last executing test programs: 9.204366314s ago: executing program 2 (id=4435): unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='-)', 0x2) epoll_wait$auto(r0, &(0x7f0000000200)={0xfb1c0406, 0x5}, 0x8, 0x1a) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x0) shutdown$auto(0x200000003, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x8000209c, 0xe9e, 0x4, 0x5, 0x1000, 0xfffffffffffffffd, 0xc, 0x6, 0x0, 0x2000000000000, 0x2, 0xd59, 0x101, 0x101, 0x2, 0x80080001]}, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) chown$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0x100000000) fcntl$auto_F_SETSIG(r1, 0xa, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002fbd7000fddbdf250c00000014000380100003800c00058008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r4], 0x34}}, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001e00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001dc0)={&(0x7f00000047c0)=ANY=[@ANYBLOB="78160000", @ANYRES16=0x0, @ANYBLOB="00052abd7000fcdbdf2508000000840001801400020076657468315f746f5f687372000000000800030006000000080003007fffffff14000200626f6e645f736c6176655f31000000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020070696d7265673000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESOCT=r5, @ANYBLOB="6000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e72300000000000000000000000000014000200776c616e3100000000000000000000004c00018014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7e65db1ab196a6359355d7cde1333fe08d8714f30dba03b3cc9401a4543535c9ad037783d100d3132ef5871a603dd5367ab4dd139c7d26e42bf1ed1456b6a5890ff21621bc31539655571f0591e4890e7371b4410c4c8a7a3d1efd07a7da2acf54be9dbaa713791b473d0dcfc50bc574bb9c01561bb7bf3751a0beba", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567000000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="4400018008000100", @ANYRES32=r4, @ANYBLOB="08000300a803000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1678}, 0x1, 0x0, 0x0, 0x8c1}, 0x40004) 9.084873659s ago: executing program 0 (id=4436): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/team_slave_1/enhanced_dad\x00', 0x101002, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x80000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) pselect6$auto(0x8a6d, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f00000012c0)={0x4, &(0x7f0000001280)=&(0x7f0000000280)="0175be5cdddba55f9c8acbacdf102fe507a07a42e8dada43f02fe1314b3a2ddd3d6f161ea78611e6625727444d0e81e8ac27909efd2f10455f6858b2096592758d462f7db739d1f1dc46c36a4ef5c4f1a7b87c1079bd31df65f15ad250635d624ae27596c93b4f7aaa78a00e349b639742a142b6927c54d0edb753fdf48f918bba0dfa861b39fcdd51aa78863cb71e02ec86d12acb02bb02fe39d6b448c1fbde9a3aaf580a43fe1417ee1ed4b2c6834c9456d5eecf68cb8ef8bd2b7dcd052fa019ee6cc53b9676c9056aec8c6eed35aadb9ac54d2d0396e484e068faef609d7c22950b7f23b8a1e3a384feb629e256c359e8b83b4944c6f48a442c96237fb662a5e8219fe8e3265cb6f33668e260d544b17afd52ab8f755554b6dea61b394c5cb74f41442970fe39fa7add40b99137b5ae87d06eb6fb3d8bb99837b9581f5a9a0c5d892fb2ebcb0f279f78c9c782e7a1945b467adccbacfea1d4ece3a23123c0bb7d3be131237e5174dfcd9a68f05ea58ef1e3189c962bf13ce004ffb5c5a9bb4d74b923189b4eb27e4a5365363661054df76adeddd44d7b09a0284eefbca0d42cd368d25e9db59d18ba1f4f247ceb65c1f7ecc8439e4b103916cfe9a309aa28f338e6477d48eb3fc96476ca5443a609a8c3d74fa0e1888be0bcdca66dc1edd88da4dd7fb33fe061ae0c18ff39d0a605ba1c7da61b1b022b6120d4bb5f2804a90377d49d58f85fdfc9a297c83689d993086266faa5e036341fd740c487cf42bb361026a560bf957c59686468e11960f7d74a90485eb91bdb0fbf6ad0c7c44c17aebc8e3b7f15abfe570483c024bc981c12b51e0cfb34f34f485a6d9d4e119fe91652b82355822a48896c81cbf4d1172a6035bf24bc0b676e80551018d595ce9c14a5108a9fad7d8e496424510e37ae55e3de13b75229e0ad1bd7fd5ccac9abef4c7c742218afc629c1cc0b7744b3ad488da8e4e290907d1b8f728c70b382df3548368eb5039218f688da25038407a1edc935ee78c4d119d9f71c616a5ae6ce6117a349f3899dbed9365842195d8bc4da5f5fcea9816e41df9b85c161c034af40406a7488ea192f1a1a80f48681e3749800d865a4062386589df51f65ce6629f2817527a2911ca93b9e0c63afb2bd791d55fc5e54a9f6a31a5dc26354c97e95828de2c9b301ff9dbf600e7694b21d88a6ff67f7d77f45093642849aa640da1f3e05335406ef2291a9437fc34ffd2356506414a463b3cad77fff68139c04402ece7aa27ae994bb4561e85e96caa90c4a7c23e414c786dc383726801d7d7169d1bab36d0dc5a31e38084d93a0c4deb26b404b92f751edc4ae67feaeb0ada9687469c5c98a15060fe2f1fa5c0cf46011276d272b4e2a4c2f8354d68ddadac92ec3ee6183590714128497234a8298a0bbec1c58828127c8d618c87a5fa732d5fe60f0adc7322d46360c5999bad4e6ddab9a70382c32b82736296930e96998902c0b68d1e620e3ecf16350bc13bf74a87470d2b559c5c78319a88af77bb2d1719f9507c1327c11938a58522775c19c246f84509f0a88e5ce042afedf34c9d6bdb7c78b1dd4054fcfdf25d3d8d94dd130196d27a06c2efae72556b18184434b1f3fde8d618aba0523484731e864d0f5b6653705190aead8a2b0975421532e5d8ff523f939b12093dc31db903baa40413a0a86e36fd17909fa966e8163ba30efd67e9b819203b64dd3180d37d37f7aa57fc092d49e85ed47216d7d63470b74e18a2fad3c1237b5edd7c9beccb8fadfe8127783a7cd753aab30f5c09f6e21a74c614cab3898cca49ad78e00da9586d6ece58346ed9991aac3bdc4529bcc252a8868bce1e2a7c6e2364a3f2cb24356edeea0321ad59dc05fe4b405ca5a6d1d7e195a77d58776ff4d4e6542f3dee33a94105c357af56690dbfd7fd569f3d7e8d682d1d3afc4bb149373fffd1e457ed3bb4bb93150c86482780b735637c2c8f83e1b375a0cef9dc70ebf179060f5bde534f508985c3489bfde63fbc662a4f34bb899734be8c5e7e2bdecd8406ff76297e8e17b179b23613089a0d9e6671e14d650801b59488b17c4d8682c8c40b100260a2e132ccf009636676917ab980c9fe71c7fe5ad8f0d77196e820266cf66c1ddd51eeed5acd12126fe3bca1000e44cd6785151e4313714da3adeca69fd0d320fe686ffcc8cf7cb901d925e85f5fe8945337f5459ec0bb623a7b0d29fb64cf7d81a8b99902a080df6f02f66cd9402401e30b61c63207b59f7c773f7389deea5f0b51fd546932e09f82715247d0a6e3e8a6c6a0ebd2528bc99bd22348c2f03aeaccfb42e6b44e7f1eeccbaa928674e2ee86c4c78c59a21af856565fcd6a7f3d6886ce78fa82dc149628f92d9bf1b587070b6a5959e9f1e6705d172ed5418891ab5e7dd08f79c88cf70c88cf0033e4e2c2c6ea59943a3b9f86680597ffeb940f861a781998981e8f846bfbf8d823dc1364471296ef2b9318b503b8ab25fdc807070dcd2e51db2a81762f1113299baf0baf03b641412cfe58341b9db6da6a03c8e8d17b25bd7c8a1088de4357438ea61c862febc049b4e1ffa81ddf1aa6bbdc97e03ebb240e72e8b90a46ac81d5002fe586cbaa5bb47cc3c40c3e4c8f9259a4dfd1f06432ea00aedf194a3f869b7d80b0f4c3d176b817f2cfaae92ffa324589ff4157752ee54aabeba665c7be78627fb29d93437710f4decaed32517fad6dbaaa51bd60c7e929b38e10f691a6ac731151055a2c75e652fa3c196b0f4d4cd9efe92058012db109306ae430351485748f072f037b9b1b8bc579d63e4c78a0e48bd22e77828d7e90b083c7171f3b0b6c18238377cdfdba5791eb00605d650ee78fba66a3a79c2ca2643f06ab437511504d0cb2909501ecee29a8bd54eca51a2911d88a2d1b67cb03630160ce293c1d5c5b512df0d330ba363df66e1f610c1b4eaeb87d29111e8d49be55562ebf59c43785db09a83d160cff4a5a5ff266d2fecb7c4db2d8ba97a6718ed633fffafd9fa09e6237570582760d71ec82b726d6167c50a1af5d33ce4f8784abc1841f1849923e1e52794cbabdb6061e261162e1b9dd31fd44365cec79b185be29e038be48ed81bc8d5d2f3709f0ef52fa983615307b5d705c674780ef293399ce9abd472de3bdc89ff708fd0013850a06c6537dd775af69d41a56624f5a0ad45691e8df0f15d77a68f34f0ee710bbb8da1d66eca58aa980ba51e0c870867c2803f99df956b46e86b5c0fcf1862e98d49c2dca28c6a9e1e86b3061248bb56b20a53623ecd8ff1be49f6476bfa1f692e97966661917b15bd16b961a7bc8c8c5b2525a08393ff75202ff9fbff03a205263691ec9d5479c3e8cd8c6d68ee13770c0796105907e9dd71b416929fbc494d9b2f1d1a6d56793698743a27cc30ef01e0acad61e6a54cc88d6d19b2d7d7331773cc9909ec5c4262a1e5d0dad4b3da67f1054d2a347f1d9b2b8c8ee8201594d8581fc667fdb07edbd53bcf1901937a8dff89d2a1ec192b13c52442dddff98d1e8ee82ee84ff9ca7e30f100515ee47ac0f2b6fce74dbe047383cfd279167672e14e806a801863cb9c02927c9cb28389a9eccaf6bc4135fc6dbaedad6d7d72b7ac295830346dac3369d9eeec6feae0ab6997d04c1325f9d45a110fbe6cb7cb0412f416ef1aec4d164d14a5c21e1e540627a59f0889171853fd4ef593993c4d35aa3c622bfbf1720bfb1b8a6973beca2ae5f690eac93eb2584a8e12d7dd8c36d1ad03e2556161fb9807651386cd0e50f27a63a811b0dc421b2e4878826d326f94cf67c1a2bd239a90374f5ffe2b9aac73186dd5b78ea62fd49f133c68a13ba4a87f0cf02cba592136e27758173863882e813b971f7640f7ba65fe4bac2840616b99562bfc3f0353de362ebbf77ec2d872d8dba7291f6de81dac635886ccfd3944dca254cd2b02ea912447c734a041b28ecec4ed84f665a73ce765d865700c51917fd8964d581049ebd3738161257b6f06f148120405a64ce810f2d95e7c3fec18fb09033684f09d54caf753b52491ad6bb1585d357c0adeab8df3a4dab20c8f5fc1b44775775370c2eb08f4149f2145b5f82b7bfb0b915db9f467789a398b20b3b72eb86d8c55a85177d04219e925478d84b85645942ef1ed56515b5bf1c82eb92111f90f73415758d94502d92a2abffbeff58d6226512310b067495bfd2e3db1994effc255e31ff2bd6ca0aad1904e1cb587a20085c143fea7968eebb7f4add5c9b159b18cccba2e53da397278592f624b45038ce3e5501b6ba3476dcf56f5efe5a574b1157caf4bbe9233325b7fd7a035e2ef7e02ab2086bcb0d6b055b6d58ae6ed8b5581a7e483112235f1660386df9009aa373a713b5cb0f8b55f401f098e95da77fa53ff71ca1802f32bbc60baac0bb206eb8342f510d89acacdcb9a038fba32c3de4ee0d67aae2070408c3596384c8cab03b7ad4fdd7dd8b6619112d8f2de505baf69b8c5c693e254e7851937894a887bcb92862a0263878eaed1b4295a819ba77132e2443e01fc13797a46ce565ec01a83268b9455a6ced89c1677606a3852208854985d1e2c3ad0bc19c85822a72a39c800073c6981d0437d360862fc1f97dd0362815a4a63bb1d5cf907e6283972c2098ecee7e877cb5ca7a5e8edfeca0de7c1b07d75876bcaa272087bc90d5cbb5c035744514e5efbfad56dff2757ad260ea9d823e102fe15c80e13dde457c67d0c019579624a825dce5d32c76e2035bc05ea3b8d4f728a6cef34211891e2693c0497673c1c1e2e7089bf28f6a5964e5f8032ed6ed41a58a0cf6a0e7e28d253a8b6b944f51cbedf8685e04cdec71511e3da041300982351ff39dcdd0118ca3af1556156b5a0d5b96c41d026713232924ebfffbc2fdbf5fab63cb2407f20dbb3dfd0247c108dd232a5d6c68609a6900ba63692d7974e805d9be278bd5b2d5895b34e2c19b1515185a4d40a483a7b10506098c51ea859b43ac3e92da27e96e6b476dd7132536eb19bbe170f2428c107393381354be527c02e7aa486d265e4ddf457700d12d38e26eeb426a0a1452c635c5b7db2e677370fbaffa5cc65bc1cdcde5027946b1b2288998c008002c1b2ae081f2f99cd50a7b524bbcf46b7622aba653848e8d08ba9ba16d2d9be8a16087787deed19131788dbb062a3e43eff97db793ede82dd0df590cb2e502521e4090fbfdefe386129782ee01578ece4d3bd581fbc1b14754f5c491b065e7afce790ada4b2eba860c780b9d8ad97fd31e11d3de599394242b240b48fc483084d430edb0d76be1e05528b3bf2a2e563fc1d42f31cb6aaed3f2775cc5814fc748a964e0ba9f163b7e4de78e534d98b59247fc3c699cb2c2a4c48abbc3bc872bbe2ccd918825ce70f5477926fadae389156f37e1fc854b6a8c1e03acd8e0616bafe32cf1c3014e0c4a66ff1ba61bf714068fa67d48d95247eb923e1b8dffe7cdbd4c7b83b74bb548915c5658544b6e8f988e9e9ec21cb29bd67b5391e808163752fa461f5c84cfaf86646131485b845e23a53236532e4e1455e6565e6d6ab3711e46657440188e7b6a6be10f3a5933d6402063bcf8ccce094b1c374fb8baf72abb453f3f31424a656a1c4c1e7b60b3a7f938dcaf9eaa84953e57de6af2a616cc0f4d6776b9d65cb27b116cc98545f2f928675166284c430031421106bc278823242c33254d6f6babdeed84ac6cb91f0da76a36088fcfe52ba6d85b4325175aab2ca56b2561458cbe85a283da673777bb23a02a88cf75280631fe249c4158474bf9bfc8389c6fe", 0x10000}) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x22) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x480001, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r2 = setfsgid$auto(0xee01) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8004, 0x0, 0x80000000000003) mseal$auto(0x0, 0x7ddd, 0x40000) r3 = socket(0x1, 0x1, 0x1) writev$auto(0x3, 0x0, 0x8) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x4000102) pipe$auto(0x0) pipe$auto(0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)={0x5, 0x750c}, &(0x7f00000000c0)={0xfff}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.965645793s ago: executing program 3 (id=4437): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, 0x0) r2 = setfsgid$auto(0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) shmctl$auto_SHM_STAT_ANY(0x8, 0xf, &(0x7f0000000040)={{0x4, 0x0, r2, 0x9, 0x5, 0x95, 0x2}, 0x0, 0x49aa00a, 0x654fb2f5, 0x6, @inferred, @raw=0xa, 0x9, 0x0, 0x0, &(0x7f0000000200)="296ed9afc88801ff9a46d3dc48bc46138e2bafc8a51a04e361f3391fe4174e553b1c4d013eb655df3c4954efe582cd4a0179c518dc4f13d8585ae86e78b45640ac9ecfb4ba600ed634ea3f7b9c747fde8b11494a9a63190784a36efef20317a88e1b9eaaf4244ca6cb4003d52e9cb92d852d0dde2dc682d30086f3ff8d63eb527e7fa8301d9d04b83739203dc4790074d2d784230f75ce08c726afc22eba57d01722c99fa1b48dff230915895482cb5277ceaf8eb613ae58bf5b403268d600ef3efbb89543a92888e3568be0d1b6568f066b1849"}) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x4000, 0x0) rseq$auto(0x0, 0x6, 0x8, 0x10) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000340), 0x8a480, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000001380)={0x4, &(0x7f00000013c0)=&(0x7f0000001400), 0x100}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xca, &(0x7f0000001400)='\x04\x0e\x06\x00\x81\xff\x00\x00\xf6\xf5\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\xd9}\xeb\xe9w6\x1f\xa5\x80\xae\xefdM\r\\\x9a\xd2k\"Z\\WQ\x10*V\x8dn\xc6o\x9f\x06\xda\xba[\xb6n\x7f\x00KP\t\x13\x022\xf4\xa0k\xd7\xf1H\x97\xdd\xa2:!>3.JTf\xbb\x10\xdc\x01\xe6\xf0\xd6\xad/\nE}\x89\xc3\xbb$\xeb\x9bl\xbbT\xa3\x9e$j<\x8b?,\xed\xed\b\x9c1\x01p\xfd{\xf7\x01\x00\x00\x80\xd1ro\x1f\x147<\\;\xc4\x00\a\xe4\xa2$@-\xac\xac\t\xad4\x8b\x18\a\x00\x00\x00\x85\xd4b\x84z\x87/\xa3~\x8a\x80\xe6\x1dK\xce\xe1\xbc\'j\x1b\\\x91@\x9f\x92\xc9_\xc1\xff\x14 \xe3\xber\x01j\a\x88M>8@\xde,\x89w\xc0#CYR]\xcc\t\xef,\x0fS=#\x96\x97$\xacj\xb3\t\x19\x8eH\xca\x00\x84\x01/\xf8~\xcf\x1a~\x9bB\xd0a\x99\x91\xfa]s\x19z\xb0L|\x01]nM\xe8O\xb9{\xde', 0x5) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) pwritev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000400), 0xfdef}, 0x2000000003, 0xd, 0x3) 7.442396649s ago: executing program 1 (id=4438): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D2\x00', 0x400001, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='-)', 0x2) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00012abd7000fcdbdf251900000006006d00070000000400b800"], 0x20}}, 0x4040008) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)=ANY=[@ANYBLOB="34ffea00", @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf250100000007000a0063262100080007000900000008000f00ff7fffff080015000400"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040014) unshare$auto(0x40000080) mmap$auto(0x8, 0x4000000200006, 0x2, 0x19, r1, 0x300000000001) madvise$auto(0x0, 0x200, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r2, 0x0, 0x0, 0x6) select$auto(0xbf2, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/radio30\x00', 0x80040, 0x0) read$auto_v4l2_fops_v4l2_dev(r4, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20809) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f0000000040)=0xc32) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) mbind$auto(0x3, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0xdc19, 0x5, 0xf) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 7.334126461s ago: executing program 2 (id=4439): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, 0x0) r2 = setfsgid$auto(0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) shmctl$auto_SHM_STAT_ANY(0x8, 0xf, &(0x7f0000000040)={{0x4, 0x0, r2, 0x9, 0x5, 0x95, 0x2}, 0x0, 0x49aa00a, 0x654fb2f5, 0x6, @inferred, @raw=0xa, 0x9, 0x0, 0x0, 0x0}) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) rseq$auto(0x0, 0x6, 0x8, 0x10) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000001380)={0x4, &(0x7f00000013c0)=&(0x7f0000001400), 0x100}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xca, &(0x7f0000001400)='\x04\x0e\x06\x00\x81\xff\x00\x00\xf6\xf5\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\xd9}\xeb\xe9w6\x1f\xa5\x80\xae\xefdM\r\\\x9a\xd2k\"Z\\WQ\x10*V\x8dn\xc6o\x9f\x06\xda\xba[\xb6n\x7f\x00KP\t\x13\x022\xf4\xa0k\xd7\xf1H\x97\xdd\xa2:!>3.JTf\xbb\x10\xdc\x01\xe6\xf0\xd6\xad/\nE}\x89\xc3\xbb$\xeb\x9bl\xbbT\xa3\x9e$j<\x8b?,\xed\xed\b\x9c1\x01p\xfd{\xf7\x01\x00\x00\x80\xd1ro\x1f\x147<\\;\xc4\x00\a\xe4\xa2$@-\xac\xac\t\xad4\x8b\x18\a\x00\x00\x00\x85\xd4b\x84z\x87/\xa3~\x8a\x80\xe6\x1dK\xce\xe1\xbc\'j\x1b\\\x91@\x9f\x92\xc9_\xc1\xff\x14 \xe3\xber\x01j\a\x88M>8@\xde,\x89w\xc0#CYR]\xcc\t\xef,\x0fS=#\x96\x97$\xacj\xb3\t\x19\x8eH\xca\x00\x84\x01/\xf8~\xcf\x1a~\x9bB\xd0a\x99\x91\xfa]s\x19z\xb0L|\x01]nM\xe8O\xb9{\xde', 0x5) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) pwritev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000400), 0xfdef}, 0x2000000003, 0xd, 0x3) 7.287408668s ago: executing program 3 (id=4440): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a90950735e7b19", 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x4034, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/packet\x00', 0x0, 0x0) acct$auto(&(0x7f00000002c0)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') eventfd$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0x20c081, 0x0) socket(0xa, 0x801, 0x84) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x15, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0xb, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) pread64$auto(r2, 0x0, 0x2, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.267787427s ago: executing program 0 (id=4441): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x3, 0x8}, 0x80000009, 0x1ff, 0x9, 0x2, @raw=0x2, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0d", 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x201, 0x0) mmap$auto(0xc0000, 0x5, 0xe3, 0xeb5, 0xffffffffffffffff, 0x200000000008000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty1\x00', 0x40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config/target/version\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0xe) socket(0xa, 0x801, 0x106) pipe2$auto(0x0, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0x0, 0x0) socketpair$auto(0x6, 0x4, 0x0, 0x0) 5.973469425s ago: executing program 1 (id=4442): pselect6$auto(0x209, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x1) inotify_init1$auto(0x3000000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r2, 0xc058560f, r2) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x23, 0xffffffffffffffff, 0x10000}, 0x12) keyctl$auto(0x7, 0x1, 0x6, 0x3, 0x8000000003ff) ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000080)=0x3) 5.616855512s ago: executing program 2 (id=4443): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a90950735e7b19", 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) ioprio_get$auto(0xfffffffe, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x4034, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf250200000008000a00010000007900028008001800", @ANYRES32=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) acct$auto(&(0x7f00000002c0)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') eventfd$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0x20c081, 0x0) socket(0xa, 0x801, 0x84) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x15, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0xb, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) pread64$auto(r2, 0x0, 0x2, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) 5.599221792s ago: executing program 3 (id=4444): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy$auto(0x8003, 0x0, 0x4) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) r0 = socket(0x11, 0x2, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x189002, 0x0) r2 = socket(0xa, 0x2, 0x3a) r3 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/cec/cec25/status\x00', 0x0, 0x0) (async) r4 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/cec/cec25/status\x00', 0x0, 0x0) mq_timedsend$auto(r4, &(0x7f0000000300)='/dev/hpet\x00', 0x0, 0xf8d, &(0x7f0000000340)={0x7, 0xa4f}) bpf$auto(0x5, &(0x7f0000000100)=@link_update={r3, @new_map_fd=r2, 0x5, @old_map_fd=r1}, 0x7) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000380), r0) read$auto_ppp_device_fops_ppp_generic(r1, &(0x7f00000001c0)=""/200, 0xc8) (async) read$auto_ppp_device_fops_ppp_generic(r1, &(0x7f00000001c0)=""/200, 0xc8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) (async) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2) (async) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2) getdents64$auto(r5, 0x0, 0x200c8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (async) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.570506345s ago: executing program 0 (id=4445): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = eventfd$auto(0x1004) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000500)={{@raw=0x7, 0x0, 0x1e02c17c, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0xfffffffe}, 0x2, 0x80, 0x4, @inferred, @reserved="f4d3cddf749819bb6bb0ffd3be267660e604c2e08a7952f2d54b8e596d11dcd5ea5098a75a3f318489930c1f503095e5c0a36a5f52d607811d54a6470a9b3de1d9892e3f71557240924156c8a69ffb0edd71ede748c1037a5fc6134e8487c4f7b174337ba05c011359ed80fbe9a4f0d3a30abaa989213665d6659f9ec82de25d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000640)={@siginfo_0_0={0xf9, 0xd, 0x1, @_sigpoll={0xd}}}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{&(0x7f0000000700), 0x5ac, &(0x7f0000000740)={&(0x7f0000000780), 0x1f}, 0x5, &(0x7f00000007c0), 0x5, 0x5a}, 0x400005}, 0x2, 0x100) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af22, r0) preadv$auto(r1, &(0x7f0000001b40)={&(0x7f0000000b40)="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", 0x2}, 0x8, 0x6e40aff8, 0x2) rseq$auto(0x0, 0x20, 0x0, 0xe) mincore$auto(0x1000, 0x4000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) write$auto(r3, 0x0, 0x200000) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x0, 0x4, 0xff, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x7, 0x3, 0x1f7, 0x8, 0x81, 0xd68, 0x5, 0x6, 0x5}, 0xed) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0xffff, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred, @raw=0x7fffffff}) close_range$auto(0x2, 0x8, 0x0) fcntl$auto_F_SETFL(r2, 0x4, 0x67ce89ed) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000b00), 0x80000, 0x0) ioctl$auto_UI_END_FF_ERASE(r4, 0x400c55cb, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.321686921s ago: executing program 1 (id=4446): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, r0, 0x13, 0x70bd24, 0x25dfdbfc, {0x2, 0x0, 0x3f}, [@NL80211_ATTR_WDEV={0xc}]}, 0x20}, 0x1, 0x16, 0x0, 0xc0480c0}, 0x48050) 4.181404643s ago: executing program 1 (id=4447): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x3, 0x8}, 0x80000009, 0x1ff, 0x9, 0x2, @raw=0x2, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0d", 0x0}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x201, 0x0) mmap$auto(0xc0000, 0x5, 0xe3, 0xeb5, 0xffffffffffffffff, 0x200000000008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty1\x00', 0x40, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x28c40, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x5, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config/target/version\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0xe) socket(0xa, 0x801, 0x106) pipe2$auto(0x0, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0x0, 0x0) socketpair$auto(0x6, 0x4, 0x0, 0x0) 4.080706586s ago: executing program 3 (id=4448): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a90950735e7b19", 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x4034, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/packet\x00', 0x0, 0x0) acct$auto(&(0x7f00000002c0)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') eventfd$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0x20c081, 0x0) socket(0xa, 0x801, 0x84) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x15, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0xb, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.05060171s ago: executing program 2 (id=4449): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, 0x0) r2 = setfsgid$auto(0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) shmctl$auto_SHM_STAT_ANY(0x8, 0xf, &(0x7f0000000040)={{0x4, 0x0, r2, 0x9, 0x5, 0x95, 0x2}, 0x0, 0x49aa00a, 0x654fb2f5, 0x6, @inferred, @raw=0xa, 0x9, 0x0, 0x0, &(0x7f0000000200)="296ed9afc88801ff9a46d3dc48bc46138e2bafc8a51a04e361f3391fe4174e553b1c4d013eb655df3c4954efe582cd4a0179c518dc4f13d8585ae86e78b45640ac9ecfb4ba600ed634ea3f7b9c747fde8b11494a9a63190784a36efef20317a88e1b9eaaf4244ca6cb4003d52e9cb92d852d0dde2dc682d30086f3ff8d63eb527e7fa8301d9d04b83739203dc4790074d2d784230f75ce08c726afc22eba57d01722c99fa1b48dff230915895482cb5277ceaf8eb613ae58bf5b403268d600ef3efbb89543a92888e3568be0d1b6568f066b1849"}) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) rseq$auto(0x0, 0x6, 0x8, 0x10) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x8a480, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000001380)={0x4, &(0x7f00000013c0)=&(0x7f0000001400), 0x100}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xca, &(0x7f0000001400)='\x04\x0e\x06\x00\x81\xff\x00\x00\xf6\xf5\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\xd9}\xeb\xe9w6\x1f\xa5\x80\xae\xefdM\r\\\x9a\xd2k\"Z\\WQ\x10*V\x8dn\xc6o\x9f\x06\xda\xba[\xb6n\x7f\x00KP\t\x13\x022\xf4\xa0k\xd7\xf1H\x97\xdd\xa2:!>3.JTf\xbb\x10\xdc\x01\xe6\xf0\xd6\xad/\nE}\x89\xc3\xbb$\xeb\x9bl\xbbT\xa3\x9e$j<\x8b?,\xed\xed\b\x9c1\x01p\xfd{\xf7\x01\x00\x00\x80\xd1ro\x1f\x147<\\;\xc4\x00\a\xe4\xa2$@-\xac\xac\t\xad4\x8b\x18\a\x00\x00\x00\x85\xd4b\x84z\x87/\xa3~\x8a\x80\xe6\x1dK\xce\xe1\xbc\'j\x1b\\\x91@\x9f\x92\xc9_\xc1\xff\x14 \xe3\xber\x01j\a\x88M>8@\xde,\x89w\xc0#CYR]\xcc\t\xef,\x0fS=#\x96\x97$\xacj\xb3\t\x19\x8eH\xca\x00\x84\x01/\xf8~\xcf\x1a~\x9bB\xd0a\x99\x91\xfa]s\x19z\xb0L|\x01]nM\xe8O\xb9{\xde', 0x5) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) pwritev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000400), 0xfdef}, 0x2000000003, 0xd, 0x3) 3.996354537s ago: executing program 0 (id=4450): r0 = socket(0x1, 0x80000, 0x1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, &(0x7f0000000000)='/proc/self/pagemap\x00', &(0x7f0000000040)=0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket(0xa, 0x3, 0x73) setsockopt$auto(r1, 0xff, 0x7, 0x0, 0x3) r2 = io_uring_setup$auto(0x6, 0x0) sendto$auto(r2, 0x0, 0xb, 0x85, &(0x7f0000000080)=@rc={0x1f, @any, 0xf}, 0x1c) socket(0xa, 0x3, 0x3c) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) madvise$auto(0x0, 0x2003f2, 0x14) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x2a, 0x42, 0x0, 0x8) rt_sigprocmask$auto(0x0, &(0x7f0000000100)={0xfffffffffffffe01}, 0x0, 0x8) write$auto(0x3, 0x0, 0xffd8) r3 = getpid() tgkill$auto_SIGCONT(r3, r3, 0x12) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x0, 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.552257027s ago: executing program 1 (id=4451): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a90950", 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) ioprio_get$auto(0xfffffffe, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x4034, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf250200000008000a00010000007900028008001800", @ANYRES32=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/packet\x00', 0x0, 0x0) acct$auto(&(0x7f00000002c0)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') eventfd$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0x20c081, 0x0) socket(0xa, 0x801, 0x84) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x15, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0xb, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) pread64$auto(r1, 0x0, 0x2, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) 2.333761894s ago: executing program 3 (id=4452): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x80000007, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x8}, {0x9, 0x8, 0x3}, {0x3ff, 0x5, 0xffffffff}, {0x3, 0x8001, 0x7}, {0xb1, 0x3, 0xe}, {0x3, 0x4, 0xffff3da3}]}) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000100), 0x115200, 0x0) bind$auto(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x6) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x2b, 0x1, 0x1) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) move_pages$auto(0x0, 0x1fcd0377, 0x0, 0x0, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b80ebd41, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="20edd9d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) pread64$auto(r1, 0x0, 0x2, 0x5) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(r1, 0x80184153, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=&(0x7f00000018c0)="4e611d00008010eba39d56c50d7317467684ec0da25fc753552e3b0fac90a15a67300efbedd7bb84c7a0cd89c09dc4755ca08ab1641eaf3569f43ec10552f5e8466f1202c0045e2eea0000000000000000000000004cce86d7f87348b5c40c82272c54829e1e416e3c5d5ca2ab479898c791e535704087d4c95a47de9198a78b229d2d7e617782aefd587db55380764cb6666612ad29f55d779e681ddab087cf77c8fecf2c74167cb5d8ad200c7be212dec474b6022ef5f0898c14775987061ef7cd4b1008b128e73e98adef73e097da", 0x7ffffffc}) syz_clone3(&(0x7f0000001740)={0x800, &(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f00000002c0), {0x1b}, &(0x7f0000000680)=""/4096, 0x1000, &(0x7f0000001680)=""/79, &(0x7f0000001700)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) prctl$auto(0x5, 0x1, r3, 0x9, 0x6) r4 = socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) keyctl$auto(0x1f, 0x1, 0xee01, 0x3, 0xfffffffffffffffc) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="080025bd7000ffdbdf250d000000140002800800010007000000080001000100000008000300", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="34000280080003000b0000003c898f4d1a171d409b109ab008000300010000000800030082f0000008000100030000000800010001000080080003008d1a3d49363ec3f0bf4b5d77a5a71d0076b026783817f3fad361963cf6a0b3a36539046c725b8e26693e9cde7745a6c95903afa8cdd56e0bdae94ef4733c0b36f69b085477f190d1f7c967ffaf2fe4d258d4e3ac5dd642ac31802832c7ca673cea8fab82efbd0f324fd36162774a47702bb9a45a167d71decd6f54ce360e18f43fc1e53fd858123e3278252f7aac04ee433382470000000000000000", @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$auto_SO_SNDTIMEO_OLD(r1, 0x7, 0x15, &(0x7f0000000200)='wg1\x00', 0xab) 2.268799671s ago: executing program 2 (id=4453): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a90950735e7b19", 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x4034, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf250200000008000a00010000007900028008001800", @ANYRES32=0x0], 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/packet\x00', 0x0, 0x0) acct$auto(&(0x7f00000002c0)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') eventfd$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0x20c081, 0x0) socket(0xa, 0x801, 0x84) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x15, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0xb, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) pread64$auto(r2, 0x0, 0x2, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.073075844s ago: executing program 0 (id=4454): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(r0, &(0x7f0000000200)='k:\x1f\x8eF!D?B@\xa3\x86L\xd3=\x8e\xf9=y\xd7\tHB\xa9ngn\xa8\x86\xfcA.\xc4\x04\xd3\xe5J\xf9\xfasE\x85\xc3\x01\x11e\x90\x92\xcc\x82\xbb\x06\xe7Bg\x1b~\x9e\x05z\x10\xd7\"\xab\f\x1d\xcf\xa3\xee`M\xebhWp\xa4\xc5\x96\xd9\nD\x16X\f\x9e\xd4\x03z#\xef_G\xec\xba\r/\xc2\"A\x8e\x8fl\t\xc7_u\xed\xe6\xf0\x9bL\xc0L\xbb\xdd\x87\xb9W\xb5O}\xd3\xd3F\x0e\x9b\xc74\x13\xce1\xa5\x9fo\xdds\x90\xb5\xdc\x16\x02\xb1q\xc7\xee\x1b\x9d\xd5q\xa3&\xf7\xfb\xa1g\x10\xc6\xd2\x15', 0x60) setns(0xc9, 0x0) socket(0x27, 0x3, 0x1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x900, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vbi31\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0145608, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bus/usb/001/001\x00', 0xa9202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) preadv$auto(0x40000000000003, &(0x7f0000000380)={0x0, 0x7}, 0x5, 0x8, 0x1000) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/maps\x00', 0x80400, 0x0) adjtimex$auto(&(0x7f0000000400)={0x72, 0x0, 0xff, 0xfffffffffffffffb, 0x1, 0x0, 0xfffffffe, 0x0, 0x3ffbffffffffff, 0x1, 0x4007, {0x200, 0x3}, 0x80, 0x80, 0x20000, 0x5, 0x0, 0x7fff, 0x9, 0x18d, 0x200, 0xa, 0x2015}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.508484709s ago: executing program 1 (id=4455): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a90950735e7b19", 0x8) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x4034, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) socket(0x1e, 0x1, 0x0) getpeername$auto(0x3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/packet\x00', 0x0, 0x0) acct$auto(&(0x7f00000002c0)='/sys//block/nbd3/que\xd6D\xf0\xfa^!\"B\xf9\xd2\x0f]r\xd4\xed\xf9ue/rotational\x00\xda\xc8\x83\x8b\x82;\xf4\n\xcfn\thz\x8f\x17\xfc\x1aK^\xb1\x8b\x96\xfdPw\xa4M@.(\xa6[\xc2\xfcn\x115\xfbHX\x83\xbf\x021\xd6s\xa8\xb1\a-HG\xae\x03\xc3\x1f`\x84\x1b\x81\xda2r{$3dr\xfd\f\xae\x96u\x91\x11ru\xa5\x9f\xec\xe7\x99\xbe\xcb\bN:\xe9\xf0KFJ\aD\xb4(\x03h\xa0%\xf6N\xeb3\x1c\xdcQ+\xa2\xc1wM\xde)J[\xe6O%\xa1\xda\xa9\x9c \x18pD\xb0P\xa3\x86\xfd[\x05\xdb\xcc\xb4d\xab\xc4\a#3.\xfb>\xb0\xf7\x8cp\xab\xd1\xaa\x9d\x8djz\xb2\xcf\xa5\xb5lS\xd7\x80\x8eI\"eH\x9f+o\x8d\xff\x7f!\x9f0\xd2n\xb8/Gy9\x9f\x85EP\x99\xf4\xfcN\xfe\x1e\b\x84G\x8a\x0f\xab\x14vVy*\x1f\xe6\xdf\xe6^\b\x1ecm\xc5\xfe+\x8d\xd5\x17\'oQb\xc1\x89l\xd2\x9d7C\xbf\tdB(\xb6\x93\xdfj~`\x94\xc2\x99t\xbf)|A\x05\x1b\xf7^\xd9\xa1\xee\xfb\'\xaa\x13\xb33\xe7\xc3G!}\x18\a\xbd@\xea\xfd>f\xb7\xb9\xe4\xb1\x1b\x1b\x95\x01\xe4i\x82\xda\x82~1cT\xdb\x92Q\xbd\xc1z\xc0\xf8\x88~\xe3id\xceg\x98\x8a\xa0Rq\x0f^\x11r:\xe1\xd1a\x15\xbb\xd6]\xc6\xfb\xbf`\xd1\\\xfd\xeeW\xc4\x0f\x10bv5\xa2\xde|&\xee\xaf\xa9Y\xc1\x1d\x8a$\xd61Uq\xe3\x94\x9e;8\x7f\x18J\xaf\xbd\xf6\x950W\x03\xdbrf\xe6\xfb\xe5\xf1\xc4a8\xcfo#R\xaa\xfb\xbc\x00') eventfd$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0x20c081, 0x0) socket(0xa, 0x801, 0x84) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x15, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0xb, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) pread64$auto(r2, 0x0, 0x2, 0x5) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 396.71603ms ago: executing program 3 (id=4456): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r1 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r1, 0x0, 0x40, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(0x0, 0x0) shmctl$auto_IPC_RMID(0x4, 0x0, 0x0) r2 = setfsgid$auto(0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) shmctl$auto_SHM_STAT_ANY(0x8, 0xf, &(0x7f0000000040)={{0x4, 0x0, r2, 0x9, 0x5, 0x95, 0x2}, 0x0, 0x49aa00a, 0x654fb2f5, 0x6, @inferred, @raw=0xa, 0x9, 0x0, 0x0, &(0x7f0000000200)="296ed9afc88801ff9a46d3dc48bc46138e2bafc8a51a04e361f3391fe4174e553b1c4d013eb655df3c4954efe582cd4a0179c518dc4f13d8585ae86e78b45640ac9ecfb4ba600ed634ea3f7b9c747fde8b11494a9a63190784a36efef20317a88e1b9eaaf4244ca6cb4003d52e9cb92d852d0dde2dc682d30086f3ff8d63eb527e7fa8301d9d04b83739203dc4790074d2d784230f75ce08c726afc22eba57d01722c99fa1b48dff230915895482cb5277ceaf8eb613ae58bf5b403268d600ef3efbb89543a92888e3568be0d1b6568f066b184914"}) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) rseq$auto(0x0, 0x6, 0x8, 0x10) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000340), 0x8a480, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r3, 0x50009404, &(0x7f0000000380)={@raw=0x4, "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"}) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000001380)={0x4, &(0x7f00000013c0)=&(0x7f0000001400), 0x100}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xca, &(0x7f0000001400)='\x04\x0e\x06\x00\x81\xff\x00\x00\xf6\xf5\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\xd9}\xeb\xe9w6\x1f\xa5\x80\xae\xefdM\r\\\x9a\xd2k\"Z\\WQ\x10*V\x8dn\xc6o\x9f\x06\xda\xba[\xb6n\x7f\x00KP\t\x13\x022\xf4\xa0k\xd7\xf1H\x97\xdd\xa2:!>3.JTf\xbb\x10\xdc\x01\xe6\xf0\xd6\xad/\nE}\x89\xc3\xbb$\xeb\x9bl\xbbT\xa3\x9e$j<\x8b?,\xed\xed\b\x9c1\x01p\xfd{\xf7\x01\x00\x00\x80\xd1ro\x1f\x147<\\;\xc4\x00\a\xe4\xa2$@-\xac\xac\t\xad4\x8b\x18\a\x00\x00\x00\x85\xd4b\x84z\x87/\xa3~\x8a\x80\xe6\x1dK\xce\xe1\xbc\'j\x1b\\\x91@\x9f\x92\xc9_\xc1\xff\x14 \xe3\xber\x01j\a\x88M>8@\xde,\x89w\xc0#CYR]\xcc\t\xef,\x0fS=#\x96\x97$\xacj\xb3\t\x19\x8eH\xca\x00\x84\x01/\xf8~\xcf\x1a~\x9bB\xd0a\x99\x91\xfa]s\x19z\xb0L|\x01]nM\xe8O\xb9{\xde', 0x5) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) pwritev$auto(r0, &(0x7f00000001c0)={&(0x7f0000000400), 0xfdef}, 0x2000000003, 0xd, 0x3) 339.695216ms ago: executing program 2 (id=4457): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x23, &(0x7f0000000500)='\b', 0xfffffffe) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x3172c0, 0x0) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000280)="65a9095073", 0x5) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) ioprio_get$auto(0xfffffffe, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x1d, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x26240, 0x154) lsetxattr$auto(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000500), 0xf4e9, 0x0) removexattr$auto(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G') openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4080, 0x0) ioctl$auto_SOUND_PCM_READ_FILTER(r1, 0x80045007, &(0x7f00000007c0)="379a8bee1558aa138ca0280cc6047fbe8c96c4f626ae85f2af0fe68c233caf95015c14fa257366be815bbc251a389a6c87bbe4c3d2c982086e43aa1d1298fa15b7639dbdd723f9f983471ce7b93e174475e95cf634fa270e810928c6c2c6b55e63cd3b943096d1c0cd27433f3adc51206a4089f7b92c156b168c1136b46a46c59d7b7c41c862ab7635b8e26784ccff36715cb0cfb3b25b57d11178ea7300"/172) r2 = eventfd$auto(0x2) socket(0x1, 0x6, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x8f9, 0x8101, 0xff1, 0x20, 0x40015, 0x100000000000024, 0x3c2a19d5, 0xa2f9, 0x6733, 0x7, 0xb, 0x1, 0xf, 0x5, 0xa, 0x8]}, 0x0) pread64$auto(r2, 0x0, 0x2, 0x5) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x82000, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x66) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x58) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) 0s ago: executing program 0 (id=4458): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/fib_trie\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x151401, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000300)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x200, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000400)="09b0ac5dded059b81b5a9400fe8cf8e9c86f63ebdfe34854669e34145da383bef085ebe952d6ecb7a791c85e7580825bed4c01a823a9f093fa5ffd4bde575f72fa82f60b80f51bac52787fdf6fa58e9baa839c22eec042478e6408d8a5fa7cd0c70a96d96027405550287e0af2439bc5b6b6026bd5b77d705acb5fb9988474505fb0814282", 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x101605, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioperm$auto(0x7, 0x5ad2, 0x8) setfsuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(0x3, 0x5606, 0xfffffffffffff4e0) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000540), 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYRES8, @ANYBLOB="18000000", @ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(0xffffffffffffffff, &(0x7f0000000640)='\xee\xdf', 0x31) r3 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pread64$auto(r3, &(0x7f0000000280)='veth1\x00\xe0,\x17\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb\x90:\v\xc5\x13*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca', 0x20000000003f, 0x8) write$auto(r0, &(0x7f0000000080)='802.15.4 MAC\"', 0x3) kernel console output (not intermixed with test programs): do_futex+0x2b2/0x440 [ 1514.525820][T30583] ? __pfx_do_futex+0x10/0x10 [ 1514.525840][T30583] ? __fget_files+0x21f/0x3d0 [ 1514.525864][T30583] __x64_sys_futex+0x34f/0x4d0 [ 1514.525885][T30583] ? __pfx___x64_sys_futex+0x10/0x10 [ 1514.525910][T30583] do_syscall_64+0x121/0x770 [ 1514.525927][T30583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.525944][T30583] RIP: 0033:0x7f7a3c79e1d9 [ 1514.525959][T30583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.525975][T30583] RSP: 002b:00007f7a3d6410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1514.525992][T30583] RAX: ffffffffffffffda RBX: 00007f7a3ca26458 RCX: 00007f7a3c79e1d9 [ 1514.526011][T30583] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7a3ca2645c [ 1514.526028][T30583] RBP: 00007f7a3ca26450 R08: 0000000000000001 R09: 0000000000000000 [ 1514.526044][T30583] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1514.526062][T30583] R13: 00007f7a3ca264e8 R14: 00007fffabff8690 R15: 00007fffabff8778 [ 1514.526085][T30583] [ 1516.519946][T30597] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1516.524794][T30597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1516.524924][T30597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1516.525078][T30597] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1517.757859][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 1518.548188][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 1518.549574][T22038] Bluetooth: hci1: command 0x0419 tx timeout [ 1518.549616][T22038] Bluetooth: hci3: command 0x0c1a tx timeout [ 1522.057988][T30699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1522.058300][T30699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1522.058546][T30699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1522.058790][T30699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1523.043224][T22610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1523.048043][T22610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1523.064886][T22610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1523.066059][T22610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1523.066736][T22610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1523.270565][T22610] Bluetooth: hci0: command 0x0c1a tx timeout [ 1524.070897][T22610] Bluetooth: hci1: command 0x0419 tx timeout [ 1524.070947][T22610] Bluetooth: hci3: command 0x0c1a tx timeout [ 1524.070977][T22610] Bluetooth: hci2: command 0x0c1a tx timeout [ 1524.105806][T21871] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.367951][T21871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.729269][T21871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.111538][ T5634] Bluetooth: hci4: command tx timeout [ 1525.124371][T21871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.380999][T21871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.766780][T21871] bridge_slave_1: left allmulticast mode [ 1526.766803][T21871] bridge_slave_1: left promiscuous mode [ 1526.766961][T21871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.793162][T21871] bridge_slave_0: left allmulticast mode [ 1526.793183][T21871] bridge_slave_0: left promiscuous mode [ 1526.793322][T21871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.054345][T21871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.057505][T21871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.059488][T21871] bond0 (unregistering): Released all slaves [ 1527.165960][T30741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.166080][T30741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.166237][T30741] bridge_slave_0: entered allmulticast mode [ 1527.170240][T30741] bridge_slave_0: entered promiscuous mode [ 1527.193003][ T5634] Bluetooth: hci4: command tx timeout [ 1527.356830][T30741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.356944][T30741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.357101][T30741] bridge_slave_1: entered allmulticast mode [ 1527.359094][T30741] bridge_slave_1: entered promiscuous mode [ 1527.686170][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1527.728392][T30741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.808243][T30741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.026498][T21871] hsr_slave_0: left promiscuous mode [ 1528.027291][T21871] hsr_slave_1: left promiscuous mode [ 1528.028217][T21871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.028250][T21871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.028922][T21871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.028945][T21871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.086993][T21871] veth1_macvtap: left promiscuous mode [ 1528.087036][T21871] veth0_macvtap: left promiscuous mode [ 1528.087150][T21871] veth1_vlan: left promiscuous mode [ 1528.087226][T21871] veth0_vlan: left promiscuous mode [ 1528.532279][T21871] team0 (unregistering): Port device team_slave_1 removed [ 1528.564954][T21871] team0 (unregistering): Port device team_slave_0 removed [ 1528.838196][T30741] team0: Port device team_slave_0 added [ 1528.936347][T30741] team0: Port device team_slave_1 added [ 1529.068815][T30741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.068838][T30741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.068871][T30741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.159770][T30741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.159790][T30741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.159820][T30741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.278798][ T5634] Bluetooth: hci4: command tx timeout [ 1529.478646][T30741] hsr_slave_0: entered promiscuous mode [ 1529.479692][T30741] hsr_slave_1: entered promiscuous mode [ 1529.480414][T30741] debugfs: 'hsr0' already exists in 'hsr' [ 1529.480437][T30741] Cannot create hsr debugfs directory [ 1529.999299][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1530.905981][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 1531.354567][ T5634] Bluetooth: hci4: command tx timeout [ 1531.454224][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1533.459319][T30741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1533.465349][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1533.642613][T30741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1533.659083][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1533.662212][T30741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1533.693433][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1533.725238][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1533.762521][T30741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1533.787527][T30741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1536.065604][T30741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.248531][T31021] FAULT_INJECTION: forcing a failure. [ 1536.248531][T31021] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.248580][T31021] CPU: 0 UID: 0 PID: 31021 Comm: syz.1.3168 Tainted: G L syzkaller #0 PREEMPT(full) [ 1536.248622][T31021] Tainted: [L]=SOFTLOCKUP [ 1536.248634][T31021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1536.248661][T31021] Call Trace: [ 1536.248672][T31021] [ 1536.248683][T31021] dump_stack_lvl+0x100/0x190 [ 1536.248729][T31021] should_fail_ex.cold+0x5/0xa [ 1536.248769][T31021] should_failslab+0xc2/0x120 [ 1536.248814][T31021] __kmalloc_noprof+0xfc/0x840 [ 1536.248851][T31021] ? trace_kmalloc+0xeb/0x110 [ 1536.248892][T31021] ? lsm_blob_alloc+0x68/0x90 [ 1536.248942][T31021] lsm_blob_alloc+0x68/0x90 [ 1536.248981][T31021] security_sk_alloc+0x2d/0x290 [ 1536.249013][T31021] sk_prot_alloc+0x12a/0x2a0 [ 1536.249057][T31021] sk_alloc+0x36/0xe80 [ 1536.249090][T31021] __netlink_create+0x5e/0x2c0 [ 1536.249130][T31021] ? __wake_up+0x3f/0x60 [ 1536.249167][T31021] netlink_create+0x29b/0x610 [ 1536.249209][T31021] ? __pfx_genl_bind+0x10/0x10 [ 1536.249239][T31021] ? __pfx_genl_unbind+0x10/0x10 [ 1536.249269][T31021] ? __pfx_genl_release+0x10/0x10 [ 1536.249306][T31021] __sock_create+0x339/0x860 [ 1536.249355][T31021] __sys_socket+0x14d/0x260 [ 1536.249382][T31021] ? __pfx___sys_socket+0x10/0x10 [ 1536.249436][T31021] __x64_sys_socket+0x72/0xb0 [ 1536.249463][T31021] ? lockdep_hardirqs_on+0x7d/0x110 [ 1536.249506][T31021] do_syscall_64+0x121/0x770 [ 1536.249537][T31021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.249567][T31021] RIP: 0033:0x7f6c5cf9fa47 [ 1536.249592][T31021] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.249620][T31021] RSP: 002b:00007f6c5a58bf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1536.249656][T31021] RAX: ffffffffffffffda RBX: 00007f6c5d226450 RCX: 00007f6c5cf9fa47 [ 1536.249678][T31021] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1536.249698][T31021] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1536.249717][T31021] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1536.249736][T31021] R13: 00007f6c5d2264e8 R14: 00007f6c5d226450 R15: 00007ffcbfdc5a28 [ 1536.249776][T31021] [ 1536.831969][T30741] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.379018][T21871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.379144][T21871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.492176][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.492244][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.316314][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 1540.101954][T30741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.986777][T30741] veth0_vlan: entered promiscuous mode [ 1541.001677][T30741] veth1_vlan: entered promiscuous mode [ 1541.040820][T30741] veth0_macvtap: entered promiscuous mode [ 1541.043860][T30741] veth1_macvtap: entered promiscuous mode [ 1541.113621][T30741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1541.144439][T30741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.179890][ T155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.180804][ T155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.180854][ T155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.180899][ T155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.452549][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.452575][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1541.536536][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 1541.707487][T21871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.707513][T21871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.484161][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.484260][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.256263][T31273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1551.256469][T31273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1551.256630][T31273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1551.256801][T31273] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1551.256896][T31273] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1551.306756][T31273] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1551.514076][T22610] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1553.207107][T22610] Bluetooth: hci2: command 0x0c1a tx timeout [ 1553.285682][T22610] Bluetooth: hci3: command 0x0c1a tx timeout [ 1553.285725][T22610] Bluetooth: hci1: command 0x0419 tx timeout [ 1553.367113][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 1555.446890][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 1557.527657][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 1559.760743][T31404] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1559.761018][T31404] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1559.762375][T31404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1559.768510][T31404] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1561.002839][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 1561.769829][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 1561.769873][ T5634] Bluetooth: hci1: command 0x0419 tx timeout [ 1561.769905][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 1561.769934][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 1562.192404][T31449] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1564.071516][T22610] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1565.853760][T31499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1565.853990][T31499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1565.854162][T31499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1565.854377][T31499] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1567.857038][T22610] Bluetooth: hci2: command 0x0c1a tx timeout [ 1567.933056][T22610] Bluetooth: hci4: command 0x0c1a tx timeout [ 1567.933108][T22610] Bluetooth: hci1: command 0x0419 tx timeout [ 1567.933138][T22610] Bluetooth: hci3: command 0x0c1a tx timeout [ 1568.399201][T31559] FAULT_INJECTION: forcing a failure. [ 1568.399201][T31559] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.399245][T31559] CPU: 1 UID: 0 PID: 31559 Comm: syz.0.3236 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.399283][T31559] Tainted: [L]=SOFTLOCKUP [ 1568.399294][T31559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1568.399311][T31559] Call Trace: [ 1568.399320][T31559] [ 1568.399332][T31559] dump_stack_lvl+0x100/0x190 [ 1568.399377][T31559] should_fail_ex.cold+0x5/0xa [ 1568.399423][T31559] should_failslab+0xc2/0x120 [ 1568.399466][T31559] __kmalloc_noprof+0xfc/0x840 [ 1568.399503][T31559] ? trace_kmalloc+0xeb/0x110 [ 1568.399542][T31559] ? lsm_blob_alloc+0x68/0x90 [ 1568.399587][T31559] lsm_blob_alloc+0x68/0x90 [ 1568.399624][T31559] security_sk_alloc+0x2d/0x290 [ 1568.399655][T31559] sk_prot_alloc+0x12a/0x2a0 [ 1568.399698][T31559] sk_alloc+0x36/0xe80 [ 1568.399731][T31559] __netlink_create+0x5e/0x2c0 [ 1568.399771][T31559] ? __wake_up+0x3f/0x60 [ 1568.399810][T31559] netlink_create+0x29b/0x610 [ 1568.399851][T31559] ? __pfx_genl_bind+0x10/0x10 [ 1568.399881][T31559] ? __pfx_genl_unbind+0x10/0x10 [ 1568.399907][T31559] ? __pfx_genl_release+0x10/0x10 [ 1568.399942][T31559] __sock_create+0x339/0x860 [ 1568.399989][T31559] __sys_socket+0x14d/0x260 [ 1568.400015][T31559] ? __pfx___sys_socket+0x10/0x10 [ 1568.400068][T31559] __x64_sys_socket+0x72/0xb0 [ 1568.400093][T31559] ? lockdep_hardirqs_on+0x7d/0x110 [ 1568.400135][T31559] do_syscall_64+0x121/0x770 [ 1568.400166][T31559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.400196][T31559] RIP: 0033:0x7f7a3c79fa47 [ 1568.400220][T31559] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.400248][T31559] RSP: 002b:00007f7a3d63ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1568.400277][T31559] RAX: ffffffffffffffda RBX: 00007f7a3ca26450 RCX: 00007f7a3c79fa47 [ 1568.400297][T31559] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1568.400315][T31559] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1568.400332][T31559] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1568.400349][T31559] R13: 00007f7a3ca264e8 R14: 00007f7a3ca26450 R15: 00007fffabff8778 [ 1568.400389][T31559] [ 1570.823138][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1577.459577][T31720] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1577.459765][T31720] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1577.459930][T31720] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1577.460258][T31720] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1579.540098][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 1579.540131][ T5634] Bluetooth: hci1: command 0x0419 tx timeout [ 1579.540151][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 1579.548704][T22038] Bluetooth: hci2: command 0x0c1a tx timeout [ 1581.636472][T22038] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1583.522161][T31827] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1583.522441][T31827] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1583.522696][T31827] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1583.522936][T31827] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1585.541988][T22038] Bluetooth: hci4: command 0x0c1a tx timeout [ 1585.542033][T22038] Bluetooth: hci1: command 0x0419 tx timeout [ 1585.542063][T22038] Bluetooth: hci3: command 0x0c1a tx timeout [ 1585.542094][T22038] Bluetooth: hci2: command 0x0c1a tx timeout [ 1585.924180][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 1588.575130][T31916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1588.575324][T31916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1588.575495][T31916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1588.575662][T31916] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1590.594531][T22038] Bluetooth: hci1: command 0x0419 tx timeout [ 1590.594577][T22038] Bluetooth: hci3: command 0x0c1a tx timeout [ 1590.594610][T22038] Bluetooth: hci2: command 0x0c1a tx timeout [ 1590.594684][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 1591.289839][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1593.357683][T32012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1593.357880][T32012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1593.358071][T32012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1593.358266][T32012] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1595.312336][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1595.386909][T22610] Bluetooth: hci1: command 0x0419 tx timeout [ 1595.386953][T22610] Bluetooth: hci3: command 0x0c1a tx timeout [ 1595.386983][T22610] Bluetooth: hci2: command 0x0c1a tx timeout [ 1595.387058][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 1597.542217][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.899448][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.039906][T22038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1598.043174][T22038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1598.043953][T22038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1598.044951][T22038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1598.045645][T22038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1598.122435][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.309680][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.273595][ T155] bridge_slave_1: left allmulticast mode [ 1599.273627][ T155] bridge_slave_1: left promiscuous mode [ 1599.273870][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.277252][ T155] bridge_slave_0: left allmulticast mode [ 1599.277279][ T155] bridge_slave_0: left promiscuous mode [ 1599.277523][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.517112][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1599.530191][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1599.532151][ T155] bond0 (unregistering): Released all slaves [ 1600.109471][ T5634] Bluetooth: hci0: command tx timeout [ 1600.242966][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1600.700379][ T155] hsr_slave_0: left promiscuous mode [ 1600.701201][ T155] hsr_slave_1: left promiscuous mode [ 1600.702088][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1600.702124][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.703107][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1600.703131][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.756815][ T155] veth1_macvtap: left promiscuous mode [ 1600.756860][ T155] veth0_macvtap: left promiscuous mode [ 1600.756973][ T155] veth1_vlan: left promiscuous mode [ 1600.757071][ T155] veth0_vlan: left promiscuous mode [ 1601.116032][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1601.135046][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1602.200024][ T5634] Bluetooth: hci0: command tx timeout [ 1603.067974][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1603.346118][T32081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.346234][T32081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.346413][T32081] bridge_slave_0: entered allmulticast mode [ 1603.347898][T32081] bridge_slave_0: entered promiscuous mode [ 1603.376813][T32081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.377229][T32081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.377364][T32081] bridge_slave_1: entered allmulticast mode [ 1603.379177][T32081] bridge_slave_1: entered promiscuous mode [ 1603.810568][T32081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.820672][T32081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.076134][T32081] team0: Port device team_slave_0 added [ 1604.176179][T32081] team0: Port device team_slave_1 added [ 1604.253042][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1604.271132][ T5634] Bluetooth: hci0: command tx timeout [ 1604.365471][T32081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.365486][T32081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.365505][T32081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.368566][T32081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.368579][T32081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.368597][T32081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.806392][T32081] hsr_slave_0: entered promiscuous mode [ 1604.811949][T32081] hsr_slave_1: entered promiscuous mode [ 1606.352050][ T5634] Bluetooth: hci0: command tx timeout [ 1607.583140][T32081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1607.589015][T32081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1607.656990][T32081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1607.670343][T32081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1607.741676][T32081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1607.752010][T32081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1607.764076][T32081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1607.786482][T32081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1607.846819][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1607.954699][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.954763][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.348440][T32081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1609.482644][T32081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1609.764876][T32359] FAULT_INJECTION: forcing a failure. [ 1609.764876][T32359] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.764926][T32359] CPU: 0 UID: 0 PID: 32359 Comm: syz.2.3322 Tainted: G L syzkaller #0 PREEMPT(full) [ 1609.764969][T32359] Tainted: [L]=SOFTLOCKUP [ 1609.764981][T32359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1609.765001][T32359] Call Trace: [ 1609.765011][T32359] [ 1609.765024][T32359] dump_stack_lvl+0x100/0x190 [ 1609.765070][T32359] should_fail_ex.cold+0x5/0xa [ 1609.765109][T32359] should_failslab+0xc2/0x120 [ 1609.765156][T32359] __kmalloc_noprof+0xfc/0x840 [ 1609.765194][T32359] ? trace_kmalloc+0xeb/0x110 [ 1609.765235][T32359] ? lsm_blob_alloc+0x68/0x90 [ 1609.765284][T32359] lsm_blob_alloc+0x68/0x90 [ 1609.765327][T32359] security_sk_alloc+0x2d/0x290 [ 1609.765363][T32359] sk_prot_alloc+0x12a/0x2a0 [ 1609.765407][T32359] sk_alloc+0x36/0xe80 [ 1609.765441][T32359] __netlink_create+0x5e/0x2c0 [ 1609.765483][T32359] ? __wake_up+0x3f/0x60 [ 1609.765522][T32359] netlink_create+0x29b/0x610 [ 1609.765564][T32359] ? __pfx_genl_bind+0x10/0x10 [ 1609.765595][T32359] ? __pfx_genl_unbind+0x10/0x10 [ 1609.765625][T32359] ? __pfx_genl_release+0x10/0x10 [ 1609.765663][T32359] __sock_create+0x339/0x860 [ 1609.765719][T32359] __sys_socket+0x14d/0x260 [ 1609.765749][T32359] ? __pfx___sys_socket+0x10/0x10 [ 1609.765806][T32359] __x64_sys_socket+0x72/0xb0 [ 1609.765833][T32359] ? lockdep_hardirqs_on+0x7d/0x110 [ 1609.765880][T32359] do_syscall_64+0x121/0x770 [ 1609.765913][T32359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.765944][T32359] RIP: 0033:0x7f5df419fa47 [ 1609.765971][T32359] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1609.766001][T32359] RSP: 002b:00007f5df5084f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1609.766033][T32359] RAX: ffffffffffffffda RBX: 00007f5df4426450 RCX: 00007f5df419fa47 [ 1609.766054][T32359] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1609.766073][T32359] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1609.766093][T32359] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1609.766113][T32359] R13: 00007f5df44264e8 R14: 00007f5df4426450 R15: 00007ffc5f3484c8 [ 1609.766154][T32359] [ 1609.803907][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.804031][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.229381][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.229503][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.329958][T32081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1612.585066][T32081] veth0_vlan: entered promiscuous mode [ 1612.650876][T32081] veth1_vlan: entered promiscuous mode [ 1613.942549][T32081] veth0_macvtap: entered promiscuous mode [ 1613.948052][T32081] veth1_macvtap: entered promiscuous mode [ 1613.969081][T32081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1613.975237][T32081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.087032][ T155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.087086][ T155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.087128][ T155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.087167][ T155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.187901][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.187927][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.241022][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.241047][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.862549][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1616.158482][T32472] FAULT_INJECTION: forcing a failure. [ 1616.158482][T32472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1616.158514][T32472] CPU: 0 UID: 0 PID: 32472 Comm: syz.2.3336 Tainted: G L syzkaller #0 PREEMPT(full) [ 1616.158536][T32472] Tainted: [L]=SOFTLOCKUP [ 1616.158543][T32472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1616.158552][T32472] Call Trace: [ 1616.158557][T32472] [ 1616.158564][T32472] dump_stack_lvl+0x100/0x190 [ 1616.158590][T32472] should_fail_ex.cold+0x5/0xa [ 1616.158614][T32472] _copy_from_user+0x2e/0xd0 [ 1616.158632][T32472] kstrtoul_from_user+0xc6/0x1c0 [ 1616.158728][T32472] ? __pfx_kstrtoul_from_user+0x10/0x10 [ 1616.158755][T32472] ? lock_acquire+0x1d1/0x380 [ 1616.158780][T32472] trace_options_write+0xaa/0x3c0 [ 1616.158795][T32472] ? lock_acquire+0x1d1/0x380 [ 1616.158815][T32472] ? ksys_write+0x12a/0x250 [ 1616.158835][T32472] ? __pfx_trace_options_write+0x10/0x10 [ 1616.158856][T32472] vfs_write+0x2aa/0x1050 [ 1616.158875][T32472] ? __pfx_trace_options_write+0x10/0x10 [ 1616.158890][T32472] ? lock_acquire+0x1d1/0x380 [ 1616.158910][T32472] ? __fget_files+0x34/0x3d0 [ 1616.158930][T32472] ? __pfx_vfs_write+0x10/0x10 [ 1616.158947][T32472] ? find_held_lock+0x2b/0x80 [ 1616.158964][T32472] ? __fget_files+0x215/0x3d0 [ 1616.158987][T32472] ? __fget_files+0x21f/0x3d0 [ 1616.159012][T32472] ksys_write+0x12a/0x250 [ 1616.159030][T32472] ? __pfx_ksys_write+0x10/0x10 [ 1616.159054][T32472] do_syscall_64+0x121/0x770 [ 1616.159072][T32472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.159088][T32472] RIP: 0033:0x7f5df419e1d9 [ 1616.159107][T32472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.159122][T32472] RSP: 002b:00007f5df512b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1616.159137][T32472] RAX: ffffffffffffffda RBX: 00007f5df4425fa0 RCX: 00007f5df419e1d9 [ 1616.159147][T32472] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1616.159156][T32472] RBP: 00007f5df512b090 R08: 0000000000000000 R09: 0000000000000000 [ 1616.159165][T32472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.159175][T32472] R13: 00007f5df4426038 R14: 00007f5df4425fa0 R15: 00007ffc5f3484c8 [ 1616.159196][T32472] [ 1616.580053][T32486] FAULT_INJECTION: forcing a failure. [ 1616.580053][T32486] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.580099][T32486] CPU: 1 UID: 0 PID: 32486 Comm: syz.1.3335 Tainted: G L syzkaller #0 PREEMPT(full) [ 1616.580140][T32486] Tainted: [L]=SOFTLOCKUP [ 1616.580152][T32486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1616.580171][T32486] Call Trace: [ 1616.580181][T32486] [ 1616.580193][T32486] dump_stack_lvl+0x100/0x190 [ 1616.580238][T32486] should_fail_ex.cold+0x5/0xa [ 1616.580277][T32486] should_failslab+0xc2/0x120 [ 1616.580321][T32486] __kmalloc_noprof+0xfc/0x840 [ 1616.580358][T32486] ? trace_kmalloc+0xeb/0x110 [ 1616.580400][T32486] ? lsm_blob_alloc+0x68/0x90 [ 1616.580448][T32486] lsm_blob_alloc+0x68/0x90 [ 1616.580489][T32486] security_sk_alloc+0x2d/0x290 [ 1616.580531][T32486] sk_prot_alloc+0x12a/0x2a0 [ 1616.580576][T32486] sk_alloc+0x36/0xe80 [ 1616.580611][T32486] __netlink_create+0x5e/0x2c0 [ 1616.580652][T32486] ? __wake_up+0x3f/0x60 [ 1616.580690][T32486] netlink_create+0x29b/0x610 [ 1616.580739][T32486] ? __pfx_genl_bind+0x10/0x10 [ 1616.580769][T32486] ? __pfx_genl_unbind+0x10/0x10 [ 1616.580798][T32486] ? __pfx_genl_release+0x10/0x10 [ 1616.580835][T32486] __sock_create+0x339/0x860 [ 1616.580886][T32486] __sys_socket+0x14d/0x260 [ 1616.580914][T32486] ? __pfx___sys_socket+0x10/0x10 [ 1616.580968][T32486] __x64_sys_socket+0x72/0xb0 [ 1616.580994][T32486] ? lockdep_hardirqs_on+0x7d/0x110 [ 1616.581040][T32486] do_syscall_64+0x121/0x770 [ 1616.581072][T32486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.581106][T32486] RIP: 0033:0x7f8825b9fa47 [ 1616.581130][T32486] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.581164][T32486] RSP: 002b:00007f88231acf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1616.581193][T32486] RAX: ffffffffffffffda RBX: 00007f8825e26450 RCX: 00007f8825b9fa47 [ 1616.581214][T32486] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1616.581232][T32486] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1616.581251][T32486] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1616.581270][T32486] R13: 00007f8825e264e8 R14: 00007f8825e26450 R15: 00007ffe5b40bb08 [ 1616.581312][T32486] [ 1618.533109][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1620.106346][T32536] FAULT_INJECTION: forcing a failure. [ 1620.106346][T32536] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.106374][T32536] CPU: 0 UID: 0 PID: 32536 Comm: syz.1.3345 Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.106396][T32536] Tainted: [L]=SOFTLOCKUP [ 1620.106402][T32536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1620.106412][T32536] Call Trace: [ 1620.106417][T32536] [ 1620.106423][T32536] dump_stack_lvl+0x100/0x190 [ 1620.106448][T32536] should_fail_ex.cold+0x5/0xa [ 1620.106482][T32536] should_failslab+0xc2/0x120 [ 1620.106511][T32536] __kvmalloc_node_noprof+0x113/0x9b0 [ 1620.106534][T32536] ? traverse.part.0.constprop.0+0x397/0x650 [ 1620.106560][T32536] traverse.part.0.constprop.0+0x397/0x650 [ 1620.106579][T32536] ? get_pid_task+0x2a/0x250 [ 1620.106607][T32536] seq_read_iter+0x93f/0x1270 [ 1620.106656][T32536] proc_reg_read_iter+0x220/0x310 [ 1620.106760][T32536] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 1620.106783][T32536] vfs_read+0x82e/0xb40 [ 1620.106805][T32536] ? __pfx_vfs_read+0x10/0x10 [ 1620.106822][T32536] ? find_held_lock+0x2b/0x80 [ 1620.106853][T32536] __x64_sys_pread64+0x1eb/0x250 [ 1620.106873][T32536] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1620.106899][T32536] do_syscall_64+0x121/0x770 [ 1620.106916][T32536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1620.106932][T32536] RIP: 0033:0x7f8825b9e1d9 [ 1620.106947][T32536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1620.106962][T32536] RSP: 002b:00007f88269cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1620.106977][T32536] RAX: ffffffffffffffda RBX: 00007f8825e25fa0 RCX: 00007f8825b9e1d9 [ 1620.106988][T32536] RDX: 0000000100000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 1620.106997][T32536] RBP: 00007f88269cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1620.107006][T32536] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1620.107016][T32536] R13: 00007f8825e26038 R14: 00007f8825e25fa0 R15: 00007ffe5b40bb08 [ 1620.107037][T32536] [ 1621.419231][T32574] FAULT_INJECTION: forcing a failure. [ 1621.419231][T32574] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.419280][T32574] CPU: 0 UID: 0 PID: 32574 Comm: syz.3.3349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1621.419322][T32574] Tainted: [L]=SOFTLOCKUP [ 1621.419334][T32574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1621.419352][T32574] Call Trace: [ 1621.419363][T32574] [ 1621.419375][T32574] dump_stack_lvl+0x100/0x190 [ 1621.419422][T32574] should_fail_ex.cold+0x5/0xa [ 1621.419461][T32574] should_failslab+0xc2/0x120 [ 1621.419508][T32574] __kmalloc_noprof+0xfc/0x840 [ 1621.419547][T32574] ? trace_kmalloc+0xeb/0x110 [ 1621.419596][T32574] ? lsm_blob_alloc+0x68/0x90 [ 1621.419648][T32574] lsm_blob_alloc+0x68/0x90 [ 1621.419690][T32574] security_sk_alloc+0x2d/0x290 [ 1621.419723][T32574] sk_prot_alloc+0x12a/0x2a0 [ 1621.419768][T32574] sk_alloc+0x36/0xe80 [ 1621.419802][T32574] __netlink_create+0x5e/0x2c0 [ 1621.419843][T32574] ? __wake_up+0x3f/0x60 [ 1621.419882][T32574] netlink_create+0x29b/0x610 [ 1621.419924][T32574] ? __pfx_genl_bind+0x10/0x10 [ 1621.419955][T32574] ? __pfx_genl_unbind+0x10/0x10 [ 1621.419984][T32574] ? __pfx_genl_release+0x10/0x10 [ 1621.420022][T32574] __sock_create+0x339/0x860 [ 1621.420069][T32574] __sys_socket+0x14d/0x260 [ 1621.420096][T32574] ? __pfx___sys_socket+0x10/0x10 [ 1621.420152][T32574] __x64_sys_socket+0x72/0xb0 [ 1621.420177][T32574] ? lockdep_hardirqs_on+0x7d/0x110 [ 1621.420221][T32574] do_syscall_64+0x121/0x770 [ 1621.420253][T32574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.420283][T32574] RIP: 0033:0x7f76ed59fa47 [ 1621.420309][T32574] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.420336][T32574] RSP: 002b:00007f76ee3fdf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1621.420366][T32574] RAX: ffffffffffffffda RBX: 00007f76ed826450 RCX: 00007f76ed59fa47 [ 1621.420386][T32574] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1621.420405][T32574] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1621.420421][T32574] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1621.420438][T32574] R13: 00007f76ed8264e8 R14: 00007f76ed826450 R15: 00007ffeff518a88 [ 1621.420475][T32574] [ 1625.130070][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1627.252863][T32677] FAULT_INJECTION: forcing a failure. [ 1627.252863][T32677] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.252909][T32677] CPU: 1 UID: 0 PID: 32677 Comm: syz.1.3362 Tainted: G L syzkaller #0 PREEMPT(full) [ 1627.252952][T32677] Tainted: [L]=SOFTLOCKUP [ 1627.252964][T32677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1627.252983][T32677] Call Trace: [ 1627.252994][T32677] [ 1627.253006][T32677] dump_stack_lvl+0x100/0x190 [ 1627.253052][T32677] should_fail_ex.cold+0x5/0xa [ 1627.253092][T32677] should_failslab+0xc2/0x120 [ 1627.253136][T32677] __kmalloc_noprof+0xfc/0x840 [ 1627.253174][T32677] ? trace_kmalloc+0xeb/0x110 [ 1627.253215][T32677] ? lsm_blob_alloc+0x68/0x90 [ 1627.253264][T32677] lsm_blob_alloc+0x68/0x90 [ 1627.253305][T32677] security_sk_alloc+0x2d/0x290 [ 1627.253339][T32677] sk_prot_alloc+0x12a/0x2a0 [ 1627.253382][T32677] sk_alloc+0x36/0xe80 [ 1627.253416][T32677] __netlink_create+0x5e/0x2c0 [ 1627.253455][T32677] ? __wake_up+0x3f/0x60 [ 1627.253494][T32677] netlink_create+0x29b/0x610 [ 1627.253536][T32677] ? __pfx_genl_bind+0x10/0x10 [ 1627.253565][T32677] ? __pfx_genl_unbind+0x10/0x10 [ 1627.253593][T32677] ? __pfx_genl_release+0x10/0x10 [ 1627.253627][T32677] __sock_create+0x339/0x860 [ 1627.253684][T32677] __sys_socket+0x14d/0x260 [ 1627.253711][T32677] ? __pfx___sys_socket+0x10/0x10 [ 1627.253768][T32677] __x64_sys_socket+0x72/0xb0 [ 1627.253790][T32677] ? lockdep_hardirqs_on+0x7d/0x110 [ 1627.253831][T32677] do_syscall_64+0x121/0x770 [ 1627.253859][T32677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.253886][T32677] RIP: 0033:0x7f8825b9fa47 [ 1627.253907][T32677] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.253932][T32677] RSP: 002b:00007f88231acf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1627.253957][T32677] RAX: ffffffffffffffda RBX: 00007f8825e26450 RCX: 00007f8825b9fa47 [ 1627.253976][T32677] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1627.253993][T32677] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1627.254010][T32677] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1627.254028][T32677] R13: 00007f8825e264e8 R14: 00007f8825e26450 R15: 00007ffe5b40bb08 [ 1627.254065][T32677] [ 1630.379449][T32735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 1632.233609][ T310] FAULT_INJECTION: forcing a failure. [ 1632.233609][ T310] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.233656][ T310] CPU: 0 UID: 0 PID: 310 Comm: syz.2.3376 Tainted: G L syzkaller #0 PREEMPT(full) [ 1632.233698][ T310] Tainted: [L]=SOFTLOCKUP [ 1632.233710][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1632.233729][ T310] Call Trace: [ 1632.233739][ T310] [ 1632.233751][ T310] dump_stack_lvl+0x100/0x190 [ 1632.233800][ T310] should_fail_ex.cold+0x5/0xa [ 1632.233838][ T310] should_failslab+0xc2/0x120 [ 1632.233881][ T310] __kmalloc_noprof+0xfc/0x840 [ 1632.233920][ T310] ? trace_kmalloc+0xeb/0x110 [ 1632.233961][ T310] ? lsm_blob_alloc+0x68/0x90 [ 1632.234009][ T310] lsm_blob_alloc+0x68/0x90 [ 1632.234085][ T310] security_sk_alloc+0x2d/0x290 [ 1632.234119][ T310] sk_prot_alloc+0x12a/0x2a0 [ 1632.234160][ T310] sk_alloc+0x36/0xe80 [ 1632.234194][ T310] __netlink_create+0x5e/0x2c0 [ 1632.234232][ T310] ? __wake_up+0x3f/0x60 [ 1632.234269][ T310] netlink_create+0x29b/0x610 [ 1632.234315][ T310] ? __pfx_genl_bind+0x10/0x10 [ 1632.234346][ T310] ? __pfx_genl_unbind+0x10/0x10 [ 1632.234376][ T310] ? __pfx_genl_release+0x10/0x10 [ 1632.234413][ T310] __sock_create+0x339/0x860 [ 1632.234462][ T310] __sys_socket+0x14d/0x260 [ 1632.234490][ T310] ? __pfx___sys_socket+0x10/0x10 [ 1632.234543][ T310] __x64_sys_socket+0x72/0xb0 [ 1632.234568][ T310] ? lockdep_hardirqs_on+0x7d/0x110 [ 1632.234613][ T310] do_syscall_64+0x121/0x770 [ 1632.234643][ T310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.234673][ T310] RIP: 0033:0x7f5df419fa47 [ 1632.234697][ T310] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1632.234727][ T310] RSP: 002b:00007f5df50a5f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1632.234758][ T310] RAX: ffffffffffffffda RBX: 00007f5df4426360 RCX: 00007f5df419fa47 [ 1632.234781][ T310] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1632.234799][ T310] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1632.234818][ T310] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1632.234838][ T310] R13: 00007f5df44263f8 R14: 00007f5df4426360 R15: 00007ffc5f3484c8 [ 1632.234874][ T310] [ 1637.299707][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.484987][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.653768][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.741571][T22038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1637.746930][T22038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1637.763156][T22038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1637.771821][T22610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1637.780029][T22610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1637.828412][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.961339][ T155] bridge_slave_1: left allmulticast mode [ 1638.961362][ T155] bridge_slave_1: left promiscuous mode [ 1638.961507][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.963359][ T155] bridge_slave_0: left allmulticast mode [ 1638.963376][ T155] bridge_slave_0: left promiscuous mode [ 1638.963512][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.175168][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.178008][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.200057][ T155] bond0 (unregistering): Released all slaves [ 1639.809274][ T5634] Bluetooth: hci0: command tx timeout [ 1639.863365][ T155] hsr_slave_0: left promiscuous mode [ 1639.864824][ T155] hsr_slave_1: left promiscuous mode [ 1639.865806][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1639.865830][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.867200][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.867221][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.915813][ T155] veth1_macvtap: left promiscuous mode [ 1639.915858][ T155] veth0_macvtap: left promiscuous mode [ 1639.915983][ T155] veth1_vlan: left promiscuous mode [ 1639.916057][ T155] veth0_vlan: left promiscuous mode [ 1640.317655][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1640.336319][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1640.539710][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1641.869275][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.869484][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.884929][ T398] bridge_slave_0: entered allmulticast mode [ 1641.886806][ T398] bridge_slave_0: entered promiscuous mode [ 1641.900085][ T5634] Bluetooth: hci0: command tx timeout [ 1641.984024][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1641.984521][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.984624][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.984747][ T398] bridge_slave_1: entered allmulticast mode [ 1641.986385][ T398] bridge_slave_1: entered promiscuous mode [ 1642.369166][ T398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.434352][ T398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.572292][ T398] team0: Port device team_slave_0 added [ 1642.584882][ T398] team0: Port device team_slave_1 added [ 1642.877097][ T398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.877121][ T398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.877153][ T398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.918551][ T398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.918575][ T398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.918608][ T398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.158192][ T398] hsr_slave_0: entered promiscuous mode [ 1643.168217][ T398] hsr_slave_1: entered promiscuous mode [ 1643.970878][ T5634] Bluetooth: hci0: command tx timeout [ 1644.423432][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1644.813157][ T544] kvm: user requested TSC rate below hardware speed [ 1645.333916][ T5634] Bluetooth: hci2: unexpected event 0x34 length: 726 > 6 [ 1645.933989][ T578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3404'. [ 1646.051874][ T5634] Bluetooth: hci0: command tx timeout [ 1646.731374][ T398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1646.746576][ T398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1646.747492][ T398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1646.770432][ T398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1646.772993][ T398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1646.812361][ T398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1646.816114][ T398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1646.836368][ T398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1647.981938][ T398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.672346][ T398] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.803618][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.803738][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.854161][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.854281][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.657169][ T751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'. [ 1653.082779][ T398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.933445][ T398] veth0_vlan: entered promiscuous mode [ 1653.945037][ T398] veth1_vlan: entered promiscuous mode [ 1654.010158][ T398] veth0_macvtap: entered promiscuous mode [ 1654.031895][ T398] veth1_macvtap: entered promiscuous mode [ 1654.078526][ T398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1654.095049][ T398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1654.187403][ T1054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.206521][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.206575][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.206620][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.560580][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.560607][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.774319][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1655.042769][T32652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.042795][T32652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1656.679569][ T802] FAULT_INJECTION: forcing a failure. [ 1656.679569][ T802] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.679619][ T802] CPU: 1 UID: 0 PID: 802 Comm: syz.0.3421 Tainted: G L syzkaller #0 PREEMPT(full) [ 1656.679662][ T802] Tainted: [L]=SOFTLOCKUP [ 1656.679676][ T802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1656.679695][ T802] Call Trace: [ 1656.679705][ T802] [ 1656.679718][ T802] dump_stack_lvl+0x100/0x190 [ 1656.679766][ T802] should_fail_ex.cold+0x5/0xa [ 1656.679807][ T802] should_failslab+0xc2/0x120 [ 1656.679852][ T802] __kmalloc_noprof+0xfc/0x840 [ 1656.679894][ T802] ? trace_kmalloc+0xeb/0x110 [ 1656.679939][ T802] ? lsm_blob_alloc+0x68/0x90 [ 1656.679996][ T802] lsm_blob_alloc+0x68/0x90 [ 1656.680040][ T802] security_sk_alloc+0x2d/0x290 [ 1656.680074][ T802] sk_prot_alloc+0x12a/0x2a0 [ 1656.680120][ T802] sk_alloc+0x36/0xe80 [ 1656.680156][ T802] __netlink_create+0x5e/0x2c0 [ 1656.680197][ T802] ? __wake_up+0x3f/0x60 [ 1656.680237][ T802] netlink_create+0x29b/0x610 [ 1656.680279][ T802] ? __pfx_genl_bind+0x10/0x10 [ 1656.680310][ T802] ? __pfx_genl_unbind+0x10/0x10 [ 1656.680341][ T802] ? __pfx_genl_release+0x10/0x10 [ 1656.680379][ T802] __sock_create+0x339/0x860 [ 1656.680430][ T802] __sys_socket+0x14d/0x260 [ 1656.680458][ T802] ? __pfx___sys_socket+0x10/0x10 [ 1656.680513][ T802] __x64_sys_socket+0x72/0xb0 [ 1656.680539][ T802] ? lockdep_hardirqs_on+0x7d/0x110 [ 1656.680584][ T802] do_syscall_64+0x121/0x770 [ 1656.680615][ T802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.680646][ T802] RIP: 0033:0x7f7a3c79fa47 [ 1656.680672][ T802] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.680701][ T802] RSP: 002b:00007f7a3d63ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1656.680730][ T802] RAX: ffffffffffffffda RBX: 00007f7a3ca26450 RCX: 00007f7a3c79fa47 [ 1656.680750][ T802] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1656.680769][ T802] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1656.680788][ T802] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1656.680808][ T802] R13: 00007f7a3ca264e8 R14: 00007f7a3ca26450 R15: 00007fffabff8778 [ 1656.680850][ T802] [ 1658.607414][ T834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3426'. [ 1659.889340][ T852] hub 1-0:1.0: USB hub found [ 1659.890241][ T852] hub 1-0:1.0: 1 port detected [ 1662.018206][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1666.089702][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1667.468478][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1669.300010][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1669.428128][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.428199][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.582752][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1671.534727][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1673.241878][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1674.072316][ T1158] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1674.867235][ T1175] FAULT_INJECTION: forcing a failure. [ 1674.867235][ T1175] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.867266][ T1175] CPU: 0 UID: 0 PID: 1175 Comm: syz.1.3464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1674.867288][ T1175] Tainted: [L]=SOFTLOCKUP [ 1674.867294][ T1175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1674.867304][ T1175] Call Trace: [ 1674.867310][ T1175] [ 1674.867316][ T1175] dump_stack_lvl+0x100/0x190 [ 1674.867342][ T1175] should_fail_ex.cold+0x5/0xa [ 1674.867364][ T1175] should_failslab+0xc2/0x120 [ 1674.867388][ T1175] __kmalloc_noprof+0xfc/0x840 [ 1674.867409][ T1175] ? trace_kmalloc+0xeb/0x110 [ 1674.867431][ T1175] ? lsm_blob_alloc+0x68/0x90 [ 1674.867457][ T1175] lsm_blob_alloc+0x68/0x90 [ 1674.867479][ T1175] security_sk_alloc+0x2d/0x290 [ 1674.867496][ T1175] sk_prot_alloc+0x12a/0x2a0 [ 1674.867519][ T1175] sk_alloc+0x36/0xe80 [ 1674.867537][ T1175] __netlink_create+0x5e/0x2c0 [ 1674.867558][ T1175] ? __wake_up+0x3f/0x60 [ 1674.867578][ T1175] netlink_create+0x29b/0x610 [ 1674.867604][ T1175] ? __pfx_genl_bind+0x10/0x10 [ 1674.867620][ T1175] ? __pfx_genl_unbind+0x10/0x10 [ 1674.867635][ T1175] ? __pfx_genl_release+0x10/0x10 [ 1674.867655][ T1175] __sock_create+0x339/0x860 [ 1674.867680][ T1175] __sys_socket+0x14d/0x260 [ 1674.867694][ T1175] ? __pfx___sys_socket+0x10/0x10 [ 1674.867723][ T1175] __x64_sys_socket+0x72/0xb0 [ 1674.867736][ T1175] ? lockdep_hardirqs_on+0x7d/0x110 [ 1674.867760][ T1175] do_syscall_64+0x121/0x770 [ 1674.867787][ T1175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.867818][ T1175] RIP: 0033:0x7fe573d9fa47 [ 1674.867842][ T1175] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1674.867865][ T1175] RSP: 002b:00007fe571349f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1674.867882][ T1175] RAX: ffffffffffffffda RBX: 00007fe574026450 RCX: 00007fe573d9fa47 [ 1674.867893][ T1175] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1674.867902][ T1175] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1674.867912][ T1175] R10: 0000200000000080 R11: 0000000000000286 R12: 0000000000000000 [ 1674.867922][ T1175] R13: 00007fe5740264e8 R14: 00007fe574026450 R15: 00007ffcddc07548 [ 1674.867942][ T1175] [ 1675.386678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1676.500883][ T1198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1682.038726][ T1315] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[398] was attempted by " ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿÿc&+…ÿÿÿÿM(+…ÿÿÿÿ++…ÿÿÿÿ ++…ÿÿÿÿ(+…ÿÿÿÿ((+…ÿÿÿ [ 1684.529298][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1688.651795][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1692.340906][ T1477] random: crng reseeded on system resumption [ 1695.838544][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1698.349488][ T1599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1698.349744][ T1599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1698.352935][ T1599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1698.353137][ T1599] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1698.353227][ T1599] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1698.379039][ T1599] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1699.175703][ T1619] FAULT_INJECTION: forcing a failure. [ 1699.175703][ T1619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1699.175753][ T1619] CPU: 1 UID: 0 PID: 1619 Comm: syz.0.3524 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.175833][ T1619] Tainted: [L]=SOFTLOCKUP [ 1699.175844][ T1619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1699.175862][ T1619] Call Trace: [ 1699.175872][ T1619] [ 1699.175884][ T1619] dump_stack_lvl+0x100/0x190 [ 1699.175928][ T1619] should_fail_ex.cold+0x5/0xa [ 1699.175966][ T1619] _copy_to_user+0x32/0xd0 [ 1699.175998][ T1619] mem_rw+0x2f3/0x670 [ 1699.176037][ T1619] ? __pfx_mem_read+0x10/0x10 [ 1699.176069][ T1619] vfs_readv+0x5d8/0x8d0 [ 1699.176113][ T1619] ? __pfx_vfs_readv+0x10/0x10 [ 1699.176154][ T1619] ? lock_acquire+0x1d1/0x380 [ 1699.176194][ T1619] ? __fget_files+0x34/0x3d0 [ 1699.176249][ T1619] ? __fget_files+0x21f/0x3d0 [ 1699.176297][ T1619] ? do_readv+0x13e/0x340 [ 1699.176326][ T1619] do_readv+0x13e/0x340 [ 1699.176359][ T1619] ? __pfx_do_readv+0x10/0x10 [ 1699.176404][ T1619] do_syscall_64+0x121/0x770 [ 1699.176436][ T1619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.176466][ T1619] RIP: 0033:0x7f7a3c79e1d9 [ 1699.176489][ T1619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.176515][ T1619] RSP: 002b:00007f7a3d6e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1699.176541][ T1619] RAX: ffffffffffffffda RBX: 00007f7a3ca25fa0 RCX: 00007f7a3c79e1d9 [ 1699.176560][ T1619] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 1699.176577][ T1619] RBP: 00007f7a3d6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.176596][ T1619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1699.176613][ T1619] R13: 00007f7a3ca26038 R14: 00007f7a3ca25fa0 R15: 00007fffabff8778 [ 1699.176653][ T1619] [ 1699.835878][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1700.399160][ T5634] Bluetooth: hci0: command 0x0c1a tx timeout [ 1700.399214][ T5634] Bluetooth: hci4: command 0x0c1a tx timeout [ 1700.399246][ T5634] Bluetooth: hci1: command 0x0419 tx timeout [ 1700.399275][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 1702.485651][T22610] Bluetooth: hci0: command 0x0c1a tx timeout [ 1702.839853][ T1698] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1704.561619][T22610] Bluetooth: hci0: command 0x0c1a tx timeout [ 1705.011468][T22610] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1708.361553][T22610] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1708.508988][T22610] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1710.441291][T22610] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1714.295737][T22610] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1716.368088][T22610] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1721.755929][T22610] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1725.349747][T22610] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1730.763998][T22610] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1730.895944][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.896013][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.545057][ T2214] Process accounting resumed [ 1734.174033][T22610] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1747.218621][T22610] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1750.078737][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.210177][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1750.213502][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1750.225491][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1750.226470][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1750.227114][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1750.309086][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.577309][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.782514][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.216850][ T49] bridge_slave_1: left allmulticast mode [ 1751.216883][ T49] bridge_slave_1: left promiscuous mode [ 1751.217112][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.260447][ T49] bridge_slave_0: left allmulticast mode [ 1751.260468][ T49] bridge_slave_0: left promiscuous mode [ 1751.260613][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.724560][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1751.733173][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1751.736801][ T49] bond0 (unregistering): Released all slaves [ 1752.240932][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1752.275024][T22610] Bluetooth: hci3: command tx timeout [ 1752.671902][ T49] hsr_slave_0: left promiscuous mode [ 1752.672384][ T49] hsr_slave_1: left promiscuous mode [ 1752.672925][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1752.672941][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.673481][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1752.673503][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1752.696544][ T49] veth1_macvtap: left promiscuous mode [ 1752.696591][ T49] veth0_macvtap: left promiscuous mode [ 1752.696696][ T49] veth1_vlan: left promiscuous mode [ 1752.696852][ T49] veth0_vlan: left promiscuous mode [ 1752.912415][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1752.927870][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1753.640581][ T2549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.640646][ T2549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.640729][ T2549] bridge_slave_0: entered allmulticast mode [ 1753.644829][ T2549] bridge_slave_0: entered promiscuous mode [ 1753.680775][ T2549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.685706][ T2549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.685803][ T2549] bridge_slave_1: entered allmulticast mode [ 1753.688284][ T2549] bridge_slave_1: entered promiscuous mode [ 1753.901648][ T2549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.922304][ T2549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.122185][T22610] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1754.346180][T22610] Bluetooth: hci3: command tx timeout [ 1754.476557][ T2549] team0: Port device team_slave_0 added [ 1754.520173][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1754.598488][ T2549] team0: Port device team_slave_1 added [ 1754.781921][ T2549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.781942][ T2549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.781970][ T2549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.895905][ T2549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.895920][ T2549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.895939][ T2549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.101892][ T2549] hsr_slave_0: entered promiscuous mode [ 1755.104112][ T2549] hsr_slave_1: entered promiscuous mode [ 1755.104585][ T2549] debugfs: 'hsr0' already exists in 'hsr' [ 1755.104601][ T2549] Cannot create hsr debugfs directory [ 1755.985305][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1756.428564][T22610] Bluetooth: hci3: command tx timeout [ 1758.400985][ T2549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1758.405437][ T2549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1758.406411][ T2549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1758.436485][ T2549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1758.437454][ T2549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1758.460707][ T2549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1758.508892][T22610] Bluetooth: hci3: command tx timeout [ 1758.616268][ T2549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1758.640137][ T2549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1759.929214][T22610] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1761.017481][ T2838] zswap: compressor not available [ 1762.059514][ T2549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1762.419065][ T2549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.616615][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.616684][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.902033][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.902179][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.995004][ T2924] Process accounting paused [ 1765.537410][ T2549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.677094][ T2549] veth0_vlan: entered promiscuous mode [ 1766.695476][ T2549] veth1_vlan: entered promiscuous mode [ 1766.820273][ T2549] veth0_macvtap: entered promiscuous mode [ 1766.829765][ T2549] veth1_macvtap: entered promiscuous mode [ 1766.858368][ T2549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.890549][ T2549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1767.192653][ T100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.192715][ T100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.192763][ T100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.192809][ T100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1767.811766][ T2978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.281614][T21871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.281642][T21871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.426495][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.426515][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.776743][ T3007] hub 1-0:1.0: USB hub found [ 1768.780653][ T3007] hub 1-0:1.0: 1 port detected [ 1773.218816][ T3082] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[16994] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[3082] [ 1789.039129][T22610] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1792.369490][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.369561][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.721809][ T3460] Process accounting resumed [ 1807.262535][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3747'. [ 1807.591857][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3749'. [ 1809.111655][T22610] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1810.780450][ T3700] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1810.825200][T22610] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 1814.465691][ T3747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3765'. [ 1821.508002][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3778'. [ 1825.288394][T22610] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1827.093498][ T3942] Process accounting paused [ 1829.575826][T22610] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1832.121984][ T4018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3799'. [ 1833.945623][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1833.966426][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1833.972590][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1834.001677][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1834.003632][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1835.514207][ T32] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.740336][ T32] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.773361][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1836.051915][ T32] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.068779][ T5634] Bluetooth: hci4: command tx timeout [ 1836.265573][ T32] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.973243][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.973479][ T4081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.973635][ T4081] bridge_slave_0: entered allmulticast mode [ 1836.976085][ T4081] bridge_slave_0: entered promiscuous mode [ 1836.981417][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.981533][ T4081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.981693][ T4081] bridge_slave_1: entered allmulticast mode [ 1836.989232][ T4081] bridge_slave_1: entered promiscuous mode [ 1837.046752][ T32] bridge_slave_1: left allmulticast mode [ 1837.046777][ T32] bridge_slave_1: left promiscuous mode [ 1837.046942][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.069058][ T32] bridge_slave_0: left allmulticast mode [ 1837.069082][ T32] bridge_slave_0: left promiscuous mode [ 1837.069238][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.422509][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1837.451712][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1837.459376][ T32] bond0 (unregistering): Released all slaves [ 1837.547473][ T4081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1837.711369][ T4081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1838.148025][ T5634] Bluetooth: hci4: command tx timeout [ 1838.240881][ T4081] team0: Port device team_slave_0 added [ 1838.263576][ T4081] team0: Port device team_slave_1 added [ 1838.611580][ T32] hsr_slave_0: left promiscuous mode [ 1838.612185][ T32] hsr_slave_1: left promiscuous mode [ 1838.614249][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1838.614269][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1838.615447][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1838.615472][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1838.673888][ T32] veth1_macvtap: left promiscuous mode [ 1838.673937][ T32] veth0_macvtap: left promiscuous mode [ 1838.674029][ T32] veth1_vlan: left promiscuous mode [ 1838.674080][ T32] veth0_vlan: left promiscuous mode [ 1839.175249][ T32] team0 (unregistering): Port device team_slave_1 removed [ 1839.200357][ T32] team0 (unregistering): Port device team_slave_0 removed [ 1839.399764][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1839.399787][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1839.399820][ T4081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1839.467281][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1839.563737][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1839.563754][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1839.563773][ T4081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1840.064886][ T4081] hsr_slave_0: entered promiscuous mode [ 1840.068104][ T4081] hsr_slave_1: entered promiscuous mode [ 1840.083843][ T4081] debugfs: 'hsr0' already exists in 'hsr' [ 1840.083914][ T4081] Cannot create hsr debugfs directory [ 1840.229109][ T5634] Bluetooth: hci4: command tx timeout [ 1840.822701][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1842.320204][ T5634] Bluetooth: hci4: command tx timeout [ 1842.708676][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1843.286036][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1845.665240][ T4081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1845.668001][ T4081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1845.668825][ T4081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1845.671301][ T4081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1845.991486][ T4081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1846.006669][ T4081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1846.105561][ T4081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1846.110203][ T4081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1846.829946][ T4081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1846.890086][ T4081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1846.948561][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1846.948699][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1847.046371][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.046443][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1849.523145][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1851.290750][ T4081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.900614][ T4081] veth0_vlan: entered promiscuous mode [ 1853.840431][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.840502][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.985343][ T4081] veth1_vlan: entered promiscuous mode [ 1854.459005][ T4081] veth0_macvtap: entered promiscuous mode [ 1854.464327][ T4081] veth1_macvtap: entered promiscuous mode [ 1854.498474][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.524891][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.608563][T21871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.608617][T21871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.608662][T21871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.608707][T21871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.165844][T21871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.165874][T21871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.593189][ T4436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3837'. [ 1855.782721][T21871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.782775][T21871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1858.718314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 1858.861725][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1859.876944][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1871.822205][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1876.411720][T22610] Bluetooth: hci3: command 0x0406 tx timeout [ 1882.207042][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1882.507726][ T4893] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(6.0.4294967293), cmd(3) [ 1887.925749][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3909'. [ 1892.999126][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1909.095607][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1913.538092][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1915.308731][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.308821][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.441968][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1919.196095][ T5523] FAULT_INJECTION: forcing a failure. [ 1919.196095][ T5523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1919.196144][ T5523] CPU: 1 UID: 0 PID: 5523 Comm: syz.2.3978 Tainted: G L syzkaller #0 PREEMPT(full) [ 1919.196183][ T5523] Tainted: [L]=SOFTLOCKUP [ 1919.196192][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1919.196208][ T5523] Call Trace: [ 1919.196216][ T5523] [ 1919.196225][ T5523] dump_stack_lvl+0x100/0x190 [ 1919.196264][ T5523] should_fail_ex.cold+0x5/0xa [ 1919.196297][ T5523] _copy_to_user+0x32/0xd0 [ 1919.196325][ T5523] keyctl_capabilities+0x5a/0x160 [ 1919.196357][ T5523] __do_sys_keyctl+0x427/0x5a0 [ 1919.196387][ T5523] do_syscall_64+0x121/0x770 [ 1919.196417][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.196450][ T5523] RIP: 0033:0x7f113699e1d9 [ 1919.196474][ T5523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1919.196498][ T5523] RSP: 002b:00007f113779e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1919.196525][ T5523] RAX: ffffffffffffffda RBX: 00007f1136c26450 RCX: 00007f113699e1d9 [ 1919.196544][ T5523] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 1919.196561][ T5523] RBP: 00007f113779e090 R08: 00000000000003ff R09: 0000000000000000 [ 1919.196577][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.196594][ T5523] R13: 00007f1136c264e8 R14: 00007f1136c26450 R15: 00007fffe797f3e8 [ 1919.196633][ T5523] [ 1919.197706][ T5523] FAULT_INJECTION: forcing a failure. [ 1919.197706][ T5523] name failslab, interval 1, probability 0, space 0, times 0 [ 1919.197746][ T5523] CPU: 1 UID: 0 PID: 5523 Comm: syz.2.3978 Tainted: G L syzkaller #0 PREEMPT(full) [ 1919.197785][ T5523] Tainted: [L]=SOFTLOCKUP [ 1919.197795][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1919.197812][ T5523] Call Trace: [ 1919.197821][ T5523] [ 1919.197833][ T5523] dump_stack_lvl+0x100/0x190 [ 1919.197874][ T5523] should_fail_ex.cold+0x5/0xa [ 1919.197910][ T5523] should_failslab+0xc2/0x120 [ 1919.197952][ T5523] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1919.197990][ T5523] ? mas_next_range+0xa4/0x100 [ 1919.198019][ T5523] ? vm_area_alloc+0x1f/0x160 [ 1919.198063][ T5523] vm_area_alloc+0x1f/0x160 [ 1919.198091][ T5523] __mmap_region+0x1025/0x32e0 [ 1919.198128][ T5523] ? __pfx___mmap_region+0x10/0x10 [ 1919.198158][ T5523] ? get_page_from_freelist+0x110d/0x35d0 [ 1919.198211][ T5523] ? mas_prev_slot+0x768/0x11b0 [ 1919.198272][ T5523] ? unmapped_area_topdown+0x54e/0x6a0 [ 1919.198381][ T5523] mmap_region+0x3db/0x6d0 [ 1919.198418][ T5523] ? __pfx_mmap_region+0x10/0x10 [ 1919.198450][ T5523] ? thp_get_unmapped_area_vmaflags+0x236/0x2b0 [ 1919.198484][ T5523] ? cap_mmap_addr+0x4b/0x120 [ 1919.198508][ T5523] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1919.198532][ T5523] ? security_mmap_addr+0x71/0x1e0 [ 1919.198568][ T5523] ? __get_unmapped_area+0x255/0x3e0 [ 1919.198611][ T5523] do_mmap+0x12c7/0x1c30 [ 1919.198657][ T5523] ? lock_acquire+0x1d1/0x380 [ 1919.198694][ T5523] ? __pfx_do_mmap+0x10/0x10 [ 1919.198733][ T5523] ? __pfx___might_resched+0x10/0x10 [ 1919.198768][ T5523] ? rcu_read_unlock+0x2d/0xb0 [ 1919.198806][ T5523] ? __pfx_down_write_killable+0x10/0x10 [ 1919.198844][ T5523] vm_mmap_pgoff+0x28d/0x470 [ 1919.198884][ T5523] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1919.198924][ T5523] ? find_held_lock+0x2b/0x80 [ 1919.198955][ T5523] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1919.198991][ T5523] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1919.199042][ T5523] ksys_mmap_pgoff+0xe4/0x610 [ 1919.199081][ T5523] ? find_held_lock+0x2b/0x80 [ 1919.199113][ T5523] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1919.199158][ T5523] __x64_sys_mmap+0x125/0x190 [ 1919.199191][ T5523] do_syscall_64+0x121/0x770 [ 1919.199222][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.199246][ T5523] RIP: 0033:0x7f113699df42 [ 1919.199269][ T5523] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1919.199294][ T5523] RSP: 002b:00007f113779cd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1919.199321][ T5523] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f113699df42 [ 1919.199340][ T5523] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 1919.199357][ T5523] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 1919.199374][ T5523] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 1919.199391][ T5523] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f1136a530db [ 1919.199428][ T5523] [ 1923.445448][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 1925.813670][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1932.382580][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1940.100351][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1949.837539][ T6053] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1956.379614][ T6194] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1956.653874][ T6194] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1958.368194][ T6194] Bluetooth: hci4: command 0x0406 tx timeout [ 1958.630350][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1958.706717][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 1959.998433][ T6252] FAULT_INJECTION: forcing a failure. [ 1959.998433][ T6252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1959.998481][ T6252] CPU: 0 UID: 0 PID: 6252 Comm: syz.3.4074 Tainted: G L syzkaller #0 PREEMPT(full) [ 1959.998522][ T6252] Tainted: [L]=SOFTLOCKUP [ 1959.998533][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1959.998551][ T6252] Call Trace: [ 1959.998560][ T6252] [ 1959.998572][ T6252] dump_stack_lvl+0x100/0x190 [ 1959.998615][ T6252] should_fail_ex.cold+0x5/0xa [ 1959.998650][ T6252] _copy_to_user+0x32/0xd0 [ 1959.998680][ T6252] cpuid_read_f+0x1d9/0x360 [ 1959.998727][ T6252] ? __pfx_cpuid_read_f+0x10/0x10 [ 1959.998760][ T6252] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 1959.998810][ T6252] ? iovec_from_user+0xda/0x140 [ 1959.998853][ T6252] ? bpf_lsm_file_permission+0x9/0x10 [ 1959.998994][ T6252] ? security_file_permission+0x76/0x210 [ 1959.999038][ T6252] ? __pfx_cpuid_read_f+0x10/0x10 [ 1959.999075][ T6252] vfs_readv+0x5d8/0x8d0 [ 1959.999118][ T6252] ? __pfx_vfs_readv+0x10/0x10 [ 1959.999156][ T6252] ? lock_acquire+0x1d1/0x380 [ 1959.999195][ T6252] ? __fget_files+0x34/0x3d0 [ 1959.999244][ T6252] ? __fget_files+0x21f/0x3d0 [ 1959.999289][ T6252] ? do_readv+0x13e/0x340 [ 1959.999312][ T6252] do_readv+0x13e/0x340 [ 1959.999345][ T6252] ? __pfx_do_readv+0x10/0x10 [ 1959.999388][ T6252] do_syscall_64+0x121/0x770 [ 1959.999419][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.999449][ T6252] RIP: 0033:0x7f5be4d9e1d9 [ 1959.999474][ T6252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1959.999500][ T6252] RSP: 002b:00007f5be5ca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1959.999529][ T6252] RAX: ffffffffffffffda RBX: 00007f5be5025fa0 RCX: 00007f5be4d9e1d9 [ 1959.999548][ T6252] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000002 [ 1959.999566][ T6252] RBP: 00007f5be5ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 1959.999584][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1959.999602][ T6252] R13: 00007f5be5026038 R14: 00007f5be5025fa0 R15: 00007ffcb36cb7f8 [ 1959.999642][ T6252] [ 1962.118820][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1962.514599][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1968.428311][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 1968.431336][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 1976.778458][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.778543][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.770841][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 1985.200071][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1991.131261][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 1995.045867][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 1996.898069][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2004.623466][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2004.646424][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 2007.619728][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2028.711061][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2032.088912][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 2035.387881][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 2035.455022][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2036.997050][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2038.259067][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.259130][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2040.363431][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2040.455915][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2041.933843][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 2042.015471][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2044.695110][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2050.417359][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2050.939526][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 2052.659138][ T5634] Bluetooth: hci4: unexpected event 0x0e length: 2 < 3 [ 2054.442428][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2060.004424][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2062.947093][ T8085] FAULT_INJECTION: forcing a failure. [ 2062.947093][ T8085] name failslab, interval 1, probability 0, space 0, times 0 [ 2062.947138][ T8085] CPU: 1 UID: 0 PID: 8085 Comm: syz.3.4316 Tainted: G L syzkaller #0 PREEMPT(full) [ 2062.947178][ T8085] Tainted: [L]=SOFTLOCKUP [ 2062.947189][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2062.947207][ T8085] Call Trace: [ 2062.947218][ T8085] [ 2062.947230][ T8085] dump_stack_lvl+0x100/0x190 [ 2062.947275][ T8085] should_fail_ex.cold+0x5/0xa [ 2062.947313][ T8085] should_failslab+0xc2/0x120 [ 2062.947356][ T8085] __kmalloc_cache_noprof+0x91/0x6d0 [ 2062.947388][ T8085] ? sget_fc+0x117/0x1f70 [ 2062.947418][ T8085] ? sget_fc+0x1ba/0x1f70 [ 2062.947457][ T8085] ? __pfx_nfsd_fill_super+0x10/0x10 [ 2062.947498][ T8085] sget_fc+0x1ba/0x1f70 [ 2062.947529][ T8085] ? __pfx_test_keyed_super+0x10/0x10 [ 2062.947573][ T8085] ? __pfx_set_anon_super_fc+0x10/0x10 [ 2062.947605][ T8085] ? __pfx_sget_fc+0x10/0x10 [ 2062.947637][ T8085] ? kasan_save_track+0x14/0x30 [ 2062.947676][ T8085] ? __kasan_kmalloc+0xaa/0xb0 [ 2062.947716][ T8085] ? rcu_is_watching+0x13/0xc0 [ 2062.947750][ T8085] ? apparmor_capable+0x1d7/0x4d0 [ 2062.947785][ T8085] ? __pfx_nfsd_fill_super+0x10/0x10 [ 2062.947826][ T8085] get_tree_keyed+0x59/0x1d0 [ 2062.947862][ T8085] vfs_get_tree+0x92/0x320 [ 2062.947899][ T8085] path_mount+0x7d0/0x2850 [ 2062.947933][ T8085] ? __pfx_path_mount+0x10/0x10 [ 2062.947959][ T8085] ? lockdep_hardirqs_on+0x7d/0x110 [ 2062.948008][ T8085] ? putname+0xb1/0x110 [ 2062.948046][ T8085] ? kmem_cache_free+0x127/0x6c0 [ 2062.948091][ T8085] ? __x64_sys_mount+0x293/0x310 [ 2062.948118][ T8085] __x64_sys_mount+0x293/0x310 [ 2062.948146][ T8085] ? __pfx___x64_sys_mount+0x10/0x10 [ 2062.948186][ T8085] do_syscall_64+0x121/0x770 [ 2062.948217][ T8085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2062.948247][ T8085] RIP: 0033:0x7f5be4d9e1d9 [ 2062.948271][ T8085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2062.948298][ T8085] RSP: 002b:00007f5be5c5f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2062.948327][ T8085] RAX: ffffffffffffffda RBX: 00007f5be5026180 RCX: 00007f5be4d9e1d9 [ 2062.948346][ T8085] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 2062.948365][ T8085] RBP: 00007f5be5c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 2062.948388][ T8085] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 2062.948406][ T8085] R13: 00007f5be5026218 R14: 00007f5be5026180 R15: 00007ffcb36cb7f8 [ 2062.948446][ T8085] [ 2063.277857][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2064.912933][ T8120] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 2064.912998][ T8120] pci 0000:00:01.3: PCI INT A: no GSI [ 2066.644980][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2070.060322][ T8222] FAULT_INJECTION: forcing a failure. [ 2070.060322][ T8222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2070.060366][ T8222] CPU: 0 UID: 0 PID: 8222 Comm: syz.2.4334 Tainted: G L syzkaller #0 PREEMPT(full) [ 2070.060406][ T8222] Tainted: [L]=SOFTLOCKUP [ 2070.060417][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2070.060434][ T8222] Call Trace: [ 2070.060443][ T8222] [ 2070.060454][ T8222] dump_stack_lvl+0x100/0x190 [ 2070.060497][ T8222] should_fail_ex.cold+0x5/0xa [ 2070.060533][ T8222] _copy_to_user+0x32/0xd0 [ 2070.060565][ T8222] keyctl_capabilities+0x5a/0x160 [ 2070.060623][ T8222] __do_sys_keyctl+0x427/0x5a0 [ 2070.060655][ T8222] do_syscall_64+0x121/0x770 [ 2070.060687][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2070.060715][ T8222] RIP: 0033:0x7f113699e1d9 [ 2070.060740][ T8222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2070.060767][ T8222] RSP: 002b:00007f113779e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2070.060794][ T8222] RAX: ffffffffffffffda RBX: 00007f1136c26450 RCX: 00007f113699e1d9 [ 2070.060814][ T8222] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 2070.060831][ T8222] RBP: 00007f113779e090 R08: 00000000000003ff R09: 0000000000000000 [ 2070.060849][ T8222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2070.060867][ T8222] R13: 00007f1136c264e8 R14: 00007f1136c26450 R15: 00007fffe797f3e8 [ 2070.060906][ T8222] [ 2071.702420][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2075.590226][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2076.889592][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2078.534728][ T8352] nvme_fcloop: unknown parameter or missing value '7' [ 2078.537944][ T5634] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 2078.974435][ T8382] FAULT_INJECTION: forcing a failure. [ 2078.974435][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2078.974480][ T8382] CPU: 1 UID: 0 PID: 8382 Comm: syz.3.4354 Tainted: G L syzkaller #0 PREEMPT(full) [ 2078.974522][ T8382] Tainted: [L]=SOFTLOCKUP [ 2078.974532][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2078.974549][ T8382] Call Trace: [ 2078.974558][ T8382] [ 2078.974570][ T8382] dump_stack_lvl+0x100/0x190 [ 2078.974612][ T8382] should_fail_ex.cold+0x5/0xa [ 2078.974650][ T8382] _copy_from_iter+0x1f4/0x1690 [ 2078.974685][ T8382] ? __asan_memset+0x23/0x50 [ 2078.974721][ T8382] ? __pfx__copy_from_iter+0x10/0x10 [ 2078.974749][ T8382] ? __pfx___alloc_skb+0x10/0x10 [ 2078.974804][ T8382] netlink_sendmsg+0x808/0xda0 [ 2078.974842][ T8382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2078.974876][ T8382] ? apparmor_socket_sendmsg+0x165/0x280 [ 2078.974912][ T8382] ____sys_sendmsg+0xa4d/0xbe0 [ 2078.974949][ T8382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2078.974980][ T8382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2078.975029][ T8382] ? lock_acquire+0x1d1/0x380 [ 2078.975067][ T8382] ? get_pid_task+0x2a/0x250 [ 2078.975107][ T8382] ___sys_sendmsg+0x190/0x1e0 [ 2078.975150][ T8382] ? __pfx____sys_sendmsg+0x10/0x10 [ 2078.975191][ T8382] ? get_pid_task+0x106/0x250 [ 2078.975235][ T8382] ? find_held_lock+0x2b/0x80 [ 2078.975288][ T8382] __sys_sendmsg+0x160/0x210 [ 2078.975322][ T8382] ? __pfx___sys_sendmsg+0x10/0x10 [ 2078.975377][ T8382] do_syscall_64+0x121/0x770 [ 2078.975408][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2078.975437][ T8382] RIP: 0033:0x7f5be4d9e1d9 [ 2078.975461][ T8382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2078.975488][ T8382] RSP: 002b:00007f5be5ca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2078.975516][ T8382] RAX: ffffffffffffffda RBX: 00007f5be5025fa0 RCX: 00007f5be4d9e1d9 [ 2078.975535][ T8382] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 2078.975554][ T8382] RBP: 00007f5be5ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 2078.975572][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2078.975589][ T8382] R13: 00007f5be5026038 R14: 00007f5be5025fa0 R15: 00007ffcb36cb7f8 [ 2078.975629][ T8382] [ 2079.339375][ T8388] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 2080.137743][ T8400] FAULT_INJECTION: forcing a failure. [ 2080.137743][ T8400] name failslab, interval 1, probability 0, space 0, times 0 [ 2080.137791][ T8400] CPU: 0 UID: 0 PID: 8400 Comm: syz.1.4357 Tainted: G L syzkaller #0 PREEMPT(full) [ 2080.137835][ T8400] Tainted: [L]=SOFTLOCKUP [ 2080.137846][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2080.137866][ T8400] Call Trace: [ 2080.137877][ T8400] [ 2080.137889][ T8400] dump_stack_lvl+0x100/0x190 [ 2080.137936][ T8400] should_fail_ex.cold+0x5/0xa [ 2080.137977][ T8400] should_failslab+0xc2/0x120 [ 2080.138021][ T8400] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2080.138060][ T8400] ? __pfx_map_id_range_down+0x10/0x10 [ 2080.138104][ T8400] ? security_inode_alloc+0x3b/0x2c0 [ 2080.138145][ T8400] security_inode_alloc+0x3b/0x2c0 [ 2080.138179][ T8400] inode_init_always_gfp+0xc6f/0xfb0 [ 2080.138226][ T8400] alloc_inode+0x8e/0x250 [ 2080.138258][ T8400] new_inode+0x22/0x1c0 [ 2080.138293][ T8400] nfsd_mkdir+0x78/0x460 [ 2080.138339][ T8400] nfsd_fill_super+0x3f9/0x560 [ 2080.138385][ T8400] ? __pfx_nfsd_fill_super+0x10/0x10 [ 2080.138425][ T8400] get_tree_keyed+0x10e/0x1d0 [ 2080.138463][ T8400] vfs_get_tree+0x92/0x320 [ 2080.138492][ T8400] path_mount+0x7d0/0x2850 [ 2080.138527][ T8400] ? __pfx_path_mount+0x10/0x10 [ 2080.138552][ T8400] ? lockdep_hardirqs_on+0x7d/0x110 [ 2080.138602][ T8400] ? putname+0xb1/0x110 [ 2080.138641][ T8400] ? kmem_cache_free+0x127/0x6c0 [ 2080.138687][ T8400] ? __x64_sys_mount+0x293/0x310 [ 2080.138723][ T8400] __x64_sys_mount+0x293/0x310 [ 2080.138753][ T8400] ? __pfx___x64_sys_mount+0x10/0x10 [ 2080.138794][ T8400] do_syscall_64+0x121/0x770 [ 2080.138826][ T8400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2080.138856][ T8400] RIP: 0033:0x7fe573d9e1d9 [ 2080.138880][ T8400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2080.138908][ T8400] RSP: 002b:00007fe571fb4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2080.138937][ T8400] RAX: ffffffffffffffda RBX: 00007fe574026180 RCX: 00007fe573d9e1d9 [ 2080.138959][ T8400] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 2080.138979][ T8400] RBP: 00007fe573e35888 R08: 0000000000000000 R09: 0000000000000000 [ 2080.138997][ T8400] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 2080.139015][ T8400] R13: 00007fe574026218 R14: 00007fe574026180 R15: 00007ffcddc07548 [ 2080.139054][ T8400] [ 2083.470239][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4365'. [ 2083.470293][ T8447] : renamed from vxcan1 (while UP) [ 2084.948891][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2085.906601][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2087.519007][ T8539] FAULT_INJECTION: forcing a failure. [ 2087.519007][ T8539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2087.519050][ T8539] CPU: 1 UID: 0 PID: 8539 Comm: syz.1.4377 Tainted: G L syzkaller #0 PREEMPT(full) [ 2087.519091][ T8539] Tainted: [L]=SOFTLOCKUP [ 2087.519101][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2087.519118][ T8539] Call Trace: [ 2087.519127][ T8539] [ 2087.519138][ T8539] dump_stack_lvl+0x100/0x190 [ 2087.519179][ T8539] should_fail_ex.cold+0x5/0xa [ 2087.519215][ T8539] _copy_to_user+0x32/0xd0 [ 2087.519247][ T8539] simple_read_from_buffer+0xcb/0x170 [ 2087.519290][ T8539] proc_fail_nth_read+0x1af/0x230 [ 2087.519329][ T8539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2087.519366][ T8539] ? rw_verify_area+0xce/0x6d0 [ 2087.519396][ T8539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2087.519442][ T8539] vfs_read+0x1e4/0xb40 [ 2087.519477][ T8539] ? lock_acquire+0x1d1/0x380 [ 2087.519517][ T8539] ? __fget_files+0x34/0x3d0 [ 2087.519553][ T8539] ? __pfx_vfs_read+0x10/0x10 [ 2087.519587][ T8539] ? find_held_lock+0x2b/0x80 [ 2087.519621][ T8539] ? __fget_files+0x215/0x3d0 [ 2087.519665][ T8539] ? __fget_files+0x21f/0x3d0 [ 2087.519713][ T8539] ksys_read+0x12a/0x250 [ 2087.519748][ T8539] ? __pfx_ksys_read+0x10/0x10 [ 2087.519794][ T8539] do_syscall_64+0x121/0x770 [ 2087.519826][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2087.519856][ T8539] RIP: 0033:0x7fe573d5ea0e [ 2087.519880][ T8539] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2087.519906][ T8539] RSP: 002b:00007fe571ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2087.519933][ T8539] RAX: ffffffffffffffda RBX: 00007fe571ff66c0 RCX: 00007fe573d5ea0e [ 2087.519952][ T8539] RDX: 000000000000000f RSI: 00007fe571ff60a0 RDI: 0000000000000004 [ 2087.519971][ T8539] RBP: 00007fe571ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2087.519989][ T8539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2087.520007][ T8539] R13: 00007fe574026038 R14: 00007fe574025fa0 R15: 00007ffcddc07548 [ 2087.520053][ T8539] [ 2091.365008][ T8606] FAULT_INJECTION: forcing a failure. [ 2091.365008][ T8606] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2091.365057][ T8606] CPU: 0 UID: 0 PID: 8606 Comm: syz.3.4385 Tainted: G L syzkaller #0 PREEMPT(full) [ 2091.365100][ T8606] Tainted: [L]=SOFTLOCKUP [ 2091.365112][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2091.365132][ T8606] Call Trace: [ 2091.365143][ T8606] [ 2091.365156][ T8606] dump_stack_lvl+0x100/0x190 [ 2091.365202][ T8606] should_fail_ex.cold+0x5/0xa [ 2091.365241][ T8606] get_futex_key+0x1d0/0x14f0 [ 2091.365277][ T8606] ? __pfx_get_futex_key+0x10/0x10 [ 2091.365312][ T8606] ? trace_ignore_this_task+0xc3/0x100 [ 2091.365355][ T8606] ? event_filter_pid_sched_wakeup_probe_post+0x128/0x270 [ 2091.365408][ T8606] futex_wait_setup+0x91/0x540 [ 2091.365458][ T8606] __futex_wait+0x19f/0x300 [ 2091.365500][ T8606] ? __pfx___futex_wait+0x10/0x10 [ 2091.365536][ T8606] ? __pfx_try_to_wake_up+0x10/0x10 [ 2091.365581][ T8606] ? futex_hash+0x311/0x400 [ 2091.365614][ T8606] ? __pfx_futex_wake_mark+0x10/0x10 [ 2091.365658][ T8606] ? find_held_lock+0x2b/0x80 [ 2091.365692][ T8606] ? futex_wake+0x4ea/0x5e0 [ 2091.365739][ T8606] futex_wait+0xe6/0x370 [ 2091.365778][ T8606] ? __pfx_futex_wait+0x10/0x10 [ 2091.365838][ T8606] do_futex+0x265/0x440 [ 2091.365872][ T8606] ? __pfx_do_futex+0x10/0x10 [ 2091.365904][ T8606] ? kasan_quarantine_put+0x104/0x240 [ 2091.365951][ T8606] ? lockdep_hardirqs_on+0x7d/0x110 [ 2091.366004][ T8606] __x64_sys_futex+0x34f/0x4d0 [ 2091.366043][ T8606] ? __pfx___x64_sys_futex+0x10/0x10 [ 2091.366092][ T8606] do_syscall_64+0x121/0x770 [ 2091.366123][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2091.366154][ T8606] RIP: 0033:0x7f5be4d9e1d9 [ 2091.366179][ T8606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2091.366207][ T8606] RSP: 002b:00007f5be5c800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2091.366237][ T8606] RAX: ffffffffffffffda RBX: 00007f5be5026098 RCX: 00007f5be4d9e1d9 [ 2091.366258][ T8606] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5be5026098 [ 2091.366278][ T8606] RBP: 00007f5be5026090 R08: 0000000000000000 R09: 0000000000000000 [ 2091.366298][ T8606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2091.366317][ T8606] R13: 00007f5be5026128 R14: 00007ffcb36cb710 R15: 00007ffcb36cb7f8 [ 2091.366358][ T8606] [ 2091.687709][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2097.457332][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2099.177176][ T8745] FAULT_INJECTION: forcing a failure. [ 2099.177176][ T8745] name failslab, interval 1, probability 0, space 0, times 0 [ 2099.177223][ T8745] CPU: 1 UID: 0 PID: 8745 Comm: syz.0.4403 Tainted: G L syzkaller #0 PREEMPT(full) [ 2099.177265][ T8745] Tainted: [L]=SOFTLOCKUP [ 2099.177277][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2099.177294][ T8745] Call Trace: [ 2099.177304][ T8745] [ 2099.177324][ T8745] dump_stack_lvl+0x100/0x190 [ 2099.177370][ T8745] should_fail_ex.cold+0x5/0xa [ 2099.177408][ T8745] should_failslab+0xc2/0x120 [ 2099.177452][ T8745] __kmalloc_noprof+0xfc/0x840 [ 2099.177493][ T8745] ? lsm_blob_alloc+0x68/0x90 [ 2099.177544][ T8745] lsm_blob_alloc+0x68/0x90 [ 2099.177587][ T8745] security_prepare_creds+0x2d/0x290 [ 2099.177648][ T8745] prepare_creds+0x5d6/0x950 [ 2099.177692][ T8745] __sys_setfsgid+0xe3/0x3b0 [ 2099.177724][ T8745] do_syscall_64+0x121/0x770 [ 2099.177757][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.177787][ T8745] RIP: 0033:0x7f7a3c79e1d9 [ 2099.177812][ T8745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2099.177840][ T8745] RSP: 002b:00007f7a3d662028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 2099.177869][ T8745] RAX: ffffffffffffffda RBX: 00007f7a3ca26360 RCX: 00007f7a3c79e1d9 [ 2099.177889][ T8745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2099.177907][ T8745] RBP: 00007f7a3c835888 R08: 0000000000000000 R09: 0000000000000000 [ 2099.177926][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.177944][ T8745] R13: 00007f7a3ca263f8 R14: 00007f7a3ca26360 R15: 00007fffabff8778 [ 2099.177985][ T8745] [ 2099.647220][T32652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2099.725062][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.725123][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.772953][ T6194] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2099.778545][ T6194] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2099.787562][ T6194] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2099.802233][ T6194] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2099.802953][ T6194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2100.084944][T32652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.258765][T32652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.384632][T32652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2100.771988][T32652] bridge_slave_1: left allmulticast mode [ 2100.772026][T32652] bridge_slave_1: left promiscuous mode [ 2100.773864][T32652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2100.795033][T32652] bridge_slave_0: left allmulticast mode [ 2100.795062][T32652] bridge_slave_0: left promiscuous mode [ 2100.795290][T32652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.165231][T32652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2101.182183][T32652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2101.185438][T32652] bond0 (unregistering): Released all slaves [ 2101.629089][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2101.890126][ T5634] Bluetooth: hci2: command tx timeout [ 2101.897735][ T6194] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2101.942222][ T6194] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2101.948342][ T6194] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2101.959972][ T6194] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2101.961315][ T6194] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2102.077161][T32652] hsr_slave_0: left promiscuous mode [ 2102.077961][T32652] hsr_slave_1: left promiscuous mode [ 2102.078911][T32652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2102.078936][T32652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2102.080724][T32652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2102.080747][T32652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2102.107921][T32652] veth1_macvtap: left promiscuous mode [ 2102.107963][T32652] veth0_macvtap: left promiscuous mode [ 2102.112561][T32652] veth1_vlan: left promiscuous mode [ 2102.112642][T32652] veth0_vlan: left promiscuous mode [ 2102.323841][T32652] team0 (unregistering): Port device team_slave_1 removed [ 2102.337556][T32652] team0 (unregistering): Port device team_slave_0 removed [ 2103.159793][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.159962][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.160079][ T8759] bridge_slave_0: entered allmulticast mode [ 2103.167016][ T8759] bridge_slave_0: entered promiscuous mode [ 2103.169731][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.169839][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 2103.170019][ T8759] bridge_slave_1: entered allmulticast mode [ 2103.179194][ T8759] bridge_slave_1: entered promiscuous mode [ 2103.339502][T32652] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.477954][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2103.577599][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.709146][T32652] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.785971][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2103.805152][ T8759] team0: Port device team_slave_0 added [ 2103.816778][ T8759] team0: Port device team_slave_1 added [ 2103.888383][T32652] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.960835][ T5634] Bluetooth: hci2: command tx timeout [ 2104.040983][ T5634] Bluetooth: hci3: command tx timeout [ 2104.183698][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2104.183722][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.183746][ T8759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2104.247442][T32652] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2104.305881][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2104.305902][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2104.305933][ T8759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2104.513706][ T8759] hsr_slave_0: entered promiscuous mode [ 2104.514820][ T8759] hsr_slave_1: entered promiscuous mode [ 2104.515611][ T8759] debugfs: 'hsr0' already exists in 'hsr' [ 2104.515634][ T8759] Cannot create hsr debugfs directory [ 2104.981147][T32652] bridge_slave_1: left allmulticast mode [ 2104.981178][T32652] bridge_slave_1: left promiscuous mode [ 2104.982177][T32652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.006767][T32652] bridge_slave_0: left allmulticast mode [ 2105.006786][T32652] bridge_slave_0: left promiscuous mode [ 2105.006921][T32652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.360838][T32652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2105.384948][T32652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2105.389457][T32652] bond0 (unregistering): Released all slaves [ 2105.521686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 2105.692831][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2106.042233][ T5634] Bluetooth: hci2: command tx timeout [ 2106.066959][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 2106.067337][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.067470][ T8801] bridge_slave_0: entered allmulticast mode [ 2106.113374][ T8801] bridge_slave_0: entered promiscuous mode [ 2106.122114][ T5634] Bluetooth: hci3: command tx timeout [ 2106.273620][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.273760][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 2106.273848][ T8801] bridge_slave_1: entered allmulticast mode [ 2106.275342][ T8801] bridge_slave_1: entered promiscuous mode [ 2106.668871][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2106.751610][T32652] hsr_slave_0: left promiscuous mode [ 2106.758968][T32652] hsr_slave_1: left promiscuous mode [ 2106.759561][T32652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2106.759577][T32652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2106.760124][T32652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2106.760145][T32652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2106.802239][T32652] veth1_macvtap: left promiscuous mode [ 2106.802284][T32652] veth0_macvtap: left promiscuous mode [ 2106.802394][T32652] veth1_vlan: left promiscuous mode [ 2106.802469][T32652] veth0_vlan: left promiscuous mode [ 2106.981521][T32652] team0 (unregistering): Port device team_slave_1 removed [ 2106.994535][T32652] team0 (unregistering): Port device team_slave_0 removed [ 2107.103502][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2107.294194][ T8801] team0: Port device team_slave_0 added [ 2107.439322][ T8801] team0: Port device team_slave_1 added [ 2107.623186][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2107.623209][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.623244][ T8801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2107.647508][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2107.647528][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.647560][ T8801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2107.937719][ T8801] hsr_slave_0: entered promiscuous mode [ 2107.938787][ T8801] hsr_slave_1: entered promiscuous mode [ 2107.944844][ T8801] debugfs: 'hsr0' already exists in 'hsr' [ 2107.944870][ T8801] Cannot create hsr debugfs directory [ 2108.122971][ T5634] Bluetooth: hci2: command tx timeout [ 2108.202925][ T5634] Bluetooth: hci3: command tx timeout [ 2108.298116][ T8759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2108.325189][ T8759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2108.326101][ T8759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2108.341470][ T8759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2108.425539][ T8759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2108.431074][ T8759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2108.486192][ T8920] FAULT_INJECTION: forcing a failure. [ 2108.486192][ T8920] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.486237][ T8920] CPU: 1 UID: 0 PID: 8920 Comm: syz.1.4415 Tainted: G L syzkaller #0 PREEMPT(full) [ 2108.486277][ T8920] Tainted: [L]=SOFTLOCKUP [ 2108.486287][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2108.486305][ T8920] Call Trace: [ 2108.486315][ T8920] [ 2108.486327][ T8920] dump_stack_lvl+0x100/0x190 [ 2108.486373][ T8920] should_fail_ex.cold+0x5/0xa [ 2108.486405][ T8920] ? __netlink_lookup+0x652/0x900 [ 2108.486439][ T8920] should_failslab+0xc2/0x120 [ 2108.486484][ T8920] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2108.486523][ T8920] ? skb_clone+0x190/0x400 [ 2108.486564][ T8920] skb_clone+0x190/0x400 [ 2108.486599][ T8920] netlink_deliver_tap+0xaed/0xcc0 [ 2108.486636][ T8920] netlink_unicast+0x62b/0x850 [ 2108.486673][ T8920] ? __pfx_netlink_unicast+0x10/0x10 [ 2108.486717][ T8920] netlink_sendmsg+0x8b0/0xda0 [ 2108.486755][ T8920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2108.486797][ T8920] ? apparmor_socket_sendmsg+0x165/0x280 [ 2108.486835][ T8920] __sys_sendto+0x48b/0x4e0 [ 2108.486867][ T8920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2108.486900][ T8920] ? __pfx___sys_sendto+0x10/0x10 [ 2108.486940][ T8920] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2108.487010][ T8920] __x64_sys_sendto+0xe0/0x1c0 [ 2108.487042][ T8920] ? do_syscall_64+0xae/0x770 [ 2108.487069][ T8920] ? lockdep_hardirqs_on+0x7d/0x110 [ 2108.487113][ T8920] do_syscall_64+0x121/0x770 [ 2108.487146][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2108.487177][ T8920] RIP: 0033:0x7fe573d5ea0e [ 2108.487202][ T8920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2108.487229][ T8920] RSP: 002b:00007fe570f26e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2108.487259][ T8920] RAX: ffffffffffffffda RBX: 00007fe570f286c0 RCX: 00007fe573d5ea0e [ 2108.487279][ T8920] RDX: 0000000000000020 RSI: 00007fe570f27000 RDI: 0000000000000006 [ 2108.487297][ T8920] RBP: 0000000000000000 R08: 00007fe570f26f04 R09: 000000000000000c [ 2108.487316][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2108.487334][ T8920] R13: 00007fe570f26f58 R14: 00007fe570f27000 R15: 0000000000000000 [ 2108.487375][ T8920] [ 2108.695510][ T8759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2108.727067][ T8759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2109.230289][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2109.612098][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2109.661122][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 2109.678791][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2109.678900][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2109.713275][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 2109.713349][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2110.284072][ T5634] Bluetooth: hci3: command tx timeout [ 2110.588063][ T8801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2110.608689][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2110.610957][ T8801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2110.617245][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2110.740596][ T8801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2110.752425][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2110.753386][ T8801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2110.776771][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2111.506648][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2111.549994][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.673947][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.674095][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2111.691142][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.691264][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2111.842991][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2112.882706][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2113.209409][ T8759] veth0_vlan: entered promiscuous mode [ 2113.246366][ T8759] veth1_vlan: entered promiscuous mode [ 2113.404085][ T8759] veth0_macvtap: entered promiscuous mode [ 2113.457727][ T8759] veth1_macvtap: entered promiscuous mode [ 2113.601286][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2113.619932][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2113.685140][ T9051] db_root: cannot open: /sy] [ 2114.436219][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.437957][ T155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.456492][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2114.527299][ T100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2114.528234][ T100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.716764][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.716790][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.884054][ T8801] veth0_vlan: entered promiscuous mode [ 2115.896181][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.896207][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.038200][ T8801] veth1_vlan: entered promiscuous mode [ 2116.102346][ T8801] veth0_macvtap: entered promiscuous mode [ 2116.116499][ T8801] veth1_macvtap: entered promiscuous mode [ 2116.477335][ T9135] FAULT_INJECTION: forcing a failure. [ 2116.477335][ T9135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2116.477382][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.3.4406 Tainted: G L syzkaller #0 PREEMPT(full) [ 2116.477424][ T9135] Tainted: [L]=SOFTLOCKUP [ 2116.477435][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2116.477454][ T9135] Call Trace: [ 2116.477464][ T9135] [ 2116.477476][ T9135] dump_stack_lvl+0x100/0x190 [ 2116.477523][ T9135] should_fail_ex.cold+0x5/0xa [ 2116.477557][ T9135] ? prepare_alloc_pages+0x16d/0x5b0 [ 2116.477600][ T9135] should_fail_alloc_page+0xeb/0x140 [ 2116.477646][ T9135] prepare_alloc_pages+0x1f0/0x5b0 [ 2116.477694][ T9135] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 2116.477748][ T9135] ? __lock_acquire+0x5c0/0x1f40 [ 2116.477787][ T9135] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2116.477832][ T9135] ? lock_acquire+0x1d1/0x380 [ 2116.477868][ T9135] ? __might_fault+0xc5/0x140 [ 2116.477897][ T9135] ? find_held_lock+0x2b/0x80 [ 2116.477937][ T9135] ? __might_fault+0xc5/0x140 [ 2116.477965][ T9135] ? __might_fault+0xc5/0x140 [ 2116.478005][ T9135] ? _copy_from_iter+0x270/0x1690 [ 2116.478034][ T9135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2116.478076][ T9135] ? policy_nodemask+0xed/0x4f0 [ 2116.478104][ T9135] alloc_pages_mpol+0x201/0x550 [ 2116.478132][ T9135] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2116.478169][ T9135] folio_alloc_mpol_noprof+0x36/0x260 [ 2116.478201][ T9135] vma_alloc_folio_noprof+0xed/0x1d0 [ 2116.478230][ T9135] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2116.478259][ T9135] ? rcu_read_unlock+0x2d/0xb0 [ 2116.478289][ T9135] ? rcu_read_unlock+0x2d/0xb0 [ 2116.478325][ T9135] do_wp_page+0x1b15/0x45c0 [ 2116.478372][ T9135] ? lock_acquire+0x1d1/0x380 [ 2116.478409][ T9135] ? __pfx_do_wp_page+0x10/0x10 [ 2116.478451][ T9135] ? do_raw_spin_lock+0x128/0x260 [ 2116.478479][ T9135] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2116.478517][ T9135] __handle_mm_fault+0x1cd2/0x2f60 [ 2116.478549][ T9135] ? lock_vma_under_rcu+0x11d/0x590 [ 2116.478576][ T9135] ? __pfx___handle_mm_fault+0x10/0x10 [ 2116.478610][ T9135] ? lock_vma_under_rcu+0x17c/0x590 [ 2116.478658][ T9135] handle_mm_fault+0x363/0xa20 [ 2116.478693][ T9135] do_user_addr_fault+0x59c/0x12f0 [ 2116.478734][ T9135] exc_page_fault+0x6f/0xd0 [ 2116.478774][ T9135] asm_exc_page_fault+0x26/0x30 [ 2116.478801][ T9135] RIP: 0033:0x7f47fab5dfc5 [ 2116.478823][ T9135] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 2116.478850][ T9135] RSP: 002b:00007f47f7decde0 EFLAGS: 00010293 [ 2116.478874][ T9135] RAX: 0000000000000008 RBX: 00007f47fb957e20 RCX: 0000000000000000 [ 2116.478892][ T9135] RDX: 0000000000000000 RSI: 00007f47fac530db RDI: 00007f47fb957e20 [ 2116.478908][ T9135] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 2116.478930][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47fac52df3 [ 2116.478946][ T9135] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f47fac530db [ 2116.478983][ T9135] [ 2116.485433][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2116.486305][ T9135] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 2116.496859][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2117.480829][ T1054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.481879][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.482075][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.482235][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.565075][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.565101][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.672114][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.672142][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.280566][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2120.266522][ T5634] Bluetooth: hci0: unexpected event 0x0e length: 2 < 3 [ 2120.434551][ T5634] Bluetooth: hci1: unexpected event 0x0e length: 2 < 3 [ 2122.635358][ T5634] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3 [ 2124.156225][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2127.436866][ T5634] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 2129.293700][ T9374] hub 1-0:1.0: USB hub found [ 2129.294493][ T9374] hub 1-0:1.0: 1 port detected [ 2131.069176][ T9398] BUG: unable to handle page fault for address: ffffc90011d22fe8 [ 2131.076953][ T9398] #PF: supervisor write access in kernel mode [ 2131.083043][ T9398] #PF: error_code(0x0002) - not-present page [ 2131.089053][ T9398] PGD 13fe10067 P4D 13fe10067 PUD 1e2b7067 PMD 6962a067 PTE 0 [ 2131.096571][ T9398] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 2131.101972][ T9398] CPU: 0 UID: 0 PID: 9398 Comm: syz.3.4456 Tainted: G L syzkaller #0 PREEMPT(full) [ 2131.112855][ T9398] Tainted: [L]=SOFTLOCKUP [ 2131.117189][ T9398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2131.127257][ T9398] RIP: 0010:write_comp_data+0x7c/0xa0 [ 2131.132656][ T9398] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2131.152365][ T9398] RSP: 0018:ffffc90005897e80 EFLAGS: 00050257 [ 2131.158476][ T9398] RAX: ffffc90011d23000 RBX: 0000000000000000 RCX: ffffffff824a5f35 [ 2131.166466][ T9398] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2131.174448][ T9398] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2131.182417][ T9398] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2131.190392][ T9398] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2131.198364][ T9398] FS: 00007f47fb99b6c0(0000) GS:ffff88812294a000(0000) knlGS:0000000000000000 [ 2131.207296][ T9398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2131.213878][ T9398] CR2: ffffc90011d22fe8 CR3: 000000002ba38000 CR4: 00000000003526f0 [ 2131.221849][ T9398] Call Trace: [ 2131.225124][ T9398] [ 2131.228051][ T9398] rseq_register+0x115/0x350 [ 2131.232663][ T9398] __x64_sys_rseq+0x1b8/0x2e0 [ 2131.237450][ T9398] do_syscall_64+0x121/0x770 [ 2131.242047][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2131.247945][ T9398] RIP: 0033:0x7f47fab9e1d9 [ 2131.252364][ T9398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2131.271970][ T9398] RSP: 002b:00007f47fb99b028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 2131.280383][ T9398] RAX: ffffffffffffffda RBX: 00007f47fae26450 RCX: 00007f47fab9e1d9 [ 2131.288361][ T9398] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 2131.296331][ T9398] RBP: 00007f47fac35888 R08: 0000000000000000 R09: 0000000000000000 [ 2131.304299][ T9398] R10: 0000000008000006 R11: 0000000000000246 R12: 0000000000000000 [ 2131.312267][ T9398] R13: 00007f47fae264e8 R14: 00007f47fae26450 R15: 00007fffa8ccef08 [ 2131.320247][ T9398] [ 2131.323278][ T9398] Modules linked in: [ 2131.327165][ T9398] CR2: ffffc90011d22fe8 [ 2131.331319][ T9398] ---[ end trace 0000000000000000 ]--- [ 2131.336769][ T9398] RIP: 0010:write_comp_data+0x7c/0xa0 [ 2131.336811][ T9398] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2131.336835][ T9398] RSP: 0018:ffffc90005897e80 EFLAGS: 00050257 [ 2131.336855][ T9398] RAX: ffffc90011d23000 RBX: 0000000000000000 RCX: ffffffff824a5f35 [ 2131.336872][ T9398] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2131.336888][ T9398] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2131.336904][ T9398] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2131.336920][ T9398] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2131.336937][ T9398] FS: 00007f47fb99b6c0(0000) GS:ffff88812294a000(0000) knlGS:0000000000000000 [ 2131.336961][ T9398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2131.336979][ T9398] CR2: ffffc90011d22fe8 CR3: 000000002ba38000 CR4: 00000000003526f0 [ 2131.336998][ T9398] Kernel panic - not syncing: Fatal exception [ 2131.437449][ T9398] Kernel Offset: disabled [ 2131.441763][ T9398] Rebooting in 86400 seconds..