last executing test programs: 11.088945937s ago: executing program 2 (id=4183): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x310) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) keyctl$auto_KEYCTL_SEARCH(0xa, 0x31, 0x200000000000, 0x0, 0x8001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) lseek$auto(0x3, 0x0, 0x1) fcntl$auto(0xffffffffffffffff, 0x402, 0x1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000400)=""/89, 0x59) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x80002, 0x73) socket(0x2, 0xa, 0x4) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 10.98080648s ago: executing program 3 (id=4185): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1lP\x88K\xa9\x12a\x13R3\x00VI\xa7\x00\x00\x00\x00\x00\x00\x00\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2', 0x0) unshare$auto(0x40000080) bind$auto(0xffffffffffffffff, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x4) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r0 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fc"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00n', @ANYRES16=r0, @ANYBLOB="010329bd7000fbdbdf250a000000060001004002000005000200000000000800020048535200"], 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) fchmod$auto(r1, 0x9) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) bind$auto(r1, 0x0, 0xe) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x65) read$auto_userio_fops_userio(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0xc, {0x8, 0x5, 0xa, 0x2, 0x3, 0xff, 0xfffffe95, 0x3, 0x4}}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 10.777567543s ago: executing program 0 (id=4186): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x8000000000000006, 0x3, 0x4, 0x2a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x33) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0xd0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf9, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) r1 = socket(0x2c, 0xc, 0x5) r2 = io_uring_setup$auto(0x17, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x01\x00\x01\x00\x00\x00\x00\x00\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x200000007) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) recvmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000180)="5eee240e9ab90aaceb7ec1c8feaf9360020e13c7ce6d0e15f3bd3995435eb534e31b8f4fd7a440423beb15a5a1b78873aae58d7134525a833036063fd530673d1e4631e093a61ee122f9a78da8a078c4ebd0b6f01669eab6c7ed99c9b9b83b65", 0x800000, &(0x7f0000000380)={&(0x7f00000002c0)="cccecf96691effca4f77c0e01c9344799ebfd1c5ddf8ee6bd429fa4a70cdefcb67c461f6030e85303ebcae57372802821b0770daabd305cd232bfb28c0ca02c18ab9c8b478e387aac69a4160d933b2e429390a991525a5c1ce37a6c16b0f1630f2bddc92d0a113241de6eda54e3e00b27c3ef3e2f35793be41b352f3f0b3dd351968ac98046e3088ab438f29562bbd41b49662aec22aa6bfd08175a1eb85d4577ce5922527efe0", 0x237d}, 0x10000, &(0x7f00000003c0), 0x8000, 0xffffffff}, 0x10001}, 0x9, 0x8, &(0x7f0000000440)={0x663, 0x8}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x202, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x7ffff000) sendfile$auto(r1, r0, 0x0, 0xf) preadv$auto(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x2}, 0x2, 0x2, 0x3) mmap$auto(0x100000000637, 0x0, 0xfffffffffffffff8, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 9.052522257s ago: executing program 1 (id=4187): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000003c0), 0xffffffffffffffff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) r3 = io_uring_setup$auto(0x1, 0x0) r4 = fcntl$auto_F_GETOWN(r3, 0x9, 0xb4) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000016c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001680)={&(0x7f0000000400)=ANY=[@ANYBLOB="74120000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf252800000014127d801012078004005d800c003a0020000000000000000410c900c41e113dfb1282e70a919c378657cbfe8c3bea5dd4dd9ad94db4821bb4021edc9fe230fdb347640157a69c78838a68b6d4d335d476e9e392d4e862c8f39029a6e496e0a2f98db9a94cb470e085a99f92813c39e3ead3d07d3c3157b36b1942907cb23e26107a80bd75290fe7f942511fc4f5cdde63c06aaca4538b8eb71a36f67e28dedc4249d2d03886f0341fff0de78ae65aaa2b20b8180c3076d5e5fa4d413e70111e93f7cf9068e836e4dee31e04881fefbfcc791ae069c12121e6ed87a45d27842aa7223fb5490df2a240036ca4cbcc27127f7566af495550deeaf148e0efc61b5bd244ee86698535cb3f8a615b95242f8f878c3081c4ebc81a795556a0191e8e23c0bdf2032088313e37d4686ca300e5b0c5a04cfb5c31bfcfa9605fa6355d48244f0ea3f721389b6452f647f5d686585d72d606c78296f1f288045b01ecd43726e2c96e551902f7c4a66c43d8c6702ace325ec7c8c633741df42bf5dd8190e3fe886b5419534b3a08e592095489cd9c0c30328d06f4a2323159b0898448660cb9f295c60862dfb557e50a38c4705dd7b2c56afe474bcce48f74e3e0c3dcbdf4b879eb8133c3868a1098898ddc268b185269e1330bb221f0bcf391b337e9d2bb59ff0186961ae3d770c54d97d533981087ceeb1a1b030c96ad742bd529fe60e6c715b9713d5d8b124fc3b28bee6d60761557e898b9ace9bf2c6e5e8c35e4ff376b973e32e64c3ef99b8dbc41e592a68e2ee39630c34349da96bdf649d9ec393bf59adecb56e2bc2b4363d55f56403ca4e5d995af6145bb77bb9466d3cf3f63e6c3e833ed91885262f818cf2b919da7756a0b000d0095d7362f9a0de708f6d7ad25e0b445d259636afb75bf2a81196beeb8db2344a2cdd567ef0a046fa836b9ca4f539534e5ac901ab5bcc1665d577e3b83a3d5279af0c4a8a9e70eb11c5a5000d1407f134afbbbad6a381475620016a0df8b4969be641b3af629db1a098e64b128cce99ea934c208eafe45b0782cb7b01f1969ad2beaa6718e8bfb4316fd127552d1a1bb52a2f440b6ac8112600f590b11e7cdd27d6ed461f84a11f4c95f7e7f090c277900a2e2ce9e108d621455d4bf03e5b11e9ba76e5fe08914609f0d16d13651224b79d035eb1a9a2a9a15a6134bba6b018e15ac339a1635acb54e1d5c977729c81b19e67a86b746f6c269f36ff36e5018b4b27d516ddb4d6e7044b02bca3527fd042d88c7166e04027a8a08dc8873c62cb0a1031933145cd4665fdf61903ea57e1a65da6939bae652fa462e8f173c255a5cb67b9e83a3b918c352328ea41e4c122a419de8894f162ae6778d841e322f0747da7d70d9a1962ef2f7f3e414294ae062bc0a9f231f89332fa3d72b70e25b5aef934b66f4619a87caf9de3970a3b4df72100b9ffd5699c4bfb374d5c53abdcfe8061f8683b5998c45ef1d041184fd69009604f9e4f982d8ed1a5577d0e8ea40322c21929ec12fc4c54ce7112dbf046c47397e7edf242d21ea93381d9e9f216b3d4f8566e35f466f5399758cda6074dc3eeba1bf835dc8c09a23af9371ef60c182c702a6a7f516d32ba7692adb8aac82fe01f077ecfa988f5302eb3e5aadcb57c04776635ed3644ddc66c444d123529283935d2f5d96eabb2ba79b84466ad376df5f215225ce20b9213aa91552ff7013ece508dd969b72e4a960f9a7f8b01e5912c019d318235dfd32dd4f3aaafee774daa13ee86b4e61c0af0b63e19cf04c8e823092718e2d24f9dc655ca17bc4778f3f9c23661bb12300e522781abc1479dc7a63d5b449e5654ae11a0474a605b9d01ae4c2ccf0bcc90fef4605bee39dce662865b13ef00ed49ce27c7e07a09dd289e967ef2a7c9c07e03cf20497304628b29732dff00c6b207137e7a6ad706f41ddbedf43c61c90e158d063f3819ec22e465aadbf02b8cd6ebc8af9a12e9d7e16d9c224a9d044b78379e8817b282ec13bcb1da5704f57750ff82f6018bc75abcf17d0917d627ef8fdff6282790fff3c24e0a72fc6f8459243a00a480432fc7033ee8fc6daa7096cc4e22315a99d83a31725c56a3676b9e40ae328598cc4dd20ad22879b872f421c26d7883bbad8ae702b9816deba71fdc823c71f8f6cf41f626f67f45d99cc2b747f1e3f0af573dea11fd445bb3aa70ad5c9e75318b01d380926a41d174b5e045f0f4bc26e9f22a7d60d00ab98549c6d87eabc06e22b1ae72d7d31233205d45e79410440b9a8eee9fbf7c21c35cde38b1724d1da1b2b753be5259bc3a2d2dd47a62fe025abbd6be82d3f29e4dd66c67cb61d2748ed6704069b2c2fdc5ea6a4fc3aa65cd7df71721787bf4805e4b74892747b48c6cf92a8e7332d83049c244f748496f98c687eb75c96160d6756f761c2c4685199d80f5470731963cc48ee49560e53dec3badc76215c32b5b6926d819c1f3ff0898c3f852730251626b5e1237051745ee51498e672a9776e6afdfee503a769033e4d808bfc0102af2b740d1808e8844e6fbb13b35ff2d84ec716afbe9b4c2ea158e92048734eb50cb94e99d1437db972474dc0a9cd5763396436eb6382615d422911a949218f4be7a1e981c0eacf479ac76ac3c70a34bc0061b5a4930182721d6a9d5b23b3618b375e409ce994af170af35235e889b4c19fff98561bc2acf010fb29206470a2fe590da6a9578246c50c6e4eac4aa2d50254958e9d96b2d1d789d955e61110ea11a9aff40e34e59a55b83aca67c2ef10e6c4b5e48d31ba95f5cee13215ef269d73d5ecaa1d14f2a31c38b48c5aad179fba73108c4ba617c4cbddd765e979f53835f5da6062b1382098277105b46e4663fc43bc96053998804aa3befed00d9142c148ffe8607cde01a6cc85b75c7fc820e1aadef16c53aa4b888e9773ed0f2492e16815a1bdb82a602e51b60286a4eb8b737a76efc453b64d60e2ccd3129dca7b7aebd4eb662d80a939e67ee3e957b94c2761c55c5a7f880d976629345ee329799bb15dfa82cf0881a1b2285f1039c4d235d1f299e8a6bf5e966b22a46f6ef2af58deb74bf75a7bd1f7b27f9a4bc73a7da2a9f2624317de6d02ccee996894781f0626869a62fc0ff3d517428144d00c08ac2edf7dd89a4b0a6b30d3663fa2a715aca96788c1d4d7ea751a799f9efe1d65c757b2537199ca0fcb65261c91604943ce96d2b63047e1be21a2bd49d70001b4813bd991a8f526b4685ff703ae9ca173e601dfe0e67abd2f7ad70b3db52da4a84f289ef74a2240465240a5950ccdf2e184aef2cd3bc262fd294b4873e90f6b564897fa82225ad86950b8ddf687add510a19a30581235a42aab46f664ba844641e9e4e9d3d169d4e9ac7733fe6fe558bbfb52d5d37462670c5c06213ce7bdd602c862c70cb81d1b3723fa9b48a7848879deee1f8c6b2b2379d0deb8e24e3dc655e8bc15a2ae7abcd91421c428e36c568665449273222ee72507c936b26073c8352068dc2a2e647f82113fb59ea4f731983f0b6f7b676d4a63145f82094ec85768b5ab41bda38380c8fb704399030ea01bbfd5fe5caaf4df901c3ab3d36733354c976325704de219b847faf8a45ae8ea135d302fe8c58e8f7c6ca3295ec69dac87389ce56c11a10fb3fe5b0a212cdcca177d3cd2bb0c3cc65d7f07cc0043236cad55943a3e7353872ddb01b031ecde47a14b22f85c345a7a7191c2be9264cd11d1545d313691abb6efce6a45c7724cc6078ae9cd4950af6a7bb6322f907e38063a66da4442261eaeef9bf37a0f4c0c4fb76ade0485c5e37d4a88d9fc22ed930ffcf454dee4df2178845b9cb2ca8018b84040bda87bd02e23f6bf9205ae809cb97ee72aa1edf2ab3b7e8c31fd94958aec64e67d635efa36e62034399ec5d769c9666932a5572227cbe1ce3604f2784078af476cf639181f55787a7a0a8f613e8c43c5b13741748861e15c0bd31b67df523c721efd876c5dd6eed08a7b3c7467f097413cae08831198fbac400968006eb358319f24a741e98b85cd77fba8204941926f308f4355d74c92c2a6235d618c663a43274b6b865511a9cf984a8832ee93c8dc25b4a0525b0fe3d088c66c2f0541f7d3343e17b04edb30c6daa7faf416f4153028e1176b91f6bdbb5cc73c5e71198ae859a78005891cd83be466631fb862984f646126df9d4cce0366cf83d0c2a4b19625acf119844c24ca52016c4fc75aa1252a9079e4a518d06ef3917494d958b5d0bdfd15505ab89884ae6ee5526b8db5c7ae8a1c7b166d091bd082464a60e2a75588be108246a09cbf8719522f3e96606c5c0fa5b3d4f869993fa3eefbb8c4f18858245a6f5bae68ab93bd348e301473a54e492bebebdfe72e85282033a6ff30a2b0b81675cd74ac5a2f49583157d66804735dc82ac1b186f51111feb7c06501676d8c3937346868cc75798a9097d8fe9e6897984d9f0e59a3c83da5701c01f1f90c0e7a2fe1d77c87f9e68d0adb8d7994b8a150b8c001d98cd1fcd4d7bf2d725202e4ee5331ee75c4885c0a5fca1e6f1f23971bd38cb6f7d9eb1553426759aeba47c196815a0fde90c1f93451e194f80fc85b3d9dcf731a8e0f1973b815cfe58bf273e0284f21cf029d840fac9a13be8f15ff2434fe49538bffbebaf1a123f893cb334ffff860f6e317f36fda595cd7fc336d9d32facafb3871529a6be87ed71e14d7e0d4d7cbb8fc9eed238bb436ac1c29451705abd93a99a82853bf7b95fbf008ac4362d20c1420cd4b0089fd0c68624707db3d41af43e35e21c199a9071ed4faac76e780392c0100a0733d44042bb29eaf00c29916c573a091e16ae3d34b1c9cf004f5238edfe31f04b10c61b4422da814918bc7dc83bc9162e7fbbd34bf18b960e2394445cf5187791c1e19519da3e14639c6a0c3b11be7e5bd97c60562966a8e1d70e536869024744842d53035d46ee814f1903edf66572d283992d9672c4ddf0c"], 0x1274}}, 0x4840) setpriority$auto_PRIO_PGRP(0x1, r4, 0x200) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000001080)="20edbfb0888b5f2ddea7f1e798fa1babfa3a3753ca8aee370a14bbe9ba001d428f2c884da4a5", 0x26) r6 = pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) futimesat$auto(r3, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x8, 0xa8d7}) r8 = setfsgid$auto(0xffffffffffffffff) statx$auto(r6, &(0x7f0000000000)='./file1\x00', 0x8, 0x7fffffff, &(0x7f0000000140)={0x8, 0xc, 0xb476, 0x0, r7, r8, 0x9, 0xb9, 0x3, 0x0, 0xe, 0x81, {0xb, 0x10000}, {0x1, 0x9}, {0x1ff, 0x7}, {0x5, 0x1}, 0x54, 0x6, 0x6, 0x401, 0x400000000006, 0x10000007, 0x6, 0x3, 0x40, 0x6, 0xffffffff, 0x9, [0x0, 0x10, 0x7fffffffffffffff, 0x81, 0xa, 0x7ffd, 0x6, 0x200000000000003, 0xc]}) keyctl$auto(0x1f, 0x1, 0x6, r8, 0x3ff) keyctl$auto(0x1f, r9, 0x6, r8, 0x401) 9.006560772s ago: executing program 2 (id=4188): unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = openat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9, 0x7) fcntl$auto_F_SETPIPE_SZ(r1, 0x407, 0x7ff) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r2, 0x0, 0x14) r3 = bpf$auto(0x8, 0x0, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0xfffffffffffffc01, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0xfffffffffffffffc, 0x800, 0x0, 0x8, 0x4000000000004, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x61a7, 0x200000, 0x40000, 0x40001, 0x863, 0xf, 0x2a002, 0x1fd, 0x0, 0x7f, 0x6, 0x0, 0x0, 0xfffffffe, 0x8, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x8000000007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x738, 0xfffffffffffffffd, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xfffffffffffffffd, 0x400000000000040, 0x81, 0x8a0, 0x10, 0x84, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, 0x100002, 0x5, 0x80000000003ff, 0x100, 0x0, 0x0, 0x8, 0x0, 0x4000000000000, 0x39]}, 0x800000000000b, 0xfffff18a) select$auto(0x6, &(0x7f0000000480)={[0x2, 0x2, 0x8000000000000001, 0x5, 0x5, 0xd, 0x7, 0x58a, 0x342, 0x1, 0xfffffffffffffff2, 0x6, 0x7ff, 0x9, 0x3ff, 0x3]}, &(0x7f0000000500)={[0x80000001, 0x8001, 0xc5af, 0xc, 0x8, 0x7, 0x7, 0xff, 0x6, 0xf, 0x2, 0x3ff, 0xfffffffffffffffb, 0x0, 0x1, 0x4]}, &(0x7f0000000580)={[0x1, 0xd, 0x9, 0x4, 0x6, 0x4, 0xf1a2, 0xff, 0x5, 0x0, 0xffffffff, 0x1, 0x1, 0xffff, 0x7, 0x4]}, &(0x7f0000000600)={0x1, 0x4}) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffff7effffd0c, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000380), r3) sendmsg$auto_NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000009652d126afa4898030af453b7319bdf9b62b33082f68e1a27a3d8bb76ed9f419a0738e64edd3949009dee66f99a6bad9e9cb893df905f22813f88798b4be1ba048783c73c4a2bbf96521ad458c665a402fca71f0961bdb0b0330f7f312c5ecb2", @ANYRES16=r5, @ANYBLOB="02002dbd7000ffdbdf25430000000600360001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = setfsuid$auto(0xee00) setresuid$auto(r6, 0x0, r6) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.992936416s ago: executing program 3 (id=4189): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = socket(0x9, 0x1, 0x0) setsockopt$auto(r0, 0x28, 0x1, 0x0, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) listen$auto(0xffffffffffffffff, 0x5ed) bind$auto(r1, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x52ac2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram12/discard_alignment\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x101, 0x0) socket(0x2d, 0x2, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0xe) writev$auto(r3, &(0x7f00000001c0)={&(0x7f0000000080)="ae987f80ed78bb7384049410fa8e1c9e394aad7bc23579599701347bc3", 0x6623}, 0x200000000074) bind$auto(0xffffffffffffffff, 0x0, 0x65) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.937594464s ago: executing program 0 (id=4190): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x20681, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r1, 0x400454ca, 0x38) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0x2, 0xc) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x121000, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) ioperm$auto(0x3, 0xe, 0x2000000000000149) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/kdamond_pid\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) mmap$auto(0x0, 0x8, 0x5f, 0x9b72, r3, 0x8000) unshare$auto(0x40000080) ioctl$auto_TUNSETVNETBE2(r1, 0x400454de, 0x0) write$auto(r0, &(0x7f0000000040)='\r>\x8fR\x17\x86i\xfb{o\xcf\x0ed\xcd(-\x7f{b8>\xb6\x0e\xad\x9d\xde\x1c\xb5\xd2\xa2\x858\xca\x9a\xc6\xb0V\x96\xba\x0e\xeb\xc2\xe5:\x06\xd2?\x94\x04\xd6\x10D\xb98J!\x01\xea\xd4\xb5\xa8\xcc\xdc]]\xe8\x8e', 0x7d) 7.351274685s ago: executing program 0 (id=4191): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) arch_prctl$auto_ARCH_SET_GS(0x1001, 0x1000000000000004) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x1d, 0x3, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) r1 = socket(0x28, 0x1, 0x0) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000003c0), 0x2004, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000400)={0xffffffff, r1}) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) shmctl$auto_SHM_LOCK(0x9, 0xb, &(0x7f00000005c0)={{0x3, 0x0, 0x0, 0xc, 0x2a, 0x7, 0x2}, 0x0, 0x10001, 0x1, 0x10001, @raw=0x3, @raw=0xb, 0x3ff, 0x0, &(0x7f0000000440)="ddb5785635639daff74fa414f5d280a4bc8c4c6d056e6df4c73fa558311d65b5ed2abc50c656e4cb2a042326a33bfc517511c006bb544bee425933cb7cf99c6313b73f1d25ae5ad9dd9adde76b5d8616ee73a8ad1227921be211ba3eda88f75009d2c1e624bf11379ee0a2afd7212e95900d924e0d16e7398f1a5f7b42f801b49fa93a0f9fe4123d2b", &(0x7f0000000500)="b9be9de269659a8d55c21bc0c0e1f17c1d8facebe8c52a34b28bffeb7867329d19ae5bb4c242876407ddf388c88951c012dc12e5bafc0a5bf694c4a9b96906c87ff477f56401e06b75c3a1c4e5ca9a3ef57650a31cbbcc0a35065c5712a90f3bcfd8350b9f6cd80049330371b7bf2daef886094fdef9f0b9f8df5d173d58b18804732cad6d2f34806a129ad6842094710fe128b3f8fcf9539f18b883478887b909ef23240e164b11f5ea225ff0c0528470583bcb1b605ffd64d1bb91009c"}) msgctl$auto_IPC_INFO(0x1, 0x3, &(0x7f00000006c0)={{0x1, 0x0, r4, 0x2c2, 0x2, 0x40, 0x1}, &(0x7f0000000640)=0x8, &(0x7f0000000680)=0x7, 0x1000, 0x8bb, 0x80, 0x248c, 0xb, 0xfffc, 0x9, 0xfff}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop12\x00', 0x80, 0x0) ioctl$auto_BLKGETSIZE(r5, 0x1260, 0x0) setfsuid$auto(0xee00) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x89802, 0x0) r7 = socket(0x1e, 0x804, 0x0) connect$auto(r7, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0x10) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @raw=0x4}) socket(0x2, 0x5, 0x0) bpf$auto(0x80000400, &(0x7f0000000000)=@bpf_attr_3={0x9, 0x9, 0xffffffffffff7fff, 0x5, 0x1fe, 0x2, 0x1, 0x884, 0x4007, "0108a5172d53c213b43038e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x7fffffffffffffff, 0x89, 0x9, 0xffff, 0x3ff, 0x7, @attach_btf_obj_fd, 0x440, 0xa, 0x7, 0x1ff, 0x9}, 0x9) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.084643902s ago: executing program 3 (id=4192): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) socket(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, 0x0) socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) r3 = io_uring_setup$auto(0x1, 0x0) r4 = fcntl$auto_F_GETOWN(r3, 0x9, 0xb4) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r2, 0x0, 0x4840) setpriority$auto_PRIO_PGRP(0x1, r4, 0x200) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000001080)="20edbfb0888b5f2ddea7f1e798fa1babfa3a3753ca8aee370a14bbe9ba001d428f2c884da4a553eef8b14a0c5282ce5fc4ea1b20343af80a54ce100f8d20929c64c1f628001a4702032f49", 0xff73) pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x10, 0x200, @inferred, @raw=0x5}) futimesat$auto(r3, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x8, 0xa8d7}) r5 = setfsgid$auto(0xffffffffffffffff) keyctl$auto(0x1f, 0x1, 0x6, r5, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, r5, 0x401) 6.857635295s ago: executing program 1 (id=4193): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1800af00", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf255500000004008480"], 0x18}}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x39) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x22a02, 0x0) write$auto(r1, 0x0, 0x1000000007e) ioctl$auto(0xffffffffffffffff, 0xc, 0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred=0xffffffffffffffff, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @inferred=0x0}, 0x2, 0x5, 0x4, @raw, @enumerated={0x2, 0x4, "23f7b11944d233964b2a5f32b66b0fe18e5b2d4edd0d9d16061791173f5412f21386d28cc66faa7a2336ad4b912a17fed2d89f48eefdf686b94fbc1bd2580477", 0x7fffffff, 0x2}, "7adec199a16a2311eacf2fc7ae6e9858eeb78db8d04fdd73340238d212b6debe0eda71bdd709254592b67f9ca1adb17884a16f7ce8cbce0bb32791702b8d7c38"}) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x2282, r3) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x6, r0, 0xd5, 0x0, 0x5, 0x3}) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001c80)={{r5, &(0x7f0000000340)="4d9a80c935ad48a6e0808ef13d9bef8058b9982074a939c30d95b98df4e2aaf17d38ceb0de71ba8072aec8e8686439043d31f652519acb9a306f8be1957a14bcca332716355cb8b7d24fc9bb9e991f2ae9e799ff68d807f11f391683dea723643399532f250dd7f74c8027fb34bfef78064f04795a4833fffed96c19bf6bec726463bb2cf2a23b696fea1dd40eb10c70b31c6a5f83ef4fa98cbfa67d7e38f11f840ec20a1ccd28380bb4b7e7e72fb5c80eac0476e216828cecb1de4fd74b52", 0x3, &(0x7f0000000400)="919f7e2001f8cb17dd0839c22904e6aa938dcdf97a12dd40adb5e1a17405e661b62b", 0x2, &(0x7f0000000440), &(0x7f0000000500)=0x3ff}, {[0xffffffff, 0xfffffffe, 0x1, 0xfffffff9]}, 0xffff8000, 0x7, &(0x7f0000000c80)="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"}) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000006) process_madvise$auto_MADV_NOHUGEPAGE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000540)="5d94d32de38ea2726c92edc2e6cb2df8e89a1fd83a307b5f9f24b2a3d08c9907265f3cd3fd504d0eec", 0x9}, 0x8, 0xf, 0x8) rt_sigqueueinfo$auto(r2, 0x7e, &(0x7f00000005c0)={@siginfo_0_0={0xf9, 0x41, 0x7e73, @_sigfault={0x0, @_perf={0xc, 0x40009, 0x9}}}}) socket(0x1a, 0x800, 0xfffffffe) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) bpf$auto_BPF_OBJ_GET(0x7, 0x0, 0xf) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 6.808920705s ago: executing program 2 (id=4194): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = socket(0x9, 0x1, 0x0) setsockopt$auto(r0, 0x28, 0x1, 0x0, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) listen$auto(0xffffffffffffffff, 0x5ed) bind$auto(r1, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x52ac2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram12/discard_alignment\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/150, 0x96) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x101, 0x0) r4 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r4) bind$auto(0xffffffffffffffff, 0x0, 0xe) writev$auto(r3, &(0x7f00000001c0)={&(0x7f0000000080)="ae987f80ed78bb7384049410fa8e1c9e394aad7bc23579599701347bc3", 0x6623}, 0x200000000074) bind$auto(0xffffffffffffffff, 0x0, 0x65) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) (fail_nth: 1) 4.693960494s ago: executing program 0 (id=4195): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x5) r0 = io_uring_setup$auto(0x4, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = socket(0x2, 0x801, 0x6) setsockopt$auto(r1, 0xe, 0x12, 0x0, 0x52) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x4, 0x80103) (fail_nth: 2) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='p\x00\x00\x00\x00J\x8f\xdc2\xec\xc8W\xbd\xcca1\xff\xf3>5MY+\x14\x8f\xf0$\x90:\b\xf8Zs\xfe3\xb7`\'\xd7\xd7\xe5\xae\xa78\xac\xb8\xd0\xbd\tu\x88\xef\x8c', 0x4) socket(0x28, 0x1, 0x0) r2 = setfsuid$auto(0xee00) r3 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000240)={{0x10000003, r2, r3, 0x3, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8001, 0x8, 0x7a, 0x4, 0x8, 0x8001, 0x5, 0x7, @inferred, @raw=0x9}) setresgid$auto(r4, r4, r4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x3ff) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000200), r0) 4.534696046s ago: executing program 2 (id=4196): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x310) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) keyctl$auto_KEYCTL_SEARCH(0xa, 0x31, 0x200000000000, 0x0, 0x8001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) lseek$auto(0x3, 0x0, 0x1) fcntl$auto(0xffffffffffffffff, 0x402, 0x1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x3, 0x7) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000400)=""/89, 0x59) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, 0x0) mmap$auto(0x0, 0x8020009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) socket(0x2, 0x80002, 0x73) socket(0x2, 0xa, 0x4) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 4.474311628s ago: executing program 1 (id=4197): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1lP\x88K\xa9\x12a\x13R3\x00VI\xa7\x00\x00\x00\x00\x00\x00\x00\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2', 0x0) unshare$auto(0x40000080) bind$auto(0xffffffffffffffff, &(0x7f0000000180)=@l2tp={0x2, 0x0, @local}, 0x4) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r0 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fc"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00n', @ANYRES16=r0, @ANYBLOB="010329bd7000fbdbdf250a000000060001004002000005000200000000000800020048535200"], 0x2c}, 0x1, 0x0, 0x0, 0x400c859}, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) fchmod$auto(r1, 0x9) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) bind$auto(r1, 0x0, 0xe) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x80000000}, 0x65) read$auto_userio_fops_userio(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0xc, {0x8, 0x5, 0xa, 0x2, 0x3, 0xff, 0xfffffe95, 0x3, 0x4}}) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x1ff) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x8b, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 4.317853843s ago: executing program 3 (id=4198): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000480)='\xbe$>\x04L`\xb0D\xb0\xbe{\xca\xd4\x17x\xef\x00\x92\x0e\x05\xbdm\x9a\x90\xb1\xf4K\xe06ECf\xf9\xa5\x88\xa8\x13U\xe0\xbcV\xc2\x003\x86l\xbb\f\xbb\xbd\xbb\x16\xf0\v\xd8\xe7\x95\xdf7\xa5\xc8\xac\xce\xcb\xf3\xed\xfbA\xf9N~\'\b \xc7\x7f\xe7\xce\tF\x99\xcf\x92s\x0f\xa5\xc7E9w\x80\x01\x00\x00\x00\xb9\x8f\x1c\xbc\xb5\x1b\x80\x1b1Z\xd9\xae\x1bI\x8f3\xd4@\x1ce\xef~\xef}\v&\x11\xcd\xe2{\xc9\xa5\xba\x05\'\x13\x1d\x00\x00\xd9T\x86\xf0x\x84{F/\xc3\xa7i\xa6\x9a\xf2P\x97R\xfa\xe8dt\xf5\x91f\x06\xff\x7f\x00\x00\x00\x00\x00\x004\x13j\x0e\x8b\xfb\xabn\xbf\xa9\xfe\x19{\xca\x8e\xb3w\xc3\x14\x05n\x97\xaa\x8d\xcfn\x02\x00\x00\x00\xc1\x8e\x10M?\xae\x93\xeeb\xb3\x00'/221, 0x6) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x4, 0x3, 0x4, 0x2d) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\b\x00\x00\x00\x00\x00\x00\x00\xc1n+\n|j\xc9\xd0\xad\x82\xb6Q\xddT\b\xcbb\xca5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xd4\\e!\a\x82\t,\xa7\x00', 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtdblock0\x00', 0x14be02, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010005000000fddbdf2500000000080008000500000008000100e0e4516508ff000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x14) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ptrace$auto(0x4, 0x0, 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000808}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="00f21ef71e681a7759b3e1025dd2b6f5de5b2fa9aa1e2da35b1ec2bf25fc9687d6af72586edabb1fb95e3a462209b5ac9690ff925221117ce9b06e2b18a4fb416d9c7694d79b7e566d5c54ce230c3374b24b83fa728b26b720e995b593d4f39bce345965568f5be0fff75c96b81ca6e73ef68551f428c7d36343daa522dc6ef4e32b2a9602bed7a75b4c8298a025358c1e0741f415d58c11b9b4e9a2084a4d8d61e33c87c8", @ANYRES16=r6, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400e}, 0x20008000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000100)=""/63, 0x3f) removexattr$auto(0x0, 0x0) mmap$auto(0xb90, 0x203, 0x2, 0x100000000040eb5, r0, 0x7) prctl$auto_SECCOMP_MODE_FILTER(0xfe000000, 0x2, 0x0, 0xf307, 0x101) unshare$auto(0x40000080) mmap$auto(0x0, 0x656, 0x800, 0xef1, r2, 0x402) socket(0x21, 0x6, 0x5) socket(0x22, 0x1, 0x84) prctl$auto(0x23, 0x0, 0x2008, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/00.0\x00', 0x3a3c03, 0x0) 2.777531712s ago: executing program 3 (id=4199): ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1c/sub1/xrun_injection\x00', 0x8282, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x4, r0) write$auto(0x3, 0x0, 0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fcntl$auto_F_SETPIPE_SZ(r1, 0x407, 0xd) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, &(0x7f0000000700)='!dev_\x00\x00\x00\x00\x00', 0x1) r3 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000080), 0x12000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xf) ioctl$auto_FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x400000000000, 0x9, 0x8, 0x8000000008812, 0x3, 0x0) ftruncate$auto(0x3, 0x0) unshare$auto(0x40000080) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) ioctl$auto_VHOST_SET_FEATURES2(r4, 0x4008af00, &(0x7f0000000280)=0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x20000008000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r5, 0x410, 0x0) 2.596965981s ago: executing program 0 (id=4200): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = socket(0x9, 0x1, 0x0) setsockopt$auto(r0, 0x28, 0x1, 0x0, 0x4) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) listen$auto(0xffffffffffffffff, 0x5ed) bind$auto(r1, &(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x2}}, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x52ac2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram12/discard_alignment\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x101, 0x0) socket(0x2d, 0x2, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0xe) writev$auto(r3, &(0x7f00000001c0)={&(0x7f0000000080)="ae987f80ed78bb7384049410fa8e1c9e394aad7bc23579599701347bc3", 0x6623}, 0x200000000074) bind$auto(0xffffffffffffffff, 0x0, 0x65) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2.593728136s ago: executing program 1 (id=4201): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x515400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb0, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getresuid$auto(&(0x7f00000011c0)=0x7, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) eventfd$auto(0x7) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x8a8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x9, 0x800, 0xf) socket(0x2b, 0xa, 0x84) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, r0, 0x7ffc) prctl$auto(0x80000001, 0x100, 0x0, 0x2, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) madvise$auto(0xffffffffffffffff, 0xffffffffffff0002, 0x1) 2.374798596s ago: executing program 2 (id=4202): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (fail_nth: 2) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/maximum_speed\x00', 0x0, 0x0) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr9\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x38, 0x9, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x3, 0x20b2, 0x9, 0x0, 0xfffd, 0x80, 0x9, 0x40000, 0x7, 0x2000, 0x10200, 0x0, 0x81, 0x0, 0x7, 0x4f14, 0x0, 0x0, [0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0x7) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) ioctl$auto(0x3, 0x540a, r1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x86a7, 0x11, 0xfffffffe, 0x6, 0x30000000, 0x9, 0xffffffffffffffff, [0x0, 0x0, 0xffff], {0x6, 0x10001, 0x20000b, 0x2e1, 0x504, 0x1, 0x101, 0x6, 0x5}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x440, 0x76c5, 0x8, 0x8000000000040000}}) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000002, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$auto(r4, 0x890c, 0x1) close_range$auto(0x0, 0x5, 0x0) 1.247965544s ago: executing program 2 (id=4203): unshare$auto(0xb8d7) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0xa70380, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/admmidi2\x00', 0x779b81, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x1e, 0x80805, 0x0) accept$auto(r2, 0x0, 0x0) lseek$auto(0xffffffffffffffff, 0xff, 0x8cb) r3 = getsockopt$auto(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) creat$auto(&(0x7f0000001140)='./file0\x00', 0xfff7) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3ffffd, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r3) io_uring_enter$auto(r0, 0x7f, 0x820a, 0xb, 0x0, 0x5d17) unshare$auto(0x40000080) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0xbffffffc, 0x0, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/kcm_stats\x00', 0x100, 0x0) pread64$auto(r4, 0x0, 0x40000000f42c, 0x80202) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty11\x00', 0x103000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) 369.926628ms ago: executing program 0 (id=4204): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r5, &(0x7f0000000100)=""/3, 0x3) sysfs$auto(0x2, 0x20, 0x2) r6 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x0, 0xcbf, 0x7) write$auto(r6, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) mmap$auto(0x1, 0x4005, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) keyctl$auto(0x4, 0xfffffffe, 0x6, 0xffffffffffffffff, 0xe) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(r2, 0xa, 0x45) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0xc094) 263.371672ms ago: executing program 1 (id=4205): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS0\x00', 0x0, 0x0) ioctl$auto_TIOCMSET2(r0, 0x5418, 0x0) 188.30287ms ago: executing program 3 (id=4206): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000b, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockopt$auto(r1, 0x28, 0x8, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x0, 0x50, 0x0, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x40000081, 0xe983, 0xdf, 0x800000007fff, 0x401, 0x100000000028000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) pread64$auto(0xffffffffffffffff, 0x0, 0xd, 0x6e9) close_range$auto(0x2, r1, 0x8003) pwrite64$auto(r0, 0x0, 0x4e, 0x3) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) r5 = socket(0x23, 0x2, 0x0) sendto$auto(r5, 0x0, 0x8000000008000, 0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80) waitid$auto_P_ALL(0x0, 0xffffffff, 0x0, 0x4005, &(0x7f0000000b40)={{0xffffffffffffffff}, {0xfffffffffffff4c5, 0x2}, 0x21, 0x10000, 0x0, 0xdd0, 0x7, 0x400000000000010, 0x0, 0x4, 0x7, 0x3, 0x100000, 0x96bd, 0x10000000000007ff, 0x6}) write$auto(r4, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="fc0710004dd61b2cba66d70aa35f06df9c356ae8b401b88794c1a95c3bc3bf0d562bedff1e1f9c652dd2e2552476c7c612194f8fec136223cd158d66386208b03299bd4e4e8499131d89e8e458", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf25620000000b078000010befb7d90b8f12bde5b1381c036443e32aa1e566bd3b641154bb7ee04f8d16775adecafdc93b21d46bda3e4c4ec71ec689fce9ee9dd2a1dd214290916dcdda9b10d90a2f94bfcf7666085a1ac6c2eaa3cf318e1269447e8b9a3e4520e6fc8ab677696e7e718c9aae2498da0260194ecdac40cfd85b989e13fd324d5fda8fdf37a440d42b17b14ac4adc80d2f81947a21f48c44bb2cdf0dc1af7d79632356aa0cd721b1bd617aded8c6846a1a6b00ad39b15a77417c18e92ea516cf1a93bf9db1101c8344c14a1c75fd53c9582af1e1b1c4cc8b9b2b13e91a3967ce027d1be50c7641b7c356480440d85a5e64a942fe76b3b668e9d957f99da6e731b37b3f5eb74e6f75f046a46ec54f7cad4cf98c0abb447253165b7b69c3f9043b434d6576b6573a9f24244d6d39bf3d29ee44c69d85a990ae57d3093a73c644a4ef11f72b3954985f249f5b3f3bdf359aae260f96f69ae470885f9ebdcb804dce8023f3295f63aebeafacdb0c5a70dcee4e11a1b53d50476306c071a4b760bf91d3e34898dbc08fc60f1f0f890d734211f0e39e433048988ae365a010bd0e2552239221b690e4387298b2c931a68be1efb75fa014400d4bf48050d36d73eb399105cd59d58b9b22dc4fad0bb1f52286062d6d7d04d6e89eca977a3c10979967372a20a04f461ff19a6da937fb7067b461146f432f72d821db3bd2e592b00536f0e7522b097204f0a61b1b7c4d3c86435d7fc2f27140014ade20aa2602079579dda091481e1536b25e373198553a9588f2aaf52b6675cbd55dc138e275543ba8a80bcc38a8438943a3291bd0fdcfac92e2e085c8a6c524fbfa101df50cad2fae0a8e254410a1e551be7b18715ca37cb86ad1e567d6530049147beb11ed6016eebc3edc2718101b1a452c42e24510929f0bdf9a010f21d7aa7d64e1c1ecaa5003d47ebdbe3a530a53c71fa3341777c6684019e67cc586c2724adbdc3155cce5d001d5b4e9578ba97cc9650deb81920bc53bf11e1b2781cb6bfb38e74c1eae276fe6e0bd4cb4a916bdcae148c500bd5fa696b9bf9ac143d363acc64cb6f9abede118846b1a5006938adf3cb6b1be593470515be8ff64bbcd7b32233404aaf252555ef13e60a3815c848ea06ac79cff5b5ed2079173f9e2e2c14e8a4a1ab28fa2648b70c6da37ddb68299b40a3c234eaf9a0d514ecaaf5bf9f22c7d80146da3b6dd465d20e380f4359aec40b58bba5b2adcfa041b30ff5514386719f6813555a7b7fcb7365b1d2e8ea06d39c9584aad9e3fdc000479adc2a0c97219367c550b54368e1cd6c63b63b936ce1dbf21fccce0eab2fb8d53b4d4377adb26bd60ff97c494e9630c0fdc28358021f6b7e98cc5a8d31f13766a26a7d30c838ad6b1a2e2519c981f3ab6f6e810927a1b47715992f13860c97e007dfc41a1a02f8259820fe3b1ca29da762ba67b45fc5f907e5c848ddd9977257f5a5d52880b300f2424a992c6751eb5bd8bffdea9cae02ee5facc795883cb6e43368c20261c08dd7a5e35679289f2a7e1b919d37d2ff7c1468b1a440479fab3f54d10fe91be6b9a9cec28849f82607c583db34c9f0e48face50f4e7145d084f9123813e14ba9666b8934fd5077c8c4d39463507736f99b24cbccbde9a62f2e29dd0e803ec61a61b3fad8655464ba939acbc370544f38de9334b029e361714e57d8c605eb447eb12cbcf2c7aea78d73f9ef59a26f5f6f3981a037c502e65cecbe263dc7249fc0d07a54aa3b46511fb3a8f7a42c21939c56d1cc235815d7c332049d8cd928df65cdc331ba996c6b71d88b953875008c0436499d0487823cbb1a69ffced18c621d990e64a41548fb24d617c0b03da1cee181b91b62f6fceb79339dd3e566bd9e1b22c4d94213c5f38401823ec4d49ea0864cede38bedcfd4b488d69248d7d80437caebaf179fb5c88e41503fce09bdece751d58f52199d5fb6a5fe0130a2e7ec3424da5c1a24a45059c69f3137f06ccb4245d02b8eeaea70e0eff471c28f756fdbab364dc5f2f690b29cd1a7a876b9da16be23e8e5c2063989974e907b62931c274a257d702e0e49437f76571c1fa4af4fd77cc27f90875ef94073ef30ad28e0fed75cd6fab344de69c2ae911f27de082c5655252e8e291661574e8511b0c34336f42c328166b107953f95cac910460aab57ed8fffb9348c144713c8e8a022c2f7ea4643195dd6187d7c182c8316d3abcd9c21dacf31574a229b78823df105da7c5cabe7408cc08edf24a2fc54ee8e6f4292385df865a9c29b74095202deeea1a8abe51ed1b70a62726beb80fa0d279dfd4fa0b3f7f5694d4ad636f614f69a60ede99410288e70ef3b127ebe0f2b4f95ef12847723bfbcd1174df9f7f33a622d5929fbc381f81379ab5efb960f0a5274dbe003f7f2063a864be1f1a2b79192a093b08cf6712fca2c314f2b19c5456387abd42f24bbe163dede4c91be7b0d5b4e15bb50b1cfc0085013cce4d74fb7d4227c13a32984d45973fc83afbd114dedf869e0413d8a82f2e3b9fc2311f565fffc21ca38e00060066004e240000040046000800a000fb170000c800c500433052ba245f3a7b6a47c47e0cc06158266fddb832cae6f84a2314e18cf3f565493b0e3b22fd57dcdf43d05c3f2f764c11bab171931d7036ae2d7e248e99653f3b58cdc6bba52766f45270ba444c940e08e2352a6f733c6b57be2a6f507171569ea12d8e66414ccc96ab8a3ebc69af9a340d2997cbecc91eae87a470d77a141dcd80271f1446de70e9a3fb79f2b87a7dec8c79c21bfbc657e79f2694fef000e8f80d23f505bccad2197ac762049595041bda56d7dd9bee7d8ad93f5e6efacba40e930183"], 0x7fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x315000, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000580)={0x2, 0x85c1, [{r7, 0x0, 0x0, 0x200}, {r5, 0x0, 0xffffffff, 0x2}, {0xffffffffffffffff, 0x0, 0xfffffffffffffff7}, {0xffffffffffffffff, 0x0, 0xd, 0xeb}, {r6, 0x0, 0x82e, 0x7}, {0xffffffffffffffff, 0x0, 0x8, 0x6}, {r3, 0x0, 0xffffffffffff7fff, 0x9}, {r7, 0x0, 0x100, 0x8}, {r6, 0x0, 0x1ff, 0x9}]}) 0s ago: executing program 1 (id=4207): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0x1, 0x5761, 0x4) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = semctl$auto(0x5, 0x8, 0x0, 0xed) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000500)={0x7ff, @raw, @inferred=r0, 0x2, 0x8, '\x00', {0x9, 0x4, 0x78db, 0xee00, 0x0, 0x3, 0x3, 0x80, {0x6, 0x6}, {0x7fffffff, 0x3}, {0x1, 0xa}, 0x7000000000, 0x1ff, 0x4, 0x10001, 0x400, 0x7, 0x4, 0x2, 0x401, 0x5, '\x00', 0x7b7d, 0x80, 0x6, 0xde}}) sendmsg$auto_NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000001cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c80)={&(0x7f00000005c0)={0x1698, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xad}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6000}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xffffff00}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xffffffff}, @NL80211_ATTR_SCAN_SSIDS={0x1651, 0x2d, 0x0, 0x1, [@generic="f8bf6ca910b31803fa1b48cbddd39df889427a9ccf82f7468190001d5d277336ac4cfc5452bce10f61ff3c1617877f4ffd7117e16520e07d13cc9dd6d27680ce0ed9e905ff6ecbf0691239b4bc9d1bc831ba2a17b0feb36bf6b23d5f418c5d5ea7f9ca4d395aac157fee6dc783e9084ab9354aeef87a7b59e78e1a70ab023c4005b29f3fa8ec687020295a61a406ba60de25a774ea1064596270584ab596b4a810a3c7893449f1a0c00b464b9ed1da7ed8ac933f9fc85d367d9ca60681cc2a8e439b3c72f7a245241282582bf3e6f02cc33131f37fb6c7a677aa38c6fec6f2aab55c0445a0aa0d59c3a71f7660", @typed={0x8, 0x27, 0x0, 0x0, @pid=r3}, @typed={0x5, 0xdd, 0x0, 0x0, @str='\x00'}, @nested={0x12c9, 0xb9, 0x0, 0x1, [@generic="ffa74efec6e6a39bf00da7bfd34eb03f9b597f2d77c97b86aff3153ac92a61ecada02d948cafdf61851221a3f0912dcb67cd0b571f0633586568c90dc24bfac429cb97e16b98786edde7063aac7c6321e52b5249530fe233c93bc3f44189fce859623861b87259ce85cd660a06427b3757bcc385487c85b21343478adcf9860bd4", @generic="4de03581ee786d788b16000ece8a56eb306072172af451c664be9790d3ce01abaa87b7627ba227e14b0b93c7e10cd50ceabdd3061ecc02ec3755fa07f937268c9b7a1c05befcf1257f8049130f133d69a6b3ca5a6549a60d3b1902c83c9a040593a55b53cc97f985483ab360f383d9d1e7ee53554b96aca900a5f35e8c7056330c892508bb653e83097ece9f1b51bdc52272754e3340d530a65b34cdc92c8721217eb674461c9d25ede22d5c07f56b0a682aa869a400aef025", @typed={0x9, 0x11c, 0x0, 0x0, @str='SEG6\x00'}, @generic="65e1af68eae876e0f5c86c5b8cfa77ee830124bfd4def00cb241c3630d7a65fa9217f5fed43b8b88b0e41709baad71ea951c0512a5db2cabde9080e5880f06fa41c972a3562beeb6386765f30770e79de8fb01ed6da077c9c933fab3cd2fb8b92d2fa6b265e79588231611f2af64f63839578aa29e66e4a9e655363629f6ba124082c55d76f9f5b1523b91eddcb7c6b0b619bf36d1410ef6a1bc9daf813d154b94c5f8ec83d11e84fd8b793b10e12a0a2c49d897d99909b250dc4c540dfeb706ace7b67d", @typed={0xc, 0x159, 0x0, 0x0, @u64=0x10001}, @nested={0x4, 0x166}, @generic="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", @generic="7fa1d59cd190c7db3081bbc10cd0fbee1d51cebbfa8df4f0fec121b9088a4e08804a8733c4e34f38c84600cfd9ef75ef9d0ce4", @typed={0x14, 0x157, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x62, 0x97, 0x0, 0x0, @binary="bde6e30d72ffcddf85432c74238d1f2b19045f44009139c79515bae7e9037a5c7790b1e3bfc7bb9752aeae91aa476471f482c56fe65db9a06566a5883b01665e615829815b3e628e3557cefac2198f141caf70a112c62ea6b19b5bc27532"}]}, @generic="f9dfa837a3972db75c0deddd8cc14a2fbda5b2142a1872f62c2083bdb90035e5fb54e461f5ed3d599eaf3a2d67e4406ac3d3ff34a9de2d515ed0dc13e5456e52555e5009c4ca8d59e610c1782f1fd1cfe8cad5ca09a0200fabeeb1ed58905fccc59e99833b2a464c72e9efce24070fb3c123b48c67a84fa23434db5d174ba09ca1cea5e7731fce1392e5716b2c5390077a95d33281ccada0e00bdee9", @nested={0x1e5, 0x11d, 0x0, 0x1, [@nested={0x4, 0x94}, @nested={0x4, 0x129}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xc0}, @generic="b25fa87ab6ddf8a1b2f71c9191f4a61913be3c31d1b4081af8cb67de329781071061dbfac06a540998f90d961982a16c8450b1ab8397fcd6e76248c8df683238692a1b5117668c978417b78ca4e038173f9ddd0aa5fe33dd2e059ff32c2aa9964c9246a2b0607dbdcb1bdf1bf0e7338877ef467b", @nested={0x4, 0xea}, @nested={0x4, 0x32}, @typed={0x85, 0x8c, 0x0, 0x0, @binary="071d0a399e978ffc4465420636f3cc6cd4837e82d4d94b2193bf5e63213a7ebe701c53709ea94b2aad1e87398c8ed0e9c74258b8875b297d4ade975b4946a765267b9fabc4a8cae72692cb62a1d464e1a580e7beb5b1ad0085fd21f23880c35cf7524edcd51d29a032f8eee879480dc8d7fbfaab5cf60f8bc911b0b13f806b5287"}, @nested={0x4, 0xef}, @generic="e67d5536c3f74ecdaefb5e35eab0a17c82e9dbba2192542da7043d132ce79e0a1c3ea6e02b08cfd937d002c53635a0296a8923b8f7704092d5710f8c72acd4bd3ae38941b49935d474c2e81b8a78bb08556367ce3f19b57e28e6e8877594bd89ef0d45cd3d208ebcc25c7cebdc3c6198a773c772009a09ebdebd25db26c06a874e6c07f9d9f83c4371563e049f5f2a650c66f3b68f71b523e1e9a852fb3e1de5b45e55c93917df7a8a439c80c12717b53ee40041955015fe670014a065dbd0ed9aaa50de07"]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x24}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1698}, 0x1, 0x0, 0x0, 0x40d5}, 0x11) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.list\x00', 0x1c1002, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x9, 0x80002, 0x73) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00f034", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf25070000000500010007000000080005000000000008000400ac1414bb"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000300), r5) ioctl$auto_FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x1) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="01f00000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf2589000000"], 0x14}}, 0x40080) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000280)={@sival_int=0x4, @inferred=r5, 0x7}, &(0x7f00000002c0)=0x3) syz_open_procfs$namespace(0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x77) futex$auto(0x0, 0x801, 0xcf10, 0x0, 0x0, 0x40000040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kernel console output (not intermixed with test programs): etdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2391.136547][ T1884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2391.149223][ T1884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2391.160553][ T1884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2391.174406][ T1884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2391.185466][ T1884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2391.240338][ T2788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2391.330991][ T2843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.457669][T18224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.577853][ T2843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.720068][T18224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2391.847919][ T2843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2392.136541][ T2843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2392.497723][T18224] bridge_slave_1: left allmulticast mode [ 2392.503849][T18224] bridge_slave_1: left promiscuous mode [ 2392.509738][T18224] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.520796][T18224] bridge_slave_0: left allmulticast mode [ 2392.526652][T18224] bridge_slave_0: left promiscuous mode [ 2392.532522][T18224] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.557771][T18224] bridge_slave_1: left allmulticast mode [ 2392.566690][T18224] bridge_slave_1: left promiscuous mode [ 2392.573750][T18224] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.591106][T18224] bridge_slave_0: left allmulticast mode [ 2392.605764][T18224] bridge_slave_0: left promiscuous mode [ 2392.611558][T18224] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.819656][T18224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2392.832037][T18224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2392.842469][T18224] bond0 (unregistering): Released all slaves [ 2392.969483][T18224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2392.982710][T18224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2393.000993][T18224] bond0 (unregistering): Released all slaves [ 2393.106248][ T2788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2393.289257][ T1884] Bluetooth: hci2: command tx timeout [ 2393.429982][ T2788] 8021q: adding VLAN 0 to HW filter on device team0 [ 2393.522749][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2393.529973][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2393.606527][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2393.613819][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2393.830086][ T2843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2393.890336][ T2843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2393.910245][ T2843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2393.935181][ T2843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2393.944612][ T2843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2393.962389][ T2843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2394.046339][ T2843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2394.068533][ T2843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2394.506305][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 2394.521020][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 2394.533121][ T3026] bridge_slave_0: entered allmulticast mode [ 2394.541833][ T3026] bridge_slave_0: entered promiscuous mode [ 2394.571281][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 2394.589634][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 2394.598738][ T3026] bridge_slave_1: entered allmulticast mode [ 2394.607388][ T3026] bridge_slave_1: entered promiscuous mode [ 2394.646643][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2394.779491][ T3026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2394.812294][ T3026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2394.863120][ T7485] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2394.875282][ T7485] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2394.885067][ T7485] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2394.895190][ T7485] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2394.905581][ T7485] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2395.027290][ T3026] team0: Port device team_slave_0 added [ 2395.038500][ T3026] team0: Port device team_slave_1 added [ 2395.167833][ T3026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2395.192843][ T3026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2395.244625][ T3026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2395.258161][ T3026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2395.267299][ T3026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2395.295814][ T3026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2395.363945][ T7485] Bluetooth: hci2: command tx timeout [ 2395.516385][ T3026] hsr_slave_0: entered promiscuous mode [ 2395.537646][ T3026] hsr_slave_1: entered promiscuous mode [ 2395.544860][ T3026] debugfs: 'hsr0' already exists in 'hsr' [ 2395.550678][ T3026] Cannot create hsr debugfs directory [ 2395.982184][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2396.034520][ T2843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2396.170115][ T2843] 8021q: adding VLAN 0 to HW filter on device team0 [ 2396.327101][T23828] bridge0: port 1(bridge_slave_0) entered blocking state [ 2396.334488][T23828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2396.543227][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2396.550505][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2396.653936][ T2788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2396.968534][ T7485] Bluetooth: hci1: command tx timeout [ 2397.449027][ T7485] Bluetooth: hci2: command tx timeout [ 2397.600508][ T2788] veth0_vlan: entered promiscuous mode [ 2397.713351][ T3026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2397.727844][ T3026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2397.747823][ T2788] veth1_vlan: entered promiscuous mode [ 2397.758291][ T3026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2397.777631][ T3026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2397.789646][ T3026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2397.803714][ T3026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2397.837284][ T3026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2397.859313][ T3026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2397.939751][ T3101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2397.947882][ T3101] bridge0: port 1(bridge_slave_0) entered disabled state [ 2397.955689][ T3101] bridge_slave_0: entered allmulticast mode [ 2397.963805][ T3101] bridge_slave_0: entered promiscuous mode [ 2397.978020][ T3101] bridge0: port 2(bridge_slave_1) entered blocking state [ 2397.985459][ T3101] bridge0: port 2(bridge_slave_1) entered disabled state [ 2397.992822][ T3101] bridge_slave_1: entered allmulticast mode [ 2398.001905][ T3101] bridge_slave_1: entered promiscuous mode [ 2398.113201][ T3101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2398.138526][ T3101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2398.327650][ T3101] team0: Port device team_slave_0 added [ 2398.353846][ T3101] team0: Port device team_slave_1 added [ 2398.476287][T18224] hsr_slave_0: left promiscuous mode [ 2398.492894][T18224] hsr_slave_1: left promiscuous mode [ 2398.515897][T18224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2398.528002][T18224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2398.547077][T18224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2398.571733][T18224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2398.605125][T18224] hsr_slave_0: left promiscuous mode [ 2398.612601][T18224] hsr_slave_1: left promiscuous mode [ 2398.628549][T18224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2398.637025][T18224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2398.647807][T18224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2398.658891][T18224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2398.707499][T18224] veth1_macvtap: left promiscuous mode [ 2398.722555][T18224] veth0_macvtap: left promiscuous mode [ 2398.739189][T18224] veth1_vlan: left promiscuous mode [ 2398.744617][T18224] veth0_vlan: left promiscuous mode [ 2398.753121][T18224] veth1_macvtap: left promiscuous mode [ 2398.758788][T18224] veth0_macvtap: left promiscuous mode [ 2398.764420][T18224] veth1_vlan: left promiscuous mode [ 2398.771632][T18224] veth0_vlan: left promiscuous mode [ 2399.048631][ T7485] Bluetooth: hci1: command tx timeout [ 2399.264283][T18224] team0 (unregistering): Port device team_slave_1 removed [ 2399.298669][T18224] team0 (unregistering): Port device team_slave_0 removed [ 2399.536550][ T7485] Bluetooth: hci2: command tx timeout [ 2399.682650][T18224] team0 (unregistering): Port device team_slave_1 removed [ 2399.700465][T18224] team0 (unregistering): Port device team_slave_0 removed [ 2399.862326][ T3101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2399.869564][ T3101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2399.896032][ T3101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2399.910251][ T3101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2399.917521][ T3101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2399.943712][ T3101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2400.026151][ T2788] veth0_macvtap: entered promiscuous mode [ 2400.046326][ T3101] hsr_slave_0: entered promiscuous mode [ 2400.053217][ T3101] hsr_slave_1: entered promiscuous mode [ 2400.060046][ T3101] debugfs: 'hsr0' already exists in 'hsr' [ 2400.066011][ T3101] Cannot create hsr debugfs directory [ 2400.085218][ T2788] veth1_macvtap: entered promiscuous mode [ 2400.222209][ T2843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2400.291834][ T2788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2400.360876][ T2788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2400.510402][ T3101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.539893][ T3026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2400.642713][ T6984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2400.682705][ T3026] 8021q: adding VLAN 0 to HW filter on device team0 [ 2400.715159][ T3101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.744335][ T2843] veth0_vlan: entered promiscuous mode [ 2400.789250][ T3223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2400.803339][ T2843] veth1_vlan: entered promiscuous mode [ 2400.819300][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 2400.826499][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2400.834850][ T3223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2400.909360][ T3101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.944394][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state [ 2400.951583][ T3223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2400.984002][ T5830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2400.995373][ T5830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2401.036882][ T3101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2401.071834][ T2843] veth0_macvtap: entered promiscuous mode [ 2401.098760][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2401.125907][ T7485] Bluetooth: hci1: command tx timeout [ 2401.131675][ T2843] veth1_macvtap: entered promiscuous mode [ 2401.204712][T18224] bridge_slave_1: left allmulticast mode [ 2401.213448][T18224] bridge_slave_1: left promiscuous mode [ 2401.223059][T18224] bridge0: port 2(bridge_slave_1) entered disabled state [ 2401.234110][T18224] bridge_slave_0: left allmulticast mode [ 2401.239921][T18224] bridge_slave_0: left promiscuous mode [ 2401.247783][T18224] bridge0: port 1(bridge_slave_0) entered disabled state [ 2401.524493][T18224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2401.550500][T18224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2401.561779][T18224] bond0 (unregistering): Released all slaves [ 2401.687109][ T2843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2401.698683][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2401.709751][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2401.755292][ T2843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2402.313028][ T3101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2402.341095][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2402.373868][ T3101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2402.392356][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2402.422730][ T3101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2402.452330][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2402.461420][ T3101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2402.471300][ T3101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2402.675127][ T5826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2402.701152][ T5826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2402.756678][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2402.903257][ T5830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2402.922481][T23828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2402.937183][ T5830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2403.013386][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2403.176995][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2403.209600][ T7485] Bluetooth: hci1: command tx timeout [ 2403.249040][ T3258] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1890.0.2190700454), cmd(12) [ 2403.385077][ T3256] FAULT_INJECTION: forcing a failure. [ 2403.385077][ T3256] name failslab, interval 1, probability 0, space 0, times 0 [ 2403.451332][ T3256] CPU: 0 UID: 0 PID: 3256 Comm: syz.1.3840 Not tainted syzkaller #0 PREEMPT(full) [ 2403.451393][ T3256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2403.451424][ T3256] Call Trace: [ 2403.451435][ T3256] [ 2403.451447][ T3256] dump_stack_lvl+0x100/0x190 [ 2403.451494][ T3256] should_fail_ex.cold+0x5/0xa [ 2403.451533][ T3256] should_failslab+0xc2/0x120 [ 2403.451583][ T3256] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2403.451626][ T3256] ? ksys_write+0x190/0x250 [ 2403.451663][ T3256] ? create_new_namespaces+0x30/0xac0 [ 2403.451708][ T3256] create_new_namespaces+0x30/0xac0 [ 2403.451745][ T3256] ? bpf_lsm_capable+0x9/0x10 [ 2403.451784][ T3256] ? security_capable+0x80/0x260 [ 2403.451826][ T3256] unshare_nsproxy_namespaces+0xf2/0x220 [ 2403.451868][ T3256] ksys_unshare+0x438/0xab0 [ 2403.451916][ T3256] ? __pfx_ksys_unshare+0x10/0x10 [ 2403.451960][ T3256] ? ksys_write+0x1ac/0x250 [ 2403.452004][ T3256] __x64_sys_unshare+0x31/0x40 [ 2403.452048][ T3256] do_syscall_64+0x115/0x840 [ 2403.452099][ T3256] ? clear_bhb_loop+0x70/0xc0 [ 2403.452140][ T3256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2403.452175][ T3256] RIP: 0033:0x7f558779e0d9 [ 2403.452202][ T3256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2403.452235][ T3256] RSP: 002b:00007f55859f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2403.452266][ T3256] RAX: ffffffffffffffda RBX: 00007f5587a25fa0 RCX: 00007f558779e0d9 [ 2403.452288][ T3256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2403.452309][ T3256] RBP: 00007f55859f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2403.452328][ T3256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2403.452348][ T3256] R13: 00007f5587a26038 R14: 00007f5587a25fa0 R15: 00007ffc8d599508 [ 2403.452390][ T3256] [ 2403.971916][ T3026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2404.278126][ T3101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2404.310468][ T3026] veth0_vlan: entered promiscuous mode [ 2404.380817][ T3101] 8021q: adding VLAN 0 to HW filter on device team0 [ 2404.473116][ T3026] veth1_vlan: entered promiscuous mode [ 2404.494714][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state [ 2404.501989][ T3223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2404.570159][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state [ 2404.577469][ T3223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2405.604903][ T3026] veth0_macvtap: entered promiscuous mode [ 2405.636327][ T3101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2405.675673][ T3026] veth1_macvtap: entered promiscuous mode [ 2405.891496][ T3026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2405.963907][ T3026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2406.148736][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2406.496736][T23828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2406.521432][T23828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2406.694259][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2407.175641][ T6984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2407.184008][ T6984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2407.193742][ T3223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2407.240535][T18224] hsr_slave_0: left promiscuous mode [ 2407.259267][T18224] hsr_slave_1: left promiscuous mode [ 2407.278527][T18224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2407.286724][T18224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2407.317412][T18224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2407.339554][T18224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2407.356475][T18224] veth1_macvtap: left promiscuous mode [ 2407.362295][T18224] veth0_macvtap: left promiscuous mode [ 2407.369876][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2407.376003][T18224] veth1_vlan: left promiscuous mode [ 2407.376269][T18224] veth0_vlan: left promiscuous mode [ 2407.385015][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.646301][T18224] team0 (unregistering): Port device team_slave_1 removed [ 2407.665705][T18224] team0 (unregistering): Port device team_slave_0 removed [ 2407.949736][ T6984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2408.026206][ T3101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2409.542135][ T3101] veth0_vlan: entered promiscuous mode [ 2409.804391][ T3101] veth1_vlan: entered promiscuous mode [ 2410.295503][ T3101] veth0_macvtap: entered promiscuous mode [ 2410.328701][ T3101] veth1_macvtap: entered promiscuous mode [ 2410.408756][ T3101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2410.454956][ T3101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2410.625997][ T6984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2410.670636][ T6984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.035206][T12249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2411.047066][T12249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2411.330233][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2411.754235][T18224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2411.770007][T18224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2412.258947][ T3360] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1901.0.2190700454), cmd(12) [ 2412.389622][T18224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2412.532037][ T3363] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 2421.822180][ T3468] FAULT_INJECTION: forcing a failure. [ 2421.822180][ T3468] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.864356][ T3468] CPU: 1 UID: 0 PID: 3468 Comm: syz.1.3877 Not tainted syzkaller #0 PREEMPT(full) [ 2421.864401][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2421.864419][ T3468] Call Trace: [ 2421.864433][ T3468] [ 2421.864442][ T3468] dump_stack_lvl+0x100/0x190 [ 2421.864474][ T3468] should_fail_ex.cold+0x5/0xa [ 2421.864522][ T3468] should_failslab+0xc2/0x120 [ 2421.864570][ T3468] __kmalloc_noprof+0xfc/0x820 [ 2421.864611][ T3468] ? __pfx_update_last_data+0x10/0x10 [ 2421.864639][ T3468] ? trace_parser_get_init+0x30/0xc0 [ 2421.864683][ T3468] trace_parser_get_init+0x30/0xc0 [ 2421.864726][ T3468] ? tracing_update_buffers+0x81/0xf0 [ 2421.864756][ T3468] ftrace_event_write+0x177/0x2c0 [ 2421.864788][ T3468] ? __pfx_ftrace_event_write+0x10/0x10 [ 2421.864828][ T3468] vfs_write+0x2aa/0x1050 [ 2421.864852][ T3468] ? __pfx_ftrace_event_write+0x10/0x10 [ 2421.864884][ T3468] ? __pfx_vfs_write+0x10/0x10 [ 2421.864906][ T3468] ? __fget_files+0x215/0x3d0 [ 2421.864936][ T3468] ? __fget_files+0x21f/0x3d0 [ 2421.864967][ T3468] ksys_write+0x12a/0x250 [ 2421.864989][ T3468] ? __pfx_ksys_write+0x10/0x10 [ 2421.865021][ T3468] do_syscall_64+0x115/0x840 [ 2421.865056][ T3468] ? clear_bhb_loop+0x70/0xc0 [ 2421.865085][ T3468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2421.865109][ T3468] RIP: 0033:0x7f558779e0d9 [ 2421.865128][ T3468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2421.865152][ T3468] RSP: 002b:00007f55859b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2421.865174][ T3468] RAX: ffffffffffffffda RBX: 00007f5587a26180 RCX: 00007f558779e0d9 [ 2421.865190][ T3468] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000008 [ 2421.865205][ T3468] RBP: 00007f55859b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2421.865220][ T3468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2421.865234][ T3468] R13: 00007f5587a26218 R14: 00007f5587a26180 R15: 00007ffc8d599508 [ 2421.865264][ T3468] [ 2422.470512][ T3476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3878'. [ 2424.550510][ T3498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3882'. [ 2424.583700][ T3498] nbd: must specify at least one socket [ 2424.760342][ T3502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3880'. [ 2425.906143][ T3498] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 2427.004796][ T3530] FAULT_INJECTION: forcing a failure. [ 2427.004796][ T3530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2427.069609][ T3530] CPU: 0 UID: 0 PID: 3530 Comm: syz.1.3886 Not tainted syzkaller #0 PREEMPT(full) [ 2427.069652][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2427.069670][ T3530] Call Trace: [ 2427.069679][ T3530] [ 2427.069690][ T3530] dump_stack_lvl+0x100/0x190 [ 2427.069732][ T3530] should_fail_ex.cold+0x5/0xa [ 2427.069767][ T3530] _copy_from_user+0x2e/0xd0 [ 2427.069819][ T3530] copy_msghdr_from_user+0x9f/0x4c0 [ 2427.069867][ T3530] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2427.069914][ T3530] ? __lock_acquire+0x49f/0x1a40 [ 2427.069946][ T3530] ? __lock_acquire+0x49f/0x1a40 [ 2427.069980][ T3530] ___sys_recvmsg+0xdd/0x1a0 [ 2427.070020][ T3530] ? __pfx____sys_recvmsg+0x10/0x10 [ 2427.070063][ T3530] ? find_held_lock+0x2b/0x80 [ 2427.070138][ T3530] do_recvmmsg+0x2f3/0x740 [ 2427.070186][ T3530] ? __pfx_do_recvmmsg+0x10/0x10 [ 2427.070232][ T3530] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2427.070297][ T3530] ? __fget_files+0x21f/0x3d0 [ 2427.070339][ T3530] __x64_sys_recvmmsg+0x22a/0x280 [ 2427.070393][ T3530] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2427.070457][ T3530] do_syscall_64+0x115/0x840 [ 2427.070506][ T3530] ? clear_bhb_loop+0x70/0xc0 [ 2427.070547][ T3530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2427.070582][ T3530] RIP: 0033:0x7f558779e0d9 [ 2427.070609][ T3530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2427.070642][ T3530] RSP: 002b:00007f55859f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2427.070673][ T3530] RAX: ffffffffffffffda RBX: 00007f5587a25fa0 RCX: 00007f558779e0d9 [ 2427.070695][ T3530] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2427.070716][ T3530] RBP: 00007f55859f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2427.070735][ T3530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2427.070755][ T3530] R13: 00007f5587a26038 R14: 00007f5587a25fa0 R15: 00007ffc8d599508 [ 2427.070798][ T3530] [ 2427.340023][ T3527] random: crng reseeded on system resumption [ 2430.243663][ T3551] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2434.444613][ T3602] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2435.045925][ T3618] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524287.0.2227981217), cmd(12) [ 2438.328367][ T1884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2438.345204][ T1884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2438.358761][ T1884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2438.369680][ T1884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2438.378912][ T1884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2438.631777][T12249] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.820324][T12249] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2438.955149][T12249] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2439.303167][T12249] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2440.418495][ T1884] Bluetooth: hci2: command tx timeout [ 2440.625368][T12249] bridge_slave_1: left allmulticast mode [ 2440.634468][T12249] bridge_slave_1: left promiscuous mode [ 2440.640582][T12249] bridge0: port 2(bridge_slave_1) entered disabled state [ 2440.652782][T12249] bridge_slave_0: left allmulticast mode [ 2440.663117][T12249] bridge_slave_0: left promiscuous mode [ 2440.669059][T12249] bridge0: port 1(bridge_slave_0) entered disabled state [ 2440.900551][T12249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2440.917053][T12249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2440.934845][T12249] bond0 (unregistering): Released all slaves [ 2441.606142][ T3702] FAULT_INJECTION: forcing a failure. [ 2441.606142][ T3702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2441.623250][ T3702] CPU: 0 UID: 0 PID: 3702 Comm: syz.2.3912 Not tainted syzkaller #0 PREEMPT(full) [ 2441.623301][ T3702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2441.623320][ T3702] Call Trace: [ 2441.623331][ T3702] [ 2441.623342][ T3702] dump_stack_lvl+0x100/0x190 [ 2441.623387][ T3702] should_fail_ex.cold+0x5/0xa [ 2441.623423][ T3702] _copy_from_user+0x2e/0xd0 [ 2441.623477][ T3702] move_addr_to_kernel+0x65/0x170 [ 2441.623516][ T3702] __sys_connect+0xb5/0x170 [ 2441.623556][ T3702] ? __pfx___sys_connect+0x10/0x10 [ 2441.623594][ T3702] ? __fget_files+0x21f/0x3d0 [ 2441.623641][ T3702] ? __pfx_ksys_write+0x10/0x10 [ 2441.623681][ T3702] __x64_sys_connect+0x72/0xb0 [ 2441.623722][ T3702] ? lockdep_hardirqs_on+0x78/0x100 [ 2441.623770][ T3702] do_syscall_64+0x115/0x840 [ 2441.623822][ T3702] ? clear_bhb_loop+0x70/0xc0 [ 2441.623866][ T3702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2441.623900][ T3702] RIP: 0033:0x7ff25099e0d9 [ 2441.623926][ T3702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2441.623957][ T3702] RSP: 002b:00007ff25182f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2441.623988][ T3702] RAX: ffffffffffffffda RBX: 00007ff250c25fa0 RCX: 00007ff25099e0d9 [ 2441.624009][ T3702] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000005 [ 2441.624028][ T3702] RBP: 00007ff25182f090 R08: 0000000000000000 R09: 0000000000000000 [ 2441.624047][ T3702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2441.624067][ T3702] R13: 00007ff250c26038 R14: 00007ff250c25fa0 R15: 00007fff5134cbd8 [ 2441.624109][ T3702] [ 2442.501872][ T1884] Bluetooth: hci2: command tx timeout [ 2443.248865][T12249] hsr_slave_0: left promiscuous mode [ 2443.255150][T12249] hsr_slave_1: left promiscuous mode [ 2443.261525][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2443.271148][T12249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2443.282461][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2443.290524][T12249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2443.304289][T12249] veth1_macvtap: left promiscuous mode [ 2443.309957][T12249] veth0_macvtap: left promiscuous mode [ 2443.315547][T12249] veth1_vlan: left promiscuous mode [ 2443.320927][T12249] veth0_vlan: left promiscuous mode [ 2443.584638][T12249] team0 (unregistering): Port device team_slave_1 removed [ 2443.608646][T12249] team0 (unregistering): Port device team_slave_0 removed [ 2443.744971][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2443.853975][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state [ 2443.865610][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2443.884389][ T3654] bridge_slave_0: entered allmulticast mode [ 2443.892215][ T3654] bridge_slave_0: entered promiscuous mode [ 2443.955853][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 2443.963188][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2443.970546][ T3654] bridge_slave_1: entered allmulticast mode [ 2443.978063][ T3654] bridge_slave_1: entered promiscuous mode [ 2444.117529][ T3654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2444.134343][ T3654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2444.251058][ T3654] team0: Port device team_slave_0 added [ 2444.263459][ T3654] team0: Port device team_slave_1 added [ 2444.333708][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2444.350033][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2444.405516][ T3654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2444.422791][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2444.431323][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2444.469690][ T3654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2444.580627][ T1884] Bluetooth: hci2: command tx timeout [ 2445.050667][ T3654] hsr_slave_0: entered promiscuous mode [ 2445.066979][ T3654] hsr_slave_1: entered promiscuous mode [ 2445.081136][ T3654] debugfs: 'hsr0' already exists in 'hsr' [ 2445.106533][ T3654] Cannot create hsr debugfs directory [ 2445.589717][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2446.660548][ T1884] Bluetooth: hci2: command tx timeout [ 2447.310930][T12249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2447.869230][ T7485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2447.885273][ T7485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2447.896061][ T7485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2447.906186][ T7485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2447.914181][ T7485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2448.044252][T12249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.355258][T12249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.555570][T12249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2448.950631][ T3654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2448.997994][ T3654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2449.025111][ T3654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2449.055141][ T3654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2449.117614][ T3654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2449.148064][ T3654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2449.176821][ T3654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2449.206698][ T3654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2449.986344][T12249] bridge_slave_1: left allmulticast mode [ 2450.001174][T12249] bridge_slave_1: left promiscuous mode [ 2450.007142][T12249] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.022767][ T7485] Bluetooth: hci0: command tx timeout [ 2450.035604][T12249] bridge_slave_0: left allmulticast mode [ 2450.042592][T12249] bridge_slave_0: left promiscuous mode [ 2450.048525][T12249] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.328547][T12249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2450.348104][T12249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2450.360356][T12249] bond0 (unregistering): Released all slaves [ 2451.007965][T12249] hsr_slave_0: left promiscuous mode [ 2451.014767][T12249] hsr_slave_1: left promiscuous mode [ 2451.021022][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2451.045779][T12249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2451.067489][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2451.082081][T12249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2451.110151][T12249] veth1_macvtap: left promiscuous mode [ 2451.124190][T12249] veth0_macvtap: left promiscuous mode [ 2451.140473][T12249] veth1_vlan: left promiscuous mode [ 2451.158441][T12249] veth0_vlan: left promiscuous mode [ 2451.586967][T12249] team0 (unregistering): Port device team_slave_1 removed [ 2451.624987][T12249] team0 (unregistering): Port device team_slave_0 removed [ 2452.101964][ T7485] Bluetooth: hci0: command tx timeout [ 2452.105372][ T3654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2452.440541][ T3654] 8021q: adding VLAN 0 to HW filter on device team0 [ 2452.494250][T23828] bridge0: port 1(bridge_slave_0) entered blocking state [ 2452.501525][T23828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2452.555526][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 2452.574808][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 2452.584657][ T3810] bridge_slave_0: entered allmulticast mode [ 2452.596265][ T3810] bridge_slave_0: entered promiscuous mode [ 2452.626608][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 2452.655141][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 2452.663978][ T3810] bridge_slave_1: entered allmulticast mode [ 2452.686284][ T3810] bridge_slave_1: entered promiscuous mode [ 2452.708089][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2452.715394][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2452.886805][T12249] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.993071][ T1884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2453.007806][ T1884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2453.018158][ T1884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2453.031550][ T1884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2453.041804][ T1884] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2453.285956][ T3810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2453.341886][ T3810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2453.456575][T12249] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.557343][ T3810] team0: Port device team_slave_0 added [ 2453.595826][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2453.607589][ T3810] team0: Port device team_slave_1 added [ 2453.684109][T12249] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2453.795249][ T3810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2453.802465][ T3810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2453.828987][ T3810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2453.842847][ T3810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2453.851033][ T3810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2453.877875][ T3810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2453.984751][T12249] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2454.125187][ T3810] hsr_slave_0: entered promiscuous mode [ 2454.132193][ T3810] hsr_slave_1: entered promiscuous mode [ 2454.142664][ T3810] debugfs: 'hsr0' already exists in 'hsr' [ 2454.149900][ T3810] Cannot create hsr debugfs directory [ 2454.182651][ T7485] Bluetooth: hci0: command tx timeout [ 2454.744006][T12249] bridge_slave_1: left allmulticast mode [ 2454.763594][T12249] bridge_slave_1: left promiscuous mode [ 2454.782339][T12249] bridge0: port 2(bridge_slave_1) entered disabled state [ 2454.799276][T12249] bridge_slave_0: left allmulticast mode [ 2454.811244][T12249] bridge_slave_0: left promiscuous mode [ 2454.817767][T12249] bridge0: port 1(bridge_slave_0) entered disabled state [ 2455.132507][T12249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2455.158802][ T7485] Bluetooth: hci3: command tx timeout [ 2455.172370][T12249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2455.187279][T12249] bond0 (unregistering): Released all slaves [ 2455.225146][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2455.994186][T12249] hsr_slave_0: left promiscuous mode [ 2456.000819][T12249] hsr_slave_1: left promiscuous mode [ 2456.017340][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2456.026776][T12249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2456.036044][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2456.043975][T12249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2456.058219][T12249] veth1_macvtap: left promiscuous mode [ 2456.071517][T12249] veth0_macvtap: left promiscuous mode [ 2456.084501][T12249] veth1_vlan: left promiscuous mode [ 2456.089885][T12249] veth0_vlan: left promiscuous mode [ 2456.263113][ T7485] Bluetooth: hci0: command tx timeout [ 2456.439673][T12249] team0 (unregistering): Port device team_slave_1 removed [ 2456.460577][T12249] team0 (unregistering): Port device team_slave_0 removed [ 2457.041875][ T3654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2457.224311][ T7485] Bluetooth: hci3: command tx timeout [ 2457.250442][ T3654] veth0_vlan: entered promiscuous mode [ 2457.507841][ T3654] veth1_vlan: entered promiscuous mode [ 2457.637111][ T3810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2457.664212][ T3810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2457.672439][ T3810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2457.687936][ T3810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2457.751812][ T3810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2457.763833][ T3810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2457.772077][ T3810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2457.787833][ T3810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2457.814451][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2457.822071][ T3923] bridge0: port 1(bridge_slave_0) entered disabled state [ 2457.829563][ T3923] bridge_slave_0: entered allmulticast mode [ 2457.838139][ T3923] bridge_slave_0: entered promiscuous mode [ 2457.917611][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 2457.929156][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 2457.936684][ T3923] bridge_slave_1: entered allmulticast mode [ 2457.947094][ T3923] bridge_slave_1: entered promiscuous mode [ 2458.098952][ T3923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2458.122607][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2458.147264][ T3923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2458.291488][ T3923] team0: Port device team_slave_0 added [ 2458.305989][ T3923] team0: Port device team_slave_1 added [ 2458.368033][ T3923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2458.375612][ T3923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2458.402748][ T3923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2458.417722][ T3654] veth0_macvtap: entered promiscuous mode [ 2458.441849][ T3923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2458.448965][ T3923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2458.476829][ T3923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2458.530603][ T3654] veth1_macvtap: entered promiscuous mode [ 2459.039247][ T3923] hsr_slave_0: entered promiscuous mode [ 2459.077568][ T3923] hsr_slave_1: entered promiscuous mode [ 2459.177329][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2459.304047][ T7485] Bluetooth: hci3: command tx timeout [ 2459.397096][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2459.521375][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2459.943694][T18224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2459.989593][T18224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2460.028855][ T3810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2460.112484][ T2132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2460.121178][T12249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.142525][ T2132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2460.152770][T12249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.378334][ T3810] 8021q: adding VLAN 0 to HW filter on device team0 [ 2460.538753][T12249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.649940][T12249] bridge0: port 1(bridge_slave_0) entered blocking state [ 2460.657261][T12249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2460.706871][ T4068] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 2460.876749][T12249] bridge0: port 2(bridge_slave_1) entered blocking state [ 2460.884048][T12249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2461.395316][ T7485] Bluetooth: hci3: command tx timeout [ 2462.100406][ T3923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2462.127806][ T3923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2462.139948][ T3923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2462.154933][ T3923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2462.199509][T23828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2462.228826][ T3923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2462.256280][ T3923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2462.283923][ T3923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2462.312894][ T3923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2462.608893][ T3923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2462.680533][ T3923] 8021q: adding VLAN 0 to HW filter on device team0 [ 2462.741168][T18224] bridge0: port 1(bridge_slave_0) entered blocking state [ 2462.748435][T18224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2462.911579][T18224] bridge0: port 2(bridge_slave_1) entered blocking state [ 2462.918910][T18224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2463.017930][ T4118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3932'. [ 2464.791745][ T3810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2465.068672][ T3810] veth0_vlan: entered promiscuous mode [ 2465.116672][ T3810] veth1_vlan: entered promiscuous mode [ 2465.353886][ T3810] veth0_macvtap: entered promiscuous mode [ 2465.683962][ T3810] veth1_macvtap: entered promiscuous mode [ 2466.783220][ T3810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2466.880848][ T3810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2467.007260][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.071590][T23828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.232008][T12249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2467.253499][T23828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.269013][T12249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2467.284592][T23828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.372562][T12249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2467.405754][T12249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2467.420884][ T3923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2468.617158][ T3923] veth0_vlan: entered promiscuous mode [ 2468.838555][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.845158][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2469.072232][ T3923] veth1_vlan: entered promiscuous mode [ 2469.170332][ T3923] veth0_macvtap: entered promiscuous mode [ 2469.193768][ T3923] veth1_macvtap: entered promiscuous mode [ 2469.221992][ T3923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2469.243442][ T3923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2469.297527][T18224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.319960][T18224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.376942][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.419717][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.574939][ T2132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2469.619297][ T2132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.527199][ T2132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.558710][ T2132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2472.593008][ T4264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3941'. [ 2474.741230][ T4300] FAULT_INJECTION: forcing a failure. [ 2474.741230][ T4300] name failslab, interval 1, probability 0, space 0, times 0 [ 2474.762608][ T4300] CPU: 0 UID: 0 PID: 4300 Comm: syz.3.3948 Tainted: G L syzkaller #0 PREEMPT(full) [ 2474.762658][ T4300] Tainted: [L]=SOFTLOCKUP [ 2474.762670][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2474.762688][ T4300] Call Trace: [ 2474.762698][ T4300] [ 2474.762710][ T4300] dump_stack_lvl+0x100/0x190 [ 2474.762755][ T4300] should_fail_ex.cold+0x5/0xa [ 2474.762792][ T4300] should_failslab+0xc2/0x120 [ 2474.762840][ T4300] __kmalloc_noprof+0xfc/0x820 [ 2474.762880][ T4300] ? rcu_is_watching+0x12/0xc0 [ 2474.762922][ T4300] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2474.762983][ T4300] tomoyo_realpath_from_path+0xb6/0x690 [ 2474.763043][ T4300] tomoyo_path_number_perm+0x23c/0x580 [ 2474.763085][ T4300] ? tomoyo_path_number_perm+0x22e/0x580 [ 2474.763130][ T4300] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2474.763215][ T4300] ? find_held_lock+0x2b/0x80 [ 2474.763257][ T4300] ? __fget_files+0x215/0x3d0 [ 2474.763288][ T4300] ? hook_file_ioctl_common+0x140/0x440 [ 2474.763331][ T4300] ? __fget_files+0x215/0x3d0 [ 2474.763370][ T4300] ? __fget_files+0x21f/0x3d0 [ 2474.763409][ T4300] security_file_ioctl+0xd3/0x230 [ 2474.763454][ T4300] __x64_sys_ioctl+0xb7/0x210 [ 2474.763506][ T4300] do_syscall_64+0x115/0x840 [ 2474.763562][ T4300] ? clear_bhb_loop+0x70/0xc0 [ 2474.763604][ T4300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2474.763638][ T4300] RIP: 0033:0x7f7e5fb9e0d9 [ 2474.763665][ T4300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2474.763697][ T4300] RSP: 002b:00007f7e60b26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2474.763728][ T4300] RAX: ffffffffffffffda RBX: 00007f7e5fe25fa0 RCX: 00007f7e5fb9e0d9 [ 2474.763750][ T4300] RDX: 0000000000000000 RSI: 0000000000005418 RDI: 0000000000000003 [ 2474.763770][ T4300] RBP: 00007f7e60b26090 R08: 0000000000000000 R09: 0000000000000000 [ 2474.763790][ T4300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2474.763810][ T4300] R13: 00007f7e5fe26038 R14: 00007f7e5fe25fa0 R15: 00007ffe33285ec8 [ 2474.763853][ T4300] [ 2474.764338][ T4300] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2477.261989][ T4344] FAULT_INJECTION: forcing a failure. [ 2477.261989][ T4344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2477.278939][ T4344] CPU: 1 UID: 0 PID: 4344 Comm: syz.1.3956 Tainted: G L syzkaller #0 PREEMPT(full) [ 2477.278989][ T4344] Tainted: [L]=SOFTLOCKUP [ 2477.279001][ T4344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2477.279020][ T4344] Call Trace: [ 2477.279030][ T4344] [ 2477.279042][ T4344] dump_stack_lvl+0x100/0x190 [ 2477.279086][ T4344] should_fail_ex.cold+0x5/0xa [ 2477.279124][ T4344] _copy_from_user+0x2e/0xd0 [ 2477.279174][ T4344] ucma_write+0x128/0x330 [ 2477.279329][ T4344] ? __pfx_ucma_write+0x10/0x10 [ 2477.279359][ T4344] ? bpf_lsm_file_permission+0x9/0x10 [ 2477.279391][ T4344] ? security_file_permission+0x76/0x210 [ 2477.279440][ T4344] ? rw_verify_area+0xce/0x6d0 [ 2477.279492][ T4344] vfs_write+0x2aa/0x1050 [ 2477.279525][ T4344] ? __pfx_ucma_write+0x10/0x10 [ 2477.279560][ T4344] ? __pfx_vfs_write+0x10/0x10 [ 2477.279590][ T4344] ? find_held_lock+0x2b/0x80 [ 2477.279640][ T4344] ? __fget_files+0x215/0x3d0 [ 2477.279672][ T4344] ? __fget_files+0x215/0x3d0 [ 2477.279709][ T4344] ? __fget_files+0x21f/0x3d0 [ 2477.279752][ T4344] ksys_write+0x1f8/0x250 [ 2477.279784][ T4344] ? __pfx_ksys_write+0x10/0x10 [ 2477.279826][ T4344] do_syscall_64+0x115/0x840 [ 2477.279874][ T4344] ? clear_bhb_loop+0x70/0xc0 [ 2477.279913][ T4344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2477.279947][ T4344] RIP: 0033:0x7f2edd99e0d9 [ 2477.279974][ T4344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2477.280006][ T4344] RSP: 002b:00007f2ede8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2477.280038][ T4344] RAX: ffffffffffffffda RBX: 00007f2eddc25fa0 RCX: 00007f2edd99e0d9 [ 2477.280058][ T4344] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 0000000000000003 [ 2477.280076][ T4344] RBP: 00007f2ede8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2477.280095][ T4344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2477.280114][ T4344] R13: 00007f2eddc26038 R14: 00007f2eddc25fa0 R15: 00007ffe33a689c8 [ 2477.280157][ T4344] [ 2477.834714][ T3223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2478.128728][ T3223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2478.242327][ T1884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2478.255312][ T1884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2478.264979][ T1884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2478.278257][ T1884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2478.288320][ T1884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2478.489590][ T3223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2478.686991][ T3223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2479.144833][ T3223] bridge_slave_1: left allmulticast mode [ 2479.156436][ T3223] bridge_slave_1: left promiscuous mode [ 2479.167207][ T3223] bridge0: port 2(bridge_slave_1) entered disabled state [ 2479.195852][ T3223] bridge_slave_0: left allmulticast mode [ 2479.203468][ T3223] bridge_slave_0: left promiscuous mode [ 2479.218968][ T3223] bridge0: port 1(bridge_slave_0) entered disabled state [ 2479.681440][ T3223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2479.721029][ T3223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2479.753078][ T3223] bond0 (unregistering): Released all slaves [ 2480.354076][ T1884] Bluetooth: hci1: command tx timeout [ 2480.788802][ T3223] hsr_slave_0: left promiscuous mode [ 2480.813290][ T3223] hsr_slave_1: left promiscuous mode [ 2480.829321][ T3223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2480.864740][ T3223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2480.879230][ T3223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2480.888789][ T3223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2480.924615][ T3223] veth1_macvtap: left promiscuous mode [ 2480.939683][ T3223] veth0_macvtap: left promiscuous mode [ 2480.955626][ T3223] veth1_vlan: left promiscuous mode [ 2480.970506][ T3223] veth0_vlan: left promiscuous mode [ 2481.438959][ T7485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2481.449781][ T7485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2481.460209][ T7485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2481.474803][ T7485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2481.482891][ T7485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2481.943776][ T3223] team0 (unregistering): Port device team_slave_1 removed [ 2481.984137][ T3223] team0 (unregistering): Port device team_slave_0 removed [ 2482.257234][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2482.430026][ T1884] Bluetooth: hci1: command tx timeout [ 2483.553153][ T1884] Bluetooth: hci0: command tx timeout [ 2483.676603][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2483.708845][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2483.729704][ T4353] bridge_slave_0: entered allmulticast mode [ 2483.751028][ T4353] bridge_slave_0: entered promiscuous mode [ 2483.834338][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 2483.854694][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.864886][ T4353] bridge_slave_1: entered allmulticast mode [ 2483.874115][ T4353] bridge_slave_1: entered promiscuous mode [ 2483.883887][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2483.945149][ T3223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2484.116488][ T4353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2484.131491][ T4353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2484.224824][ T3223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2484.409012][ T4353] team0: Port device team_slave_0 added [ 2484.490032][ T3223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2484.510682][ T1884] Bluetooth: hci1: command tx timeout [ 2484.570030][ T4353] team0: Port device team_slave_1 added [ 2484.685222][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2484.692715][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2484.728268][ T4353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2484.848426][ T3223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2484.881886][ T4353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2484.901268][ T4353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2484.947964][ T4353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2485.630901][ T1884] Bluetooth: hci0: command tx timeout [ 2486.264545][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2486.285957][ T4353] hsr_slave_0: entered promiscuous mode [ 2486.292894][ T4353] hsr_slave_1: entered promiscuous mode [ 2486.299179][ T4353] debugfs: 'hsr0' already exists in 'hsr' [ 2486.305558][ T4353] Cannot create hsr debugfs directory [ 2486.591602][ T1884] Bluetooth: hci1: command tx timeout [ 2486.708553][ T3223] bridge_slave_1: left allmulticast mode [ 2486.714603][ T3223] bridge_slave_1: left promiscuous mode [ 2486.720635][ T3223] bridge0: port 2(bridge_slave_1) entered disabled state [ 2486.732896][ T3223] bridge_slave_0: left allmulticast mode [ 2486.738607][ T3223] bridge_slave_0: left promiscuous mode [ 2486.744657][ T3223] bridge0: port 1(bridge_slave_0) entered disabled state [ 2486.921486][ T3223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2486.932929][ T3223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2486.952801][ T3223] bond0 (unregistering): Released all slaves [ 2487.589380][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 2487.598483][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 2487.605902][ T4386] bridge_slave_0: entered allmulticast mode [ 2487.617584][ T4386] bridge_slave_0: entered promiscuous mode [ 2487.629936][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 2487.648091][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 2487.660850][ T4386] bridge_slave_1: entered allmulticast mode [ 2487.681043][ T4386] bridge_slave_1: entered promiscuous mode [ 2487.712016][ T1884] Bluetooth: hci0: command tx timeout [ 2487.862255][ T4386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2487.908536][ T3223] hsr_slave_0: left promiscuous mode [ 2487.922120][ T3223] hsr_slave_1: left promiscuous mode [ 2487.938044][ T3223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2487.954529][ T3223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2487.964882][ T3223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2487.981702][ T3223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2488.004301][ T3223] veth1_macvtap: left promiscuous mode [ 2488.009947][ T3223] veth0_macvtap: left promiscuous mode [ 2488.017504][ T3223] veth1_vlan: left promiscuous mode [ 2488.023073][ T3223] veth0_vlan: left promiscuous mode [ 2488.607701][ T3223] team0 (unregistering): Port device team_slave_1 removed [ 2488.634305][ T3223] team0 (unregistering): Port device team_slave_0 removed [ 2488.840652][ T4386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2488.977525][ T4386] team0: Port device team_slave_0 added [ 2488.988740][ T4386] team0: Port device team_slave_1 added [ 2489.142904][ T4386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2489.150003][ T4386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2489.180035][ T4386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2489.311076][ T4386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2489.334077][ T4386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2489.361330][ T4386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2489.760051][ T4386] hsr_slave_0: entered promiscuous mode [ 2489.768521][ T4386] hsr_slave_1: entered promiscuous mode [ 2489.778167][ T4386] debugfs: 'hsr0' already exists in 'hsr' [ 2489.786608][ T4386] Cannot create hsr debugfs directory [ 2489.792144][ T1884] Bluetooth: hci0: command tx timeout [ 2490.393355][ T4353] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2490.421028][ T4353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2490.494869][ T4353] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2490.534094][ T4353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2490.546395][ T4353] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2490.577449][ T4353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2490.704157][ T4353] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2490.727179][ T4353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2490.865224][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2492.506793][ T4353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2492.693752][ T4386] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2492.705943][ T4386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2492.714286][ T4386] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2492.726178][ T4386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2492.807119][ T4386] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2492.817446][ T4386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2492.908349][ T4386] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2492.918558][ T4386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2492.969791][ T4353] 8021q: adding VLAN 0 to HW filter on device team0 [ 2493.020586][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 2493.027877][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2493.115055][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2493.122320][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2493.372163][ T4386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2493.436829][ T4386] 8021q: adding VLAN 0 to HW filter on device team0 [ 2493.492447][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state [ 2493.499767][ T3223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2493.545287][ T3223] bridge0: port 2(bridge_slave_1) entered blocking state [ 2493.552630][ T3223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2494.093385][ T4600] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1890.0.2190700454), cmd(12) [ 2495.915413][ T4353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2497.329245][ T4386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2497.483601][ T4353] veth0_vlan: entered promiscuous mode [ 2497.535271][ T4353] veth1_vlan: entered promiscuous mode [ 2497.567678][ T4386] veth0_vlan: entered promiscuous mode [ 2497.603203][ T4386] veth1_vlan: entered promiscuous mode [ 2497.653234][ T4353] veth0_macvtap: entered promiscuous mode [ 2497.687075][ T4353] veth1_macvtap: entered promiscuous mode [ 2497.764944][ T4386] veth0_macvtap: entered promiscuous mode [ 2497.802757][ T4386] veth1_macvtap: entered promiscuous mode [ 2497.964426][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2498.139056][ T4386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2498.355413][ T4386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2498.417841][ T4353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2498.686538][ T3223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2498.730820][ T3223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2499.506628][T12249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2499.732859][ T2132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2499.854355][ T6984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2499.943317][T18224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2499.959185][ T2132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2499.975598][T18224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2500.064239][T18224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2500.072643][ T2132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2500.111131][T18224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2500.146789][ T6984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2500.271517][ T2132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2500.287003][ T2132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2500.446549][ T6984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2500.469870][ T6984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2501.188293][ T30] audit: type=1800 audit(4294968863.277:2): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3957" name="dbroot" dev="configfs" ino=337454 res=0 errno=0 [ 2501.228110][ T4761] mmap: syz.2.3957 (4761) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2502.869453][ T4769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3980'. [ 2503.471800][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3982'. [ 2505.797569][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3985'. [ 2514.793011][ T5830] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2514.934776][ T4945] FAULT_INJECTION: forcing a failure. [ 2514.934776][ T4945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2514.988250][ T4945] CPU: 1 UID: 0 PID: 4945 Comm: syz.1.4007 Tainted: G L syzkaller #0 PREEMPT(full) [ 2514.988308][ T4945] Tainted: [L]=SOFTLOCKUP [ 2514.988320][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2514.988338][ T4945] Call Trace: [ 2514.988348][ T4945] [ 2514.988360][ T4945] dump_stack_lvl+0x100/0x190 [ 2514.988407][ T4945] should_fail_ex.cold+0x5/0xa [ 2514.988449][ T4945] _copy_from_iter+0x1f4/0x1690 [ 2514.988515][ T4945] ? __pfx__copy_from_iter+0x10/0x10 [ 2514.988566][ T4945] ? trace_kmalloc+0xeb/0x110 [ 2514.988614][ T4945] ? __kasan_kmalloc+0xaa/0xb0 [ 2514.988659][ T4945] ? __kmalloc_noprof+0x343/0x820 [ 2514.988703][ T4945] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 2514.988755][ T4945] kernfs_fop_write_iter+0x186/0x5f0 [ 2514.988804][ T4945] vfs_write+0x6ac/0x1050 [ 2514.988838][ T4945] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2514.988887][ T4945] ? __pfx_vfs_write+0x10/0x10 [ 2514.988955][ T4945] ksys_write+0x12a/0x250 [ 2514.988989][ T4945] ? __pfx_ksys_write+0x10/0x10 [ 2514.989034][ T4945] do_syscall_64+0x115/0x840 [ 2514.989085][ T4945] ? clear_bhb_loop+0x70/0xc0 [ 2514.989127][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2514.989161][ T4945] RIP: 0033:0x7f2edd99e0d9 [ 2514.989187][ T4945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2514.989219][ T4945] RSP: 002b:00007f2ede8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2514.989250][ T4945] RAX: ffffffffffffffda RBX: 00007f2eddc25fa0 RCX: 00007f2edd99e0d9 [ 2514.989272][ T4945] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 2514.989291][ T4945] RBP: 00007f2ede8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2514.989312][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2514.989331][ T4945] R13: 00007f2eddc26038 R14: 00007f2eddc25fa0 R15: 00007ffe33a689c8 [ 2514.989374][ T4945] [ 2515.596674][ T7485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2515.609208][ T7485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2515.618196][ T7485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2515.631034][ T7485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2515.640238][ T7485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2515.723759][ T5830] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2516.101560][ T5830] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2516.350031][ T5830] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2516.858119][ T5830] bridge_slave_1: left allmulticast mode [ 2516.874137][ T5830] bridge_slave_1: left promiscuous mode [ 2516.882287][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 2516.907207][ T5830] bridge_slave_0: left allmulticast mode [ 2516.924572][ T5830] bridge_slave_0: left promiscuous mode [ 2516.931548][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 2517.421259][ T5830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2517.450949][ T5830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2517.474222][ T5830] bond0 (unregistering): Released all slaves [ 2517.727427][ T7485] Bluetooth: hci0: command tx timeout [ 2518.306996][ T5008] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2518.810216][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2519.183344][ T5830] hsr_slave_0: left promiscuous mode [ 2519.198441][ T5830] hsr_slave_1: left promiscuous mode [ 2519.208127][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2519.227395][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2519.235730][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2519.248530][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2519.265537][ T5830] veth1_macvtap: left promiscuous mode [ 2519.271615][ T5830] veth0_macvtap: left promiscuous mode [ 2519.280303][ T5830] veth1_vlan: left promiscuous mode [ 2519.285873][ T5830] veth0_vlan: left promiscuous mode [ 2519.635285][ T5830] team0 (unregistering): Port device team_slave_1 removed [ 2519.664598][ T5830] team0 (unregistering): Port device team_slave_0 removed [ 2519.810006][ T7485] Bluetooth: hci0: command tx timeout [ 2520.822392][ T4955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2520.879327][ T4955] bridge0: port 1(bridge_slave_0) entered disabled state [ 2520.904201][ T4955] bridge_slave_0: entered allmulticast mode [ 2520.953120][ T4955] bridge_slave_0: entered promiscuous mode [ 2521.026473][ T4955] bridge0: port 2(bridge_slave_1) entered blocking state [ 2521.051773][ T4955] bridge0: port 2(bridge_slave_1) entered disabled state [ 2521.083101][ T4955] bridge_slave_1: entered allmulticast mode [ 2521.105305][ T4955] bridge_slave_1: entered promiscuous mode [ 2521.291489][ T4955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2521.403994][ T4955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2521.773923][ T5830] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2521.892031][ T7485] Bluetooth: hci0: command tx timeout [ 2521.936795][ T4955] team0: Port device team_slave_0 added [ 2521.952102][ T1884] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2521.968771][ T1884] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2521.981435][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2521.990942][ T1884] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2522.012542][ T1884] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2522.020711][ T1884] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2522.109117][ T4955] team0: Port device team_slave_1 added [ 2522.248035][ T5830] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2522.347607][ T4955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2522.355123][ T4955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2522.381388][ T4955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2522.606791][ T5830] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2522.685988][ T4955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2522.703439][ T4955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2522.759684][ T4955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2522.917485][ T5830] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2523.270750][ T4955] hsr_slave_0: entered promiscuous mode [ 2523.285171][ T4955] hsr_slave_1: entered promiscuous mode [ 2523.292520][ T4955] debugfs: 'hsr0' already exists in 'hsr' [ 2523.298604][ T4955] Cannot create hsr debugfs directory [ 2523.862718][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2523.975647][ T7485] Bluetooth: hci0: command tx timeout [ 2524.081377][ T5830] bridge_slave_1: left allmulticast mode [ 2524.090335][ T5830] bridge_slave_1: left promiscuous mode [ 2524.111443][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 2524.123389][ T5830] bridge_slave_0: left allmulticast mode [ 2524.131690][ T5830] bridge_slave_0: left promiscuous mode [ 2524.137923][ T7485] Bluetooth: hci1: command tx timeout [ 2524.147492][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 2524.392039][ T5830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2524.412153][ T5830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2524.428260][ T5830] bond0 (unregistering): Released all slaves [ 2525.630849][ T5830] hsr_slave_0: left promiscuous mode [ 2525.639611][ T5830] hsr_slave_1: left promiscuous mode [ 2525.651246][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2525.669909][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2525.680779][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2525.698444][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2525.732053][ T5830] veth1_macvtap: left promiscuous mode [ 2525.737661][ T5830] veth0_macvtap: left promiscuous mode [ 2525.747020][ T5830] veth1_vlan: left promiscuous mode [ 2525.752630][ T5830] veth0_vlan: left promiscuous mode [ 2526.107807][ T5830] team0 (unregistering): Port device team_slave_1 removed [ 2526.135387][ T5830] team0 (unregistering): Port device team_slave_0 removed [ 2526.231548][ T7485] Bluetooth: hci1: command tx timeout [ 2526.758201][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 2526.769019][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.778728][ T5046] bridge_slave_0: entered allmulticast mode [ 2526.788847][ T5046] bridge_slave_0: entered promiscuous mode [ 2526.807037][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 2526.814472][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 2526.821838][ T5046] bridge_slave_1: entered allmulticast mode [ 2526.833085][ T5046] bridge_slave_1: entered promiscuous mode [ 2526.919695][ T5046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2526.935735][ T5046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2527.273118][ T5046] team0: Port device team_slave_0 added [ 2527.284596][ T5046] team0: Port device team_slave_1 added [ 2527.437952][ T4955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2527.462168][ T4955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2527.662154][ T4955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2527.711212][ T4955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2527.746261][ T4955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2527.766372][ T4955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2527.899298][ T5046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2527.934121][ T5046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2528.007092][ T5046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2528.109683][ T4955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2528.129641][ T4955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2528.297706][ T5046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2528.305201][ T5046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2528.331252][ T7485] Bluetooth: hci1: command tx timeout [ 2528.339569][ T5046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2528.413326][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2528.772247][ T5046] hsr_slave_0: entered promiscuous mode [ 2528.778917][ T5046] hsr_slave_1: entered promiscuous mode [ 2528.785941][ T5046] debugfs: 'hsr0' already exists in 'hsr' [ 2528.791961][ T5046] Cannot create hsr debugfs directory [ 2529.535883][ T4955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2530.196859][ T4955] 8021q: adding VLAN 0 to HW filter on device team0 [ 2530.309896][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2530.319517][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.397418][ T7485] Bluetooth: hci1: command tx timeout [ 2530.488459][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state [ 2530.495823][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2530.508395][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 2530.515678][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2530.850287][ T5046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2530.890948][ T5046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2530.932953][ T5046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2530.998382][ T5046] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2531.020152][ T5046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2531.061717][ T5046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2531.090084][ T5046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2531.109854][ T5196] FAULT_INJECTION: forcing a failure. [ 2531.109854][ T5196] name failslab, interval 1, probability 0, space 0, times 0 [ 2531.111715][ T5046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2531.165211][ T5196] CPU: 1 UID: 0 PID: 5196 Comm: syz.1.4026 Tainted: G L syzkaller #0 PREEMPT(full) [ 2531.165257][ T5196] Tainted: [L]=SOFTLOCKUP [ 2531.165267][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2531.165284][ T5196] Call Trace: [ 2531.165294][ T5196] [ 2531.165305][ T5196] dump_stack_lvl+0x100/0x190 [ 2531.165346][ T5196] should_fail_ex.cold+0x5/0xa [ 2531.165379][ T5196] should_failslab+0xc2/0x120 [ 2531.165418][ T5196] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 2531.165463][ T5196] ? __get_vm_area_node+0x101/0x330 [ 2531.165517][ T5196] __get_vm_area_node+0x101/0x330 [ 2531.165572][ T5196] __vmalloc_node_range_noprof+0x228/0x1630 [ 2531.165627][ T5196] ? kernel_clone+0x176/0x9d0 [ 2531.165668][ T5196] ? rcu_is_watching+0x12/0xc0 [ 2531.165720][ T5196] ? kernel_clone+0x176/0x9d0 [ 2531.165763][ T5196] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 2531.165810][ T5196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2531.165867][ T5196] ? trace_kmem_cache_alloc+0xdd/0x100 [ 2531.165915][ T5196] ? kernel_clone+0x176/0x9d0 [ 2531.165964][ T5196] __vmalloc_node_noprof+0xad/0xf0 [ 2531.166009][ T5196] ? kernel_clone+0x176/0x9d0 [ 2531.166047][ T5196] copy_process+0x7fb/0x8030 [ 2531.166085][ T5196] ? __lock_acquire+0x49f/0x1a40 [ 2531.166128][ T5196] ? __pfx_copy_process+0x10/0x10 [ 2531.166165][ T5196] ? find_held_lock+0x2b/0x80 [ 2531.166220][ T5196] kernel_clone+0x176/0x9d0 [ 2531.166256][ T5196] ? find_held_lock+0x2b/0x80 [ 2531.166297][ T5196] ? __pfx_kernel_clone+0x10/0x10 [ 2531.166348][ T5196] ? ksys_write+0x190/0x250 [ 2531.166388][ T5196] __do_sys_clone+0xd9/0x120 [ 2531.166431][ T5196] ? __pfx___do_sys_clone+0x10/0x10 [ 2531.166471][ T5196] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2531.166542][ T5196] ? ksys_write+0x1ac/0x250 [ 2531.166573][ T5196] ? __pfx_ksys_write+0x10/0x10 [ 2531.166616][ T5196] do_syscall_64+0x115/0x840 [ 2531.166666][ T5196] ? clear_bhb_loop+0x70/0xc0 [ 2531.166707][ T5196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2531.166742][ T5196] RIP: 0033:0x7f2edd99e0d9 [ 2531.166769][ T5196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2531.166801][ T5196] RSP: 002b:00007f2ede8b3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2531.166833][ T5196] RAX: ffffffffffffffda RBX: 00007f2eddc25fa0 RCX: 00007f2edd99e0d9 [ 2531.166855][ T5196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 2531.166874][ T5196] RBP: 00007f2ede8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2531.166893][ T5196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2531.166912][ T5196] R13: 00007f2eddc26038 R14: 00007f2eddc25fa0 R15: 00007ffe33a689c8 [ 2531.166963][ T5196] [ 2531.438125][ T5196] syz.1.4026: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2531.456607][ T5196] CPU: 1 UID: 0 PID: 5196 Comm: syz.1.4026 Tainted: G L syzkaller #0 PREEMPT(full) [ 2531.456648][ T5196] Tainted: [L]=SOFTLOCKUP [ 2531.456658][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2531.456674][ T5196] Call Trace: [ 2531.456682][ T5196] [ 2531.456691][ T5196] dump_stack_lvl+0x100/0x190 [ 2531.456728][ T5196] warn_alloc.cold+0x94/0xa8 [ 2531.456755][ T5196] ? __pfx_warn_alloc+0x10/0x10 [ 2531.456784][ T5196] ? __kasan_kmalloc+0x8a/0xb0 [ 2531.456833][ T5196] ? __get_vm_area_node+0x208/0x330 [ 2531.456883][ T5196] __vmalloc_node_range_noprof+0xccd/0x1630 [ 2531.456925][ T5196] ? rcu_is_watching+0x12/0xc0 [ 2531.456969][ T5196] ? kernel_clone+0x176/0x9d0 [ 2531.457010][ T5196] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 2531.457059][ T5196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2531.457115][ T5196] ? trace_kmem_cache_alloc+0xdd/0x100 [ 2531.457162][ T5196] ? kernel_clone+0x176/0x9d0 [ 2531.457192][ T5196] __vmalloc_node_noprof+0xad/0xf0 [ 2531.457231][ T5196] ? kernel_clone+0x176/0x9d0 [ 2531.457266][ T5196] copy_process+0x7fb/0x8030 [ 2531.457303][ T5196] ? __lock_acquire+0x49f/0x1a40 [ 2531.457357][ T5196] ? __pfx_copy_process+0x10/0x10 [ 2531.457397][ T5196] ? find_held_lock+0x2b/0x80 [ 2531.457455][ T5196] kernel_clone+0x176/0x9d0 [ 2531.457492][ T5196] ? find_held_lock+0x2b/0x80 [ 2531.457535][ T5196] ? __pfx_kernel_clone+0x10/0x10 [ 2531.457587][ T5196] ? ksys_write+0x190/0x250 [ 2531.457627][ T5196] __do_sys_clone+0xd9/0x120 [ 2531.457669][ T5196] ? __pfx___do_sys_clone+0x10/0x10 [ 2531.457709][ T5196] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2531.457779][ T5196] ? ksys_write+0x1ac/0x250 [ 2531.457811][ T5196] ? __pfx_ksys_write+0x10/0x10 [ 2531.457854][ T5196] do_syscall_64+0x115/0x840 [ 2531.457903][ T5196] ? clear_bhb_loop+0x70/0xc0 [ 2531.457942][ T5196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2531.457975][ T5196] RIP: 0033:0x7f2edd99e0d9 [ 2531.458000][ T5196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2531.458032][ T5196] RSP: 002b:00007f2ede8b3fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2531.458064][ T5196] RAX: ffffffffffffffda RBX: 00007f2eddc25fa0 RCX: 00007f2edd99e0d9 [ 2531.458084][ T5196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 2531.458102][ T5196] RBP: 00007f2ede8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2531.458120][ T5196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2531.458139][ T5196] R13: 00007f2eddc26038 R14: 00007f2eddc25fa0 R15: 00007ffe33a689c8 [ 2531.458179][ T5196] [ 2531.716663][ T5196] Mem-Info: [ 2531.720087][ T5196] active_anon:17642 inactive_anon:0 isolated_anon:0 [ 2531.720087][ T5196] active_file:32 inactive_file:53960 isolated_file:0 [ 2531.720087][ T5196] unevictable:0 dirty:1742 writeback:0 [ 2531.720087][ T5196] slab_reclaimable:15392 slab_unreclaimable:95675 [ 2531.720087][ T5196] mapped:27307 shmem:521 pagetables:1118 [ 2531.720087][ T5196] sec_pagetables:0 bounce:0 [ 2531.720087][ T5196] kernel_misc_reclaimable:0 [ 2531.720087][ T5196] free:1308761 free_pcp:9114 free_cma:0 [ 2531.765508][ T5196] Node 0 active_anon:70568kB inactive_anon:0kB active_file:128kB inactive_file:215632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109228kB dirty:6964kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11212kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2531.799881][ T5196] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2531.832500][ T5196] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2531.862910][ T5196] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 2531.868906][ T5196] Node 0 DMA32 free:1277376kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70568kB inactive_anon:0kB active_file:128kB inactive_file:215632kB unevictable:0kB writepending:6964kB zspages:0kB present:3129332kB managed:2532516kB mlocked:0kB bounce:0kB free_pcp:36456kB local_pcp:17480kB free_cma:0kB [ 2531.902360][ T5196] lowmem_reserve[]: 0 0 0 0 0 [ 2531.907272][ T5196] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:396kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2531.937410][ T5196] lowmem_reserve[]: 0 0 0 0 0 [ 2531.944004][ T5196] Node 1 Normal free:3942308kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2531.975547][ T5196] lowmem_reserve[]: 0 0 0 0 0 [ 2531.986805][ T5196] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2532.011884][ T5196] Node 0 DMA32: 2202*4kB (UM) 787*8kB (UME) 808*16kB (UME) 458*32kB (UME) 212*64kB (UME) 204*128kB (UME) 96*256kB (UM) 80*512kB (UM) 63*1024kB (UME) 16*2048kB (UME) 252*4096kB (UM) = 1277376kB [ 2532.055447][ T5196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2532.090579][ T5196] Node 1 Normal: 5*4kB (UM) 2*8kB (UM) 6*16kB (UM) 9*32kB (UM) 4*64kB (UM) 6*128kB (UM) 6*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3942308kB [ 2532.138481][ T5196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2532.180061][ T5196] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2532.202972][ T5196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2532.228950][ T5196] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2532.252943][ T5196] 54512 total pagecache pages [ 2532.267126][ T5196] 0 pages in swap cache [ 2532.283571][ T5196] Free swap = 124996kB [ 2532.303779][ T5196] Total swap = 124996kB [ 2532.318565][ T5196] 2097051 pages RAM [ 2532.330362][ T5196] 0 pages HighMem/MovableOnly [ 2532.338855][ T5046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2532.345912][ T5196] 432208 pages reserved [ 2532.355121][ T5196] 0 pages cma reserved [ 2532.403572][ T5046] 8021q: adding VLAN 0 to HW filter on device team0 [ 2532.455655][ T3223] bridge0: port 1(bridge_slave_0) entered blocking state [ 2532.463111][ T3223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2532.645804][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 2532.653084][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2533.149289][ T4955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2534.342942][ T4955] veth0_vlan: entered promiscuous mode [ 2534.408807][ T4955] veth1_vlan: entered promiscuous mode [ 2534.530540][ T4955] veth0_macvtap: entered promiscuous mode [ 2534.582617][ T4955] veth1_macvtap: entered promiscuous mode [ 2534.633316][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2534.738268][ T4955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2534.823384][T23828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2535.615246][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2536.118922][T23828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2536.189816][ T6984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2536.215704][ T6984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2536.456688][ T6984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2536.527397][ T5046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2536.561276][ T5830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2536.582045][ T5830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2536.733687][ T5046] veth0_vlan: entered promiscuous mode [ 2536.749917][ T5046] veth1_vlan: entered promiscuous mode [ 2536.823486][ T5046] veth0_macvtap: entered promiscuous mode [ 2536.855847][ T5046] veth1_macvtap: entered promiscuous mode [ 2537.150163][ T5046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2537.172211][ T5046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2537.958159][ T6984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2537.984616][ T6984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2538.663481][T12249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2539.075960][ T3223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2539.229569][ T5830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2539.254949][ T5830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2539.332704][T23828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2539.341968][T23828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2539.942866][ T5394] FAULT_INJECTION: forcing a failure. [ 2539.942866][ T5394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2539.963266][ T5394] CPU: 1 UID: 0 PID: 5394 Comm: syz.2.4015 Tainted: G L syzkaller #0 PREEMPT(full) [ 2539.963315][ T5394] Tainted: [L]=SOFTLOCKUP [ 2539.963327][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2539.963345][ T5394] Call Trace: [ 2539.963355][ T5394] [ 2539.963366][ T5394] dump_stack_lvl+0x100/0x190 [ 2539.963409][ T5394] should_fail_ex.cold+0x5/0xa [ 2539.963446][ T5394] _copy_from_user+0x2e/0xd0 [ 2539.963499][ T5394] tipc_setsockopt+0x927/0xe30 [ 2539.963658][ T5394] ? __pfx_tipc_setsockopt+0x10/0x10 [ 2539.963706][ T5394] ? aa_sock_opt_perm+0xfe/0x1b0 [ 2539.963774][ T5394] ? __pfx_tipc_setsockopt+0x10/0x10 [ 2539.963814][ T5394] do_sock_setsockopt+0xf3/0x1d0 [ 2539.963906][ T5394] __sys_setsockopt+0x119/0x190 [ 2539.963961][ T5394] __x64_sys_setsockopt+0xbd/0x160 [ 2539.964006][ T5394] ? do_syscall_64+0x90/0x840 [ 2539.964054][ T5394] ? lockdep_hardirqs_on+0x78/0x100 [ 2539.964097][ T5394] do_syscall_64+0x115/0x840 [ 2539.964143][ T5394] ? clear_bhb_loop+0x70/0xc0 [ 2539.964184][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2539.964217][ T5394] RIP: 0033:0x7f3370d9e0d9 [ 2539.964243][ T5394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2539.964272][ T5394] RSP: 002b:00007f3371c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2539.964303][ T5394] RAX: ffffffffffffffda RBX: 00007f3371026090 RCX: 00007f3370d9e0d9 [ 2539.964323][ T5394] RDX: 0000000000000080 RSI: 000000000000010f RDI: 0000000000000004 [ 2539.964343][ T5394] RBP: 00007f3371c8c090 R08: 0000000000000014 R09: 0000000000000000 [ 2539.964363][ T5394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2539.964383][ T5394] R13: 00007f3371026128 R14: 00007f3371026090 R15: 00007ffd79621608 [ 2539.964425][ T5394] [ 2542.299038][ T5428] FAULT_INJECTION: forcing a failure. [ 2542.299038][ T5428] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.313101][ T5428] CPU: 0 UID: 0 PID: 5428 Comm: syz.1.4041 Tainted: G L syzkaller #0 PREEMPT(full) [ 2542.313153][ T5428] Tainted: [L]=SOFTLOCKUP [ 2542.313165][ T5428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2542.313184][ T5428] Call Trace: [ 2542.313194][ T5428] [ 2542.313206][ T5428] dump_stack_lvl+0x100/0x190 [ 2542.313249][ T5428] should_fail_ex.cold+0x5/0xa [ 2542.313286][ T5428] should_failslab+0xc2/0x120 [ 2542.313339][ T5428] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 2542.313385][ T5428] ? __alloc_skb+0x5b7/0x710 [ 2542.313429][ T5428] ? __alloc_skb+0x140/0x710 [ 2542.313481][ T5428] __alloc_skb+0x140/0x710 [ 2542.313523][ T5428] ? __alloc_skb+0x5b7/0x710 [ 2542.313568][ T5428] ? __pfx___alloc_skb+0x10/0x10 [ 2542.313624][ T5428] netlink_alloc_large_skb+0x69/0x150 [ 2542.313812][ T5428] netlink_sendmsg+0x680/0xda0 [ 2542.313858][ T5428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2542.313904][ T5428] ? apparmor_socket_sendmsg+0x15b/0x270 [ 2542.313946][ T5428] ____sys_sendmsg+0xa4d/0xbe0 [ 2542.313979][ T5428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2542.314021][ T5428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2542.314075][ T5428] ___sys_sendmsg+0x190/0x1e0 [ 2542.314115][ T5428] ? __pfx____sys_sendmsg+0x10/0x10 [ 2542.314150][ T5428] ? __lock_acquire+0x49f/0x1a40 [ 2542.314187][ T5428] ? get_pid_task+0x106/0x250 [ 2542.314274][ T5428] __sys_sendmsg+0x160/0x210 [ 2542.314325][ T5428] ? __pfx___sys_sendmsg+0x10/0x10 [ 2542.314395][ T5428] do_syscall_64+0x115/0x840 [ 2542.314450][ T5428] ? clear_bhb_loop+0x70/0xc0 [ 2542.314490][ T5428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2542.314524][ T5428] RIP: 0033:0x7f2edd99e0d9 [ 2542.314551][ T5428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2542.314584][ T5428] RSP: 002b:00007f2ede8b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2542.314614][ T5428] RAX: ffffffffffffffda RBX: 00007f2eddc25fa0 RCX: 00007f2edd99e0d9 [ 2542.314634][ T5428] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 2542.314654][ T5428] RBP: 00007f2ede8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2542.314673][ T5428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2542.314691][ T5428] R13: 00007f2eddc26038 R14: 00007f2eddc25fa0 R15: 00007ffe33a689c8 [ 2542.314738][ T5428] [ 2545.205605][ T5482] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1927.0.2190700454), cmd(12) [ 2552.267529][ T5566] FAULT_INJECTION: forcing a failure. [ 2552.267529][ T5566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2552.286666][ T5566] CPU: 1 UID: 0 PID: 5566 Comm: syz.0.4061 Tainted: G L syzkaller #0 PREEMPT(full) [ 2552.286715][ T5566] Tainted: [L]=SOFTLOCKUP [ 2552.286726][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2552.286745][ T5566] Call Trace: [ 2552.286756][ T5566] [ 2552.286768][ T5566] dump_stack_lvl+0x100/0x190 [ 2552.286812][ T5566] should_fail_ex.cold+0x5/0xa [ 2552.286850][ T5566] _copy_to_user+0x32/0xd0 [ 2552.286905][ T5566] simple_read_from_buffer+0xcb/0x170 [ 2552.286968][ T5566] proc_fail_nth_read+0x1af/0x230 [ 2552.287101][ T5566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2552.287155][ T5566] ? rw_verify_area+0xce/0x6d0 [ 2552.287206][ T5566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2552.287255][ T5566] vfs_read+0x1e4/0xb40 [ 2552.287292][ T5566] ? __pfx_vfs_read+0x10/0x10 [ 2552.287322][ T5566] ? __fget_files+0x215/0x3d0 [ 2552.287371][ T5566] ? __fget_files+0x21f/0x3d0 [ 2552.287414][ T5566] ksys_read+0x12a/0x250 [ 2552.287445][ T5566] ? __pfx_ksys_read+0x10/0x10 [ 2552.287490][ T5566] do_syscall_64+0x115/0x840 [ 2552.287539][ T5566] ? clear_bhb_loop+0x70/0xc0 [ 2552.287581][ T5566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2552.287615][ T5566] RIP: 0033:0x7fa55135e90e [ 2552.287643][ T5566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2552.287675][ T5566] RSP: 002b:00007fa552214fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2552.287706][ T5566] RAX: ffffffffffffffda RBX: 00007fa5522156c0 RCX: 00007fa55135e90e [ 2552.287727][ T5566] RDX: 000000000000000f RSI: 00007fa5522150a0 RDI: 0000000000000004 [ 2552.287746][ T5566] RBP: 00007fa552215090 R08: 0000000000000000 R09: 0000000000000000 [ 2552.287766][ T5566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2552.287786][ T5566] R13: 00007fa551626038 R14: 00007fa551625fa0 R15: 00007fffe1b8dee8 [ 2552.287827][ T5566] [ 2554.509928][ T5602] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2203.0.2175620603), cmd(12) [ 2555.708789][ T5633] FAULT_INJECTION: forcing a failure. [ 2555.708789][ T5633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2555.733165][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz.1.4071 Tainted: G L syzkaller #0 PREEMPT(full) [ 2555.733215][ T5633] Tainted: [L]=SOFTLOCKUP [ 2555.733227][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2555.733245][ T5633] Call Trace: [ 2555.733255][ T5633] [ 2555.733267][ T5633] dump_stack_lvl+0x100/0x190 [ 2555.733310][ T5633] should_fail_ex.cold+0x5/0xa [ 2555.733349][ T5633] core_sys_select+0x938/0xbb0 [ 2555.733391][ T5633] ? __pfx_core_sys_select+0x10/0x10 [ 2555.733422][ T5633] ? get_pid_task+0xfc/0x250 [ 2555.733472][ T5633] ? get_pid_task+0x106/0x250 [ 2555.733546][ T5633] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2555.733608][ T5633] kern_select+0x1d0/0x280 [ 2555.733644][ T5633] ? __pfx_kern_select+0x10/0x10 [ 2555.733689][ T5633] ? __pfx_ksys_write+0x10/0x10 [ 2555.733727][ T5633] __x64_sys_select+0xbd/0x160 [ 2555.733757][ T5633] ? do_syscall_64+0x90/0x840 [ 2555.733804][ T5633] ? lockdep_hardirqs_on+0x78/0x100 [ 2555.733852][ T5633] do_syscall_64+0x115/0x840 [ 2555.733900][ T5633] ? clear_bhb_loop+0x70/0xc0 [ 2555.733948][ T5633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2555.733984][ T5633] RIP: 0033:0x7f2edd99e0d9 [ 2555.734014][ T5633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2555.734043][ T5633] RSP: 002b:00007f2ede8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 2555.734073][ T5633] RAX: ffffffffffffffda RBX: 00007f2eddc25fa0 RCX: 00007f2edd99e0d9 [ 2555.734093][ T5633] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 2555.734111][ T5633] RBP: 00007f2ede8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2555.734136][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2555.734155][ T5633] R13: 00007f2eddc26038 R14: 00007f2eddc25fa0 R15: 00007ffe33a689c8 [ 2555.734194][ T5633] [ 2558.830206][ T5678] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2559.279454][ T5692] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2559.331639][ T5694] FAULT_INJECTION: forcing a failure. [ 2559.331639][ T5694] name failslab, interval 1, probability 0, space 0, times 0 [ 2559.362603][ T5694] CPU: 1 UID: 0 PID: 5694 Comm: syz.2.4081 Tainted: G L syzkaller #0 PREEMPT(full) [ 2559.362655][ T5694] Tainted: [L]=SOFTLOCKUP [ 2559.362666][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2559.362685][ T5694] Call Trace: [ 2559.362695][ T5694] [ 2559.362708][ T5694] dump_stack_lvl+0x100/0x190 [ 2559.362752][ T5694] should_fail_ex.cold+0x5/0xa [ 2559.362793][ T5694] should_failslab+0xc2/0x120 [ 2559.362842][ T5694] __kmalloc_noprof+0xfc/0x820 [ 2559.362890][ T5694] ? __pfx_inc_ucount+0x10/0x10 [ 2559.362934][ T5694] ? net_alloc_generic+0x1e/0x70 [ 2559.362992][ T5694] net_alloc_generic+0x1e/0x70 [ 2559.363042][ T5694] copy_net_ns+0xc6/0x7c0 [ 2559.363071][ T5694] ? copy_cgroup_ns+0x71/0x970 [ 2559.363108][ T5694] create_new_namespaces+0x3ea/0xac0 [ 2559.363155][ T5694] unshare_nsproxy_namespaces+0xf2/0x220 [ 2559.363203][ T5694] ksys_unshare+0x438/0xab0 [ 2559.363249][ T5694] ? __pfx_ksys_unshare+0x10/0x10 [ 2559.363294][ T5694] ? ksys_write+0x1ac/0x250 [ 2559.363339][ T5694] __x64_sys_unshare+0x31/0x40 [ 2559.363383][ T5694] do_syscall_64+0x115/0x840 [ 2559.363431][ T5694] ? clear_bhb_loop+0x70/0xc0 [ 2559.363472][ T5694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2559.363505][ T5694] RIP: 0033:0x7f3370d9e0d9 [ 2559.363533][ T5694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2559.363566][ T5694] RSP: 002b:00007f3371c6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2559.363596][ T5694] RAX: ffffffffffffffda RBX: 00007f3371026180 RCX: 00007f3370d9e0d9 [ 2559.363616][ T5694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 2559.363635][ T5694] RBP: 00007f3371c6b090 R08: 0000000000000000 R09: 0000000000000000 [ 2559.363653][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2559.363671][ T5694] R13: 00007f3371026218 R14: 00007f3371026180 R15: 00007ffd79621608 [ 2559.363710][ T5694] [ 2560.755616][ T5700] FAULT_INJECTION: forcing a failure. [ 2560.755616][ T5700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2560.769663][ T5700] CPU: 0 UID: 0 PID: 5700 Comm: syz.2.4082 Tainted: G L syzkaller #0 PREEMPT(full) [ 2560.769711][ T5700] Tainted: [L]=SOFTLOCKUP [ 2560.769722][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2560.769740][ T5700] Call Trace: [ 2560.769751][ T5700] [ 2560.769763][ T5700] dump_stack_lvl+0x100/0x190 [ 2560.769806][ T5700] should_fail_ex.cold+0x5/0xa [ 2560.769844][ T5700] _copy_from_user+0x2e/0xd0 [ 2560.769897][ T5700] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 2560.770093][ T5700] snd_rawmidi_write+0x2dc/0xc60 [ 2560.770143][ T5700] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2560.770184][ T5700] ? __pfx_default_wake_function+0x10/0x10 [ 2560.770226][ T5700] ? bpf_lsm_file_permission+0x9/0x10 [ 2560.770259][ T5700] ? security_file_permission+0x76/0x210 [ 2560.770313][ T5700] ? rw_verify_area+0xce/0x6d0 [ 2560.770368][ T5700] vfs_write+0x2aa/0x1050 [ 2560.770401][ T5700] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2560.770444][ T5700] ? __pfx_vfs_write+0x10/0x10 [ 2560.770473][ T5700] ? find_held_lock+0x2b/0x80 [ 2560.770512][ T5700] ? __fget_files+0x215/0x3d0 [ 2560.770541][ T5700] ? __fget_files+0x215/0x3d0 [ 2560.770578][ T5700] ? __fget_files+0x21f/0x3d0 [ 2560.770620][ T5700] ksys_write+0x1f8/0x250 [ 2560.770652][ T5700] ? __pfx_ksys_write+0x10/0x10 [ 2560.770696][ T5700] do_syscall_64+0x115/0x840 [ 2560.770745][ T5700] ? clear_bhb_loop+0x70/0xc0 [ 2560.770786][ T5700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2560.770820][ T5700] RIP: 0033:0x7f3370d9e0d9 [ 2560.770855][ T5700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2560.770887][ T5700] RSP: 002b:00007f3371c8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2560.770920][ T5700] RAX: ffffffffffffffda RBX: 00007f3371026090 RCX: 00007f3370d9e0d9 [ 2560.770940][ T5700] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2560.770960][ T5700] RBP: 00007f3371c8c090 R08: 0000000000000000 R09: 0000000000000000 [ 2560.770981][ T5700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2560.771013][ T5700] R13: 00007f3371026128 R14: 00007f3371026090 R15: 00007ffd79621608 [ 2560.771061][ T5700] [ 2563.159680][ T1884] Bluetooth: hci2: command 0x0406 tx timeout [ 2564.140129][ T5768] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2398.0.2175659077), cmd(12) [ 2568.066019][ T5820] FAULT_INJECTION: forcing a failure. [ 2568.066019][ T5820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2568.106080][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: syz.3.4100 Tainted: G L syzkaller #0 PREEMPT(full) [ 2568.106118][ T5820] Tainted: [L]=SOFTLOCKUP [ 2568.106127][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2568.106141][ T5820] Call Trace: [ 2568.106149][ T5820] [ 2568.106158][ T5820] dump_stack_lvl+0x100/0x190 [ 2568.106191][ T5820] should_fail_ex.cold+0x5/0xa [ 2568.106217][ T5820] strncpy_from_user+0x3b/0x2d0 [ 2568.106257][ T5820] __do_sys_memfd_create+0x1a7/0x3d0 [ 2568.106295][ T5820] do_syscall_64+0x115/0x840 [ 2568.106334][ T5820] ? clear_bhb_loop+0x70/0xc0 [ 2568.106362][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2568.106387][ T5820] RIP: 0033:0x7fa004f9e0d9 [ 2568.106411][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2568.106435][ T5820] RSP: 002b:00007fa005e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2568.106458][ T5820] RAX: ffffffffffffffda RBX: 00007fa005226090 RCX: 00007fa004f9e0d9 [ 2568.106474][ T5820] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 2568.106488][ T5820] RBP: 00007fa005e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 2568.106503][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2568.106517][ T5820] R13: 00007fa005226128 R14: 00007fa005226090 R15: 00007fff4d30e748 [ 2568.106547][ T5820] [ 2570.821370][ T5865] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(524287.0.2171979219), cmd(12) [ 2575.481896][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4114'. [ 2576.718622][ T5934] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2124.0.0), cmd(12) [ 2578.540151][ T7485] Bluetooth: hci3: command 0x0406 tx timeout [ 2579.455735][ T5969] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4121'. [ 2582.165941][ T30] audit: type=1804 audit(4294967360.704:3): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4127" name="/newroot/sys/kernel/debug/tracing/saved_tgids" dev="tracefs" ino=4215 res=1 errno=0 [ 2583.397360][ T6028] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4130'. [ 2583.450328][ T6028] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4130'. [ 2589.250418][ T6115] FAULT_INJECTION: forcing a failure. [ 2589.250418][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 2589.268215][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.2.4146 Tainted: G L syzkaller #0 PREEMPT(full) [ 2589.268271][ T6115] Tainted: [L]=SOFTLOCKUP [ 2589.268284][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2589.268305][ T6115] Call Trace: [ 2589.268316][ T6115] [ 2589.268329][ T6115] dump_stack_lvl+0x100/0x190 [ 2589.268376][ T6115] should_fail_ex.cold+0x5/0xa [ 2589.268416][ T6115] should_failslab+0xc2/0x120 [ 2589.268469][ T6115] __kvmalloc_node_noprof+0x116/0x970 [ 2589.268518][ T6115] ? do_raw_spin_lock+0x128/0x260 [ 2589.268559][ T6115] ? alloc_fdtable+0x110/0x2d0 [ 2589.268622][ T6115] alloc_fdtable+0x110/0x2d0 [ 2589.268691][ T6115] dup_fd+0x995/0xd10 [ 2589.268731][ T6115] ? __fget_files+0x21f/0x3d0 [ 2589.268770][ T6115] ksys_unshare+0x802/0xab0 [ 2589.268820][ T6115] ? __pfx_ksys_unshare+0x10/0x10 [ 2589.268883][ T6115] __x64_sys_unshare+0x31/0x40 [ 2589.268929][ T6115] do_syscall_64+0x115/0x840 [ 2589.268980][ T6115] ? clear_bhb_loop+0x70/0xc0 [ 2589.269023][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2589.269059][ T6115] RIP: 0033:0x7f3370d9e0d9 [ 2589.269088][ T6115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2589.269122][ T6115] RSP: 002b:00007f3371cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2589.269156][ T6115] RAX: ffffffffffffffda RBX: 00007f3371025fa0 RCX: 00007f3370d9e0d9 [ 2589.269179][ T6115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 2589.269200][ T6115] RBP: 00007f3370e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2589.269222][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2589.269242][ T6115] R13: 00007f3371026038 R14: 00007f3371025fa0 R15: 00007ffd79621608 [ 2589.269287][ T6115] [ 2589.453312][ T7485] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2589.482075][ T6115] netlink: 'syz.2.4146': attribute type 2 has an invalid length. [ 2591.835207][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.842333][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 2598.505218][ T6237] FAULT_INJECTION: forcing a failure. [ 2598.505218][ T6237] name failslab, interval 1, probability 0, space 0, times 0 [ 2598.529455][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.0.4166 Tainted: G L syzkaller #0 PREEMPT(full) [ 2598.529505][ T6237] Tainted: [L]=SOFTLOCKUP [ 2598.529513][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2598.529528][ T6237] Call Trace: [ 2598.529536][ T6237] [ 2598.529544][ T6237] dump_stack_lvl+0x100/0x190 [ 2598.529576][ T6237] should_fail_ex.cold+0x5/0xa [ 2598.529603][ T6237] should_failslab+0xc2/0x120 [ 2598.529639][ T6237] __kmalloc_noprof+0xfc/0x820 [ 2598.529671][ T6237] ? tracepoint_add_func+0x3a8/0x1150 [ 2598.529714][ T6237] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 2598.529754][ T6237] tracepoint_add_func+0x3a8/0x1150 [ 2598.529789][ T6237] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 2598.529833][ T6237] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 2598.529877][ T6237] tracepoint_probe_register+0xc4/0x110 [ 2598.529916][ T6237] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 2598.529953][ T6237] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 2598.529992][ T6237] ? __lock_acquire+0x49f/0x1a40 [ 2598.530020][ T6237] tracing_start_sched_switch+0xaf/0x170 [ 2598.530058][ T6237] __ftrace_event_enable_disable+0x557/0x6f0 [ 2598.530103][ T6237] __ftrace_set_clr_event_nolock+0x3c8/0xbb0 [ 2598.530138][ T6237] ftrace_set_clr_event+0x1b7/0x3f0 [ 2598.530170][ T6237] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 2598.530207][ T6237] ? trace_get_user+0x3ae/0xa70 [ 2598.530252][ T6237] ftrace_event_write+0x259/0x2c0 [ 2598.530282][ T6237] ? __pfx_ftrace_event_write+0x10/0x10 [ 2598.530322][ T6237] vfs_write+0x2aa/0x1050 [ 2598.530346][ T6237] ? __pfx_ftrace_event_write+0x10/0x10 [ 2598.530378][ T6237] ? __pfx_vfs_write+0x10/0x10 [ 2598.530405][ T6237] ? __fget_files+0x215/0x3d0 [ 2598.530435][ T6237] ? __fget_files+0x21f/0x3d0 [ 2598.530466][ T6237] ksys_write+0x12a/0x250 [ 2598.530488][ T6237] ? __pfx_ksys_write+0x10/0x10 [ 2598.530519][ T6237] do_syscall_64+0x115/0x840 [ 2598.530554][ T6237] ? clear_bhb_loop+0x70/0xc0 [ 2598.530584][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2598.530608][ T6237] RIP: 0033:0x7fa55139e0d9 [ 2598.530627][ T6237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2598.530650][ T6237] RSP: 002b:00007fa5521d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2598.530672][ T6237] RAX: ffffffffffffffda RBX: 00007fa551626180 RCX: 00007fa55139e0d9 [ 2598.530688][ T6237] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000008 [ 2598.530703][ T6237] RBP: 00007fa5521d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2598.530717][ T6237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2598.530731][ T6237] R13: 00007fa551626218 R14: 00007fa551626180 R15: 00007fffe1b8dee8 [ 2598.530762][ T6237] [ 2598.535867][ T6237] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 2602.626620][ T6287] FAULT_INJECTION: forcing a failure. [ 2602.626620][ T6287] name failslab, interval 1, probability 0, space 0, times 0 [ 2602.644634][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.1.4173 Tainted: G L syzkaller #0 PREEMPT(full) [ 2602.644683][ T6287] Tainted: [L]=SOFTLOCKUP [ 2602.644695][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2602.644713][ T6287] Call Trace: [ 2602.644723][ T6287] [ 2602.644735][ T6287] dump_stack_lvl+0x100/0x190 [ 2602.644779][ T6287] should_fail_ex.cold+0x5/0xa [ 2602.644825][ T6287] should_failslab+0xc2/0x120 [ 2602.644872][ T6287] __kmalloc_noprof+0xfc/0x820 [ 2602.644915][ T6287] ? tomoyo_encode2+0xfb/0x3c0 [ 2602.644973][ T6287] tomoyo_encode2+0xfb/0x3c0 [ 2602.645028][ T6287] tomoyo_encode+0x29/0x50 [ 2602.645074][ T6287] tomoyo_realpath_from_path+0x18c/0x690 [ 2602.645128][ T6287] tomoyo_path_number_perm+0x23c/0x580 [ 2602.645169][ T6287] ? tomoyo_path_number_perm+0x22e/0x580 [ 2602.645213][ T6287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2602.645294][ T6287] ? find_held_lock+0x2b/0x80 [ 2602.645336][ T6287] ? __fget_files+0x215/0x3d0 [ 2602.645365][ T6287] ? hook_file_ioctl_common+0x140/0x440 [ 2602.645413][ T6287] ? __fget_files+0x215/0x3d0 [ 2602.645453][ T6287] ? __fget_files+0x21f/0x3d0 [ 2602.645495][ T6287] security_file_ioctl+0xd3/0x230 [ 2602.645538][ T6287] __x64_sys_ioctl+0xb7/0x210 [ 2602.645591][ T6287] do_syscall_64+0x115/0x840 [ 2602.645640][ T6287] ? clear_bhb_loop+0x70/0xc0 [ 2602.645680][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2602.645714][ T6287] RIP: 0033:0x7f2edd99e0d9 [ 2602.645741][ T6287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2602.645770][ T6287] RSP: 002b:00007f2ede8b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2602.645809][ T6287] RAX: ffffffffffffffda RBX: 00007f2eddc25fa0 RCX: 00007f2edd99e0d9 [ 2602.645831][ T6287] RDX: 0000000000000009 RSI: 0000000000004b4e RDI: 0000000000000009 [ 2602.645850][ T6287] RBP: 00007f2ede8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 2602.645868][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2602.645887][ T6287] R13: 00007f2eddc26038 R14: 00007f2eddc25fa0 R15: 00007ffe33a689c8 [ 2602.645928][ T6287] [ 2602.909152][ T6287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2609.806018][ T6402] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1890.0.2190700454), cmd(12) [ 2611.563835][ T6419] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 2614.012692][ T6450] FAULT_INJECTION: forcing a failure. [ 2614.012692][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.058249][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.0.4195 Tainted: G L syzkaller #0 PREEMPT(full) [ 2614.058308][ T6450] Tainted: [L]=SOFTLOCKUP [ 2614.058320][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2614.058340][ T6450] Call Trace: [ 2614.058349][ T6450] [ 2614.058362][ T6450] dump_stack_lvl+0x100/0x190 [ 2614.058406][ T6450] should_fail_ex.cold+0x5/0xa [ 2614.058443][ T6450] should_failslab+0xc2/0x120 [ 2614.058492][ T6450] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2614.058533][ T6450] ? __pfx_map_id_range_down+0x10/0x10 [ 2614.058582][ T6450] ? security_inode_alloc+0x3b/0x2c0 [ 2614.058627][ T6450] security_inode_alloc+0x3b/0x2c0 [ 2614.058665][ T6450] inode_init_always_gfp+0xc77/0xfb0 [ 2614.058707][ T6450] alloc_inode+0x8e/0x250 [ 2614.058751][ T6450] sock_alloc+0x44/0x280 [ 2614.058800][ T6450] ? security_socket_create+0x7f/0x250 [ 2614.058843][ T6450] __sock_create+0xc2/0x860 [ 2614.058889][ T6450] __sys_socket+0x14d/0x260 [ 2614.058924][ T6450] ? fput+0x79/0x100 [ 2614.058961][ T6450] ? __pfx___sys_socket+0x10/0x10 [ 2614.058997][ T6450] ? ksys_write+0x1ac/0x250 [ 2614.059028][ T6450] ? __pfx_ksys_write+0x10/0x10 [ 2614.059067][ T6450] __x64_sys_socket+0x72/0xb0 [ 2614.059102][ T6450] ? lockdep_hardirqs_on+0x78/0x100 [ 2614.059151][ T6450] do_syscall_64+0x115/0x840 [ 2614.059204][ T6450] ? clear_bhb_loop+0x70/0xc0 [ 2614.059243][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2614.059276][ T6450] RIP: 0033:0x7fa55139e0d9 [ 2614.059302][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2614.059334][ T6450] RSP: 002b:00007fa54f5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2614.059366][ T6450] RAX: ffffffffffffffda RBX: 00007fa551626450 RCX: 00007fa55139e0d9 [ 2614.059388][ T6450] RDX: 0000000000080103 RSI: 0000000000000004 RDI: 0000000000000000 [ 2614.059408][ T6450] RBP: 00007fa54f5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2614.059428][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2614.059448][ T6450] R13: 00007fa5516264e8 R14: 00007fa551626450 R15: 00007fffe1b8dee8 [ 2614.059491][ T6450] [ 2614.059740][ T6450] socket: no more sockets [ 2614.492335][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4198'. [ 2616.031176][ T6482] FAULT_INJECTION: forcing a failure. [ 2616.031176][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.077049][ T6482] CPU: 1 UID: 0 PID: 6482 Comm: syz.2.4202 Tainted: G L syzkaller #0 PREEMPT(full) [ 2616.077102][ T6482] Tainted: [L]=SOFTLOCKUP [ 2616.077114][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2616.077133][ T6482] Call Trace: [ 2616.077143][ T6482] [ 2616.077155][ T6482] dump_stack_lvl+0x100/0x190 [ 2616.077199][ T6482] should_fail_ex.cold+0x5/0xa [ 2616.077237][ T6482] should_failslab+0xc2/0x120 [ 2616.077286][ T6482] kmem_cache_alloc_noprof+0x91/0x6a0 [ 2616.077331][ T6482] ? mas_preallocate+0x1105/0x14a0 [ 2616.077377][ T6482] mas_preallocate+0x1105/0x14a0 [ 2616.077422][ T6482] ? __pfx_mas_preallocate+0x10/0x10 [ 2616.077470][ T6482] ? vm_area_alloc+0x1f/0x160 [ 2616.077506][ T6482] ? lockdep_init_map_type+0x5c/0x250 [ 2616.077546][ T6482] __mmap_region+0x1230/0x2db0 [ 2616.077590][ T6482] ? __pfx___mmap_region+0x10/0x10 [ 2616.077624][ T6482] ? __pfx___might_resched+0x10/0x10 [ 2616.077690][ T6482] ? find_held_lock+0x2b/0x80 [ 2616.077732][ T6482] ? process_measurement+0x4c8/0x2350 [ 2616.077772][ T6482] ? process_measurement+0x4c8/0x2350 [ 2616.077813][ T6482] ? down_write+0x146/0x1f0 [ 2616.077855][ T6482] ? process_measurement+0x1f4/0x2350 [ 2616.077904][ T6482] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 2616.077971][ T6482] ? __lock_acquire+0x49f/0x1a40 [ 2616.078022][ T6482] ? find_held_lock+0x2b/0x80 [ 2616.078065][ T6482] ? is_bpf_text_address+0x8a/0x1a0 [ 2616.078180][ T6482] mmap_region+0x527/0x620 [ 2616.078224][ T6482] ? __pfx_mmap_region+0x10/0x10 [ 2616.078268][ T6482] ? cap_mmap_addr+0x4b/0x120 [ 2616.078301][ T6482] ? bpf_lsm_mmap_addr+0x9/0x30 [ 2616.078334][ T6482] ? security_mmap_addr+0x71/0x1e0 [ 2616.078381][ T6482] ? __get_unmapped_area+0x255/0x3e0 [ 2616.078439][ T6482] do_mmap+0xc63/0x12f0 [ 2616.078495][ T6482] ? __pfx_do_mmap+0x10/0x10 [ 2616.078539][ T6482] ? __pfx_down_write_killable+0x10/0x10 [ 2616.078579][ T6482] vm_mmap_pgoff+0x29e/0x470 [ 2616.078634][ T6482] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2616.078687][ T6482] ? __fget_files+0x215/0x3d0 [ 2616.078728][ T6482] ? __fget_files+0x21f/0x3d0 [ 2616.078766][ T6482] ksys_mmap_pgoff+0x3cb/0x610 [ 2616.078816][ T6482] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 2616.078859][ T6482] ? fput+0x79/0x100 [ 2616.078896][ T6482] ? ksys_write+0x1ac/0x250 [ 2616.078926][ T6482] ? __pfx_ksys_write+0x10/0x10 [ 2616.078962][ T6482] __x64_sys_mmap+0x125/0x190 [ 2616.079009][ T6482] do_syscall_64+0x115/0x840 [ 2616.079057][ T6482] ? clear_bhb_loop+0x70/0xc0 [ 2616.079097][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2616.079132][ T6482] RIP: 0033:0x7f3370d9e0d9 [ 2616.079159][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2616.079191][ T6482] RSP: 002b:00007f3371cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2616.079223][ T6482] RAX: ffffffffffffffda RBX: 00007f3371025fa0 RCX: 00007f3370d9e0d9 [ 2616.079244][ T6482] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 2616.079264][ T6482] RBP: 00007f3371cad090 R08: 0000000000000003 R09: 0000000000008000 [ 2616.079285][ T6482] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 2616.079311][ T6482] R13: 00007f3371026038 R14: 00007f3371025fa0 R15: 00007ffd79621608 [ 2616.079352][ T6482] [ 2616.752166][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4202'. [ 2620.433202][ T6503] ------------[ cut here ]------------ [ 2620.439372][ T6503] IS_ERR(old) [ 2620.439426][ T6503] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#1: syz.0.4204/6503 [ 2620.455569][ T6503] Modules linked in: [ 2620.461102][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.0.4204 Tainted: G L syzkaller #0 PREEMPT(full) [ 2620.472282][ T6503] Tainted: [L]=SOFTLOCKUP [ 2620.476838][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2620.487925][ T6503] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 2620.494668][ T6503] Code: 09 e8 fd 20 fe ff 48 8d 73 f0 48 c7 c2 d0 9d 0b 82 48 c7 c7 80 6f c7 8e e8 86 e2 e1 ff eb ba bb fe ff ff ff e8 da 20 fe ff 90 <0f> 0b 90 eb ac e8 cf 20 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 2620.514603][ T6503] RSP: 0000:ffffc90004f6f8b0 EFLAGS: 00010287 [ 2620.520824][ T6503] RAX: 00000000000765ac RBX: 00000000fffffffe RCX: ffffc90007939000 [ 2620.528994][ T6503] RDX: 0000000000080000 RSI: ffffffff820baec6 RDI: ffff888045bb9f00 [ 2620.537424][ T6503] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2620.545707][ T6503] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82120dd0 [ 2620.553897][ T6503] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f0d58c0 [ 2620.562048][ T6503] FS: 00007fa5521d36c0(0000) GS:ffff888123ef3000(0000) knlGS:0000000000000000 [ 2620.571293][ T6503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2620.578038][ T6503] CR2: 0000200000026000 CR3: 0000000028390000 CR4: 00000000003526f0 [ 2620.586227][ T6503] Call Trace: [ 2620.589618][ T6503] [ 2620.592712][ T6503] tracing_stop_cmdline_record+0x66/0xa0 [ 2620.598545][ T6503] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 2620.604713][ T6503] ftrace_event_set_open+0x224/0x380 [ 2620.610206][ T6503] do_dentry_open+0x6ab/0x14d0 [ 2620.615084][ T6503] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 2620.621030][ T6503] vfs_open+0x82/0x3f0 [ 2620.625203][ T6503] path_openat+0x2873/0x4280 [ 2620.630016][ T6503] ? __pfx_path_openat+0x10/0x10 [ 2620.635125][ T6503] do_file_open+0x20e/0x430 [ 2620.639803][ T6503] ? __pfx_do_file_open+0x10/0x10 [ 2620.644939][ T6503] ? alloc_fd+0x471/0x7a0 [ 2620.649406][ T6503] ? do_getname+0x191/0x390 [ 2620.654013][ T6503] do_sys_openat2+0x10f/0x1e0 [ 2620.658898][ T6503] ? __pfx_do_sys_openat2+0x10/0x10 [ 2620.664245][ T6503] __x64_sys_openat+0x12d/0x210 [ 2620.669283][ T6503] ? __pfx___x64_sys_openat+0x10/0x10 [ 2620.674827][ T6503] do_syscall_64+0x115/0x840 [ 2620.679571][ T6503] ? clear_bhb_loop+0x70/0xc0 [ 2620.684366][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2620.690472][ T6503] RIP: 0033:0x7fa55139e0d9 [ 2620.694998][ T6503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2620.715504][ T6503] RSP: 002b:00007fa5521d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2620.724188][ T6503] RAX: ffffffffffffffda RBX: 00007fa551626180 RCX: 00007fa55139e0d9 [ 2620.732337][ T6503] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 2620.740434][ T6503] RBP: 00007fa551435024 R08: 0000000000000000 R09: 0000000000000000 [ 2620.748517][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2620.756645][ T6503] R13: 00007fa551626218 R14: 00007fa551626180 R15: 00007fffe1b8dee8 [ 2620.764754][ T6503] [ 2620.767896][ T6503] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2620.775197][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.0.4204 Tainted: G L syzkaller #0 PREEMPT(full) [ 2620.786099][ T6503] Tainted: [L]=SOFTLOCKUP [ 2620.790435][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2620.800599][ T6503] Call Trace: [ 2620.803899][ T6503] [ 2620.806844][ T6503] dump_stack_lvl+0x100/0x190 [ 2620.811554][ T6503] vpanic+0x552/0x970 [ 2620.815558][ T6503] ? __pfx_vpanic+0x10/0x10 [ 2620.820112][ T6503] panic+0xd1/0xe0 [ 2620.823882][ T6503] ? __pfx_panic+0x10/0x10 [ 2620.828333][ T6503] check_panic_on_warn.cold+0x19/0x34 [ 2620.833733][ T6503] ? tracepoint_probe_unregister+0x837/0xd10 [ 2620.839773][ T6503] __warn.cold+0x191/0x318 [ 2620.844238][ T6503] __report_bug+0x30f/0x440 [ 2620.848845][ T6503] ? tracepoint_probe_unregister+0x837/0xd10 [ 2620.854930][ T6503] ? __pfx___report_bug+0x10/0x10 [ 2620.860029][ T6503] ? rcu_is_watching+0x12/0xc0 [ 2620.864825][ T6503] ? trace_contention_end+0x126/0x160 [ 2620.870238][ T6503] ? __mutex_lock+0x26d/0x1bd0 [ 2620.875036][ T6503] ? tracepoint_probe_unregister+0x31/0xd10 [ 2620.880979][ T6503] ? rcu_is_watching+0x12/0xc0 [ 2620.885828][ T6503] ? tracepoint_probe_unregister+0x837/0xd10 [ 2620.891912][ T6503] report_bug+0xb2/0x220 [ 2620.896225][ T6503] ? tracepoint_probe_unregister+0x837/0xd10 [ 2620.902243][ T6503] handle_bug+0x16a/0x2a0 [ 2620.906619][ T6503] exc_invalid_op+0x17/0x50 [ 2620.911153][ T6503] asm_exc_invalid_op+0x1a/0x20 [ 2620.916021][ T6503] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 2620.922840][ T6503] Code: 09 e8 fd 20 fe ff 48 8d 73 f0 48 c7 c2 d0 9d 0b 82 48 c7 c7 80 6f c7 8e e8 86 e2 e1 ff eb ba bb fe ff ff ff e8 da 20 fe ff 90 <0f> 0b 90 eb ac e8 cf 20 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 2620.942471][ T6503] RSP: 0000:ffffc90004f6f8b0 EFLAGS: 00010287 [ 2620.948559][ T6503] RAX: 00000000000765ac RBX: 00000000fffffffe RCX: ffffc90007939000 [ 2620.956553][ T6503] RDX: 0000000000080000 RSI: ffffffff820baec6 RDI: ffff888045bb9f00 [ 2620.964649][ T6503] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2620.972638][ T6503] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82120dd0 [ 2620.980717][ T6503] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8f0d58c0 [ 2620.988877][ T6503] ? __pfx_probe_sched_switch+0x10/0x10 [ 2620.994512][ T6503] ? tracepoint_probe_unregister+0x836/0xd10 [ 2621.000551][ T6503] tracing_stop_cmdline_record+0x66/0xa0 [ 2621.006219][ T6503] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 2621.012270][ T6503] ftrace_event_set_open+0x224/0x380 [ 2621.017579][ T6503] do_dentry_open+0x6ab/0x14d0 [ 2621.022362][ T6503] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 2621.028205][ T6503] vfs_open+0x82/0x3f0 [ 2621.032348][ T6503] path_openat+0x2873/0x4280 [ 2621.037013][ T6503] ? __pfx_path_openat+0x10/0x10 [ 2621.042127][ T6503] do_file_open+0x20e/0x430 [ 2621.046699][ T6503] ? __pfx_do_file_open+0x10/0x10 [ 2621.051817][ T6503] ? alloc_fd+0x471/0x7a0 [ 2621.056208][ T6503] ? do_getname+0x191/0x390 [ 2621.060782][ T6503] do_sys_openat2+0x10f/0x1e0 [ 2621.065533][ T6503] ? __pfx_do_sys_openat2+0x10/0x10 [ 2621.070820][ T6503] __x64_sys_openat+0x12d/0x210 [ 2621.075745][ T6503] ? __pfx___x64_sys_openat+0x10/0x10 [ 2621.081208][ T6503] do_syscall_64+0x115/0x840 [ 2621.085877][ T6503] ? clear_bhb_loop+0x70/0xc0 [ 2621.090630][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2621.096589][ T6503] RIP: 0033:0x7fa55139e0d9 [ 2621.101060][ T6503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2621.120729][ T6503] RSP: 002b:00007fa5521d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2621.129211][ T6503] RAX: ffffffffffffffda RBX: 00007fa551626180 RCX: 00007fa55139e0d9 [ 2621.137236][ T6503] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 2621.145272][ T6503] RBP: 00007fa551435024 R08: 0000000000000000 R09: 0000000000000000 [ 2621.153301][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2621.161326][ T6503] R13: 00007fa551626218 R14: 00007fa551626180 R15: 00007fffe1b8dee8 [ 2621.169424][ T6503] [ 2621.173138][ T6503] Kernel Offset: disabled [ 2621.177498][ T6503] Rebooting in 86400 seconds..