last executing test programs: 10.650356639s ago: executing program 3 (id=5348): r0 = socket(0x1f, 0x1, 0x1) r1 = io_uring_setup$auto(0x6, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x8040, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r1) r2 = socket(0x1a, 0x2, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4}\xffb\x17\xbb\x7f\xea4*\xa4\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95\xb88\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) r4 = syz_clone(0x10091080, &(0x7f0000000540)="fe75ff7fcae598f10a265c54a2caae9bafc7a2070e8c0bae601924615eb6ffdcba9c7c1c0547fa2a18dc745342f90a2cb31531a88c55539ad48d2b9ad7c2900fd3944fd3619f4285e89779ce9d00931a326138dd0969e07139f1492e5e6f88e36b5535cd63704d49d087b2810f2f4dcd4eaf9750cfd08f0c0dc56343600bec7a89106e8c7b19f8045236ad5c90b4b03a0ca551a7df372542c35b394f0cb1bcfd92553baf427dc7f071a3b18a6b0e5687389dc3fb8482aab1123474d8bbbabef06ef56a3a29c2e871ef4c41d9e20a9db894c1c5f951c2ca491ea226bd10037075bfe9faf5f722551d3f0b4d30657b9fffda59993c226531e81215532a143f5ebe94cc7e128117ad96e35c6886b4c124c8bce0bce231c42ca86f6018aefc8ef5b57a01c3b93d0262bafe5ab4436b636cbfb31ed56e1a", 0x135, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)="8885fdd5279aadc02b0b7d4aa0642959679fda949026d589c764e718908ee2f735973649a8c86b010738cdad20d4f9f593b662b872fe2a08095d144b994357f387522b72d88d7b78814793d589cff26186d5ddbc5e742934e8b7ca1862bdfd6e0de4906cb69a7ed6fc02bc7013d6a0666daf87bacd3dae2e4d80ea6652e386bbcbc7ba376b098ca87c2d88b9a259456c2080bbd552b9a6b5f6f4d4bbdc72871e7c22c09c17d796cdc0bee6de83d0559fe51f04000bd5903765266ae106c7c6171d02d208923b4a6b3b640351061811e5731dad5236ad2ef46b1008cb515f7c349fae47df96ad3c6e21a15d49") unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x2, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8003, 0x4000000000000008, 0x72, 0x4, 0xa, 0x3, 0x5, 0x7, @raw=0x8, @inferred=r4}) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, 0x0, 0x20080, 0x0) readv$auto(r0, &(0x7f0000000000)={0x0, 0x1000}, 0x1) bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6) setns(0xc9, 0x0) r5 = socket(0x1f, 0x3, 0x3) setsockopt$auto(r5, 0x10e, 0x5, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setns(0xc9, 0x0) setns(0xffffffffffffffff, 0x20000) socket(0x29, 0x2, 0x4) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x2002, 0x0) sendfile$auto(r6, r6, 0x0, 0x80000000003) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) open(&(0x7f0000000200)='./file0\x00', 0x163341, 0xc1) 9.472821786s ago: executing program 2 (id=5349): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f2, 0x14) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop1\x00', 0x84100, 0x0) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x8000000000000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) utimes$auto(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x84c, 0x4}) r1 = socket(0xa, 0x2, 0x3a) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x8, 0x4, 0x4, 0x7fff, 0x8, 0xc, 0xffffffffffffffff, 0x2, 0x7ff}, 0x6f4) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010125bd7000ffdbdf256a00000008004b00ff0f00000600b400259c00003f001f00ac87271a6a9ec1138b60aa0a8b4835a09a20b4b165a90de8bd789d8ee5ef43679d2e06baa2055d7d3e012793e2ebdeb74e3e58000000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4040000}, 0x45001) socket(0x2, 0x80002, 0x73) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto_FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f00000005c0)="3388a148d8799638e448e5815d3ec92794f4e2b79bf07e4ebb1eb645375814217fe147f949427489c0ee07cbc32d24bcead3265485ffca7a49d829da210facfb62bea72452543d68e3223881789417660b12716671476a3af2d11a4d3afd7a052e9732608cd3f25648f395306b44fc6980e0055d575ec73204f97b41b0") read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000340)=""/15, 0x40) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x3) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf250c00000000e06e7c8690230dd0bfc8a546618fbcd7b8cba5ee5c2c9c74f837c3f7458529d6608000"], 0x38}, 0x1, 0x0, 0x0, 0xc010}, 0x4000084) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000300)='./file1\x00', 0x1c67) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.121471342s ago: executing program 1 (id=5350): socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x20000000005) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x101080, 0x0) socket(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x101881, 0x0) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000200), 0xc2c00, 0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x5414, r1) mmap$auto(0x0, 0x40000000400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000280), 0xc200, 0x0) r3 = socket(0x1e, 0x1, 0x0) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000080), r3) 8.86744051s ago: executing program 3 (id=5351): r0 = socket(0xf, 0x3, 0x2) ppoll$auto(&(0x7f0000000180)={r0, 0x6, 0x7fff}, 0x3, 0x0, &(0x7f0000000200), 0x8) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x10, 0x4, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) writev$auto(r1, &(0x7f0000000180)={&(0x7f0000000100)="726bdbb0ee274bfd68cbf5aa1fd4fec35da9f009e69ad33ab5edbc", 0x4}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3a, 0x1, 0x0, 0x14, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @multicast1}, 0x50) unshare$auto(0x40000080) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0xffbb) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x40043d04, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xa0200, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000500), 0x2000, 0x0) pread64$auto(r3, 0x0, 0x6, 0x40008) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/config.gz\x00', 0x20000, 0x0) close_range$auto(0x2, 0xa, 0x0) 8.495093541s ago: executing program 0 (id=5353): mmap$auto(0x0, 0xf6, 0xdf, 0x1a, 0xffffffffffffffff, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x3d2c4d54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x8002, 0x0, 0x0, 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x10000, 0xe6e5, 0xe, 0x155becaf3, r1, 0x200) write$auto(0xffffffffffffffff, &(0x7f0000000040)=' ', 0x4) listen$auto(0x3, 0x400000) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="010025bd700002dcdf250300000004000800200001801b00108014000c00fc0200000000000000000000000000ff82a4cb00"], 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) keyctl$auto(0x8, 0x0, 0x6, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x602, 0x1) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x501000, 0x44ccb02e497ecfba, 0x8}, 0x18) fanotify_mark$auto(0x400000000000, 0x1, 0x2, r4, 0x0) chown$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x84002, 0x0) ppoll$auto(0x0, 0x6, 0x0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x0, 0x2020409, 0x8, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x8000000000000001, 0x24, 0x8) 7.512545373s ago: executing program 2 (id=5354): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x100, 0x0) r0 = epoll_create$auto(0x1) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0) capset$auto(0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x28102, 0x0) lseek$auto(r2, 0x1000000000007, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) preadv$auto(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x7fffffff}, 0x1, 0x8, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) setns(r1, 0x10000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/pages_volatile\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2000001, 0x2000000009, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x6, 0x2, 0x7, 0xaf, 0x40000006, 0x8, 0x3, 0xa, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x7029, 0x8000000000000000, 0xfffffffffffffffc, 0x4000000000000, 0x4, 0x100000, 0x0, 0x200000000000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x874}, 0x10048080) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x34c4}, 0x3, 0x14) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)=""/16, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) fcntl$auto(0x3, 0x4, 0xa553) listen$auto(0x3, 0x81) socket$nl_generic(0x10, 0x3, 0x10) 7.335608294s ago: executing program 3 (id=5355): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x1a) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = setfsgid$auto(0xee01) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r1) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, 0x0, 0x14) mseal$auto(0x0, 0x100007dda, 0x0) socket(0x1, 0x1, 0x1) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) socket(0x2, 0x5, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x40400, 0xd8) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x84, 0x1c, 0x0, &(0x7f0000000040)=0x400) keyctl$auto(0x1f, 0x1, 0x6, r0, 0x3ff) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) 7.242666565s ago: executing program 1 (id=5356): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r0, 0xffffffffffffffff, 0x8, 0x2, 0xffffffffffffffff, @relative_fd=0xffffffffffffffff, 0x3}, 0xf) mmap$auto(0x0, 0x4020009, 0x7fffffffffffffff, 0xeb2, r0, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a0200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xfffbffff}, 0x6, 0x0) r3 = getuid() sendmsg$auto_MACSEC_CMD_DEL_TXSA(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)={0x3c4, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x1b, 0x3, 0x0, 0x1, [@typed={0x8, 0xf1, 0x0, 0x0, @uid}, @typed={0x4, 0x15}, @generic="f27585", @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x6f, 0x9, 0x0, 0x1, [@nested={0xc, 0x165, 0x0, 0x1, [@typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@local}]}, @generic="7c98ca75080e6b4321a43af85953de3f42ddf21ec155cd1fa6f8b046ca5e2dd657054dcbcd95a2b8499bb1fb8de7132115e9b90ac63bf631e53721d27e55e8725b1e64658b9ef2181bad0934ff7cf75782bf820de2c58a25141a4d5dc97fc9"]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x110, 0x3, 0x0, 0x1, [@generic, @typed={0x8, 0x24, 0x0, 0x0, @pid}, @typed={0xf9, 0x12, 0x0, 0x0, @binary="fd3e382e333f59fe3eb424fad0f63d0110fcc6976f7c19eb5494c7d8a9d2078c6ba8665c4eb52600d9b7b7e0f3ad5ee0b26f04b0dfe09666045f907d516bfc69b448bda1521588189157c8d20ad7967a2502f2398faa5f8958a5281b42ddb3314f5cbb56273a142ece77bfdbec8d6affb6603bf48530ee85262deeda0c352d519c7f4d2430287bea86fb8d5fca8b62ec268af4007de25d74c82c94ca1ac6f5ef42ac3bfe521c0914993adedcae07abdec923e2f8cf576fe1b475a4001b4c52f0ae03067ed69f3e0047fcf93c11b66b9d049fde6a965452b1a7d27fb8bb7b41938022cd21b489550c54c4704dba1c026a9243e1b255"}, @typed={0x8, 0x77, 0x0, 0x0, @fd=r1}]}, @MACSEC_ATTR_SA_CONFIG={0x1e8, 0x3, 0x0, 0x1, [@nested={0x1e1, 0x1b, 0x0, 0x1, [@generic="95199ed3e8676833dd18eeb8084549893f0ecdf1bf69c991527c718e6dfc03f36b5b2fc61f32ba71c01cbdba8428cc82df18328e12b7cc398326f353492e6ead7c06407d82f2728e8f1e81047047bc73cae05773f6bf4b3c0b7a5aed712d77c96389abe81bd35af90b5e8bcff30dcc7679813ef78b280f910af89ffdd7258c0a982f2fb1d30c5c7c1c8383975e5e7a02b4ef3659f63193e51f86611939f71ec78736331098975eb540cbeba3ceaabf3639addce33c825a06a51988ad34c64005352155cdfca042c2390e89c2d280e6069ea0c02af08b2829e3e7a68067cbf988bc0e34ffdbd583", @generic="a6b2047780f405c2eea1196a115ac23b37295b9ccc80563526a8e73182cd36a1d6d7f048142af1cd618fdb3f1b612dad1e25f4d38c051c341ecdb199fea6ebdd501c47df16aaed7b85", @generic="b78c0306d8f6c9f21b5ec136c25f228788876ceb302a3b4d782f739f8be41873ec61a8c85fa82f1dc9c6d8a7b3e0b73c265478a31a408bdcc9323aac7b623baed3a3337bd812bc48f725784552b5404fecaea49ceff701bbaaa3d6a21e75bd2708be045a5a18519bd3e4c4347b41b740740b4d96fff50efc26025e6ba107df29fe99455c669bb7f071b0aba22467acdd5d412b8c30aeb59888032ee9c303893fb4de5bceca", @typed={0x8, 0xa0, 0x0, 0x0, @uid=r3}]}]}, @MACSEC_ATTR_OFFLOAD={0x1c, 0x9, 0x0, 0x1, [@typed={0x4, 0xf}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000025) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, 0x0, 0x2, 0x5) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/proxy_qlen\x00', 0x121300, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) settimeofday$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0xe) select$auto(0x9, &(0x7f0000000200)={[0xfffffffffffffffc, 0x6, 0x6, 0x6, 0x1, 0x5, 0x0, 0xffffffffffffff81, 0x3, 0x1, 0x3f5b, 0x6134, 0x6, 0x200, 0x8, 0x1]}, &(0x7f0000000040)={[0x100, 0xffffffff, 0x9, 0xfffffffffffffffd, 0x4, 0x6, 0x2, 0x8462, 0x9, 0xfb, 0x1, 0x8, 0xa, 0x5, 0x3, 0x6]}, &(0x7f00000003c0)={[0x4, 0x4, 0x7794, 0x7, 0x4, 0x9, 0x10001, 0x8000000000000000, 0x6, 0x3, 0x7fff, 0x8, 0x4, 0x8000004, 0x6, 0xfffffffffffffffc]}, &(0x7f0000000440)={0x1, 0x1ff}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x129041, 0x0) write$auto(r4, &(0x7f0000008d40)='(\x1d}-)#@\x00', 0x0) 6.548997067s ago: executing program 0 (id=5357): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) landlock_create_ruleset$auto(0x0, 0x6, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x7ff, 0x0) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000800)={@sival_ptr=&(0x7f0000000600)="3969a9a0ed7f369b98c7ad1331c80dfd3a64c80ea787eae15fb4dacf5de6610f76adc49a0208d30b5abcaca8801b0d164ccfb4bcefaaf2e2fea44f074d8ce0c1868f8dbd542034292c5349eae178268347d343c5aeb3684dabc4594f28e7af68bd9b77f7da7b5280a24de8b663cfe00e222d2af1593fd43f68669b6329b549845b5ef05f4e6f3ea9aa46d9fcc78f6f711428b9e3d948a879c55b5aec6f160ecd5ed79d3977bb94b79b4c31412be770fca05e10d843c3f3fa916b8917b3e58d4defc2982661c0fd63e1ded6a830c8e5d6ecc16924c0d1b0", @raw=0x3, 0x7, @_sigev_thread={&(0x7f0000000740)=&(0x7f0000000700)=0x80, &(0x7f0000000780)="fc5a5ca41429f482bd76aafc7941913f6edcbbd71098ba58721111dc66b28e90883773a2517099be55b666a31d2e7706c357dc7dd327d2e139535584eb1181542dacc51055542da21b3b6cfbe65a8eb9f9d0544b8faf1b8d0f92e381cdfe69cef334793cf578c6de08b9cabd84"}}, &(0x7f0000000840)=0x965) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@enable_stats={0x7f}, 0xa6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x1000) futex$auto(&(0x7f0000000080)=0x89, 0x5, 0x9, 0x0, &(0x7f0000000000)=0x4, 0x1bc) r1 = memfd_create$auto(&(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x4) statmount$auto(&(0x7f0000000040)={0x8007, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x208, 0x0) pselect6$auto(0x9, &(0x7f0000000400)={[0x8, 0x5411, 0x2, 0x3, 0x2, 0x3, 0x2, 0x3, 0x6, 0x0, 0x1, 0x0, 0x38, 0x4, 0x8000000000000001, 0x7]}, &(0x7f0000000480)={[0x10, 0xda12, 0x1, 0x80000000, 0x7fffffffffffffff, 0x5, 0x8, 0x2, 0x1ff, 0x6, 0x4, 0x8000000000000000, 0xffffffffffffffff, 0x7, 0x9, 0x81]}, &(0x7f0000000500)={[0x9, 0x4, 0xb4, 0x7, 0xe, 0x80000000, 0xf506, 0x9, 0x638d, 0x8000000000000000, 0x3b43, 0x9, 0xfb, 0x9, 0x21b, 0x1000000000000000]}, 0x0, &(0x7f00000005c0)) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) read$auto_percpu_stats_fops_(r1, &(0x7f0000000240)=""/163, 0xa3) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x401) 5.631314927s ago: executing program 2 (id=5358): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) landlock_create_ruleset$auto(0x0, 0x6, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x7ff, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/ipsec\x00', 0x4000, 0x0) timer_create$auto_CLOCK_MONOTONIC(0x1, &(0x7f0000000800)={@sival_ptr=&(0x7f0000000600)="3969a9a0ed7f369b98c7ad1331c80dfd3a64c80ea787eae15fb4dacf5de6610f76adc49a0208d30b5abcaca8801b0d164ccfb4bcefaaf2e2fea44f074d8ce0c1868f8dbd542034292c5349eae178268347d343c5aeb3684dabc4594f28e7af68bd9b77f7da7b5280a24de8b663cfe00e222d2af1593fd43f68669b6329b549845b5ef05f4e6f3ea9aa46d9fcc78f6f711428b9e3d948a879c55b5aec6f160ecd5ed79d3977bb94b79b4c31412be770fca05e10d843c3f3fa916b8917b3e58d4defc2982661c0fd63e1ded6a830c8e5d6ecc16924c0d1b0", @raw=0x3, 0x7, @_sigev_thread={&(0x7f0000000740)=&(0x7f0000000700)=0x80, &(0x7f0000000780)="fc5a5ca41429f482bd76aafc7941913f6edcbbd71098ba58721111dc66b28e90883773a2517099be55b666a31d2e7706c357dc7dd327d2e139535584eb1181542dacc51055542da21b3b6cfbe65a8eb9f9d0544b8faf1b8d0f92e381cdfe69cef334793cf578c6de08b9cabd84"}}, &(0x7f0000000840)=0x965) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)=@enable_stats={0x7f}, 0xa6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x402) pipe2$auto(0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x1000) futex$auto(&(0x7f0000000080)=0x89, 0x5, 0x9, 0x0, &(0x7f0000000000)=0x4, 0x1bc) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x48000) r2 = memfd_create$auto(&(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x4) statmount$auto(&(0x7f0000000040)={0x8007, @raw, 0x80000027, 0xf5ff, 0x8}, 0x0, 0x208, 0x0) pselect6$auto(0x9, &(0x7f0000000400)={[0x8, 0x5411, 0x2, 0x3, 0x2, 0x3, 0x2, 0x3, 0x6, 0x0, 0x1, 0x0, 0x38, 0x4, 0x8000000000000001, 0x7]}, &(0x7f0000000480)={[0x10, 0xda12, 0x1, 0x80000000, 0x7fffffffffffffff, 0x5, 0x8, 0x2, 0x1ff, 0x6, 0x4, 0x8000000000000000, 0xffffffffffffffff, 0x7, 0x9, 0x81]}, &(0x7f0000000500)={[0x9, 0x4, 0xb4, 0x7, 0xe, 0x80000000, 0xf506, 0x9, 0x638d, 0x8000000000000000, 0x3b43, 0x9, 0xfb, 0x9, 0x21b, 0x1000000000000000]}, 0x0, &(0x7f00000005c0)) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) read$auto_percpu_stats_fops_(r2, &(0x7f0000000240)=""/163, 0xa3) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x401) 5.183661428s ago: executing program 3 (id=5359): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) select$auto(0xf, &(0x7f0000000140)={[0x7e, 0x5d6c966a, 0x10000000000, 0xe, 0x2, 0x8, 0x4, 0xc86, 0x5, 0x9, 0xfffffffffffffff7, 0xbf, 0x8, 0x59c, 0x609, 0x4]}, &(0x7f0000000280)={[0x8912, 0x7, 0xc000000000000000, 0xff, 0xa5, 0x8, 0x584, 0xaee, 0x4, 0x6, 0x5, 0xa, 0x3, 0x7, 0x2a0, 0xf]}, &(0x7f0000000440)={[0x1ff, 0x44, 0x1000, 0x10a, 0x775, 0x3, 0x1, 0x3, 0x5, 0x80, 0x5, 0x3, 0xd497, 0x3, 0xf47, 0x40000000]}, &(0x7f00000004c0)={0x4e3, 0x5239}) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x448c3, 0x0) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) setns(0xc9, 0x0) socket(0x8, 0x800, 0x1) getsockopt$auto(0xffffffffffffffff, 0x3, 0x1, 0x0, &(0x7f0000000040)=0x10000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xffffffffffffffff, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x18b240, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f0000000040)=0xc32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/uevent\x00', 0x20000, 0x0) unshare$auto(0x1) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)="202020d1027e0dc0023af10e9bfa1babfa3a3753ca9a20", 0x17) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000015c0)=""/4097, 0x1001) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) chown$auto(0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x80000005, 0x8000000000000, 0xf, 0xffffffffffffffff, 0x54ab7a2c, 0x5}, 0x6f4) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) unshare$auto(0x40000080) unshare$auto(0x40000080) 5.070030563s ago: executing program 1 (id=5360): openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/213, 0xd5) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x1) r1 = io_uring_setup$auto(0x40000002c55, 0x0) setsockopt$auto(r1, 0x107, 0x6, 0x0, 0x8004) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/kernel/shm_rmid_forced\x00', 0x40, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$auto(r0, 0x89a1, 0x4) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40814}, 0x24008000) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xca, &(0x7f00000001c0)='\x04>V\x1b\x89\x0ek\x19&\xb4?[\x00\x00\x01\x00\xb6\x00'/31, 0x169) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read$auto(0x3, 0x0, 0x80) 4.942391092s ago: executing program 0 (id=5361): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/nfc/nfc1/power/control\x00', 0x210b01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x4005, 0x0, 0x17, r0, 0x1) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0xcf) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = ioctl$auto_TUNSETGROUP(r2, 0x400454ce, &(0x7f00000000c0)=0x1) setdomainname$auto(0x0, 0x7) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xd1\xb8\xb1\x0eka\x85\x80\x95Z|\xd8=I\xb1)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9al\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.@\xab\"4\x8a\xbbY8@.\x00`\xa4m\xffb\x17\xbb\x7f\xea4*4\xf9w\x8a/a\x1d^\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97(}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcck\x89\x19\xc6\r0_G\xff7\xc2m\xcc\x01\xa1\xd3F\x17\xf2\x99\xbf=]\xce\xd4\xd5\xd5n\xee\xe6\x14jR\x8f\'\xd0\f\xe7G\xf9\x86C\x9d\xc8?\xc3u\x00\xd8w\"B\x99P\x95\xc0{\x9aTf\xfb\x9d`\x03\xcc\xbf;\xc7\xd0\xbfk:c\x06\xc4\x99\x17\x00\x00\x00\x00\x00\x00', 0x100000a3d9) mmap$auto(0xaf, 0x2, 0x20000000000000, 0x18, r3, 0x5) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) fsopen$auto(0x0, 0x1) mremap$auto(0x400000000000007, 0x7, 0x7, 0x7, 0x2001001fe7fd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) socket(0x25, 0x800, 0xfffffffe) mmap$auto(0x0, 0x2020006, 0x3, 0x19a, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x27d440, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r4, &(0x7f0000000140)={0x0, 0x3fffffffffff}, 0x5, 0x5, 0xd3b8) 4.528035747s ago: executing program 2 (id=5362): mmap$auto(0x0, 0xf6, 0xdf, 0x1a, 0xffffffffffffffff, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x3d2c4d54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x8002, 0x0, 0x0, 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x10000, 0xe6e5, 0xe, 0x155becaf3, r1, 0x200) write$auto(0xffffffffffffffff, &(0x7f0000000040)=' ', 0x4) listen$auto(0x3, 0x400000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYBLOB="010025bd700002dcdf250300000004000800200001801b00108014000c00fc0200000000000000000000000000ff82a4cb00"], 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) keyctl$auto(0x8, 0x0, 0x6, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x501000, 0x44ccb02e497ecfba, 0x8}, 0x18) fanotify_mark$auto(0x400000000000, 0x1, 0x2, r3, 0x0) chown$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x84002, 0x0) ppoll$auto(0x0, 0x6, 0x0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x0, 0x2020409, 0x8, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x8000000000000001, 0x24, 0x8) 3.772029426s ago: executing program 0 (id=5363): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendto$auto(r0, 0x0, 0x402, 0x0, 0x0, 0x1c) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pidfd_open$auto(0x1, 0x0) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000001c0)={@inferred=r0, 0xb6, &(0x7f0000000180)=0x4, 0xff, 0x4, 0x6, "f7de1ba847b5204e4cde8d85e08e0c39d34d694c7f930851a5743c16"}) socket(0x2b, 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x6) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000280)="a458f4e5e5f4bcc7fad26fd67f02b7cd05e6589800c28ef8f8202c09b2638f3653c6ed3b849812627a484d93e7ca38bb6c75b1d0f95ba576d7f2aba7a6e17d8a748fa2c2b65445121fdb006e371bc9da60cdd2378cf6a100a75f14aee91714b49cf0714f88fa5e59aae9bcf9c237ad19523f31da1c288cdf6281c4b2abd40ce043cd48819ea9eaa38e675e316b30542f9931634b3a830a7b54d420ab67826dddb406fed3bed2b77ecb0a7d4e2af6b59bab4910255fc1c235940b6f7f253131c3cd2ac263c02923997e0d75105d0d2cf679ea39a73b46233a7ae8e3bbfb0d80046e233f9d8c5560fe1c960668ebcbe0f836925900000000000000ae2f7101576ebed9672885ab88780d1e19fac43722706ec0ba321cbad1a4655b89cf162edf24d1fefcae46d1249c3454cec842f32115775e6874e5cd7ded5dd35826f4cd5305cb3ef22976a7038ab5b6c2f47ab885ca72fac9790238d313859fab15b48ac55d1f572eedc5696e7699164709ec83e685df236a03296471157171e45fc876d86da156922a730e921b1db59737aa99d3c340400112561338a371d1046b32398ad4d770d08435561793bb629ea9c546540c8f54fed75b9e2e96a93bbbe986a8f4979193d7542319a3420287a1ac0a39444fc1abbf0a42bcff5cfa283d15f6c6e299a21abb3a375b3e1ddbb02e6159c9457952209b24c1bf943c54670ae8c2e47f56c96fddee1f2e1632fabde9bcd0bf1ae29eaa6cd2eba33477d8c8731f44173d7c9f6671a951d3e53e696f8f9879f9a974f7e2966e75142cda07e655b6d2eabea316f895785acf3bc931bf224e07110af85ec024d81e326efd5d258d42f731858bb0cb93c93b9030cb34b2a95e7844c018230d92b285d8cbe8bee6a92fd4243e53fa90f4635ecfdb49081d198b4146014cfc4419497fb921b2f61e23ce527374349012778e08f814df03867fee8247ee26c549c0597f94afc17d785b61e1725fa64bc12f1affe87e9117e71290bce5f75ad394817234f97c49fbc63a4d811719871c0a2d5db42d5f8ec45959a8464af57cca0566f6bd41d693f1fb5c96e4c6a6f97f50f459f7793e6046d1b535de78802b9fd9953dafe263ab3d693c0fee0283e70c610e2cfc0e3cb3854dd9d02d700eb666d80dadef740e5f274c2a8ba5fafe1898378022c3d51249710e4f4081b3e2f53670250d3ad7a06eeb02ee94505f7fc8d2c5e9a984a6ab7c1b761f517919a2f44c6bfeaf840c359627be82c08c5769921720bbd883aa74003d8dafec23f539b6b26205d931dcbd381c61430e58954ccd8bef6e8ff18243d769b9139e86d83ee72e5a8c7ac6dc0c997faf9b347947a40e7ef33686c2ee0b49d7c58148e4c8f73fcab6c5597f71feef03fc47db06955299b166bff481c71499fe92fde4e754db5ac71e1c8471ecd1d15fc9c48ce2d01fcdec9b8a9c4cd5d591f590a521dd39d3354e7e2750f7260fe89c02bb3bddd30f11be772eb95752246632df16474832514493cb6c50e8fc6b37dbc263cf970f0ab0d1221245082e91e90f55ad8354eb735038335b42e2571267b07cf71225010aab65145e443b50099b2bd4bfbf546a411e733e97d54db91e84448f966469b796425bbd144f83694b9e05b756fbba36cc6075ad8f30edb0847be6934482d6e19950af47db60a96ca5eef83faf4a1f628daa8dafc78cc2607fa0fcf6fc0ad00c64efb2c223c70bf7a8414c290d13793a5fc81b10a5bb5e8dd7ca2f81f5556d231bf2cfbf1923285aba060c1c88882107e14fddcaaf3eaea37a0bb7216050585c886b6c3fad247d85ccd458dfb746d3d0f6e517adf50a31fc96530950f186943de01ff77d98273875b727cfaf927820d52ee3a63fea63b2d39b1f2c6c2d985e62b96e4ec129207e488a2f91356ba91a8d8bd5b63718d087dfc183e56ceb924afae5f3a12d8c53bb21b8593965b1d68aa52ca985fa510d279ffc470468e3aec2d7524d80826a94e48a6ca4d11e5fc3d5776efc1a696b04c391c872eb2f42fcf6b84e6498f5d0520600f9f68a36d3c535b9d7cfc1d45415374adb90f1e6d300a99f2b5f6f77594c336ddc9b171c4875247201b05ab171a7d4418dcfffcee9996be2cd77e9d7e92965d28e1458df6d184ba7d9cd55d5994a00e692d7674f2ae01d6dd56c3e4b5aa1c0f27ae4c4cbbfe7289743b7c5f9ba7300891f4c83f414318e77de74d84d33b7f83c456e198b99d64e8b7caad5bcd618993764bb24178a990d736edf4965346c2ac76c99b22a5114ec39bc818d6a469b0d4f1aeaf955c14d7a3a5b787141d465a55d71b6138a8dc8cb1d303371c97d8479cb09545bf4a08fa99ab7ea21b3b3a95f4b052e261baf2be0131ce619ecd352904fc2486735edf6d2df283f1e2dae7432557bd8c899b397e769088797f337b3aa1867a9728148f9c63f643ce41f19906640e50764b1a6286beabe9f9e074ca60552f1212aad80b22cbbb45c6e6f00f51020df928756caa3cf374342257807d6daea4e74a79c6144fae4f78915303542b7a5d48a17179a4a43ab18631b06d81c01409277dac0d58ff48c86f679e9c0c56aa8ca6c7591078d6bee3ff9857e099145cf0775ef0ee006f9697e4c69efe0ff72543d7028f5ef18c1d814d1a9f9a3e30fa5d324ba137aaa7175a529c13a8fc321d92472c9b19c941e701f7225664b05613cb07b0705112105ab3c28b00af1b6f930f3d903ee6cc164d77d5d2a0b16667cfb6b329b53b30d8d9a826ba7430d519b1b7f537ed2df08845eb5df7737fe3554f3d96144b42bfd92cc5daab42446f3d46272a00f2457d39ef3e9ea37362d402f6287ea6f485f68ffbe383e21089c313171f6c33f8a7055299ab7cfc5d974c487d992cac1ca53c05c1e9bdb38f6ca0ed6d4e0d8ab7b6197fdd1b4b95e6a466c8d9336c571ea1743e96e0b88da75520b8adddcaa932336fa02f63ce1a7eb909507f778ca3b5f2a736f396528d06ea86f63d3e45f545d262cadd337d321023ae0e5052ba4c0028dbd19765b0097039a64d58a8998ef7afba341b42d6b227cad8f4c4025a766de872a0cfde5f8c0581d4442a7aac906a0db5fad825611e487228aed5eec17f08d887a34d2b7c6c25f77412ee9941d5dec68a0464a1b0fd6eede1aa1b50579a93f205943dfd626204b9ca493c5aaececd17df71ac200cf7331a8bfbeddb6cd95b0b3016e56de0a9eeadf8d8c3591ae061e743f7c1ca4522bf55b2d80f3ba5df92d81433552dad6fd744ea71903b15a6374613b2a64a533cf6fa974273e7e5359f47428d7620d98d877faadad739a9a761713832ea70da990271b575e7cff075714d563b5b752ab50a7e1a1b5e689ff210503faabb37b8aa1d845825ab2488cfcb6a22010a55c4c045745f186ba8f42bc5a4dd06831da770670209ba568016459c50aef30c8aba754e341183817ad9b386e6b4e194cf66b76c9ea6313491d99d7e7a6d5c92bcec000c58794de2acfc4c490392a68f61e60bf664287e7020e4f30d897d916eb73dd4965b100f3c528cf2a46d43fca6351fc8c6c50fee04340b1f2fdf382a257eab0d964e7a2f0b1b7b9bc017117d8ebb40816b5515c88f7682c02b92b01d9fe884c963846f64800463830d83605a2ea32510dfbaaa29af264f60e8f72f307880f595715637dd799de8d77b0c7131bc04d44ce06b82a0f355e09e3d580124167e62fb12c584dc9553f3f91c86afffe6d871784c56c687b48b14bc974c65f18468eb3806be61c563a8af3075e4d9ff2c55ebab74ac4d384bc7f012dd39e373f74bab4ec597caa798112958890c00de56da95293e578490fb0e1e8fa63e1db877e75c7da1e394e37f8a971f7fe1354a800fff0c23aa66d990acf8fc7524d52a0c4f7b66459cb1811719afec92b7bd88e43569559f7f5fd41196c8ead0c70e13cb05b1155aab093a58b0d4652ce5ca005f868cf38fbefd401ddc9a747447ca6ea90b277688ef780461d14c5186b5a724cf50e5e3a7453e7ac4e79f07851317ae57911529daaa03d6745df50c78b868cb60757828b00d5215b0967733e2ab1366afacbec2fae934460a1e364275715fc2fe5b911240d59d94084b3386d130c9f52d844858bd36c866b2ca215c02aaff1c4be7a5d2329e00e5ad58de3e87c862402ff5d3632b1f871461f57f6194057ccde4d1d4adc08b0da2778896aa95ef376c53818fafa74872e2f99af03edfe5e8d8e030816a01fa193007f84a627991f24f9054d0347082c2c27294d8bea1422b5847a3bfd2684f5708013d6f3c4d41baca139ebab799b0f2d15eeb4a5fd195b892d331bd1db3f0ec4ddc225e52ef8a326ccd4b86995bf90ceffd0a18d37806ee49d09f072ddab15df82556c459daf45705ebfd358c4eb7547add41da3364d90fcdd36759e0000a88080a7f6d24ebb0e29e3a1b830e773a2c6d312472375b0428a221e03e2a1810a1c3cc8cde61e5359eefbb7324f4a6b04a2da87bce311a319ae8a842a518135750779d022b1a5321eb779d318d17387a7b7a739620594b090a2e550442c3debdc07a7a5283acc99539834c47ccf7635557a3066b81b32135df2e34c509dbf66dc0276e1e57977b45d77d41db78981883cf8ce8a738c04753911e957bf044e0bdbb1e9a72a7b5f884b61293e2f2756a32f6ef292a95e8484e101194a8c7e90f1e41fddf7d6af09dff5e308a2fbf5f0158d45bc87341ce3414c4b26cbc47ba43b2c2ad9ce6068df85d30fa994bf55cca9c327501c5335711988d3b4b5552c4fb9e9b6601a63cbb0a72ecdac3848ca4870814e0b8dee48a0ab5b14224c71f12cd648a3a39cba8e68f1562c1ad4966b7099015039518de65178c6a5e409166cc49d53b0f053773535421dfe289bd7c7fc2172dd4c5820ea3d2bbfd5bfd056a4d249a803440eada02f46e6fb9db13c74dad1303ca88b0a5091e196837eedd6a1dcd00e95fee39f252e3fb3afcb28d1db702bec482f19f7a5a327a522354e7bdbb3619697cd5c6e5b098b9a3c11478ef2b6467d22d0409e43bcb6552aaf47890c30077e56e77bfc53bc77fba63a324586f3172014b98dfac4ad686c83e611b89b1591a88dc4402d5cb60366455174cf0b84d0685454265a4a7d023b588ae491e6dac119433b2610170a8dc52a0c9f60cec85fe7fea415bf61e50c315b00c70a240a56345e1030731c4144d128e8dab606b1bda54874452af20ed7d6f3350b477417857884a6a6972b9696e92464b762da5739e400850df7ad82c63efb359d3a96b5a4a2f385432b6fa54c54a37678013d1774107b168b32225172d1081aa093def6e5ed6c05767128a4ebd0913ab03d200de072e81dbbc7b0c947ee3e34f6795211e632651852cb9cd7c2de1ef54d20ef625a193ed13061030c9a2e7f8c5674cbde924e25c8f97b6add0f4f89ef2b16ff418581aebd9f962f671a6adff28acf04edd01a96f69e0671780bdf40a19e9a3a235289771738cd32d1ef14509d11781d17608251fb7fa1b9d3c8646497ba0ce8890a2f0bd6e485959ceb8edf74981ef1c0ad7fc4f67bc4c941daef39fefbbdfa39979cf0e6454d565e8e90f8f4ac565a42dde87e16d4ad0977e1e67f88f560131ddaacc8a1f9db08441e6a9ddabae4b19441ef451ae9d9a854b193eb337d68830637f3ae81738bcc1a016077efe7692e146018b417d1199a14a79eecdcb00b0477f83627be935cc3a16a90b59b501d02be6091623c94f0fcf3e74616da0bbd767384c47fbe393c08c896979eef4cf1f20000000000000000", 0xff8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0x1d, 0xa, 0x2) 2.981479055s ago: executing program 1 (id=5364): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$auto(0x3, 0x40103e05, 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)={0x2, 0x80, 0x4ffff, 0x5, 0x0, 0x4b47, 0x3, 0x80005, @number_of_packets=0x3, 0x2004b, 0x80, 0x0, [{0xbb, 0x4, 0x800}]}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x8001, 0x0) write$auto(r2, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0xffffffffffffffff, 0x0, 0x3) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0xa0040, 0x0) read$auto_vcs_fops_vc_screen(r3, &(0x7f00000002c0)=""/225, 0xe1) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) getsockopt$auto_SO_PROTOCOL(r1, 0x8a, 0x26, &(0x7f0000000040)=']}(\x00', &(0x7f0000000100)=0x4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, 0x0, 0x24084005) 2.348811031s ago: executing program 3 (id=5365): mmap$auto(0x0, 0xf6, 0xdf, 0x1a, 0xffffffffffffffff, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x3d2c4d54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x8002, 0x0, 0x0, 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x10000, 0xe6e5, 0xe, 0x155becaf3, r1, 0x200) write$auto(0xffffffffffffffff, &(0x7f0000000040)=' ', 0x4) listen$auto(0x3, 0x400000) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16=r2, @ANYBLOB="010025bd700002dcdf250300000004000800200001801b00108014000c00fc0200000000000000000000000000ff82a4cb00"], 0x38}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) keyctl$auto(0x8, 0x0, 0x6, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0x602, 0x1) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x501000, 0x44ccb02e497ecfba, 0x8}, 0x18) fanotify_mark$auto(0x400000000000, 0x1, 0x2, r4, 0x0) chown$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x84002, 0x0) ppoll$auto(0x0, 0x6, 0x0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x0, 0x2020409, 0x8, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) fcntl$auto(0x8000000000000001, 0x24, 0x8) 2.177171063s ago: executing program 2 (id=5366): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x23, 0x80805, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x100, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000140)="13") ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 2.154670136s ago: executing program 0 (id=5367): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x100, 0x0) r0 = epoll_create$auto(0x1) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0) capset$auto(0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x28102, 0x0) lseek$auto(r2, 0x1000000000007, 0x0) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) preadv$auto(r3, &(0x7f0000000100)={&(0x7f0000000040), 0x7fffffff}, 0x1, 0x8, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) setns(r1, 0x10000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/pages_volatile\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2000001, 0x2000000009, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210004, 0x0, 0x7, 0x6, 0x2, 0x7, 0xaf, 0x40000006, 0x8, 0x3, 0xa, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, [0x3, 0x0, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x7029, 0x8000000000000000, 0xfffffffffffffffc, 0x4000000000000, 0x4, 0x100000, 0x0, 0x200000000000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x874}, 0x10048080) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x34c4}, 0x3, 0x14) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000100)=""/16, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x106) fcntl$auto(0x3, 0x4, 0xa553) listen$auto(0x3, 0x81) socket$nl_generic(0x10, 0x3, 0x10) 1.818263067s ago: executing program 1 (id=5368): r0 = socket(0x1f, 0x1, 0x1) r1 = io_uring_setup$auto(0x6, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x8040, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r1) socket(0x1a, 0x2, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4}\xffb\x17\xbb\x7f\xea4*\xa4\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95\xb88\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) r3 = syz_clone(0x10091080, &(0x7f0000000540)="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", 0x135, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)="8885fdd5279aadc02b0b7d4aa0642959679fda949026d589c764e718908ee2f735973649a8c86b010738cdad20d4f9f593b662b872fe2a08095d144b994357f387522b72d88d7b78814793d589cff26186d5ddbc5e742934e8b7ca1862bdfd6e0de4906cb69a7ed6fc02bc7013d6a0666daf87bacd3dae2e4d80ea6652e386bbcbc7ba376b098ca87c2d88b9a259456c2080bbd552b9a6b5f6f4d4bbdc72871e7c22c09c17d796cdc0bee6de83d0559fe51f04000bd5903765266ae106c7c6171d02d208923b4a6b3b640351061811e5731dad5236ad2ef46b1008cb515f7c349fae47df96ad3c6e21a15d49") unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x2, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8003, 0x4000000000000008, 0x72, 0x4, 0xa, 0x3, 0x5, 0x7, @raw=0x8, @inferred=r3}) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, 0x0, 0x20080, 0x0) readv$auto(r0, &(0x7f0000000000)={0x0, 0x1000}, 0x1) bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6) setns(0xc9, 0x0) r4 = socket(0x1f, 0x3, 0x3) setsockopt$auto(r4, 0x10e, 0x5, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setns(0xc9, 0x0) setns(0xffffffffffffffff, 0x20000) r5 = socket(0x29, 0x2, 0x4) write$auto(r5, &(0x7f0000000000)='\x13\x00', 0x2fe) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 416.143743ms ago: executing program 2 (id=5369): pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, &(0x7f0000000240)=0x54) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, 0x0, 0x51) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) rseq$auto(0x0, 0x20, 0x0, 0x8000006) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x8002) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x37f) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 272.43082ms ago: executing program 0 (id=5370): r0 = socket(0x1f, 0x1, 0x1) r1 = io_uring_setup$auto(0x6, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/fail_usercopy/probability\x00', 0x8040, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r1) r2 = socket(0x1a, 0x2, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4}\xffb\x17\xbb\x7f\xea4*\xa4\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95\xb88\x83\xcf\xc5D\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) r4 = syz_clone(0x10091080, &(0x7f0000000540)="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", 0x135, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)="8885fdd5279aadc02b0b7d4aa0642959679fda949026d589c764e718908ee2f735973649a8c86b010738cdad20d4f9f593b662b872fe2a08095d144b994357f387522b72d88d7b78814793d589cff26186d5ddbc5e742934e8b7ca1862bdfd6e0de4906cb69a7ed6fc02bc7013d6a0666daf87bacd3dae2e4d80ea6652e386bbcbc7ba376b098ca87c2d88b9a259456c2080bbd552b9a6b5f6f4d4bbdc72871e7c22c09c17d796cdc0bee6de83d0559fe51f04000bd5903765266ae106c7c6171d02d208923b4a6b3b640351061811e5731dad5236ad2ef46b1008cb515f7c349fae47df96ad3c6e21a15d49") unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, &(0x7f0000000180)={{0x1, 0x0, 0x0, 0x2, 0x100, 0x5, 0x2}, &(0x7f0000000040)=0x53, &(0x7f0000000080)=0x5, 0x8003, 0x4000000000000008, 0x72, 0x4, 0xa, 0x3, 0x5, 0x7, @raw=0x8, @inferred=r4}) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, 0x0, 0x20080, 0x0) readv$auto(r0, &(0x7f0000000000)={0x0, 0x1000}, 0x1) bpf$auto(0x8, &(0x7f0000000080)=@bpf_attr_4={0x2e, 0xffffffffffffffff, 0x80000000}, 0x6) setns(0xc9, 0x0) r5 = socket(0x1f, 0x3, 0x3) setsockopt$auto(r5, 0x10e, 0x5, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setns(0xc9, 0x0) setns(0xffffffffffffffff, 0x20000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\x13\x00', 0x2fe) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x2002, 0x0) sendfile$auto(r6, r6, 0x0, 0x80000000003) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) open(&(0x7f0000000200)='./file0\x00', 0x163341, 0xc1) 250.119661ms ago: executing program 3 (id=5371): unshare$auto(0x1) unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(0xc8, 0x0, 0x4f, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3b) r2 = mq_open$auto(&(0x7f0000000600)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8\x10\xa9\x82\xebS\x12\xb0V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*Z8\x89h\xc5\xba\xff\xc8u5 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2149.686777][ T5942] RSP: 002b:00007f59078a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2149.686814][ T5942] RAX: ffffffffffffffda RBX: 00007f59078a56c0 RCX: 00007f590695e98e [ 2149.686834][ T5942] RDX: 000000000000000f RSI: 00007f59078a50a0 RDI: 0000000000000004 [ 2149.686852][ T5942] RBP: 00007f59078a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.686869][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.686887][ T5942] R13: 00007f5906c26038 R14: 00007f5906c25fa0 R15: 00007ffd645a1868 [ 2149.686926][ T5942] [ 2151.198218][ T5961] netlink: 'syz.1.3871': attribute type 33 has an invalid length. [ 2151.508804][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2151.508858][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2152.526606][ T5989] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2152.526667][ T5989] vhci_hcd vhci_hcd.1: default hub control req: 2000 v0000 i0000 l0 [ 2154.278354][ T6012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3879'. [ 2156.374537][ T6048] NFSD: Failed to start, no listeners configured. [ 2157.538499][T29706] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2157.538535][T29706] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2158.492541][ T6089] FAULT_INJECTION: forcing a failure. [ 2158.492541][ T6089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2158.492588][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.2.3887 Tainted: G L syzkaller #0 PREEMPT(full) [ 2158.492627][ T6089] Tainted: [L]=SOFTLOCKUP [ 2158.492636][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2158.492653][ T6089] Call Trace: [ 2158.492662][ T6089] [ 2158.492672][ T6089] dump_stack_lvl+0x100/0x190 [ 2158.492721][ T6089] should_fail_ex.cold+0x5/0xa [ 2158.492758][ T6089] _copy_to_user+0x32/0xd0 [ 2158.492807][ T6089] simple_read_from_buffer+0xcb/0x170 [ 2158.492850][ T6089] proc_fail_nth_read+0x1af/0x230 [ 2158.492888][ T6089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2158.492927][ T6089] ? rw_verify_area+0xce/0x6d0 [ 2158.492956][ T6089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2158.492991][ T6089] vfs_read+0x1e4/0xb40 [ 2158.493027][ T6089] ? lock_acquire+0x1d1/0x380 [ 2158.493086][ T6089] ? __fget_files+0x34/0x3d0 [ 2158.493126][ T6089] ? __pfx_vfs_read+0x10/0x10 [ 2158.493160][ T6089] ? find_held_lock+0x2b/0x80 [ 2158.493197][ T6089] ? __fget_files+0x215/0x3d0 [ 2158.493241][ T6089] ? __fget_files+0x21f/0x3d0 [ 2158.493292][ T6089] ksys_read+0x12a/0x250 [ 2158.493331][ T6089] ? __pfx_ksys_read+0x10/0x10 [ 2158.493384][ T6089] do_syscall_64+0x121/0x770 [ 2158.493430][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2158.493466][ T6089] RIP: 0033:0x7f383455e98e [ 2158.493493][ T6089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2158.493524][ T6089] RSP: 002b:00007f3832792fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2158.493554][ T6089] RAX: ffffffffffffffda RBX: 00007f38327936c0 RCX: 00007f383455e98e [ 2158.493575][ T6089] RDX: 000000000000000f RSI: 00007f38327930a0 RDI: 0000000000000005 [ 2158.493595][ T6089] RBP: 00007f3832793090 R08: 0000000000000000 R09: 0000000000000000 [ 2158.493615][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2158.493633][ T6089] R13: 00007f38348265d8 R14: 00007f3834826540 R15: 00007ffe6b54e178 [ 2158.493675][ T6089] [ 2162.714362][ T6158] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3895'. [ 2165.101895][T29706] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2165.101975][T29706] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2167.565048][ T6235] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[2458] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6235] [ 2175.320432][ T6333] netlink: 'syz.3.3921': attribute type 33 has an invalid length. [ 2175.469902][ T6313] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2175.470140][ T6313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2175.470310][ T6313] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2175.470486][ T6313] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2176.350650][T19220] Bluetooth: hci3: command 0x0c1a tx timeout [ 2176.760633][T19220] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 2177.464179][T29706] Bluetooth: hci2: command 0x0c1a tx timeout [ 2177.464230][T29706] Bluetooth: hci0: command 0x0419 tx timeout [ 2177.464306][T19220] Bluetooth: hci1: command 0x0c1a tx timeout [ 2181.789292][ T6440] FAULT_INJECTION: forcing a failure. [ 2181.789292][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2181.789371][ T6440] CPU: 0 UID: 0 PID: 6440 Comm: syz.3.3934 Tainted: G L syzkaller #0 PREEMPT(full) [ 2181.789419][ T6440] Tainted: [L]=SOFTLOCKUP [ 2181.789432][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2181.789457][ T6440] Call Trace: [ 2181.789468][ T6440] [ 2181.789482][ T6440] dump_stack_lvl+0x100/0x190 [ 2181.789535][ T6440] should_fail_ex.cold+0x5/0xa [ 2181.789580][ T6440] _copy_from_user+0x2e/0xd0 [ 2181.789632][ T6440] io_uring_setup+0xc0/0x160 [ 2181.789784][ T6440] ? __pfx_io_uring_setup+0x10/0x10 [ 2181.789839][ T6440] ? do_futex+0x190/0x440 [ 2181.789879][ T6440] ? __pfx_do_futex+0x10/0x10 [ 2181.789936][ T6440] ? xfd_validate_state+0x129/0x190 [ 2181.790004][ T6440] __x64_sys_io_uring_setup+0xc2/0x170 [ 2181.790075][ T6440] do_syscall_64+0x121/0x770 [ 2181.790122][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2181.790158][ T6440] RIP: 0033:0x7fc97bd9e159 [ 2181.790187][ T6440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2181.790218][ T6440] RSP: 002b:00007fc97cc00028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2181.790250][ T6440] RAX: ffffffffffffffda RBX: 00007fc97c026450 RCX: 00007fc97bd9e159 [ 2181.790274][ T6440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2181.790294][ T6440] RBP: 00007fc97be3506b R08: 0000000000000000 R09: 0000000000000000 [ 2181.790316][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2181.790336][ T6440] R13: 00007fc97c0264e8 R14: 00007fc97c026450 R15: 00007fffcd181038 [ 2181.790377][ T6440] [ 2182.470255][ T6448] netlink: 'syz.1.3936': attribute type 33 has an invalid length. [ 2183.811570][ T31] audit: type=1800 audit(1791060331.287:12): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3939" name=22050820 dev="tmpfs" ino=726 res=0 errno=0 [ 2187.439969][ T6521] FAULT_INJECTION: forcing a failure. [ 2187.439969][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.440018][ T6521] CPU: 1 UID: 0 PID: 6521 Comm: syz.3.3948 Tainted: G L syzkaller #0 PREEMPT(full) [ 2187.440073][ T6521] Tainted: [L]=SOFTLOCKUP [ 2187.440084][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2187.440103][ T6521] Call Trace: [ 2187.440113][ T6521] [ 2187.440124][ T6521] dump_stack_lvl+0x100/0x190 [ 2187.440174][ T6521] should_fail_ex.cold+0x5/0xa [ 2187.440215][ T6521] should_failslab+0xc2/0x120 [ 2187.440267][ T6521] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 2187.440309][ T6521] ? __alloc_skb+0x5b7/0x710 [ 2187.440358][ T6521] ? __alloc_skb+0x140/0x710 [ 2187.440413][ T6521] __alloc_skb+0x140/0x710 [ 2187.440459][ T6521] ? __alloc_skb+0x5b7/0x710 [ 2187.440506][ T6521] ? __pfx___alloc_skb+0x10/0x10 [ 2187.440555][ T6521] ? sock_diag_lock_handler+0x21/0x2e0 [ 2187.440710][ T6521] ? find_held_lock+0x2b/0x80 [ 2187.440752][ T6521] netlink_ack+0x117/0xb80 [ 2187.440812][ T6521] netlink_rcv_skb+0x333/0x420 [ 2187.440858][ T6521] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 2187.440916][ T6521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2187.440977][ T6521] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2187.441040][ T6521] netlink_unicast+0x585/0x850 [ 2187.441093][ T6521] ? __pfx_netlink_unicast+0x10/0x10 [ 2187.441150][ T6521] netlink_sendmsg+0x8b0/0xda0 [ 2187.441203][ T6521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2187.441255][ T6521] ? apparmor_socket_sendmsg+0x165/0x280 [ 2187.441311][ T6521] sock_write_iter+0x53a/0x5b0 [ 2187.441349][ T6521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2187.441395][ T6521] ? __pfx_sock_write_iter+0x10/0x10 [ 2187.441445][ T6521] ? bpf_lsm_file_permission+0x9/0x10 [ 2187.441493][ T6521] ? security_file_permission+0x76/0x210 [ 2187.441530][ T6521] ? rw_verify_area+0xce/0x6d0 [ 2187.441568][ T6521] vfs_write+0x6af/0x1050 [ 2187.441607][ T6521] ? __pfx_sock_write_iter+0x10/0x10 [ 2187.441649][ T6521] ? __pfx_vfs_write+0x10/0x10 [ 2187.441683][ T6521] ? find_held_lock+0x2b/0x80 [ 2187.441745][ T6521] ksys_write+0x1f8/0x250 [ 2187.441782][ T6521] ? __pfx_ksys_write+0x10/0x10 [ 2187.441830][ T6521] do_syscall_64+0x121/0x770 [ 2187.441872][ T6521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.441905][ T6521] RIP: 0033:0x7fc97bd9e159 [ 2187.441931][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2187.441962][ T6521] RSP: 002b:00007fc97cca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2187.441992][ T6521] RAX: ffffffffffffffda RBX: 00007fc97c025fa0 RCX: 00007fc97bd9e159 [ 2187.442013][ T6521] RDX: 00000000000002fb RSI: 0000200000000000 RDI: 0000000000000003 [ 2187.442040][ T6521] RBP: 00007fc97cca5090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.442059][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.442077][ T6521] R13: 00007fc97c026038 R14: 00007fc97c025fa0 R15: 00007fffcd181038 [ 2187.442117][ T6521] [ 2189.305015][ T31] audit: type=1804 audit(1791060336.813:13): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.2.3952" name="ima_policy_written" res=0 errno=-17 [ 2189.306809][ T31] audit: type=1807 audit(1791060336.813:14): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 2189.307092][ T31] audit: type=1802 audit(1791060336.813:15): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3952" res=0 errno=0 [ 2189.837976][ T6554] ima: policy update failed [ 2189.839825][ T31] audit: type=1802 audit(1791060337.346:16): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3952" res=0 errno=0 [ 2189.909818][ T6562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2189.910046][ T6562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2189.910230][ T6562] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2189.911256][ T6562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2190.149096][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2190.149132][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2190.965844][ T31] audit: type=1807 audit(1791060338.481:17): UNKNOWN=0"û]$| res=0 [ 2190.969373][ T31] audit: type=1802 audit(1791060338.481:18): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3956" res=0 errno=0 [ 2190.991420][ T6590] ima: policy update failed [ 2190.991925][ T31] audit: type=1802 audit(1791060338.511:19): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3956" res=0 errno=0 [ 2191.396443][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3957'. [ 2191.877380][T19220] Bluetooth: hci3: command 0x0c1a tx timeout [ 2191.956407][T29706] Bluetooth: hci1: command 0x0c1a tx timeout [ 2191.956454][T29706] Bluetooth: hci2: command 0x0c1a tx timeout [ 2191.956529][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2195.457519][T19220] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2195.457545][T19220] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2196.859368][ T6665] netlink: 'syz.0.3967': attribute type 33 has an invalid length. [ 2197.306530][ T6689] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2201.349527][T19220] Bluetooth: hci2: unexpected event 0x3e length: 358 > 255 [ 2201.349562][T19220] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 2201.416425][ T6752] netlink: 'syz.3.3980': attribute type 33 has an invalid length. [ 2206.646539][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2206.646574][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2211.293969][T19220] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2211.294004][T19220] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2212.665186][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2212.665259][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2212.982051][T19220] Bluetooth: hci2: unexpected event 0x3e length: 358 > 255 [ 2212.982085][T19220] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 2216.558834][ T31] audit: type=1804 audit(3647.387:20): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.3.4016" name="ima_policy_written" res=0 errno=-17 [ 2216.558904][ T31] audit: type=1807 audit(3647.387:21): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 2216.558954][ T31] audit: type=1802 audit(3647.387:22): pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.4016" res=0 errno=0 [ 2216.943342][ T6983] ima: policy update failed [ 2216.945980][ T31] audit: type=1802 audit(3647.769:23): pid=6983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4016" res=0 errno=0 [ 2223.070144][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2223.070170][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2226.562208][ T7115] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2226.562262][ T7115] vhci_hcd vhci_hcd.2: default hub control req: 2300 v0000 i0000 l0 [ 2227.497732][ T7127] ICMPv6: process `syz.3.4034' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 2230.132237][ T7143] netlink: zone id is out of range [ 2230.132256][ T7143] netlink: zone id is out of range [ 2230.132268][ T7143] netlink: zone id is out of range [ 2230.132277][ T7143] netlink: zone id is out of range [ 2230.132287][ T7143] netlink: zone id is out of range [ 2230.132330][ T7143] netlink: zone id is out of range [ 2230.132341][ T7143] netlink: zone id is out of range [ 2230.132370][ T7143] netlink: zone id is out of range [ 2230.132383][ T7143] netlink: zone id is out of range [ 2230.132395][ T7143] netlink: zone id is out of range [ 2239.738168][ T7307] FAULT_INJECTION: forcing a failure. [ 2239.738168][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.738220][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.3.4057 Tainted: G L syzkaller #0 PREEMPT(full) [ 2239.738266][ T7307] Tainted: [L]=SOFTLOCKUP [ 2239.738278][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2239.738299][ T7307] Call Trace: [ 2239.738309][ T7307] [ 2239.738321][ T7307] dump_stack_lvl+0x100/0x190 [ 2239.738374][ T7307] should_fail_ex.cold+0x5/0xa [ 2239.738419][ T7307] should_failslab+0xc2/0x120 [ 2239.738472][ T7307] __kmalloc_cache_noprof+0x91/0x6d0 [ 2239.738509][ T7307] ? lock_acquire+0x1d1/0x380 [ 2239.738560][ T7307] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 2239.738693][ T7307] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 2239.738744][ T7307] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 2239.738794][ T7307] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 2239.738835][ T7307] ? __pfx___mutex_lock+0x10/0x10 [ 2239.738886][ T7307] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2239.738938][ T7307] ? lock_acquire+0x1d1/0x380 [ 2239.738988][ T7307] ? __might_fault+0xc5/0x140 [ 2239.739024][ T7307] ? find_held_lock+0x2b/0x80 [ 2239.739095][ T7307] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 2239.739145][ T7307] snd_pcm_oss_ioctl+0x25aa/0x3790 [ 2239.739187][ T7307] ? find_held_lock+0x2b/0x80 [ 2239.739225][ T7307] ? hook_file_ioctl_common+0x140/0x440 [ 2239.739265][ T7307] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 2239.739309][ T7307] ? __fget_files+0x21f/0x3d0 [ 2239.739345][ T7307] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 2239.739375][ T7307] __x64_sys_ioctl+0x18e/0x210 [ 2239.739403][ T7307] do_syscall_64+0x121/0x770 [ 2239.739436][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.739462][ T7307] RIP: 0033:0x7fc97bd9e159 [ 2239.739482][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2239.739506][ T7307] RSP: 002b:00007fc97cc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2239.739530][ T7307] RAX: ffffffffffffffda RBX: 00007fc97c026270 RCX: 00007fc97bd9e159 [ 2239.739545][ T7307] RDX: 0000200000000280 RSI: 00000000c0045005 RDI: 0000000000000004 [ 2239.739560][ T7307] RBP: 00007fc97cc42090 R08: 0000000000000000 R09: 0000000000000000 [ 2239.739577][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2239.739592][ T7307] R13: 00007fc97c026308 R14: 00007fc97c026270 R15: 00007fffcd181038 [ 2239.739623][ T7307] [ 2240.086870][ T7301] hub 1-0:1.0: USB hub found [ 2240.100937][ T7301] hub 1-0:1.0: 1 port detected [ 2241.618837][ T7331] hub 1-0:1.0: USB hub found [ 2241.620834][ T7331] hub 1-0:1.0: 1 port detected [ 2247.426616][T19220] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2247.426655][T19220] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2250.366588][ T7476] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[1800] was attempted by "À*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿÿÿ*…ÿÿÿÿí*…ÿÿÿÿ¤*…ÿÿÿÿÀ*…ÿÿÿÿ¿*…ÿÿÿÿÈ*…ÿÿ [ 2252.137884][ T7494] FAULT_INJECTION: forcing a failure. [ 2252.137884][ T7494] name failslab, interval 1, probability 0, space 0, times 0 [ 2252.139485][ T7494] CPU: 1 UID: 0 PID: 7494 Comm: syz.1.4080 Tainted: G L syzkaller #0 PREEMPT(full) [ 2252.139539][ T7494] Tainted: [L]=SOFTLOCKUP [ 2252.139553][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2252.139575][ T7494] Call Trace: [ 2252.139586][ T7494] [ 2252.139599][ T7494] dump_stack_lvl+0x100/0x190 [ 2252.139648][ T7494] should_fail_ex.cold+0x5/0xa [ 2252.139680][ T7494] should_failslab+0xc2/0x120 [ 2252.139715][ T7494] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2252.139747][ T7494] ? security_file_alloc+0x34/0x2c0 [ 2252.139780][ T7494] security_file_alloc+0x34/0x2c0 [ 2252.139807][ T7494] init_file+0x95/0x480 [ 2252.139842][ T7494] alloc_empty_file+0x79/0x1c0 [ 2252.139880][ T7494] path_openat+0xdb/0x2440 [ 2252.139917][ T7494] ? __pfx_path_openat+0x10/0x10 [ 2252.139957][ T7494] do_file_open+0x20e/0x430 [ 2252.139991][ T7494] ? __pfx_do_file_open+0x10/0x10 [ 2252.140062][ T7494] ? _raw_spin_unlock+0x28/0x50 [ 2252.140087][ T7494] ? alloc_fd+0x471/0x7a0 [ 2252.140128][ T7494] do_sys_openat2+0x10f/0x1e0 [ 2252.140180][ T7494] ? __pfx_do_sys_openat2+0x10/0x10 [ 2252.140221][ T7494] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2252.140253][ T7494] ? __fget_files+0x21f/0x3d0 [ 2252.140320][ T7494] __x64_sys_openat+0x12d/0x210 [ 2252.140345][ T7494] ? __pfx___x64_sys_openat+0x10/0x10 [ 2252.140368][ T7494] ? ksys_write+0x1ac/0x250 [ 2252.140407][ T7494] do_syscall_64+0x121/0x770 [ 2252.140439][ T7494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2252.140464][ T7494] RIP: 0033:0x7f6eb1b9e159 [ 2252.140485][ T7494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2252.140509][ T7494] RSP: 002b:00007f6eb2a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2252.140539][ T7494] RAX: ffffffffffffffda RBX: 00007f6eb1e26270 RCX: 00007f6eb1b9e159 [ 2252.140556][ T7494] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2252.140572][ T7494] RBP: 00007f6eb2a66090 R08: 0000000000000000 R09: 0000000000000000 [ 2252.140588][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2252.140603][ T7494] R13: 00007f6eb1e26308 R14: 00007f6eb1e26270 R15: 00007ffe3d442268 [ 2252.140634][ T7494] [ 2252.918508][T19220] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2252.918543][T19220] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2252.991607][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4086'. [ 2256.571135][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2256.571168][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2258.402030][T19220] Bluetooth: hci2: unexpected event 0x3e length: 358 > 255 [ 2258.402068][T19220] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 2262.086437][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2262.086472][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2263.590363][ T7694] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,ª±;JÆn¾¦ÂB#µ§î$Äéh5GP—)Ïû\n‰C:„Du´šbΧtUw´U‹¤U•3.O«"4Š»Y8@Z5`¤mÿb»ê4Û¤ô´À¿Ôm¿Ç¾˜×lD—)}úK߸&•9- [ 2263.590363][ T7694] ÌWwâœK EÊÓ6èË?(úIâ®' [ 2269.227096][ T7791] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2272.989889][ T7840] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4135'. [ 2273.815248][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2273.815324][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2274.729779][ T7865] kafs: addr_prefs: Invalid Command [ 2281.407227][ T7982] FAULT_INJECTION: forcing a failure. [ 2281.407227][ T7982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2281.407282][ T7982] CPU: 1 UID: 0 PID: 7982 Comm: syz.0.4153 Tainted: G L syzkaller #0 PREEMPT(full) [ 2281.407331][ T7982] Tainted: [L]=SOFTLOCKUP [ 2281.407342][ T7982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2281.407358][ T7982] Call Trace: [ 2281.407367][ T7982] [ 2281.407376][ T7982] dump_stack_lvl+0x100/0x190 [ 2281.407414][ T7982] should_fail_ex.cold+0x5/0xa [ 2281.407446][ T7982] _copy_from_user+0x2e/0xd0 [ 2281.407485][ T7982] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 2281.407535][ T7982] snd_rawmidi_write+0x2dc/0xc60 [ 2281.407574][ T7982] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2281.407605][ T7982] ? common_file_perm+0x266/0x500 [ 2281.407632][ T7982] ? __pfx_default_wake_function+0x10/0x10 [ 2281.407679][ T7982] ? bpf_lsm_file_permission+0x9/0x10 [ 2281.407717][ T7982] ? security_file_permission+0x76/0x210 [ 2281.407746][ T7982] ? rw_verify_area+0xce/0x6d0 [ 2281.407775][ T7982] vfs_write+0x2aa/0x1050 [ 2281.407803][ T7982] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 2281.407835][ T7982] ? lock_acquire+0x1d1/0x380 [ 2281.407870][ T7982] ? __fget_files+0x34/0x3d0 [ 2281.407900][ T7982] ? __pfx_vfs_write+0x10/0x10 [ 2281.407926][ T7982] ? find_held_lock+0x2b/0x80 [ 2281.407954][ T7982] ? __fget_files+0x215/0x3d0 [ 2281.407983][ T7982] ? __fget_files+0x215/0x3d0 [ 2281.408019][ T7982] ? __fget_files+0x21f/0x3d0 [ 2281.408059][ T7982] ksys_write+0x1f8/0x250 [ 2281.408088][ T7982] ? __pfx_ksys_write+0x10/0x10 [ 2281.408125][ T7982] do_syscall_64+0x121/0x770 [ 2281.408158][ T7982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.408184][ T7982] RIP: 0033:0x7f590699e159 [ 2281.408204][ T7982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2281.408260][ T7982] RSP: 002b:00007f59078a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2281.408297][ T7982] RAX: ffffffffffffffda RBX: 00007f5906c25fa0 RCX: 00007f590699e159 [ 2281.408315][ T7982] RDX: 000000100000a3d9 RSI: 0000200000000180 RDI: 0000000000000005 [ 2281.408331][ T7982] RBP: 00007f59078a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.408346][ T7982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.408361][ T7982] R13: 00007f5906c26038 R14: 00007f5906c25fa0 R15: 00007ffd645a1868 [ 2281.408392][ T7982] [ 2282.239475][T19220] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2282.239512][T19220] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2283.058276][ T8008] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4157'. [ 2286.182857][ T8066] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2286.750057][T19220] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2286.750097][T19220] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2288.185579][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'. [ 2288.300093][T19220] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2288.300128][T19220] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2292.428248][ T8164] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4179'. [ 2293.008162][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'. [ 2293.245380][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2293.245415][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2293.983798][ T8197] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2300.253234][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4196'. [ 2302.616464][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4202'. [ 2303.793884][ T8361] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2312.281250][ T8483] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2312.281288][ T8483] CIFS mount error: No usable UNC path provided in device string! [ 2312.281288][ T8483] [ 2312.329095][ T8483] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2315.043299][ T8538] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2316.730358][T19220] Bluetooth: hci2: unexpected event 0x3e length: 358 > 255 [ 2316.730396][T19220] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 2318.286631][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4237'. [ 2318.967610][ T8609] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2322.720127][ T8677] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2322.734019][ T8678] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2324.695985][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2324.696024][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2327.928656][ T8761] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 2331.216068][ T8809] netlink: 'syz.1.4273': attribute type 33 has an invalid length. [ 2332.977755][ T8835] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2332.978194][ T8835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2332.978473][ T8835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2332.978744][ T8835] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2333.787865][T19220] Bluetooth: hci2: unexpected event 0x3e length: 358 > 255 [ 2333.787904][T19220] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 2334.725014][T19220] Bluetooth: hci3: command 0x0c1a tx timeout [ 2334.965201][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2334.965262][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2335.043925][T19220] Bluetooth: hci1: command 0x0c1a tx timeout [ 2335.043978][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2335.044016][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2335.392962][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4284'. [ 2335.910717][T31310] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2335.910753][T31310] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2337.182798][ T8907] CIFS mount error: No usable UNC path provided in device string! [ 2337.182798][ T8907] [ 2337.182832][ T8907] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2338.331615][T31310] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2338.331651][T31310] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2344.056919][T31310] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2344.056951][T31310] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2348.412207][ T9095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2348.412433][ T9095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2348.412603][ T9095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2348.412769][ T9095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2350.093443][T19220] Bluetooth: hci3: command 0x0c1a tx timeout [ 2350.411523][T19220] Bluetooth: hci1: command 0x0c1a tx timeout [ 2350.411570][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2350.411606][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2360.297115][ T9311] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 2363.816140][ T9365] FAULT_INJECTION: forcing a failure. [ 2363.816140][ T9365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2363.816193][ T9365] CPU: 1 UID: 0 PID: 9365 Comm: syz.3.4350 Tainted: G L syzkaller #0 PREEMPT(full) [ 2363.816239][ T9365] Tainted: [L]=SOFTLOCKUP [ 2363.816252][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2363.816272][ T9365] Call Trace: [ 2363.816284][ T9365] [ 2363.816297][ T9365] dump_stack_lvl+0x100/0x190 [ 2363.816351][ T9365] should_fail_ex.cold+0x5/0xa [ 2363.816391][ T9365] ? prepare_alloc_pages+0x16d/0x5b0 [ 2363.816473][ T9365] should_fail_alloc_page+0xeb/0x140 [ 2363.816528][ T9365] prepare_alloc_pages+0x1f0/0x5b0 [ 2363.816586][ T9365] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2363.816639][ T9365] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 2363.816682][ T9365] ? unwind_get_return_address+0x59/0xa0 [ 2363.816726][ T9365] ? arch_stack_walk+0xa6/0xf0 [ 2363.816780][ T9365] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2363.816821][ T9365] ? __pfx_stack_trace_save+0x10/0x10 [ 2363.816868][ T9365] ? stack_depot_save_flags+0x27/0x9f0 [ 2363.816921][ T9365] ? kasan_save_stack+0x3f/0x50 [ 2363.816965][ T9365] ? kasan_save_stack+0x30/0x50 [ 2363.817012][ T9365] ? kasan_save_track+0x14/0x30 [ 2363.817043][ T9365] ? __kasan_slab_alloc+0x89/0x90 [ 2363.817077][ T9365] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 2363.817108][ T9365] ? __pmd_alloc+0xbf/0x950 [ 2363.817140][ T9365] ? __handle_mm_fault+0xa9d/0x2f60 [ 2363.817162][ T9365] ? handle_mm_fault+0x363/0xa20 [ 2363.817183][ T9365] ? do_user_addr_fault+0x745/0x12f0 [ 2363.817210][ T9365] ? exc_page_fault+0x6f/0xd0 [ 2363.817236][ T9365] ? asm_exc_page_fault+0x26/0x30 [ 2363.817258][ T9365] ? rep_movs_alternative+0xf/0xa0 [ 2363.817295][ T9365] ? do_syscall_64+0x121/0x770 [ 2363.817321][ T9365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2363.817351][ T9365] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2363.817389][ T9365] ? policy_nodemask+0xed/0x4f0 [ 2363.817428][ T9365] alloc_pages_mpol+0x201/0x550 [ 2363.817465][ T9365] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2363.817511][ T9365] alloc_pages_noprof+0x1a/0x160 [ 2363.817537][ T9365] pte_alloc_one+0x1c/0x3d0 [ 2363.817569][ T9365] do_fault+0x960/0x1830 [ 2363.817609][ T9365] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 2363.817696][ T9365] ? __pfx_do_fault+0x10/0x10 [ 2363.817732][ T9365] ? _raw_spin_unlock+0x28/0x50 [ 2363.817755][ T9365] ? __pmd_alloc+0x3fb/0x950 [ 2363.817792][ T9365] __handle_mm_fault+0x150b/0x2f60 [ 2363.817822][ T9365] ? __pfx___handle_mm_fault+0x10/0x10 [ 2363.817845][ T9365] ? __pfx_mt_find+0x10/0x10 [ 2363.817899][ T9365] ? find_vma+0xbf/0x140 [ 2363.817929][ T9365] ? __pfx_find_vma+0x10/0x10 [ 2363.817962][ T9365] handle_mm_fault+0x363/0xa20 [ 2363.818011][ T9365] do_user_addr_fault+0x745/0x12f0 [ 2363.818049][ T9365] exc_page_fault+0x6f/0xd0 [ 2363.818111][ T9365] asm_exc_page_fault+0x26/0x30 [ 2363.818145][ T9365] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 2363.818198][ T9365] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 2363.818236][ T9365] RSP: 0018:ffffc900070ffbd0 EFLAGS: 00050202 [ 2363.818258][ T9365] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 2363.818274][ T9365] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900070ffcf0 [ 2363.818290][ T9365] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000e1ff9e [ 2363.818305][ T9365] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 2363.818320][ T9365] R13: ffffc900070ffcf0 R14: 0000000000000000 R15: 0000000000000000 [ 2363.818350][ T9365] _copy_from_user+0x98/0xd0 [ 2363.818388][ T9365] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 2363.818425][ T9365] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 2363.818467][ T9365] do_sock_getsockopt+0x530/0x6e0 [ 2363.818506][ T9365] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2363.818542][ T9365] ? __fget_files+0x34/0x3d0 [ 2363.818580][ T9365] ? find_held_lock+0x2b/0x80 [ 2363.818618][ T9365] ? __fget_files+0x21f/0x3d0 [ 2363.818655][ T9365] __sys_getsockopt+0x133/0x1d0 [ 2363.818702][ T9365] ? __x64_sys_getsockopt+0xbd/0x160 [ 2363.818742][ T9365] __x64_sys_getsockopt+0xbd/0x160 [ 2363.818780][ T9365] ? do_syscall_64+0xae/0x770 [ 2363.818809][ T9365] ? lockdep_hardirqs_on+0x7d/0x110 [ 2363.818837][ T9365] do_syscall_64+0x121/0x770 [ 2363.818869][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2363.818894][ T9365] RIP: 0033:0x7fc97bd9e159 [ 2363.818914][ T9365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2363.818938][ T9365] RSP: 002b:00007fc97cc63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2363.818960][ T9365] RAX: ffffffffffffffda RBX: 00007fc97c026180 RCX: 00007fc97bd9e159 [ 2363.818976][ T9365] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 2363.818991][ T9365] RBP: 00007fc97cc63090 R08: 0000000000000000 R09: 0000000000000000 [ 2363.819006][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2363.819020][ T9365] R13: 00007fc97c026218 R14: 00007fc97c026180 R15: 00007fffcd181038 [ 2363.819051][ T9365] [ 2365.704390][T31310] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2365.704426][T31310] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2371.212114][T31310] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2371.212147][T31310] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2377.233399][ T9579] netlink: 'syz.3.4380': attribute type 33 has an invalid length. [ 2377.256593][T31310] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2377.256626][T31310] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2382.174972][T31310] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2382.175008][T31310] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2385.357190][ T9701] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2385.357428][ T9701] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2385.357611][ T9701] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2385.357798][ T9701] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2386.561357][T19220] Bluetooth: hci3: command 0x0c1a tx timeout [ 2387.357648][T19220] Bluetooth: hci1: command 0x0c1a tx timeout [ 2387.357696][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2387.357733][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2390.472711][ T9803] IPVS: length: 8 != 21224 [ 2393.076397][T31310] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2393.076436][T31310] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2396.125911][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2396.125989][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2400.162526][ T9963] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4429'. [ 2400.268940][T31310] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2400.268974][T31310] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2402.860033][ T9995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2402.860272][ T9995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2402.860445][ T9995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2402.860619][ T9995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2404.010281][T19220] Bluetooth: hci3: command 0x0c1a tx timeout [ 2404.875294][T19220] Bluetooth: hci1: command 0x0c1a tx timeout [ 2404.875343][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2404.875379][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2414.163190][T10197] netlink: 'syz.1.4463': attribute type 33 has an invalid length. [ 2417.345919][T10256] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 2417.677432][T31310] Bluetooth: hci2: unexpected event 0x3e length: 358 > 255 [ 2417.677466][T31310] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 2422.936292][T10340] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 2429.475509][T10448] netlink: 'syz.2.4500': attribute type 33 has an invalid length. [ 2431.535603][T31310] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2431.535637][T31310] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2433.950588][T10506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2433.950817][T10506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2433.951025][T10506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2433.951216][T10506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2435.143709][T31310] Bluetooth: hci3: command 0x0c1a tx timeout [ 2436.008935][T31310] Bluetooth: hci1: command 0x0c1a tx timeout [ 2436.008995][T31310] Bluetooth: hci0: command 0x0419 tx timeout [ 2436.009335][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2441.568867][T10636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2441.571665][T10636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2441.571868][T10636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2441.572059][T10636] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2442.746046][T10678] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 2442.777370][T29706] Bluetooth: hci3: command 0x0c1a tx timeout [ 2443.574316][T10561] Bluetooth: hci2: command 0x0c1a tx timeout [ 2443.575738][T10561] Bluetooth: hci0: command 0x0419 tx timeout [ 2443.577092][T29706] Bluetooth: hci1: command 0x0c1a tx timeout [ 2444.667815][T29706] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2447.471522][T10752] netlink: 'syz.1.4538': attribute type 33 has an invalid length. [ 2453.850123][T10851] netlink: 'syz.2.4550': attribute type 33 has an invalid length. [ 2456.113520][T10891] netlink: 'syz.3.4556': attribute type 33 has an invalid length. [ 2457.281024][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2457.281108][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.637776][T11096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2468.638110][T11096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2468.641725][T11096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2468.641919][T11096] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2469.701572][T29706] Bluetooth: hci3: command 0x0c1a tx timeout [ 2470.646192][T29706] Bluetooth: hci2: command 0x0c1a tx timeout [ 2470.646236][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2470.646239][T29706] Bluetooth: hci1: command 0x0c1a tx timeout [ 2477.767914][T11263] netlink: 'syz.2.4605': attribute type 33 has an invalid length. [ 2479.828348][T11286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2479.828565][T11286] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2479.828737][T11286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2479.828911][T11286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2481.158271][T19220] Bluetooth: hci3: command 0x0c1a tx timeout [ 2481.873355][T19220] Bluetooth: hci1: command 0x0c1a tx timeout [ 2481.873405][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2481.873441][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2483.195952][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4617'. [ 2486.358553][T11395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2486.358801][T11395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2486.358996][T11395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2486.359176][T11395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2487.527403][T19220] Bluetooth: hci3: command 0x0c1a tx timeout [ 2487.622981][T11435] netlink: 'syz.2.4627': attribute type 33 has an invalid length. [ 2487.660437][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 2488.414053][T19220] Bluetooth: hci1: command 0x0c1a tx timeout [ 2488.414105][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2488.414144][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2489.777045][T11482] netlink: 'syz.3.4634': attribute type 33 has an invalid length. [ 2490.417577][T11470] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2490.433383][T11470] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2490.433635][T11470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2490.433861][T11470] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2491.508063][T10561] Bluetooth: hci3: command 0x0c1a tx timeout [ 2492.464924][T19220] Bluetooth: hci1: command 0x0c1a tx timeout [ 2492.464961][T29706] Bluetooth: hci0: command 0x0419 tx timeout [ 2492.465010][T10561] Bluetooth: hci2: command 0x0c1a tx timeout [ 2496.125462][T11576] netlink: 'syz.3.4646': attribute type 33 has an invalid length. [ 2508.033041][T11789] netlink: 'syz.1.4670': attribute type 33 has an invalid length. [ 2508.524443][T11808] netlink: 'syz.1.4674': attribute type 33 has an invalid length. [ 2516.046998][T11918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2516.047317][T11918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2516.047576][T11918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2516.047839][T11918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2517.306790][T10561] Bluetooth: hci3: command 0x0c1a tx timeout [ 2518.103045][T10561] Bluetooth: hci1: command 0x0c1a tx timeout [ 2518.103076][T29706] Bluetooth: hci2: command 0x0c1a tx timeout [ 2518.103096][T10561] Bluetooth: hci0: command 0x0419 tx timeout [ 2518.423566][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2518.423642][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2519.862883][T12010] netlink: 12612 bytes leftover after parsing attributes in process `syz.1.4701'. [ 2520.361678][T12033] FAULT_INJECTION: forcing a failure. [ 2520.361678][T12033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2520.361733][T12033] CPU: 0 UID: 0 PID: 12033 Comm: syz.3.4703 Tainted: G L syzkaller #0 PREEMPT(full) [ 2520.361777][T12033] Tainted: [L]=SOFTLOCKUP [ 2520.361797][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2520.361819][T12033] Call Trace: [ 2520.361831][T12033] [ 2520.361848][T12033] dump_stack_lvl+0x100/0x190 [ 2520.361907][T12033] should_fail_ex.cold+0x5/0xa [ 2520.361946][T12033] ? fs_reclaim_acquire+0x70/0x100 [ 2520.362004][T12033] should_fail_alloc_page+0xeb/0x140 [ 2520.362061][T12033] prepare_alloc_pages+0x1f0/0x5b0 [ 2520.362119][T12033] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 2520.362164][T12033] ? __kernel_text_address+0xd/0x30 [ 2520.362211][T12033] ? unwind_get_return_address+0x59/0xa0 [ 2520.362257][T12033] ? arch_stack_walk+0xa6/0xf0 [ 2520.362312][T12033] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2520.362354][T12033] ? __pfx_stack_trace_save+0x10/0x10 [ 2520.362403][T12033] ? stack_depot_save_flags+0x27/0x9f0 [ 2520.362440][T12033] ? bpf_ksym_find+0x124/0x1c0 [ 2520.362488][T12033] ? kasan_save_stack+0x3f/0x50 [ 2520.362536][T12033] ? kasan_save_stack+0x30/0x50 [ 2520.362567][T12033] ? kasan_save_track+0x14/0x30 [ 2520.362598][T12033] ? __kasan_kmalloc+0xaa/0xb0 [ 2520.362629][T12033] ? __kmalloc_noprof+0x32f/0x840 [ 2520.362693][T12033] ? copy_splice_read+0x1a3/0xbb0 [ 2520.362740][T12033] ? do_splice_read+0x285/0x370 [ 2520.362780][T12033] ? splice_direct_to_actor+0x2a1/0xa30 [ 2520.362819][T12033] ? do_splice_direct+0x174/0x240 [ 2520.362852][T12033] ? do_sendfile+0xadc/0xe20 [ 2520.362897][T12033] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 2520.362964][T12033] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2520.363008][T12033] ? rcu_is_watching+0x13/0xc0 [ 2520.363051][T12033] ? __kmalloc_noprof+0x350/0x840 [ 2520.363082][T12033] ? copy_splice_read+0x1a3/0xbb0 [ 2520.363120][T12033] copy_splice_read+0x1e1/0xbb0 [ 2520.363160][T12033] ? __pfx_copy_splice_read+0x10/0x10 [ 2520.363196][T12033] ? look_up_lock_class+0x55/0x120 [ 2520.363249][T12033] ? rcu_is_watching+0x13/0xc0 [ 2520.363293][T12033] ? lockdep_init_map_type+0x5c/0x250 [ 2520.363355][T12033] ? __pfx_copy_splice_read+0x10/0x10 [ 2520.363389][T12033] do_splice_read+0x285/0x370 [ 2520.363426][T12033] splice_direct_to_actor+0x2a1/0xa30 [ 2520.363463][T12033] ? __pfx_direct_splice_actor+0x10/0x10 [ 2520.363503][T12033] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2520.363541][T12033] ? lock_acquire+0x1d1/0x380 [ 2520.363580][T12033] do_splice_direct+0x174/0x240 [ 2520.363615][T12033] ? __pfx_do_splice_direct+0x10/0x10 [ 2520.363651][T12033] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2520.363688][T12033] ? rw_verify_area+0xce/0x6d0 [ 2520.363715][T12033] do_sendfile+0xadc/0xe20 [ 2520.363748][T12033] ? __pfx_do_sendfile+0x10/0x10 [ 2520.363801][T12033] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2520.363871][T12033] ? __fget_files+0x21f/0x3d0 [ 2520.363917][T12033] __x64_sys_sendfile64+0x1d8/0x220 [ 2520.363950][T12033] ? ksys_write+0x1ac/0x250 [ 2520.363978][T12033] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2520.364022][T12033] do_syscall_64+0x121/0x770 [ 2520.364083][T12033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2520.364122][T12033] RIP: 0033:0x7fc97bd9e159 [ 2520.364149][T12033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2520.364173][T12033] RSP: 002b:00007fc97cc00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2520.364198][T12033] RAX: ffffffffffffffda RBX: 00007fc97c026450 RCX: 00007fc97bd9e159 [ 2520.364214][T12033] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 2520.364229][T12033] RBP: 00007fc97cc00090 R08: 0000000000000000 R09: 0000000000000000 [ 2520.364244][T12033] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2520.364259][T12033] R13: 00007fc97c0264e8 R14: 00007fc97c026450 R15: 00007fffcd181038 [ 2520.364290][T12033] [ 2521.759713][T12040] CIFS mount error: No usable UNC path provided in device string! [ 2521.759713][T12040] [ 2521.759745][T12040] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2521.864452][T12041] netlink: 'syz.2.4707': attribute type 33 has an invalid length. [ 2523.237080][T12074] kexec: Could not allocate control_code_buffer [ 2532.032051][T12231] FAULT_INJECTION: forcing a failure. [ 2532.032051][T12231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2532.032102][T12231] CPU: 1 UID: 0 PID: 12231 Comm: syz.1.4733 Tainted: G L syzkaller #0 PREEMPT(full) [ 2532.032147][T12231] Tainted: [L]=SOFTLOCKUP [ 2532.032159][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2532.032188][T12231] Call Trace: [ 2532.032199][T12231] [ 2532.032213][T12231] dump_stack_lvl+0x100/0x190 [ 2532.032264][T12231] should_fail_ex.cold+0x5/0xa [ 2532.032306][T12231] _copy_to_user+0x32/0xd0 [ 2532.032357][T12231] simple_read_from_buffer+0xcb/0x170 [ 2532.032405][T12231] proc_fail_nth_read+0x1af/0x230 [ 2532.032448][T12231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2532.032490][T12231] ? rw_verify_area+0xce/0x6d0 [ 2532.032525][T12231] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2532.032565][T12231] vfs_read+0x1e4/0xb40 [ 2532.032603][T12231] ? lock_acquire+0x1d1/0x380 [ 2532.032652][T12231] ? __fget_files+0x34/0x3d0 [ 2532.032696][T12231] ? __pfx_vfs_read+0x10/0x10 [ 2532.032733][T12231] ? find_held_lock+0x2b/0x80 [ 2532.032774][T12231] ? __fget_files+0x215/0x3d0 [ 2532.032823][T12231] ? __fget_files+0x21f/0x3d0 [ 2532.032876][T12231] ksys_read+0x12a/0x250 [ 2532.032916][T12231] ? __pfx_ksys_read+0x10/0x10 [ 2532.032967][T12231] do_syscall_64+0x121/0x770 [ 2532.033023][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2532.033056][T12231] RIP: 0033:0x7f6eb1b5e98e [ 2532.033082][T12231] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2532.033113][T12231] RSP: 002b:00007f6eb2ac8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2532.033144][T12231] RAX: ffffffffffffffda RBX: 00007f6eb2ac96c0 RCX: 00007f6eb1b5e98e [ 2532.033164][T12231] RDX: 000000000000000f RSI: 00007f6eb2ac90a0 RDI: 0000000000000003 [ 2532.033190][T12231] RBP: 00007f6eb2ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 2532.033228][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2532.033249][T12231] R13: 00007f6eb1e26038 R14: 00007f6eb1e25fa0 R15: 00007ffe3d442268 [ 2532.033305][T12231] [ 2536.739899][T12310] netlink: 'syz.1.4748': attribute type 33 has an invalid length. [ 2540.479155][T12385] netlink: 'syz.0.4757': attribute type 33 has an invalid length. [ 2542.369110][T12424] FAULT_INJECTION: forcing a failure. [ 2542.369110][T12424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2542.369158][T12424] CPU: 1 UID: 0 PID: 12424 Comm: syz.0.4765 Tainted: G L syzkaller #0 PREEMPT(full) [ 2542.369204][T12424] Tainted: [L]=SOFTLOCKUP [ 2542.369216][T12424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2542.369236][T12424] Call Trace: [ 2542.369248][T12424] [ 2542.369261][T12424] dump_stack_lvl+0x100/0x190 [ 2542.369313][T12424] should_fail_ex.cold+0x5/0xa [ 2542.369365][T12424] _copy_to_user+0x32/0xd0 [ 2542.369417][T12424] simple_read_from_buffer+0xcb/0x170 [ 2542.369477][T12424] proc_fail_nth_read+0x1af/0x230 [ 2542.369518][T12424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2542.369559][T12424] ? rw_verify_area+0xce/0x6d0 [ 2542.369593][T12424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2542.369632][T12424] vfs_read+0x1e4/0xb40 [ 2542.369687][T12424] ? lock_acquire+0x1d1/0x380 [ 2542.369737][T12424] ? __fget_files+0x34/0x3d0 [ 2542.369780][T12424] ? __pfx_vfs_read+0x10/0x10 [ 2542.369816][T12424] ? find_held_lock+0x2b/0x80 [ 2542.369858][T12424] ? __fget_files+0x215/0x3d0 [ 2542.369919][T12424] ? __fget_files+0x21f/0x3d0 [ 2542.369973][T12424] ksys_read+0x12a/0x250 [ 2542.370010][T12424] ? __pfx_ksys_read+0x10/0x10 [ 2542.370059][T12424] do_syscall_64+0x121/0x770 [ 2542.370101][T12424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2542.370133][T12424] RIP: 0033:0x7f590695e98e [ 2542.370160][T12424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2542.370190][T12424] RSP: 002b:00007f59078a4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2542.370226][T12424] RAX: ffffffffffffffda RBX: 00007f59078a56c0 RCX: 00007f590695e98e [ 2542.370248][T12424] RDX: 000000000000000f RSI: 00007f59078a50a0 RDI: 0000000000000005 [ 2542.370267][T12424] RBP: 00007f59078a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2542.370304][T12424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2542.370330][T12424] R13: 00007f5906c26038 R14: 00007f5906c25fa0 R15: 00007ffd645a1868 [ 2542.370376][T12424] [ 2542.724675][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4766'. [ 2544.592851][T12463] FAULT_INJECTION: forcing a failure. [ 2544.592851][T12463] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.592902][T12463] CPU: 0 UID: 0 PID: 12463 Comm: syz.2.4771 Tainted: G L syzkaller #0 PREEMPT(full) [ 2544.592948][T12463] Tainted: [L]=SOFTLOCKUP [ 2544.592960][T12463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2544.592981][T12463] Call Trace: [ 2544.592992][T12463] [ 2544.593006][T12463] dump_stack_lvl+0x100/0x190 [ 2544.593058][T12463] should_fail_ex.cold+0x5/0xa [ 2544.593126][T12463] should_failslab+0xc2/0x120 [ 2544.593181][T12463] __kvmalloc_node_noprof+0x113/0x9b0 [ 2544.593225][T12463] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 2544.593263][T12463] ? percpu_ref_init+0xec/0x3f0 [ 2544.593303][T12463] ? io_alloc_cache_init+0x38/0x170 [ 2544.593438][T12463] io_alloc_cache_init+0x38/0x170 [ 2544.593483][T12463] io_uring_setup.cold+0x450/0x1c5e [ 2544.593541][T12463] ? ksys_write+0x190/0x250 [ 2544.593581][T12463] ? ksys_write+0x190/0x250 [ 2544.593622][T12463] ? __pfx_io_uring_setup+0x10/0x10 [ 2544.593684][T12463] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2544.593749][T12463] ? fput+0x7c/0x100 [ 2544.593797][T12463] ? ksys_write+0x1ac/0x250 [ 2544.593838][T12463] ? __pfx_ksys_write+0x10/0x10 [ 2544.593887][T12463] __x64_sys_io_uring_setup+0xc2/0x170 [ 2544.593944][T12463] do_syscall_64+0x121/0x770 [ 2544.593991][T12463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2544.594027][T12463] RIP: 0033:0x7f383459e159 [ 2544.594054][T12463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2544.594087][T12463] RSP: 002b:00007f38353ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2544.594129][T12463] RAX: ffffffffffffffda RBX: 00007f3834825fa0 RCX: 00007f383459e159 [ 2544.594153][T12463] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000002 [ 2544.594174][T12463] RBP: 00007f38353ca090 R08: 0000000000000000 R09: 0000000000000000 [ 2544.594197][T12463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2544.594218][T12463] R13: 00007f3834826038 R14: 00007f3834825fa0 R15: 00007ffe6b54e178 [ 2544.594263][T12463] [ 2547.419018][T12518] can: request_module (can-proto-4) failed. [ 2547.474102][T12517] net_ratelimit: 342 callbacks suppressed [ 2547.474141][T12517] netlink: ct family unspecified [ 2547.519558][T12518] can: request_module (can-proto-4) failed. [ 2547.603724][T12518] can: request_module (can-proto-4) failed. [ 2547.670883][T12518] can: request_module (can-proto-4) failed. [ 2547.734347][T12518] can: request_module (can-proto-4) failed. [ 2547.800614][T12518] can: request_module (can-proto-4) failed. [ 2547.869048][T12518] can: request_module (can-proto-4) failed. [ 2547.935490][T12518] can: request_module (can-proto-4) failed. [ 2548.002183][T12518] can: request_module (can-proto-4) failed. [ 2548.082242][T12518] can: request_module (can-proto-4) failed. [ 2548.646486][T12559] FAULT_INJECTION: forcing a failure. [ 2548.646486][T12559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2548.646533][T12559] CPU: 1 UID: 0 PID: 12559 Comm: syz.3.4782 Tainted: G L syzkaller #0 PREEMPT(full) [ 2548.646574][T12559] Tainted: [L]=SOFTLOCKUP [ 2548.646585][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2548.646602][T12559] Call Trace: [ 2548.646612][T12559] [ 2548.646623][T12559] dump_stack_lvl+0x100/0x190 [ 2548.646669][T12559] should_fail_ex.cold+0x5/0xa [ 2548.646708][T12559] _copy_to_user+0x32/0xd0 [ 2548.646753][T12559] simple_read_from_buffer+0xcb/0x170 [ 2548.646795][T12559] proc_fail_nth_read+0x1af/0x230 [ 2548.646833][T12559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2548.646882][T12559] ? rw_verify_area+0xce/0x6d0 [ 2548.646913][T12559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2548.646948][T12559] vfs_read+0x1e4/0xb40 [ 2548.646983][T12559] ? lock_acquire+0x1d1/0x380 [ 2548.647032][T12559] ? __fget_files+0x34/0x3d0 [ 2548.647069][T12559] ? __pfx_vfs_read+0x10/0x10 [ 2548.647100][T12559] ? find_held_lock+0x2b/0x80 [ 2548.647136][T12559] ? __fget_files+0x215/0x3d0 [ 2548.647179][T12559] ? __fget_files+0x21f/0x3d0 [ 2548.647225][T12559] ksys_read+0x12a/0x250 [ 2548.647263][T12559] ? __pfx_ksys_read+0x10/0x10 [ 2548.647319][T12559] do_syscall_64+0x121/0x770 [ 2548.647364][T12559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2548.647400][T12559] RIP: 0033:0x7fc97bd5e98e [ 2548.647430][T12559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2548.647462][T12559] RSP: 002b:00007fc97cc62fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2548.647491][T12559] RAX: ffffffffffffffda RBX: 00007fc97cc636c0 RCX: 00007fc97bd5e98e [ 2548.647512][T12559] RDX: 000000000000000f RSI: 00007fc97cc630a0 RDI: 0000000000000007 [ 2548.647532][T12559] RBP: 00007fc97cc63090 R08: 0000000000000000 R09: 0000000000000000 [ 2548.647553][T12559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2548.647572][T12559] R13: 00007fc97c026218 R14: 00007fc97c026180 R15: 00007fffcd181038 [ 2548.647615][T12559] [ 2548.871961][T12558] netlink: 'syz.0.4781': attribute type 1 has an invalid length. [ 2548.872042][T12558] netlink: 33 bytes leftover after parsing attributes in process `syz.0.4781'. [ 2548.963499][T12561] netlink: 504 bytes leftover after parsing attributes in process `syz.2.4783'. [ 2550.968481][T12594] warning: `syz.2.4787' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2552.537584][T12621] random: crng reseeded on system resumption [ 2553.937855][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2553.937894][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2555.496790][T19220] Bluetooth: hci0: unexpected event 0x3e length: 358 > 255 [ 2555.496816][T19220] Bluetooth: hci0: unexpected subevent 0x1b length: 357 > 260 [ 2555.924029][T19220] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2555.924068][T19220] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2557.361202][T12706] netlink: 'syz.0.4804': attribute type 33 has an invalid length. [ 2557.453393][T12712] netlink: 338 bytes leftover after parsing attributes in process `syz.2.4806'. [ 2558.048354][T12737] FAULT_INJECTION: forcing a failure. [ 2558.048354][T12737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2558.048408][T12737] CPU: 1 UID: 0 PID: 12737 Comm: syz.3.4810 Tainted: G L syzkaller #0 PREEMPT(full) [ 2558.048457][T12737] Tainted: [L]=SOFTLOCKUP [ 2558.048470][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2558.048491][T12737] Call Trace: [ 2558.048504][T12737] [ 2558.048525][T12737] dump_stack_lvl+0x100/0x190 [ 2558.048578][T12737] should_fail_ex.cold+0x5/0xa [ 2558.048622][T12737] _copy_to_user+0x32/0xd0 [ 2558.048676][T12737] keyctl_capabilities+0x5a/0x160 [ 2558.048736][T12737] __do_sys_keyctl+0x427/0x5a0 [ 2558.048795][T12737] do_syscall_64+0x121/0x770 [ 2558.048842][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2558.048879][T12737] RIP: 0033:0x7fc97bd9e159 [ 2558.048907][T12737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2558.048941][T12737] RSP: 002b:00007fc97cc00028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2558.048974][T12737] RAX: ffffffffffffffda RBX: 00007fc97c026450 RCX: 00007fc97bd9e159 [ 2558.048997][T12737] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 2558.049018][T12737] RBP: 00007fc97cc00090 R08: 00000000000003ff R09: 0000000000000000 [ 2558.049039][T12737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2558.049061][T12737] R13: 00007fc97c0264e8 R14: 00007fc97c026450 R15: 00007fffcd181038 [ 2558.049106][T12737] [ 2560.162734][T12757] netlink: 'syz.2.4816': attribute type 33 has an invalid length. [ 2560.528292][T32474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2560.971894][T10561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2560.977438][T10561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2560.978391][T10561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2560.979435][T10561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2560.980193][T10561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2561.166257][T32474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.551246][T32474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2561.737643][T32474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2562.095794][T12793] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4820'. [ 2562.502108][T32474] bridge_slave_1: left allmulticast mode [ 2562.502137][T32474] bridge_slave_1: left promiscuous mode [ 2562.503678][T32474] bridge0: port 2(bridge_slave_1) entered disabled state [ 2562.532501][T32474] bridge_slave_0: left allmulticast mode [ 2562.532529][T32474] bridge_slave_0: left promiscuous mode [ 2562.532713][T32474] bridge0: port 1(bridge_slave_0) entered disabled state [ 2562.978824][T32474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2563.000833][T32474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2563.016761][T12816] FAULT_INJECTION: forcing a failure. [ 2563.016761][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 2563.016811][T12816] CPU: 1 UID: 0 PID: 12816 Comm: syz.3.4824 Tainted: G L syzkaller #0 PREEMPT(full) [ 2563.016856][T12816] Tainted: [L]=SOFTLOCKUP [ 2563.016869][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2563.016889][T12816] Call Trace: [ 2563.016901][T12816] [ 2563.016914][T12816] dump_stack_lvl+0x100/0x190 [ 2563.016967][T12816] should_fail_ex.cold+0x5/0xa [ 2563.017012][T12816] should_failslab+0xc2/0x120 [ 2563.017065][T12816] __kmalloc_noprof+0xfc/0x840 [ 2563.017113][T12816] ? lsm_blob_alloc+0x68/0x90 [ 2563.017166][T12816] lsm_blob_alloc+0x68/0x90 [ 2563.017212][T12816] security_sk_alloc+0x2d/0x290 [ 2563.017268][T12816] sk_prot_alloc+0x1d1/0x2a0 [ 2563.017314][T12816] sk_alloc+0x36/0xe80 [ 2563.017388][T12816] inet_create+0x3a0/0x1060 [ 2563.017533][T12816] ? inet_create+0x94/0x1060 [ 2563.017583][T12816] __sock_create+0x339/0x860 [ 2563.017637][T12816] mptcp_subflow_create_socket+0xec/0xa30 [ 2563.017705][T12816] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 2563.017764][T12816] ? lock_acquire+0x1d1/0x380 [ 2563.017823][T12816] __mptcp_nmpc_sk+0x17f/0x880 [ 2563.017859][T12816] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 2563.017898][T12816] ? __local_bh_enable_ip+0xa5/0x120 [ 2563.017961][T12816] mptcp_bind+0xa3/0x1e0 [ 2563.017996][T12816] __sys_bind+0x1a9/0x260 [ 2563.018045][T12816] ? __pfx___sys_bind+0x10/0x10 [ 2563.018092][T12816] ? __fget_files+0x21f/0x3d0 [ 2563.018151][T12816] ? __pfx_ksys_write+0x10/0x10 [ 2563.018204][T12816] __x64_sys_bind+0x72/0xb0 [ 2563.018251][T12816] ? lockdep_hardirqs_on+0x7d/0x110 [ 2563.018293][T12816] do_syscall_64+0x121/0x770 [ 2563.018339][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2563.018378][T12816] RIP: 0033:0x7fc97bd9e159 [ 2563.018407][T12816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2563.018441][T12816] RSP: 002b:00007fc97cc00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2563.018475][T12816] RAX: ffffffffffffffda RBX: 00007fc97c026450 RCX: 00007fc97bd9e159 [ 2563.018498][T12816] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 2563.018520][T12816] RBP: 00007fc97cc00090 R08: 0000000000000000 R09: 0000000000000000 [ 2563.018543][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2563.018564][T12816] R13: 00007fc97c0264e8 R14: 00007fc97c026450 R15: 00007fffcd181038 [ 2563.018610][T12816] [ 2563.019179][T32474] bond0 (unregistering): Released all slaves [ 2563.092898][T19220] Bluetooth: hci2: command tx timeout [ 2564.386098][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2564.533257][T32474] hsr_slave_0: left promiscuous mode [ 2564.534137][T32474] hsr_slave_1: left promiscuous mode [ 2564.542586][T32474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2564.542666][T32474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2564.548965][T32474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2564.549094][T32474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2564.579030][T32474] veth1_macvtap: left promiscuous mode [ 2564.579076][T32474] veth0_macvtap: left promiscuous mode [ 2564.579195][T32474] veth1_vlan: left promiscuous mode [ 2564.579278][T32474] veth0_vlan: left promiscuous mode [ 2564.853766][T32474] team0 (unregistering): Port device team_slave_1 removed [ 2564.871031][T32474] team0 (unregistering): Port device team_slave_0 removed [ 2565.161867][T19220] Bluetooth: hci2: command tx timeout [ 2566.382605][T12774] bridge0: port 1(bridge_slave_0) entered blocking state [ 2566.382740][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 2566.382927][T12774] bridge_slave_0: entered allmulticast mode [ 2566.385538][T12774] bridge_slave_0: entered promiscuous mode [ 2566.434506][T12774] bridge0: port 2(bridge_slave_1) entered blocking state [ 2566.434626][T12774] bridge0: port 2(bridge_slave_1) entered disabled state [ 2566.434781][T12774] bridge_slave_1: entered allmulticast mode [ 2566.458731][T12774] bridge_slave_1: entered promiscuous mode [ 2566.719671][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2566.762643][T12774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2566.775903][T12774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2566.936756][T12774] team0: Port device team_slave_0 added [ 2567.025897][T12774] team0: Port device team_slave_1 added [ 2567.229079][T12774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2567.229106][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2567.229148][T12774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2567.232201][T19220] Bluetooth: hci2: command tx timeout [ 2567.341490][T12774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2567.341515][T12774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2567.341558][T12774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2567.794267][T12774] hsr_slave_0: entered promiscuous mode [ 2567.795427][T12774] hsr_slave_1: entered promiscuous mode [ 2567.796219][T12774] debugfs: 'hsr0' already exists in 'hsr' [ 2567.796246][T12774] Cannot create hsr debugfs directory [ 2568.524546][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2569.303452][T19220] Bluetooth: hci2: command tx timeout [ 2571.761292][T12975] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 2573.378319][T12774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2573.405311][T12774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2573.406363][T12774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2573.435601][T12774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2573.572552][T12774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2573.587151][T12774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2573.750847][T12774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2573.774655][T12774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2576.226174][T19220] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2576.226216][T19220] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2576.483376][T12774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2577.150816][T12774] 8021q: adding VLAN 0 to HW filter on device team0 [ 2577.384685][T13093] bridge0: port 1(bridge_slave_0) entered blocking state [ 2577.384827][T13093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2577.467889][T32474] bridge0: port 2(bridge_slave_1) entered blocking state [ 2577.467993][T32474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2578.305610][T19220] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2578.305643][T19220] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2579.575756][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2579.575830][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2580.448966][T12774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2580.729227][T12774] veth0_vlan: entered promiscuous mode [ 2580.738097][T12774] veth1_vlan: entered promiscuous mode [ 2580.828071][T12774] veth0_macvtap: entered promiscuous mode [ 2580.843233][T12774] veth1_macvtap: entered promiscuous mode [ 2580.896334][T12774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2580.922721][T12774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2581.189840][T21445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.189909][T21445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.189979][T21445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2581.190054][T21445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2582.306825][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2582.306858][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2582.593478][T28317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2582.593502][T28317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2583.144641][T13194] CIFS mount error: No usable UNC path provided in device string! [ 2583.144641][T13194] [ 2583.144673][T13194] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2585.233230][T13222] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 2585.233333][T13222] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2585.233364][T13222] memcg:ffff888078001011 [ 2585.233378][T13222] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2585.233414][T13222] page_type: f5(slab) [ 2585.233443][T13222] raw: 00fff00000000040 ffff88801c038500 dead000000000100 dead000000000122 [ 2585.233481][T13222] raw: 0000000000000000 0000000300040004 00000000f5000000 ffff888078001011 [ 2585.233513][T13222] head: 00fff00000000040 ffff88801c038500 dead000000000100 dead000000000122 [ 2585.233544][T13222] head: 0000000000000000 0000000300040004 00000000f5000000 ffff888078001011 [ 2585.233576][T13222] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2585.233606][T13222] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2585.233625][T13222] page dumped because: unmovable page [ 2585.233647][T13222] page_owner tracks the page as allocated [ 2585.233659][T13222] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6481, tgid 6469 (syz.3.92), ts 149597625363 [ 2585.233749][T13222] post_alloc_hook+0xfd/0x120 [ 2585.233796][T13222] get_page_from_freelist+0x110d/0x35d0 [ 2585.233833][T13222] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 2585.233870][T13222] new_slab+0xa9/0x6e0 [ 2585.233903][T13222] refill_objects+0xe3/0x410 [ 2585.233937][T13222] __pcs_replace_empty_main+0x35e/0x650 [ 2585.233970][T13222] __kvmalloc_node_noprof+0x7bb/0x9b0 [ 2585.234009][T13222] alloc_netdev_mqs+0xd7/0x15c0 [ 2585.234104][T13222] loopback_net_init+0x38/0x170 [ 2585.234208][T13222] ops_init+0x1e2/0x5f0 [ 2585.234237][T13222] setup_net+0x118/0x3a0 [ 2585.234267][T13222] copy_net_ns+0x345/0x7a0 [ 2585.234301][T13222] create_new_namespaces+0x3ea/0xac0 [ 2585.234349][T13222] unshare_nsproxy_namespaces+0xf2/0x220 [ 2585.234399][T13222] ksys_unshare+0x4a2/0xa70 [ 2585.234431][T13222] __x64_sys_unshare+0x31/0x40 [ 2585.234461][T13222] page last free pid 6448 tgid 6436 ts 147724905928 stack trace: [ 2585.234484][T13222] __free_frozen_pages+0x79f/0x10f0 [ 2585.234534][T13222] qlist_free_all+0x47/0xf0 [ 2585.234573][T13222] kasan_quarantine_reduce+0x1a0/0x1f0 [ 2585.234633][T13222] __kasan_slab_alloc+0x69/0x90 [ 2585.251307][T13222] __kmalloc_cache_noprof+0x278/0x6d0 [ 2585.251450][T13222] kobject_uevent_env+0x263/0x18b0 [ 2585.335661][T13222] __kobject_del+0x168/0x220 [ 2585.335828][T13222] kobject_put+0x348/0x640 [ 2585.335943][T13222] netdev_queue_update_kobjects+0x4e5/0x6f0 [ 2585.336288][T13222] netdev_unregister_kobject+0x168/0x540 [ 2585.336421][T13222] unregister_netdevice_many_notify+0x1503/0x2150 [ 2585.336559][T13222] ops_undo_list+0x8ff/0xab0 [ 2585.336674][T13222] setup_net+0x1fa/0x3a0 [ 2585.336757][T13222] copy_net_ns+0x345/0x7a0 [ 2585.395248][T13222] create_new_namespaces+0x3ea/0xac0 [ 2585.395411][T13222] unshare_nsproxy_namespaces+0xf2/0x220 [ 2585.650606][T13218] ovs_: entered promiscuous mode [ 2587.915225][T13264] CIFS mount error: No usable UNC path provided in device string! [ 2587.915225][T13264] [ 2587.915269][T13264] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2588.653479][T13278] netlink: 'syz.0.4867': attribute type 33 has an invalid length. [ 2591.008510][T13327] CIFS mount error: No usable UNC path provided in device string! [ 2591.008510][T13327] [ 2591.008539][T13327] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2591.065307][T13329] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4875'. [ 2596.468282][T13415] FAULT_INJECTION: forcing a failure. [ 2596.468282][T13415] name failslab, interval 1, probability 0, space 0, times 0 [ 2596.468320][T13415] CPU: 1 UID: 0 PID: 13415 Comm: syz.1.4887 Tainted: G L syzkaller #0 PREEMPT(full) [ 2596.468372][T13415] Tainted: [L]=SOFTLOCKUP [ 2596.468381][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2596.468397][T13415] Call Trace: [ 2596.468405][T13415] [ 2596.468415][T13415] dump_stack_lvl+0x100/0x190 [ 2596.468454][T13415] should_fail_ex.cold+0x5/0xa [ 2596.468487][T13415] should_failslab+0xc2/0x120 [ 2596.468524][T13415] __kmalloc_cache_noprof+0x91/0x6d0 [ 2596.468552][T13415] ? ceph_alloc_options+0x43/0x310 [ 2596.468692][T13415] ceph_alloc_options+0x43/0x310 [ 2596.468743][T13415] ceph_init_fs_context+0x61/0x530 [ 2596.468836][T13415] alloc_fs_context+0x60c/0xf40 [ 2596.468882][T13415] __x64_sys_fsopen+0xed/0x220 [ 2596.468908][T13415] do_syscall_64+0x121/0x770 [ 2596.468941][T13415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2596.468968][T13415] RIP: 0033:0x7fece7d9e159 [ 2596.468987][T13415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2596.469012][T13415] RSP: 002b:00007fece8bcf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 2596.469035][T13415] RAX: ffffffffffffffda RBX: 00007fece8026090 RCX: 00007fece7d9e159 [ 2596.469053][T13415] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2596.469068][T13415] RBP: 00007fece8bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 2596.469083][T13415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2596.469099][T13415] R13: 00007fece8026128 R14: 00007fece8026090 R15: 00007ffe8c314028 [ 2596.469153][T13415] [ 2599.096514][T13473] db_root: cannot open: x [ 2603.225963][T13548] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[12774] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[13548] [ 2604.369356][T19220] Bluetooth: hci3: unexpected event 0x10 length: 124 > 1 [ 2604.371813][T10561] Bluetooth: hci3: hardware error 0x00 [ 2606.299438][T13584] FAULT_INJECTION: forcing a failure. [ 2606.299438][T13584] name failslab, interval 1, probability 0, space 0, times 0 [ 2606.299505][T13584] CPU: 0 UID: 0 PID: 13584 Comm: syz.3.4909 Tainted: G L syzkaller #0 PREEMPT(full) [ 2606.299539][T13584] Tainted: [L]=SOFTLOCKUP [ 2606.299549][T13584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2606.299563][T13584] Call Trace: [ 2606.299572][T13584] [ 2606.299581][T13584] dump_stack_lvl+0x100/0x190 [ 2606.299619][T13584] should_fail_ex.cold+0x5/0xa [ 2606.299651][T13584] should_failslab+0xc2/0x120 [ 2606.299721][T13584] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2606.299762][T13584] ? __css_rstat_updated+0x1ce/0x590 [ 2606.299818][T13584] ? ptlock_alloc+0x1f/0x70 [ 2606.299858][T13584] ptlock_alloc+0x1f/0x70 [ 2606.299898][T13584] pte_alloc_one+0x82/0x3d0 [ 2606.299939][T13584] __pte_alloc+0x6d/0x380 [ 2606.299971][T13584] ? __pfx___pte_alloc+0x10/0x10 [ 2606.300001][T13584] ? find_held_lock+0x2b/0x80 [ 2606.300029][T13584] ? do_huge_pmd_anonymous_page+0xc5e/0x15b0 [ 2606.300117][T13584] ? do_huge_pmd_anonymous_page+0xc5e/0x15b0 [ 2606.300171][T13584] do_anonymous_page+0x1307/0x2050 [ 2606.300201][T13584] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 2606.300229][T13584] ? __pfx_do_anonymous_page+0x10/0x10 [ 2606.300254][T13584] ? pgd_none+0x9f/0xe0 [ 2606.300276][T13584] ? __pfx_pgd_none+0x10/0x10 [ 2606.300298][T13584] ? find_held_lock+0x2b/0x80 [ 2606.300330][T13584] __handle_mm_fault+0x1ff3/0x2f60 [ 2606.300360][T13584] ? __pfx___handle_mm_fault+0x10/0x10 [ 2606.300391][T13584] ? __lock_acquire+0x5c0/0x1f40 [ 2606.300438][T13584] ? pmdp_set_access_flags+0x12d/0x1a0 [ 2606.300479][T13584] handle_mm_fault+0x363/0xa20 [ 2606.300510][T13584] __get_user_pages+0x8ae/0x2c30 [ 2606.300555][T13584] ? __pfx___get_user_pages+0x10/0x10 [ 2606.300600][T13584] populate_vma_page_range+0x267/0x3f0 [ 2606.300638][T13584] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2606.300674][T13584] ? __pfx_find_vma_intersection+0x10/0x10 [ 2606.300716][T13584] __mm_populate+0x107/0x3a0 [ 2606.300752][T13584] ? __pfx___mm_populate+0x10/0x10 [ 2606.300791][T13584] ? up_write+0x2dc/0x5b0 [ 2606.300818][T13584] __do_sys_mlockall+0x4f4/0x5d0 [ 2606.300848][T13584] do_syscall_64+0x121/0x770 [ 2606.300910][T13584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2606.300947][T13584] RIP: 0033:0x7fc97bd9e159 [ 2606.300978][T13584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2606.301010][T13584] RSP: 002b:00007fc97cca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2606.301044][T13584] RAX: ffffffffffffffda RBX: 00007fc97c025fa0 RCX: 00007fc97bd9e159 [ 2606.301071][T13584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 2606.301086][T13584] RBP: 00007fc97cca5090 R08: 0000000000000000 R09: 0000000000000000 [ 2606.301100][T13584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2606.301114][T13584] R13: 00007fc97c026038 R14: 00007fc97c025fa0 R15: 00007fffcd181038 [ 2606.301145][T13584] [ 2606.408478][T10561] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2608.648098][T13626] zswap: compressor 000 not available [ 2614.830642][T13743] syz.1.4926 (13743): drop_caches: 0 [ 2624.779616][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4951'. [ 2625.447492][T13925] netlink: 'syz.3.4952': attribute type 33 has an invalid length. [ 2626.074416][T13945] FAULT_INJECTION: forcing a failure. [ 2626.074416][T13945] name failslab, interval 1, probability 0, space 0, times 0 [ 2626.074468][T13945] CPU: 1 UID: 0 PID: 13945 Comm: syz.2.4957 Tainted: G L syzkaller #0 PREEMPT(full) [ 2626.074512][T13945] Tainted: [L]=SOFTLOCKUP [ 2626.074524][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2626.074545][T13945] Call Trace: [ 2626.074556][T13945] [ 2626.074570][T13945] dump_stack_lvl+0x100/0x190 [ 2626.074621][T13945] should_fail_ex.cold+0x5/0xa [ 2626.074665][T13945] should_failslab+0xc2/0x120 [ 2626.074716][T13945] __kvmalloc_node_noprof+0x113/0x9b0 [ 2626.074769][T13945] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2626.074821][T13945] ? is_bpf_text_address+0x94/0x1a0 [ 2626.074872][T13945] ? traverse.part.0.constprop.0+0x397/0x650 [ 2626.074924][T13945] traverse.part.0.constprop.0+0x397/0x650 [ 2626.074968][T13945] ? find_held_lock+0x2b/0x80 [ 2626.075008][T13945] ? aa_file_perm+0x7e4/0x14d0 [ 2626.075059][T13945] seq_read_iter+0x93f/0x1270 [ 2626.075098][T13945] ? aa_file_perm+0x7f3/0x14d0 [ 2626.075158][T13945] seq_read+0x344/0x4d0 [ 2626.075198][T13945] ? __pfx_seq_read+0x10/0x10 [ 2626.075263][T13945] ? __lock_acquire+0x5c0/0x1f40 [ 2626.075320][T13945] ? import_ubuf+0x1b6/0x220 [ 2626.075384][T13945] full_proxy_read+0x135/0x1a0 [ 2626.075538][T13945] ? __pfx_full_proxy_read+0x10/0x10 [ 2626.075580][T13945] vfs_readv+0x5d8/0x8d0 [ 2626.075631][T13945] ? __pfx_vfs_readv+0x10/0x10 [ 2626.075679][T13945] ? lock_acquire+0x1d1/0x380 [ 2626.075730][T13945] ? __fget_files+0x34/0x3d0 [ 2626.075797][T13945] ? __fget_files+0x21f/0x3d0 [ 2626.075852][T13945] ? do_preadv+0x1ac/0x270 [ 2626.075888][T13945] do_preadv+0x1ac/0x270 [ 2626.075927][T13945] ? __pfx_do_preadv+0x10/0x10 [ 2626.075977][T13945] do_syscall_64+0x121/0x770 [ 2626.076023][T13945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2626.076060][T13945] RIP: 0033:0x7f383459e159 [ 2626.076088][T13945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2626.076120][T13945] RSP: 002b:00007f38353a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2626.076153][T13945] RAX: ffffffffffffffda RBX: 00007f3834826090 RCX: 00007f383459e159 [ 2626.076177][T13945] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 2626.076198][T13945] RBP: 00007f38353a9090 R08: 0000000000000006 R09: 0000000000000000 [ 2626.076219][T13945] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 2626.076240][T13945] R13: 00007f3834826128 R14: 00007f3834826090 R15: 00007ffe6b54e178 [ 2626.076281][T13945] [ 2629.304612][T13991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4965'. [ 2629.316416][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 2629.346306][T13991] bridge_slave_0 (unregistering): left allmulticast mode [ 2629.346336][T13991] bridge_slave_0 (unregistering): left promiscuous mode [ 2629.347777][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 2629.414000][T13984] netlink: 'syz.3.4963': attribute type 33 has an invalid length. [ 2634.122493][T14073] netlink: 'syz.2.4976': attribute type 33 has an invalid length. [ 2638.849674][T14161] netlink: 'syz.2.4988': attribute type 33 has an invalid length. [ 2640.728718][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2640.728793][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2644.087644][T14239] CIFS mount error: No usable UNC path provided in device string! [ 2644.087644][T14239] [ 2644.087677][T14239] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2648.288390][T14305] CIFS mount error: No usable UNC path provided in device string! [ 2648.288390][T14305] [ 2648.288422][T14305] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2652.400091][T14376] FAULT_INJECTION: forcing a failure. [ 2652.400091][T14376] name failslab, interval 1, probability 0, space 0, times 0 [ 2652.400128][T14376] CPU: 0 UID: 0 PID: 14376 Comm: syz.2.5016 Tainted: G L syzkaller #0 PREEMPT(full) [ 2652.400183][T14376] Tainted: [L]=SOFTLOCKUP [ 2652.400197][T14376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2652.400220][T14376] Call Trace: [ 2652.400228][T14376] [ 2652.400237][T14376] dump_stack_lvl+0x100/0x190 [ 2652.400278][T14376] should_fail_ex.cold+0x5/0xa [ 2652.400309][T14376] should_failslab+0xc2/0x120 [ 2652.400365][T14376] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2652.400398][T14376] ? ptlock_alloc+0x1f/0x70 [ 2652.400427][T14376] ptlock_alloc+0x1f/0x70 [ 2652.400450][T14376] pte_alloc_one+0x82/0x3d0 [ 2652.400486][T14376] do_fault+0x960/0x1830 [ 2652.400522][T14376] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 2652.400551][T14376] ? __pfx_do_fault+0x10/0x10 [ 2652.400587][T14376] ? _raw_spin_unlock+0x28/0x50 [ 2652.400612][T14376] ? __pmd_alloc+0x3fb/0x950 [ 2652.400650][T14376] __handle_mm_fault+0x150b/0x2f60 [ 2652.400680][T14376] ? __pfx___handle_mm_fault+0x10/0x10 [ 2652.400704][T14376] ? __pfx_mt_find+0x10/0x10 [ 2652.400752][T14376] ? find_vma+0xbf/0x140 [ 2652.400782][T14376] ? __pfx_find_vma+0x10/0x10 [ 2652.400817][T14376] handle_mm_fault+0x363/0xa20 [ 2652.400847][T14376] do_user_addr_fault+0x745/0x12f0 [ 2652.400884][T14376] exc_page_fault+0x6f/0xd0 [ 2652.400913][T14376] asm_exc_page_fault+0x26/0x30 [ 2652.400938][T14376] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 2652.400987][T14376] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 2652.401012][T14376] RSP: 0018:ffffc90007787bd0 EFLAGS: 00050202 [ 2652.401033][T14376] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 2652.401048][T14376] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90007787cf0 [ 2652.401064][T14376] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000ef0f9e [ 2652.401082][T14376] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 2652.401103][T14376] R13: ffffc90007787cf0 R14: 0000000000000000 R15: 0000000000000000 [ 2652.401132][T14376] _copy_from_user+0x98/0xd0 [ 2652.401170][T14376] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 2652.401206][T14376] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 2652.401248][T14376] do_sock_getsockopt+0x530/0x6e0 [ 2652.401283][T14376] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2652.401319][T14376] ? __fget_files+0x34/0x3d0 [ 2652.401351][T14376] ? find_held_lock+0x2b/0x80 [ 2652.401387][T14376] ? __fget_files+0x21f/0x3d0 [ 2652.401424][T14376] __sys_getsockopt+0x133/0x1d0 [ 2652.401471][T14376] ? __x64_sys_getsockopt+0xbd/0x160 [ 2652.401512][T14376] __x64_sys_getsockopt+0xbd/0x160 [ 2652.401550][T14376] ? do_syscall_64+0xae/0x770 [ 2652.401579][T14376] ? lockdep_hardirqs_on+0x7d/0x110 [ 2652.401634][T14376] do_syscall_64+0x121/0x770 [ 2652.401678][T14376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2652.401714][T14376] RIP: 0033:0x7f383459e159 [ 2652.401741][T14376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2652.401774][T14376] RSP: 002b:00007f3835388028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2652.401806][T14376] RAX: ffffffffffffffda RBX: 00007f3834826180 RCX: 00007f383459e159 [ 2652.401834][T14376] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 2652.401849][T14376] RBP: 00007f3835388090 R08: 0000000000000000 R09: 0000000000000000 [ 2652.401864][T14376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2652.401879][T14376] R13: 00007f3834826218 R14: 00007f3834826180 R15: 00007ffe6b54e178 [ 2652.401911][T14376] [ 2653.102115][T14385] CIFS mount error: No usable UNC path provided in device string! [ 2653.102115][T14385] [ 2653.102147][T14385] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2657.451389][T14464] IPVS: length: 8 != 21224 [ 2658.858803][T14494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5031'. [ 2659.020893][T14494] bridge0: port 1(bridge_slave_0) entered disabled state [ 2659.054216][T14494] bridge_slave_0 (unregistering): left allmulticast mode [ 2659.054252][T14494] bridge_slave_0 (unregistering): left promiscuous mode [ 2659.054355][T14494] bridge0: port 1(bridge_slave_0) entered disabled state [ 2662.263947][T14557] FAULT_INJECTION: forcing a failure. [ 2662.263947][T14557] name failslab, interval 1, probability 0, space 0, times 0 [ 2662.263999][T14557] CPU: 1 UID: 0 PID: 14557 Comm: syz.3.5037 Tainted: G L syzkaller #0 PREEMPT(full) [ 2662.264047][T14557] Tainted: [L]=SOFTLOCKUP [ 2662.264059][T14557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2662.264086][T14557] Call Trace: [ 2662.264097][T14557] [ 2662.264111][T14557] dump_stack_lvl+0x100/0x190 [ 2662.264165][T14557] should_fail_ex.cold+0x5/0xa [ 2662.264207][T14557] should_failslab+0xc2/0x120 [ 2662.264259][T14557] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 2662.264307][T14557] ? __kasan_kmalloc+0xaa/0xb0 [ 2662.264353][T14557] ? __request_module+0x2d5/0x6a0 [ 2662.264397][T14557] kstrdup+0x51/0xe0 [ 2662.264437][T14557] __request_module+0x2d5/0x6a0 [ 2662.264475][T14557] ? __pfx___request_module+0x10/0x10 [ 2662.264525][T14557] ? rcu_is_watching+0x13/0xc0 [ 2662.264564][T14557] ? apparmor_capable+0x1d7/0x4d0 [ 2662.264633][T14557] dev_load+0x22b/0x240 [ 2662.264666][T14557] dev_ioctl+0x493/0x1070 [ 2662.264696][T14557] ? in_gate_area_no_mm+0x2f/0x80 [ 2662.264739][T14557] sock_do_ioctl+0x1a0/0x280 [ 2662.264799][T14557] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2662.264837][T14557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2662.264887][T14557] ? in_gate_area_no_mm+0x2f/0x80 [ 2662.264929][T14557] ? in_gate_area_no_mm+0x2f/0x80 [ 2662.264966][T14557] ? in_gate_area_no_mm+0x58/0x80 [ 2662.265014][T14557] ? arch_irq_work_raise+0xa/0x70 [ 2662.265083][T14557] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2662.265131][T14557] sock_ioctl+0x599/0x6b0 [ 2662.265178][T14557] ? __pfx_sock_ioctl+0x10/0x10 [ 2662.265230][T14557] ? __fget_files+0x21f/0x3d0 [ 2662.265278][T14557] ? __pfx_sock_ioctl+0x10/0x10 [ 2662.265326][T14557] __x64_sys_ioctl+0x18e/0x210 [ 2662.265368][T14557] do_syscall_64+0x121/0x770 [ 2662.265413][T14557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2662.265449][T14557] RIP: 0033:0x7fc97bd9e159 [ 2662.265479][T14557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2662.265512][T14557] RSP: 002b:00007fc97cc00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2662.265547][T14557] RAX: ffffffffffffffda RBX: 00007fc97c026450 RCX: 00007fc97bd9e159 [ 2662.265570][T14557] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000005 [ 2662.265591][T14557] RBP: 00007fc97cc00090 R08: 0000000000000000 R09: 0000000000000000 [ 2662.265612][T14557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2662.265633][T14557] R13: 00007fc97c0264e8 R14: 00007fc97c026450 R15: 00007fffcd181038 [ 2662.265678][T14557] [ 2669.003047][T14666] IPVS: length: 8 != 21224 [ 2671.444069][T14689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2671.444357][T14689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2671.444593][T14689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2671.444707][T14689] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2671.497630][T14689] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2673.452885][T10561] Bluetooth: hci2: command 0x0c1a tx timeout [ 2673.452955][T10561] Bluetooth: hci1: command 0x0c1a tx timeout [ 2673.452993][T10561] Bluetooth: hci0: command 0x0419 tx timeout [ 2675.523936][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2677.540936][T14795] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2677.541171][T14795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2677.541395][T14795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2679.050625][T14817] FAULT_INJECTION: forcing a failure. [ 2679.050625][T14817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2679.050677][T14817] CPU: 0 UID: 0 PID: 14817 Comm: syz.3.5072 Tainted: G L syzkaller #0 PREEMPT(full) [ 2679.050723][T14817] Tainted: [L]=SOFTLOCKUP [ 2679.050736][T14817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2679.050757][T14817] Call Trace: [ 2679.050768][T14817] [ 2679.050780][T14817] dump_stack_lvl+0x100/0x190 [ 2679.050843][T14817] should_fail_ex.cold+0x5/0xa [ 2679.050888][T14817] _copy_to_user+0x32/0xd0 [ 2679.050942][T14817] keyctl_capabilities+0x5a/0x160 [ 2679.051003][T14817] __do_sys_keyctl+0x427/0x5a0 [ 2679.051059][T14817] do_syscall_64+0x121/0x770 [ 2679.051105][T14817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2679.051141][T14817] RIP: 0033:0x7fc97bd9e159 [ 2679.051169][T14817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2679.051202][T14817] RSP: 002b:00007fc97cc84028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 2679.051236][T14817] RAX: ffffffffffffffda RBX: 00007fc97c026090 RCX: 00007fc97bd9e159 [ 2679.051259][T14817] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 2679.051279][T14817] RBP: 00007fc97cc84090 R08: 0000000000000401 R09: 0000000000000000 [ 2679.051302][T14817] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 2679.051323][T14817] R13: 00007fc97c026128 R14: 00007fc97c026090 R15: 00007fffcd181038 [ 2679.051368][T14817] [ 2679.265445][T19220] Bluetooth: hci0: command 0x0419 tx timeout [ 2679.585495][T10561] Bluetooth: hci1: command 0x0c1a tx timeout [ 2679.585561][T19220] Bluetooth: hci2: command 0x0c1a tx timeout [ 2679.853639][ T529] bridge_slave_1: left allmulticast mode [ 2679.853673][ T529] bridge_slave_1: left promiscuous mode [ 2679.853897][ T529] bridge0: port 2(bridge_slave_1) entered disabled state [ 2679.856898][ T529] bridge_slave_0: left allmulticast mode [ 2679.856928][ T529] bridge_slave_0: left promiscuous mode [ 2679.857178][ T529] bridge0: port 1(bridge_slave_0) entered disabled state [ 2680.173945][ T529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2680.177477][ T529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2680.180509][ T529] bond0 (unregistering): Released all slaves [ 2680.223705][T10561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2680.229335][T10561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2680.230347][T10561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2680.240504][T10561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2680.263922][T10561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2681.087938][ T529] hsr_slave_0: left promiscuous mode [ 2681.089586][ T529] hsr_slave_1: left promiscuous mode [ 2681.090307][ T529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2681.090329][ T529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2681.091176][ T529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2681.091197][ T529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2681.141988][ T529] veth1_macvtap: left promiscuous mode [ 2681.142027][ T529] veth0_macvtap: left promiscuous mode [ 2681.142130][ T529] veth1_vlan: left promiscuous mode [ 2681.142188][ T529] veth0_vlan: left promiscuous mode [ 2681.533138][ T529] team0 (unregistering): Port device úÿÿ removed [ 2681.557593][ T529] team0 (unregistering): Port device team_slave_0 removed [ 2682.291571][T10561] Bluetooth: hci3: command tx timeout [ 2682.408510][T14864] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2682.408565][T14864] vhci_hcd vhci_hcd.1: invalid port number 225 [ 2682.408593][T14864] vhci_hcd vhci_hcd.1: default hub control req: 0907 vf8b0 i00e1 l6906 [ 2683.391787][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 2683.393059][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 2683.393232][T14837] bridge_slave_0: entered allmulticast mode [ 2683.405142][T14837] bridge_slave_0: entered promiscuous mode [ 2683.425585][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 2683.425701][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 2683.425937][T14837] bridge_slave_1: entered allmulticast mode [ 2683.440543][T14837] bridge_slave_1: entered promiscuous mode [ 2683.555842][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2683.660848][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2683.664604][T14884] FAULT_INJECTION: forcing a failure. [ 2683.664604][T14884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2683.708504][T14884] CPU: 0 UID: 0 PID: 14884 Comm: syz.0.5081 Tainted: G L syzkaller #0 PREEMPT(full) [ 2683.708550][T14884] Tainted: [L]=SOFTLOCKUP [ 2683.708562][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2683.708580][T14884] Call Trace: [ 2683.708591][T14884] [ 2683.708604][T14884] dump_stack_lvl+0x100/0x190 [ 2683.708652][T14884] should_fail_ex.cold+0x5/0xa [ 2683.708688][T14884] ? prepare_alloc_pages+0x16d/0x5b0 [ 2683.708738][T14884] should_fail_alloc_page+0xeb/0x140 [ 2683.708786][T14884] prepare_alloc_pages+0x1f0/0x5b0 [ 2683.708833][T14884] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2683.708882][T14884] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 2683.708920][T14884] ? unwind_get_return_address+0x59/0xa0 [ 2683.708958][T14884] ? arch_stack_walk+0xa6/0xf0 [ 2683.709008][T14884] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2683.709043][T14884] ? __pfx_stack_trace_save+0x10/0x10 [ 2683.709085][T14884] ? stack_depot_save_flags+0x27/0x9f0 [ 2683.709119][T14884] ? find_held_lock+0x2b/0x80 [ 2683.709154][T14884] ? ima_match_policy+0x8c4/0x23f0 [ 2683.709191][T14884] ? kasan_save_stack+0x3f/0x50 [ 2683.709232][T14884] ? kasan_save_stack+0x30/0x50 [ 2683.709270][T14884] ? kasan_save_track+0x14/0x30 [ 2683.709309][T14884] ? __kasan_slab_alloc+0x89/0x90 [ 2683.709359][T14884] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 2683.709398][T14884] ? __pmd_alloc+0xbf/0x950 [ 2683.709440][T14884] ? __handle_mm_fault+0xa9d/0x2f60 [ 2683.709486][T14884] ? handle_mm_fault+0x363/0xa20 [ 2683.709515][T14884] ? do_user_addr_fault+0x745/0x12f0 [ 2683.709553][T14884] ? exc_page_fault+0x6f/0xd0 [ 2683.709590][T14884] ? asm_exc_page_fault+0x26/0x30 [ 2683.709621][T14884] ? rep_movs_alternative+0x4a/0xa0 [ 2683.709674][T14884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2683.709720][T14884] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2683.709774][T14884] ? policy_nodemask+0xed/0x4f0 [ 2683.709827][T14884] alloc_pages_mpol+0x201/0x550 [ 2683.709879][T14884] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2683.709945][T14884] alloc_pages_noprof+0x1a/0x160 [ 2683.709981][T14884] pte_alloc_one+0x1c/0x3d0 [ 2683.710026][T14884] do_fault+0x960/0x1830 [ 2683.710075][T14884] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 2683.710113][T14884] ? __pfx_do_fault+0x10/0x10 [ 2683.710163][T14884] ? _raw_spin_unlock+0x28/0x50 [ 2683.710195][T14884] ? __pmd_alloc+0x3fb/0x950 [ 2683.710247][T14884] __handle_mm_fault+0x150b/0x2f60 [ 2683.710298][T14884] ? __pfx___handle_mm_fault+0x10/0x10 [ 2683.710367][T14884] ? __pfx_mt_find+0x10/0x10 [ 2683.710436][T14884] ? find_vma+0xbf/0x140 [ 2683.710481][T14884] ? __pfx_find_vma+0x10/0x10 [ 2683.710531][T14884] handle_mm_fault+0x363/0xa20 [ 2683.710576][T14884] do_user_addr_fault+0x745/0x12f0 [ 2683.710630][T14884] exc_page_fault+0x6f/0xd0 [ 2683.710670][T14884] asm_exc_page_fault+0x26/0x30 [ 2683.710705][T14884] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 2683.710757][T14884] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff b1 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 2683.710789][T14884] RSP: 0018:ffffc9000be67ba0 EFLAGS: 00050202 [ 2683.710818][T14884] RAX: 0000000000000001 RBX: ffff88802a413700 RCX: 0000000000000085 [ 2683.710840][T14884] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802a413700 [ 2683.710865][T14884] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10054826f0 [ 2683.710887][T14884] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc9000be67d88 [ 2683.710909][T14884] R13: 0000000000000000 R14: 0000000000000085 R15: 0000000000000000 [ 2683.710950][T14884] _copy_from_iter+0x355/0x1690 [ 2683.711013][T14884] ? __pfx__copy_from_iter+0x10/0x10 [ 2683.711060][T14884] ? trace_kmalloc+0xeb/0x110 [ 2683.711108][T14884] ? __kasan_kmalloc+0xaa/0xb0 [ 2683.711157][T14884] ? __kmalloc_noprof+0x350/0x840 [ 2683.711202][T14884] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 2683.711248][T14884] kernfs_fop_write_iter+0x186/0x5f0 [ 2683.711291][T14884] vfs_write+0x6af/0x1050 [ 2683.711343][T14884] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2683.711385][T14884] ? __pfx_vfs_write+0x10/0x10 [ 2683.711425][T14884] ? find_held_lock+0x2b/0x80 [ 2683.711495][T14884] ksys_write+0x12a/0x250 [ 2683.711550][T14884] ? __pfx_ksys_write+0x10/0x10 [ 2683.711604][T14884] do_syscall_64+0x121/0x770 [ 2683.711650][T14884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2683.711686][T14884] RIP: 0033:0x7f590699e159 [ 2683.711716][T14884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2683.711759][T14884] RSP: 002b:00007f59078a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2683.711789][T14884] RAX: ffffffffffffffda RBX: 00007f5906c25fa0 RCX: 00007f590699e159 [ 2683.711810][T14884] RDX: 0000000000000085 RSI: 0000000000000000 RDI: 0000000000000003 [ 2683.711830][T14884] RBP: 00007f59078a5090 R08: 0000000000000000 R09: 0000000000000000 [ 2683.711851][T14884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2683.711870][T14884] R13: 00007f5906c26038 R14: 00007f5906c25fa0 R15: 00007ffd645a1868 [ 2683.711912][T14884] [ 2684.371582][T10561] Bluetooth: hci3: command tx timeout [ 2684.575471][T14837] team0: Port device team_slave_0 added [ 2684.774433][T14837] team0: Port device team_slave_1 added [ 2685.263199][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2685.263223][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2685.263266][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2685.405939][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2685.405963][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2685.406004][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2685.640737][T14837] hsr_slave_0: entered promiscuous mode [ 2685.641603][T14837] hsr_slave_1: entered promiscuous mode [ 2686.431877][T10561] Bluetooth: hci3: command tx timeout [ 2687.136609][T14837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2687.148503][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2687.230648][T14837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2687.234287][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2687.235278][T14837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2687.260142][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2687.270403][T14837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2687.284581][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2687.420305][T14837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2687.454847][T14837] 8021q: adding VLAN 0 to HW filter on device team0 [ 2687.476828][T32474] bridge0: port 1(bridge_slave_0) entered blocking state [ 2687.476965][T32474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2687.480026][T32474] bridge0: port 2(bridge_slave_1) entered blocking state [ 2687.480148][T32474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2688.503052][T10561] Bluetooth: hci3: command tx timeout [ 2689.350111][T14837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2689.873390][T14837] veth0_vlan: entered promiscuous mode [ 2690.291524][T14837] veth1_vlan: entered promiscuous mode [ 2691.428411][T14837] veth0_macvtap: entered promiscuous mode [ 2691.450205][T14837] veth1_macvtap: entered promiscuous mode [ 2691.504051][T14837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2691.544225][T14837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2691.628696][T21445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.681196][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.681262][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.681316][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2691.978833][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2691.978865][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2692.332180][T21445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2692.332211][T21445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2699.039074][T15102] Process accounting resumed [ 2701.881620][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2701.881695][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2705.481655][T15231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5129'. [ 2705.589489][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.628177][T15231] bridge_slave_0 (unregistering): left allmulticast mode [ 2705.628215][T15231] bridge_slave_0 (unregistering): left promiscuous mode [ 2705.628304][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 2708.084962][T15267] FAULT_INJECTION: forcing a failure. [ 2708.084962][T15267] name failslab, interval 1, probability 0, space 0, times 0 [ 2708.085002][T15267] CPU: 0 UID: 0 PID: 15267 Comm: syz.3.5135 Tainted: G L syzkaller #0 PREEMPT(full) [ 2708.085036][T15267] Tainted: [L]=SOFTLOCKUP [ 2708.085046][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2708.085061][T15267] Call Trace: [ 2708.085069][T15267] [ 2708.085080][T15267] dump_stack_lvl+0x100/0x190 [ 2708.085120][T15267] should_fail_ex.cold+0x5/0xa [ 2708.085152][T15267] should_failslab+0xc2/0x120 [ 2708.085197][T15267] kmem_cache_alloc_noprof+0x92/0x6a0 [ 2708.085231][T15267] ? ptlock_alloc+0x1f/0x70 [ 2708.085260][T15267] ptlock_alloc+0x1f/0x70 [ 2708.085283][T15267] pte_alloc_one+0x82/0x3d0 [ 2708.085318][T15267] do_fault+0x960/0x1830 [ 2708.085354][T15267] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 2708.085382][T15267] ? __pfx_do_fault+0x10/0x10 [ 2708.085419][T15267] ? _raw_spin_unlock+0x28/0x50 [ 2708.085446][T15267] ? __pmd_alloc+0x3fb/0x950 [ 2708.085484][T15267] __handle_mm_fault+0x150b/0x2f60 [ 2708.085515][T15267] ? __pfx___handle_mm_fault+0x10/0x10 [ 2708.085539][T15267] ? __pfx_mt_find+0x10/0x10 [ 2708.085598][T15267] ? find_vma+0xbf/0x140 [ 2708.085628][T15267] ? __pfx_find_vma+0x10/0x10 [ 2708.085661][T15267] handle_mm_fault+0x363/0xa20 [ 2708.085691][T15267] do_user_addr_fault+0x745/0x12f0 [ 2708.085726][T15267] exc_page_fault+0x6f/0xd0 [ 2708.085754][T15267] asm_exc_page_fault+0x26/0x30 [ 2708.085778][T15267] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 2708.085816][T15267] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 2708.085840][T15267] RSP: 0018:ffffc900065afcf8 EFLAGS: 00050246 [ 2708.085860][T15267] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 2708.085875][T15267] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888022aa9d60 [ 2708.085890][T15267] RBP: 0000000000000008 R08: 0000000000000001 R09: ffffed10045553ac [ 2708.085905][T15267] R10: ffff888022aa9d67 R11: 0000000000000000 R12: 0000000000000000 [ 2708.085920][T15267] R13: ffff888022aa9d60 R14: 0000000000000008 R15: 0000000000000008 [ 2708.085949][T15267] _copy_from_user+0x98/0xd0 [ 2708.085991][T15267] sctp_setsockopt+0x8cc/0xb370 [ 2708.086126][T15267] ? __pfx_sctp_setsockopt+0x10/0x10 [ 2708.086168][T15267] ? aa_sock_opt_perm+0x114/0x1e0 [ 2708.086207][T15267] ? sock_common_setsockopt+0x2e/0xf0 [ 2708.086238][T15267] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2708.086270][T15267] do_sock_setsockopt+0xf3/0x1d0 [ 2708.086301][T15267] __sys_setsockopt+0x119/0x190 [ 2708.086344][T15267] __x64_sys_setsockopt+0xbd/0x160 [ 2708.086381][T15267] ? do_syscall_64+0xae/0x770 [ 2708.086409][T15267] ? lockdep_hardirqs_on+0x7d/0x110 [ 2708.086436][T15267] do_syscall_64+0x121/0x770 [ 2708.086467][T15267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2708.086492][T15267] RIP: 0033:0x7fc97bd9e159 [ 2708.086510][T15267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2708.086534][T15267] RSP: 002b:00007fc97cca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2708.086556][T15267] RAX: ffffffffffffffda RBX: 00007fc97c025fa0 RCX: 00007fc97bd9e159 [ 2708.086572][T15267] RDX: 0000000000000082 RSI: 0000010000000084 RDI: 0000000000000003 [ 2708.086587][T15267] RBP: 00007fc97cca5090 R08: 0000000000000008 R09: 0000000000000000 [ 2708.086601][T15267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2708.086616][T15267] R13: 00007fc97c026038 R14: 00007fc97c025fa0 R15: 00007fffcd181038 [ 2708.086646][T15267] [ 2708.721739][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5139'. [ 2710.523441][T15308] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2713.052809][T15313] Process accounting resumed [ 2718.874044][T15418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5157'. [ 2726.538614][T15539] FAULT_INJECTION: forcing a failure. [ 2726.538614][T15539] name failslab, interval 1, probability 0, space 0, times 0 [ 2726.538667][T15539] CPU: 0 UID: 0 PID: 15539 Comm: syz.3.5175 Tainted: G L syzkaller #0 PREEMPT(full) [ 2726.538724][T15539] Tainted: [L]=SOFTLOCKUP [ 2726.538737][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2726.538757][T15539] Call Trace: [ 2726.538769][T15539] [ 2726.538783][T15539] dump_stack_lvl+0x100/0x190 [ 2726.538848][T15539] should_fail_ex.cold+0x5/0xa [ 2726.538893][T15539] should_failslab+0xc2/0x120 [ 2726.538944][T15539] __kvmalloc_node_noprof+0x113/0x9b0 [ 2726.538991][T15539] ? __kmalloc_cache_noprof+0x2c1/0x6d0 [ 2726.539029][T15539] ? percpu_ref_init+0xec/0x3f0 [ 2726.539067][T15539] ? io_alloc_cache_init+0x38/0x170 [ 2726.539115][T15539] io_alloc_cache_init+0x38/0x170 [ 2726.539158][T15539] io_uring_setup.cold+0x46e/0x1c5e [ 2726.539217][T15539] ? ksys_write+0x190/0x250 [ 2726.539256][T15539] ? ksys_write+0x190/0x250 [ 2726.539295][T15539] ? __pfx_io_uring_setup+0x10/0x10 [ 2726.539354][T15539] ? __mutex_unlock_slowpath+0x35d/0x930 [ 2726.539417][T15539] ? fput+0x7c/0x100 [ 2726.539464][T15539] ? ksys_write+0x1ac/0x250 [ 2726.539503][T15539] ? __pfx_ksys_write+0x10/0x10 [ 2726.539552][T15539] __x64_sys_io_uring_setup+0xc2/0x170 [ 2726.539608][T15539] do_syscall_64+0x121/0x770 [ 2726.539652][T15539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2726.539693][T15539] RIP: 0033:0x7fc97bd9e159 [ 2726.539722][T15539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2726.539754][T15539] RSP: 002b:00007fc97cca5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2726.539787][T15539] RAX: ffffffffffffffda RBX: 00007fc97c025fa0 RCX: 00007fc97bd9e159 [ 2726.539810][T15539] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000002 [ 2726.539831][T15539] RBP: 00007fc97cca5090 R08: 0000000000000000 R09: 0000000000000000 [ 2726.539852][T15539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2726.539871][T15539] R13: 00007fc97c026038 R14: 00007fc97c025fa0 R15: 00007fffcd181038 [ 2726.539914][T15539] [ 2728.993284][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5182'. [ 2729.092745][T15580] Process accounting paused [ 2734.707261][T15679] mmap: syz.3.5197 (15679) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2735.544597][T15719] random: crng reseeded on system resumption [ 2743.864509][T15819] Process accounting paused [ 2748.112226][T10561] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2748.112261][T10561] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2750.530243][T10561] Bluetooth: hci3: unexpected event 0x3e length: 358 > 255 [ 2750.530279][T10561] Bluetooth: hci3: unexpected subevent 0x1b length: 357 > 260 [ 2754.159394][T15990] netlink: ct family unspecified [ 2754.776608][T10561] Bluetooth: hci1: unexpected event 0x3e length: 358 > 255 [ 2754.776644][T10561] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 2756.426200][T16031] random: crng reseeded on system resumption [ 2756.520182][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5245'. [ 2756.624654][T16022] veth1_macvtap: left promiscuous mode [ 2756.624690][T16022] macsec0: entered promiscuous mode [ 2756.624711][T16022] macsec0: entered allmulticast mode [ 2758.061443][T16054] netlink: ct family unspecified [ 2759.911676][T16062] Process accounting resumed [ 2761.662447][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5255'. [ 2761.664968][T16116] netlink: 25 bytes leftover after parsing attributes in process `syz.3.5255'. [ 2763.033994][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 2763.034074][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 2766.094608][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5269'. [ 2768.465946][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5274'. [ 2770.052851][T16249] hub 1-0:1.0: USB hub found [ 2770.081631][T16249] hub 1-0:1.0: 1 port detected [ 2773.736592][T16311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5288'. [ 2773.933822][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 2773.965421][T16311] bridge_slave_0 (unregistering): left allmulticast mode [ 2773.965460][T16311] bridge_slave_0 (unregistering): left promiscuous mode [ 2773.965568][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 2774.422299][T16296] Process accounting resumed [ 2778.413383][T16395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5300'. [ 2779.899404][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5302'. [ 2779.900389][T16416] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5302'. [ 2784.834415][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5315'. [ 2784.835325][T16512] netlink: 25 bytes leftover after parsing attributes in process `syz.3.5315'. [ 2786.346832][T16523] FAULT_INJECTION: forcing a failure. [ 2786.346832][T16523] name failslab, interval 1, probability 0, space 0, times 0 [ 2786.346881][T16523] CPU: 1 UID: 0 PID: 16523 Comm: syz.0.5318 Tainted: G L syzkaller #0 PREEMPT(full) [ 2786.346923][T16523] Tainted: [L]=SOFTLOCKUP [ 2786.346936][T16523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2786.346956][T16523] Call Trace: [ 2786.346967][T16523] [ 2786.346980][T16523] dump_stack_lvl+0x100/0x190 [ 2786.347038][T16523] should_fail_ex.cold+0x5/0xa [ 2786.347081][T16523] should_failslab+0xc2/0x120 [ 2786.347131][T16523] __kmalloc_noprof+0xfc/0x840 [ 2786.347172][T16523] ? tomoyo_encode2+0xfb/0x3c0 [ 2786.347219][T16523] tomoyo_encode2+0xfb/0x3c0 [ 2786.347264][T16523] tomoyo_encode+0x29/0x50 [ 2786.347302][T16523] tomoyo_realpath_from_path+0x18c/0x690 [ 2786.347351][T16523] tomoyo_check_open_permission+0x2af/0x3c0 [ 2786.347387][T16523] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 2786.347425][T16523] ? __lock_acquire+0x5c0/0x1f40 [ 2786.347484][T16523] ? hook_file_open+0x248/0x8e0 [ 2786.347548][T16523] ? path_get+0x61/0x80 [ 2786.347600][T16523] tomoyo_file_open+0x6b/0x90 [ 2786.347707][T16523] security_file_open+0xb5/0x1e0 [ 2786.347745][T16523] do_dentry_open+0x588/0x14d0 [ 2786.347797][T16523] vfs_open+0x82/0x3f0 [ 2786.347851][T16523] path_openat+0x19fa/0x2440 [ 2786.347902][T16523] ? __pfx_path_openat+0x10/0x10 [ 2786.347957][T16523] do_file_open+0x20e/0x430 [ 2786.348004][T16523] ? __pfx_do_file_open+0x10/0x10 [ 2786.348082][T16523] ? _raw_spin_unlock+0x28/0x50 [ 2786.348115][T16523] ? alloc_fd+0x471/0x7a0 [ 2786.348177][T16523] do_sys_openat2+0x10f/0x1e0 [ 2786.348228][T16523] ? __pfx_do_sys_openat2+0x10/0x10 [ 2786.348280][T16523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2786.348323][T16523] ? __fget_files+0x21f/0x3d0 [ 2786.348371][T16523] __x64_sys_openat+0x12d/0x210 [ 2786.348401][T16523] ? __pfx___x64_sys_openat+0x10/0x10 [ 2786.348431][T16523] ? ksys_write+0x1ac/0x250 [ 2786.348483][T16523] do_syscall_64+0x121/0x770 [ 2786.348531][T16523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2786.348565][T16523] RIP: 0033:0x7f590699e159 [ 2786.348591][T16523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2786.348622][T16523] RSP: 002b:00007f5907884028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2786.348653][T16523] RAX: ffffffffffffffda RBX: 00007f5906c26090 RCX: 00007f590699e159 [ 2786.348675][T16523] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2786.348696][T16523] RBP: 00007f5907884090 R08: 0000000000000000 R09: 0000000000000000 [ 2786.348715][T16523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2786.348734][T16523] R13: 00007f5906c26128 R14: 00007f5906c26090 R15: 00007ffd645a1868 [ 2786.348775][T16523] [ 2786.617249][T16523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2790.570484][T16550] Process accounting paused [ 2791.070028][T16612] FAULT_INJECTION: forcing a failure. [ 2791.070028][T16612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2791.070080][T16612] CPU: 0 UID: 0 PID: 16612 Comm: syz.3.5330 Tainted: G L syzkaller #0 PREEMPT(full) [ 2791.070130][T16612] Tainted: [L]=SOFTLOCKUP [ 2791.070143][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2791.070165][T16612] Call Trace: [ 2791.070177][T16612] [ 2791.070199][T16612] dump_stack_lvl+0x100/0x190 [ 2791.070252][T16612] should_fail_ex.cold+0x5/0xa [ 2791.070297][T16612] _copy_to_user+0x32/0xd0 [ 2791.070358][T16612] simple_read_from_buffer+0xcb/0x170 [ 2791.070407][T16612] proc_fail_nth_read+0x1af/0x230 [ 2791.070471][T16612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2791.070517][T16612] ? rw_verify_area+0xce/0x6d0 [ 2791.070554][T16612] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2791.070595][T16612] vfs_read+0x1e4/0xb40 [ 2791.070637][T16612] ? lock_acquire+0x1d1/0x380 [ 2791.070688][T16612] ? __fget_files+0x34/0x3d0 [ 2791.070734][T16612] ? __pfx_vfs_read+0x10/0x10 [ 2791.070771][T16612] ? find_held_lock+0x2b/0x80 [ 2791.070813][T16612] ? __fget_files+0x215/0x3d0 [ 2791.070865][T16612] ? __fget_files+0x21f/0x3d0 [ 2791.070920][T16612] ksys_read+0x12a/0x250 [ 2791.070962][T16612] ? __pfx_ksys_read+0x10/0x10 [ 2791.071014][T16612] do_syscall_64+0x121/0x770 [ 2791.071063][T16612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2791.071100][T16612] RIP: 0033:0x7fc97bd5e98e [ 2791.071128][T16612] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2791.071162][T16612] RSP: 002b:00007fc97cbfffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2791.071212][T16612] RAX: ffffffffffffffda RBX: 00007fc97cc006c0 RCX: 00007fc97bd5e98e [ 2791.071236][T16612] RDX: 000000000000000f RSI: 00007fc97cc000a0 RDI: 000000000000000a [ 2791.071258][T16612] RBP: 00007fc97cc00090 R08: 0000000000000000 R09: 0000000000000000 [ 2791.071280][T16612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.071302][T16612] R13: 00007fc97c0264e8 R14: 00007fc97c026450 R15: 00007fffcd181038 [ 2791.071347][T16612] [ 2800.714101][T16780] FAULT_INJECTION: forcing a failure. [ 2800.714101][T16780] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.714157][T16780] CPU: 1 UID: 0 PID: 16780 Comm: syz.3.5355 Tainted: G L syzkaller #0 PREEMPT(full) [ 2800.714211][T16780] Tainted: [L]=SOFTLOCKUP [ 2800.714226][T16780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2800.714248][T16780] Call Trace: [ 2800.714261][T16780] [ 2800.714276][T16780] dump_stack_lvl+0x100/0x190 [ 2800.714335][T16780] should_fail_ex.cold+0x5/0xa [ 2800.714385][T16780] should_failslab+0xc2/0x120 [ 2800.714448][T16780] __kmalloc_cache_noprof+0x91/0x6d0 [ 2800.714491][T16780] ? sctp_endpoint_new+0xfc/0xb20 [ 2800.714680][T16780] sctp_endpoint_new+0xfc/0xb20 [ 2800.714737][T16780] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 2800.714787][T16780] ? lockdep_init_map_type+0x5c/0x250 [ 2800.714859][T16780] ? lockdep_init_map_type+0x5c/0x250 [ 2800.714919][T16780] ? lockdep_init_map_type+0x5c/0x250 [ 2800.714983][T16780] sctp_init_sock+0xe2b/0x1300 [ 2800.715040][T16780] ? __pfx_sctp_init_sock+0x10/0x10 [ 2800.715109][T16780] inet_create+0x94c/0x1060 [ 2800.715159][T16780] ? inet_create+0x94/0x1060 [ 2800.715212][T16780] __sock_create+0x339/0x860 [ 2800.715270][T16780] __sys_socket+0x14d/0x260 [ 2800.715319][T16780] ? __pfx___sys_socket+0x10/0x10 [ 2800.715384][T16780] __x64_sys_socket+0x72/0xb0 [ 2800.715435][T16780] ? lockdep_hardirqs_on+0x7d/0x110 [ 2800.715482][T16780] do_syscall_64+0x121/0x770 [ 2800.715533][T16780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2800.715574][T16780] RIP: 0033:0x7fc97bd9e159 [ 2800.715604][T16780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2800.715641][T16780] RSP: 002b:00007fc97cc00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2800.715679][T16780] RAX: ffffffffffffffda RBX: 00007fc97c026450 RCX: 00007fc97bd9e159 [ 2800.715705][T16780] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 2800.715729][T16780] RBP: 00007fc97be3506b R08: 0000000000000000 R09: 0000000000000000 [ 2800.715753][T16780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2800.715777][T16780] R13: 00007fc97c0264e8 R14: 00007fc97c026450 R15: 00007fffcd181038 [ 2800.715836][T16780] [ 2802.971705][T16821] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2803.129450][T10561] Bluetooth: hci2: unexpected event 0x3e length: 358 > 255 [ 2803.129487][T10561] Bluetooth: hci2: unexpected subevent 0x1b length: 357 > 260 [ 2804.572579][T16809] Process accounting paused [ 2805.870346][T19220] Bluetooth: hci3: command 0x0406 tx timeout [ 2807.580520][T16893] BUG: unable to handle page fault for address: ffffc900144d2fe8 [ 2807.588293][T16893] #PF: supervisor write access in kernel mode [ 2807.594377][T16893] #PF: error_code(0x0002) - not-present page [ 2807.600476][T16893] PGD 13fe12067 P4D 13fe12067 PUD 1d2ca067 PMD 67174067 PTE 0 [ 2807.607992][T16893] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 2807.613386][T16893] CPU: 0 UID: 0 PID: 16893 Comm: syz.2.5369 Tainted: G L syzkaller #0 PREEMPT(full) [ 2807.624368][T16893] Tainted: [L]=SOFTLOCKUP [ 2807.628715][T16893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2807.638785][T16893] RIP: 0010:write_comp_data+0x7c/0xa0 [ 2807.644233][T16893] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2807.663892][T16893] RSP: 0018:ffffc9000ba1fe80 EFLAGS: 00050257 [ 2807.670016][T16893] RAX: ffffc900144d3000 RBX: 0000000000000000 RCX: ffffffff82497cc5 [ 2807.678080][T16893] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2807.686100][T16893] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2807.694119][T16893] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2807.702141][T16893] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2807.710160][T16893] FS: 00007f81b045e6c0(0000) GS:ffff888123b55000(0000) knlGS:0000000000000000 [ 2807.719140][T16893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2807.725770][T16893] CR2: ffffc900144d2fe8 CR3: 000000007a0e8000 CR4: 00000000003526f0 [ 2807.733803][T16893] Call Trace: [ 2807.737117][T16893] [ 2807.740081][T16893] rseq_register+0x115/0x350 [ 2807.744816][T16893] __x64_sys_rseq+0x1b8/0x2e0 [ 2807.749560][T16893] do_syscall_64+0x121/0x770 [ 2807.754210][T16893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2807.760162][T16893] RIP: 0033:0x7f81af59e159 [ 2807.764618][T16893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2807.784279][T16893] RSP: 002b:00007f81b045e028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 2807.792760][T16893] RAX: ffffffffffffffda RBX: 00007f81af826450 RCX: 00007f81af59e159 [ 2807.800780][T16893] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 2807.808806][T16893] RBP: 00007f81af63506b R08: 0000000000000000 R09: 0000000000000000 [ 2807.816824][T16893] R10: 0000000008000006 R11: 0000000000000246 R12: 0000000000000000 [ 2807.824897][T16893] R13: 00007f81af8264e8 R14: 00007f81af826450 R15: 00007ffcd354fc38 [ 2807.832925][T16893] [ 2807.836044][T16893] Modules linked in: [ 2807.839990][T16893] CR2: ffffc900144d2fe8 [ 2807.844215][T16893] ---[ end trace 0000000000000000 ]--- [ 2807.849696][T16893] RIP: 0010:write_comp_data+0x7c/0xa0 [ 2807.849750][T16893] Code: 00 8b bf 1c 17 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 1b 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 2807.849796][T16893] RSP: 0018:ffffc9000ba1fe80 EFLAGS: 00050257 [ 2807.849821][T16893] RAX: ffffc900144d3000 RBX: 0000000000000000 RCX: ffffffff82497cc5 [ 2807.849840][T16893] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 2807.849859][T16893] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 2807.849876][T16893] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 2807.849913][T16893] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 2807.849932][T16893] FS: 00007f81b045e6c0(0000) GS:ffff888123b55000(0000) knlGS:0000000000000000 [ 2807.849960][T16893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2807.849981][T16893] CR2: ffffc900144d2fe8 CR3: 000000007a0e8000 CR4: 00000000003526f0 [ 2807.850004][T16893] Kernel panic - not syncing: Fatal exception [ 2807.951101][T16893] Kernel Offset: disabled [ 2807.955453][T16893] Rebooting in 86400 seconds..