last executing test programs: 11.553379s ago: executing program 3 (id=1530): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve1\x00'}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto_split_huge_pages_fops_huge_memory(0xffffffffffffffff, &(0x7f0000001480)="dbd3f6ff50cfaac39c69d9e19b0b0f50f6601028f904333b04dfbd77eb109043c5e6d80dbe27d86566853922166a8e3bdb22c81bbdc0b63d803bcd8ce3c4c84441ae98c25cb01c7c4b8b96e97184e57d56af8fa66a4320034e11162fa1e512afec92e00cf4649951184fd77560f13c633ffcf32983a36af5b8a0103dd573bb85b2fd20bb8acb337d8cf01d18719be3c04af1ed0b21c27b76886f5da1d80e67f8a1eaf828f049d122bb01b9352be9716dd9869a523d6f89afc2d848485bc5177d31e968d0ce5c2442ce7435416ec8719533eaf1c21fda48ebc1558f97ecd4ee4d56121856a82952281f4283a79687d7d77169fe73616e0a62e3d2b02c401bdb507d03dc7f", 0x104) r1 = setfsgid$auto(0x0) unshare$auto(0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x200000, 0x0) socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) fremovexattr$auto(0xffffffffffffffff, 0x0) setxattr$auto(&(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x100000000, 0x3) setsockopt$auto(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x8002) unshare$auto(0x3) setrlimit$auto(0x204007, &(0x7f0000000080)={0x0, 0x2}) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) io_submit$auto(0x7fffffffffffffff, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x547c, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x7ffffffffffffffe, 0x0, 0x6, 0x0, 0xe}) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 11.254715359s ago: executing program 2 (id=1531): mmap$auto(0x0, 0x2020009, 0x3, 0xeb3, 0xffffffffffffffff, 0x5) r0 = eventfd$auto(0x0) readv$auto(r0, &(0x7f0000000380)={0x0, 0xfffffdef}, 0x100) socket(0x1, 0x5, 0x0) unshare$auto(0x40000080) quotactl$auto(0x100, &(0x7f0000000140)='/dev/ram7\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/ext4/sda1/warning_ratelimit_burst\x00', 0x20461, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x8) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x9001011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1c/sub5/sw_params\x00', 0x1014a0, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/net/snmp\x00', 0x101100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000140)=""/103, 0x67) mmap$auto(0x5, 0x8000003, 0x2, 0x16, r1, 0x100) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101, 0x0) symlink$auto(&(0x7f0000000080)='.\x00', &(0x7f0000000040)='./file0\x00') lremovexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') keyctl$auto(0x4, 0x0, 0x0, 0xffffffffffffffff, 0x100000000000a) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x3ffffffffffffc, 0x400005, 0x800000000000002, 0x19, r2, 0x8001) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) 10.429559219s ago: executing program 0 (id=1533): r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$auto(0x3, 0x400008, 0xfffffffffffffff7, 0x9b72, r0, 0x4) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_tracers\x00', 0x80, 0x0) preadv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000280)="6f79340c26df280a5bcf4f94eef76d766279873cea2f08c4e3c5871bc7fd24c8cc82", 0xa}, 0x4, 0xfffffffffffffffa, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0xdf9b) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x2c01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001400)=""/4113, 0x1011) socket(0x27, 0x3, 0xff) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, 0x0, &(0x7f00000002c0)=0x8, 0x7ff, 0x3ff, 0xa, 0xa, 0xf9eb, 0x4, 0x3, 0x6, @raw=0xffff3a03, @raw=0x7fffffff}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x440200, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x240, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r6, 0x8004500b, 0x0) ioctl$auto_BLKGETSIZE(r5, 0x1260, 0x0) socket(0x2, 0x3, 0x100) ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) utimensat$auto(0x2, &(0x7f0000000100)='\x00', 0x0, 0x1000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x1, 0x2, 0x0, 0x0, 0x3) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 10.411676984s ago: executing program 1 (id=1534): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/environ\x00', 0x470000, 0x0) read$auto_proc_environ_operations_base(r0, &(0x7f0000000180)=""/61, 0x3d) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0xa702, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x8, 0xffffffffffffff4c, 0x3, 0x5, 0x2000800000000007, 0x1, 0xc, 0x19, 0x10000000010, 0x5, 0x3, 0x4000000000008, 0x80000000, 0x7, 0x0, 0x4000000000009]}, 0x0) poll$auto(&(0x7f0000000000)={r1, 0x7fff, 0x7fff}, 0x6, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) r2 = epoll_create$auto(0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) r4 = socket(0x1, 0x5, 0x0) epoll_ctl$auto(0x5, 0x1, r4, 0x0) epoll_wait$auto(r2, 0x0, 0xe007, 0x1) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x200040, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x5, 0x3fffff, 0x3, 0x11, 0xdd, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy$auto(0x8003, 0x0, 0x4) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) socket(0x2a, 0x2, 0x0) unshare$auto(0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/eql/queues/tx-0/byte_queue_limits/inflight\x00', 0xc2040, 0x0) 9.064296057s ago: executing program 2 (id=1535): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) socketpair$auto(0x1e, 0x5, 0x2, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) ioctl$auto(r0, 0xc038563c, r0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC, @ANYBLOB="13c3364f461779f29c6f9400"/29, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x2, 0x1, 0x106) r3 = socket(0xa, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) socket(0x10, 0x2, 0xc) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x200b02, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0) 8.69880039s ago: executing program 3 (id=1536): mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x101000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\xdcn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, 0x0, 0x109500, 0x0) read$auto(r2, &(0x7f0000000040)='(-{%\x00', 0x4b) umount2$auto(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES8=r1], 0xfffffffffffffd6c}}, 0x14) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(0xffffffffffffffff, 0x80085502, &(0x7f0000000200)=ANY=[]) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0xe89, 0x7, 0x65f8, 0xffffffffffffffff, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttya6\x00', 0x113040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/ath9k/parameters/use_msi\x00', 0x0, 0x0) umount2$auto(&(0x7f00000001c0)='\x00', 0x1) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000300)="7188b5e2c80d1b5d10ca81dcf782edc1f0c8af72b29cc084f15dcc9705b02477fded5e24183edbfa06ae821041fcf4b3d5519fecc112c2f64099db31d3332b6cc932ad94c5e6262429bdba3fbe23c05c8f6586b361aae4ea65483d5373af373ebfb993a2d2cba7f3d65e12c10646e2926e703093ef880217879952aa72c7b1f7e1e1c8748f8bcf19ba700f94d2a879432f3a01", 0x93) r5 = fcntl$auto_F_UNLCK(r4, 0x9, 0x2) shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f0000000340)={{0x9, 0x0, 0xffffffffffffffff, 0x2, 0xfffffff7, 0x5, 0x2}, 0x1, 0x7, 0x6, 0x7, @raw=0xfffffff1, @inferred=0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0}) ioctl$auto(r1, 0x2, r5) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 8.483394361s ago: executing program 1 (id=1537): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) unshare$auto(0x8001) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r0 = setfsgid$auto(0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_create$auto(0x7ff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x136e, 0x1ff, 0x1001, 0x1, 0x717e, 0x9, 0x8, 0xf6f, 0xd, 0x2, 0x4080001, 0x4, 0x5, 0x2248, 0x6, 0x7, 0x6, 0x7f, 0x7f, 0x1, 0xa, 0x4, 0x200, 0x6, 0x84, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0xfffffffc, [0x5a, 0xe, 0x0, 0x401, 0x0, 0x5, 0x800, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0xd, 0x1, 0x1000000000006, 0x7, 0x41, 0x7, 0x3, 0xffffffffffffffff, 0x3, 0x5000000]}, 0x1fe, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd03, &(0x7f00000001c0)) write$auto(0xffffffffffffffff, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000}) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, r0, 0x3ff) setresgid$auto(0x0, 0x800000a0, 0x8) setresuid$auto(0x0, 0xffffffffffffffff, 0x200) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0xb, 0xfffffffd, 0x7, 0x0, 0x6) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0xa8000, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0xa) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000140)=""/84, 0x54) 8.430370341s ago: executing program 0 (id=1538): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r1, 0x40086602, &(0x7f0000000180)="f9b614d22aa4a460cfb56a95fe2004332cbcbb0ce134b2747fcbdf6ebd276a04e2fd612f6669e487ab52b2a827737588c833b38a8a8ab7a7147d9ebdf91b73fc35fdcc8548bd41b43e43f35716724de2624e51d44c499d4ff7c6e7535c376eaad9bbfef22d356a2115e4c9617145b4ffe47ce6") write$auto(r0, 0x0, 0x100000a3db) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x1, 0x7ff) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000040)="158f4a2b") r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r4, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) poll$auto(0x0, 0x8, 0x4) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) mmap$auto(0x0, 0xf92d, 0x285, 0xf8, r1, 0x6) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) ioctl$auto(0x3, 0x8208ae63, 0x38) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) 8.369097156s ago: executing program 2 (id=1539): mmap$auto(0x0, 0x1, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r1, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) write$auto(0x3, 0x0, 0x1) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) times$auto(0xfffffffffffffffc) mmap$auto(0x0, 0x2002020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) socket(0x2b, 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x7ffc) bind$auto(0xffffffffffffffff, 0x0, 0x68) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) setns(0xc9, 0x0) socket(0x1f, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0x1}, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 7.833289453s ago: executing program 0 (id=1540): sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="143d6916"], 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x40) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, 0x0, 0x201, 0xd) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf250300000004000800dc010180d8011080d40108"], 0x1f4}, 0x1, 0x0, 0x0, 0x24040071}, 0x800) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) ioctl$auto_RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) syz_clone3(&(0x7f0000000300)={0x32a080200, &(0x7f00000003c0), &(0x7f0000000040), 0x0, {0x20000037}, &(0x7f0000000780)=""/92, 0x5c, &(0x7f0000000980)=""/237, &(0x7f0000000100)}, 0x58) write$auto(0xffffffffffffffff, 0x0, 0x92bf) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x3, 0x3, {0x5, 0x8, 0x9, 0x7, 0x3, 0x6b, 0xfffffffd, 0x10002, 0xfd}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000800)='/Eev/audio1\x00VI\xa3\xaa\xb1\xce\xf4d\xab\x83\xcfJ;\x9dJ\xc6\xc0\'\xdb\xbd\xe9/\x93\n\xcd$ab\xb3k7V\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89\xcc\xd9\x92\xee\x069m\x05b\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\xdbE\x93}\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaYd\xb0\xf1\xcb\xd3\xdd\xe2\xae,\x95k\xfer\xa8[\x84\x0f>:\xc2\xfe\x0e=7\xe5\xdc\xe9\xab\x0e\xfd\xd7`\xbe\x7f*\x10\x04A\xd2\xc9\xbc\xea\xb0\xa1\x930|09\xc2\x97M\xfc\x1a\xa7\xa4\xd0\x96\x03\xb9 \xe5\x9a\x0e\v6o\xc3I\v\x8d\xf2\x1e\xc9w\xac]\xe6\xe9\'2\x01\xe0\xf3\xf7\t\xf72\x1b\xe6\x16\x01\xc4}\x18\xbe\xbd\xa8\xd2\x00\xaf\xd6\x05k\xa6\xf8\x80\xe6\x7f\xc1\x95$\t\x1f\xa1\x83\xce\x11\x88\x99y\x9b\xe5\xfe(\xa6\xd5Z`\x9b\xdc\xa2 \xc7\xcd.C\xd0\xe0\x88\xf3\xba\x8b\xd2V\xdbw\x8dc', 0x100000a3dd) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x3, 0x16, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.539499378s ago: executing program 3 (id=1541): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r0, 0x80085610, r0) 5.340482658s ago: executing program 3 (id=1542): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) futex$auto(0x0, 0x9, 0x9, 0x0, 0x0, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/012/001\x00', 0x125142, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40081, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x5, 0x0, &(0x7f0000000300)}) write$auto_split_huge_pages_fops_huge_memory(r0, &(0x7f0000000140)="dbd3f6ff50cfaac39c69d9e19b0b0f50f6601028f904333b04dfbd77eb109043c5e6d80dbe27d86566853922166a8e3bdb22c81ba8c0b63d803bcd8ce3c4c84441ae98c25cb01c7c4b8b96e97184e57d56af8fa66a4320034e11162fa1e512afec92e00cf464995118", 0x69) unshare$auto(0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x200000, 0x0) fremovexattr$auto(0xffffffffffffffff, 0x0) setsockopt$auto(0xffffffffffffffff, 0x7c, 0x22, 0x0, 0x8002) unshare$auto(0x3) msgrcv$auto(0xff, &(0x7f00000000c0)={0x6, 0xd}, 0x2400000000, 0x6, 0x6bc2cc7d) r3 = setfsgid$auto(0x0) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x3ff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) 5.261726996s ago: executing program 1 (id=1543): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x142, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x179941, 0x90) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi21\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x400000000011, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x100000000, 0x400000000007, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty6\x00', 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r1, 0x80085610, r1) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) ioctl$auto_I2C_RDWR(r2, 0x707, &(0x7f0000000180)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x404) madvise$auto(0x110c230000, 0x6, 0x9) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000001c0)=""/130, 0x82) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='veth1\x00', 0xb4c, 0x4) unshare$auto(0x40000080) write$auto_rfkill_fops_core(0xffffffffffffffff, 0x0, 0x0) sysfs$auto(0x2, 0xe, 0x0) 5.195141358s ago: executing program 2 (id=1544): mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) mincore$auto(0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6b, 0x4, 0xfffffffffffffffe, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="e5b725bd70005d8c1f128203e3afad0be6d44fa51637000c0001800800030007000000bfb63174d0267b764ede9ea4f9840472d68ef72b441b0f565587c14294106048ad3222c830901b74f0978e07f797b12ccbe83018389d7d15032c98bfa9b2030a9cf1e665178cbd2fbb0bac7bb60e1ff99c6d8ae59338b0c76b4da66b35557634532a86cfc6976b3f5a0a2c3182f2ea543efc8aeca2cfadc55d9be99ab875b36366f57b92caf1ee970b578710a16c41814e125c30db44ac09b154dae7b74aac2b3eb13bb314fa6ed9856276b1420e990ddacb297e00d2ce933ec8401cf0415684eb7df39702531cbc7a5fcfdc8de2"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x11, 0x3, 0x10) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x117080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyy7/power/runtime_suspended_time\x00', 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, 0x2}, 0x8) ptrace$auto(0x4, 0xffffffffffffffff, 0x8000000000000000, 0xfff) bind$auto(r0, 0x0, 0x6b) r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000280)='/dev/etherd/revalidate\x00', 0x541, 0x0) write$auto_aoe_fops_aoechr(r3, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0x4, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.062510096s ago: executing program 0 (id=1545): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve1\x00'}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto_split_huge_pages_fops_huge_memory(0xffffffffffffffff, &(0x7f0000001480)="dbd3f6ff50cfaac39c69d9e19b0b0f50f6601028f904333b04dfbd77eb109043c5e6d80dbe27d86566853922166a8e3bdb22c81bbdc0b63d803bcd8ce3c4c84441ae98c25cb01c7c4b8b96e97184e57d56af8fa66a4320034e11162fa1e512afec92e00cf4649951184fd77560f13c633ffcf32983a36af5b8a0103dd573bb85b2fd20bb8acb337d8cf01d18719be3c04af1ed0b21c27b76886f5da1d80e67f8a1eaf828f049d122bb01b9352be9716dd9869a523d6f89afc2d848485bc5177d31e968d0ce5c2442ce7435416ec8719533eaf1c21fda48ebc1558f97ecd4ee4d56121856a82952281f4283a79687d7d77169fe73616e0a62e3d2b02c401bdb507d03dc7f", 0x104) r1 = setfsgid$auto(0x0) unshare$auto(0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x200000, 0x0) socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) fremovexattr$auto(0xffffffffffffffff, 0x0) setxattr$auto(&(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x100000000, 0x3) setsockopt$auto(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x8002) unshare$auto(0x3) setrlimit$auto(0x204007, &(0x7f0000000080)={0x0, 0x2}) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) io_submit$auto(0x7fffffffffffffff, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x547c, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x7ffffffffffffffe, 0x0, 0x6, 0x0, 0xe}) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 3.856061516s ago: executing program 1 (id=1546): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x151, 0x20009, 0x0, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x3, 0x73) setsockopt$auto(r0, 0xff, 0x7, 0x0, 0x3) r1 = io_uring_setup$auto(0x6, 0x0) sendto$auto(r1, 0x0, 0xb, 0x85, &(0x7f0000000000)=@rc={0x1f, @any, 0xf}, 0x2001c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) madvise$auto(0x0, 0x2003f2, 0x14) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x2a, 0x42, 0x0, 0x8) rt_sigprocmask$auto(0x0, &(0x7f0000000040)={0xfffffffffffffe01}, 0x0, 0x8) write$auto(0x3, 0x0, 0xffd8) r2 = getpid() tgkill$auto_SIGCONT(r2, r2, 0x12) setrlimit$auto(0x5, &(0x7f0000000080)={0x2, 0x1ffc0}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setresuid$auto(0x2, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCD(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="d4000002", @ANYRES16=0x0, @ANYBLOB="000f2bbd7000ffdbdf2504000000aa50d75182a541a41d6854beed27368c05f9e65068c01c773a33aa554d01127e55f8861d082250b71ee2748aaf787cca70cc2cdf1155e9d54c2b030fe0cb506c25ad1d41f62831e2e2abbe3d81fd4bf67a0334c4bf7787aa4899a3d9d05c1796ba6d03358709adf33b6429f1cf27eeb597bdbaba9f30bfff21dab1247262864e2fb41fedca6a5e02a9276f5b2d34d051647055df1bf2685f471fc42fc5b302857dfbda6e4211d56718b05f569d44cdb571c2d72b087ccdb51996db58d2184d00"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x55) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) close_range$auto(0x2, 0xffffffffffffffff, 0x750) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x2, 0xc) socket(0xa, 0x3, 0x37) 2.9341099s ago: executing program 3 (id=1547): r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$auto(0x3, 0x400008, 0xfffffffffffffff7, 0x9b72, r0, 0x4) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_tracers\x00', 0x80, 0x0) preadv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000280)="6f79340c26df280a5bcf4f94eef76d766279873cea2f08c4e3c5871bc7fd24c8cc82", 0xa}, 0x4, 0xfffffffffffffffa, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0xdf9b) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x2c01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001400)=""/4113, 0x1011) socket(0x27, 0x3, 0xff) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4000085) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, 0x0, &(0x7f00000002c0)=0x8, 0x7ff, 0x3ff, 0xa, 0xa, 0xf9eb, 0x4, 0x3, 0x6, @raw=0xffff3a03, @raw=0x7fffffff}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x440200, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x240, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r6, 0x8004500b, 0x0) ioctl$auto_BLKGETSIZE(r5, 0x1260, 0x0) socket(0x2, 0x3, 0x100) ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) utimensat$auto(0x2, &(0x7f0000000100)='\x00', 0x0, 0x1000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto_KEY_REQKEY_DEFL_PROCESS_KEYRING(0x1, 0x2, 0x0, 0x0, 0x3) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 2.84896813s ago: executing program 2 (id=1548): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x202, 0x0) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd2\x00', 0x40000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = setfsgid$auto(0xee01) r2 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$auto_EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000040)=0x7a, 0x4) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x129082, 0x0) ioctl$auto(r3, 0x80c84d0a, r3) unshare$auto(0x1) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0xc) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000140)=@test={r0, 0x9, 0x80005763, 0x400002, 0xb5b, 0x403, 0x1000, 0xfffffff8, 0x8, 0xa, 0xe, 0x5, 0x9, 0x2, 0x10}, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) 2.80905943s ago: executing program 0 (id=1549): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0xffffffffffffffff, 0x0, 0x4000000002df, 0xef1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) get_mempolicy$auto(0x0, &(0x7f0000000380)=0x7, 0x1, 0x0, 0xc76) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x5], {0x9, 0xfffffff9, 0xfffffffd, 0x29b, 0x100, 0x4, 0x101, 0x4000006, 0x2000}, {0x2, 0x1, 0x52, 0x3, 0x1, 0x6, 0x104, 0x3ff, 0x100000000}}) r1 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto(0x27, 0x0, 0x5, 0x0, 0x1000000000000007) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1000, 0x0) unshare$auto(0x0) open(0x0, 0x12db40, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/mcfilter\x00', 0xee480, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x1, 0x5, 0x3, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2.183156772s ago: executing program 1 (id=1550): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x142, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x179941, 0x90) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi21\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x400000000011, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x100000000, 0x400000000007, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty6\x00', 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(r1, 0x80085610, r1) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) ioctl$auto_I2C_RDWR(r2, 0x707, &(0x7f0000000180)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x404) madvise$auto(0x110c230000, 0x6, 0x9) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000001c0)=""/130, 0x82) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='veth1\x00', 0xb4c, 0x4) unshare$auto(0x40000080) write$auto_rfkill_fops_core(0xffffffffffffffff, 0x0, 0x0) sysfs$auto(0x2, 0xe, 0x0) 138.185675ms ago: executing program 0 (id=1551): ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x20487, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0x85) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) unshare$auto(0x3d2c4d54) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='*)', 0x2) write$auto(r1, 0x0, 0xc65d) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x8002, 0x0, 0x0, 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x10000, 0x3, 0xe, 0x155becaf1, r1, 0x0) socket(0x27, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sr_mod/uevent\x00', 0x8001, 0x0) write$auto(r2, &(0x7f0000000040)=' ', 0x4) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x7fffffff, 0x0, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x7, 0x2fc, 0x0) listen$auto(0x3, 0x400000) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) chown$auto(0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vicodec.0/video4linux/video0/name\x00', 0x408080, 0x0) r3 = socket(0xa, 0x5, 0x0) recvmmsg$auto(r3, &(0x7f00000000c0)={{0x0, 0x5b84, 0x0, 0xfffffffeffffffff, 0x0, 0x3, 0x7}, 0x3}, 0x10, 0xffde, 0x0) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) 138.033661ms ago: executing program 3 (id=1552): bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x8, 0x9, 0x80000001, 0x8, 0x0, 0x4, 0x100, 0x7, 0x8, 0xe, 0x8000000000000001, 0x3, 0x6, 0x1}, 0x2) mmap$auto(0x5, 0x0, 0x3fe, 0xfb1, r0, 0xffffffff) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0xffffffffff7efc01, 0x0, 0x6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x7ffc) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x62d4) read$auto_kmsg_fops_printk(r2, &(0x7f0000000180)=""/88, 0x58) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) unshare$auto(0x20600) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mremap$auto(0x0, 0x5ac2, 0x4, 0x7, 0x100800000) setfsgid$auto(0xee01) ioctl$auto_XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000100)={0x4, 0x6, 0xffffffff7fffffff, 0x8, 0x7}) r3 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xff, 0x80000008e, 0x800000000000007, 0x9b72, r3, 0x80000000) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x80811501, 0xfffffffffffff4e0) ioctl$auto_VHOST_GET_FEATURES2(0xffffffffffffffff, 0x8008af00, 0x0) 103.519326ms ago: executing program 2 (id=1553): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000001100), 0x400, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22001, 0x0) write$auto(r0, 0x0, 0xe) socket(0x28, 0x801, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r2, r2, 0x8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x8040) write$auto(r3, &(0x7f0000000280)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f\xe2\xe0\xe2}yX\xc5\x9c\xb8\x91\b\xfc=\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\vw\r\xcf\x1e\x9f\xb3\xf6zR\xc7;v\xea\xd3\x83\xa9l8@!\xad\x94\xf9\xfe\f\xc2\xc6\x13\x16\xd0\xfc\x85\xd7 \xd4\xff\xbb\x8b\xa2\xf2p\xad\x12\xcf$VG\x06\xb3\x84\xbe\xd5S\x92z\xa9', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x3, 0xffffffff, 0x1, 0x4005, 0x6}, "654c18440000738236000000fdc4fc151014d9ac0200000000001000"}) readv$auto(r5, &(0x7f0000000180)={0x0, 0x4}, 0x4) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80003, 0x0) connect$auto(0x3, 0x0, 0x51) shutdown$auto(0x200000003, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x0, 0x0) 0s ago: executing program 1 (id=1554): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r1, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D2\x00', 0x458a43, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) write$auto(r1, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20040014) unshare$auto(0x40000080) mmap$auto(0x8, 0x4000080200003, 0xfffffffffffffeff, 0xfffffffffffffffb, r2, 0x300000000001) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r3, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x48a241, 0x0) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000080)='/dev/ram7\x00', &(0x7f0000000040)=0xc32) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000440)=""/4095, 0xfff) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) chown$auto(0x0, 0x0, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x40001, 0x0) write$auto(r4, 0x0, 0x7f) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) kernel console output (not intermixed with test programs): d promiscuous mode [ 89.985270][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.010170][ T53] Bluetooth: hci0: command tx timeout [ 90.015413][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.015574][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.015701][ T5617] bridge_slave_1: entered allmulticast mode [ 90.017678][ T5617] bridge_slave_1: entered promiscuous mode [ 90.058569][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.060471][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.060490][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.060524][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.092602][ T53] Bluetooth: hci1: command tx timeout [ 90.117925][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.118184][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.118537][ T5629] bridge_slave_0: entered allmulticast mode [ 90.125151][ T5629] bridge_slave_0: entered promiscuous mode [ 90.137596][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.137879][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.138235][ T5629] bridge_slave_1: entered allmulticast mode [ 90.149410][ T5629] bridge_slave_1: entered promiscuous mode [ 90.169970][ T53] Bluetooth: hci2: command tx timeout [ 90.195524][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.195542][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.195575][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.250016][ T53] Bluetooth: hci3: command tx timeout [ 90.279441][ T5627] team0: Port device team_slave_0 added [ 90.293726][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.315775][ T5627] team0: Port device team_slave_1 added [ 90.318083][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.322284][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.359685][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.422479][ T5623] hsr_slave_0: entered promiscuous mode [ 90.423405][ T5623] hsr_slave_1: entered promiscuous mode [ 90.424956][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.424973][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.425006][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.466347][ T5617] team0: Port device team_slave_0 added [ 90.470882][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.470928][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.471018][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.479383][ T5617] team0: Port device team_slave_1 added [ 90.544904][ T5629] team0: Port device team_slave_0 added [ 90.576300][ T5629] team0: Port device team_slave_1 added [ 90.624506][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.624523][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.624557][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.625848][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.625865][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.625897][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.722077][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.722097][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.722136][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.744732][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.744801][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.744875][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.843752][ T5627] hsr_slave_0: entered promiscuous mode [ 90.844440][ T5627] hsr_slave_1: entered promiscuous mode [ 90.845061][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 90.845136][ T5627] Cannot create hsr debugfs directory [ 90.943777][ T5617] hsr_slave_0: entered promiscuous mode [ 90.944878][ T5617] hsr_slave_1: entered promiscuous mode [ 90.945441][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 90.945471][ T5617] Cannot create hsr debugfs directory [ 91.007206][ T5629] hsr_slave_0: entered promiscuous mode [ 91.007944][ T5629] hsr_slave_1: entered promiscuous mode [ 91.008439][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 91.008465][ T5629] Cannot create hsr debugfs directory [ 91.338775][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.351611][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.383567][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.386615][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.388001][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.403626][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.424345][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.427795][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.516981][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.525042][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.527072][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.536660][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.556942][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.570609][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.571510][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.574536][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.678685][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.689070][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.700290][ T49] cfg80211: failed to load regulatory.db [ 91.702163][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.709149][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.731585][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.735579][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.737602][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.745063][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.869527][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.874975][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.879458][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.903203][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.907343][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.908200][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.925483][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.942636][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.946290][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.004946][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.037700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.037811][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.077763][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.088317][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.088389][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.090050][ T53] Bluetooth: hci0: command tx timeout [ 92.151843][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.170019][ T53] Bluetooth: hci1: command tx timeout [ 92.179303][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.202667][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.202758][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.235579][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.235652][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.254214][ T53] Bluetooth: hci2: command tx timeout [ 92.267791][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.305876][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.305949][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.331024][ T53] Bluetooth: hci3: command tx timeout [ 92.331202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.331320][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.378965][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.435476][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.472626][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.472752][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.536571][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.536682][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.353122][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.425130][ T5627] veth0_vlan: entered promiscuous mode [ 93.453119][ T5627] veth1_vlan: entered promiscuous mode [ 93.480930][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.560239][ T5627] veth0_macvtap: entered promiscuous mode [ 93.585740][ T5627] veth1_macvtap: entered promiscuous mode [ 93.663886][ T5623] veth0_vlan: entered promiscuous mode [ 93.678109][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.697674][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.717134][ T5623] veth1_vlan: entered promiscuous mode [ 93.773094][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.778751][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.811389][ T770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.811528][ T770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.811575][ T770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.851176][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.934439][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.934488][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.937029][ T5623] veth0_macvtap: entered promiscuous mode [ 93.996887][ T5623] veth1_macvtap: entered promiscuous mode [ 94.027453][ T770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.027475][ T770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.068521][ T5617] veth0_vlan: entered promiscuous mode [ 94.107097][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.123862][ T5629] veth0_vlan: entered promiscuous mode [ 94.129120][ T5617] veth1_vlan: entered promiscuous mode [ 94.146839][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.180964][ T53] Bluetooth: hci0: command tx timeout [ 94.187962][ T5629] veth1_vlan: entered promiscuous mode [ 94.194608][ T5627] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.215706][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.218818][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.219766][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.219910][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.257934][ T53] Bluetooth: hci1: command tx timeout [ 94.338017][ T5617] veth0_macvtap: entered promiscuous mode [ 94.340157][ T53] Bluetooth: hci2: command tx timeout [ 94.368955][ T5617] veth1_macvtap: entered promiscuous mode [ 94.410334][ T53] Bluetooth: hci3: command tx timeout [ 94.430423][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.430445][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.439235][ T5629] veth0_macvtap: entered promiscuous mode [ 94.472271][ T5629] veth1_macvtap: entered promiscuous mode [ 94.516619][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.524359][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.524419][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.572555][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.576275][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.645606][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.920095][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920186][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920244][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920288][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920331][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920376][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920422][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.920466][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.383645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.383671][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.479703][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.479730][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.913825][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.913852][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.967828][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.967861][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.260898][ T53] Bluetooth: hci0: command tx timeout [ 96.332822][ T53] Bluetooth: hci1: command tx timeout [ 96.419757][ T53] Bluetooth: hci2: command tx timeout [ 96.491066][ T53] Bluetooth: hci3: command tx timeout [ 99.378042][ T5848] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 100.935621][ T5831] Process accounting resumed [ 101.798908][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.959125][ T5884] ima: Unable to open file: /suritRy/integrity?iqa/policy (-2) [ 103.339219][ T5900] ima: policy update failed [ 103.356354][ T31] audit: type=1802 audit(1791262815.806:2): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.17" res=0 errno=0 [ 105.847057][ T5949] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[5949] [ 105.901865][ T5930] Zero length message leads to an empty skb [ 107.231162][ T5965] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 107.344678][ T5970] bonding:  is being created... [ 109.884397][ T31] audit: type=1807 audit(1791262822.356:3): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 109.905486][ T31] audit: type=1802 audit(1791262822.376:4): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.32" res=0 errno=0 [ 109.987687][ T6026] ima: policy update failed [ 109.988600][ T31] audit: type=1802 audit(1791262822.456:5): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.32" res=0 errno=0 [ 110.978160][ T5280] 8021q: adding VLAN 0 to HW filter on device  [ 111.894154][ T6051] random: crng reseeded on system resumption [ 115.173426][ T6117] MTRR 1 not used [ 117.548453][ T31] audit: type=1804 audit(1791262830.016:6): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.0.46" name="ima_policy_written" res=0 errno=-17 [ 117.548516][ T31] audit: type=1807 audit(1791262830.016:7): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 117.548563][ T31] audit: type=1802 audit(1791262830.016:8): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.46" res=0 errno=0 [ 117.636318][ T6159] ima: policy update failed [ 117.638028][ T31] audit: type=1802 audit(1791262830.106:9): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.46" res=0 errno=0 [ 119.091379][ T6171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.100142][ T6171] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.145672][ T6171] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.165279][ T6171] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.165387][ T6171] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.208638][ T6171] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.228505][ T6171] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.228602][ T6171] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.254345][ T6171] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.257168][ T6171] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.257246][ T6171] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.290381][ T6171] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.388816][ T6181] zram: Added device: zram1 [ 121.130493][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.209724][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.289661][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.289746][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.209762][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.289741][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.369766][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.369870][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.078990][ T6255] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 125.289995][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.369654][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.451465][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.451509][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.195991][ T6276] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4644.0.2172020179), cmd(3) [ 127.777567][ T6339] vivid-007: ================= START STATUS ================= [ 127.777609][ T6339] vivid-007: Generate PTS: true [ 127.777641][ T6339] vivid-007: Generate SCR: true [ 127.777663][ T6339] tpg source WxH: 320x240 (Y'CbCr) [ 127.777675][ T6339] tpg field: 1 [ 127.777681][ T6339] tpg crop: (0,0)/320x240 [ 127.777694][ T6339] tpg compose: (0,0)/320x240 [ 127.777706][ T6339] tpg colorspace: 8 [ 127.777713][ T6339] tpg transfer function: 0/0 [ 127.777722][ T6339] tpg Y'CbCr encoding: 0/0 [ 127.777731][ T6339] tpg quantization: 0/0 [ 127.777740][ T6339] tpg RGB range: 0/2 [ 127.777749][ T6339] vivid-007: ================== END STATUS ================== [ 128.004763][ T6323] process 'syz.0.64' launched ':,' with NULL argv: empty string added [ 131.380513][ T6361] Process accounting paused [ 132.046157][ T6417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.648379][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.648453][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.797855][ T6427] FAULT_INJECTION: forcing a failure. [ 133.797855][ T6427] name fail_futex, interval 1, probability 0, space 0, times 1 [ 133.797927][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 133.797963][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.797983][ T6427] Call Trace: [ 133.797993][ T6427] [ 133.798012][ T6427] dump_stack_lvl+0x100/0x190 [ 133.798067][ T6427] should_fail_ex.cold+0x5/0xa [ 133.798103][ T6427] get_futex_key+0x1d0/0x14f0 [ 133.798133][ T6427] ? __pfx_get_futex_key+0x10/0x10 [ 133.798159][ T6427] ? find_held_lock+0x2b/0x80 [ 133.798189][ T6427] ? futex_wake+0x4ea/0x5e0 [ 133.798234][ T6427] futex_wake+0xf4/0x5e0 [ 133.798279][ T6427] ? futex_wait+0x11e/0x370 [ 133.798322][ T6427] ? __pfx_futex_wake+0x10/0x10 [ 133.798365][ T6427] ? rcu_read_lock_any_held+0x6a/0x90 [ 133.798411][ T6427] do_futex+0x2b2/0x440 [ 133.798444][ T6427] ? __pfx_do_futex+0x10/0x10 [ 133.798472][ T6427] ? __fget_files+0x215/0x3d0 [ 133.798517][ T6427] __x64_sys_futex+0x34f/0x4d0 [ 133.798554][ T6427] ? __pfx___x64_sys_futex+0x10/0x10 [ 133.798601][ T6427] do_syscall_64+0x121/0x770 [ 133.798640][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.798670][ T6427] RIP: 0033:0x7fb84619e199 [ 133.798703][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.798729][ T6427] RSP: 002b:00007fb8471200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.798755][ T6427] RAX: ffffffffffffffda RBX: 00007fb846425fa8 RCX: 00007fb84619e199 [ 133.798774][ T6427] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb846425fac [ 133.798791][ T6427] RBP: 00007fb846425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 133.798808][ T6427] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 133.798826][ T6427] R13: 00007fb846426038 R14: 00007ffca4c93430 R15: 00007ffca4c93518 [ 133.798862][ T6427] [ 135.367780][ T6448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.368168][ T6448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.368411][ T6448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.368882][ T6448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.410807][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.79'. [ 137.341123][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.420399][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.420441][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.420472][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.346080][ T6493] Process accounting resumed [ 144.236895][ T6594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 146.169820][ T6649] FAULT_INJECTION: forcing a failure. [ 146.169820][ T6649] name failslab, interval 1, probability 0, space 0, times 1 [ 146.169863][ T6649] CPU: 1 UID: 0 PID: 6649 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT(full) [ 146.169896][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.169914][ T6649] Call Trace: [ 146.169923][ T6649] [ 146.169935][ T6649] dump_stack_lvl+0x100/0x190 [ 146.169980][ T6649] should_fail_ex.cold+0x5/0xa [ 146.170019][ T6649] should_failslab+0xc2/0x120 [ 146.170064][ T6649] kmem_cache_alloc_noprof+0x92/0x6a0 [ 146.170105][ T6649] ? alloc_empty_file+0x5b/0x1c0 [ 146.170155][ T6649] alloc_empty_file+0x5b/0x1c0 [ 146.170201][ T6649] path_openat+0xdb/0x2440 [ 146.170247][ T6649] ? __pfx_path_openat+0x10/0x10 [ 146.170297][ T6649] do_file_open+0x20e/0x430 [ 146.170340][ T6649] ? __pfx_do_file_open+0x10/0x10 [ 146.170405][ T6649] ? _raw_spin_unlock+0x28/0x50 [ 146.170436][ T6649] ? alloc_fd+0x471/0x7a0 [ 146.170484][ T6649] do_sys_openat2+0x10f/0x1e0 [ 146.170531][ T6649] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.170580][ T6649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.170629][ T6649] __x64_sys_openat+0x12d/0x210 [ 146.170658][ T6649] ? __pfx___x64_sys_openat+0x10/0x10 [ 146.170700][ T6649] do_syscall_64+0x121/0x770 [ 146.170743][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.170782][ T6649] RIP: 0033:0x7f763499e199 [ 146.170805][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.170834][ T6649] RSP: 002b:00007f7635860028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.170862][ T6649] RAX: ffffffffffffffda RBX: 00007f7634c26450 RCX: 00007f763499e199 [ 146.170881][ T6649] RDX: 0000000000048000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 146.170900][ T6649] RBP: 00007f7634a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 146.170917][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.170934][ T6649] R13: 00007f7634c264e8 R14: 00007f7634c26450 R15: 00007ffe0b455998 [ 146.170971][ T6649] [ 148.131520][ T6657] vivid-007: ================= START STATUS ================= [ 148.131569][ T6657] vivid-007: Generate PTS: true [ 148.131600][ T6657] vivid-007: Generate SCR: true [ 148.131630][ T6657] tpg source WxH: 320x240 (Y'CbCr) [ 148.131648][ T6657] tpg field: 1 [ 148.131659][ T6657] tpg crop: (0,0)/320x240 [ 148.131678][ T6657] tpg compose: (0,0)/320x240 [ 148.131697][ T6657] tpg colorspace: 8 [ 148.131708][ T6657] tpg transfer function: 0/0 [ 148.131723][ T6657] tpg Y'CbCr encoding: 0/0 [ 148.131736][ T6657] tpg quantization: 0/0 [ 148.131750][ T6657] tpg RGB range: 0/2 [ 148.131764][ T6657] vivid-007: ================== END STATUS ================== [ 150.878392][ T6703] random: crng reseeded on system resumption [ 152.200420][ T6722] FAULT_INJECTION: forcing a failure. [ 152.200420][ T6722] name failslab, interval 1, probability 0, space 0, times 0 [ 152.200464][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) [ 152.200499][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 152.200516][ T6722] Call Trace: [ 152.200526][ T6722] [ 152.200538][ T6722] dump_stack_lvl+0x100/0x190 [ 152.200585][ T6722] should_fail_ex.cold+0x5/0xa [ 152.200626][ T6722] should_failslab+0xc2/0x120 [ 152.200682][ T6722] kmem_cache_alloc_noprof+0x92/0x6a0 [ 152.200724][ T6722] ? d_instantiate+0x8a/0xb0 [ 152.200771][ T6722] ? alloc_empty_file+0x5b/0x1c0 [ 152.200826][ T6722] alloc_empty_file+0x5b/0x1c0 [ 152.200875][ T6722] alloc_file_pseudo+0x183/0x290 [ 152.200926][ T6722] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 152.200977][ T6722] ? alloc_fd+0x471/0x7a0 [ 152.201020][ T6722] ? do_raw_spin_unlock+0x145/0x1e0 [ 152.201058][ T6722] __anon_inode_getfile+0xe8/0x280 [ 152.201096][ T6722] anon_inode_getfile_fmode+0x37/0xa0 [ 152.201131][ T6722] __do_sys_fanotify_init+0xa0d/0xe30 [ 152.201179][ T6722] do_syscall_64+0x121/0x770 [ 152.201232][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.201262][ T6722] RIP: 0033:0x7f763499e199 [ 152.201283][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.201305][ T6722] RSP: 002b:00007f76358e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 152.201329][ T6722] RAX: ffffffffffffffda RBX: 00007f7634c26090 RCX: 00007f763499e199 [ 152.201345][ T6722] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 152.201361][ T6722] RBP: 00007f7634a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 152.201379][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.201396][ T6722] R13: 00007f7634c26128 R14: 00007f7634c26090 R15: 00007ffe0b455998 [ 152.201433][ T6722] [ 152.650414][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 154.797119][ T6756] random: crng reseeded on system resumption [ 158.996038][ T6844] FAULT_INJECTION: forcing a failure. [ 158.996038][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 158.996078][ T6844] CPU: 0 UID: 0 PID: 6844 Comm: syz.2.129 Not tainted syzkaller #0 PREEMPT(full) [ 158.996109][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.996125][ T6844] Call Trace: [ 158.996134][ T6844] [ 158.996143][ T6844] dump_stack_lvl+0x100/0x190 [ 158.996187][ T6844] should_fail_ex.cold+0x5/0xa [ 158.996224][ T6844] should_failslab+0xc2/0x120 [ 158.996271][ T6844] kmem_cache_alloc_noprof+0x92/0x6a0 [ 158.996309][ T6844] ? d_instantiate+0x8a/0xb0 [ 158.996353][ T6844] ? alloc_empty_file+0x5b/0x1c0 [ 158.996406][ T6844] alloc_empty_file+0x5b/0x1c0 [ 158.996452][ T6844] alloc_file_pseudo+0x183/0x290 [ 158.996501][ T6844] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 158.996545][ T6844] ? alloc_fd+0x471/0x7a0 [ 158.996585][ T6844] ? do_raw_spin_unlock+0x145/0x1e0 [ 158.996620][ T6844] __anon_inode_getfile+0xe8/0x280 [ 158.996654][ T6844] anon_inode_getfile_fmode+0x37/0xa0 [ 158.996686][ T6844] __do_sys_fanotify_init+0xa0d/0xe30 [ 158.996729][ T6844] do_syscall_64+0x121/0x770 [ 158.996768][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.996797][ T6844] RIP: 0033:0x7f10af39e199 [ 158.996820][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.996846][ T6844] RSP: 002b:00007f10b029a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 158.996873][ T6844] RAX: ffffffffffffffda RBX: 00007f10af626450 RCX: 00007f10af39e199 [ 158.996892][ T6844] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 158.996908][ T6844] RBP: 00007f10af4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 158.996925][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.996942][ T6844] R13: 00007f10af6264e8 R14: 00007f10af626450 R15: 00007fff6dee8a38 [ 158.996987][ T6844] [ 160.312572][ T6840] Process accounting resumed [ 160.538243][ T6861] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 160.919669][ T6851] random: crng reseeded on system resumption [ 168.942905][ T6992] Process accounting paused [ 169.115655][ T7011] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 172.001009][ T7046] Process accounting resumed [ 176.107848][ T7104] Process accounting resumed [ 176.436312][ T7134] FAULT_INJECTION: forcing a failure. [ 176.436312][ T7134] name fail_futex, interval 1, probability 0, space 0, times 0 [ 176.436365][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT(full) [ 176.436404][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.436420][ T7134] Call Trace: [ 176.436430][ T7134] [ 176.436440][ T7134] dump_stack_lvl+0x100/0x190 [ 176.436484][ T7134] should_fail_ex.cold+0x5/0xa [ 176.436520][ T7134] get_futex_key+0x1d0/0x14f0 [ 176.436553][ T7134] ? __pfx_get_futex_key+0x10/0x10 [ 176.436579][ T7134] ? __pfx_futex_hash+0x10/0x10 [ 176.436616][ T7134] futex_wake+0xf4/0x5e0 [ 176.436648][ T7134] ? futex_wait+0x11e/0x370 [ 176.436692][ T7134] ? __pfx_futex_wake+0x10/0x10 [ 176.436733][ T7134] ? rcu_read_lock_any_held+0x6a/0x90 [ 176.436778][ T7134] do_futex+0x2b2/0x440 [ 176.436810][ T7134] ? __pfx_do_futex+0x10/0x10 [ 176.436838][ T7134] ? __fget_files+0x215/0x3d0 [ 176.436883][ T7134] __x64_sys_futex+0x34f/0x4d0 [ 176.436918][ T7134] ? __pfx___x64_sys_futex+0x10/0x10 [ 176.436963][ T7134] do_syscall_64+0x121/0x770 [ 176.437001][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.437031][ T7134] RIP: 0033:0x7f10af39e199 [ 176.437054][ T7134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.437081][ T7134] RSP: 002b:00007f10b033f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 176.437108][ T7134] RAX: ffffffffffffffda RBX: 00007f10af625fa8 RCX: 00007f10af39e199 [ 176.437127][ T7134] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10af625fac [ 176.437144][ T7134] RBP: 00007f10af625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 176.437162][ T7134] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 176.437179][ T7134] R13: 00007f10af626038 R14: 00007fff6dee8950 R15: 00007fff6dee8a38 [ 176.437216][ T7134] [ 176.721038][ T7141] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 179.388346][ T7183] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(256.0.4294967293), cmd(3) [ 182.231032][ T7235] random: crng reseeded on system resumption [ 182.793095][ T7225] Process accounting resumed [ 184.727559][ T7278] FAULT_INJECTION: forcing a failure. [ 184.727559][ T7278] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.727594][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.1.181 Not tainted syzkaller #0 PREEMPT(full) [ 184.727618][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.727630][ T7278] Call Trace: [ 184.727636][ T7278] [ 184.727644][ T7278] dump_stack_lvl+0x100/0x190 [ 184.727677][ T7278] should_fail_ex.cold+0x5/0xa [ 184.727704][ T7278] _copy_from_user+0x2e/0xd0 [ 184.727736][ T7278] snd_seq_oss_write+0x3d5/0x8b0 [ 184.727769][ T7278] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 184.727804][ T7278] ? bpf_lsm_file_permission+0x9/0x10 [ 184.727841][ T7278] ? __pfx_odev_write+0x10/0x10 [ 184.727861][ T7278] odev_write+0x51/0xa0 [ 184.727883][ T7278] vfs_writev+0x5ed/0xdd0 [ 184.727913][ T7278] ? __pfx_vfs_writev+0x10/0x10 [ 184.727941][ T7278] ? lock_acquire+0x1d1/0x380 [ 184.727972][ T7278] ? __fget_files+0x34/0x3d0 [ 184.728008][ T7278] ? __fget_files+0x21f/0x3d0 [ 184.728041][ T7278] ? do_writev+0x13e/0x340 [ 184.728062][ T7278] do_writev+0x13e/0x340 [ 184.728088][ T7278] ? __pfx_do_writev+0x10/0x10 [ 184.728118][ T7278] do_syscall_64+0x121/0x770 [ 184.728148][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.728170][ T7278] RIP: 0033:0x7fa24c39e199 [ 184.728186][ T7278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.728206][ T7278] RSP: 002b:00007fa24d231028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 184.728225][ T7278] RAX: ffffffffffffffda RBX: 00007fa24c626450 RCX: 00007fa24c39e199 [ 184.728239][ T7278] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 184.728252][ T7278] RBP: 00007fa24c4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 184.728264][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.728276][ T7278] R13: 00007fa24c6264e8 R14: 00007fa24c626450 R15: 00007ffd92f05e58 [ 184.728302][ T7278] [ 186.784397][ T7307] binder: 7297:7307 ioctl c00c620f 200000000c40 returned -22 [ 187.219167][ T7303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.219914][ T7303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.220035][ T7303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.220145][ T7303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.971093][ T7346] nfsd: Unknown parameter 'k8D' [ 188.934335][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.262177][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.262219][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.262301][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 193.364170][ T7430] binder: 7412:7430 ioctl c00c620f 200000000c40 returned -22 [ 193.793634][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.793685][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.510868][ T7509] nfsd: Unknown parameter 'k8D' [ 198.692680][ T7512] binder: 7491:7512 ioctl c00c620f 200000000c40 returned -22 [ 199.287087][ T7519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 199.288075][ T7519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.288238][ T7519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.288861][ T7519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.365780][ T7503] Process accounting resumed [ 201.041017][ T7557] FAULT_INJECTION: forcing a failure. [ 201.041017][ T7557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.041059][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.3.217 Not tainted syzkaller #0 PREEMPT(full) [ 201.041091][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.041107][ T7557] Call Trace: [ 201.041117][ T7557] [ 201.041128][ T7557] dump_stack_lvl+0x100/0x190 [ 201.041173][ T7557] should_fail_ex.cold+0x5/0xa [ 201.041214][ T7557] _copy_from_user+0x2e/0xd0 [ 201.041257][ T7557] snd_seq_oss_write+0x3d5/0x8b0 [ 201.041302][ T7557] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 201.041351][ T7557] ? bpf_lsm_file_permission+0x9/0x10 [ 201.041398][ T7557] ? __pfx_odev_write+0x10/0x10 [ 201.041425][ T7557] odev_write+0x51/0xa0 [ 201.041455][ T7557] vfs_writev+0x5ed/0xdd0 [ 201.041497][ T7557] ? __pfx_vfs_writev+0x10/0x10 [ 201.041536][ T7557] ? lock_acquire+0x1d1/0x380 [ 201.041578][ T7557] ? __fget_files+0x34/0x3d0 [ 201.041627][ T7557] ? __fget_files+0x21f/0x3d0 [ 201.041677][ T7557] ? do_writev+0x13e/0x340 [ 201.041707][ T7557] do_writev+0x13e/0x340 [ 201.041739][ T7557] ? __pfx_do_writev+0x10/0x10 [ 201.041781][ T7557] do_syscall_64+0x121/0x770 [ 201.041821][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.041851][ T7557] RIP: 0033:0x7f763499e199 [ 201.041874][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.041899][ T7557] RSP: 002b:00007f7635860028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 201.041927][ T7557] RAX: ffffffffffffffda RBX: 00007f7634c26450 RCX: 00007f763499e199 [ 201.041946][ T7557] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 201.041964][ T7557] RBP: 00007f7634a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 201.041981][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.041998][ T7557] R13: 00007f7634c264e8 R14: 00007f7634c26450 R15: 00007ffe0b455998 [ 201.042036][ T7557] [ 201.357041][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.357082][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.357112][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.357178][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.127125][ T7546] Process accounting paused [ 203.874452][ T7616] binder: 7594:7616 ioctl c00c620f 200000000c40 returned -22 [ 207.883846][ T7633] Process accounting paused [ 209.482496][ T31] audit: type=1804 audit(8287.145:10): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.1.238" name="ima_policy_written" res=0 errno=-17 [ 209.482565][ T31] audit: type=1807 audit(8287.145:11): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 209.482615][ T31] audit: type=1802 audit(8287.145:12): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.238" res=0 errno=0 [ 209.566016][ T7699] ima: policy update failed [ 209.566356][ T31] audit: type=1802 audit(8287.225:13): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.238" res=0 errno=0 [ 210.611592][ T7704] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 210.611840][ T7704] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.612065][ T7704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.612304][ T7704] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 212.584716][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.664415][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.664453][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.664522][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.118242][ T7740] Process accounting paused [ 215.398350][ T7803] can: request_module (can-proto-0) failed. [ 215.541759][ T7808] syz.3.252 uses obsolete (PF_INET,SOCK_PACKET) [ 218.904310][ T7872] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.267'. [ 220.596611][ T7887] MTRR 1 not used [ 230.617158][ T8051] Process accounting paused [ 233.599498][ T8105] Process accounting resumed [ 238.943009][ T8191] Process accounting resumed [ 239.860147][ T8242] binder: 8234:8242 ioctl c00c620f 200000000c40 returned -22 [ 241.759431][ T8259] Process accounting resumed [ 245.648779][ T8317] Process accounting resumed [ 249.741175][ T8395] Process accounting resumed [ 254.951548][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.951609][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.865104][ T8506] Process accounting resumed [ 262.072673][ T8608] Process accounting resumed [ 262.486819][ T8628] binder: 8612:8628 ioctl c00c620f 200000000c40 returned -22 [ 266.658329][ T8693] binder: 8680:8693 ioctl c00c620f 200000000c40 returned -22 [ 269.965597][ T8737] Process accounting resumed [ 271.707301][ T8762] Process accounting paused [ 277.031450][ T8862] hub 1-0:1.0: USB hub found [ 277.035937][ T8862] hub 1-0:1.0: 1 port detected [ 278.917534][ T8870] Process accounting resumed [ 280.565070][ T8904] Process accounting paused [ 280.717436][ T8919] hub 1-0:1.0: USB hub found [ 280.720318][ T8919] hub 1-0:1.0: 1 port detected [ 282.406435][ T8928] Process accounting resumed [ 285.963742][ T9021] hub 1-0:1.0: USB hub found [ 285.966910][ T9021] hub 1-0:1.0: 1 port detected [ 286.921598][ T9043] binder: 9031:9043 ioctl c00c620f 200000000c40 returned -22 [ 287.787898][ T9027] Process accounting paused [ 292.884195][ T9140] binder: 9131:9140 ioctl c00c620f 200000000c40 returned -22 [ 294.433515][ T9165] Process accounting resumed [ 296.977433][ T9219] binder: 9212:9219 ioctl c00c620f 200000000c40 returned -22 [ 297.316653][ T9226] could not allocate digest TFM handle [ 304.649997][ T9377] hub 1-0:1.0: USB hub found [ 304.650799][ T9377] hub 1-0:1.0: 1 port detected [ 309.050765][ T9424] Process accounting resumed [ 309.326758][ T9453] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 309.326809][ T9453] pci 0000:00:01.3: PCI INT A: no GSI [ 311.441855][ T9496] hub 1-0:1.0: USB hub found [ 311.442197][ T9496] hub 1-0:1.0: 1 port detected [ 312.502004][ T9515] Process accounting paused [ 314.784690][ T9550] binder: 9538:9550 ioctl c00c620f 200000000c40 returned -22 [ 316.114104][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.114164][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.369048][ T9545] Process accounting resumed [ 317.020373][ T9595] hub 1-0:1.0: USB hub found [ 317.020707][ T9595] hub 1-0:1.0: 1 port detected [ 317.712719][ T31] audit: type=1400 audit(8395.863:14): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=9608 comm="syz.3.480" [ 319.021489][ T9605] Process accounting resumed [ 319.192395][ T9617] Process accounting resumed [ 322.722998][ T9666] Process accounting resumed [ 322.970507][ T9704] hub 1-0:1.0: USB hub found [ 322.992916][ T9704] hub 1-0:1.0: 1 port detected [ 326.764266][ T9764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'. [ 328.621070][ T9808] hub 1-0:1.0: USB hub found [ 328.626683][ T9808] hub 1-0:1.0: 1 port detected [ 330.125417][ T9835] bridge0: port 3(syz_tun) entered blocking state [ 330.125646][ T9835] bridge0: port 3(syz_tun) entered disabled state [ 330.125790][ T9835] syz_tun: entered allmulticast mode [ 330.127624][ T9835] syz_tun: entered promiscuous mode [ 330.128426][ T9835] bridge0: port 3(syz_tun) entered blocking state [ 330.128533][ T9835] bridge0: port 3(syz_tun) entered forwarding state [ 330.471886][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 330.719879][ T9845] : entered promiscuous mode [ 337.470589][ T9966] sd 0:0:1:0: PR command failed: 1026 [ 337.470654][ T9966] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 337.470706][ T9966] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 337.983990][ T9979] binder: 9968:9979 ioctl c00c620f 200000000c40 returned -22 [ 342.738148][T10036] Process accounting resumed [ 342.820269][T10059] bridge0: port 3(syz_tun) entered blocking state [ 342.820435][T10059] bridge0: port 3(syz_tun) entered disabled state [ 342.820584][T10059] syz_tun: entered allmulticast mode [ 342.822483][T10059] syz_tun: entered promiscuous mode [ 342.823150][T10059] bridge0: port 3(syz_tun) entered blocking state [ 342.823269][T10059] bridge0: port 3(syz_tun) entered forwarding state [ 343.282785][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 343.475715][T10075] Line length is too long: Should be less than 4094 [ 343.674056][T10074] : entered promiscuous mode [ 344.963607][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 344.964219][T10096] netlink: 25 bytes leftover after parsing attributes in process `syz.0.537'. [ 345.172310][T10105] futex_wake_op: syz.1.538 tries to shift op by -2048; fix this program [ 345.172903][T10105] futex_wake_op: syz.1.538 tries to shift op by -2048; fix this program [ 345.193944][T10105] 0x000000000001-0x000000020000 : "" [ 345.242444][T10105] ftl_cs: FTL header corrupt! [ 345.408965][T10109] ubi1: attaching mtd0 [ 345.431253][T10109] ubi1: scanning is finished [ 345.431291][T10109] ubi1: empty MTD device detected [ 345.625894][T10109] ubi1: attached mtd0 (name "mtdram test device", size 0 MiB) [ 345.625923][T10109] ubi1: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 345.625945][T10109] ubi1: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 345.625967][T10109] ubi1: VID header offset: 64 (aligned 64), data offset: 128 [ 345.625988][T10109] ubi1: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 345.626010][T10109] ubi1: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 345.626031][T10109] ubi1: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3337164471 [ 345.626057][T10109] ubi1: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 345.627424][T10118] ubi1: background thread "ubi_bgt1d" started, PID 10118 [ 346.768353][T10097] Process accounting paused [ 346.819132][T10125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.540'. [ 349.144831][T10181] Line length is too long: Should be less than 4094 [ 350.144077][T10173] Process accounting paused [ 350.394126][T10196] snd_virmidi snd_virmidi.0: control 61678:131081:1:y:6 is already present [ 352.242224][T10220] usbip-vudc usbip-vudc.0: gadget not bound [ 352.429533][T10228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.553'. [ 353.047265][T10249] Process accounting paused [ 354.688859][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.565'. [ 354.849830][T10277] : entered promiscuous mode [ 356.670193][T10302] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 358.343364][T10326] bridge0: port 3(syz_tun) entered blocking state [ 358.343574][T10326] bridge0: port 3(syz_tun) entered disabled state [ 358.343748][T10326] syz_tun: entered allmulticast mode [ 358.348154][T10326] syz_tun: entered promiscuous mode [ 358.350986][T10326] bridge0: port 3(syz_tun) entered blocking state [ 358.351431][T10326] bridge0: port 3(syz_tun) entered forwarding state [ 358.402198][T10323] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 358.402242][T10323] vhci_hcd vhci_hcd.2: invalid port number 0 [ 358.452821][T10330] netlink: 504 bytes leftover after parsing attributes in process `syz.2.564'. [ 358.465855][T10330] netlink: 350 bytes leftover after parsing attributes in process `syz.2.564'. [ 358.550187][ T4935] Bluetooth: hci3: unexpected event 0x2c length: 1022 > 17 [ 359.156926][T10338] binder: 10327:10338 ioctl c00c620f 200000000c40 returned -22 [ 359.912655][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 359.931584][T10353] futex_wake_op: syz.2.567 tries to shift op by -2048; fix this program [ 359.932052][T10353] futex_wake_op: syz.2.567 tries to shift op by -2048; fix this program [ 359.935220][T10353] 0x000000000001-0x000000020000 : "" [ 359.969311][T10353] ftl_cs: FTL header corrupt! [ 360.153816][T10358] ubi: mtd0 is already attached to ubi1 [ 360.762630][T10367] binder: 10352:10367 ioctl c00c620f 200000000c40 returned -22 [ 362.500738][T10398] snd_virmidi snd_virmidi.0: control 61678:131081:1:y:6 is already present [ 364.475848][T10423] netlink: 504 bytes leftover after parsing attributes in process `syz.0.578'. [ 364.485770][T10423] netlink: 350 bytes leftover after parsing attributes in process `syz.0.578'. [ 364.572697][ T4935] Bluetooth: hci1: unexpected event 0x2c length: 1022 > 17 [ 364.590276][T10428] bridge0: port 3(syz_tun) entered blocking state [ 364.590435][T10428] bridge0: port 3(syz_tun) entered disabled state [ 364.590586][T10428] syz_tun: entered allmulticast mode [ 364.603814][T10428] syz_tun: entered promiscuous mode [ 364.615462][T10428] bridge0: port 3(syz_tun) entered blocking state [ 364.615720][T10428] bridge0: port 3(syz_tun) entered forwarding state [ 365.467788][T10444] futex_wake_op: syz.3.580 tries to shift op by -2048; fix this program [ 365.468268][T10444] futex_wake_op: syz.3.580 tries to shift op by -2048; fix this program [ 365.469421][T10444] 0x000000000001-0x000000020000 : "" [ 365.505461][T10444] ftl_cs: FTL header corrupt! [ 365.630176][T10446] ubi: mtd0 is already attached to ubi1 [ 366.775689][T10468] syz.2.587 (10468) used obsolete PPPIOCDETACH ioctl [ 367.866325][T10491] snd_virmidi snd_virmidi.0: control 61678:131081:1:y:6 is already present [ 369.868007][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 370.547740][T10529] netlink: 306 bytes leftover after parsing attributes in process `syz.0.591'. [ 372.760519][T10565] zswap: compressor 000 not available [ 372.916233][T10586] snd_virmidi snd_virmidi.0: control 61678:131081:1:y:6 is already present [ 373.015296][T10585] binder: 10560:10585 ioctl c00c620f 200000000c40 returned -22 [ 374.018284][T10598] netlink: 5324 bytes leftover after parsing attributes in process `syz.0.598'. [ 374.549775][T10577] Process accounting paused [ 376.309650][T10632] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 376.329211][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 376.330316][T10637] netlink: 25 bytes leftover after parsing attributes in process `syz.3.604'. [ 377.269089][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.269998][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.117667][T10646] Process accounting resumed [ 379.087448][T10678] binder: 10667:10678 ioctl c00c620f 200000000c40 returned -22 [ 379.110468][T10699] usbip-vudc usbip-vudc.0: gadget not bound [ 380.530152][T10706] Process accounting resumed [ 382.549610][T10750] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 384.043826][T10760] Process accounting resumed [ 384.988796][T10804] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345537295 (2345537295 ns) > initial count (2345476350 ns). Using initial count to start timer. [ 385.933472][T10791] Process accounting resumed [ 388.534288][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 390.830948][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'. [ 392.028503][T10888] Process accounting resumed [ 392.732528][T10924] binder: 10919:10924 ioctl c00c620f 200000000c40 returned -22 [ 394.969741][T10957] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 394.969785][T10957] vhci_hcd vhci_hcd.2: invalid port number 0 [ 395.136635][T10968] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.471876][T10993] binder: 10980:10993 ioctl c00c620f 200000000c40 returned -22 [ 400.067975][T11060] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.663'. [ 402.813882][T11107] zswap: compressor 000 not available [ 407.555679][T11211] ieee802154 phy0 wpan0: encryption failed: -22 [ 407.832910][T11218] db_root: cannot open: r [ 408.693181][T11199] Process accounting paused [ 409.514431][T11239] smpboot: CPU 1 is now offline [ 410.268622][T11256] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 410.324308][T11256] smpboot: CPU 1 is now offline [ 414.354836][T11302] Process accounting paused [ 414.679141][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 416.595191][T11319] Process accounting paused [ 417.276639][T11369] FAULT_INJECTION: forcing a failure. [ 417.276639][T11369] name failslab, interval 1, probability 0, space 0, times 0 [ 417.276682][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.0.698 Not tainted syzkaller #0 PREEMPT(full) [ 417.276706][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.276719][T11369] Call Trace: [ 417.276725][T11369] [ 417.276733][T11369] dump_stack_lvl+0x100/0x190 [ 417.276773][T11369] should_fail_ex.cold+0x5/0xa [ 417.276801][T11369] should_failslab+0xc2/0x120 [ 417.276835][T11369] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 417.276864][T11369] ? __d_alloc+0x35/0xa50 [ 417.276900][T11369] __d_alloc+0x35/0xa50 [ 417.276929][T11369] ? bpf_lsm_inode_permission+0x9/0x10 [ 417.276961][T11369] d_alloc+0x4a/0x1e0 [ 417.276993][T11369] vfs_tmpfile+0x317/0xbb0 [ 417.277029][T11369] path_openat+0xcb1/0x2440 [ 417.277061][T11369] ? __pfx_path_openat+0x10/0x10 [ 417.277098][T11369] do_file_open+0x20e/0x430 [ 417.277129][T11369] ? __pfx_do_file_open+0x10/0x10 [ 417.277176][T11369] ? alloc_fd+0x471/0x7a0 [ 417.277206][T11369] ? do_getname+0x191/0x390 [ 417.277228][T11369] do_sys_openat2+0x10f/0x1e0 [ 417.277262][T11369] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.277306][T11369] __x64_sys_open+0xfe/0x1d0 [ 417.277325][T11369] ? __pfx___x64_sys_open+0x10/0x10 [ 417.277354][T11369] do_syscall_64+0x121/0x770 [ 417.277384][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.277406][T11369] RIP: 0033:0x7fb84619e199 [ 417.277423][T11369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.277443][T11369] RSP: 002b:00007fb84707b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 417.277463][T11369] RAX: ffffffffffffffda RBX: 00007fb846426450 RCX: 00007fb84619e199 [ 417.277476][T11369] RDX: 0000000000000000 RSI: 0000000000595082 RDI: 0000200000000100 [ 417.277489][T11369] RBP: 00007fb8462358e0 R08: 0000000000000000 R09: 0000000000000000 [ 417.277502][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.277514][T11369] R13: 00007fb8464264e8 R14: 00007fb846426450 R15: 00007ffca4c93518 [ 417.277540][T11369] [ 422.091962][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 423.021519][T11419] Process accounting paused [ 423.721161][T11447] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.709'. [ 426.216546][T11483] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 426.429385][ T23] IRQ fixup: irq 34 move in progress, old vector 49 [ 426.440097][T11482] smpboot: CPU 1 is now offline [ 428.261636][T11516] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 428.373003][T11518] smpboot: CPU 1 is now offline [ 430.472146][T11543] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 430.604953][T11547] smpboot: CPU 1 is now offline [ 430.798968][T11552] netlink: 5324 bytes leftover after parsing attributes in process `syz.2.723'. [ 433.861038][T11602] binder: 11587:11602 ioctl c00c620f 200000000c40 returned -22 [ 434.393943][T11605] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 434.461331][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 434.470663][T11605] smpboot: CPU 1 is now offline [ 435.476384][T11619] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 435.581148][T11622] smpboot: CPU 1 is now offline [ 437.207701][T11636] binder: 11633:11636 ioctl c00c620f 200000000c40 returned -22 [ 438.106962][T11655] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 438.180458][T11655] smpboot: CPU 1 is now offline [ 438.427493][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.427539][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.217171][T11680] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 439.289993][T11683] smpboot: CPU 1 is now offline [ 439.963981][T11667] Process accounting resumed [ 440.367952][T11697] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 440.435277][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 440.444147][T11697] smpboot: CPU 1 is now offline [ 441.919860][T11708] binder: 11704:11708 ioctl c00c620f 200000000c40 returned -22 [ 443.544185][T11741] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 443.691583][T11746] smpboot: CPU 1 is now offline [ 443.752868][T11735] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 443.866101][T11753] netlink: 5324 bytes leftover after parsing attributes in process `syz.1.751'. [ 445.515424][T11761] Process accounting resumed [ 447.233963][T11786] Process accounting resumed [ 447.543213][T11811] smpboot: CPU 1 is now offline [ 447.930571][T11826] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.566840][T11829] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 450.256315][T11864] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.768'. [ 453.114826][T11902] Process accounting resumed [ 453.221496][T11897] binder: 11883:11897 ioctl c00c620f 200000000c40 returned -22 [ 453.263251][T11905] binder: 11899:11905 ioctl c00c620f 200000000c40 returned -22 [ 454.218769][T11931] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.543514][T11973] smpboot: CPU 1 is now offline [ 458.288727][T11998] binder: 11977:11998 ioctl c00c620f 200000000c40 returned -22 [ 458.453412][T11999] FAULT_INJECTION: forcing a failure. [ 458.453412][T11999] name failslab, interval 1, probability 0, space 0, times 0 [ 458.453455][T11999] CPU: 0 UID: 0 PID: 11999 Comm: syz.3.788 Not tainted syzkaller #0 PREEMPT(full) [ 458.453484][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 458.453502][T11999] Call Trace: [ 458.453509][T11999] [ 458.453521][T11999] dump_stack_lvl+0x100/0x190 [ 458.453571][T11999] should_fail_ex.cold+0x5/0xa [ 458.453600][T11999] should_failslab+0xc2/0x120 [ 458.453632][T11999] __kmalloc_noprof+0xfc/0x840 [ 458.453660][T11999] ? sk_prot_alloc+0x10b/0x2a0 [ 458.453690][T11999] sk_prot_alloc+0x10b/0x2a0 [ 458.453717][T11999] sk_alloc+0x36/0xe80 [ 458.453751][T11999] xsk_create+0x117/0x760 [ 458.453773][T11999] __sock_create+0x339/0x860 [ 458.453805][T11999] __sys_socket+0x14d/0x260 [ 458.453835][T11999] ? __pfx___sys_socket+0x10/0x10 [ 458.453871][T11999] __x64_sys_socket+0x72/0xb0 [ 458.453900][T11999] ? lockdep_hardirqs_on+0x7d/0x110 [ 458.453926][T11999] do_syscall_64+0x121/0x770 [ 458.453955][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.453976][T11999] RIP: 0033:0x7f763499e199 [ 458.453993][T11999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.454013][T11999] RSP: 002b:00007f7635860028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 458.454041][T11999] RAX: ffffffffffffffda RBX: 00007f7634c26450 RCX: 00007f763499e199 [ 458.454054][T11999] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 458.454067][T11999] RBP: 00007f7634a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 458.454080][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.454092][T11999] R13: 00007f7634c264e8 R14: 00007f7634c26450 R15: 00007ffe0b455998 [ 458.454118][T11999] [ 458.678422][T11988] binder: 11978:11988 ioctl c00c620f 200000000c40 returned -22 [ 462.536755][T12073] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.914040][T12075] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 464.783776][T12097] smpboot: CPU 1 is now offline [ 465.452740][T12124] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.801'. [ 469.390309][T12186] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.942867][T12168] Process accounting paused [ 477.243771][T12273] Process accounting paused [ 477.340036][T12274] Process accounting paused [ 479.266578][T12319] binder: 12314:12319 ioctl c00c620f 200000000c40 returned -22 [ 479.988013][T12342] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 480.141006][T12349] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 482.133154][T12383] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5617] was attempted by "`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0* [ 483.826448][T12358] Process accounting paused [ 485.059549][T12405] binder: 12392:12405 ioctl c00c620f 200000000c40 returned -22 [ 486.828997][T12449] random: crng reseeded on system resumption [ 488.776790][T12468] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 488.852933][T12470] smpboot: CPU 1 is now offline [ 496.456224][T12583] binder: 12575:12583 ioctl c00c620f 200000000c40 returned -22 [ 497.159823][T12598] binder: 12592:12598 ioctl c00c620f 200000000c40 returned -22 [ 499.585576][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.585621][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.015217][T12643] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 501.139030][T12645] smpboot: CPU 1 is now offline [ 501.536117][T12643] Process accounting resumed [ 503.390630][T12682] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 506.046013][T12738] smpboot: CPU 1 is now offline [ 506.386418][T12737] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 506.506005][T12741] smpboot: CPU 1 is now offline [ 507.951600][T12726] Process accounting resumed [ 508.620785][T12749] Process accounting resumed [ 508.800387][T12772] random: crng reseeded on system resumption [ 510.838794][T12803] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5627] was attempted by "D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0* [ 514.544771][T12821] Process accounting resumed [ 518.807927][T12921] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 522.964103][T12987] smpboot: CPU 1 is now offline [ 523.227582][T13007] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 523.500071][T13013] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 523.819820][T13019] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5623] was attempted by "_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.* [ 523.894146][T13018] binder: 12988:13018 ioctl c00c620f 200000000c40 returned -22 [ 524.586379][T13022] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 525.860358][T13039] smpboot: CPU 1 is now offline [ 526.358666][T13053] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345537295 (2345537295 ns) > initial count (2345476350 ns). Using initial count to start timer. [ 528.386238][T13086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.386507][T13086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 528.388163][T13086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 528.388343][T13086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.403349][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 530.403383][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 530.403409][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 530.403433][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 532.799852][T13109] Process accounting paused [ 535.506780][T13179] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 538.542312][T13218] Process accounting paused [ 538.868250][T13230] Process accounting paused [ 540.636894][T13277] binder: 13264:13277 ioctl c00c620f 200000000c40 returned -22 [ 542.009724][T13305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 542.009929][T13305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 542.010162][T13305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 542.010334][T13305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 544.020047][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 544.020088][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 544.020119][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 544.020150][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 545.015964][T13334] Process accounting paused [ 545.293731][T13360] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 545.293851][T13360] vhci_hcd vhci_hcd.2: default hub control req: 3063 v0000 i0000 l0 [ 545.898905][T13361] binder: 13354:13361 ioctl c00c620f 200000000c40 returned -22 [ 546.344852][T13381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345537295 (2345537295 ns) > initial count (2345476350 ns). Using initial count to start timer. [ 548.546573][T13406] binder: 13393:13406 ioctl c00c620f 200000000c40 returned -22 [ 548.738961][T13412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 548.739122][T13412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.744347][T13412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.744927][T13412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 550.466322][T13453] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5629] was attempted by "D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0*h0*.*0*D3*`3*_0* [ 550.789350][T13315] Bluetooth: hci3: command 0x0c1a tx timeout [ 550.789394][T13315] Bluetooth: hci2: command 0x0c1a tx timeout [ 550.789425][T13315] Bluetooth: hci1: command 0x0c1a tx timeout [ 550.789455][T13315] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.726656][T13459] binder: 13433:13459 ioctl c00c620f 200000000c40 returned -22 [ 553.458423][T13472] smpboot: CPU 1 is now offline [ 557.905261][T13547] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 558.013129][T13551] smpboot: CPU 1 is now offline [ 560.677625][T13600] binder: 13589:13600 ioctl c00c620f 200000000c40 returned -22 [ 560.747073][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.747117][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.783883][T13618] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 561.881255][T13621] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 562.275101][T13628] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 562.364246][T13628] smpboot: CPU 1 is now offline [ 562.897568][T13631] Process accounting resumed [ 563.330230][T13650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1014'. [ 565.258925][T13663] binder: 13657:13663 ioctl c00c620f 200000000c40 returned -22 [ 565.472331][T13666] binder: 13661:13666 ioctl c00c620f 200000000c40 returned -22 [ 566.408930][T13690] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 566.486868][T13690] smpboot: CPU 1 is now offline [ 567.326016][T13701] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 567.411170][T13701] smpboot: CPU 1 is now offline [ 568.470538][T13697] Process accounting resumed [ 568.675611][T13730] FAULT_INJECTION: forcing a failure. [ 568.675611][T13730] name failslab, interval 1, probability 0, space 0, times 0 [ 568.675672][T13730] CPU: 0 UID: 0 PID: 13730 Comm: syz.1.1026 Not tainted syzkaller #0 PREEMPT(full) [ 568.675699][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 568.675716][T13730] Call Trace: [ 568.675723][T13730] [ 568.675731][T13730] dump_stack_lvl+0x100/0x190 [ 568.675806][T13730] should_fail_ex.cold+0x5/0xa [ 568.675868][T13730] should_failslab+0xc2/0x120 [ 568.675956][T13730] __kmalloc_cache_noprof+0x91/0x6d0 [ 568.676022][T13730] ? trace_pid_list_alloc+0x2fe/0x480 [ 568.676074][T13730] trace_pid_list_alloc+0x2fe/0x480 [ 568.676111][T13730] trace_pid_write+0x110/0x460 [ 568.676146][T13730] ? __pfx_trace_pid_write+0x10/0x10 [ 568.676182][T13730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 568.676276][T13730] event_pid_write.isra.0+0x1e4/0x7d0 [ 568.676315][T13730] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 568.676367][T13730] vfs_write+0x2aa/0x1050 [ 568.676429][T13730] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 568.676466][T13730] ? lock_acquire+0x1d1/0x380 [ 568.676510][T13730] ? __fget_files+0x34/0x3d0 [ 568.676560][T13730] ? __pfx_vfs_write+0x10/0x10 [ 568.676585][T13730] ? find_held_lock+0x2b/0x80 [ 568.676612][T13730] ? __fget_files+0x215/0x3d0 [ 568.676657][T13730] ? __fget_files+0x21f/0x3d0 [ 568.676691][T13730] ksys_write+0x12a/0x250 [ 568.676716][T13730] ? __pfx_ksys_write+0x10/0x10 [ 568.676749][T13730] do_syscall_64+0x121/0x770 [ 568.676793][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.676825][T13730] RIP: 0033:0x7fa24c39e199 [ 568.676842][T13730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.676862][T13730] RSP: 002b:00007fa24d2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.676904][T13730] RAX: ffffffffffffffda RBX: 00007fa24c625fa0 RCX: 00007fa24c39e199 [ 568.676918][T13730] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 568.676931][T13730] RBP: 00007fa24c4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 568.676944][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.676956][T13730] R13: 00007fa24c626038 R14: 00007fa24c625fa0 R15: 00007ffd92f05e58 [ 568.676983][T13730] [ 570.552041][T13724] Process accounting resumed [ 570.658791][T13746] binder: 13743:13746 ioctl c00c620f 200000000c40 returned -22 [ 571.454972][T13762] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 571.617085][T13764] smpboot: CPU 1 is now offline [ 571.700837][T13767] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 572.451205][T13775] smpboot: CPU 1 is now offline [ 573.376173][T13796] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1036'. [ 573.538445][T13801] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 573.685480][T13803] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 574.598817][T13811] FAULT_INJECTION: forcing a failure. [ 574.598817][T13811] name failslab, interval 1, probability 0, space 0, times 0 [ 574.598847][T13811] CPU: 0 UID: 0 PID: 13811 Comm: syz.3.1038 Not tainted syzkaller #0 PREEMPT(full) [ 574.598871][T13811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 574.598883][T13811] Call Trace: [ 574.598890][T13811] [ 574.598898][T13811] dump_stack_lvl+0x100/0x190 [ 574.598931][T13811] should_fail_ex.cold+0x5/0xa [ 574.598959][T13811] should_failslab+0xc2/0x120 [ 574.598992][T13811] __kmalloc_cache_noprof+0x91/0x6d0 [ 574.599014][T13811] ? alloc_shrinker_info+0x2c0/0x470 [ 574.599075][T13811] ? mem_cgroup_css_online+0x155/0xbf0 [ 574.599135][T13811] mem_cgroup_css_online+0x155/0xbf0 [ 574.599167][T13811] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 574.599200][T13811] online_css+0xb2/0x350 [ 574.599233][T13811] cgroup_apply_control_enable+0xa8d/0xdd0 [ 574.599276][T13811] cgroup_mkdir+0x57f/0x1330 [ 574.599310][T13811] ? __pfx_cgroup_mkdir+0x10/0x10 [ 574.599343][T13811] kernfs_iop_mkdir+0x111/0x190 [ 574.599420][T13811] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 574.599479][T13811] vfs_mkdir+0x364/0x850 [ 574.599534][T13811] filename_mkdirat+0x48b/0x5e0 [ 574.599568][T13811] ? __pfx_filename_mkdirat+0x10/0x10 [ 574.599600][T13811] ? strncpy_from_user+0x19d/0x2d0 [ 574.599687][T13811] ? do_getname+0x191/0x390 [ 574.599709][T13811] __x64_sys_mkdir+0x6b/0x90 [ 574.599746][T13811] do_syscall_64+0x121/0x770 [ 574.599777][T13811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.599799][T13811] RIP: 0033:0x7f763499e199 [ 574.599816][T13811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.599836][T13811] RSP: 002b:00007f7635905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 574.599856][T13811] RAX: ffffffffffffffda RBX: 00007f7634c25fa0 RCX: 00007f763499e199 [ 574.599871][T13811] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 574.599883][T13811] RBP: 00007f7634a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 574.599896][T13811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.599909][T13811] R13: 00007f7634c26038 R14: 00007f7634c25fa0 R15: 00007ffe0b455998 [ 574.599936][T13811] [ 575.212376][T13811] Process accounting resumed [ 575.520496][T13825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1039'. [ 576.887205][T13839] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 576.991868][T13839] smpboot: CPU 1 is now offline [ 578.280729][T13864] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 578.280763][T13864] vhci_hcd vhci_hcd.1: default hub control req: 2000 v0000 i0000 l0 [ 580.253846][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 580.310044][T13900] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1051'. [ 580.511026][T13905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345537295 (2345537295 ns) > initial count (2345476350 ns). Using initial count to start timer. [ 581.653768][T13909] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 581.805733][T13910] smpboot: CPU 1 is now offline [ 585.650192][T13972] mmap: syz.1.1061 (13972) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 587.149666][T13971] FAULT_INJECTION: forcing a failure. [ 587.149666][T13971] name failslab, interval 1, probability 0, space 0, times 0 [ 587.149698][T13971] CPU: 0 UID: 0 PID: 13971 Comm: syz.1.1061 Not tainted syzkaller #0 PREEMPT(full) [ 587.149724][T13971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 587.149737][T13971] Call Trace: [ 587.149744][T13971] [ 587.149752][T13971] dump_stack_lvl+0x100/0x190 [ 587.149786][T13971] should_fail_ex.cold+0x5/0xa [ 587.149815][T13971] should_failslab+0xc2/0x120 [ 587.149850][T13971] kmem_cache_alloc_noprof+0x92/0x6a0 [ 587.149880][T13971] ? ptlock_alloc+0x1f/0x70 [ 587.149993][T13971] ptlock_alloc+0x1f/0x70 [ 587.150014][T13971] pte_alloc_one+0x82/0x3d0 [ 587.150056][T13971] do_fault+0x960/0x1830 [ 587.150105][T13971] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 587.150151][T13971] ? __pfx_do_fault+0x10/0x10 [ 587.150184][T13971] ? _raw_spin_unlock+0x28/0x50 [ 587.150228][T13971] ? __pmd_alloc+0x3fb/0x950 [ 587.150264][T13971] __handle_mm_fault+0x150b/0x2f60 [ 587.150292][T13971] ? __pfx___handle_mm_fault+0x10/0x10 [ 587.150313][T13971] ? __pfx_mt_find+0x10/0x10 [ 587.150375][T13971] ? find_vma+0xbf/0x140 [ 587.150419][T13971] ? __pfx_find_vma+0x10/0x10 [ 587.150477][T13971] handle_mm_fault+0x363/0xa20 [ 587.150507][T13971] do_user_addr_fault+0x745/0x12f0 [ 587.150543][T13971] exc_page_fault+0x6f/0xd0 [ 587.150599][T13971] asm_exc_page_fault+0x26/0x30 [ 587.150621][T13971] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 587.150673][T13971] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 587.150694][T13971] RSP: 0018:ffffc900048bfe40 EFLAGS: 00050246 [ 587.150732][T13971] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 587.150746][T13971] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900048bfe98 [ 587.150761][T13971] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000917fd3 [ 587.150775][T13971] R10: ffffc900048bfe9f R11: 0000000000000000 R12: 0000000000000000 [ 587.150789][T13971] R13: ffffc900048bfe98 R14: 0000000000000008 R15: 0000000000000000 [ 587.150817][T13971] _copy_from_user+0x98/0xd0 [ 587.150881][T13971] __x64_sys_signalfd4+0x125/0x1d0 [ 587.150930][T13971] ? ksys_write+0x1ac/0x250 [ 587.150960][T13971] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 587.150995][T13971] do_syscall_64+0x121/0x770 [ 587.151028][T13971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.151055][T13971] RIP: 0033:0x7fa24c39e199 [ 587.151075][T13971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.151097][T13971] RSP: 002b:00007fa24d2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 587.151118][T13971] RAX: ffffffffffffffda RBX: 00007fa24c625fa0 RCX: 00007fa24c39e199 [ 587.151134][T13971] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff [ 587.151160][T13971] RBP: 00007fa24c4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 587.151173][T13971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.151185][T13971] R13: 00007fa24c626038 R14: 00007fa24c625fa0 R15: 00007ffd92f05e58 [ 587.151213][T13971] [ 589.524497][T14011] binder: 14008:14011 ioctl c00c620f 0 returned -22 [ 591.514648][T14014] syz.0.1067 (14014) used greatest stack depth: 19896 bytes left [ 592.089854][T14058] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 592.161217][T14058] smpboot: CPU 1 is now offline [ 594.870355][T14070] Process accounting paused [ 595.340253][T14102] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 595.468913][T14106] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 595.787217][T14116] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 596.469875][T14128] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 596.470000][T14128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 596.470109][T14128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 596.470223][T14128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 598.075003][T14156] CIFS: VFS: UNC: path must begin with // or \\ [ 598.075055][T14156] Malformed UNC in devname [ 598.075055][T14156] [ 598.075133][T14156] CIFS: VFS: Malformed UNC in devname [ 598.490506][T13315] Bluetooth: hci3: command 0x0c1a tx timeout [ 598.490537][T13315] Bluetooth: hci2: command 0x0c1a tx timeout [ 598.490559][T13315] Bluetooth: hci1: command 0x0c1a tx timeout [ 598.490580][T13315] Bluetooth: hci0: command 0x0c1a tx timeout [ 600.157829][T14169] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 600.233881][T14160] Process accounting paused [ 601.591632][T14172] Process accounting paused [ 601.858511][T14204] program syz.0.1098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.858933][T14204] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 601.920663][T14196] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 601.992074][T14196] smpboot: CPU 1 is now offline [ 602.619326][T14222] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2345537295 (2345537295 ns) > initial count (2345476350 ns). Using initial count to start timer. [ 602.676766][T14226] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 602.858361][T14226] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 605.840619][T14265] FAULT_INJECTION: forcing a failure. [ 605.840619][T14265] name failslab, interval 1, probability 0, space 0, times 0 [ 605.840653][T14265] CPU: 0 UID: 0 PID: 14265 Comm: syz.0.1100 Not tainted syzkaller #0 PREEMPT(full) [ 605.840682][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 605.840696][T14265] Call Trace: [ 605.840704][T14265] [ 605.840713][T14265] dump_stack_lvl+0x100/0x190 [ 605.840751][T14265] should_fail_ex.cold+0x5/0xa [ 605.840785][T14265] should_failslab+0xc2/0x120 [ 605.840824][T14265] kmem_cache_alloc_noprof+0x92/0x6a0 [ 605.840857][T14265] ? do_getname+0x35/0x390 [ 605.840885][T14265] do_getname+0x35/0x390 [ 605.840911][T14265] do_sys_openat2+0xc7/0x1e0 [ 605.841013][T14265] ? __pfx_do_sys_openat2+0x10/0x10 [ 605.841093][T14265] __x64_sys_openat+0x12d/0x210 [ 605.841114][T14265] ? __pfx___x64_sys_openat+0x10/0x10 [ 605.841143][T14265] do_syscall_64+0x121/0x770 [ 605.841173][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.841194][T14265] RIP: 0033:0x7fb84619e199 [ 605.841211][T14265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.841231][T14265] RSP: 002b:00007fb847120028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 605.841251][T14265] RAX: ffffffffffffffda RBX: 00007fb846425fa0 RCX: 00007fb84619e199 [ 605.841265][T14265] RDX: 0000000000101000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 605.841278][T14265] RBP: 00007fb8462358e0 R08: 0000000000000000 R09: 0000000000000000 [ 605.841290][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.841302][T14265] R13: 00007fb846426038 R14: 00007fb846425fa0 R15: 00007ffca4c93518 [ 605.841328][T14265] [ 606.370318][T14270] i2c i2c-0: delete_device: Can't find device in list [ 606.625592][T14245] Process accounting paused [ 608.200028][T14298] / [ 610.204685][T14335] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 610.349266][T14339] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 610.539558][T14338] netlink: zone id is out of range [ 610.539766][T14338] netlink: zone id is out of range [ 610.539774][T14338] netlink: zone id is out of range [ 610.539781][T14338] netlink: zone id is out of range [ 610.539787][T14338] netlink: zone id is out of range [ 610.539794][T14338] netlink: zone id is out of range [ 610.539800][T14338] netlink: zone id is out of range [ 610.539807][T14338] netlink: zone id is out of range [ 612.711900][T14363] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 612.713638][T14363] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.713776][T14363] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.713975][T14363] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 614.481686][T14396] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 614.735971][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 614.736001][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 614.736023][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 614.736147][T13315] Bluetooth: hci3: command 0x0c1a tx timeout [ 614.777858][T14396] NFSD: Failed to start, no listeners configured. [ 616.845925][T14422] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 617.032736][T14436] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 619.966092][T14476] netlink: 5324 bytes leftover after parsing attributes in process `syz.3.1127'. [ 621.906626][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 621.906670][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.996104][T14525] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 624.104979][T14528] smpboot: CPU 1 is now offline [ 624.486949][T14537] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 624.603268][T14545] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 624.715325][T14540] FAULT_INJECTION: forcing a failure. [ 624.715325][T14540] name failslab, interval 1, probability 0, space 0, times 0 [ 624.715357][T14540] CPU: 0 UID: 0 PID: 14540 Comm: syz.1.1133 Not tainted syzkaller #0 PREEMPT(full) [ 624.715382][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 624.715395][T14540] Call Trace: [ 624.715402][T14540] [ 624.715411][T14540] dump_stack_lvl+0x100/0x190 [ 624.715446][T14540] should_fail_ex.cold+0x5/0xa [ 624.715475][T14540] should_failslab+0xc2/0x120 [ 624.715511][T14540] kmem_cache_alloc_noprof+0x92/0x6a0 [ 624.715544][T14540] ? new_userfaultfd+0x7d/0x400 [ 624.715669][T14540] new_userfaultfd+0x7d/0x400 [ 624.715691][T14540] __x64_sys_userfaultfd+0x4b/0xb0 [ 624.715719][T14540] do_syscall_64+0x121/0x770 [ 624.715750][T14540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.715772][T14540] RIP: 0033:0x7fa24c39e199 [ 624.715789][T14540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.715808][T14540] RSP: 002b:00007fa24d231028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 624.715828][T14540] RAX: ffffffffffffffda RBX: 00007fa24c626450 RCX: 00007fa24c39e199 [ 624.715842][T14540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 624.715854][T14540] RBP: 00007fa24c4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 624.715867][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.715879][T14540] R13: 00007fa24c6264e8 R14: 00007fa24c626450 R15: 00007ffd92f05e58 [ 624.715905][T14540] [ 624.954470][T14534] binder: 14521:14534 ioctl c00c620f 200000000c40 returned -22 [ 625.399058][T14551] Process accounting resumed [ 627.353501][T14580] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 627.420148][T14580] smpboot: CPU 1 is now offline [ 630.402913][T14621] can: request_module (can-proto-0) failed. [ 630.700734][T14603] Process accounting resumed [ 632.162122][T14624] Process accounting resumed [ 632.646895][T14647] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 632.795523][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 632.797203][T14649] smpboot: CPU 1 is now offline [ 633.604395][T14666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 633.604544][T14666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 633.604649][T14666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 633.604757][T14666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 635.225239][T14708] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 635.375570][T14708] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 635.598971][T13315] Bluetooth: hci3: command 0x0c1a tx timeout [ 635.599001][T13315] Bluetooth: hci2: command 0x0c1a tx timeout [ 635.599023][T13315] Bluetooth: hci0: command 0x0c1a tx timeout [ 635.599081][T14404] Bluetooth: hci1: command 0x0c1a tx timeout [ 636.446686][T14724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 636.446804][T14724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 636.446951][T14724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 636.447895][T14724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.124017][T14745] kafs: addr_prefs: Invalid Command [ 638.465912][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 638.465943][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 638.465988][T13315] Bluetooth: hci3: command 0x0c1a tx timeout [ 638.466020][T14404] Bluetooth: hci0: command 0x0c1a tx timeout [ 638.526826][T14728] Process accounting resumed [ 640.715753][T14781] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 640.853680][T14783] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 643.493749][T14817] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 643.636225][T14822] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 645.137768][T14831] binder: 14828:14831 ioctl c00c620f 200000000c40 returned -22 [ 649.178196][T14892] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 649.345269][T14896] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 655.268419][T14933] Process accounting paused [ 655.790678][T14983] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 655.896606][T14988] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 657.941749][T15009] ubi: mtd0 is already attached to ubi1 [ 658.199071][T15020] Format for deleting device is "id" (uint). [ 658.212661][ T31] audit: type=1804 audit(74274.941:15): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.0.1197" name="ima_policy_written" res=0 errno=-17 [ 658.212708][ T31] audit: type=1807 audit(74274.941:16): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 658.212754][ T31] audit: type=1802 audit(74274.941:17): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1197" res=0 errno=0 [ 658.330850][T15020] ima: policy update failed [ 658.332011][ T31] audit: type=1802 audit(74275.051:18): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1197" res=0 errno=0 [ 661.129823][T15047] warning: `syz.0.1201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 662.287775][T15065] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 662.429492][T15065] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 663.203564][T15071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1203'. [ 663.456578][T15046] Process accounting paused [ 663.506928][T15047] Process accounting paused [ 663.664141][T15071] ipvlan1: entered promiscuous mode [ 663.664199][T15071] ipvlan1: entered allmulticast mode [ 663.664213][T15071] veth0_vlan: entered allmulticast mode [ 663.950206][T15082] hub 1-0:1.0: USB hub found [ 663.951903][T15082] hub 1-0:1.0: 1 port detected [ 666.050951][T15103] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 666.051057][T15103] vhci_hcd vhci_hcd.1: SetHubDepth req not supported for USB 2.0 roothub [ 668.996029][T15142] vhci_hcd vhci_hcd.0: invalid port number 13 [ 668.996116][T15142] vhci_hcd vhci_hcd.0: invalid port number 13 [ 669.389048][T15148] KVM: debugfs: duplicate directory 15148-3 [ 670.618644][T15123] Process accounting paused [ 671.559430][T15179] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 673.455030][T15211] dump_stack_lvl+0x100/0x190 [ 673.455065][T15211] should_fail_ex.cold+0x5/0xa [ 673.455094][T15211] should_failslab+0xc2/0x120 [ 673.455128][T15211] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 673.455158][T15211] ? sock_alloc_inode+0x26/0x2c0 [ 673.455273][T15211] ? __pfx_sock_alloc_inode+0x10/0x10 [ 673.455300][T15211] sock_alloc_inode+0x26/0x2c0 [ 673.455324][T15211] ? __pfx_sock_alloc_inode+0x10/0x10 [ 673.455349][T15211] alloc_inode+0x68/0x250 [ 673.455370][T15211] sock_alloc+0x44/0x280 [ 673.455391][T15211] ? security_socket_create+0x7f/0x250 [ 673.455464][T15211] __sock_create+0xc2/0x860 [ 673.455512][T15211] __sys_socket+0x14d/0x260 [ 673.455542][T15211] ? __pfx___sys_socket+0x10/0x10 [ 673.455578][T15211] __x64_sys_socket+0x72/0xb0 [ 673.455606][T15211] ? lockdep_hardirqs_on+0x7d/0x110 [ 673.455634][T15211] do_syscall_64+0x121/0x770 [ 673.455663][T15211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.455685][T15211] RIP: 0033:0x7f10af39e199 [ 673.455708][T15211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.455728][T15211] RSP: 002b:00007f10b029a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 673.455748][T15211] RAX: ffffffffffffffda RBX: 00007f10af626450 RCX: 00007f10af39e199 [ 673.455762][T15211] RDX: 0000000080000003 RSI: 0000000000080000 RDI: 0000000000000008 [ 673.455774][T15211] RBP: 00007f10af4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 673.455787][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.455799][T15211] R13: 00007f10af6264e8 R14: 00007f10af626450 R15: 00007fff6dee8a38 [ 673.455826][T15211] [ 673.455849][T15211] socket: no more sockets [ 677.923284][T15279] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 678.036245][T15284] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 680.864874][T15317] binder: 15292:15317 ioctl c00c620f 200000000c40 returned -22 [ 681.762313][T15323] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 681.840208][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 681.851570][T15323] smpboot: CPU 1 is now offline [ 682.835693][T15339] ubi: mtd0 is already attached to ubi1 [ 683.052584][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.052637][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.275017][T15369] Process accounting resumed [ 689.997749][T15433] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 690.096600][T15433] smpboot: CPU 1 is now offline [ 691.062092][T15459] i2c i2c-0: delete_device: Can't find device in list [ 694.329788][T15497] Process accounting resumed [ 694.640215][T15493] binder: 15487:15493 ioctl c00c620f 200000000c40 returned -22 [ 696.029668][T15501] Process accounting resumed [ 696.870907][T15549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 696.871025][T15549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 696.871127][T15549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 696.871228][T15549] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 698.890977][T13315] Bluetooth: hci3: command 0x0c1a tx timeout [ 698.891008][T13315] Bluetooth: hci2: command 0x0c1a tx timeout [ 698.891029][T13315] Bluetooth: hci1: command 0x0c1a tx timeout [ 698.891050][T13315] Bluetooth: hci0: command 0x0c1a tx timeout [ 700.829417][T15577] Process accounting resumed [ 703.073616][T15632] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 703.201795][T15633] smpboot: CPU 1 is now offline [ 705.359968][T15673] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 705.359999][T15673] vhci_hcd vhci_hcd.2: default hub control req: 3063 v0000 i0000 l0 [ 705.780419][T15687] Format for deleting device is "id" (uint). [ 705.793333][ T31] audit: type=1804 audit(74322.761:19): pid=15687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.2.1281" name="ima_policy_written" res=0 errno=-17 [ 705.793380][ T31] audit: type=1807 audit(74322.761:20): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 705.793421][ T31] audit: type=1802 audit(74322.761:21): pid=15687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1281" res=0 errno=0 [ 705.887129][T15687] ima: policy update failed [ 705.887332][ T31] audit: type=1802 audit(74322.861:22): pid=15687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1281" res=0 errno=0 [ 708.736411][T15726] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 708.798500][T15726] smpboot: CPU 1 is now offline [ 712.431124][ T31] audit: type=1804 audit(74329.424:23): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.3.1295" name="ima_policy_written" res=0 errno=-17 [ 712.431180][ T31] audit: type=1807 audit(74329.424:24): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 712.431209][ T31] audit: type=1802 audit(74329.424:25): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1295" res=0 errno=0 [ 712.675090][T15780] ima: policy update failed [ 712.677516][ T31] audit: type=1802 audit(74329.676:26): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1295" res=0 errno=0 [ 717.798958][T15804] Process accounting paused [ 724.952984][T15923] binder: 15912:15923 ioctl c00c620f 200000000c40 returned -22 [ 726.213270][T15950] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 726.378351][T15950] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 726.601681][T15921] Process accounting paused [ 726.770961][T15922] Process accounting paused [ 732.836542][T16017] Process accounting paused [ 733.466151][T16037] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 733.596051][T16040] smpboot: CPU 1 is now offline [ 734.298520][T16061] FAULT_INJECTION: forcing a failure. [ 734.298520][T16061] name failslab, interval 1, probability 0, space 0, times 0 [ 734.298553][T16061] CPU: 0 UID: 0 PID: 16061 Comm: syz.1.1330 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.298581][T16061] Tainted: [L]=SOFTLOCKUP [ 734.298589][T16061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 734.298601][T16061] Call Trace: [ 734.298608][T16061] [ 734.298616][T16061] dump_stack_lvl+0x100/0x190 [ 734.298649][T16061] should_fail_ex.cold+0x5/0xa [ 734.298676][T16061] should_failslab+0xc2/0x120 [ 734.298709][T16061] __kmalloc_cache_noprof+0x91/0x6d0 [ 734.298734][T16061] ? percpu_ref_init+0xec/0x3f0 [ 734.298761][T16061] ? __pfx_css_release+0x10/0x10 [ 734.298789][T16061] percpu_ref_init+0xec/0x3f0 [ 734.298812][T16061] ? init_and_link_css+0x4ae/0xc80 [ 734.298835][T16061] cgroup_apply_control_enable+0x65d/0xdd0 [ 734.298873][T16061] cgroup_mkdir+0x57f/0x1330 [ 734.298908][T16061] ? __pfx_cgroup_mkdir+0x10/0x10 [ 734.298940][T16061] kernfs_iop_mkdir+0x111/0x190 [ 734.298976][T16061] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 734.299007][T16061] vfs_mkdir+0x364/0x850 [ 734.299032][T16061] filename_mkdirat+0x48b/0x5e0 [ 734.299066][T16061] ? __pfx_filename_mkdirat+0x10/0x10 [ 734.299097][T16061] ? strncpy_from_user+0x19d/0x2d0 [ 734.299133][T16061] ? do_getname+0x191/0x390 [ 734.299155][T16061] __x64_sys_mkdir+0x6b/0x90 [ 734.299187][T16061] do_syscall_64+0x121/0x770 [ 734.299216][T16061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.299238][T16061] RIP: 0033:0x7fa24c39e199 [ 734.299255][T16061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.299275][T16061] RSP: 002b:00007fa24d2d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 734.299295][T16061] RAX: ffffffffffffffda RBX: 00007fa24c625fa0 RCX: 00007fa24c39e199 [ 734.299308][T16061] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 734.299321][T16061] RBP: 00007fa24c4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 734.299334][T16061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.299346][T16061] R13: 00007fa24c626038 R14: 00007fa24c625fa0 R15: 00007ffd92f05e58 [ 734.299373][T16061] [ 735.100228][T16036] FAULT_INJECTION: forcing a failure. [ 735.100228][T16036] name failslab, interval 1, probability 0, space 0, times 0 [ 735.100264][T16036] CPU: 0 UID: 0 PID: 16036 Comm: syz.3.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.100312][T16036] Tainted: [L]=SOFTLOCKUP [ 735.100320][T16036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 735.100333][T16036] Call Trace: [ 735.100340][T16036] [ 735.100348][T16036] dump_stack_lvl+0x100/0x190 [ 735.100382][T16036] should_fail_ex.cold+0x5/0xa [ 735.100412][T16036] should_failslab+0xc2/0x120 [ 735.100455][T16036] kmem_cache_alloc_noprof+0x92/0x6a0 [ 735.100486][T16036] ? ptlock_alloc+0x1f/0x70 [ 735.100512][T16036] ptlock_alloc+0x1f/0x70 [ 735.100533][T16036] pte_alloc_one+0x82/0x3d0 [ 735.100564][T16036] do_fault+0x960/0x1830 [ 735.100597][T16036] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 735.100623][T16036] ? __pfx_do_fault+0x10/0x10 [ 735.100657][T16036] ? _raw_spin_unlock+0x28/0x50 [ 735.100680][T16036] ? __pmd_alloc+0x3fb/0x950 [ 735.100715][T16036] __handle_mm_fault+0x150b/0x2f60 [ 735.100743][T16036] ? __pfx___handle_mm_fault+0x10/0x10 [ 735.100764][T16036] ? __pfx_mt_find+0x10/0x10 [ 735.100810][T16036] ? find_vma+0xbf/0x140 [ 735.100838][T16036] ? __pfx_find_vma+0x10/0x10 [ 735.100872][T16036] handle_mm_fault+0x363/0xa20 [ 735.100900][T16036] do_user_addr_fault+0x745/0x12f0 [ 735.100933][T16036] exc_page_fault+0x6f/0xd0 [ 735.100961][T16036] asm_exc_page_fault+0x26/0x30 [ 735.100983][T16036] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 735.101020][T16036] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 735.101041][T16036] RSP: 0018:ffffc90004f8fe40 EFLAGS: 00050246 [ 735.101059][T16036] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 735.101072][T16036] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004f8fe98 [ 735.101086][T16036] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520009f1fd3 [ 735.101099][T16036] R10: ffffc90004f8fe9f R11: 0000000000000000 R12: 0000000000000000 [ 735.101113][T16036] R13: ffffc90004f8fe98 R14: 0000000000000008 R15: 0000000000000000 [ 735.101138][T16036] _copy_from_user+0x98/0xd0 [ 735.101177][T16036] __x64_sys_signalfd4+0x125/0x1d0 [ 735.101202][T16036] ? ksys_write+0x1ac/0x250 [ 735.101229][T16036] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 735.101262][T16036] do_syscall_64+0x121/0x770 [ 735.101292][T16036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.101314][T16036] RIP: 0033:0x7f763499e199 [ 735.101331][T16036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.101352][T16036] RSP: 002b:00007f7635905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 735.101372][T16036] RAX: ffffffffffffffda RBX: 00007f7634c25fa0 RCX: 00007f763499e199 [ 735.101386][T16036] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 00000000ffffffff [ 735.101399][T16036] RBP: 00007f7634a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 735.101413][T16036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.101426][T16036] R13: 00007f7634c26038 R14: 00007f7634c25fa0 R15: 00007ffe0b455998 [ 735.101459][T16036] [ 737.272646][T16097] cifs: Unknown parameter 'T.żc[$⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 737.308297][T16096] dump_stack_lvl+0x100/0x190 [ 737.308330][T16096] should_fail_ex.cold+0x5/0xa [ 737.308358][T16096] should_failslab+0xc2/0x120 [ 737.308391][T16096] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 737.308421][T16096] ? sock_alloc_inode+0x26/0x2c0 [ 737.308449][T16096] ? __pfx_sock_alloc_inode+0x10/0x10 [ 737.308476][T16096] sock_alloc_inode+0x26/0x2c0 [ 737.308500][T16096] ? __pfx_sock_alloc_inode+0x10/0x10 [ 737.308524][T16096] alloc_inode+0x68/0x250 [ 737.308545][T16096] sock_alloc+0x44/0x280 [ 737.308566][T16096] ? security_socket_create+0x7f/0x250 [ 737.308600][T16096] __sock_create+0xc2/0x860 [ 737.308632][T16096] __sys_socket+0x14d/0x260 [ 737.308662][T16096] ? __pfx___sys_socket+0x10/0x10 [ 737.308698][T16096] __x64_sys_socket+0x72/0xb0 [ 737.308726][T16096] ? lockdep_hardirqs_on+0x7d/0x110 [ 737.308753][T16096] do_syscall_64+0x121/0x770 [ 737.308782][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.308804][T16096] RIP: 0033:0x7fb84619e199 [ 737.308821][T16096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.308841][T16096] RSP: 002b:00007fb84707b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 737.308861][T16096] RAX: ffffffffffffffda RBX: 00007fb846426450 RCX: 00007fb84619e199 [ 737.308875][T16096] RDX: 0000000080000003 RSI: 0000000000080000 RDI: 0000000000000008 [ 737.308888][T16096] RBP: 00007fb8462358e0 R08: 0000000000000000 R09: 0000000000000000 [ 737.308900][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.308913][T16096] R13: 00007fb8464264e8 R14: 00007fb846426450 R15: 00007ffca4c93518 [ 737.308939][T16096] [ 737.308949][T16096] socket: no more sockets [ 738.367558][T16098] binder: 16092:16098 ioctl c00c620f 200000000c40 returned -22 [ 744.181599][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.181644][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.284187][T16204] Process accounting resumed [ 748.527935][T16237] CIFS: VFS: UNC: path must begin with // or \\ [ 748.527947][T16237] Malformed UNC in devname [ 748.527947][T16237] [ 748.527959][T16237] CIFS: VFS: Malformed UNC in devname [ 750.410935][T16256] program syz.3.1357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 750.412547][T16256] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 751.774629][T16276] FAULT_INJECTION: forcing a failure. [ 751.774629][T16276] name failslab, interval 1, probability 0, space 0, times 0 [ 751.774662][T16276] CPU: 0 UID: 0 PID: 16276 Comm: syz.2.1363 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.774691][T16276] Tainted: [L]=SOFTLOCKUP [ 751.774698][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 751.774711][T16276] Call Trace: [ 751.774717][T16276] [ 751.774725][T16276] dump_stack_lvl+0x100/0x190 [ 751.774757][T16276] should_fail_ex.cold+0x5/0xa [ 751.774794][T16276] should_failslab+0xc2/0x120 [ 751.774827][T16276] __kmalloc_cache_node_noprof+0x94/0x720 [ 751.774857][T16276] ? kmem_cache_alloc_node_noprof+0x2eb/0x6e0 [ 751.774886][T16276] ? mem_cgroup_css_alloc+0xb69/0x1d10 [ 751.774916][T16276] mem_cgroup_css_alloc+0xb69/0x1d10 [ 751.774944][T16276] cgroup_apply_control_enable+0x602/0xdd0 [ 751.774983][T16276] cgroup_mkdir+0x57f/0x1330 [ 751.775018][T16276] ? __pfx_cgroup_mkdir+0x10/0x10 [ 751.775050][T16276] kernfs_iop_mkdir+0x111/0x190 [ 751.775083][T16276] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 751.775113][T16276] vfs_mkdir+0x364/0x850 [ 751.775138][T16276] filename_mkdirat+0x48b/0x5e0 [ 751.775172][T16276] ? __pfx_filename_mkdirat+0x10/0x10 [ 751.775203][T16276] ? strncpy_from_user+0x19d/0x2d0 [ 751.775240][T16276] ? do_getname+0x191/0x390 [ 751.775262][T16276] __x64_sys_mkdir+0x6b/0x90 [ 751.775293][T16276] do_syscall_64+0x121/0x770 [ 751.775322][T16276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.775343][T16276] RIP: 0033:0x7f10af39e199 [ 751.775360][T16276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.775380][T16276] RSP: 002b:00007f10b033f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 751.775402][T16276] RAX: ffffffffffffffda RBX: 00007f10af625fa0 RCX: 00007f10af39e199 [ 751.775416][T16276] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 751.775428][T16276] RBP: 00007f10af4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 751.775441][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.775453][T16276] R13: 00007f10af626038 R14: 00007f10af625fa0 R15: 00007fff6dee8a38 [ 751.775480][T16276] [ 756.544924][T16322] Process accounting resumed [ 757.321961][T16357] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 757.321992][T16357] vhci_hcd vhci_hcd.1: default hub control req: 2000 v0000 i0000 l0 [ 759.317019][T16349] Process accounting resumed [ 759.977411][T16391] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1374'. [ 761.837130][T16411] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1380'. [ 763.279948][T16427] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 763.504778][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 763.513552][T16429] smpboot: CPU 1 is now offline [ 765.951241][T16430] Process accounting resumed [ 766.095674][T16462] FAULT_INJECTION: forcing a failure. [ 766.095674][T16462] name failslab, interval 1, probability 0, space 0, times 0 [ 766.095709][T16462] CPU: 0 UID: 0 PID: 16462 Comm: syz.3.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.095739][T16462] Tainted: [L]=SOFTLOCKUP [ 766.095746][T16462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 766.095759][T16462] Call Trace: [ 766.095766][T16462] [ 766.095774][T16462] dump_stack_lvl+0x100/0x190 [ 766.095807][T16462] should_fail_ex.cold+0x5/0xa [ 766.095834][T16462] should_failslab+0xc2/0x120 [ 766.095867][T16462] kmem_cache_alloc_noprof+0x92/0x6a0 [ 766.095896][T16462] ? do_getname+0x35/0x390 [ 766.095920][T16462] do_getname+0x35/0x390 [ 766.095941][T16462] do_sys_openat2+0xc7/0x1e0 [ 766.095976][T16462] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.096020][T16462] __x64_sys_openat+0x12d/0x210 [ 766.096040][T16462] ? __pfx___x64_sys_openat+0x10/0x10 [ 766.096070][T16462] do_syscall_64+0x121/0x770 [ 766.096100][T16462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.096122][T16462] RIP: 0033:0x7f763499e199 [ 766.096138][T16462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.096159][T16462] RSP: 002b:00007f7635905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 766.096180][T16462] RAX: ffffffffffffffda RBX: 00007f7634c25fa0 RCX: 00007f763499e199 [ 766.096194][T16462] RDX: 0000000000101000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 766.096207][T16462] RBP: 00007f7634a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 766.096221][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.096233][T16462] R13: 00007f7634c26038 R14: 00007f7634c25fa0 R15: 00007ffe0b455998 [ 766.096259][T16462] [ 766.845256][T16481] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 766.845289][T16481] vhci_hcd vhci_hcd.1: default hub control req: 2000 v0000 i0000 l0 [ 766.947597][T16480] i2c i2c-0: delete_device: Can't find device in list [ 775.483609][T16591] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 775.483647][T16591] vhci_hcd vhci_hcd.1: default hub control req: 2000 v0000 i0000 l0 [ 777.540247][T16621] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 777.540283][T16621] vhci_hcd vhci_hcd.1: default hub control req: 2000 v0000 i0000 l0 [ 779.141555][T16609] Process accounting paused [ 786.793392][T16752] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 786.793429][T16752] vhci_hcd vhci_hcd.1: default hub control req: 2000 v0000 i0000 l0 [ 788.325585][T16753] Process accounting paused [ 790.739355][T16771] Process accounting paused [ 791.533115][T16803] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 791.593328][T16803] smpboot: CPU 1 is now offline [ 794.096504][T16834] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 794.175238][T16840] usb usb35: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 794.175269][T16840] vhci_hcd vhci_hcd.1: default hub control req: 2000 v0000 i0000 l0 [ 794.290996][T16836] smpboot: CPU 1 is now offline [ 796.230275][T16850] Process accounting paused [ 797.878790][T16887] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 798.015377][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 798.023777][T16897] smpboot: CPU 1 is now offline [ 805.312399][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.312443][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.166643][T17047] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 809.282120][T17050] smpboot: CPU 1 is now offline [ 809.701540][T17050] Process accounting resumed [ 816.354637][T17159] FAULT_INJECTION: forcing a failure. [ 816.354637][T17159] name failslab, interval 1, probability 0, space 0, times 0 [ 816.354671][T17159] CPU: 0 UID: 0 PID: 17159 Comm: syz.2.1478 Tainted: G L syzkaller #0 PREEMPT(full) [ 816.354701][T17159] Tainted: [L]=SOFTLOCKUP [ 816.354708][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 816.354721][T17159] Call Trace: [ 816.354728][T17159] [ 816.354736][T17159] dump_stack_lvl+0x100/0x190 [ 816.354772][T17159] should_fail_ex.cold+0x5/0xa [ 816.354800][T17159] should_failslab+0xc2/0x120 [ 816.354835][T17159] kmem_cache_alloc_noprof+0x92/0x6a0 [ 816.354866][T17159] ? do_getname+0x35/0x390 [ 816.354889][T17159] do_getname+0x35/0x390 [ 816.354911][T17159] do_sys_openat2+0xc7/0x1e0 [ 816.354956][T17159] ? __pfx_do_sys_openat2+0x10/0x10 [ 816.354993][T17159] ? __fget_files+0x21f/0x3d0 [ 816.355028][T17159] __x64_sys_openat+0x12d/0x210 [ 816.355050][T17159] ? __pfx___x64_sys_openat+0x10/0x10 [ 816.355080][T17159] do_syscall_64+0x121/0x770 [ 816.355110][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.355132][T17159] RIP: 0033:0x7f10af39e199 [ 816.355149][T17159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.355171][T17159] RSP: 002b:00007f10b029a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 816.355191][T17159] RAX: ffffffffffffffda RBX: 00007f10af626450 RCX: 00007f10af39e199 [ 816.355205][T17159] RDX: 0000000000000400 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 816.355219][T17159] RBP: 00007f10af4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 816.355232][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.355245][T17159] R13: 00007f10af6264e8 R14: 00007f10af626450 R15: 00007fff6dee8a38 [ 816.355276][T17159] [ 818.477491][T17172] Process accounting resumed [ 819.044682][T17200] FAULT_INJECTION: forcing a failure. [ 819.044682][T17200] name failslab, interval 1, probability 0, space 0, times 0 [ 819.044715][T17200] CPU: 0 UID: 0 PID: 17200 Comm: syz.3.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.044745][T17200] Tainted: [L]=SOFTLOCKUP [ 819.044752][T17200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 819.044765][T17200] Call Trace: [ 819.044772][T17200] [ 819.044781][T17200] dump_stack_lvl+0x100/0x190 [ 819.044814][T17200] should_fail_ex.cold+0x5/0xa [ 819.044842][T17200] should_failslab+0xc2/0x120 [ 819.044875][T17200] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 819.044905][T17200] ? sock_alloc_inode+0x26/0x2c0 [ 819.044944][T17200] ? __pfx_sock_alloc_inode+0x10/0x10 [ 819.044971][T17200] sock_alloc_inode+0x26/0x2c0 [ 819.044996][T17200] ? __pfx_sock_alloc_inode+0x10/0x10 [ 819.045021][T17200] alloc_inode+0x68/0x250 [ 819.045043][T17200] sock_alloc+0x44/0x280 [ 819.045063][T17200] ? security_socket_create+0x7f/0x250 [ 819.045100][T17200] __sock_create+0xc2/0x860 [ 819.045132][T17200] __sys_socket+0x14d/0x260 [ 819.045162][T17200] ? __pfx___sys_socket+0x10/0x10 [ 819.045199][T17200] __x64_sys_socket+0x72/0xb0 [ 819.045227][T17200] ? lockdep_hardirqs_on+0x7d/0x110 [ 819.045255][T17200] do_syscall_64+0x121/0x770 [ 819.045283][T17200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.045308][T17200] RIP: 0033:0x7f763499e199 [ 819.045325][T17200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.045346][T17200] RSP: 002b:00007f7635860028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 819.045367][T17200] RAX: ffffffffffffffda RBX: 00007f7634c26450 RCX: 00007f763499e199 [ 819.045380][T17200] RDX: 0000000080000003 RSI: 0000000000080000 RDI: 0000000000000008 [ 819.045393][T17200] RBP: 00007f7634a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 819.045406][T17200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.045418][T17200] R13: 00007f7634c264e8 R14: 00007f7634c26450 R15: 00007ffe0b455998 [ 819.045444][T17200] [ 819.145162][T17200] socket: no more sockets [ 821.969301][T17221] Process accounting resumed [ 822.629587][T17245] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 822.742327][T17247] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 823.867381][T17253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 823.867576][T17253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.868452][T17253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 823.870523][T17253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 824.047626][T17253] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 825.001984][T17273] netlink: 'syz.0.1495': attribute type 33 has an invalid length. [ 825.923335][T14404] Bluetooth: hci3: command 0x0c1a tx timeout [ 825.923369][T14404] Bluetooth: hci2: command 0x0c1a tx timeout [ 825.923394][T14404] Bluetooth: hci1: command 0x0c1a tx timeout [ 825.923419][T14404] Bluetooth: hci0: command 0x0c1a tx timeout [ 826.568247][T17293] Process accounting resumed [ 831.180032][T17369] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 831.297080][T17372] smpboot: CPU 1 is now offline [ 832.232081][T17384] synth uevent: /module/sr_mod: unknown uevent action string [ 836.245460][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 837.292755][T17460] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 837.362016][T17460] smpboot: CPU 1 is now offline [ 838.032535][T17466] syz.1.1521 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 840.474332][T17474] Process accounting paused [ 841.128473][T17517] program syz.2.1527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 841.130089][T17517] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 842.735445][T17525] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 843.399089][T17536] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 843.477342][T17536] smpboot: CPU 1 is now offline [ 846.409858][T17583] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 846.506581][ T23] IRQ fixup: irq 33 move in progress, old vector 47 [ 846.514932][T17583] smpboot: CPU 1 is now offline [ 846.865196][T17600] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 847.886943][T17606] openvswitch: netlink: Geneve option length err (len 464, max 255). [ 848.029951][T17606] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 849.430460][T17603] Process accounting paused [ 850.021802][T17637] aoe: invalid device specification [ 852.292675][T17645] Process accounting paused [ 854.852481][T17694] FAULT_INJECTION: forcing a failure. [ 854.852481][T17694] name failslab, interval 1, probability 0, space 0, times 0 [ 854.852516][T17694] CPU: 0 UID: 0 PID: 17694 Comm: syz.2.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.852546][T17694] Tainted: [L]=SOFTLOCKUP [ 854.852554][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 854.852567][T17694] Call Trace: [ 854.852574][T17694] [ 854.852581][T17694] dump_stack_lvl+0x100/0x190 [ 854.852633][T17694] should_fail_ex.cold+0x5/0xa [ 854.852666][T17694] should_failslab+0xc2/0x120 [ 854.852705][T17694] __kmalloc_noprof+0xfc/0x840 [ 854.852739][T17694] ? tracepoint_add_func+0x3a8/0x1150 [ 854.852783][T17694] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 854.852821][T17694] tracepoint_add_func+0x3a8/0x1150 [ 854.852860][T17694] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 854.852906][T17694] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 854.852943][T17694] tracepoint_probe_register+0xc4/0x110 [ 854.852984][T17694] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 854.853025][T17694] ? __pfx_blk_add_trace_bio_backmerge+0x10/0x10 [ 854.853063][T17694] ? relay_open+0x793/0xa00 [ 854.853100][T17694] blk_register_tracepoints+0x129/0x440 [ 854.853129][T17694] blk_trace_setup_finalize+0x320/0x3a0 [ 854.853161][T17694] blk_trace_setup+0x254/0x440 [ 854.853198][T17694] ? __pfx_blk_trace_setup+0x10/0x10 [ 854.853229][T17694] ? vsnprintf+0x4c5/0x1300 [ 854.853267][T17694] ? __pfx_vsnprintf+0x10/0x10 [ 854.853324][T17694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 854.853369][T17694] ? do_vfs_ioctl+0x226/0x13e0 [ 854.853400][T17694] blk_trace_ioctl+0x245/0x320 [ 854.853435][T17694] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 854.853475][T17694] ? find_held_lock+0x2b/0x80 [ 854.853505][T17694] ? hook_file_ioctl_common+0x140/0x440 [ 854.853619][T17694] blkdev_ioctl+0x17c/0x6f0 [ 854.853701][T17694] ? __pfx_blkdev_ioctl+0x10/0x10 [ 854.853761][T17694] ? __pfx_blkdev_ioctl+0x10/0x10 [ 854.853802][T17694] __x64_sys_ioctl+0x18e/0x210 [ 854.853840][T17694] do_syscall_64+0x121/0x770 [ 854.853870][T17694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.853892][T17694] RIP: 0033:0x7f10af39e199 [ 854.853909][T17694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.853930][T17694] RSP: 002b:00007f10b02dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.853951][T17694] RAX: ffffffffffffffda RBX: 00007f10af626270 RCX: 00007f10af39e199 [ 854.853966][T17694] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 854.853980][T17694] RBP: 00007f10af4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 854.853993][T17694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.854005][T17694] R13: 00007f10af626308 R14: 00007f10af626270 R15: 00007fff6dee8a38 [ 854.854033][T17694] [ 855.219189][T17694] ------------[ cut here ]------------ [ 855.219201][T17694] ret [ 855.219223][T17694] WARNING: kernel/trace/blktrace.c:1344 at blk_register_tracepoints+0x390/0x440, CPU#0: syz.2.1553/17694 [ 855.241057][T17694] Modules linked in: [ 855.245001][T17694] CPU: 0 UID: 0 PID: 17694 Comm: syz.2.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.256513][T17694] Tainted: [L]=SOFTLOCKUP [ 855.260859][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 855.270941][T17694] RIP: 0010:blk_register_tracepoints+0x390/0x440 [ 855.277369][T17694] Code: 0f 0b 90 e9 47 fd ff ff e8 cd 85 f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 bf 85 f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 b1 85 f7 ff 90 <0f> 0b 90 e9 a4 fd ff ff e8 a3 85 f7 ff 90 0f 0b 90 e9 c3 fd ff ff [ 855.297255][T17694] RSP: 0018:ffffc900049cfb00 EFLAGS: 00010283 [ 855.303454][T17694] RAX: 000000000004024a RBX: 00000000fffffff4 RCX: ffffc9001293f000 [ 855.311430][T17694] RDX: 0000000000080000 RSI: ffffffff82141e1f RDI: ffff888057143e80 [ 855.319425][T17694] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 855.327421][T17694] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 855.336330][T17694] R13: ffff88802621a540 R14: ffffc900049cfda0 R15: 0000000000000001 [ 855.345089][T17694] FS: 00007f10b02dc6c0(0000) GS:ffff888123b52000(0000) knlGS:0000000000000000 [ 855.354128][T17694] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 855.360725][T17694] CR2: 00007f6f7d643a10 CR3: 000000005710a000 CR4: 00000000003526f0 [ 855.368725][T17694] Call Trace: [ 855.372045][T17694] [ 855.374976][T17694] blk_trace_setup_finalize+0x320/0x3a0 [ 855.380531][T17694] blk_trace_setup+0x254/0x440 [ 855.385341][T17694] ? __pfx_blk_trace_setup+0x10/0x10 [ 855.390634][T17694] ? vsnprintf+0x4c5/0x1300 [ 855.395184][T17694] ? __pfx_vsnprintf+0x10/0x10 [ 855.399972][T17694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 855.405956][T17694] ? do_vfs_ioctl+0x226/0x13e0 [ 855.410732][T17694] blk_trace_ioctl+0x245/0x320 [ 855.415530][T17694] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 855.420830][T17694] ? find_held_lock+0x2b/0x80 [ 855.425559][T17694] ? hook_file_ioctl_common+0x140/0x440 [ 855.432026][T17694] blkdev_ioctl+0x17c/0x6f0 [ 855.436566][T17694] ? __pfx_blkdev_ioctl+0x10/0x10 [ 855.441615][T17694] ? __pfx_blkdev_ioctl+0x10/0x10 [ 855.447307][T17694] __x64_sys_ioctl+0x18e/0x210 [ 855.452187][T17694] do_syscall_64+0x121/0x770 [ 855.456856][T17694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.462791][T17694] RIP: 0033:0x7f10af39e199 [ 855.467219][T17694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.486884][T17694] RSP: 002b:00007f10b02dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.495330][T17694] RAX: ffffffffffffffda RBX: 00007f10af626270 RCX: 00007f10af39e199 [ 855.503379][T17694] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 855.511387][T17694] RBP: 00007f10af4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 855.519355][T17694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.527356][T17694] R13: 00007f10af626308 R14: 00007f10af626270 R15: 00007fff6dee8a38 [ 855.536452][T17694] [ 855.539497][T17694] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 855.546776][T17694] CPU: 0 UID: 0 PID: 17694 Comm: syz.2.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.557727][T17694] Tainted: [L]=SOFTLOCKUP [ 855.562044][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 855.572092][T17694] Call Trace: [ 855.575368][T17694] [ 855.578293][T17694] dump_stack_lvl+0x100/0x190 [ 855.582982][T17694] vpanic+0x553/0x970 [ 855.586973][T17694] ? __pfx_vpanic+0x10/0x10 [ 855.591482][T17694] panic+0xd1/0xe0 [ 855.595204][T17694] ? __pfx_panic+0x10/0x10 [ 855.599641][T17694] check_panic_on_warn.cold+0x19/0x34 [ 855.605016][T17694] ? blk_register_tracepoints+0x390/0x440 [ 855.610737][T17694] __warn.cold+0x191/0x318 [ 855.615168][T17694] __report_bug+0x30f/0x440 [ 855.619759][T17694] ? blk_register_tracepoints+0x390/0x440 [ 855.625485][T17694] ? __pfx___report_bug+0x10/0x10 [ 855.630521][T17694] ? __mutex_unlock_slowpath+0x35d/0x930 [ 855.636165][T17694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 855.642154][T17694] ? blk_register_tracepoints+0x390/0x440 [ 855.647893][T17694] report_bug+0xb3/0x220 [ 855.652146][T17694] ? blk_register_tracepoints+0x390/0x440 [ 855.657887][T17694] handle_bug+0x16a/0x2a0 [ 855.662240][T17694] exc_invalid_op+0x17/0x50 [ 855.666801][T17694] asm_exc_invalid_op+0x1a/0x20 [ 855.671655][T17694] RIP: 0010:blk_register_tracepoints+0x390/0x440 [ 855.677989][T17694] Code: 0f 0b 90 e9 47 fd ff ff e8 cd 85 f7 ff 90 0f 0b 90 e9 66 fd ff ff e8 bf 85 f7 ff 90 0f 0b 90 e9 85 fd ff ff e8 b1 85 f7 ff 90 <0f> 0b 90 e9 a4 fd ff ff e8 a3 85 f7 ff 90 0f 0b 90 e9 c3 fd ff ff [ 855.697608][T17694] RSP: 0018:ffffc900049cfb00 EFLAGS: 00010283 [ 855.703677][T17694] RAX: 000000000004024a RBX: 00000000fffffff4 RCX: ffffc9001293f000 [ 855.711669][T17694] RDX: 0000000000080000 RSI: ffffffff82141e1f RDI: ffff888057143e80 [ 855.719671][T17694] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 855.727644][T17694] R10: 00000000fffffff4 R11: 0000000000000001 R12: 200000000040000d [ 855.735609][T17694] R13: ffff88802621a540 R14: ffffc900049cfda0 R15: 0000000000000001 [ 855.743592][T17694] ? blk_register_tracepoints+0x38f/0x440 [ 855.749332][T17694] blk_trace_setup_finalize+0x320/0x3a0 [ 855.754883][T17694] blk_trace_setup+0x254/0x440 [ 855.759658][T17694] ? __pfx_blk_trace_setup+0x10/0x10 [ 855.764954][T17694] ? vsnprintf+0x4c5/0x1300 [ 855.769471][T17694] ? __pfx_vsnprintf+0x10/0x10 [ 855.774250][T17694] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 855.780160][T17694] ? do_vfs_ioctl+0x226/0x13e0 [ 855.784925][T17694] blk_trace_ioctl+0x245/0x320 [ 855.789711][T17694] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 855.795008][T17694] ? find_held_lock+0x2b/0x80 [ 855.799700][T17694] ? hook_file_ioctl_common+0x140/0x440 [ 855.805253][T17694] blkdev_ioctl+0x17c/0x6f0 [ 855.809792][T17694] ? __pfx_blkdev_ioctl+0x10/0x10 [ 855.814834][T17694] ? __pfx_blkdev_ioctl+0x10/0x10 [ 855.819871][T17694] __x64_sys_ioctl+0x18e/0x210 [ 855.824639][T17694] do_syscall_64+0x121/0x770 [ 855.829240][T17694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.835132][T17694] RIP: 0033:0x7f10af39e199 [ 855.839544][T17694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.859159][T17694] RSP: 002b:00007f10b02dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.867575][T17694] RAX: ffffffffffffffda RBX: 00007f10af626270 RCX: 00007f10af39e199 [ 855.875548][T17694] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000007 [ 855.883527][T17694] RBP: 00007f10af4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 855.891507][T17694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.899475][T17694] R13: 00007f10af626308 R14: 00007f10af626270 R15: 00007fff6dee8a38 [ 855.907470][T17694] [ 855.910532][T17694] Kernel Offset: disabled [ 855.914861][T17694] Rebooting in 86400 seconds..