last executing test programs: 6m10.832733577s ago: executing program 1 (id=1181): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f00000001c0)=""/213, 0xd5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setns(0xc9, 0x0) r5 = socket(0x1f, 0x1, 0x0) shutdown$auto(r5, 0x10001) close_range$auto(0x2, 0x8, 0x0) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0x9, 0x40, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x401, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0xe088}) r6 = socket(0xa, 0x5, 0x84) sendto$auto(r6, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x17) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setfsuid$auto(0xee00) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x7, 0x30, &(0x7f0000000380)='/sys/kernI\xa8n\x80+\x87(\xef\xd5\xb5N\xf7\xf95\xf6el/debug/traing/saved_tgids\x00\x00', &(0x7f0000000340)=0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 6m8.608230005s ago: executing program 1 (id=1184): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) mprotect$auto(0x200000000000, 0x806122, 0xc) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0x9}}, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x8, 0x6, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) r2 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto_dev_fops_plock(r2, &(0x7f0000000240)="cacbc35874f3520ede8ad842e90500ae67af5c4b22cd56582e0f3d8bc5c5f248d71a9dea75b359f918bd7aa8c9691bba9d68", 0x32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket(0x15, 0x5, 0x0) sethostname$auto(0x0, 0xfffffff8) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/uid_map\x00', 0x208880, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/038/001\x00', 0x40a02, 0x0) read$auto_rfkill_fops_core(r1, &(0x7f0000000280)=""/46, 0x2e) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r3, 0x40044145, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/bpf_offloaded_id\x00', 0x101000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x400000a000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 6m6.327295367s ago: executing program 1 (id=1187): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0xd36) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x8042, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000280)={0x10000, &(0x7f0000000240)=&(0x7f0000000140)="beb93fa080a16bf33a576b5dcfb5033cfa41bf25b475a515cc41b8199d1224974305e0d7c32868cf8c26b0ac5c234fc6f52a5e7fcde847ada639fa935c0b31b32f7d8da174eb2c82d03ae90654e200006093b5772308107ef0c9a35c9596bba80bec963f6b2bdd6c9f80f916320ce6511f97d4d38747c24b774813283abd043cd264374ce6d07039e9c155f7d6ea3f717f42ed3f1c1461cdea72ee291a1ba560e54496a8527b38ce60b3abac153b6050d729fb0517dfcaf522643286a0b7778778ff0beaca11d2c001bcfd0f3a198b77226cceebd7c4d454c8362e35822aa20e127d15a05693da", 0x7f}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/drvctl\x00', 0x28001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)='n', 0x1) ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000080)={0xfffffffc, "e91a1ae2", 0x3, 0xfffffffffffffffb, 0xfffffffffffff000, 0xffffffff, 0x6, 0xfffffffffffffffa, 0x1, 0x6cca, 0x7fff, 0x5, 0x7, 0x5, 0x1, 0x80000001, 0x1, 0x5, 0x400, "cec3ec4c01d0132df17dbe7378730314ad618988"}) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/xfs/xqm\x00', 0x1c9802, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x2000006) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) inotify_add_watch$auto(r6, 0x0, 0x7) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x5, 0x8000000000000, 0xf, 0xffffffffffffffff, 0x1, 0x5}, 0x6f4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf250400000005000b0023000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40cc}, 0x20040080) r7 = socket(0x10, 0x2, 0xf) r8 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r7, 0xffffffff}, 0xd) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r8, @new_prog_fd, 0x403, @old_prog_fd=r8}, 0x8) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) 6m4.12633176s ago: executing program 1 (id=1189): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0x10, 0x2, 0xf) bpf$auto(0x0, 0x0, 0xd) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0) ioctl$auto_BLKGETSIZE(r1, 0x1260, 0x0) setfsuid$auto(0xee00) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x4}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000240)=""/213, 0xd5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r3, &(0x7f0000000680)={0x0, 0x40200}, 0x3) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40103d0b, 0x0) 6m2.25330495s ago: executing program 1 (id=1191): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbfY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xf1\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) unshare$auto(0x40000080) semctl$auto_SETVAL(0x1, 0x800, 0x10, 0x2000000) unshare$auto(0x40000080) mmap$auto(0x100, 0x3fffff, 0x7, 0x18, 0xdd, 0xfffffffffffffffc) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) r1 = open(0x0, 0x200000, 0x456) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) mmap$auto(0x0, 0x10001, 0x5f, 0x9b73, r1, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r2, 0x1, &(0x7f00000001c0)='/dev/bus/usb/010/001\x00', 0x0, 0x1) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xb0\x03?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.13/usb35/35-0:1.0/ep_81/power/runtime_active_time\x00', 0x200, 0x0) unshare$auto(0x40000080) mmap$auto(0x2, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1e3a02, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) 6m0.02685676s ago: executing program 1 (id=1193): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1f, 0x3, 0x9) prctl$auto(0x1000000003b, 0x6, 0x0, 0x1, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x24000805) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x2008, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r1, 0x8) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) 5m44.765562963s ago: executing program 32 (id=1193): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1f, 0x3, 0x9) prctl$auto(0x1000000003b, 0x6, 0x0, 0x1, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x24000805) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28b42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) io_uring_setup$auto(0x2008, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r1, 0x8) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) 11.136929845s ago: executing program 0 (id=1982): mmap$auto(0x0, 0x2020009, 0x83, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x101) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r1, 0x0, 0x98c7) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0xa, 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0xa, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, r2, 0x1007ffe) mlockall$auto(0x800000000000005) socket(0x2a, 0x2, 0x1) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) io_setup$auto(0xffff, &(0x7f0000000580)) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) unshare$auto(0x40000080) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) 10.545536563s ago: executing program 2 (id=1984): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8b0000, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1lP\x88K\xa9\x12a\x13R3\x00VI\xa7\x00\x00\x00\x00\x00\x00\x00\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2', 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) mprotect$auto(0x0, 0x8000000000000001, 0x8) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_clone(0x40001000, &(0x7f0000000340)="250417b1f16de644d737c74790b50e36c1c5dde254df99f41a248ddc3e56fba4595e0444295f86d434b8ed8fb31f82880893f10cd8512e02ed987b8a5e8a4e525d08fa8dbce3a93818e738b21c5b97ab93c0ef3072f40c4a5646bdfaaeb6db6410b889dd3b17d994866d0f3a79560a5398208bec98a8280b855b28e391def0f1f5e11ea72f768cbcd59c2ef901e0482b9ab8013869266d4a7746508ded6f26aab07dcf5c52132d803ee83908e5fae6d8a7ca7e8ecf3ce40a9e2e92fd76b94b599451d183f0fe636e", 0xc8, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="daa4ea0ddcd6001c8e9cb28357f80c306a5e40709d13381847d3b118c0136784864eb09816e6e4df17b1a4428ea119879e97e3de7e6bfec5471d3680cdc03a3562b75954dbf6bc9c7d1a0f6b") prctl$auto(0x8, 0x81, r2, 0xffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYRES32=r3], 0x548}}, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00n', @ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) fchmod$auto(r3, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x65) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) link$auto(&(0x7f00000000c0)='}[,&*}\x00\xa2\xbd\xac\x1b\xa6\xee+\xbb\xddh\xf9Bb\xee.\x06nt\xf6`\xa5\xfaJ\x01\xfb\xff87\x830^\x8c\xf8\xa7\xbcXs\x06w\x7f}g\xa1\xccBV\xb4\x84\x15\x97;eO\xebKV\xe8\x11\x1b&\x96f\x9b.\xb1J\x81\t\x98\x92\xc4\xfb\xf0]f\x18\x1b\xabCK<\xf0\xfcI\xc3*\x96\x8cHvh\x06L\xfdC\xc2\x01\xaf6dA\xd6\x8d7\n\xc7y\xbbV\x13\xb8\a\xe9\xba7w\xd5v\x1d\x95\xcer\xaap\xa0\x7f\x9f\x02\xc3]\xf4\xe89\x86S\xfb\xc1\x03OZ\'7\f\xcc>\xf8\xa9\xa8\xc8\x02\xc4\xc1\xe0\r\xd7\xc2(\x18w\xc9\x85\b\xd7\xef\xbbg\x96\xe5\xdc/\xa5V\x90#\v\xbd\xe8}\x1d\\}\x8f\x16w1\x00n\xd1\xa7\xd1s\x19d\xff)g', &(0x7f0000000080)='#\x00') unlink$auto(&(0x7f00000001c0)='}[,&*}\x00') keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.967077771s ago: executing program 2 (id=1989): mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00D\xa0\x04|P\xd4Ig\x00\x9f\xbdut\x8b\xb4\xd9\x13X++\xd3f\x17d\x94\xf4\x10\x85\xe0Y\x11\xb0Q\xbf\x87\x97\x85\xa1\xb8*L\xf1\x8f\xac\xaa\x1eBxNK\fC]q\x01\xb1\xf5\x03\x14\xe7\xd4\x17!,\xd4w\x88c%\xb2Jx\x1a\x99\f\x83\xbf}Z\x0f\xec\xda\x88\xf9y}\x8d\xfc\xa4\x98\xca\xe9\xe4\x8fO\xdd8\xb24\xc2\x9d\xc2\xac\xfc\x83\xb6R\xde\xb9q\t\xdb\xbeY\xf6\xd7\xa6Bh\xa9\xa3Q\xb6^\r\xef\xfc\xe3\x94^\x13\x13\r\xcah\xb6!ni|Y\x01\xd6\x8fM\xad\xcd\r\xa1\xc9\x1b\xb9O\xbd\xe2K\xbe\x89\xef@\xb94\xcb\x92\xe4\xdbD\x1a\xa9\xe0\xf0H\x1a\xb8\xb9\xe4\xcb\x01&\x1c\xbd\r%\xaa/\xa1\xd5-M\xf0\xe9\x00\xea\x93`t\x15\\dG[~i\x83:\t9\x0e3c\xb4\x05\x7f\x1b\xf8\x00\x00\xd7l\x11\x13w\xfd \xac\xe7\xa3\xbb\x87UF\x01\x0e\x13>\xe2\xc45uO\xab\x9c\xe9\xdf{x\xb0\'\n\xb4F;\xdd\xb89B\xf0\x1b\xd0\xcf\xcb\ba\xd2\x92\xb5\fkot\xa9\xf6\xca\'\xf6_\xc5\xa0\x99\x18\xae%\xd9I`\x8d\x8f\xbf\x00D-\xf2\xf4!\x13mM[\x00\x0f\xf6\xf8\xb2\x05;!\x98\xb9?\x82#*\xb3\xcf\r\xbe1\xe0\x891o\x1a\x97\xbd\xeb;\xd0\xf8\xe6C=\x06{Y*\xe5\xbfD\a~\xe1\xc7\xb0\xa2\xd3\xa9PLX\xac\x1b@@|\xe69\xca\x9dl\xba7\x1b\xccj\xe5w\xab\x16\xed\x01J/\xd70\xbf\xfb\x01\x9c\x88\xe1{\xfb\xf6\x01\xc6!\xd1B\xf5\xd8\xcf\x86D\xb2<\x02\xfa\x15\xbce\xfeN#\x17\xf0\xb3\xcdD\xb83\xa1\xe2\xd3wd\xf6\x00{7\xe7\xf3\f\x1aL\xab2o\xd0\xf0*f\xd9\x11\xef\x01\x13\x9a\xb4', 0x4) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x802, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000440), 0x280003, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r3, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) select$auto(0x9, &(0x7f00000001c0)={[0x3, 0x33bc3387, 0x49b, 0x5, 0x1000000007, 0x451, 0x8e3, 0x4, 0x8, 0x400000009, 0x9, 0x7, 0x1000000000000a91, 0x101, 0x6, 0x3]}, &(0x7f0000000280)={[0x4000000006, 0x1, 0xfffffffffffffff5, 0xa32, 0x1, 0x10, 0xfff, 0xe, 0xecef, 0x9, 0x6, 0x101, 0x5, 0x0, 0x2, 0x3]}, &(0x7f0000000480)={[0x85, 0x4, 0x8000000000000001, 0x7, 0x4, 0x5, 0xf8e0, 0x8, 0x6, 0x101, 0x7, 0xc6c6840, 0x4, 0xfffffffffffffff6, 0x3, 0x6]}, &(0x7f0000000500)={0xf, 0x4}) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x103443, 0x0) write$auto(r4, &(0x7f0000000600)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x20040000080) socket(0xa, 0x1, 0x84) mmap$auto(0x6, 0x3ffffd, 0x8, 0x1e, 0xffffffffffffffff, 0xfffffffffffffffd) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x11002, 0x0) 8.830369304s ago: executing program 0 (id=1990): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x1, 0x9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/amidi2\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbfY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xf1\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) unshare$auto(0x8000000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = setfsgid$auto(0x0) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xffffffffffffffff, 0x2000c, 0xdd, 0x11, r0, 0x8004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000040)="e6", 0x1) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/mnt\x00') getdents$auto(r5, 0x0, 0xa5) 7.012952556s ago: executing program 3 (id=1991): r0 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) mmap$auto(0x6, 0x3, 0x3, 0xffffffffffffff3f, r0, 0xe7e) r1 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xe}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x7}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x101}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4840) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyt3\x00', 0x48000, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, &(0x7f0000000200)="733e2867fd67c61b9c765b4a3cb0969a5e08dcd89cb57dcf0e5b26bb9c0aa0dd8b338a3c39065da38a2660065ec4c812baf5c247c8925165d3876cf7ec462637c55a652658b6b14b5818b15411f7772ec1e7997f668e400b4fcb5b9661a96dd7ecab624e2a6b87f6390630352cd4b1734cf4a01ae9d99e6d6682e80e60773145b65d4548c216508b1eba1065eb4713561b7e4e80861e85feb9ece0e5b6df86d1d41072dff8b48405c005719547b55df302e2b89437a76c6db813f7688efa32e64499b00bbb03f49c89925c31e84b6a6baf72036aafc08a86aeff1cac") (async) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, &(0x7f0000000300)={@inferred=r0, "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"}) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001300), 0x100, 0x0) ioctl$auto_PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000001340)=0xcf) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000001380)='/proc/thread-self/numa_maps\x00', 0x200, 0x0) (async) fchmod$auto(r0, 0x6) (async) r4 = fcntl$getown(r0, 0x9) r5 = waitid$auto_P_PID(0x1, r4, &(0x7f00000013c0)={@_si_pad}, 0x0, &(0x7f0000001440)={{0x2a, 0x9}, {0xc1, 0x5}, 0x8001, 0x25, 0x8, 0x100000001, 0x5912, 0x7fff, 0x0, 0x0, 0x9, 0x7, 0x4000000000000000, 0x5, 0x2, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r6, &(0x7f00000017c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f0000001540)={0x210, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xc2, 0x25, 0x0, 0x1, [@typed={0x8, 0x14f, 0x0, 0x0, @pid=r5}, @generic="00d0edb3b8aa7edcb6788202829622d597650bd6fda5740bbc0fd08a80825ad408134f5484acbdc884f15cbf570700dd8b506c61fd592d9a109cbedaf5001c4f84b5ec3ee31ff132b8e7a2a5ba1304a572e8fd2248e93130f0d40473236707744e16092bbafe76d864d5b0c029f07efabb337847a383c2613332301740db568bf0585245c12bbef91f5efc8ac224bdf0ac8416498304653a1a0cf4981a4d0bc4029fd111dcbc15249825468c5bc5b392dc3c46f17233"]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x40}, @NL80211_ATTR_QOS_MAP={0x8e, 0xc7, "373dbb6c93089fac85b3dbad2c98c949a093d2e447ff9feefc7fa93244dbb42aca388e67749111466faf30696cef142c4d246d24621ea0dffce90909ede768b5e47018df594450fa06597a9f06321e758de089020ef729ccf388330e133826b238235c9ae88045303bb18ac30c1450416f28a8cc8ebf3189d2f4426b8b9d8509bd7497460bd8f286dee6"}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_FILS_KEK={0x3b, 0xf2, "b7909c28c484ae277bd7f96fc33134f7554d435b9419a865aea43def9f0364a92a76da2613036756d3adc77fd57fe4e31ca817b1902329"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_PREV_BSSID={0x3c, 0x4f, "4cd7e9c286badafde28ac97418302ee0547480b196619db8a1f5d3e4fdb761796a6b75fe66a758218b299f5e8d3a5236bdb6ee898a4f656a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "2626b06f4f6aba98a6380a17c5"}]}, 0x210}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) (async) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001800), r6) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_VENDOR(r7, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USE_MFP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008081}, 0x20000081) r8 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000001940), 0x82, 0x0) fcntl$auto_F_SETPIPE_SZ(r8, 0x407, 0x4) r9 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001980)='/dev/input/event2\x00', 0x101002, 0x0) (async) r10 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000019c0), 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001a00), r11) (async) r12 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001a80), r11) r13 = fcntl$auto(r0, 0x5, r4) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000001c80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x90e0824}, 0xc, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x154, r12, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_SEC_LEVEL={0x120, 0x2d, 0x0, 0x1, [@typed={0x5, 0x3c, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x113, 0x0, 0x0, @u64=0x8}, @generic="9421", @generic="7c68d44f27296377f87d51c6d675fb5d0f1c5b36f1d44ee826e85f4f70490ab54c1bbd9c155ccf66d7697ba340b77fbd0b265b9d3ae24a500185f4067c0d8f98d626676f34911a7bfff82c9505ce8f51999d1a6929cce599c4568e7e320f96df6d90318d7c576babfd23508dcab9af6135fd7b59d36ba1b148283c9368f470f69fb7a28989a1509cb35655b1f384434ee1378aaac0b0a9d7c87dcb26e3fb1dffe4f5ad947d2a03704a54be187dc7f50124fdd1491c75069848bc0883636610e111aa6850f2e92af52cc144b6a8e7724cf359d05148bb867e788c65acfc7f7ecb9e617aa91471192faf66e0f2f13350aa760124a184a5dd37e6c6", @typed={0x4, 0x15e}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r13}]}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x4}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x154}, 0x1, 0x0, 0x0, 0x94}, 0x4001) ioctl$auto_VHOST_SET_LOG_FD2(r9, 0x4004af07, &(0x7f0000001cc0)=r10) (async) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000001d00), 0x80002, 0x0) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d40), r11) 6.744886498s ago: executing program 3 (id=1993): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) epoll_create$auto(0x3a) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x4) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x593640, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x10001, 0x830) r3 = socket(0x23, 0x2, 0x0) ioctl$auto(r3, 0x89ef, 0x74) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r3) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100027bd7000fbdbdf252f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x8080) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) r5 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r5, &(0x7f0000000000)={&(0x7f0000000000), 0x101}, 0x2) 6.734414139s ago: executing program 0 (id=1994): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, 0x0, 0x2202, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/bdi/mtd-0/wb_stats\x00', 0x24002, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)=@bpf_attr_11={0x1a4e, 0x4, 0x6, 0x7670000, 0x9, 0x7fffffff, 0x1000}, 0xf) ioctl$auto(0x3, 0xc048aec8, r0) mmap$auto(0x0, 0x810004, 0xffb, 0x4008000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x100000000, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) unshare$auto(0x40000080) kexec_load$auto(0x5, 0x7, &(0x7f00000001c0)={@buf=0x0, 0x800c000, 0x4800c000, 0x80000000}, 0x4) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 6.590713509s ago: executing program 2 (id=1995): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8b0000, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1lP\x88K\xa9\x12a\x13R3\x00VI\xa7\x00\x00\x00\x00\x00\x00\x00\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2', 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) mprotect$auto(0x0, 0x8000000000000001, 0x8) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_clone(0x40001000, &(0x7f0000000340)="250417b1f16de644d737c74790b50e36c1c5dde254df99f41a248ddc3e56fba4595e0444295f86d434b8ed8fb31f82880893f10cd8512e02ed987b8a5e8a4e525d08fa8dbce3a93818e738b21c5b97ab93c0ef3072f40c4a5646bdfaaeb6db6410b889dd3b17d994866d0f3a79560a5398208bec98a8280b855b28e391def0f1f5e11ea72f768cbcd59c2ef901e0482b9ab8013869266d4a7746508ded6f26aab07dcf5c52132d803ee83908e5fae6d8a7ca7e8ecf3ce40a9e2e92fd76b94b599451d183f0fe636e", 0xc8, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="daa4ea0ddcd6001c8e9cb28357f80c306a5e40709d13381847d3b118c0136784864eb09816e6e4df17b1a4428ea119879e97e3de7e6bfec5471d3680cdc03a3562b75954dbf6bc9c7d1a0f6b") prctl$auto(0x8, 0x81, r2, 0xffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYRES32=r3], 0x548}}, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00n', @ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) fchmod$auto(r3, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x65) read$auto_userio_fops_userio(0xffffffffffffffff, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) link$auto(&(0x7f00000000c0)='}[,&*}\x00\xa2\xbd\xac\x1b\xa6\xee+\xbb\xddh\xf9Bb\xee.\x06nt\xf6`\xa5\xfaJ\x01\xfb\xff87\x830^\x8c\xf8\xa7\xbcXs\x06w\x7f}g\xa1\xccBV\xb4\x84\x15\x97;eO\xebKV\xe8\x11\x1b&\x96f\x9b.\xb1J\x81\t\x98\x92\xc4\xfb\xf0]f\x18\x1b\xabCK<\xf0\xfcI\xc3*\x96\x8cHvh\x06L\xfdC\xc2\x01\xaf6dA\xd6\x8d7\n\xc7y\xbbV\x13\xb8\a\xe9\xba7w\xd5v\x1d\x95\xcer\xaap\xa0\x7f\x9f\x02\xc3]\xf4\xe89\x86S\xfb\xc1\x03OZ\'7\f\xcc>\xf8\xa9\xa8\xc8\x02\xc4\xc1\xe0\r\xd7\xc2(\x18w\xc9\x85\b\xd7\xef\xbbg\x96\xe5\xdc/\xa5V\x90#\v\xbd\xe8}\x1d\\}\x8f\x16w1\x00n\xd1\xa7\xd1s\x19d\xff)g', &(0x7f0000000080)='#\x00') unlink$auto(&(0x7f00000001c0)='}[,&*}\x00') keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.887387984s ago: executing program 4 (id=1996): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x8b0000, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1lP\x88K\xa9\x12a\x13R3\x00VI\xa7\x00\x00\x00\x00\x00\x00\x00\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2', 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) mprotect$auto(0x0, 0x8000000000000001, 0x8) unshare$auto(0x40000080) bind$auto(r0, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_clone(0x40001000, &(0x7f0000000340)="250417b1f16de644d737c74790b50e36c1c5dde254df99f41a248ddc3e56fba4595e0444295f86d434b8ed8fb31f82880893f10cd8512e02ed987b8a5e8a4e525d08fa8dbce3a93818e738b21c5b97ab93c0ef3072f40c4a5646bdfaaeb6db6410b889dd3b17d994866d0f3a79560a5398208bec98a8280b855b28e391def0f1f5e11ea72f768cbcd59c2ef901e0482b9ab8013869266d4a7746508ded6f26aab07dcf5c52132d803ee83908e5fae6d8a7ca7e8ecf3ce40a9e2e92fd76b94b599451d183f0fe636e", 0xc8, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="daa4ea0ddcd6001c8e9cb28357f80c306a5e40709d13381847d3b118c0136784864eb09816e6e4df17b1a4428ea119879e97e3de7e6bfec5471d3680cdc03a3562b75954dbf6bc9c7d1a0f6b") prctl$auto(0x8, 0x81, r2, 0xffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES16=0x0, @ANYRES32=r3], 0x548}}, 0x8000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00n', @ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) fchmod$auto(r3, 0x9) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xe) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x65) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) link$auto(&(0x7f00000000c0)='}[,&*}\x00\xa2\xbd\xac\x1b\xa6\xee+\xbb\xddh\xf9Bb\xee.\x06nt\xf6`\xa5\xfaJ\x01\xfb\xff87\x830^\x8c\xf8\xa7\xbcXs\x06w\x7f}g\xa1\xccBV\xb4\x84\x15\x97;eO\xebKV\xe8\x11\x1b&\x96f\x9b.\xb1J\x81\t\x98\x92\xc4\xfb\xf0]f\x18\x1b\xabCK<\xf0\xfcI\xc3*\x96\x8cHvh\x06L\xfdC\xc2\x01\xaf6dA\xd6\x8d7\n\xc7y\xbbV\x13\xb8\a\xe9\xba7w\xd5v\x1d\x95\xcer\xaap\xa0\x7f\x9f\x02\xc3]\xf4\xe89\x86S\xfb\xc1\x03OZ\'7\f\xcc>\xf8\xa9\xa8\xc8\x02\xc4\xc1\xe0\r\xd7\xc2(\x18w\xc9\x85\b\xd7\xef\xbbg\x96\xe5\xdc/\xa5V\x90#\v\xbd\xe8}\x1d\\}\x8f\x16w1\x00n\xd1\xa7\xd1s\x19d\xff)g', &(0x7f0000000080)='#\x00') unlink$auto(&(0x7f00000001c0)='}[,&*}\x00') keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.447534359s ago: executing program 3 (id=1997): setitimer$auto(0x2, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x84) listen$auto(0x3, 0x81) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048010}, 0x4000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, 0x0, 0x4f, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/035/001\x00', 0x183201, 0x0) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001180)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000001640)={&(0x7f0000000080), 0xc, &(0x7f0000001600)={&(0x7f0000000180)={0x1474, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x19, 0xa, '/dev/bus/usb/035/001\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_SOCKETS={0x68, 0x7, 0x0, 0x1, [@typed={0x3b, 0x22, 0x0, 0x0, @binary="53be3246b54aba96f71c0722c72cd91b02488e7eee84cd1da6abaa1596ddf097743dff54da2eef5573d002fc5aa2e240f6e38a4748fa89"}, @nested={0x28, 0xc1, 0x0, 0x1, [@typed={0x19, 0x3f, 0x0, 0x0, @str='/dev/bus/usb/035/001\x00'}, @typed={0x8, 0xa7, 0x0, 0x0, @u32}]}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, '/dev/snd/midiC2D0\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, '/dev/snd/midiC2D0\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x2}, @NBD_ATTR_SOCKETS={0x1362, 0x7, 0x0, 0x1, [@generic="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", @generic="a8538ff74422022add5a690ce3094eaeda99b6d57eb88feebe249b21f5fdd80e5ca4dd9da09942c82973679100395c4eb440849df956e878f0dcd62ccdf470825bfc6d586296cbbe77d5fac7bdeb162c4af160806b6025cb2eff583fc4f6d091", @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x110, 0x0, 0x0, @u32=0x45}, @nested={0x1a7, 0x126, 0x0, 0x1, [@nested={0x4, 0x18}, @generic="61162e5997e3a45f1df352555be42d265743a045c8fc5de9ff390a08cb99d777b16772ef12236fdf968fdc13f572a1afec16a96575e7d137579b17574c47a7923a33360821a0ca19376a493890d2c7edf66552a62e1aa0350091f7f15b5e41cbcb69ac48118c7e5d0b63ea5eb6caac102e0d91f0ab11fe7d4c1cda40351b911a0a092006e27e422b19a4001fd5c0cc6a4f7824cc898cb51dc88ceead0f08d51c470ac256dfa40a5ef3496b1a7f98f86d76aaea7366e47a9a517a13fa85fba74c6ae239ef94bad35554408abedcbde66db775b359e5411ccea37a82d4851c9602beb79ec9d9e8634770d252fd8ad901ab591726", @nested={0x4, 0x10d}, @typed={0x8, 0xb4, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0xa4}, @generic="340f193e0e2f962774511cda3fb98a23707e8816db7c4a1fd894a4e00a6d3b286480f14581b24bfd59e7149b9cafb0ba27c2cf82fbfe4346b23566bd57af97c759f3fc7004991c91ddc488fcf4fc0adfa689231b841fccf41a0afb55c604d5c6d14b26a5fe023d6328074977d6d3dd8c5a6ea060f3178508efd96050d9650e1f458fd26c95822789614fdfe6ff9f8511152361850688d1b7cfde18b9"]}, @generic="95680f58f5bb87f703d3aa82e621b7b7a724a99279f06180bcb5cc4212941254f3280a46410a0b830de16a4a434254", @typed={0x8, 0x141, 0x0, 0x0, @uid=0xee01}, @nested={0x41, 0x5c, 0x0, 0x1, [@nested={0x4, 0xf5}, @generic="a5ec187e762642373e5c0110fb08172bb80a3dbaed8e84dfcc32346897225f62f577c3c098d0b18397b5e224138a1f5fbb9f0ed6a6acc9e99e"]}, @generic="a4118efdc6de13bfa574e219f1969c0e1a93e3aef3380c22f05a5a03d22699a85d6074a6637ccfb9ac93fa1aaea807107d9d05b31a7f2c4633f7dd559d55ba744ef009100713957b0f6a792b81ce417fac283dcfca60c674aa73a295141f7bbcad20b1ca09315927afdfe211ebbb1586a9c5c928ae52f54d4093e65b75cffbbd1294edb48b06289a35e94fc3367910374088201bbb37619ce0a846d3d330b81a8be3feb2540599343c2a20549d8f617eb8ea69d2079239d66d4a26fcb2012edef4cbf02e744a39"]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x19, 0xa, '/dev/bus/usb/035/001\x00'}]}, 0x1474}, 0x1, 0x0, 0x0, 0x890}, 0xc080) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0x22, 0xa, 0xfffffffd) 4.267212059s ago: executing program 0 (id=1998): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = gettid() write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x800, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x3813}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) msgctl$auto(0x4f02afaf, 0x4, &(0x7f0000000340)={{0x4, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x9, 0x3}, &(0x7f00000002c0)=0x2, &(0x7f0000000300)=0x10, 0x0, 0xe, 0x1, 0x337, 0x9, 0x9, 0x1, 0x9, @raw=0x6, @raw=0x1}) msgctl$auto_IPC_RMID(0x7, 0x0, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x5, 0x800, 0x5, 0xa202}, &(0x7f0000000400)=0x1, &(0x7f0000000440), 0x7fffffffffffffff, 0x1, 0x2, 0x5d4b, 0x67d6, 0x9, 0x4, 0x5, @inferred, @raw=0x4434}) r5 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000500)=0xfffffff7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) msgctl$auto_IPC_RMID(0x200, 0x0, &(0x7f00000005c0)={{0x3, 0xffffffffffffffff, 0xee00, 0x81, 0x5, 0x800, 0x2}, &(0x7f0000000540)=0x3, &(0x7f0000000580)=0xb8, 0x7, 0x5, 0x8, 0xe, 0x4, 0xc, 0x9, 0x8, @inferred, @inferred=r1}) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r2, &(0x7f0000001bc0)={&(0x7f0000000080), 0xc, &(0x7f0000001b80)={&(0x7f0000004a40)={0x1564, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x154d, 0x4, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x79, 0x0, 0x0, @uid=r4}, @nested={0xc, 0x5a, 0x0, 0x1, [@nested={0x4, 0xe2}, @nested={0x4, 0x13b}]}, @nested={0x1285, 0xe2, 0x0, 0x1, [@typed={0x8, 0xe6, 0x0, 0x0, @pid=r5}, @generic="62960d7d5d8f0d18688cd606fbe8156a88c7b9e4d6da2ade1687f02152584e1c75560a6f81d35ea1eaeed212c46fa7995e5e89142a32ba118fc06cb8b13f172eff591fc3dbafdb504c294472cd572f80f1294e742d58b6eef83a705d352425722cf68a3c51d77863aecdb62314b42e88e52d635ffe38445a7e17f8d67a74be3efac27e11ff4a15d6beacd2df2362c430b9cb52e941c0ee88d4924c38407514ac82b944b6220a73c46d4b3907cd2b4f8574bfd02761de9be3fd5b99d50e005b9674700d4d7e1db266", @generic="54e67e4266d66f6c511430ed713030b17b76a1863c8baf729c00347380a1b187c6da65e8abb93f1431aac0f5140f4486df4467231252acf8a76f3db53b038fd2f4fd909e7d6fa532d0521fab1150d8dcbda4a4c1968c08caa496b6feedf513ddf6d3e96dc406af9357a106a51cfda539c336a2b9e9002c795070e0d522ca8586a29ed0b5038ac1775f3e0e70c30722023ceadfe340ea6806a52e6b955c18a61552f30bb7698506266caa6ec81f3a8feec172", @typed={0x8, 0x4d, 0x0, 0x0, @uid=r7}, @generic="71b5f0d9a9b28af4c9ee79cabab6c75b48f7fbe68b6250951e5ea5206dab0d8998da574300ded5b46e7739bd5d50a5eb14d0a61288500463779dac570423b95156725d5a6cd4413bb7b0375e069259e5579fde57c0c8bd4e42c10cfe32babd981899983fd5ef4b26d94fdd28fe25ff4a6c08a34cdc7f5949abe408c768aa42282dc08f76a83f0910b30e0da2b330195ff1274a58df2de547291e62472f0bd965d9058e", @typed={0x8, 0x47, 0x0, 0x0, @pid=r1}, @generic="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", @nested={0x42, 0x74, 0x0, 0x1, [@generic="564ca3e2c8a1630646548bd2aae3488353e5c60d15d499ccf701a5af2ded7481b30bf3ad420183818c6d12ef2ec775ecf7ae9b6c79e7ec8f9fc31ecdd5cd"]}, @typed={0x8, 0xa7, 0x0, 0x0, @ipv4=@local}]}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x9}, @generic="8fe7294e691fe462b3207e61ce9659cbfd3585e4ba8ffb2d140cc7572c13b8dad0bbfbfe53c65f18028077bfc7b100db116f85ce7075e6bfd232f602aa669d65a1ba64b750941fe37fa15d25a5fb578865fb783897e11e4711436ef60a6c7458e1ec64a5d76471766889bd90f557273bf354ac00e35406f6e5298751124a7544505d70f78d64644c7c1770bb8c35e016cfd37ee558c7495144bc7c5b109d20e0317b3572c8045eb4db21beccd98c5fb9bc13f82c602d9ca76eb7155916e0d110997786ebf0c98517ae4bbf977c29d9132b1c70ba4200ec8051b48f8b27da7d7f9f2e190e5cb7f6e55a704f72cc6e4ac49e6038", @generic="b73baf6842894e41b7f18fafeb85953efd6512a70e17dffafda04179cf6fdf11a359ef74d4f8c0a7fa948eb905eee1c4b76873b0d652819b7eb14668e78f22a66e15128b3a5e7d0b46fbf5b6f338b23250b6d63b07b6de83d03134d6587027ab91862f8e62e31fbc6c4906342e0f4ef5ddd601d2328dfc35ffecba48054704bb3b41e74e9f026472f099d5afa0acd55de4323172cc6b35b260f132743c81565aed31d5ba2ff7e0dc5d2eb06d5f11f3aac71a6f6d17e4b5e50787", @nested={0xeb, 0x93, 0x0, 0x1, [@nested={0x4, 0x164}, @typed={0x8, 0x107, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="ff51e2c6b8c5985e7c046effdde892c27389a5a43f687452c6057e55b8ed8f70462ef08bf2e3b2974b7fd81d8ca9d4f50ac20c4f6adbd8f40642b88360e05ba66383ddd6046682ed38aed7630e1fd4a24cc20879afa9a82858d59f494ab59c575ef8926f83fe1726e9472e7f3dc04add8edef664fe7246e43e", @typed={0x14, 0x22, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x4, 0x137}, @nested={0x4, 0x3f}, @generic="580e63d43ec15e0d67b4654e01095b7d1022bc1cb765277476d1d21702ac962c8c16763e6cd333dfd5f23864c22a29a6f7f212f2d95ddd632250293ee973c77e059d8587548c"]}]}]}, 0x1564}, 0x1, 0x0, 0x0, 0x40000}, 0x4044081) getpid() r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f00000003c0)='4', 0x1) socketpair$auto(0x16, 0x1, 0xfffffffe, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x19, 0x13800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x0, 0x0, 0x8c48, 0x29b, 0x3, 0x100007f, 0x80, 0x6, 0xfffffffffffffffd}, {0x103, 0x1001, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) r9 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio5\x00', 0x802, 0x0) write$auto(r9, 0x0, 0xffffffff) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1) 4.02091035s ago: executing program 4 (id=1999): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40080, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) poll$auto(0x0, 0x1, 0x2) write$auto(0x4, 0x0, 0x100082) mmap$auto(0x7000000, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0x3, 0x0, 0xfdef) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/021/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_REAPURB32(0xffffffffffffffff, 0x4004550c, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 3.997846645s ago: executing program 2 (id=2000): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe}) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x210000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_tables_targets\x00', 0xa502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f00000001c0)=""/213, 0xd5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xc41, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setns(0xc9, 0x0) r3 = socket(0x1f, 0x1, 0x0) shutdown$auto(r3, 0x10001) close_range$auto(0x2, 0x8, 0x0) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x28, 0x1, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0x9, 0x40, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x401, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0xe088}) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x17) ioctl$auto_BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setfsuid$auto(0xee00) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.681847777s ago: executing program 3 (id=2001): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 2.586321442s ago: executing program 4 (id=2002): socket(0xa, 0x1, 0x84) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x8040, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r0) r1 = socket(0x10, 0x2, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) socket(0x27, 0x2, 0x4) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x175801, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6a, 0x85fa, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x1ff) mmap$auto(0x0, 0x128005, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41555856, 0xc, 0x2008, 0x0, 0x0) r4 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r4, 0x0, 0xfccd) setrlimit$auto(0x7, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0x4020007, 0xdf, 0xeb1, 0x401, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) write$auto(r2, 0x0, 0xfdef) munmap$auto(0x8000, 0xffffffff) 2.571054623s ago: executing program 0 (id=2003): mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x20000000008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00D\xa0\x04|P\xd4Ig\x00\x9f\xbdut\x8b\xb4\xd9\x13X++\xd3f\x17d\x94\xf4\x10\x85\xe0Y\x11\xb0Q\xbf\x87\x97\x85\xa1\xb8*L\xf1\x8f\xac\xaa\x1eBxNK\fC]q\x01\xb1\xf5\x03\x14\xe7\xd4\x17!,\xd4w\x88c%\xb2Jx\x1a\x99\f\x83\xbf}Z\x0f\xec\xda\x88\xf9y}\x8d\xfc\xa4\x98\xca\xe9\xe4\x8fO\xdd8\xb24\xc2\x9d\xc2\xac\xfc\x83\xb6R\xde\xb9q\t\xdb\xbeY\xf6\xd7\xa6Bh\xa9\xa3Q\xb6^\r\xef\xfc\xe3\x94^\x13\x13\r\xcah\xb6!ni|Y\x01\xd6\x8fM\xad\xcd\r\xa1\xc9\x1b\xb9O\xbd\xe2K\xbe\x89\xef@\xb94\xcb\x92\xe4\xdbD\x1a\xa9\xe0\xf0H\x1a\xb8\xb9\xe4\xcb\x01&\x1c\xbd\r%\xaa/\xa1\xd5-M\xf0\xe9\x00\xea\x93`t\x15\\dG[~i\x83:\t9\x0e3c\xb4\x05\x7f\x1b\xf8\x00\x00\xd7l\x11\x13w\xfd \xac\xe7\xa3\xbb\x87UF\x01\x0e\x13>\xe2\xc45uO\xab\x9c\xe9\xdf{x\xb0\'\n\xb4F;\xdd\xb89B\xf0\x1b\xd0\xcf\xcb\ba\xd2\x92\xb5\fkot\xa9\xf6\xca\'\xf6_\xc5\xa0\x99\x18\xae%\xd9I`\x8d\x8f\xbf\x00D-\xf2\xf4!\x13mM[\x00\x0f\xf6\xf8\xb2\x05;!\x98\xb9?\x82#*\xb3\xcf\r\xbe1\xe0\x891o\x1a\x97\xbd\xeb;\xd0\xf8\xe6C=\x06{Y*\xe5\xbfD\a~\xe1\xc7\xb0\xa2\xd3\xa9PLX\xac\x1b@@|\xe69\xca\x9dl\xba7\x1b\xccj\xe5w\xab\x16\xed\x01J/\xd70\xbf\xfb\x01\x9c\x88\xe1{\xfb\xf6\x01\xc6!\xd1B\xf5\xd8\xcf\x86D\xb2<\x02\xfa\x15\xbce\xfeN#\x17\xf0\xb3\xcdD\xb83\xa1\xe2\xd3wd\xf6\x00{7\xe7\xf3\f\x1aL\xab2o\xd0\xf0*f\xd9\x11\xef\x01\x13\x9a\xb4', 0x4) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x802, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000440), 0x280003, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) r3 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r3, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) select$auto(0x9, &(0x7f00000001c0)={[0x3, 0x33bc3387, 0x49b, 0x5, 0x1000000007, 0x451, 0x8e3, 0x4, 0x8, 0x400000009, 0x9, 0x7, 0x1000000000000a91, 0x101, 0x6, 0x3]}, &(0x7f0000000280)={[0x4000000006, 0x1, 0xfffffffffffffff5, 0xa32, 0x1, 0x10, 0xfff, 0xe, 0xecef, 0x9, 0x6, 0x101, 0x5, 0x0, 0x2, 0x3]}, &(0x7f0000000480)={[0x85, 0x4, 0x8000000000000001, 0x7, 0x4, 0x5, 0xf8e0, 0x8, 0x6, 0x101, 0x7, 0xc6c6840, 0x4, 0xfffffffffffffff6, 0x3, 0x6]}, &(0x7f0000000500)={0xf, 0x4}) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x103443, 0x0) write$auto(r4, &(0x7f0000000600)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x20040000080) socket(0xa, 0x1, 0x84) mmap$auto(0x6, 0x3ffffd, 0x8, 0x1e, 0xffffffffffffffff, 0xfffffffffffffffd) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0xcd98, 0x0) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x11002, 0x0) 2.540563026s ago: executing program 2 (id=2004): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40080, 0x0) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 2.080912087s ago: executing program 3 (id=2005): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0x1e0240, 0x0) read$auto(r1, 0x0, 0x85) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4106, 0x100a) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x8f) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000083) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x21, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x25, 0x3, 0x3) r2 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x82081, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) mseal$auto(0x0, 0x7dda, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(r2, 0x0, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/rx-12/rps_flow_cnt\x00', 0xc0082, 0x0) r3 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r3, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0xf4, 0x0, 0x5, 0x7f}, 0xfffffff7}, 0xdd4, 0x9, &(0x7f0000000380)={0x3, 0xbd64}) 1.780369583s ago: executing program 4 (id=2006): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/bdi/mtd-0/wb_stats\x00', 0x24002, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)=@bpf_attr_11={0x1a4e, 0x4, 0x6, 0x7670000, 0x9, 0x7fffffff, 0x1000}, 0xf) ioctl$auto(0x3, 0xc048aec8, r0) mmap$auto(0x0, 0x810004, 0xffb, 0x4008000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x100000000, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) unshare$auto(0x40000080) kexec_load$auto(0x5, 0x7, &(0x7f00000001c0)={@buf=0x0, 0x800c000, 0x4800c000, 0x80000000}, 0x4) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 1.508503772s ago: executing program 3 (id=2007): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe, 0xffffffffffffffff}) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) close_range$auto(r0, r1, 0xdf9b) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000280)="c97ce1a48c50ac2344cfd7c9") select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x1a9242, 0x0) sendfile$auto(r4, r4, 0x0, 0x5) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x5, 0xa, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0xffffffffffffffff, @raw=0x7fffffff}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKGETSIZE(r5, 0x1260, 0x0) setfsuid$auto(0xee00) r6 = socket(0x2, 0x3, 0x100) ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) pwrite64$auto(r1, &(0x7f00000002c0)=',!{\x00', 0xfffffffffffff5e2, 0x7) r7 = socket(0x1e, 0x1, 0x0) connect$auto(r7, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}}}, 0x10) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) close_range$auto(r6, 0xfffffffffffff000, 0x80000001) 1.089483355s ago: executing program 2 (id=2008): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) epoll_create$auto(0x3a) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x4) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x593640, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x10001, 0x830) r3 = socket(0x23, 0x2, 0x0) ioctl$auto(r3, 0x89ef, 0x74) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) r4 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r4, &(0x7f0000000000)={&(0x7f0000000000), 0x101}, 0x2) 1.032655411s ago: executing program 0 (id=2009): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000180), r1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/neigh/veth1_to_bridge/base_reachable_time\x00', 0x101202, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xb4) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r2, 0x0, 0x4840) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000140), 0x6) futimesat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x8, 0x4000000000003}) setpriority$auto_PRIO_PGRP(0x1, r3, 0x200) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b8162d21, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x1, 0x0, 0x1}, 0x18) pipe2$auto(0x0, 0x80) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) getdents64$auto(r4, 0x0, 0x200c8) 170.05737ms ago: executing program 4 (id=2010): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 0s ago: executing program 4 (id=2011): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0xe0801, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1f"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptypb\x00', 0x0, 0x0) socket(0xa, 0x5, 0x84) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x2a81c2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0xa, 0x2, 0x11) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\x174\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/163, 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) syz_clone3(&(0x7f0000000280)={0x123101000, &(0x7f0000000040), 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) kernel console output (not intermixed with test programs): tman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.918774][T17010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.950989][T17010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.958068][T17010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.985068][T17010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.033187][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 883.495165][T17010] hsr_slave_0: entered promiscuous mode [ 883.503371][T17010] hsr_slave_1: entered promiscuous mode [ 883.509719][T17010] debugfs: 'hsr0' already exists in 'hsr' [ 883.515492][T17010] Cannot create hsr debugfs directory [ 883.882377][T17152] FAULT_INJECTION: forcing a failure. [ 883.882377][T17152] name failslab, interval 1, probability 0, space 0, times 0 [ 883.942478][T17152] CPU: 1 UID: 0 PID: 17152 Comm: syz.3.1417 Not tainted syzkaller #0 PREEMPT(full) [ 883.942521][T17152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.942540][T17152] Call Trace: [ 883.942550][T17152] [ 883.942562][T17152] dump_stack_lvl+0x100/0x190 [ 883.942604][T17152] should_fail_ex.cold+0x5/0xa [ 883.942647][T17152] should_failslab+0xc2/0x120 [ 883.942694][T17152] kmem_cache_alloc_noprof+0x91/0x6a0 [ 883.942733][T17152] ? d_instantiate+0x8a/0xb0 [ 883.942770][T17152] ? d_instantiate+0x8a/0xb0 [ 883.942806][T17152] ? alloc_empty_file+0x5b/0x1c0 [ 883.942853][T17152] alloc_empty_file+0x5b/0x1c0 [ 883.942895][T17152] alloc_file_pseudo+0x183/0x290 [ 883.942940][T17152] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 883.942993][T17152] ? security_inode_init_security_anon+0x7b/0x230 [ 883.943038][T17152] __anon_inode_getfile+0xe8/0x280 [ 883.943083][T17152] new_userfaultfd+0x255/0x400 [ 883.943130][T17152] __x64_sys_userfaultfd+0x4b/0xb0 [ 883.943163][T17152] do_syscall_64+0x115/0x840 [ 883.943204][T17152] ? clear_bhb_loop+0x70/0xc0 [ 883.943242][T17152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.943272][T17152] RIP: 0033:0x7f500ab9e0d9 [ 883.943296][T17152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.943326][T17152] RSP: 002b:00007f500b9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 883.943354][T17152] RAX: ffffffffffffffda RBX: 00007f500ae25fa0 RCX: 00007f500ab9e0d9 [ 883.943374][T17152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 883.943390][T17152] RBP: 00007f500ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 883.943408][T17152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.943425][T17152] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 883.943463][T17152] [ 884.179332][T14809] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 884.570269][ T3102] hid_parser_main: 11 callbacks suppressed [ 884.570295][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.585246][T14809] Bluetooth: hci0: command tx timeout [ 884.591140][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.613982][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.632096][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.646005][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.658827][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.666635][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.674493][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.683542][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.692249][ T3102] hid-generic 0000:0000:DAAE9509.0015: unknown main item tag 0x0 [ 884.700230][ T3102] hid-generic 0000:0000:DAAE9509.0015: item fetching failed at offset 22/25 [ 884.723831][ T3102] hid-generic 0000:0000:DAAE9509.0015: probe with driver hid-generic failed with error -22 [ 886.258816][T14809] Bluetooth: hci1: command 0x0406 tx timeout [ 886.592977][T17010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 886.610721][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 886.677928][T17010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 886.702704][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 886.719903][T17010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 886.754709][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 886.813806][T17010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 886.840435][T17010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 887.046296][T17242] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 888.339120][T14809] Bluetooth: hci1: command 0x0406 tx timeout [ 888.395331][T17010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.478113][T17010] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.527490][T13482] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.534681][T13482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.587494][T13492] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.594684][T13492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.839898][T17278] FAULT_INJECTION: forcing a failure. [ 888.839898][T17278] name failslab, interval 1, probability 0, space 0, times 0 [ 888.864134][T17278] CPU: 0 UID: 0 PID: 17278 Comm: syz.0.1426 Not tainted syzkaller #0 PREEMPT(full) [ 888.864168][T17278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.864185][T17278] Call Trace: [ 888.864195][T17278] [ 888.864215][T17278] dump_stack_lvl+0x100/0x190 [ 888.864254][T17278] should_fail_ex.cold+0x5/0xa [ 888.864287][T17278] should_failslab+0xc2/0x120 [ 888.864329][T17278] kmem_cache_alloc_noprof+0x91/0x6a0 [ 888.864365][T17278] ? __pfx_map_id_range_down+0x10/0x10 [ 888.864406][T17278] ? security_inode_alloc+0x3b/0x2c0 [ 888.864447][T17278] security_inode_alloc+0x3b/0x2c0 [ 888.864481][T17278] inode_init_always_gfp+0xc77/0xfb0 [ 888.864516][T17278] alloc_inode+0x8e/0x250 [ 888.864558][T17278] new_inode+0x22/0x1c0 [ 888.864598][T17278] debugfs_create_dir+0xc4/0x440 [ 888.864732][T17278] ieee80211_debugfs_recreate_netdev+0x1d1/0x1790 [ 888.864828][T17278] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 888.864881][T17278] ? __pfx___might_resched+0x10/0x10 [ 888.864935][T17278] drv_remove_interface+0x294/0x610 [ 888.865041][T17278] __ieee80211_suspend+0xc5d/0x12c0 [ 888.865112][T17278] reset_write+0x7a/0x290 [ 888.865162][T17278] short_proxy_write+0x133/0x1a0 [ 888.865216][T17278] ? __pfx_short_proxy_write+0x10/0x10 [ 888.865244][T17278] vfs_writev+0x5ed/0xdd0 [ 888.865299][T17278] ? __pfx_vfs_writev+0x10/0x10 [ 888.865367][T17278] ? __fget_files+0x21f/0x3d0 [ 888.865405][T17278] ? do_pwritev+0x1ac/0x270 [ 888.865447][T17278] do_pwritev+0x1ac/0x270 [ 888.865493][T17278] ? __pfx_do_pwritev+0x10/0x10 [ 888.865547][T17278] do_syscall_64+0x115/0x840 [ 888.865583][T17278] ? clear_bhb_loop+0x70/0xc0 [ 888.865618][T17278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.865648][T17278] RIP: 0033:0x7fa3a819e0d9 [ 888.865670][T17278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.865697][T17278] RSP: 002b:00007fa3a8fc3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 888.865724][T17278] RAX: ffffffffffffffda RBX: 00007fa3a8425fa0 RCX: 00007fa3a819e0d9 [ 888.865743][T17278] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 0000000000000003 [ 888.865760][T17278] RBP: 00007fa3a8fc3090 R08: 0000000000000005 R09: 0000000000000000 [ 888.865777][T17278] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 888.865794][T17278] R13: 00007fa3a8426038 R14: 00007fa3a8425fa0 R15: 00007fffe8058aa8 [ 888.865831][T17278] [ 888.866000][T17278] debugfs: out of free dentries, can not create directory 'netdev:wlan0' [ 890.922749][T17010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.752912][T17353] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1433'. [ 892.781269][T17010] veth0_vlan: entered promiscuous mode [ 892.919058][T17010] veth1_vlan: entered promiscuous mode [ 893.016302][T17010] veth0_macvtap: entered promiscuous mode [ 893.048381][T17010] veth1_macvtap: entered promiscuous mode [ 893.108017][T17010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.146677][T17010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.188322][T17357] ICMPv6: process `syz.2.1434' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 893.205572][T13492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.270003][T13484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.289481][T13484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.398967][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.111517][T13508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.123980][T13508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.469904][T13508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.477892][T13508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.541724][T17500] random: crng reseeded on system resumption [ 901.651606][T17490] ksmbd: Unknown IPC event: 14, ignore. [ 901.978511][T17511] FAULT_INJECTION: forcing a failure. [ 901.978511][T17511] name failslab, interval 1, probability 0, space 0, times 0 [ 902.015376][T17511] CPU: 1 UID: 0 PID: 17511 Comm: syz.3.1456 Not tainted syzkaller #0 PREEMPT(full) [ 902.015414][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.015432][T17511] Call Trace: [ 902.015441][T17511] [ 902.015452][T17511] dump_stack_lvl+0x100/0x190 [ 902.015490][T17511] should_fail_ex.cold+0x5/0xa [ 902.015523][T17511] should_failslab+0xc2/0x120 [ 902.015567][T17511] kmem_cache_alloc_noprof+0x91/0x6a0 [ 902.015603][T17511] ? d_instantiate+0x8a/0xb0 [ 902.015639][T17511] ? d_instantiate+0x8a/0xb0 [ 902.015671][T17511] ? alloc_empty_file+0x5b/0x1c0 [ 902.015716][T17511] alloc_empty_file+0x5b/0x1c0 [ 902.015773][T17511] alloc_file_pseudo+0x183/0x290 [ 902.015818][T17511] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 902.015861][T17511] ? security_inode_init_security_anon+0x7b/0x230 [ 902.015910][T17511] __anon_inode_getfile+0xe8/0x280 [ 902.015958][T17511] new_userfaultfd+0x255/0x400 [ 902.016008][T17511] __x64_sys_userfaultfd+0x4b/0xb0 [ 902.016043][T17511] do_syscall_64+0x115/0x840 [ 902.016085][T17511] ? clear_bhb_loop+0x70/0xc0 [ 902.016124][T17511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.016156][T17511] RIP: 0033:0x7f500ab9e0d9 [ 902.016189][T17511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.016218][T17511] RSP: 002b:00007f500b9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 902.016247][T17511] RAX: ffffffffffffffda RBX: 00007f500ae25fa0 RCX: 00007f500ab9e0d9 [ 902.016268][T17511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 902.016287][T17511] RBP: 00007f500ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 902.016306][T17511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.016324][T17511] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 902.016364][T17511] [ 902.061365][ T5624] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 902.891429][T17519] FAULT_INJECTION: forcing a failure. [ 902.891429][T17519] name failslab, interval 1, probability 0, space 0, times 0 [ 902.928959][T17519] CPU: 1 UID: 0 PID: 17519 Comm: syz.4.1457 Not tainted syzkaller #0 PREEMPT(full) [ 902.928998][T17519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.929016][T17519] Call Trace: [ 902.929027][T17519] [ 902.929037][T17519] dump_stack_lvl+0x100/0x190 [ 902.929079][T17519] should_fail_ex.cold+0x5/0xa [ 902.929113][T17519] should_failslab+0xc2/0x120 [ 902.929157][T17519] kmem_cache_alloc_noprof+0x91/0x6a0 [ 902.929195][T17519] ? d_instantiate+0x8a/0xb0 [ 902.929231][T17519] ? d_instantiate+0x8a/0xb0 [ 902.929267][T17519] ? alloc_empty_file+0x5b/0x1c0 [ 902.929313][T17519] alloc_empty_file+0x5b/0x1c0 [ 902.929353][T17519] alloc_file_pseudo+0x183/0x290 [ 902.929394][T17519] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 902.929436][T17519] ? security_inode_init_security_anon+0x7b/0x230 [ 902.929482][T17519] __anon_inode_getfile+0xe8/0x280 [ 902.929526][T17519] new_userfaultfd+0x255/0x400 [ 902.929574][T17519] __x64_sys_userfaultfd+0x4b/0xb0 [ 902.929615][T17519] do_syscall_64+0x115/0x840 [ 902.929653][T17519] ? clear_bhb_loop+0x70/0xc0 [ 902.929691][T17519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.929722][T17519] RIP: 0033:0x7fd296b9e0d9 [ 902.929746][T17519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.929775][T17519] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 902.929803][T17519] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 902.929822][T17519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 902.929840][T17519] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 902.929858][T17519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 902.929876][T17519] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 902.929914][T17519] [ 902.935669][ T5624] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 904.258852][T14809] Bluetooth: hci1: command 0x0406 tx timeout [ 905.138916][ T5624] Bluetooth: hci0: command 0x2016 tx timeout [ 906.348896][T14809] Bluetooth: hci1: command 0x0406 tx timeout [ 907.220630][T14809] Bluetooth: hci0: command 0x2016 tx timeout [ 909.198995][ T5624] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 912.371298][T17662] FAULT_INJECTION: forcing a failure. [ 912.371298][T17662] name failslab, interval 1, probability 0, space 0, times 0 [ 912.424452][T17662] CPU: 1 UID: 0 PID: 17662 Comm: syz.4.1479 Not tainted syzkaller #0 PREEMPT(full) [ 912.424491][T17662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 912.424504][T17662] Call Trace: [ 912.424511][T17662] [ 912.424519][T17662] dump_stack_lvl+0x100/0x190 [ 912.424548][T17662] should_fail_ex.cold+0x5/0xa [ 912.424572][T17662] should_failslab+0xc2/0x120 [ 912.424602][T17662] kmem_cache_alloc_noprof+0x91/0x6a0 [ 912.424629][T17662] ? d_instantiate+0x8a/0xb0 [ 912.424654][T17662] ? d_instantiate+0x8a/0xb0 [ 912.424679][T17662] ? alloc_empty_file+0x5b/0x1c0 [ 912.424711][T17662] alloc_empty_file+0x5b/0x1c0 [ 912.424739][T17662] alloc_file_pseudo+0x183/0x290 [ 912.424769][T17662] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 912.424798][T17662] ? security_inode_init_security_anon+0x7b/0x230 [ 912.424831][T17662] __anon_inode_getfile+0xe8/0x280 [ 912.424865][T17662] new_userfaultfd+0x255/0x400 [ 912.424899][T17662] __x64_sys_userfaultfd+0x4b/0xb0 [ 912.424923][T17662] do_syscall_64+0x115/0x840 [ 912.424949][T17662] ? clear_bhb_loop+0x70/0xc0 [ 912.424974][T17662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.424996][T17662] RIP: 0033:0x7fd296b9e0d9 [ 912.425013][T17662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.425033][T17662] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 912.425053][T17662] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 912.425067][T17662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 912.425079][T17662] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 912.425091][T17662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.425104][T17662] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 912.425130][T17662] [ 912.489176][ T5624] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 914.669081][ T5624] Bluetooth: hci0: command 0x2016 tx timeout [ 915.823076][T17698] ksmbd: Unknown IPC event: 14, ignore. [ 916.738836][T14809] Bluetooth: hci0: command 0x2016 tx timeout [ 916.879223][T17719] FAULT_INJECTION: forcing a failure. [ 916.879223][T17719] name failslab, interval 1, probability 0, space 0, times 0 [ 916.892132][T17719] CPU: 0 UID: 0 PID: 17719 Comm: syz.4.1486 Not tainted syzkaller #0 PREEMPT(full) [ 916.892168][T17719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.892184][T17719] Call Trace: [ 916.892194][T17719] [ 916.892205][T17719] dump_stack_lvl+0x100/0x190 [ 916.892244][T17719] should_fail_ex.cold+0x5/0xa [ 916.892279][T17719] should_failslab+0xc2/0x120 [ 916.892323][T17719] kmem_cache_alloc_noprof+0x91/0x6a0 [ 916.892360][T17719] ? d_instantiate+0x8a/0xb0 [ 916.892395][T17719] ? d_instantiate+0x8a/0xb0 [ 916.892430][T17719] ? alloc_empty_file+0x5b/0x1c0 [ 916.892471][T17719] alloc_empty_file+0x5b/0x1c0 [ 916.892511][T17719] alloc_file_pseudo+0x183/0x290 [ 916.892552][T17719] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 916.892591][T17719] ? security_inode_init_security_anon+0x7b/0x230 [ 916.892637][T17719] __anon_inode_getfile+0xe8/0x280 [ 916.892680][T17719] new_userfaultfd+0x255/0x400 [ 916.892727][T17719] __x64_sys_userfaultfd+0x4b/0xb0 [ 916.892759][T17719] do_syscall_64+0x115/0x840 [ 916.892796][T17719] ? clear_bhb_loop+0x70/0xc0 [ 916.892831][T17719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.892860][T17719] RIP: 0033:0x7fd296b9e0d9 [ 916.892884][T17719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.892911][T17719] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 916.892938][T17719] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 916.892965][T17719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 916.892982][T17719] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 916.892999][T17719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.893016][T17719] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 916.893053][T17719] [ 916.895528][ T5624] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 918.477018][T17744] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input8 [ 919.052307][T10611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 919.066538][T10611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 919.076151][T10611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 919.084306][T10611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 919.093465][T10611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 919.125813][T13482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.138832][T10611] Bluetooth: hci0: command 0x2016 tx timeout [ 919.537323][T13482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.903172][T13482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.119471][T13482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.853447][T17787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1495'. [ 921.138860][T14809] Bluetooth: hci3: command tx timeout [ 921.219154][T14809] Bluetooth: hci0: command 0x2016 tx timeout [ 921.456494][T13482] bridge_slave_1: left allmulticast mode [ 921.466773][T13482] bridge_slave_1: left promiscuous mode [ 921.473050][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.483122][T13482] bridge_slave_0: left allmulticast mode [ 921.489589][T13482] bridge_slave_0: left promiscuous mode [ 921.495727][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.624393][T13482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.637652][T13482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.647728][T13482] bond0 (unregistering): Released all slaves [ 922.068073][T13482] hsr_slave_0: left promiscuous mode [ 922.084220][T13482] hsr_slave_1: left promiscuous mode [ 922.094626][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.110117][T13482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.122060][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.129941][T13482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.142866][T13482] veth1_macvtap: left promiscuous mode [ 922.148411][T13482] veth0_macvtap: left promiscuous mode [ 922.154628][T13482] veth1_vlan: left promiscuous mode [ 922.160429][T13482] veth0_vlan: left promiscuous mode [ 922.495624][T13482] team0 (unregistering): Port device team_slave_1 removed [ 922.529628][T13482] team0 (unregistering): Port device team_slave_0 removed [ 922.685156][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 923.218824][T10611] Bluetooth: hci3: command tx timeout [ 923.324130][T17825] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 923.906990][T17845] FAULT_INJECTION: forcing a failure. [ 923.906990][T17845] name failslab, interval 1, probability 0, space 0, times 0 [ 923.908967][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 923.919960][T17845] CPU: 0 UID: 0 PID: 17845 Comm: syz.3.1499 Not tainted syzkaller #0 PREEMPT(full) [ 923.920058][T17845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 923.920102][T17845] Call Trace: [ 923.920127][T17845] [ 923.920153][T17845] dump_stack_lvl+0x100/0x190 [ 923.920248][T17845] should_fail_ex.cold+0x5/0xa [ 923.920327][T17845] should_failslab+0xc2/0x120 [ 923.920432][T17845] kmem_cache_alloc_noprof+0x91/0x6a0 [ 923.920519][T17845] ? d_instantiate+0x8a/0xb0 [ 923.920605][T17845] ? d_instantiate+0x8a/0xb0 [ 923.920684][T17845] ? alloc_empty_file+0x5b/0x1c0 [ 923.920794][T17845] alloc_empty_file+0x5b/0x1c0 [ 923.920900][T17845] alloc_file_pseudo+0x183/0x290 [ 923.921003][T17845] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 923.921098][T17845] ? security_inode_init_security_anon+0x7b/0x230 [ 923.921230][T17845] __anon_inode_getfile+0xe8/0x280 [ 923.921380][T17845] new_userfaultfd+0x255/0x400 [ 923.921464][T17845] __x64_sys_userfaultfd+0x4b/0xb0 [ 923.921543][T17845] do_syscall_64+0x115/0x840 [ 923.921633][T17845] ? clear_bhb_loop+0x70/0xc0 [ 923.921729][T17845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.921792][T17845] RIP: 0033:0x7f500ab9e0d9 [ 923.921837][T17845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.921928][T17845] RSP: 002b:00007f500b9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 923.921999][T17845] RAX: ffffffffffffffda RBX: 00007f500ae25fa0 RCX: 00007f500ab9e0d9 [ 923.922044][T17845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 923.922088][T17845] RBP: 00007f500ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 923.922144][T17845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.922185][T17845] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 923.922283][T17845] [ 923.927123][T10611] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 924.019768][T17755] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.138641][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.145931][T17755] bridge_slave_0: entered allmulticast mode [ 924.154377][T17755] bridge_slave_0: entered promiscuous mode [ 924.200002][T17755] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.216050][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.223836][T17755] bridge_slave_1: entered allmulticast mode [ 924.234978][T17755] bridge_slave_1: entered promiscuous mode [ 924.348046][T17755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.361430][T17755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.441404][T17755] team0: Port device team_slave_0 added [ 924.470226][T17755] team0: Port device team_slave_1 added [ 924.517403][T17755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.525609][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.554102][T17755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.583356][T17755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.591540][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.617915][T17755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.930424][T17755] hsr_slave_0: entered promiscuous mode [ 924.940419][T17755] hsr_slave_1: entered promiscuous mode [ 925.298772][T14809] Bluetooth: hci3: command tx timeout [ 925.988317][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 926.098962][T10611] Bluetooth: hci1: command 0x0406 tx timeout [ 927.378761][T10611] Bluetooth: hci3: command tx timeout [ 927.644483][T17755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 927.660460][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 927.818565][T17755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 927.860603][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 928.141541][T17755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 928.175301][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 928.184158][T10611] Bluetooth: hci1: command 0x0406 tx timeout [ 928.482350][T17755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 928.502961][T17755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 929.520553][T17755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.596517][T17755] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.625894][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.633213][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.686476][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.687150][T17959] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 929.693894][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.764295][T17959] vhci_hcd vhci_hcd.2: invalid port number 0 [ 930.239042][T17976] FAULT_INJECTION: forcing a failure. [ 930.239042][T17976] name failslab, interval 1, probability 0, space 0, times 0 [ 930.273551][T17976] CPU: 0 UID: 0 PID: 17976 Comm: syz.4.1510 Not tainted syzkaller #0 PREEMPT(full) [ 930.273592][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 930.273611][T17976] Call Trace: [ 930.273620][T17976] [ 930.273631][T17976] dump_stack_lvl+0x100/0x190 [ 930.273681][T17976] should_fail_ex.cold+0x5/0xa [ 930.273714][T17976] should_failslab+0xc2/0x120 [ 930.273759][T17976] kmem_cache_alloc_noprof+0x91/0x6a0 [ 930.273798][T17976] ? trace_kmem_cache_alloc+0xdd/0x100 [ 930.273840][T17976] ? security_file_alloc+0x34/0x2c0 [ 930.273888][T17976] security_file_alloc+0x34/0x2c0 [ 930.273934][T17976] init_file+0x95/0x480 [ 930.273969][T17976] alloc_empty_file+0x79/0x1c0 [ 930.274010][T17976] alloc_file_pseudo+0x183/0x290 [ 930.274051][T17976] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 930.274092][T17976] ? security_inode_init_security_anon+0x7b/0x230 [ 930.274136][T17976] __anon_inode_getfile+0xe8/0x280 [ 930.274179][T17976] new_userfaultfd+0x255/0x400 [ 930.274225][T17976] __x64_sys_userfaultfd+0x4b/0xb0 [ 930.274257][T17976] do_syscall_64+0x115/0x840 [ 930.274295][T17976] ? clear_bhb_loop+0x70/0xc0 [ 930.274331][T17976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.274360][T17976] RIP: 0033:0x7fd296b9e0d9 [ 930.274382][T17976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.274418][T17976] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 930.274446][T17976] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 930.274465][T17976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 930.274481][T17976] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 930.274498][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.274514][T17976] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 930.274551][T17976] [ 930.276513][T10611] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 931.540538][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.558764][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.018916][T17755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.498859][T14809] Bluetooth: hci0: command 0x2016 tx timeout [ 933.355907][T17755] veth0_vlan: entered promiscuous mode [ 933.368079][T17755] veth1_vlan: entered promiscuous mode [ 933.438359][T17755] veth0_macvtap: entered promiscuous mode [ 933.452829][T17755] veth1_macvtap: entered promiscuous mode [ 933.476894][T17755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.515654][T17755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.549004][T13485] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.631136][ T1106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.948976][T13485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.974142][T13485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.068842][T13484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.578835][T10611] Bluetooth: hci0: command 0x2016 tx timeout [ 934.774200][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.787617][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.912907][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.936900][T18108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1518'. [ 938.027226][T13484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.347497][T10611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 938.362277][T10611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 938.370093][T10611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 938.380024][T10611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 938.387734][T10611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 938.495454][T13484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.774511][T13484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.097052][T13484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.417733][T18161] ksmbd: Unknown IPC event: 14, ignore. [ 939.929811][T13484] bridge_slave_1: left allmulticast mode [ 939.935608][T13484] bridge_slave_1: left promiscuous mode [ 939.941527][T13484] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.955022][T13484] bridge_slave_0: left allmulticast mode [ 939.961996][T13484] bridge_slave_0: left promiscuous mode [ 939.968020][T13484] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.310226][T13484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.337568][T13484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.356253][T13484] bond0 (unregistering): Released all slaves [ 940.506046][T10611] Bluetooth: hci2: command tx timeout [ 941.117262][T13484] hsr_slave_0: left promiscuous mode [ 941.126449][T13484] hsr_slave_1: left promiscuous mode [ 941.132838][T13484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.149586][T13484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.157659][T13484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.167950][T13484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.199844][T13484] veth1_macvtap: left promiscuous mode [ 941.213926][T13484] veth0_macvtap: left promiscuous mode [ 941.234177][T13484] veth1_vlan: left promiscuous mode [ 941.241254][T13484] veth0_vlan: left promiscuous mode [ 941.663392][T13484] team0 (unregistering): Port device team_slave_1 removed [ 941.710809][T13484] team0 (unregistering): Port device team_slave_0 removed [ 942.064438][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 942.508292][T18219] tunl0: entered allmulticast mode [ 942.578739][T10611] Bluetooth: hci2: command tx timeout [ 943.458215][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 943.490647][T18144] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.498996][T18144] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.506240][T18144] bridge_slave_0: entered allmulticast mode [ 943.514090][T18144] bridge_slave_0: entered promiscuous mode [ 943.524692][T18144] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.532067][T18144] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.539623][T18144] bridge_slave_1: entered allmulticast mode [ 943.547376][T18144] bridge_slave_1: entered promiscuous mode [ 943.746936][T18144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.835674][T18144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.186210][T18144] team0: Port device team_slave_0 added [ 944.206644][T18144] team0: Port device team_slave_1 added [ 944.497257][T18144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.514116][T18144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.564395][T18144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.658933][T10611] Bluetooth: hci2: command tx timeout [ 944.668085][T18144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.680688][T18144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.736490][T18144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.768821][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 945.027285][T18144] hsr_slave_0: entered promiscuous mode [ 945.034035][T18144] hsr_slave_1: entered promiscuous mode [ 945.043996][T18144] debugfs: 'hsr0' already exists in 'hsr' [ 945.051410][T18144] Cannot create hsr debugfs directory [ 945.644863][T18291] FAULT_INJECTION: forcing a failure. [ 945.644863][T18291] name failslab, interval 1, probability 0, space 0, times 0 [ 945.679689][T18291] CPU: 1 UID: 0 PID: 18291 Comm: syz.2.1537 Not tainted syzkaller #0 PREEMPT(full) [ 945.679726][T18291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.679744][T18291] Call Trace: [ 945.679753][T18291] [ 945.679764][T18291] dump_stack_lvl+0x100/0x190 [ 945.679805][T18291] should_fail_ex.cold+0x5/0xa [ 945.679841][T18291] should_failslab+0xc2/0x120 [ 945.679887][T18291] kmem_cache_alloc_noprof+0x91/0x6a0 [ 945.679924][T18291] ? d_instantiate+0x8a/0xb0 [ 945.679960][T18291] ? d_instantiate+0x8a/0xb0 [ 945.679993][T18291] ? alloc_empty_file+0x5b/0x1c0 [ 945.680038][T18291] alloc_empty_file+0x5b/0x1c0 [ 945.680078][T18291] alloc_file_pseudo+0x183/0x290 [ 945.680119][T18291] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 945.680158][T18291] ? security_inode_init_security_anon+0x7b/0x230 [ 945.680204][T18291] __anon_inode_getfile+0xe8/0x280 [ 945.680249][T18291] new_userfaultfd+0x255/0x400 [ 945.680295][T18291] __x64_sys_userfaultfd+0x4b/0xb0 [ 945.680329][T18291] do_syscall_64+0x115/0x840 [ 945.680367][T18291] ? clear_bhb_loop+0x70/0xc0 [ 945.680408][T18291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.680438][T18291] RIP: 0033:0x7fb36119e0d9 [ 945.680461][T18291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.680490][T18291] RSP: 002b:00007fb362095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 945.680518][T18291] RAX: ffffffffffffffda RBX: 00007fb361425fa0 RCX: 00007fb36119e0d9 [ 945.680537][T18291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 945.680553][T18291] RBP: 00007fb361235024 R08: 0000000000000000 R09: 0000000000000000 [ 945.680571][T18291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 945.680588][T18291] R13: 00007fb361426038 R14: 00007fb361425fa0 R15: 00007fff2ab82aa8 [ 945.680631][T18291] [ 945.686823][T10611] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 946.114193][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 946.739040][T10611] Bluetooth: hci2: command tx timeout [ 947.940110][T14809] Bluetooth: hci3: command 0x2016 tx timeout [ 948.601487][T18144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 948.629330][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 948.638401][T18144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 948.667207][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 948.685848][T18144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 948.705635][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 948.718861][T18144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 948.734818][T18144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 950.019472][T10611] Bluetooth: hci3: command 0x2016 tx timeout [ 950.826709][T18144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.891180][T18144] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.930190][T18299] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.937402][T18299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.984767][T18299] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.991960][T18299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.981254][T18144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.055196][T18144] veth0_vlan: entered promiscuous mode [ 953.077394][T18144] veth1_vlan: entered promiscuous mode [ 953.156430][T18144] veth0_macvtap: entered promiscuous mode [ 953.171595][T18144] veth1_macvtap: entered promiscuous mode [ 953.223307][T18144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.253753][T18144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.261770][T18474] FAULT_INJECTION: forcing a failure. [ 953.261770][T18474] name failslab, interval 1, probability 0, space 0, times 0 [ 953.283945][T18474] CPU: 0 UID: 0 PID: 18474 Comm: syz.4.1547 Not tainted syzkaller #0 PREEMPT(full) [ 953.283980][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.283998][T18474] Call Trace: [ 953.284008][T18474] [ 953.284026][T18474] dump_stack_lvl+0x100/0x190 [ 953.284066][T18474] should_fail_ex.cold+0x5/0xa [ 953.284100][T18474] should_failslab+0xc2/0x120 [ 953.284143][T18474] kmem_cache_alloc_noprof+0x91/0x6a0 [ 953.284181][T18474] ? d_instantiate+0x8a/0xb0 [ 953.284216][T18474] ? d_instantiate+0x8a/0xb0 [ 953.284250][T18474] ? alloc_empty_file+0x5b/0x1c0 [ 953.284294][T18474] alloc_empty_file+0x5b/0x1c0 [ 953.284335][T18474] alloc_file_pseudo+0x183/0x290 [ 953.284376][T18474] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 953.284417][T18474] ? security_inode_init_security_anon+0x7b/0x230 [ 953.284463][T18474] __anon_inode_getfile+0xe8/0x280 [ 953.284508][T18474] new_userfaultfd+0x255/0x400 [ 953.284555][T18474] __x64_sys_userfaultfd+0x4b/0xb0 [ 953.284589][T18474] do_syscall_64+0x115/0x840 [ 953.284626][T18474] ? clear_bhb_loop+0x70/0xc0 [ 953.284663][T18474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.284694][T18474] RIP: 0033:0x7fd296b9e0d9 [ 953.284716][T18474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.284746][T18474] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 953.284773][T18474] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 953.284792][T18474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 953.284809][T18474] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 953.284826][T18474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.284843][T18474] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 953.284881][T18474] [ 953.287889][T14809] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 953.359333][T18316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.359427][T18316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.362135][T13405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.767042][T18315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.787655][T18315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.008978][T13405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.618420][T18315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.636275][T18315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.459331][T14809] Bluetooth: hci0: command 0x2016 tx timeout [ 957.539260][T10611] Bluetooth: hci0: command 0x2016 tx timeout [ 960.628145][T18589] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 960.930024][T18584] FAULT_INJECTION: forcing a failure. [ 960.930024][T18584] name failslab, interval 1, probability 0, space 0, times 0 [ 960.962001][T18584] CPU: 0 UID: 0 PID: 18584 Comm: syz.0.1562 Not tainted syzkaller #0 PREEMPT(full) [ 960.962040][T18584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 960.962057][T18584] Call Trace: [ 960.962066][T18584] [ 960.962077][T18584] dump_stack_lvl+0x100/0x190 [ 960.962119][T18584] should_fail_ex.cold+0x5/0xa [ 960.962152][T18584] should_failslab+0xc2/0x120 [ 960.962198][T18584] __kmalloc_noprof+0xfc/0x820 [ 960.962237][T18584] ? fib_default_rule_add+0x4f/0x420 [ 960.962361][T18584] fib_default_rule_add+0x4f/0x420 [ 960.962397][T18584] fib4_rules_init+0x7c/0x1c0 [ 960.962439][T18584] fib_net_init+0x1dc/0x440 [ 960.962478][T18584] ? is_module_address+0x69/0xf0 [ 960.962510][T18584] ? __pfx_fib_net_init+0x10/0x10 [ 960.962549][T18584] ? timer_init_key+0x150/0x310 [ 960.962601][T18584] ? devinet_init_net+0x56c/0x8d0 [ 960.962647][T18584] ? __pfx_fib_net_init+0x10/0x10 [ 960.962685][T18584] ops_init+0x1e2/0x5f0 [ 960.962738][T18584] setup_net+0x118/0x3a0 [ 960.962785][T18584] ? __pfx_setup_net+0x10/0x10 [ 960.962833][T18584] ? mutex_init_lockdep+0xf1/0x120 [ 960.962871][T18584] copy_net_ns+0x46f/0x7c0 [ 960.962904][T18584] create_new_namespaces+0x3ea/0xac0 [ 960.962946][T18584] unshare_nsproxy_namespaces+0xf2/0x220 [ 960.962984][T18584] ksys_unshare+0x438/0xab0 [ 960.963065][T18584] ? __pfx_ksys_unshare+0x10/0x10 [ 960.963119][T18584] __x64_sys_unshare+0x31/0x40 [ 960.963159][T18584] do_syscall_64+0x115/0x840 [ 960.963215][T18584] ? clear_bhb_loop+0x70/0xc0 [ 960.963254][T18584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.963288][T18584] RIP: 0033:0x7f85eef9e0d9 [ 960.963315][T18584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.963346][T18584] RSP: 002b:00007f85efe79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 960.963377][T18584] RAX: ffffffffffffffda RBX: 00007f85ef226090 RCX: 00007f85eef9e0d9 [ 960.963398][T18584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 960.963430][T18584] RBP: 00007f85ef035024 R08: 0000000000000000 R09: 0000000000000000 [ 960.963450][T18584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.963469][T18584] R13: 00007f85ef226128 R14: 00007f85ef226090 R15: 00007ffe6195a758 [ 960.963510][T18584] [ 962.703493][T18627] FAULT_INJECTION: forcing a failure. [ 962.703493][T18627] name failslab, interval 1, probability 0, space 0, times 0 [ 962.752038][T18627] CPU: 0 UID: 0 PID: 18627 Comm: syz.3.1570 Not tainted syzkaller #0 PREEMPT(full) [ 962.752073][T18627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.752090][T18627] Call Trace: [ 962.752099][T18627] [ 962.752109][T18627] dump_stack_lvl+0x100/0x190 [ 962.752146][T18627] should_fail_ex.cold+0x5/0xa [ 962.752180][T18627] should_failslab+0xc2/0x120 [ 962.752221][T18627] __kmalloc_noprof+0xfc/0x820 [ 962.752265][T18627] ? tracepoint_add_func+0x3a8/0x1150 [ 962.752311][T18627] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 962.752359][T18627] tracepoint_add_func+0x3a8/0x1150 [ 962.752402][T18627] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 962.752455][T18627] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 962.752501][T18627] tracepoint_probe_register+0xc4/0x110 [ 962.752547][T18627] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 962.752592][T18627] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 962.752639][T18627] ? __lock_acquire+0x49f/0x1a40 [ 962.752673][T18627] tracing_start_sched_switch+0xaf/0x170 [ 962.752716][T18627] __ftrace_event_enable_disable+0x557/0x6f0 [ 962.752770][T18627] __ftrace_set_clr_event_nolock+0x3c8/0xbb0 [ 962.752812][T18627] ftrace_set_clr_event+0x1b7/0x3f0 [ 962.752850][T18627] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 962.752884][T18627] ? trace_get_user+0x3ae/0xa70 [ 962.752938][T18627] ftrace_event_write+0x259/0x2c0 [ 962.752973][T18627] ? __pfx_ftrace_event_write+0x10/0x10 [ 962.753023][T18627] vfs_write+0x2aa/0x1050 [ 962.753052][T18627] ? __pfx_ftrace_event_write+0x10/0x10 [ 962.753091][T18627] ? __pfx_vfs_write+0x10/0x10 [ 962.753117][T18627] ? __fget_files+0x215/0x3d0 [ 962.753153][T18627] ? __fget_files+0x21f/0x3d0 [ 962.753191][T18627] ksys_write+0x12a/0x250 [ 962.753218][T18627] ? __pfx_ksys_write+0x10/0x10 [ 962.753262][T18627] do_syscall_64+0x115/0x840 [ 962.753295][T18627] ? clear_bhb_loop+0x70/0xc0 [ 962.753327][T18627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.753354][T18627] RIP: 0033:0x7f500ab9e0d9 [ 962.753375][T18627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.753400][T18627] RSP: 002b:00007f500b9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 962.753424][T18627] RAX: ffffffffffffffda RBX: 00007f500ae25fa0 RCX: 00007f500ab9e0d9 [ 962.753442][T18627] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000003 [ 962.753457][T18627] RBP: 00007f500b9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 962.753473][T18627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.753489][T18627] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 962.753527][T18627] [ 962.753548][T18627] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 966.894735][T18672] syz.4.1577 (18672) used greatest stack depth: 19600 bytes left [ 967.383960][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1580'. [ 967.652452][T18701] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 968.784845][T18723] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 970.614256][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1589'. [ 977.062408][T18862] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input9 [ 979.734158][T18900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.116331][T10864] hid_parser_main: 11 callbacks suppressed [ 980.116356][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.153622][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.166047][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.206882][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.243650][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.272535][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.294721][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.329940][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.362774][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.380460][T10864] hid-generic 0000:0000:6195B099.0016: unknown main item tag 0x0 [ 980.407240][T10864] hid-generic 0000:0000:6195B099.0016: hidraw0: HID v7f.fe Device [] on  [ 980.418205][ T5632] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1227: comm udevd: iget: checksum invalid [ 980.486472][T18925] EXT4-fs error (device sda1): ext4_lookup:1785: inode #1227: comm udevd: iget: checksum invalid [ 980.522968][T18925] udevd[18925]: failed to execute '/lib/udev/fido_id' 'fido_id': Bad message [ 981.616251][T18941] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 982.050983][T18950] FAULT_INJECTION: forcing a failure. [ 982.050983][T18950] name failslab, interval 1, probability 0, space 0, times 0 [ 982.095821][T18950] CPU: 0 UID: 0 PID: 18950 Comm: syz.4.1626 Not tainted syzkaller #0 PREEMPT(full) [ 982.095860][T18950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 982.095877][T18950] Call Trace: [ 982.095887][T18950] [ 982.095898][T18950] dump_stack_lvl+0x100/0x190 [ 982.095938][T18950] should_fail_ex.cold+0x5/0xa [ 982.095973][T18950] should_failslab+0xc2/0x120 [ 982.096017][T18950] kmem_cache_alloc_noprof+0x91/0x6a0 [ 982.096055][T18950] ? d_instantiate+0x8a/0xb0 [ 982.096092][T18950] ? d_instantiate+0x8a/0xb0 [ 982.096126][T18950] ? alloc_empty_file+0x5b/0x1c0 [ 982.096173][T18950] alloc_empty_file+0x5b/0x1c0 [ 982.096212][T18950] alloc_file_pseudo+0x183/0x290 [ 982.096255][T18950] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 982.096295][T18950] ? security_inode_init_security_anon+0x7b/0x230 [ 982.096342][T18950] __anon_inode_getfile+0xe8/0x280 [ 982.096387][T18950] new_userfaultfd+0x255/0x400 [ 982.096436][T18950] __x64_sys_userfaultfd+0x4b/0xb0 [ 982.096468][T18950] do_syscall_64+0x115/0x840 [ 982.096506][T18950] ? clear_bhb_loop+0x70/0xc0 [ 982.096543][T18950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.096573][T18950] RIP: 0033:0x7fd296b9e0d9 [ 982.096596][T18950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.096626][T18950] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 982.096653][T18950] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 982.096689][T18950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 982.096707][T18950] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 982.096725][T18950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.096742][T18950] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 982.096780][T18950] [ 982.356322][T14809] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 983.976479][T18977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 984.418821][T14809] Bluetooth: hci0: command 0x2016 tx timeout [ 986.026819][ T9] hid_parser_main: 11 callbacks suppressed [ 986.026845][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.061677][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.069894][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.078111][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.086419][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.097580][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.107375][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.138714][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.151741][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.159823][ T9] hid-generic 0000:0000:2AB833E9.0017: unknown main item tag 0x0 [ 986.170272][ T9] hid-generic 0000:0000:2AB833E9.0017: collection stack underflow [ 986.178148][ T9] hid-generic 0000:0000:2AB833E9.0017: item 0 0 0 12 parsing failed [ 986.195005][ T9] hid-generic 0000:0000:2AB833E9.0017: probe with driver hid-generic failed with error -22 [ 986.498874][T10611] Bluetooth: hci0: command 0x2016 tx timeout [ 988.334264][T19035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1640'. [ 988.790457][T19041] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1637'. [ 989.479825][T19058] ptp ptp0: guarantee physical clock free running [ 990.977665][T19081] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 992.385421][T19100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1651'. [ 992.622423][T19107] netlink: zone id is out of range [ 992.637783][T19107] netlink: zone id is out of range [ 992.768954][T19107] netlink: set zone limit has 8 unknown bytes [ 992.980688][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.987260][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.836806][T19141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1660'. [ 996.662558][T19186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1669'. [ 997.027610][T19188] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 997.748750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 998.840160][T19229] FAULT_INJECTION: forcing a failure. [ 998.840160][T19229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.889434][T19229] CPU: 1 UID: 0 PID: 19229 Comm: syz.4.1676 Not tainted syzkaller #0 PREEMPT(full) [ 998.889472][T19229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 998.889489][T19229] Call Trace: [ 998.889499][T19229] [ 998.889510][T19229] dump_stack_lvl+0x100/0x190 [ 998.889549][T19229] should_fail_ex.cold+0x5/0xa [ 998.889583][T19229] _copy_from_user+0x2e/0xd0 [ 998.889633][T19229] move_addr_to_kernel+0x65/0x170 [ 998.889670][T19229] __sys_sendto+0x1b8/0x4e0 [ 998.889713][T19229] ? __pfx___sys_sendto+0x10/0x10 [ 998.889761][T19229] ? fd_install+0x223/0x580 [ 998.889803][T19229] ? __pfx___sys_socket+0x10/0x10 [ 998.889852][T19229] __x64_sys_sendto+0xe0/0x1c0 [ 998.889892][T19229] ? do_syscall_64+0x90/0x840 [ 998.889930][T19229] ? lockdep_hardirqs_on+0x78/0x100 [ 998.889966][T19229] do_syscall_64+0x115/0x840 [ 998.890001][T19229] ? clear_bhb_loop+0x70/0xc0 [ 998.890038][T19229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.890068][T19229] RIP: 0033:0x7fd296b5e90e [ 998.890093][T19229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 998.890122][T19229] RSP: 002b:00007fd2979fbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 998.890150][T19229] RAX: ffffffffffffffda RBX: 00007fd2979fd6c0 RCX: 00007fd296b5e90e [ 998.890170][T19229] RDX: 0000000000000028 RSI: 00007fd2979fc000 RDI: 0000000000000009 [ 998.890189][T19229] RBP: 0000000000000000 R08: 00007fd2979fbf04 R09: 000000000000000c [ 998.890208][T19229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 998.890227][T19229] R13: 00007fd2979fbf58 R14: 00007fd2979fc000 R15: 0000000000000000 [ 998.890266][T19229] [ 999.259016][T19232] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 999.690368][T19239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1678'. [ 1000.182051][T14809] Bluetooth: hci0: command 0x2016 tx timeout [ 1000.458038][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'. [ 1005.693997][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 1009.410611][T19388] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1011.862980][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1707'. [ 1012.007095][T19446] FAULT_INJECTION: forcing a failure. [ 1012.007095][T19446] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.020113][T19446] CPU: 0 UID: 0 PID: 19446 Comm: syz.3.1710 Not tainted syzkaller #0 PREEMPT(full) [ 1012.020153][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1012.020171][T19446] Call Trace: [ 1012.020181][T19446] [ 1012.020192][T19446] dump_stack_lvl+0x100/0x190 [ 1012.020232][T19446] should_fail_ex.cold+0x5/0xa [ 1012.020265][T19446] should_failslab+0xc2/0x120 [ 1012.020311][T19446] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1012.020355][T19446] ? d_instantiate+0x8a/0xb0 [ 1012.020390][T19446] ? d_instantiate+0x8a/0xb0 [ 1012.020424][T19446] ? alloc_empty_file+0x5b/0x1c0 [ 1012.020468][T19446] alloc_empty_file+0x5b/0x1c0 [ 1012.020507][T19446] alloc_file_pseudo+0x183/0x290 [ 1012.020548][T19446] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1012.020588][T19446] ? security_inode_init_security_anon+0x7b/0x230 [ 1012.020632][T19446] __anon_inode_getfile+0xe8/0x280 [ 1012.020676][T19446] new_userfaultfd+0x255/0x400 [ 1012.020721][T19446] __x64_sys_userfaultfd+0x4b/0xb0 [ 1012.020754][T19446] do_syscall_64+0x115/0x840 [ 1012.020790][T19446] ? clear_bhb_loop+0x70/0xc0 [ 1012.020826][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.020856][T19446] RIP: 0033:0x7f500ab9e0d9 [ 1012.020879][T19446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.020908][T19446] RSP: 002b:00007f500b9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1012.020935][T19446] RAX: ffffffffffffffda RBX: 00007f500ae25fa0 RCX: 00007f500ab9e0d9 [ 1012.020955][T19446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1012.020972][T19446] RBP: 00007f500ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 1012.020989][T19446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.021006][T19446] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 1012.021043][T19446] [ 1012.026833][T10611] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1014.258809][T10611] Bluetooth: hci1: command 0x0406 tx timeout [ 1015.537464][T19527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'. [ 1016.348981][T14809] Bluetooth: hci1: command 0x0406 tx timeout [ 1017.548329][T19552] FAULT_INJECTION: forcing a failure. [ 1017.548329][T19552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.563544][T19552] CPU: 0 UID: 0 PID: 19552 Comm: syz.4.1728 Not tainted syzkaller #0 PREEMPT(full) [ 1017.563576][T19552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1017.563592][T19552] Call Trace: [ 1017.563600][T19552] [ 1017.563610][T19552] dump_stack_lvl+0x100/0x190 [ 1017.563646][T19552] should_fail_ex.cold+0x5/0xa [ 1017.563677][T19552] _copy_to_user+0x32/0xd0 [ 1017.563721][T19552] simple_read_from_buffer+0xcb/0x170 [ 1017.563769][T19552] proc_fail_nth_read+0x1af/0x230 [ 1017.563885][T19552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1017.563927][T19552] ? rw_verify_area+0xce/0x6d0 [ 1017.563968][T19552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1017.564007][T19552] vfs_read+0x1e4/0xb40 [ 1017.564037][T19552] ? __pfx_vfs_read+0x10/0x10 [ 1017.564062][T19552] ? __fget_files+0x215/0x3d0 [ 1017.564094][T19552] ? __fget_files+0x21f/0x3d0 [ 1017.564130][T19552] ksys_read+0x12a/0x250 [ 1017.564155][T19552] ? __pfx_ksys_read+0x10/0x10 [ 1017.564190][T19552] do_syscall_64+0x115/0x840 [ 1017.564224][T19552] ? clear_bhb_loop+0x70/0xc0 [ 1017.564256][T19552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.564284][T19552] RIP: 0033:0x7fd296b5e90e [ 1017.564305][T19552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1017.564332][T19552] RSP: 002b:00007fd2979fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1017.564357][T19552] RAX: ffffffffffffffda RBX: 00007fd2979fd6c0 RCX: 00007fd296b5e90e [ 1017.564375][T19552] RDX: 000000000000000f RSI: 00007fd2979fd0a0 RDI: 0000000000000005 [ 1017.564391][T19552] RBP: 00007fd2979fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.564407][T19552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.564422][T19552] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 1017.564458][T19552] [ 1018.601789][T19587] ksmbd: Unknown IPC event: 14, ignore. [ 1020.176258][T19614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1737'. [ 1026.507554][T19716] FAULT_INJECTION: forcing a failure. [ 1026.507554][T19716] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.534394][T19716] CPU: 1 UID: 0 PID: 19716 Comm: syz.0.1751 Not tainted syzkaller #0 PREEMPT(full) [ 1026.534429][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1026.534445][T19716] Call Trace: [ 1026.534454][T19716] [ 1026.534463][T19716] dump_stack_lvl+0x100/0x190 [ 1026.534502][T19716] should_fail_ex.cold+0x5/0xa [ 1026.534535][T19716] should_failslab+0xc2/0x120 [ 1026.534577][T19716] __kmalloc_cache_noprof+0x91/0x6c0 [ 1026.534608][T19716] ? alloc_workqueue_attrs_noprof+0x40/0x100 [ 1026.534650][T19716] alloc_workqueue_attrs_noprof+0x40/0x100 [ 1026.534684][T19716] padata_set_cpumask+0x1dd/0x530 [ 1026.534729][T19716] store_cpumask+0x120/0x1a0 [ 1026.534762][T19716] ? __pfx_store_cpumask+0x10/0x10 [ 1026.534796][T19716] ? find_held_lock+0x2b/0x80 [ 1026.534833][T19716] ? sysfs_file_kobj+0xe4/0x290 [ 1026.534875][T19716] ? sysfs_file_kobj+0xe4/0x290 [ 1026.534918][T19716] ? __pfx_store_cpumask+0x10/0x10 [ 1026.534950][T19716] padata_sysfs_store+0x5c/0x90 [ 1026.534982][T19716] ? __pfx_padata_sysfs_store+0x10/0x10 [ 1026.535014][T19716] sysfs_kf_write+0xf2/0x150 [ 1026.535058][T19716] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1026.535098][T19716] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1026.535140][T19716] vfs_write+0x6ac/0x1050 [ 1026.535167][T19716] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1026.535201][T19716] ? __pfx_vfs_write+0x10/0x10 [ 1026.535244][T19716] ksys_write+0x12a/0x250 [ 1026.535266][T19716] ? __pfx_ksys_write+0x10/0x10 [ 1026.535298][T19716] do_syscall_64+0x115/0x840 [ 1026.535327][T19716] ? clear_bhb_loop+0x70/0xc0 [ 1026.535356][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.535380][T19716] RIP: 0033:0x7f85eef9e0d9 [ 1026.535400][T19716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.535423][T19716] RSP: 002b:00007f85efe9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1026.535446][T19716] RAX: ffffffffffffffda RBX: 00007f85ef225fa0 RCX: 00007f85eef9e0d9 [ 1026.535461][T19716] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000003 [ 1026.535475][T19716] RBP: 00007f85efe9a090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.535489][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.535503][T19716] R13: 00007f85ef226038 R14: 00007f85ef225fa0 R15: 00007ffe6195a758 [ 1026.535536][T19716] [ 1026.857782][T19721] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1750'. [ 1027.433500][T19734] ksmbd: Unknown IPC event: 14, ignore. [ 1027.690325][T19738] FAULT_INJECTION: forcing a failure. [ 1027.690325][T19738] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.703645][T19738] CPU: 1 UID: 0 PID: 19738 Comm: syz.3.1755 Not tainted syzkaller #0 PREEMPT(full) [ 1027.703671][T19738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1027.703683][T19738] Call Trace: [ 1027.703690][T19738] [ 1027.703697][T19738] dump_stack_lvl+0x100/0x190 [ 1027.703724][T19738] should_fail_ex.cold+0x5/0xa [ 1027.703746][T19738] should_failslab+0xc2/0x120 [ 1027.703776][T19738] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1027.703805][T19738] ? __alloc_skb+0x140/0x710 [ 1027.703837][T19738] __alloc_skb+0x140/0x710 [ 1027.703865][T19738] ? __pfx___alloc_skb+0x10/0x10 [ 1027.703895][T19738] ? lock_acquire+0x1b9/0x370 [ 1027.703917][T19738] tipc_buf_acquire+0x26/0xe0 [ 1027.703941][T19738] tipc_msg_create+0x39/0x1d0 [ 1027.703966][T19738] tipc_group_create_event+0x25f/0x6b0 [ 1027.703998][T19738] ? __pfx_tipc_group_create_event+0x10/0x10 [ 1027.704038][T19738] tipc_group_proto_rcv+0xf62/0x1e40 [ 1027.704092][T19738] tipc_sk_filter_rcv+0x18b4/0x3250 [ 1027.704136][T19738] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 1027.704179][T19738] tipc_sk_rcv+0xe90/0x1c80 [ 1027.704208][T19738] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 1027.704230][T19738] ? __lock_acquire+0x49f/0x1a40 [ 1027.704260][T19738] ? find_held_lock+0x2b/0x80 [ 1027.704285][T19738] ? tipc_node_xmit+0x1f6/0xfb0 [ 1027.704310][T19738] ? lockdep_init_map_type+0x5c/0x250 [ 1027.704334][T19738] tipc_node_xmit+0x23e/0xfb0 [ 1027.704358][T19738] ? sock_close+0x1c/0x30 [ 1027.704433][T19738] ? __fput+0x3ff/0xb50 [ 1027.704456][T19738] ? exit_to_user_mode_loop+0x1d8/0x6f0 [ 1027.704476][T19738] ? do_syscall_64+0x652/0x840 [ 1027.704502][T19738] ? __pfx_tipc_node_xmit+0x10/0x10 [ 1027.704548][T19738] ? tipc_node_distr_xmit+0x177/0x3c0 [ 1027.704574][T19738] tipc_node_distr_xmit+0x177/0x3c0 [ 1027.704604][T19738] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 1027.704636][T19738] ? tipc_group_delete+0x230/0x4a0 [ 1027.704661][T19738] ? tipc_group_delete+0x2c3/0x4a0 [ 1027.704686][T19738] ? kfree+0x22b/0x6c0 [ 1027.704709][T19738] tipc_group_delete+0x2eb/0x4a0 [ 1027.704739][T19738] ? __pfx_tipc_group_delete+0x10/0x10 [ 1027.704770][T19738] ? __tipc_shutdown+0x855/0xed0 [ 1027.704796][T19738] tipc_sk_leave+0x10e/0x1c0 [ 1027.704824][T19738] ? __pfx_tipc_sk_leave+0x10/0x10 [ 1027.704852][T19738] ? __pfx_woken_wake_function+0x10/0x10 [ 1027.704878][T19738] ? tipc_sk_filtering+0x47d/0x590 [ 1027.704901][T19738] tipc_release+0x11f/0x1640 [ 1027.704920][T19738] ? down_write+0x146/0x1f0 [ 1027.704947][T19738] ? __pfx_down_write+0x10/0x10 [ 1027.704976][T19738] ? __pfx_locks_remove_file+0x10/0x10 [ 1027.705044][T19738] __sock_release+0xb3/0x260 [ 1027.705074][T19738] ? __pfx_sock_close+0x10/0x10 [ 1027.705105][T19738] sock_close+0x1c/0x30 [ 1027.705133][T19738] __fput+0x3ff/0xb50 [ 1027.705163][T19738] task_work_run+0x150/0x240 [ 1027.705194][T19738] ? __pfx_task_work_run+0x10/0x10 [ 1027.705230][T19738] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1027.705250][T19738] ? rcu_is_watching+0x12/0xc0 [ 1027.705277][T19738] do_syscall_64+0x652/0x840 [ 1027.705301][T19738] ? clear_bhb_loop+0x70/0xc0 [ 1027.705326][T19738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.705346][T19738] RIP: 0033:0x7f500ab9e0d9 [ 1027.705362][T19738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.705382][T19738] RSP: 002b:00007f500b9b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1027.705417][T19738] RAX: 0000000000000000 RBX: 00007f500ae25fa0 RCX: 00007f500ab9e0d9 [ 1027.705434][T19738] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1027.705449][T19738] RBP: 00007f500b9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.705466][T19738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.705481][T19738] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 1027.705519][T19738] [ 1031.244319][T19798] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1031.281653][T19804] ksmbd: Unknown IPC event: 14, ignore. [ 1031.647762][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1767'. [ 1033.265425][T19834] ksmbd: Unknown IPC event: 14, ignore. [ 1034.627010][T19851] FAULT_INJECTION: forcing a failure. [ 1034.627010][T19851] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.652325][T19851] CPU: 1 UID: 0 PID: 19851 Comm: syz.0.1776 Not tainted syzkaller #0 PREEMPT(full) [ 1034.652369][T19851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.652387][T19851] Call Trace: [ 1034.652397][T19851] [ 1034.652408][T19851] dump_stack_lvl+0x100/0x190 [ 1034.652490][T19851] should_fail_ex.cold+0x5/0xa [ 1034.652530][T19851] should_failslab+0xc2/0x120 [ 1034.652582][T19851] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1034.652627][T19851] ? d_instantiate+0x8a/0xb0 [ 1034.652669][T19851] ? d_instantiate+0x8a/0xb0 [ 1034.652710][T19851] ? alloc_empty_file+0x5b/0x1c0 [ 1034.652762][T19851] alloc_empty_file+0x5b/0x1c0 [ 1034.652810][T19851] alloc_file_pseudo+0x183/0x290 [ 1034.652858][T19851] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1034.652906][T19851] ? security_inode_init_security_anon+0x7b/0x230 [ 1034.652960][T19851] __anon_inode_getfile+0xe8/0x280 [ 1034.653012][T19851] new_userfaultfd+0x255/0x400 [ 1034.653067][T19851] __x64_sys_userfaultfd+0x4b/0xb0 [ 1034.653105][T19851] do_syscall_64+0x115/0x840 [ 1034.653149][T19851] ? clear_bhb_loop+0x70/0xc0 [ 1034.653191][T19851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.653228][T19851] RIP: 0033:0x7f85eef9e0d9 [ 1034.653256][T19851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.653289][T19851] RSP: 002b:00007f85efe9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1034.653322][T19851] RAX: ffffffffffffffda RBX: 00007f85ef225fa0 RCX: 00007f85eef9e0d9 [ 1034.653346][T19851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1034.653366][T19851] RBP: 00007f85ef035024 R08: 0000000000000000 R09: 0000000000000000 [ 1034.653387][T19851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.653408][T19851] R13: 00007f85ef226038 R14: 00007f85ef225fa0 R15: 00007ffe6195a758 [ 1034.653451][T19851] [ 1034.655353][T14809] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1035.935504][T19868] FAULT_INJECTION: forcing a failure. [ 1035.935504][T19868] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.958791][T19868] CPU: 0 UID: 0 PID: 19868 Comm: syz.2.1778 Not tainted syzkaller #0 PREEMPT(full) [ 1035.958833][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.958851][T19868] Call Trace: [ 1035.958861][T19868] [ 1035.958871][T19868] dump_stack_lvl+0x100/0x190 [ 1035.958911][T19868] should_fail_ex.cold+0x5/0xa [ 1035.958944][T19868] should_failslab+0xc2/0x120 [ 1035.958986][T19868] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1035.959022][T19868] ? d_instantiate+0x8a/0xb0 [ 1035.959056][T19868] ? d_instantiate+0x8a/0xb0 [ 1035.959090][T19868] ? alloc_empty_file+0x5b/0x1c0 [ 1035.959134][T19868] alloc_empty_file+0x5b/0x1c0 [ 1035.959174][T19868] alloc_file_pseudo+0x183/0x290 [ 1035.959214][T19868] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1035.959253][T19868] ? security_inode_init_security_anon+0x7b/0x230 [ 1035.959298][T19868] __anon_inode_getfile+0xe8/0x280 [ 1035.959350][T19868] new_userfaultfd+0x255/0x400 [ 1035.959396][T19868] __x64_sys_userfaultfd+0x4b/0xb0 [ 1035.959428][T19868] do_syscall_64+0x115/0x840 [ 1035.959463][T19868] ? clear_bhb_loop+0x70/0xc0 [ 1035.959498][T19868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.959528][T19868] RIP: 0033:0x7fb36119e0d9 [ 1035.959551][T19868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.959581][T19868] RSP: 002b:00007fb362095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1035.959609][T19868] RAX: ffffffffffffffda RBX: 00007fb361425fa0 RCX: 00007fb36119e0d9 [ 1035.959628][T19868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1035.959644][T19868] RBP: 00007fb361235024 R08: 0000000000000000 R09: 0000000000000000 [ 1035.959660][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.959677][T19868] R13: 00007fb361426038 R14: 00007fb361425fa0 R15: 00007fff2ab82aa8 [ 1035.959713][T19868] [ 1035.967712][T14809] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1036.899436][ T5624] Bluetooth: hci2: command 0x2016 tx timeout [ 1038.178801][T14809] Bluetooth: hci3: command 0x2016 tx timeout [ 1038.678446][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1787'. [ 1038.836931][T19924] FAULT_INJECTION: forcing a failure. [ 1038.836931][T19924] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.863213][T19924] CPU: 1 UID: 0 PID: 19924 Comm: syz.0.1789 Not tainted syzkaller #0 PREEMPT(full) [ 1038.863249][T19924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1038.863266][T19924] Call Trace: [ 1038.863276][T19924] [ 1038.863285][T19924] dump_stack_lvl+0x100/0x190 [ 1038.863325][T19924] should_fail_ex.cold+0x5/0xa [ 1038.863360][T19924] should_failslab+0xc2/0x120 [ 1038.863405][T19924] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1038.863442][T19924] ? d_instantiate+0x8a/0xb0 [ 1038.863477][T19924] ? d_instantiate+0x8a/0xb0 [ 1038.863512][T19924] ? alloc_empty_file+0x5b/0x1c0 [ 1038.863558][T19924] alloc_empty_file+0x5b/0x1c0 [ 1038.863596][T19924] alloc_file_pseudo+0x183/0x290 [ 1038.863638][T19924] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1038.863679][T19924] ? security_inode_init_security_anon+0x7b/0x230 [ 1038.863725][T19924] __anon_inode_getfile+0xe8/0x280 [ 1038.863778][T19924] new_userfaultfd+0x255/0x400 [ 1038.863840][T19924] __x64_sys_userfaultfd+0x4b/0xb0 [ 1038.863873][T19924] do_syscall_64+0x115/0x840 [ 1038.863910][T19924] ? clear_bhb_loop+0x70/0xc0 [ 1038.863951][T19924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.863981][T19924] RIP: 0033:0x7f85eef9e0d9 [ 1038.864004][T19924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.864032][T19924] RSP: 002b:00007f85efe9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1038.864060][T19924] RAX: ffffffffffffffda RBX: 00007f85ef225fa0 RCX: 00007f85eef9e0d9 [ 1038.864079][T19924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1038.864105][T19924] RBP: 00007f85ef035024 R08: 0000000000000000 R09: 0000000000000000 [ 1038.864125][T19924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.864141][T19924] R13: 00007f85ef226038 R14: 00007f85ef225fa0 R15: 00007ffe6195a758 [ 1038.864179][T19924] [ 1038.868493][ T5624] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1039.090056][ T5624] Bluetooth: hci2: command 0x2016 tx timeout [ 1040.258697][T10611] Bluetooth: hci3: command 0x2016 tx timeout [ 1041.150612][T14809] Bluetooth: hci2: command 0x2016 tx timeout [ 1042.953330][T19985] FAULT_INJECTION: forcing a failure. [ 1042.953330][T19985] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.989240][T19985] CPU: 0 UID: 0 PID: 19985 Comm: syz.3.1801 Not tainted syzkaller #0 PREEMPT(full) [ 1042.989290][T19985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1042.989310][T19985] Call Trace: [ 1042.989320][T19985] [ 1042.989332][T19985] dump_stack_lvl+0x100/0x190 [ 1042.989375][T19985] should_fail_ex.cold+0x5/0xa [ 1042.989414][T19985] should_failslab+0xc2/0x120 [ 1042.989462][T19985] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1042.989505][T19985] ? d_instantiate+0x8a/0xb0 [ 1042.989545][T19985] ? d_instantiate+0x8a/0xb0 [ 1042.989584][T19985] ? alloc_empty_file+0x5b/0x1c0 [ 1042.989635][T19985] alloc_empty_file+0x5b/0x1c0 [ 1042.989699][T19985] alloc_file_pseudo+0x183/0x290 [ 1042.989747][T19985] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1042.989794][T19985] ? security_inode_init_security_anon+0x7b/0x230 [ 1042.989847][T19985] __anon_inode_getfile+0xe8/0x280 [ 1042.989899][T19985] new_userfaultfd+0x255/0x400 [ 1042.989954][T19985] __x64_sys_userfaultfd+0x4b/0xb0 [ 1042.989993][T19985] do_syscall_64+0x115/0x840 [ 1042.990036][T19985] ? clear_bhb_loop+0x70/0xc0 [ 1042.990083][T19985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.990119][T19985] RIP: 0033:0x7f500ab9e0d9 [ 1042.990146][T19985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.990180][T19985] RSP: 002b:00007f500b9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1042.990213][T19985] RAX: ffffffffffffffda RBX: 00007f500ae25fa0 RCX: 00007f500ab9e0d9 [ 1042.990236][T19985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1042.990256][T19985] RBP: 00007f500ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 1042.990284][T19985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.990305][T19985] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 1042.990359][T19985] [ 1042.992283][ T5624] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1043.219548][ T5624] Bluetooth: hci2: command 0x2016 tx timeout [ 1043.466599][T20002] netlink: 'syz.4.1799': attribute type 1 has an invalid length. [ 1045.228709][T10611] Bluetooth: hci1: command 0x0406 tx timeout [ 1045.731196][T20050] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(10.1852401262.25701), cmd(5) [ 1046.258735][T14809] Bluetooth: hci3: command 0x2016 tx timeout [ 1046.943457][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'. [ 1047.308750][T10611] Bluetooth: hci1: command 0x0406 tx timeout [ 1047.533780][T20082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 1048.746174][T20087] FAULT_INJECTION: forcing a failure. [ 1048.746174][T20087] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.759017][T20087] CPU: 1 UID: 0 PID: 20087 Comm: syz.3.1815 Not tainted syzkaller #0 PREEMPT(full) [ 1048.759057][T20087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1048.759077][T20087] Call Trace: [ 1048.759087][T20087] [ 1048.759099][T20087] dump_stack_lvl+0x100/0x190 [ 1048.759142][T20087] should_fail_ex.cold+0x5/0xa [ 1048.759178][T20087] should_failslab+0xc2/0x120 [ 1048.759225][T20087] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1048.759266][T20087] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1048.759327][T20087] ? security_file_alloc+0x34/0x2c0 [ 1048.759377][T20087] security_file_alloc+0x34/0x2c0 [ 1048.759423][T20087] init_file+0x95/0x480 [ 1048.759480][T20087] alloc_empty_file+0x79/0x1c0 [ 1048.759538][T20087] alloc_file_pseudo+0x183/0x290 [ 1048.759583][T20087] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1048.759625][T20087] ? security_inode_init_security_anon+0x7b/0x230 [ 1048.759673][T20087] __anon_inode_getfile+0xe8/0x280 [ 1048.759719][T20087] new_userfaultfd+0x255/0x400 [ 1048.759769][T20087] __x64_sys_userfaultfd+0x4b/0xb0 [ 1048.759803][T20087] do_syscall_64+0x115/0x840 [ 1048.759843][T20087] ? clear_bhb_loop+0x70/0xc0 [ 1048.759881][T20087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.759914][T20087] RIP: 0033:0x7f500ab9e0d9 [ 1048.759940][T20087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.759971][T20087] RSP: 002b:00007f500b9b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1048.760002][T20087] RAX: ffffffffffffffda RBX: 00007f500ae25fa0 RCX: 00007f500ab9e0d9 [ 1048.760023][T20087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1048.760042][T20087] RBP: 00007f500ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 1048.760061][T20087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.760079][T20087] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 1048.760118][T20087] [ 1048.762163][T10611] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1050.979500][ T5624] Bluetooth: hci1: command 0x0406 tx timeout [ 1052.094975][T20157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1824'. [ 1052.186976][T20158] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1053.060857][T10611] Bluetooth: hci1: command 0x0406 tx timeout [ 1053.808521][T20171] FAULT_INJECTION: forcing a failure. [ 1053.808521][T20171] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.832280][T20171] CPU: 1 UID: 0 PID: 20171 Comm: syz.0.1829 Not tainted syzkaller #0 PREEMPT(full) [ 1053.832319][T20171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.832336][T20171] Call Trace: [ 1053.832345][T20171] [ 1053.832356][T20171] dump_stack_lvl+0x100/0x190 [ 1053.832395][T20171] should_fail_ex.cold+0x5/0xa [ 1053.832430][T20171] should_failslab+0xc2/0x120 [ 1053.832474][T20171] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1053.832512][T20171] ? d_instantiate+0x8a/0xb0 [ 1053.832549][T20171] ? d_instantiate+0x8a/0xb0 [ 1053.832584][T20171] ? alloc_empty_file+0x5b/0x1c0 [ 1053.832629][T20171] alloc_empty_file+0x5b/0x1c0 [ 1053.832669][T20171] alloc_file_pseudo+0x183/0x290 [ 1053.832711][T20171] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1053.832752][T20171] ? security_inode_init_security_anon+0x7b/0x230 [ 1053.832798][T20171] __anon_inode_getfile+0xe8/0x280 [ 1053.832835][T20171] new_userfaultfd+0x255/0x400 [ 1053.832873][T20171] __x64_sys_userfaultfd+0x4b/0xb0 [ 1053.832908][T20171] do_syscall_64+0x115/0x840 [ 1053.832939][T20171] ? clear_bhb_loop+0x70/0xc0 [ 1053.832969][T20171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.832993][T20171] RIP: 0033:0x7f85eef9e0d9 [ 1053.833013][T20171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.833037][T20171] RSP: 002b:00007f85efe9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1053.833060][T20171] RAX: ffffffffffffffda RBX: 00007f85ef225fa0 RCX: 00007f85eef9e0d9 [ 1053.833076][T20171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1053.833089][T20171] RBP: 00007f85ef035024 R08: 0000000000000000 R09: 0000000000000000 [ 1053.833104][T20171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.833117][T20171] R13: 00007f85ef226038 R14: 00007f85ef225fa0 R15: 00007ffe6195a758 [ 1053.833150][T20171] [ 1054.046547][ T5624] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1054.175782][ T3102] hid_parser_main: 10 callbacks suppressed [ 1054.175807][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.194557][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.202361][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.210175][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.217961][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.227280][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.235109][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.245768][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.286172][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.309842][ T3102] hid-generic 0000:0000:9B79F399.0018: unknown main item tag 0x0 [ 1054.330821][ T3102] hid-generic 0000:0000:9B79F399.0018: item fetching failed at offset 23/25 [ 1054.357533][ T3102] hid-generic 0000:0000:9B79F399.0018: probe with driver hid-generic failed with error -22 [ 1054.433060][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.439516][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.178817][ T5624] Bluetooth: hci2: command 0x2016 tx timeout [ 1057.489865][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'. [ 1058.128748][ T5714] hid-generic 0000:0000:2AB833E9.0019: collection stack underflow [ 1058.145225][ T5714] hid-generic 0000:0000:2AB833E9.0019: item 0 0 0 12 parsing failed [ 1058.156554][ T5714] hid-generic 0000:0000:2AB833E9.0019: probe with driver hid-generic failed with error -22 [ 1058.258916][T10611] Bluetooth: hci2: command 0x2016 tx timeout [ 1059.028671][T20258] ksmbd: Unknown IPC event: 14, ignore. [ 1059.234113][T20268] FAULT_INJECTION: forcing a failure. [ 1059.234113][T20268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.268247][T20268] CPU: 1 UID: 0 PID: 20268 Comm: syz.3.1846 Not tainted syzkaller #0 PREEMPT(full) [ 1059.268281][T20268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1059.268298][T20268] Call Trace: [ 1059.268307][T20268] [ 1059.268317][T20268] dump_stack_lvl+0x100/0x190 [ 1059.268355][T20268] should_fail_ex.cold+0x5/0xa [ 1059.268386][T20268] _copy_to_user+0x32/0xd0 [ 1059.268433][T20268] simple_read_from_buffer+0xcb/0x170 [ 1059.268492][T20268] proc_fail_nth_read+0x1af/0x230 [ 1059.268535][T20268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1059.268579][T20268] ? rw_verify_area+0xce/0x6d0 [ 1059.268626][T20268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1059.268667][T20268] vfs_read+0x1e4/0xb40 [ 1059.268698][T20268] ? __pfx_vfs_read+0x10/0x10 [ 1059.268723][T20268] ? __fget_files+0x215/0x3d0 [ 1059.268758][T20268] ? __fget_files+0x21f/0x3d0 [ 1059.268795][T20268] ksys_read+0x12a/0x250 [ 1059.268820][T20268] ? __pfx_ksys_read+0x10/0x10 [ 1059.268858][T20268] do_syscall_64+0x115/0x840 [ 1059.268892][T20268] ? clear_bhb_loop+0x70/0xc0 [ 1059.268927][T20268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.268957][T20268] RIP: 0033:0x7f500ab5e90e [ 1059.268978][T20268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1059.269005][T20268] RSP: 002b:00007f500b9b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1059.269031][T20268] RAX: ffffffffffffffda RBX: 00007f500b9b76c0 RCX: 00007f500ab5e90e [ 1059.269049][T20268] RDX: 000000000000000f RSI: 00007f500b9b70a0 RDI: 0000000000000004 [ 1059.269066][T20268] RBP: 00007f500b9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.269082][T20268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.269099][T20268] R13: 00007f500ae26038 R14: 00007f500ae25fa0 R15: 00007ffce0c572c8 [ 1059.269137][T20268] [ 1061.618747][T10611] Bluetooth: hci2: command 0x2016 tx timeout [ 1062.175455][T20310] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1062.370757][T20318] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1064.444872][T20367] ksmbd: Unknown IPC event: 14, ignore. [ 1065.996856][T20401] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1074.136310][T20511] FAULT_INJECTION: forcing a failure. [ 1074.136310][T20511] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.190715][T20511] CPU: 0 UID: 0 PID: 20511 Comm: syz.2.1887 Not tainted syzkaller #0 PREEMPT(full) [ 1074.190752][T20511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1074.190769][T20511] Call Trace: [ 1074.190779][T20511] [ 1074.190790][T20511] dump_stack_lvl+0x100/0x190 [ 1074.190831][T20511] should_fail_ex.cold+0x5/0xa [ 1074.190865][T20511] should_failslab+0xc2/0x120 [ 1074.190909][T20511] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1074.190947][T20511] ? d_instantiate+0x8a/0xb0 [ 1074.190981][T20511] ? d_instantiate+0x8a/0xb0 [ 1074.191016][T20511] ? alloc_empty_file+0x5b/0x1c0 [ 1074.191062][T20511] alloc_empty_file+0x5b/0x1c0 [ 1074.191105][T20511] alloc_file_pseudo+0x183/0x290 [ 1074.191146][T20511] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1074.191183][T20511] ? security_inode_init_security_anon+0x7b/0x230 [ 1074.191248][T20511] __anon_inode_getfile+0xe8/0x280 [ 1074.191313][T20511] new_userfaultfd+0x255/0x400 [ 1074.191365][T20511] __x64_sys_userfaultfd+0x4b/0xb0 [ 1074.191401][T20511] do_syscall_64+0x115/0x840 [ 1074.191440][T20511] ? clear_bhb_loop+0x70/0xc0 [ 1074.191481][T20511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.191515][T20511] RIP: 0033:0x7fb36119e0d9 [ 1074.191540][T20511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.191571][T20511] RSP: 002b:00007fb362095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1074.191601][T20511] RAX: ffffffffffffffda RBX: 00007fb361425fa0 RCX: 00007fb36119e0d9 [ 1074.191622][T20511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1074.191645][T20511] RBP: 00007fb361235024 R08: 0000000000000000 R09: 0000000000000000 [ 1074.191665][T20511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.191683][T20511] R13: 00007fb361426038 R14: 00007fb361425fa0 R15: 00007fff2ab82aa8 [ 1074.191723][T20511] [ 1074.416455][ T5624] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1076.498869][ T5624] Bluetooth: hci3: command 0x2016 tx timeout [ 1077.756964][T20558] FAULT_INJECTION: forcing a failure. [ 1077.756964][T20558] name failslab, interval 1, probability 0, space 0, times 0 [ 1077.775161][T20558] CPU: 0 UID: 0 PID: 20558 Comm: syz.4.1895 Tainted: G L syzkaller #0 PREEMPT(full) [ 1077.775196][T20558] Tainted: [L]=SOFTLOCKUP [ 1077.775205][T20558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1077.775218][T20558] Call Trace: [ 1077.775225][T20558] [ 1077.775233][T20558] dump_stack_lvl+0x100/0x190 [ 1077.775267][T20558] should_fail_ex.cold+0x5/0xa [ 1077.775294][T20558] should_failslab+0xc2/0x120 [ 1077.775328][T20558] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1077.775359][T20558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.775384][T20558] ? __alloc_skb+0x140/0x710 [ 1077.775425][T20558] __alloc_skb+0x140/0x710 [ 1077.775460][T20558] ? __pfx___alloc_skb+0x10/0x10 [ 1077.775492][T20558] ? net_generic+0xea/0x2a0 [ 1077.775518][T20558] ? net_generic+0xea/0x2a0 [ 1077.775548][T20558] tipc_buf_acquire+0x26/0xe0 [ 1077.775575][T20558] tipc_msg_create+0x39/0x1d0 [ 1077.775603][T20558] __tipc_shutdown+0xb86/0xed0 [ 1077.775639][T20558] ? __pfx___tipc_shutdown+0x10/0x10 [ 1077.775662][T20558] ? do_raw_spin_lock+0x128/0x260 [ 1077.775704][T20558] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1077.775730][T20558] ? __pfx_woken_wake_function+0x10/0x10 [ 1077.775760][T20558] ? tipc_sk_filtering+0x47d/0x590 [ 1077.775786][T20558] tipc_release+0xdb/0x1640 [ 1077.775808][T20558] ? down_write+0x146/0x1f0 [ 1077.775850][T20558] ? __pfx_down_write+0x10/0x10 [ 1077.775880][T20558] ? __pfx_locks_remove_file+0x10/0x10 [ 1077.775929][T20558] __sock_release+0xb3/0x260 [ 1077.775974][T20558] ? __pfx_sock_close+0x10/0x10 [ 1077.776009][T20558] sock_close+0x1c/0x30 [ 1077.776041][T20558] __fput+0x3ff/0xb50 [ 1077.776077][T20558] task_work_run+0x150/0x240 [ 1077.776113][T20558] ? __pfx_task_work_run+0x10/0x10 [ 1077.776155][T20558] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1077.776179][T20558] ? rcu_is_watching+0x12/0xc0 [ 1077.776209][T20558] do_syscall_64+0x652/0x840 [ 1077.776237][T20558] ? clear_bhb_loop+0x70/0xc0 [ 1077.776264][T20558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.776287][T20558] RIP: 0033:0x7fd296b9e0d9 [ 1077.776305][T20558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.776328][T20558] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1077.776349][T20558] RAX: 0000000000000000 RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 1077.776364][T20558] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1077.776377][T20558] RBP: 00007fd2979fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.776390][T20558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1077.776404][T20558] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 1077.776433][T20558] [ 1078.383077][T20566] vhci_hcd: not connected 4 [ 1078.391030][T10611] Bluetooth: hci3: Malformed HCI Event [ 1078.538410][T20566] ptp ptp0: delete virtual clock ptp15 [ 1078.588821][ T5624] Bluetooth: hci3: command 0x2016 tx timeout [ 1078.688427][T20566] ptp ptp0: delete virtual clock ptp14 [ 1078.724415][T20566] ptp ptp0: delete virtual clock ptp13 [ 1078.757505][T20566] ptp ptp0: delete virtual clock ptp12 [ 1078.769437][T20566] ptp ptp0: delete virtual clock ptp11 [ 1078.787040][T20566] ptp ptp0: delete virtual clock ptp10 [ 1078.800093][T20566] ptp ptp0: delete virtual clock ptp9 [ 1078.827409][T20566] ptp ptp0: delete virtual clock ptp8 [ 1078.843685][T20566] ptp ptp0: delete virtual clock ptp7 [ 1078.857777][T20566] ptp ptp0: delete virtual clock ptp6 [ 1078.868538][T20566] ptp ptp0: delete virtual clock ptp5 [ 1078.881488][T20566] ptp ptp0: delete virtual clock ptp4 [ 1078.902532][T20566] ptp ptp0: delete virtual clock ptp3 [ 1078.921244][T20566] ptp ptp0: delete virtual clock ptp2 [ 1078.941140][T20566] ptp ptp0: delete virtual clock ptp1 [ 1078.957998][T20566] ptp ptp0: only physical clock in use now [ 1079.157149][T20586] vhci_hcd: not connected 4 [ 1079.174830][ T5624] Bluetooth: hci1: Malformed HCI Event [ 1079.286218][T20586] ptp ptp0: only physical clock in use now [ 1079.317531][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1902'. [ 1079.359996][T20586] nbd: must specify a size in bytes for the device [ 1080.060049][T20611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1904'. [ 1082.017849][T20637] FAULT_INJECTION: forcing a failure. [ 1082.017849][T20637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.031986][T20637] CPU: 0 UID: 60928 PID: 20637 Comm: syz.2.1910 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.032028][T20637] Tainted: [L]=SOFTLOCKUP [ 1082.032038][T20637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.032055][T20637] Call Trace: [ 1082.032064][T20637] [ 1082.032073][T20637] dump_stack_lvl+0x100/0x190 [ 1082.032110][T20637] should_fail_ex.cold+0x5/0xa [ 1082.032143][T20637] _copy_to_user+0x32/0xd0 [ 1082.032192][T20637] simple_read_from_buffer+0xcb/0x170 [ 1082.032243][T20637] proc_fail_nth_read+0x1af/0x230 [ 1082.032286][T20637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.032331][T20637] ? rw_verify_area+0xce/0x6d0 [ 1082.032377][T20637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.032419][T20637] vfs_read+0x1e4/0xb40 [ 1082.032450][T20637] ? __pfx_vfs_read+0x10/0x10 [ 1082.032476][T20637] ? __fget_files+0x215/0x3d0 [ 1082.032510][T20637] ? __fget_files+0x21f/0x3d0 [ 1082.032547][T20637] ksys_read+0x12a/0x250 [ 1082.032572][T20637] ? __pfx_ksys_read+0x10/0x10 [ 1082.032614][T20637] do_syscall_64+0x115/0x840 [ 1082.032650][T20637] ? clear_bhb_loop+0x70/0xc0 [ 1082.032684][T20637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.032713][T20637] RIP: 0033:0x7fb36115e90e [ 1082.032736][T20637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1082.032763][T20637] RSP: 002b:00007fb362094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1082.032788][T20637] RAX: ffffffffffffffda RBX: 00007fb3620956c0 RCX: 00007fb36115e90e [ 1082.032806][T20637] RDX: 000000000000000f RSI: 00007fb3620950a0 RDI: 0000000000000004 [ 1082.032823][T20637] RBP: 00007fb362095090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.032839][T20637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.032855][T20637] R13: 00007fb361426038 R14: 00007fb361425fa0 R15: 00007fff2ab82aa8 [ 1082.032892][T20637] [ 1082.938387][ T5624] Bluetooth: hci1: unexpected event 0x10 length: 124 > 1 [ 1082.940845][T10611] Bluetooth: hci1: hardware error 0x00 [ 1083.059615][T20671] FAULT_INJECTION: forcing a failure. [ 1083.059615][T20671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.081520][T20671] CPU: 0 UID: 0 PID: 20671 Comm: syz.2.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.081562][T20671] Tainted: [L]=SOFTLOCKUP [ 1083.081572][T20671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1083.081588][T20671] Call Trace: [ 1083.081597][T20671] [ 1083.081608][T20671] dump_stack_lvl+0x100/0x190 [ 1083.081646][T20671] should_fail_ex.cold+0x5/0xa [ 1083.081677][T20671] _copy_to_user+0x32/0xd0 [ 1083.081730][T20671] device_read+0xc9d/0x1460 [ 1083.081829][T20671] ? iovec_from_user+0xda/0x140 [ 1083.081873][T20671] ? __pfx_device_read+0x10/0x10 [ 1083.081909][T20671] ? __pfx_default_wake_function+0x10/0x10 [ 1083.081943][T20671] ? apparmor_file_permission+0x13f/0x1c0 [ 1083.081981][T20671] ? security_file_permission+0x76/0x210 [ 1083.082027][T20671] ? rw_verify_area+0xce/0x6d0 [ 1083.082069][T20671] ? __pfx_device_read+0x10/0x10 [ 1083.082101][T20671] vfs_readv+0x5d8/0x8d0 [ 1083.082150][T20671] ? __pfx_vfs_readv+0x10/0x10 [ 1083.082196][T20671] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1083.082252][T20671] ? __fget_files+0x21f/0x3d0 [ 1083.082286][T20671] ? do_readv+0x13e/0x340 [ 1083.082324][T20671] do_readv+0x13e/0x340 [ 1083.082365][T20671] ? __pfx_do_readv+0x10/0x10 [ 1083.082415][T20671] do_syscall_64+0x115/0x840 [ 1083.082448][T20671] ? clear_bhb_loop+0x70/0xc0 [ 1083.082482][T20671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.082509][T20671] RIP: 0033:0x7fb36119e0d9 [ 1083.082531][T20671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.082556][T20671] RSP: 002b:00007fb362095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1083.082581][T20671] RAX: ffffffffffffffda RBX: 00007fb361425fa0 RCX: 00007fb36119e0d9 [ 1083.082599][T20671] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 1083.082615][T20671] RBP: 00007fb362095090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.082631][T20671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.082647][T20671] R13: 00007fb361426038 R14: 00007fb361425fa0 R15: 00007fff2ab82aa8 [ 1083.082682][T20671] [ 1085.059087][T10611] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1085.754649][T13405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.053106][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1086.061112][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1086.074377][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1086.084218][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1086.091875][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1086.154395][T13405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.571669][T13405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.020416][T13405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.582436][T13405] bridge_slave_1: left allmulticast mode [ 1087.590061][T13405] bridge_slave_1: left promiscuous mode [ 1087.596354][T13405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.611424][T13405] bridge_slave_0: left allmulticast mode [ 1087.628682][T13405] bridge_slave_0: left promiscuous mode [ 1087.636099][T13405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.917096][T20758] ksmbd: Unknown IPC event: 14, ignore. [ 1087.990838][T13405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.027627][T13405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.065184][T13405] bond0 (unregistering): Released all slaves [ 1088.178733][T10611] Bluetooth: hci3: command tx timeout [ 1089.352840][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1089.652561][T20723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.662280][T20723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.680502][T20723] bridge_slave_0: entered allmulticast mode [ 1089.689859][T20723] bridge_slave_0: entered promiscuous mode [ 1089.698844][T20723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.706696][T20723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.714416][T20723] bridge_slave_1: entered allmulticast mode [ 1089.722266][T20723] bridge_slave_1: entered promiscuous mode [ 1089.778782][T20723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.795278][T20723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.923940][T13405] hsr_slave_0: left promiscuous mode [ 1089.959271][T13405] hsr_slave_1: left promiscuous mode [ 1089.982788][T13405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.009381][T13405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.033132][T13405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.050579][T13405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.066352][T13405] veth1_macvtap: left promiscuous mode [ 1090.079857][T13405] veth0_macvtap: left promiscuous mode [ 1090.092013][T13405] veth1_vlan: left promiscuous mode [ 1090.102083][T13405] veth0_vlan: left promiscuous mode [ 1090.260931][T10611] Bluetooth: hci3: command tx timeout [ 1090.643406][T13405] team0 (unregistering): Port device team_slave_1 removed [ 1090.684802][T13405] team0 (unregistering): Port device team_slave_0 removed [ 1090.998979][T20723] team0: Port device team_slave_0 added [ 1091.032381][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1091.045842][T20723] team0: Port device team_slave_1 added [ 1091.272296][T20723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.289605][T20723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.336618][T20723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.348571][T20826] FAULT_INJECTION: forcing a failure. [ 1091.348571][T20826] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.362664][T20826] CPU: 1 UID: 0 PID: 20826 Comm: syz.4.1940 Tainted: G L syzkaller #0 PREEMPT(full) [ 1091.362707][T20826] Tainted: [L]=SOFTLOCKUP [ 1091.362718][T20826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1091.362735][T20826] Call Trace: [ 1091.362744][T20826] [ 1091.362755][T20826] dump_stack_lvl+0x100/0x190 [ 1091.362794][T20826] should_fail_ex.cold+0x5/0xa [ 1091.362827][T20826] should_failslab+0xc2/0x120 [ 1091.362877][T20826] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1091.362918][T20826] ? d_instantiate+0x8a/0xb0 [ 1091.362953][T20826] ? d_instantiate+0x8a/0xb0 [ 1091.362988][T20826] ? alloc_empty_file+0x5b/0x1c0 [ 1091.363033][T20826] alloc_empty_file+0x5b/0x1c0 [ 1091.363074][T20826] alloc_file_pseudo+0x183/0x290 [ 1091.363116][T20826] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1091.363156][T20826] ? security_inode_init_security_anon+0x7b/0x230 [ 1091.363202][T20826] __anon_inode_getfile+0xe8/0x280 [ 1091.363247][T20826] new_userfaultfd+0x255/0x400 [ 1091.363294][T20826] __x64_sys_userfaultfd+0x4b/0xb0 [ 1091.363327][T20826] do_syscall_64+0x115/0x840 [ 1091.363365][T20826] ? clear_bhb_loop+0x70/0xc0 [ 1091.363401][T20826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.363431][T20826] RIP: 0033:0x7fd296b9e0d9 [ 1091.363454][T20826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.363481][T20826] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1091.363509][T20826] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 1091.363528][T20826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1091.363545][T20826] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1091.363563][T20826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.363580][T20826] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 1091.363618][T20826] [ 1091.401178][T10611] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1091.598935][T20723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.612518][T20723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.643455][T20723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.914864][T20723] hsr_slave_0: entered promiscuous mode [ 1091.924133][T20723] hsr_slave_1: entered promiscuous mode [ 1092.259123][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1092.338869][T10611] Bluetooth: hci3: command tx timeout [ 1093.619065][T10611] Bluetooth: hci0: command 0x2016 tx timeout [ 1093.700956][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1094.419558][T10611] Bluetooth: hci3: command tx timeout [ 1094.855755][T20723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1094.876296][T20723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1094.894739][T20723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1094.922745][T20723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1095.067866][T20723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1095.098209][T20723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1095.340629][T20723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1095.360131][T20723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1095.698829][T10611] Bluetooth: hci0: command 0x2016 tx timeout [ 1096.749710][T20723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.785166][T20723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.820588][T18316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.827760][T18316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.885552][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.892841][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.948206][T20723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.307168][T20723] veth0_vlan: entered promiscuous mode [ 1099.358487][T20723] veth1_vlan: entered promiscuous mode [ 1099.731069][T20723] veth0_macvtap: entered promiscuous mode [ 1099.751348][T21044] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1099.899918][T20723] veth1_macvtap: entered promiscuous mode [ 1100.306990][T20723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.340544][T20723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.510703][T18316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.524374][T18316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.769166][T18315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.268281][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.312156][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.380143][T18298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.852677][T18315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.876410][T18315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.156776][T21078] FAULT_INJECTION: forcing a failure. [ 1102.156776][T21078] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.173778][T21078] CPU: 1 UID: 0 PID: 21078 Comm: syz.2.1929 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.173824][T21078] Tainted: [L]=SOFTLOCKUP [ 1102.173834][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.173852][T21078] Call Trace: [ 1102.173861][T21078] [ 1102.173872][T21078] dump_stack_lvl+0x100/0x190 [ 1102.173912][T21078] should_fail_ex.cold+0x5/0xa [ 1102.173946][T21078] should_failslab+0xc2/0x120 [ 1102.173992][T21078] __kmalloc_noprof+0xfc/0x820 [ 1102.174031][T21078] ? string_escape_mem+0x746/0xe00 [ 1102.174065][T21078] ? kstrdup_quotable+0xc2/0x190 [ 1102.174104][T21078] kstrdup_quotable+0xc2/0x190 [ 1102.174138][T21078] ? __pfx_kstrdup_quotable+0x10/0x10 [ 1102.174174][T21078] ? get_cmdline+0x86/0x360 [ 1102.174224][T21078] kstrdup_quotable_cmdline+0x127/0x210 [ 1102.174264][T21078] __report_access+0x4b/0x230 [ 1102.174309][T21078] ? _raw_spin_unlock_irq+0x23/0x50 [ 1102.174347][T21078] task_work_run+0x150/0x240 [ 1102.174397][T21078] ? __pfx_task_work_run+0x10/0x10 [ 1102.174454][T21078] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1102.174495][T21078] ? rcu_is_watching+0x12/0xc0 [ 1102.174539][T21078] do_syscall_64+0x652/0x840 [ 1102.174580][T21078] ? clear_bhb_loop+0x70/0xc0 [ 1102.174618][T21078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.174650][T21078] RIP: 0033:0x7efcde39e0d9 [ 1102.174675][T21078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.174705][T21078] RSP: 002b:00007efcdf27e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 1102.174734][T21078] RAX: ffffffffffffffff RBX: 00007efcde625fa0 RCX: 00007efcde39e0d9 [ 1102.174754][T21078] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000001 [ 1102.174773][T21078] RBP: 00007efcde435024 R08: 0000000000000004 R09: 0000000000000000 [ 1102.174792][T21078] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 1102.174811][T21078] R13: 00007efcde626038 R14: 00007efcde625fa0 R15: 00007ffde1877ac8 [ 1102.174850][T21078] [ 1102.174937][T21078] ptrace attach of "(null)"[20723] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[21078] [ 1102.389445][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'. [ 1103.068828][T21096] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1103.076693][T21095] FAULT_INJECTION: forcing a failure. [ 1103.076693][T21095] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.093716][T21095] CPU: 0 UID: 0 PID: 21095 Comm: syz.0.1960 Tainted: G L syzkaller #0 PREEMPT(full) [ 1103.093759][T21095] Tainted: [L]=SOFTLOCKUP [ 1103.093770][T21095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1103.093786][T21095] Call Trace: [ 1103.093794][T21095] [ 1103.093805][T21095] dump_stack_lvl+0x100/0x190 [ 1103.093847][T21095] should_fail_ex.cold+0x5/0xa [ 1103.093880][T21095] should_failslab+0xc2/0x120 [ 1103.093931][T21095] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1103.093969][T21095] ? d_instantiate+0x8a/0xb0 [ 1103.094004][T21095] ? d_instantiate+0x8a/0xb0 [ 1103.094038][T21095] ? alloc_empty_file+0x5b/0x1c0 [ 1103.094081][T21095] alloc_empty_file+0x5b/0x1c0 [ 1103.094120][T21095] alloc_file_pseudo+0x183/0x290 [ 1103.094160][T21095] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1103.094199][T21095] ? security_inode_init_security_anon+0x7b/0x230 [ 1103.094244][T21095] __anon_inode_getfile+0xe8/0x280 [ 1103.094287][T21095] new_userfaultfd+0x255/0x400 [ 1103.094332][T21095] __x64_sys_userfaultfd+0x4b/0xb0 [ 1103.094363][T21095] do_syscall_64+0x115/0x840 [ 1103.094399][T21095] ? clear_bhb_loop+0x70/0xc0 [ 1103.094435][T21095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.094465][T21095] RIP: 0033:0x7f85eef9e0d9 [ 1103.094489][T21095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.094515][T21095] RSP: 002b:00007f85efe9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1103.094538][T21095] RAX: ffffffffffffffda RBX: 00007f85ef225fa0 RCX: 00007f85eef9e0d9 [ 1103.094554][T21095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1103.094568][T21095] RBP: 00007f85ef035024 R08: 0000000000000000 R09: 0000000000000000 [ 1103.094582][T21095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.094596][T21095] R13: 00007f85ef226038 R14: 00007f85ef225fa0 R15: 00007ffe6195a758 [ 1103.094626][T21095] [ 1103.302168][ T5624] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1105.379042][ T5624] Bluetooth: hci2: command 0x2016 tx timeout [ 1106.612656][T21143] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1107.469045][T10611] Bluetooth: hci2: command 0x2016 tx timeout [ 1110.732962][T21213] FAULT_INJECTION: forcing a failure. [ 1110.732962][T21213] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.747744][T21213] CPU: 0 UID: 0 PID: 21213 Comm: syz.2.1976 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.747795][T21213] Tainted: [L]=SOFTLOCKUP [ 1110.747807][T21213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.747827][T21213] Call Trace: [ 1110.747838][T21213] [ 1110.747850][T21213] dump_stack_lvl+0x100/0x190 [ 1110.747897][T21213] should_fail_ex.cold+0x5/0xa [ 1110.747937][T21213] should_failslab+0xc2/0x120 [ 1110.747992][T21213] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1110.748034][T21213] ? d_instantiate+0x8a/0xb0 [ 1110.748075][T21213] ? d_instantiate+0x8a/0xb0 [ 1110.748116][T21213] ? alloc_empty_file+0x5b/0x1c0 [ 1110.748170][T21213] alloc_empty_file+0x5b/0x1c0 [ 1110.748215][T21213] alloc_file_pseudo+0x183/0x290 [ 1110.748264][T21213] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1110.748313][T21213] ? security_inode_init_security_anon+0x7b/0x230 [ 1110.748379][T21213] __anon_inode_getfile+0xe8/0x280 [ 1110.748424][T21213] new_userfaultfd+0x255/0x400 [ 1110.748469][T21213] __x64_sys_userfaultfd+0x4b/0xb0 [ 1110.748501][T21213] do_syscall_64+0x115/0x840 [ 1110.748535][T21213] ? clear_bhb_loop+0x70/0xc0 [ 1110.748565][T21213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.748593][T21213] RIP: 0033:0x7efcde39e0d9 [ 1110.748616][T21213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.748645][T21213] RSP: 002b:00007efcdf27e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1110.748672][T21213] RAX: ffffffffffffffda RBX: 00007efcde625fa0 RCX: 00007efcde39e0d9 [ 1110.748691][T21213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1110.748708][T21213] RBP: 00007efcde435024 R08: 0000000000000000 R09: 0000000000000000 [ 1110.748726][T21213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1110.748744][T21213] R13: 00007efcde626038 R14: 00007efcde625fa0 R15: 00007ffde1877ac8 [ 1110.748780][T21213] [ 1111.038706][ T5624] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1112.758356][T21242] FAULT_INJECTION: forcing a failure. [ 1112.758356][T21242] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.830875][T21242] CPU: 0 UID: 0 PID: 21242 Comm: syz.2.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.830918][T21242] Tainted: [L]=SOFTLOCKUP [ 1112.830928][T21242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1112.830944][T21242] Call Trace: [ 1112.830953][T21242] [ 1112.830963][T21242] dump_stack_lvl+0x100/0x190 [ 1112.831002][T21242] should_fail_ex.cold+0x5/0xa [ 1112.831033][T21242] should_failslab+0xc2/0x120 [ 1112.831074][T21242] __kmalloc_cache_noprof+0x91/0x6c0 [ 1112.831106][T21242] ? alloc_pipe_info+0x10e/0x590 [ 1112.831141][T21242] alloc_pipe_info+0x10e/0x590 [ 1112.831175][T21242] splice_direct_to_actor+0x78f/0xa30 [ 1112.831209][T21242] ? __pfx_direct_splice_actor+0x10/0x10 [ 1112.831242][T21242] ? __pfx_aa_file_perm+0x10/0x10 [ 1112.831287][T21242] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1112.831329][T21242] do_splice_direct+0x174/0x240 [ 1112.831360][T21242] ? __pfx_do_splice_direct+0x10/0x10 [ 1112.831392][T21242] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1112.831427][T21242] ? rw_verify_area+0xce/0x6d0 [ 1112.831471][T21242] do_sendfile+0xadc/0xe20 [ 1112.831521][T21242] ? __pfx_do_sendfile+0x10/0x10 [ 1112.831568][T21242] ? sched_clock+0x38/0x60 [ 1112.831597][T21242] ? sched_clock_cpu+0x6c/0x570 [ 1112.831643][T21242] __x64_sys_sendfile64+0x1d8/0x220 [ 1112.831685][T21242] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1112.831727][T21242] do_syscall_64+0x115/0x840 [ 1112.831761][T21242] ? clear_bhb_loop+0x70/0xc0 [ 1112.831796][T21242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.831825][T21242] RIP: 0033:0x7efcde39e0d9 [ 1112.831847][T21242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.831875][T21242] RSP: 002b:00007efcdf25d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1112.831905][T21242] RAX: ffffffffffffffda RBX: 00007efcde626090 RCX: 00007efcde39e0d9 [ 1112.831923][T21242] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1112.831939][T21242] RBP: 00007efcdf25d090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.831954][T21242] R10: 0100400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1112.831971][T21242] R13: 00007efcde626128 R14: 00007efcde626090 R15: 00007ffde1877ac8 [ 1112.832006][T21242] [ 1113.138730][T10611] Bluetooth: hci3: command 0x2016 tx timeout [ 1113.768561][T21266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'. [ 1115.216556][T21300] FAULT_INJECTION: forcing a failure. [ 1115.216556][T21300] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.231076][T10611] Bluetooth: hci3: command 0x2016 tx timeout [ 1115.240000][T21300] CPU: 0 UID: 0 PID: 21300 Comm: syz.2.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.240045][T21300] Tainted: [L]=SOFTLOCKUP [ 1115.240055][T21300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1115.240072][T21300] Call Trace: [ 1115.240081][T21300] [ 1115.240091][T21300] dump_stack_lvl+0x100/0x190 [ 1115.240132][T21300] should_fail_ex.cold+0x5/0xa [ 1115.240166][T21300] should_failslab+0xc2/0x120 [ 1115.240210][T21300] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1115.240247][T21300] ? d_instantiate+0x8a/0xb0 [ 1115.240282][T21300] ? d_instantiate+0x8a/0xb0 [ 1115.240315][T21300] ? alloc_empty_file+0x5b/0x1c0 [ 1115.240359][T21300] alloc_empty_file+0x5b/0x1c0 [ 1115.240400][T21300] alloc_file_pseudo+0x183/0x290 [ 1115.240450][T21300] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1115.240490][T21300] ? security_inode_init_security_anon+0x7b/0x230 [ 1115.240537][T21300] __anon_inode_getfile+0xe8/0x280 [ 1115.240581][T21300] new_userfaultfd+0x255/0x400 [ 1115.240629][T21300] __x64_sys_userfaultfd+0x4b/0xb0 [ 1115.240662][T21300] do_syscall_64+0x115/0x840 [ 1115.240700][T21300] ? clear_bhb_loop+0x70/0xc0 [ 1115.240735][T21300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.240765][T21300] RIP: 0033:0x7efcde39e0d9 [ 1115.240787][T21300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.240816][T21300] RSP: 002b:00007efcdf27e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1115.240843][T21300] RAX: ffffffffffffffda RBX: 00007efcde625fa0 RCX: 00007efcde39e0d9 [ 1115.240861][T21300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1115.240879][T21300] RBP: 00007efcde435024 R08: 0000000000000000 R09: 0000000000000000 [ 1115.240897][T21300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1115.240915][T21300] R13: 00007efcde626038 R14: 00007efcde625fa0 R15: 00007ffde1877ac8 [ 1115.240952][T21300] [ 1115.490779][T10611] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1115.861593][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.868705][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.539349][T10611] Bluetooth: hci3: command 0x2016 tx timeout [ 1117.853943][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1995'. [ 1119.618714][ T5624] Bluetooth: hci3: command 0x2016 tx timeout [ 1121.458293][T21392] FAULT_INJECTION: forcing a failure. [ 1121.458293][T21392] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.474739][T21392] CPU: 1 UID: 0 PID: 21392 Comm: syz.0.2003 Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.474788][T21392] Tainted: [L]=SOFTLOCKUP [ 1121.474800][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1121.474842][T21392] Call Trace: [ 1121.474852][T21392] [ 1121.474865][T21392] dump_stack_lvl+0x100/0x190 [ 1121.474910][T21392] should_fail_ex.cold+0x5/0xa [ 1121.474958][T21392] should_failslab+0xc2/0x120 [ 1121.475010][T21392] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1121.475054][T21392] ? d_instantiate+0x8a/0xb0 [ 1121.475095][T21392] ? d_instantiate+0x8a/0xb0 [ 1121.475137][T21392] ? alloc_empty_file+0x5b/0x1c0 [ 1121.475190][T21392] alloc_empty_file+0x5b/0x1c0 [ 1121.475238][T21392] alloc_file_pseudo+0x183/0x290 [ 1121.475288][T21392] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1121.475336][T21392] ? security_inode_init_security_anon+0x7b/0x230 [ 1121.475390][T21392] __anon_inode_getfile+0xe8/0x280 [ 1121.475444][T21392] new_userfaultfd+0x255/0x400 [ 1121.475499][T21392] __x64_sys_userfaultfd+0x4b/0xb0 [ 1121.475538][T21392] do_syscall_64+0x115/0x840 [ 1121.475581][T21392] ? clear_bhb_loop+0x70/0xc0 [ 1121.475624][T21392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.475661][T21392] RIP: 0033:0x7f85eef9e0d9 [ 1121.475688][T21392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.475722][T21392] RSP: 002b:00007f85efe9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1121.475755][T21392] RAX: ffffffffffffffda RBX: 00007f85ef225fa0 RCX: 00007f85eef9e0d9 [ 1121.475778][T21392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1121.475798][T21392] RBP: 00007f85ef035024 R08: 0000000000000000 R09: 0000000000000000 [ 1121.475821][T21392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.475842][T21392] R13: 00007f85ef226038 R14: 00007f85ef225fa0 R15: 00007ffe6195a758 [ 1121.475887][T21392] [ 1121.670992][T10611] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1121.863143][ T5615] hid_parser_main: 31 callbacks suppressed [ 1121.863167][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.876929][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.885445][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.893364][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.901176][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.909019][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.916783][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.924821][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.933869][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.956928][ T5615] hid-generic 0000:0000:9B79F399.001A: unknown main item tag 0x0 [ 1121.985214][ T5615] hid-generic 0000:0000:9B79F399.001A: item fetching failed at offset 23/25 [ 1122.017529][ T5615] hid-generic 0000:0000:9B79F399.001A: probe with driver hid-generic failed with error -22 [ 1123.778707][ T5624] Bluetooth: hci2: command 0x2016 tx timeout [ 1124.012780][T21440] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2011'. [ 1124.025257][T21440] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2011'. [ 1124.144011][T21440] ------------[ cut here ]------------ [ 1124.149860][T21440] IS_ERR(old) [ 1124.149880][T21440] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.4.2011/21440 [ 1124.165107][T21440] Modules linked in: [ 1124.169867][T21440] CPU: 0 UID: 0 PID: 21440 Comm: syz.4.2011 Tainted: G L syzkaller #0 PREEMPT(full) [ 1124.181265][T21440] Tainted: [L]=SOFTLOCKUP [ 1124.185842][T21440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1124.196874][T21440] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 1124.204053][T21440] Code: 09 e8 fd 20 fe ff 48 8d 73 f0 48 c7 c2 10 9e 0b 82 48 c7 c7 80 6f c7 8e e8 86 e2 e1 ff eb ba bb fe ff ff ff e8 da 20 fe ff 90 <0f> 0b 90 eb ac e8 cf 20 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 1124.223797][T21440] RSP: 0018:ffffc900034978b0 EFLAGS: 00010246 [ 1124.229988][T21440] RAX: 0000000000080000 RBX: 00000000fffffffe RCX: ffffc90013b42000 [ 1124.237999][T21440] RDX: 0000000000080000 RSI: ffffffff820baf06 RDI: ffff88801e6e9f00 [ 1124.246035][T21440] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1124.254171][T21440] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82120e10 [ 1124.262215][T21440] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f0d5880 [ 1124.270284][T21440] FS: 00007fd2979fd6c0(0000) GS:ffff888123de7000(0000) knlGS:0000000000000000 [ 1124.279314][T21440] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1124.285945][T21440] CR2: 0000200000b46000 CR3: 000000005243a000 CR4: 00000000003526f0 [ 1124.294095][T21440] Call Trace: [ 1124.297401][T21440] [ 1124.301109][T21440] tracing_stop_cmdline_record+0x66/0xa0 [ 1124.306804][T21440] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 1124.313351][T21440] ftrace_event_set_open+0x224/0x380 [ 1124.318851][T21440] do_dentry_open+0x6ab/0x14d0 [ 1124.323692][T21440] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1124.329613][T21440] vfs_open+0x82/0x3f0 [ 1124.333744][T21440] path_openat+0x2873/0x4280 [ 1124.338394][T21440] ? __pfx_path_openat+0x10/0x10 [ 1124.343547][T21440] do_file_open+0x20e/0x430 [ 1124.348118][T21440] ? __pfx_do_file_open+0x10/0x10 [ 1124.353279][T21440] ? alloc_fd+0x471/0x7a0 [ 1124.357677][T21440] ? do_getname+0x191/0x390 [ 1124.362261][T21440] do_sys_openat2+0x10f/0x1e0 [ 1124.366988][T21440] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.372335][T21440] __x64_sys_openat+0x12d/0x210 [ 1124.377256][T21440] ? __pfx___x64_sys_openat+0x10/0x10 [ 1124.382768][T21440] do_syscall_64+0x115/0x840 [ 1124.387422][T21440] ? clear_bhb_loop+0x70/0xc0 [ 1124.392183][T21440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.398126][T21440] RIP: 0033:0x7fd296b9e0d9 [ 1124.403375][T21440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.423576][T21440] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1124.432126][T21440] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 1124.440178][T21440] RDX: 0000000000020201 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1124.448180][T21440] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1124.456247][T21440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.464291][T21440] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 1124.472358][T21440] [ 1124.475427][T21440] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1124.482745][T21440] CPU: 0 UID: 0 PID: 21440 Comm: syz.4.2011 Tainted: G L syzkaller #0 PREEMPT(full) [ 1124.493706][T21440] Tainted: [L]=SOFTLOCKUP [ 1124.498042][T21440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1124.508109][T21440] Call Trace: [ 1124.511404][T21440] [ 1124.514368][T21440] dump_stack_lvl+0x100/0x190 [ 1124.519091][T21440] vpanic+0x552/0x970 [ 1124.523094][T21440] ? __pfx_vpanic+0x10/0x10 [ 1124.527635][T21440] panic+0xd1/0xe0 [ 1124.531375][T21440] ? __pfx_panic+0x10/0x10 [ 1124.535820][T21440] check_panic_on_warn.cold+0x19/0x34 [ 1124.541213][T21440] ? tracepoint_probe_unregister+0x837/0xd10 [ 1124.547227][T21440] __warn.cold+0x191/0x318 [ 1124.551673][T21440] __report_bug+0x30f/0x440 [ 1124.556312][T21440] ? tracepoint_probe_unregister+0x837/0xd10 [ 1124.562329][T21440] ? __pfx___report_bug+0x10/0x10 [ 1124.567382][T21440] ? rcu_is_watching+0x12/0xc0 [ 1124.572185][T21440] ? trace_contention_end+0x126/0x160 [ 1124.577579][T21440] ? __mutex_lock+0x26d/0x1bd0 [ 1124.582374][T21440] ? tracepoint_probe_unregister+0x31/0xd10 [ 1124.588308][T21440] ? rcu_is_watching+0x12/0xc0 [ 1124.593101][T21440] ? tracepoint_probe_unregister+0x837/0xd10 [ 1124.599126][T21440] report_bug+0xb2/0x220 [ 1124.603396][T21440] ? tracepoint_probe_unregister+0x837/0xd10 [ 1124.609421][T21440] handle_bug+0x16a/0x2a0 [ 1124.613795][T21440] exc_invalid_op+0x17/0x50 [ 1124.618345][T21440] asm_exc_invalid_op+0x1a/0x20 [ 1124.623213][T21440] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 1124.629845][T21440] Code: 09 e8 fd 20 fe ff 48 8d 73 f0 48 c7 c2 10 9e 0b 82 48 c7 c7 80 6f c7 8e e8 86 e2 e1 ff eb ba bb fe ff ff ff e8 da 20 fe ff 90 <0f> 0b 90 eb ac e8 cf 20 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 1124.649477][T21440] RSP: 0018:ffffc900034978b0 EFLAGS: 00010246 [ 1124.655568][T21440] RAX: 0000000000080000 RBX: 00000000fffffffe RCX: ffffc90013b42000 [ 1124.663561][T21440] RDX: 0000000000080000 RSI: ffffffff820baf06 RDI: ffff88801e6e9f00 [ 1124.671578][T21440] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1124.679577][T21440] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82120e10 [ 1124.687566][T21440] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f0d5880 [ 1124.695558][T21440] ? __pfx_probe_sched_switch+0x10/0x10 [ 1124.701163][T21440] ? tracepoint_probe_unregister+0x836/0xd10 [ 1124.707201][T21440] tracing_stop_cmdline_record+0x66/0xa0 [ 1124.712879][T21440] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 1124.718908][T21440] ftrace_event_set_open+0x224/0x380 [ 1124.724228][T21440] do_dentry_open+0x6ab/0x14d0 [ 1124.729026][T21440] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1124.734870][T21440] vfs_open+0x82/0x3f0 [ 1124.738973][T21440] path_openat+0x2873/0x4280 [ 1124.743602][T21440] ? __pfx_path_openat+0x10/0x10 [ 1124.748588][T21440] do_file_open+0x20e/0x430 [ 1124.753134][T21440] ? __pfx_do_file_open+0x10/0x10 [ 1124.758214][T21440] ? alloc_fd+0x471/0x7a0 [ 1124.762563][T21440] ? do_getname+0x191/0x390 [ 1124.767092][T21440] do_sys_openat2+0x10f/0x1e0 [ 1124.771892][T21440] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.777143][T21440] __x64_sys_openat+0x12d/0x210 [ 1124.782048][T21440] ? __pfx___x64_sys_openat+0x10/0x10 [ 1124.787472][T21440] do_syscall_64+0x115/0x840 [ 1124.792138][T21440] ? clear_bhb_loop+0x70/0xc0 [ 1124.796859][T21440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.802783][T21440] RIP: 0033:0x7fd296b9e0d9 [ 1124.807215][T21440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.826855][T21440] RSP: 002b:00007fd2979fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1124.835295][T21440] RAX: ffffffffffffffda RBX: 00007fd296e25fa0 RCX: 00007fd296b9e0d9 [ 1124.843280][T21440] RDX: 0000000000020201 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1124.851269][T21440] RBP: 00007fd296c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1124.859261][T21440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.867267][T21440] R13: 00007fd296e26038 R14: 00007fd296e25fa0 R15: 00007ffc9b79ea58 [ 1124.875278][T21440] [ 1124.878905][T21440] Kernel Offset: disabled [ 1124.883247][T21440] Rebooting in 86400 seconds..