ T2123] FS: 00007ff68fddf6c0(0000) GS:ffff888123c52000(0000) knlGS:0000000000000000 [ 1775.207493][ T2123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1775.214081][ T2123] CR2: ffffc9000f860fe8 CR3: 000000006059c000 CR4: 00000000003526f0 [ 1775.222069][ T2123] Call Trace: [ 1775.225345][ T2123] [ 1775.228275][ T2123] rseq_register+0x115/0x350 [ 1775.233003][ T2123] __x64_sys_rseq+0x1b8/0x2e0 [ 1775.237710][ T2123] do_syscall_64+0x121/0x770 [ 1775.242308][ T2123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.248207][ T2123] RIP: 0033:0x7ff68ef9e199 [ 1775.252623][ T2123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.272232][ T2123] RSP: 002b:00007ff68fddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 1775.280676][ T2123] RAX: ffffffffffffffda RBX: 00007ff68f226450 RCX: 00007ff68ef9e199 [ 1775.288658][ T2123] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 1775.296639][ T2123] RBP: 00007ff68f0350b8 R08: 0000000000000000 R09: 0000000000000000 [ 1775.304612][ T2123] R10: 0000000008000006 R11: 0000000000000246 R12: 0000000000000000 [ 1775.312580][ T2123] R13: 00007ff68f2264e8 R14: 00007ff68f226450 R15: 00007ffd34effd38 [ 1775.320561][ T2123] [ 1775.323654][ T2123] Modules linked in: [ 1775.327561][ T2123] CR2: ffffc9000f860fe8 [ 1775.331731][ T2123] ---[ end trace 0000000000000000 ]--- [ 1775.337180][ T2123] RIP: 0010:write_comp_data+0x7c/0xa0 [ 1775.337220][ T2123] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 e9 9b [ 1775.337240][ T2123] RSP: 0018:ffffc90003c0fe80 EFLAGS: 00050257 [ 1775.337258][ T2123] RAX: ffffc9000f861000 RBX: 0000000000000000 RCX: ffffffff8249a325 [ 1775.337272][ T2123] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 1775.337285][ T2123] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 1775.337298][ T2123] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 1775.337311][ T2123] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 1775.337326][ T2123] FS: 00007ff68fddf6c0(0000) GS:ffff888123c52000(0000) knlGS:0000000000000000 [ 1775.337351][ T2123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1775.337367][ T2123] CR2: ffffc9000f860fe8 CR3: 000000006059c000 CR4: 00000000003526f0 [ 1775.337386][ T2123] Kernel panic - not syncing: Fatal exception [ 1775.437934][ T2123] Kernel Offset: disabled [ 1775.442255][ T2123] Rebooting in 86400 seconds..